last executing test programs: 49.383483189s ago: executing program 3 (id=440): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x600) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000040)={0x3, 0x3, 0x4, 0x1}) write$uinput_user_dev(r1, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc, 0x4}, 0x0, [0x9faf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x4, 0xfeffffff, 0x0, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x4, 0x0, 0x6, 0x8, 0x7fff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x3, 0x0, 0x401, 0x0, 0xffffffff, 0xdc, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0xffffffff, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1000, 0x0, 0xf, 0xff, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000100, 0x1, 0x0, 0x0, 0x66bd, 0x0, 0xfefffffd, 0x1, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x9bd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2], [0x8, 0xa, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x9, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0xffff, 0x0, 0x0, 0xffffff7f, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0xf, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1000000, 0x8000000, 0x403, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x7, 0xca, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x8d, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x1fd, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x7fd, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x401, 0x100000, 0x4, 0x10000, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ffffc, 0xb66, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x0, 0x1, 0x1}}) r8 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r9 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r8) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000940)={r9, 0x8d}, 0x0, &(0x7f0000000b80)="cb44032c2a3a518de9000000c11a536275a146d65e2988ef1a4992f9a2675b2853d82c107d0fd00990b531004a27f0395fdb7d3b545b60ff5be75bcb1d85878c1cbdb120730ded7b4d10b0612763631dd3db62ddf7f799a4257d4bf67e86244beee88b1e3e5bac3ad4dea44fc08db9f741b76996bf785368bc3b20816471f5254e6e9e7a9ccd90d32ebcf5ea2c", 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r7, 0x0, 0x0, 0x0, 0x4, 0x8, @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x1, 0xfffffffe, 0x1}}) 47.846381418s ago: executing program 3 (id=444): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000740)={[{@noprefix}, {@cpuset_v2_mode}, {@cpuset_v2_mode}], [{@smackfsfloor={'smackfsfloor', 0x3d, '*\''}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@obj_role}, {@subj_user={'subj_user', 0x3d, '//{.'}}, {@euid_gt}]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="010000000000000000083900000008000300eda66811e95535dbb8419fcdc661d90105daae206db319f78dc7e703c58dea7370db2ee7eb6365476a39b9d1279560f4bfd33144607745cd13fc230b0956ec3494c2", @ANYRES32=r1, @ANYBLOB="30005a802c0001801400050001000f007f000400880005000f00d00014000300000017030200030009000100080000"], 0x4c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ef) setns(0xc9, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, 0x0, 0x0) connect$bt_l2cap(r5, &(0x7f0000000400)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x14}, 0x1, 0x2}, 0xe) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000e0001006172705f636163686500000000000000000000e6ffffffffffffff00"], 0x24}}, 0x0) 44.096925027s ago: executing program 3 (id=449): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000829bd37caee30804ec6"], 0x20}, 0x1, 0x0, 0x0, 0x4004800}, 0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/bridge/bridge-nf-call-iptables\x00', 0x1, 0x0) write$cgroup_int(r4, &(0x7f0000000400)=0x4, 0x12) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="63000000020601030000000000000000050000002400078008000840000000521800018014000240fe8000000000000000d23cb8ae6718605e40020073797a3100000000050004000000000005000500e86173683a6e54742c69666163"], 0x70}}, 0x4080) write(0xffffffffffffffff, &(0x7f0000001800)="2d2519d010bae03d46fdca85c1a1862b9b169eceaaca9ccf1cb8d871123f1c9c5e4ee16a1d71f8876bd9dd39cbd2831a51bf6016afee9c90f6acc9f9da99563bcef07ea1a92a75", 0x47) r6 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r6, &(0x7f00000091c0)=""/16384, 0x4000) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x8}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8, 0x40]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, {0xa, 0x4e21, 0x3, @empty, 0x99}, 0x1, {[0x7, 0xffffffff, 0x4, 0x9, 0x4, 0x203, 0x33ba8, 0x6]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0xfffffffc, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0xffff, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000bc0)={0x0, &(0x7f0000000780)=[@nested_load_syzos={0x136, 0x120, {0x3, 0x4, [@nested_amd_invlpga={0x17d, 0x20, {0x6000, 0x72b6}}, @wrmsr={0x65, 0x20, {0x31a, 0x8000}}, @nested_vmresume={0x130, 0x18, 0x3}, @in_dx={0x69, 0x20, {0x7cfd, 0x4}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmsave={0x183, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}, @cpuid={0x64, 0x18, {0xfffffffe, 0x1}}]}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0xb1, 0x3, 0x5dcc, 0x2}}, @wr_drn={0x68, 0x20, {0x4, 0x5}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_amd_invlpga={0x17d, 0x20, {0x6000, 0x6dd5}}, @code={0xa, 0x51, {"48b806000000000000000f23c80f21f8350c0090000f23f8f2a60f0137640f01c466660fc773000f00d1f3440fe660c366b886000f00d867430f07c422a14528"}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @code={0xa, 0x40, {"c4e1f9f7c6c4e1c1e03e0f20d835080000000f22d866ba6100b0e6ee410fc73bdb077500460f923f430f65d9460f30"}}, @code={0xa, 0x66, {"3e0f07c7442400bdd40000c74424029012c9b1c7442406000000000f011c24b805000000b9df0000000f01c1430f01cb66bad00466ed66baf80cb86fd48286ef66bafc0cec460f01c4c4a211cf31d916c481915dc0"}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x2, 0xfffffffffffffffb, 0x1}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x2c, 0x100000001, 0x200, 0xffffffffffff2d0b}}, @nested_load_code={0x12e, 0x7d, {0x0, "c7442400f5000000c744240235000000ff2c2466430f1bf76436660f73db0066430f38813bb8010000000f01c1c744240008000000c744240296000000c7442406000000000f011c24c4a219b95a0065660f3882947e0500000047dbe30f38f9950c000000"}}, @wrmsr={0x65, 0x20, {0xaf3, 0x8}}, @cpuid={0x64, 0x18, {0x1, 0x200000}}], 0x3f4}) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000c00)={{0xdddd1000, 0x50000, 0xa164322afdb1c09e, 0x6, 0xb, 0x4, 0x6, 0x40, 0x2, 0x9, 0xe, 0x4}, {0xd000, 0x200000, 0xa, 0x41, 0x6, 0x5, 0x4, 0xfe, 0x3, 0x6, 0x3, 0x2}, {0xeeeecff9, 0xffc, 0x0, 0xfe, 0x8e, 0xb3, 0xe4, 0xc, 0x1, 0x8, 0x8, 0x1}, {0x1ff8, 0x5000, 0xd, 0x1, 0x7, 0x8, 0x8, 0x4, 0x65, 0x2, 0x1, 0x8}, {0x30000, 0x58000, 0x3, 0x9, 0xff, 0x6, 0x80, 0x8, 0x8, 0x7, 0x7, 0x1}, {0xffff1000, 0x2000, 0x3, 0x3, 0x7, 0x10, 0x8, 0x1, 0x7, 0x9, 0xb, 0x9}, {0xeeeed000, 0x2ffc, 0xf, 0x8, 0x4, 0x7, 0x8, 0x8, 0xca, 0x5, 0x3, 0x9}, {0xdddd1000, 0xeeeea004, 0x4, 0x8, 0xf9, 0x7b, 0x21, 0xd1, 0x2, 0x6, 0x6, 0x2}, {0x1000, 0x8f34}, {0xa000, 0xd6bd}, 0x10000, 0x0, 0x40000, 0x0, 0xa, 0x1400, 0xffffffff, [0xb, 0xa, 0x8, 0xfffffffffffffff7]}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r6, 0x8008f512, &(0x7f0000000000)) 42.830713419s ago: executing program 3 (id=452): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1c0) mount(0x0, 0x0, &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x5, 0x47, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040cd0607010001010203010902350001010080fa0904000005ff00000007058102400001070501024000010705830240000107050302"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x2, 0x0) 38.30879421s ago: executing program 3 (id=458): r0 = syz_open_dev$usbfs(0x0, 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000440)={0x2, 0x1, "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"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000000)={0x0, 0x54485746, 0x0, @discrete={0x8d, 0x26}}) 37.072813066s ago: executing program 3 (id=460): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x1, 0x6, 0x4, 0x10000, "5debca001a5fbf0900000000000000ff", 0x2, 0x3, 0x1c, 0x0, 0x0, 0x7f}) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/144, 0x90}], 0x1) write$proc_mixer(r2, &(0x7f0000000100)=ANY=[], 0xb0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/oss_mixer\x00', 0x1a1100, 0x0) dup3(r3, r2, 0x0) 21.680031145s ago: executing program 32 (id=460): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x1, 0x6, 0x4, 0x10000, "5debca001a5fbf0900000000000000ff", 0x2, 0x3, 0x1c, 0x0, 0x0, 0x7f}) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/144, 0x90}], 0x1) write$proc_mixer(r2, &(0x7f0000000100)=ANY=[], 0xb0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/oss_mixer\x00', 0x1a1100, 0x0) dup3(r3, r2, 0x0) 15.211857155s ago: executing program 4 (id=494): syz_ublk_setup_io_uring(0x33ea, &(0x7f0000000080)={0x0, 0xf812, 0x801, 0x1, 0x3ba}, &(0x7f0000000340), &(0x7f00000001c0), &(0x7f0000000180)) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) mmap$IORING_OFF_CQ_RING(0x0, 0x3, 0x0, 0x4000010, 0xffffffffffffffff, 0x8000000) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x8, @empty, 0x1}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r6, 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)) read$FUSE(r7, &(0x7f00000034c0)={0x2020}, 0x2020) 14.666776478s ago: executing program 2 (id=495): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r3, 0xaea2, 0xffffffffffffffed) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF(r5, 0x5457, &(0x7f0000000000)={0x4, 0x10000629, 0xffffffff, 0x0, 0x9, "008405008a000000000000008000"}) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000040)={0x0, 0x81, 0x5, 0x7, 0xc6, "d3fd35c3120dfc3efd4d659a95facbb6538e65", 0x9f2a, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000005780)={0x0, 0x0, &(0x7f0000005740)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000070000040900010073797a300000000014000000020a010100000000000000000000000320000000070a01010000000000000000070000090900010073797a300000000024000000160a01020000000000000000020000080800074000000002080007400000000110020000160a01040000000000000000070000020900020073797a32000000000800074000000001480103800800024000000008080002400002000908000240000000080800024000000a1108000140000000000800014000000000900003801400010069703665727370616e30000000000000140001007663616e3000000000000000000000001400010076657468315f746f5f7465616d000000140001006272696467653000000000000000000014000100766972745f7769666930000000007a412b200100766c616e3000000000000000000000001400010064766d7270310000000000000000000008000240000000047c000380140001006d6163766c616e3100000000000000001400010076657468305f746f5f626f6e64000000140001007465616d5f736c6176655f30000000001400010076657404315f766972745f77696669001400010076657468305f746f5f7465616d0000001400010069703665727370616e300000000000000900010073797a30"], 0x2b0}}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb0\x00', 0x1ff) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000001b40)=@ethtool_perm_addr={0x20, 0x6, "24334f4d7abf"}}) 11.050875252s ago: executing program 4 (id=497): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfd, 0xf, 0xbe}}}}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/current_tracer\x00', 0x1, 0x0) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x0, 0x21, 0x4d, {0x28, 0x1, "f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)={0x40, 0x31, 0x53, {0x53, 0x23, "a94c3f2ece22585b399b27c3a1e0d8313d678c855f42d33abe9b135e9dd0c1289e0a3ec128931d0598838dd78d6438bb3a27d8441a6fedbcef722fe53e10e4d0508d7209d4cbb35b80ec47376c28c95147"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, &(0x7f0000000180)={0x0, 0xf, 0x1d, {0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x10000, 0xf00f, 0x2, [0xc0, 0xff, 0xf]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2c, 0x60, 0x8, 0xc, "2b84173c", "8e34b7b5"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe0, 0x64, 0x1, 0x2, 0x3, 0x7, 0xa}}}, &(0x7f0000000680)={0x84, &(0x7f0000000280)={0x0, 0x5, 0x3, "412f91"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xfe}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xd6}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000740)={0x20, 0x0, 0x8, {0x400, 0x10, [0xf]}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x6f}, &(0x7f0000000440)={0x40, 0xb, 0x2, "f9ff"}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0x8001}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000500)={0x40, 0x17, 0x6, @local}, &(0x7f0000000540)={0x40, 0x19, 0x2, "30be"}, &(0x7f0000000580)={0x40, 0x1a, 0x2}, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000000600)={0x40, 0x1e, 0x1, 0xf5}, &(0x7f0000000640)={0x40, 0x21, 0x1, 0xf}}) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000000)={0x4, &(0x7f0000000300)=[{0x9, '\x00', @data=0xdfc1, 0xf}, {0x37, '\x00', @st={0x4, [{0x1, @svalue=0x1}, {0x3, @uvalue=0x100}, {0x3, @uvalue=0x2}, {0x1, @uvalue=0xa21}]}, 0x5}, {0x2e, '\x00', @data=0xac, 0xfff}, {0x25, '\x00', @st={0x4, [{0x1, @svalue=0x1}, {0x3, @svalue=0x8}, {0x2, @svalue=0x7}, {0x0, @svalue=0xffffffffffffff01}]}, 0x80000000}]}) 10.639923607s ago: executing program 2 (id=500): syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x16840) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001f80)=@newtfilter={0x58, 0x2c, 0x609, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1, 0x6}, {0x300, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x3, 0x8}, {0xc22, 0x7, 0xfffff800, 0xfffffff3}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x4000001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a300000000008000240"], 0xcd0}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)}, 0x40085) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7fffffff, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="3000000000000000290000000400000084023004000000", @ANYRES8], 0x30}, 0x40) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x804, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000000040)) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x2a) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x10000}) r2 = syz_pidfd_open(0x0, 0x0) setns(r2, 0x24020000) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r3, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x18, 0x3f, 0x1, 0x70bd2b, 0x4, {0x3}, [@nested={0x4, 0x122}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) 10.474322762s ago: executing program 1 (id=501): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$uac1(r0, 0x0, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ftruncate(r1, 0xff) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000040)) io_uring_setup(0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) keyctl$clear(0x11, 0xfffffffffffffffd) listen(0xffffffffffffffff, 0x58b) 8.250973562s ago: executing program 0 (id=503): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x11d}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000180)="228b0a365203", 0x6}, {&(0x7f0000000200)="175c15194fad5248c52ac1fc08d8399adf0d297ac3d2a1aa16f11eb8b8d820024c580e0de604fdbaed2ef90756c8be23ba639df0a47831c2d918315bfcf25597e99e8af1058c3fc9a3ff26a444a61320cc32641c81b3835e48fa", 0x5a}, {&(0x7f0000000540)="7f96b1c0057470ba3ad9c683aafbd45ff640c70156ed616124c8d5f2ae803a3fb2703e02865d049bec0875e912a8e3c258991aeb6ae7f2ac84a402a80df00cf64b156defd33afafab5c8a40dd0f79d03bf481fd2bf7c4c084227a9b3951d6e23156c58e8ff86f5a6196efc585d57b8fa2abcd7f2952f7dcf21546acf8e7aafc916", 0x81}], 0x3) write(r1, &(0x7f0000001e00)="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", 0x441) 7.767187774s ago: executing program 2 (id=504): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000829bd37caee30804ec6"], 0x20}, 0x1, 0x0, 0x0, 0x4004800}, 0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/bridge/bridge-nf-call-iptables\x00', 0x1, 0x0) write$cgroup_int(r4, &(0x7f0000000400)=0x4, 0x12) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="63000000020601030000000000000000050000002400078008000840000000521800018014000240fe8000000000000000d23cb8ae6718605e40020073797a3100000000050004000000000005000500e86173683a6e54742c69666163650000"], 0x70}}, 0x4080) write(0xffffffffffffffff, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r6, &(0x7f00000091c0)=""/16384, 0x4000) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x8}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8, 0x40]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, {0xa, 0x4e21, 0x3, @empty, 0x99}, 0x1, {[0x7, 0xffffffff, 0x4, 0x9, 0x4, 0x203, 0x33ba8, 0x6]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0xfffffffc, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0xffff, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000bc0)={0x0, &(0x7f0000000780)=[@nested_load_syzos={0x136, 0x120, {0x3, 0x4, [@nested_amd_invlpga={0x17d, 0x20, {0x6000, 0x72b6}}, @wrmsr={0x65, 0x20, {0x31a, 0x8000}}, @nested_vmresume={0x130, 0x18, 0x3}, @in_dx={0x69, 0x20, {0x7cfd, 0x4}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmsave={0x183, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}, @cpuid={0x64, 0x18, {0xfffffffe, 0x1}}]}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0xb1, 0x3, 0x5dcc, 0x2}}, @wr_drn={0x68, 0x20, {0x4, 0x5}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_amd_invlpga={0x17d, 0x20, {0x6000, 0x6dd5}}, @code={0xa, 0x51, {"48b806000000000000000f23c80f21f8350c0090000f23f8f2a60f0137640f01c466660fc773000f00d1f3440fe660c366b886000f00d867430f07c422a14528"}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @code={0xa, 0x40, {"c4e1f9f7c6c4e1c1e03e0f20d835080000000f22d866ba6100b0e6ee410fc73bdb077500460f923f430f65d9460f30"}}, @code={0xa, 0x66, {"3e0f07c7442400bdd40000c74424029012c9b1c7442406000000000f011c24b805000000b9df0000000f01c1430f01cb66bad00466ed66baf80cb86fd48286ef66bafc0cec460f01c4c4a211cf31d916c481915dc0"}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x2, 0xfffffffffffffffb, 0x1}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x2c, 0x100000001, 0x200, 0xffffffffffff2d0b}}, @nested_load_code={0x12e, 0x7d, {0x0, "c7442400f5000000c744240235000000ff2c2466430f1bf76436660f73db0066430f38813bb8010000000f01c1c744240008000000c744240296000000c7442406000000000f011c24c4a219b95a0065660f3882947e0500000047dbe30f38f9950c000000"}}, @wrmsr={0x65, 0x20, {0xaf3, 0x8}}, @cpuid={0x64, 0x18, {0x1, 0x200000}}], 0x3f4}) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000c00)={{0xdddd1000, 0x50000, 0xa164322afdb1c09e, 0x6, 0xb, 0x4, 0x6, 0x40, 0x2, 0x9, 0xe, 0x4}, {0xd000, 0x200000, 0xa, 0x41, 0x6, 0x5, 0x4, 0xfe, 0x3, 0x6, 0x3, 0x2}, {0xeeeecff9, 0xffc, 0x0, 0xfe, 0x8e, 0xb3, 0xe4, 0xc, 0x1, 0x8, 0x8, 0x1}, {0x1ff8, 0x5000, 0xd, 0x1, 0x7, 0x8, 0x8, 0x4, 0x65, 0x2, 0x1, 0x8}, {0x30000, 0x58000, 0x3, 0x9, 0xff, 0x6, 0x80, 0x8, 0x8, 0x7, 0x7, 0x1}, {0xffff1000, 0x2000, 0x3, 0x3, 0x7, 0x10, 0x8, 0x1, 0x7, 0x9, 0xb, 0x9}, {0xeeeed000, 0x2ffc, 0xf, 0x8, 0x4, 0x7, 0x8, 0x8, 0xca, 0x5, 0x3, 0x9}, {0xdddd1000, 0xeeeea004, 0x4, 0x8, 0xf9, 0x7b, 0x21, 0xd1, 0x2, 0x6, 0x6, 0x2}, {0x1000, 0x8f34}, {0xa000, 0xd6bd}, 0x10000, 0x0, 0x40000, 0x0, 0xa, 0x1400, 0xffffffff, [0xb, 0xa, 0x8, 0xfffffffffffffff7]}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r6, 0x8008f512, &(0x7f0000000000)) 7.120077192s ago: executing program 0 (id=505): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1c0) mount(0x0, &(0x7f0000002000)='./dev\x00', 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x47, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040cd0607010001010203010902350001010080fa0904000005ff00000007058102400001070501024000010705830240000107050302"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x2, 0x0) 6.903791164s ago: executing program 4 (id=506): sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000000)={0x0, 0x8b}, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$pppl2tp(r0, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x4, 0x0, {0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}}}, 0x3a) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009"], 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448e1, &(0x7f0000000c80)) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000000c0)={0x10001, 0x8, 0x2, 0x0, 0x3}) 6.72537829s ago: executing program 2 (id=507): syz_ublk_setup_io_uring(0x33ea, &(0x7f0000000080)={0x0, 0xf812, 0x801, 0x1, 0x3ba}, &(0x7f0000000340), &(0x7f00000001c0), &(0x7f0000000180)) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) mmap$IORING_OFF_CQ_RING(0x0, 0x3, 0x0, 0x4000010, 0xffffffffffffffff, 0x8000000) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x8, @empty, 0x1}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r6, 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)) read$FUSE(r7, &(0x7f00000034c0)={0x2020}, 0x2020) 6.33189431s ago: executing program 1 (id=508): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000006000000040000000100009302000000010000002430000001000100005f"], 0x0, 0x36, 0x0, 0x1, 0x1}, 0x28) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) readv(r3, &(0x7f0000000040)=[{&(0x7f0000000100)=""/144, 0x90}], 0x1) write$proc_mixer(r3, &(0x7f0000000100)=ANY=[], 0xb0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/oss_mixer\x00', 0x1a1100, 0x0) sendmsg(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f00000018c0)="90cb8c693dc85bf6422208a587fceb969024deee39f9828d22f6d688724429fd43b6c4561039fc8f5bb75fe94d4969e0ee9fe0e2334ae0fb2ebcf3408611ee16022b24ec96d71c67a3154e5d188aee290fe4558ea1478ca5fb7c171a046fdd82684dc0dd5cc25412c568d507d26672607edc82b946219fdee1b10490086e5d650138984fc271417264fcc865d7667b1ce555dc2117c8559f36f77735c8bb88c0f8dd233f8bab999b8d5a5bd9d9d3eecd42ad06318d04bb19c075e5ad6e9a9a139bc71387", 0xc4}], 0x1}, 0x4011) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000180)=0x7) 4.752263941s ago: executing program 0 (id=509): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0x4) listen(r0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002100), 0x80) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000280)="f5", 0x1) setsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r5, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendto$packet(r6, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700", 0x28, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r7, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0x405, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'lo\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040815}, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000100)={0x0, 0x0, 0xfb}) socket$rxrpc(0x21, 0x2, 0x2) (async) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) (async) listen(r0, 0x4) (async) listen(r0, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002100), 0x80) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000280)="f5", 0x1) (async) setsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) (async) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r5, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) (async) sendto$packet(r6, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700", 0x28, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r7, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0x405, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'lo\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040815}, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000100)={0x0, 0x0, 0xfb}) (async) 4.404508164s ago: executing program 2 (id=510): setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x52, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r2, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000180)=0x2100e6d4, 0x4) 3.469920293s ago: executing program 4 (id=511): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="050000000500000002000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 3.298279249s ago: executing program 0 (id=512): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/3\x00') r3 = syz_io_uring_setup(0xd3a, &(0x7f0000000d40)={0x0, 0x8000002, 0x3a10, 0x1, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000c40)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000006c0)=@IORING_OP_MSG_RING={0x28, 0x16, 0x0, r3, 0x0, 0x0, 0x8, 0x2, 0x1, {0x0, 0x0, r3}}) syz_ublk_add_dev(0xffffffffffffffff, r4, r5, r6, &(0x7f00000002c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xad0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x8}}}, &(0x7f0000000340)) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000380), 0x200000, &(0x7f0000000b40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}, {@directio}]}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000013000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="000000000000000034001a8006000000020000002800058024000180080001000100000008000200000000000800030000000100080004"], 0x54}}, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb0100ea000000000000004c0000004c000000040000000100000003000093090000000a00000006000000010001000d00000008000000950000000c00000001000000000000000f0000000000001103000000040000000c0000000000000c03000000002e3000"], &(0x7f0000000740)=""/193, 0x68, 0xc1, 0x1, 0x3}, 0x28) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x2c, 0x0, 0x1, 0x270bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x167}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x40) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000c00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x58, 0x0, 0x2, 0x70bd29, 0x0, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x400}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xf0}]}, 0x58}, 0x1, 0x0, 0x0, 0xc800}, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x164, &(0x7f0000000e80)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x15, 0x4, 0x0, 0x0, 0x156, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x34, 0x1, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x6}, {@loopback, 0xfffffffe}, {@multicast1, 0x1}, {@multicast2, 0x6}, {@loopback, 0x5}]}, @ssrr={0x89, 0x7, 0x77, [@local]}, @generic={0x7, 0x2}]}}, {{0x4, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}, {"93718fecff46bfc8dfa30401035a75d66496dc1e6bfd5ab6c4798774058ceb5579648cdfb104aadd2996b7c6524d92a46dd4091741629afaf1fe789dd2e9da1fd85990f21f5d57459c95f135ecf0159725060d804238d14c04991d48db9c2cb26dbaeab14ffa445cd5d00adc6fb4073a2814617145d78284286a786a74f6ec0c338192412f50cb611a0e43f97ae628457754ffd7541b40236d843d84a0d76d8275b16093f49f59e024641bfb9b8013efd3acbea71b452bc82d8e7d647d3bc12cbcf69f80f7c172e1887f232c298b7c28a9228e63f913442e38bea971848ffd00"/238}}}}}}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r12}, 0xc) r13 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r13, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r13, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000440)={@link_local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0xb0, 0x65, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "8eafb0edede769d7d4ba2f6d2f210dbbae7a9a21ab976c8afa230c4af18c580d", "5e94b80c846678d4967651fde8616d4b35e84458e1c6bed01e050e96829c62a56a65d5b8883f4f0c72df8491eb1220e9", "b998560a96b4a814ecbf827d01a83321e9c3eb4335117e5ed65b08e2", {"00e3209ae47c7c4bec35495b0588ee23", "31274cc408e41bd0ef65806c1e41450b"}}}}}}}, 0x0) r14 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000900)={0xffffffffffffffff}, 0x4) r15 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x22, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x316}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x1}, @generic={0x0, 0x4, 0xc, 0x2b2}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='syzkaller\x00', 0x800, 0x7f, &(0x7f0000000640)=""/127, 0x40f00, 0x43, '\x00', r9, 0x0, r10, 0x8, &(0x7f0000000880)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x3, 0x2, 0x2, 0x3}, 0x10, 0x288de, r14, 0x3, &(0x7f0000000940)=[0xffffffffffffffff], &(0x7f0000000980)=[{0x2, 0x5, 0xa, 0x1}, {0x5, 0x5, 0x9, 0xa}, {0x3, 0x5, 0x9, 0x6}], 0x10, 0x8}, 0x94) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="312000009040000014002b8008000100", @ANYRES32=r15, @ANYBLOB="080003000008001b0000000000000000d31b3d1af082cfa047fa03c57cf723a8c77fec07ca4afc6d4b7a06252388e2666615e4deb04e05eb2b5f67774cb46d4727c74cd6c779bb19"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000100)) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r17, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000580)=@ethtool_rxnfc={0x2a, 0xe, 0xffffffffffffffff, {0xd, @ah_ip6_spec={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x16}, 0x4a, 0x2e}, {0x0, @broadcast, 0xa8, 0x80, [0x7ff, 0xf9]}, @hdata="141e969e826763c9964ca8ec0f7aded840a746acb01443985788c5ebac1abc7cfcbfe6a7baed4e010484544789e025953714a72e", {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, 0x4, 0x0, [0x3, 0x400]}, 0x0, 0x5}}}) 3.118000634s ago: executing program 4 (id=513): syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x16840) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001f80)=@newtfilter={0x58, 0x2c, 0x609, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1, 0x6}, {0x300, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x3, 0x8}, {0xc22, 0x7, 0xfffff800, 0xfffffff3}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x4000001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a300000000008000240"], 0xcd0}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)}, 0x40085) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7fffffff, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="3000000000000000290000000400000084023004000000", @ANYRES8], 0x30}, 0x40) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x804, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000000040)) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x2a) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x10000}) r2 = syz_pidfd_open(0x0, 0x0) setns(r2, 0x24020000) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r3, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x18, 0x3f, 0x1, 0x70bd2b, 0x4, {0x3}, [@nested={0x4, 0x122}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) 2.787650314s ago: executing program 1 (id=514): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x11d}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000180)="228b0a365203", 0x6}, {&(0x7f0000000200)="175c15194fad5248c52ac1fc08d8399adf0d297ac3d2a1aa16f11eb8b8d820024c580e0de604fdbaed2ef90756c8be23ba639df0a47831c2d918315bfcf25597e99e8af1058c3fc9a3ff26a444a61320cc32641c81b3835e48fa", 0x5a}, {&(0x7f0000000540)="7f96b1c0057470ba3ad9c683aafbd45ff640c70156ed616124c8d5f2ae803a3fb2703e02865d049bec0875e912a8e3c258991aeb6ae7f2ac84a402a80df00cf64b156defd33afafab5c8a40dd0f79d03bf481fd2bf7c4c084227a9b3951d6e23156c58e8ff86f5a6196efc585d57b8fa2abcd7f2952f7dcf21546acf8e7aafc916", 0x81}], 0x3) write(r1, &(0x7f0000001e00)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108076fdffecb7457f5b6b01835a3c79b873f6ebbcb5ee659861a7b4cce43711bbd6b13c941fbb38ef7e1fe0c70fa4aa49b98b43615605d51cc4d742b364a4e7a2f3dee73b86af3fa4ca8f616eaaedcf155820e1767f7d66ecd818ece03f32c3367bbd9ce6656123f394b7f26f1e0420a9ac4cb25638c75fc3c487ba76fd64c26da6d7ce7f1ee8f49d6e9cc95f5c94bf93183ebf8e6be081e0b9f34bd6c2fe5f895dc1cc01e3018cef11ad9e2e1baf35254258efbaf3e8898f561bdb5c4c49f9d3146503df48e194ea3d06396e970ea9fc7c47eb9988477ed1a7e8641dfeea7b57b5a9967c58762574262efde8795f20f2d45e964ede39c7a6502c03f863e6a21a33ba324e6474d4f0495054745f3a80e6554d4d1fd5ddbca11c5e3e6f9087ca1981a14baa3a2956faa8f6b1652e8cf30d7c37a060bc6c836862451c4e76fc9cb221db8d4b449c27aa44564cb33ef144ed0c51bdd66675302692d979297f30e2d9523f85afbbf54c5b5e2261f8b792f83b33cca78c44a5c4e6ff96273979acbb447d49c0502cc9f8991e9bc784a2e978912d8102d867b631d54269936f54bb20ee57e2b4ba4b6c44e767aef24f6c3a8bb5a3b2084d793082e4c5e517694b220e35ac140913e0e55257af03c4dcf376f24773642c14279e2b55906b0b8a4a34fa4d73f37a5feeca1cf93395b998ddcc557d0e2ae112cf1566f7097e7acb6c0bdf9350781341bb83936b355779417839a70c3cbe13e9561b0820df44dbd2a24bd3d6d8b0d9e83983cb7ad8f147f980b06be823e93a93395f5e60b7f31f5aeadc81f02e177446888c15d2845fd675b98360ac2f584a8ab618789499babac77e3311c563fa519a8dbbe49b91a46cc355f8e956c04dfc3b8e218dbe0302ff463fc94eceec7050b7477d9542f6d05d36ee13e664dfc0bb165601e6bd70615f3c299a9c7c7004cc9987a76afc54b3c83e5d23c0790f39593437b2592cf0548f21823f61076340a87dae9d3427acc844357d6bdbba726e7a41eb30a916df698ab241b5e4991f41d34afd2c2b99f259ca582f09c8027c3381e64070aad6ec7f7c7c973d55a33eca3cc4245bf488a497ac966aa13111ec3033172a3512e97700b3b58b621ccb71309d6ccafb05352718a362d14c38501ec45a522fb86563533d1f46e3fc182181ca5583096ec3849fb5db88ba0bcf565ec4665280402275fe98483a6c6b9da4665196aeff9b18c1e4fe3f19f1ff296702a10a27684a6cf0f9c003fd4b20127b080bf82664e51c36a4c4681dd332c6cb068cd11d13dae5f798032ed4237ad618305d0bffb28dac3b13bd148e2d7e8798ce2deb330ec7cdfdc5cddd477f3ffd22b884e91529740da75f625d46b48a6aa4c40adced23638423cdc401bdd228b", 0x441) 2.506900031s ago: executing program 0 (id=515): syz_extract_tcp_res$synack(&(0x7f0000000280)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000400)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x112, &(0x7f0000000880)=ANY=[@ANYBLOB="0180c200000000000000000008004e4501040065000004069078ffffffffe0001813cde4b75a289632644740470002830f5600000000ac1414aa0000000007114a23bdaf7570785cad63", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="a01000049078000203030f01220454d0fe06e2d4c3d90102047c0f013f9d9c78bccd6435270f46fed5611908840c399caa6a7e739754bfd4eab171a9304bd642fad9152231064c9239e170594ec85ef1b784625fe0b51f594de8048d5893477962371b862cf3087e1b479883d00a3a28e450e62e4dddc4363b1d30f03b034c6392377fd2cc15e60ae041cd658ac22d4546de13c805fb7a9a1daf2e17244b1908995bcb37c609df65b3bdbcf62416e5afeebb30b950647ee8787313bb21ee81cd"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000340)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x7a, 0x889, {"18000000006bbebaf500"}, 0x1119dff, 0xffffffff80000002, 0xcd41}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000c40)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r4, 0x2}}, 0x18) listen(r2, 0x5) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00000004000000040000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000001001400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r5, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r2}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000e00)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r7 = userfaultfd(0x80001) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r9 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r9, 0x5522) ioctl$USBDEVFS_ALLOW_SUSPEND(r8, 0x5522) ioctl$USBDEVFS_FORBID_SUSPEND(r9, 0x5521) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x358}) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000240)={0x1f, 0x6, 0x4, 0x8, 0x65, 0x1, &(0x7f0000000180)="6bd53fd93522ea775521dc7e0ff2e6151798606931ef8255cbe5bf7892561e25be90bf413582cad83a624043359f97331ef2f5b7aba8db9121029c2f67d254bbb9aaa33329768dd71c145a3c1a9834e9f197d165018e2189dab8e50de7cf106735c2e0e3cc"}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 2.505325571s ago: executing program 1 (id=516): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000829bd37caee30804ec6"], 0x20}, 0x1, 0x0, 0x0, 0x4004800}, 0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/bridge/bridge-nf-call-iptables\x00', 0x1, 0x0) write$cgroup_int(r4, &(0x7f0000000400)=0x4, 0x12) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="63000000020601030000000000000000050000002400078008000840000000521800018014000240fe8000000000000000d23cb8ae6718605e40020073797a3100000000050004000000000005000500e86173683a6e54742c69666163650000"], 0x70}}, 0x4080) write(0xffffffffffffffff, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r6, &(0x7f00000091c0)=""/16384, 0x4000) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x8}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8, 0x40]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, {0xa, 0x4e21, 0x3, @empty, 0x99}, 0x1, {[0x7, 0xffffffff, 0x4, 0x9, 0x4, 0x203, 0x33ba8, 0x6]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0xfffffffc, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0xffff, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000bc0)={0x0, &(0x7f0000000780)=[@nested_load_syzos={0x136, 0x120, {0x3, 0x4, [@nested_amd_invlpga={0x17d, 0x20, {0x6000, 0x72b6}}, @wrmsr={0x65, 0x20, {0x31a, 0x8000}}, @nested_vmresume={0x130, 0x18, 0x3}, @in_dx={0x69, 0x20, {0x7cfd, 0x4}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmsave={0x183, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}, @cpuid={0x64, 0x18, {0xfffffffe, 0x1}}]}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0xb1, 0x3, 0x5dcc, 0x2}}, @wr_drn={0x68, 0x20, {0x4, 0x5}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_amd_invlpga={0x17d, 0x20, {0x6000, 0x6dd5}}, @code={0xa, 0x51, {"48b806000000000000000f23c80f21f8350c0090000f23f8f2a60f0137640f01c466660fc773000f00d1f3440fe660c366b886000f00d867430f07c422a14528"}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @code={0xa, 0x40, {"c4e1f9f7c6c4e1c1e03e0f20d835080000000f22d866ba6100b0e6ee410fc73bdb077500460f923f430f65d9460f30"}}, @code={0xa, 0x66, {"3e0f07c7442400bdd40000c74424029012c9b1c7442406000000000f011c24b805000000b9df0000000f01c1430f01cb66bad00466ed66baf80cb86fd48286ef66bafc0cec460f01c4c4a211cf31d916c481915dc0"}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x2, 0xfffffffffffffffb, 0x1}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x2c, 0x100000001, 0x200, 0xffffffffffff2d0b}}, @nested_load_code={0x12e, 0x7d, {0x0, "c7442400f5000000c744240235000000ff2c2466430f1bf76436660f73db0066430f38813bb8010000000f01c1c744240008000000c744240296000000c7442406000000000f011c24c4a219b95a0065660f3882947e0500000047dbe30f38f9950c000000"}}, @wrmsr={0x65, 0x20, {0xaf3, 0x8}}, @cpuid={0x64, 0x18, {0x1, 0x200000}}], 0x3f4}) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000c00)={{0xdddd1000, 0x50000, 0xa164322afdb1c09e, 0x6, 0xb, 0x4, 0x6, 0x40, 0x2, 0x9, 0xe, 0x4}, {0xd000, 0x200000, 0xa, 0x41, 0x6, 0x5, 0x4, 0xfe, 0x3, 0x6, 0x3, 0x2}, {0xeeeecff9, 0xffc, 0x0, 0xfe, 0x8e, 0xb3, 0xe4, 0xc, 0x1, 0x8, 0x8, 0x1}, {0x1ff8, 0x5000, 0xd, 0x1, 0x7, 0x8, 0x8, 0x4, 0x65, 0x2, 0x1, 0x8}, {0x30000, 0x58000, 0x3, 0x9, 0xff, 0x6, 0x80, 0x8, 0x8, 0x7, 0x7, 0x1}, {0xffff1000, 0x2000, 0x3, 0x3, 0x7, 0x10, 0x8, 0x1, 0x7, 0x9, 0xb, 0x9}, {0xeeeed000, 0x2ffc, 0xf, 0x8, 0x4, 0x7, 0x8, 0x8, 0xca, 0x5, 0x3, 0x9}, {0xdddd1000, 0xeeeea004, 0x4, 0x8, 0xf9, 0x7b, 0x21, 0xd1, 0x2, 0x6, 0x6, 0x2}, {0x1000, 0x8f34}, {0xa000, 0xd6bd}, 0x10000, 0x0, 0x40000, 0x0, 0xa, 0x1400, 0xffffffff, [0xb, 0xa, 0x8, 0xfffffffffffffff7]}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r6, 0x8008f512, &(0x7f0000000000)) 884.055273ms ago: executing program 4 (id=517): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) recvmmsg(r0, &(0x7f000000b400)=[{{0x0, 0x0, 0x0}, 0x5dd7}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002c80)=""/178, 0xb2}, {&(0x7f0000000040)=""/175, 0xaf}, {&(0x7f0000002fc0)=""/175, 0xaf}, {&(0x7f0000000740)=""/4086, 0xff6}, {&(0x7f00000002c0)=""/125, 0x7d}], 0x5}, 0x3}, {{0x0, 0x0, 0x0}, 0x4}], 0x3, 0x2, 0x0) 872.563571ms ago: executing program 1 (id=518): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{r0}, &(0x7f0000000d80), &(0x7f0000000dc0)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) (fail_nth: 2) 555.931726ms ago: executing program 0 (id=519): syz_ublk_setup_io_uring(0x33ea, &(0x7f0000000080)={0x0, 0xf812, 0x801, 0x1, 0x3ba}, &(0x7f0000000340), &(0x7f00000001c0), &(0x7f0000000180)) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) mmap$IORING_OFF_CQ_RING(0x0, 0x3, 0x0, 0x4000010, 0xffffffffffffffff, 0x8000000) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x8, @empty, 0x1}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r6, 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)) read$FUSE(r7, &(0x7f00000034c0)={0x2020}, 0x2020) 58.277467ms ago: executing program 1 (id=520): sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0x8, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$pppl2tp(r0, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x4, 0x0, {0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}}}, 0x3a) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009"], 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448e1, &(0x7f0000000c80)) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000000c0)={0x10001, 0x8, 0x2, 0x0, 0x3}) 0s ago: executing program 2 (id=521): r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) signalfd4(r0, &(0x7f0000000040)={[0x6]}, 0x8, 0x80800) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a00080000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{r1}, &(0x7f0000000d80), &(0x7f0000000dc0)=r2}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) kernel console output (not intermixed with test programs): 193.366920][ T6515] [ 193.366929][ T6515] dump_stack_lvl+0xe8/0x150 [ 193.366968][ T6515] should_fail_ex+0x46b/0x600 [ 193.367019][ T6515] _copy_from_user+0x2d/0xb0 [ 193.367054][ T6515] snd_pcm_oss_write2+0x227/0x440 [ 193.367089][ T6515] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 193.367121][ T6515] ? up_read+0x34/0x180 [ 193.367146][ T6515] ? snd_pcm_action_nonatomic+0x25c/0x2b0 [ 193.367185][ T6515] snd_pcm_oss_write+0x664/0xb40 [ 193.367232][ T6515] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 193.367260][ T6515] vfs_write+0x29f/0xbb0 [ 193.367293][ T6515] ? irqentry_exit+0x218/0x910 [ 193.367329][ T6515] ? __pfx_vfs_write+0x10/0x10 [ 193.367371][ T6515] ? ksys_write+0x86/0x270 [ 193.367405][ T6515] ksys_write+0x156/0x270 [ 193.367436][ T6515] ? __pfx_ksys_write+0x10/0x10 [ 193.367476][ T6515] do_syscall_64+0x166/0x520 [ 193.367500][ T6515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.367525][ T6515] ? clear_bhb_loop+0x70/0xc0 [ 193.367555][ T6515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.367579][ T6515] RIP: 0033:0x7fee42a3e159 [ 193.367600][ T6515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.367620][ T6515] RSP: 002b:00007fee40c75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 193.367646][ T6515] RAX: ffffffffffffffda RBX: 00007fee42cc6090 RCX: 00007fee42a3e159 [ 193.367663][ T6515] RDX: 000000000000fc36 RSI: 0000200000000500 RDI: 0000000000000006 [ 193.367679][ T6515] RBP: 00007fee40c75090 R08: 0000000000000000 R09: 0000000000000000 [ 193.367694][ T6515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.367708][ T6515] R13: 00007fee42cc6128 R14: 00007fee42cc6090 R15: 00007ffd77880ac8 [ 193.367745][ T6515] [ 194.499349][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.499415][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.082352][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.086632][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.086773][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.153370][ T6128] udevd[6128]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 195.990984][ T6532] netlink: 148 bytes leftover after parsing attributes in process `syz.4.209'. [ 196.163259][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.778696][ T6530] IPv6: NLM_F_REPLACE set, but no existing node found! [ 197.204296][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.263597][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.462199][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.521720][ T6537] capability: warning: `syz.1.211' uses deprecated v2 capabilities in a way that may be insecure [ 198.873309][ T6543] IPVS: set_ctl: invalid protocol: 47 172.30.0.2:21 [ 199.112176][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 199.202181][ T1237] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 199.262207][ T5600] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 199.263912][ T10] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 199.267325][ T10] usb 5-1: config 1 has an invalid interface number: 27 but max is 1 [ 199.267348][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.267366][ T10] usb 5-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 199.267384][ T10] usb 5-1: config 1 has no interface number 2 [ 199.267444][ T10] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 199.267469][ T10] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.267494][ T10] usb 5-1: config 1 interface 1 has no altsetting 0 [ 199.276241][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.276303][ T10] usb 5-1: Product: syz [ 199.276340][ T10] usb 5-1: Manufacturer: syz [ 199.276376][ T10] usb 5-1: SerialNumber: syz [ 199.296945][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.380426][ T1237] usb 4-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 199.395341][ T1237] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 199.395389][ T1237] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 199.395413][ T1237] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 199.395436][ T1237] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 199.395459][ T1237] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 24929, setting to 1024 [ 199.395483][ T1237] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 199.395505][ T1237] usb 4-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 199.398887][ T1237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.398912][ T1237] usb 4-1: Product: syz [ 199.398927][ T1237] usb 4-1: Manufacturer: syz [ 199.398941][ T1237] usb 4-1: SerialNumber: syz [ 199.516544][ T5600] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 199.540884][ T5600] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.540913][ T5600] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.565490][ T5600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.565517][ T5600] usb 2-1: Product: syz [ 199.565532][ T5600] usb 2-1: Manufacturer: syz [ 199.565554][ T5600] usb 2-1: SerialNumber: syz [ 199.611336][ T6550] netlink: 'syz.2.208': attribute type 4 has an invalid length. [ 199.632581][ T6550] netlink: 'syz.2.208': attribute type 4 has an invalid length. [ 199.734484][ T6546] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 199.734625][ T6546] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 199.734750][ T6546] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 199.734862][ T6546] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 199.803444][ T5600] usb 2-1: 0:2 : does not exist [ 199.803532][ T5600] usb 2-1: unit 9 not found! [ 199.811883][ T6544] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 199.954543][ T6554] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 200.326303][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.811659][ T6556] raw-gadget.0 gadget.4: fail, usb_ep_queue returned -108 [ 200.815693][ T1237] keyspan 4-1:1.0: Keyspan 1 port adapter converter detected [ 200.817848][ T1237] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 200.836986][ T1237] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 82 [ 200.837126][ T1237] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 200.856656][ T1237] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 200.919757][ T5600] usb 2-1: 4:0: cannot get min/max values for control 1 (id 4) [ 200.933914][ T5600] usb 2-1: 4:0: cannot get min/max values for control 2 (id 4) [ 200.939384][ T1237] usb 4-1: USB disconnect, device number 3 [ 201.094048][ T1237] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 201.099473][ T1237] keyspan 4-1:1.0: device disconnected [ 201.100972][ T10] usb 5-1: reset high-speed USB device number 6 using dummy_hcd [ 201.174128][ T5600] usb 2-1: USB disconnect, device number 7 [ 201.282905][ T5900] udevd[5900]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.423591][ T1581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.522570][ T1237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.034902][ T5600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.318614][ T10] speedtch 5-1:1.0: speedtch_bind: device reset failed (-19)! [ 203.318702][ T10] usb 5-1: selecting invalid altsetting 0 [ 203.318737][ T10] speedtch 5-1:1.0: usbatm_usb_probe: bind failed: -19! [ 203.391618][ T10] speedtch 5-1:1.27: speedtch_bind: setting interface to 1 failed (-19)! [ 203.402752][ T10] usb 5-1: selecting invalid altsetting 0 [ 203.402786][ T10] speedtch 5-1:1.27: usbatm_usb_probe: bind failed: -19! [ 203.441454][ T10] usb 5-1: selecting invalid altsetting 0 [ 203.441476][ T10] usbtest 5-1:1.1: probe with driver usbtest failed with error -22 [ 203.441749][ T10] usb 5-1: selecting invalid altsetting 0 [ 203.441777][ T10] speedtch 5-1:1.1: probe with driver speedtch failed with error -22 [ 203.499901][ T10] usb 5-1: USB disconnect, device number 6 [ 203.680152][ T6575] IPVS: set_ctl: invalid protocol: 29 100.1.1.0:20003 [ 204.093800][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.563969][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.564123][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.125942][ T1581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.409268][ T1581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.523012][ T5600] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 206.545640][ T6579] netlink: 16 bytes leftover after parsing attributes in process `syz.2.220'. [ 206.674991][ T5600] usb 1-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.00 [ 206.676352][ T5600] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 206.676381][ T5600] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.676397][ T5600] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.676411][ T5600] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 206.676437][ T5600] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.779858][ T5600] usb 1-1: config 0 descriptor?? [ 206.988828][ T6591] IPv6: Can't replace route, no match found [ 207.358225][ T5600] logitech-djreceiver 0003:046D:C71C.0001: unknown main item tag 0x0 [ 207.358255][ T5600] logitech-djreceiver 0003:046D:C71C.0001: unknown main item tag 0x0 [ 207.358278][ T5600] logitech-djreceiver 0003:046D:C71C.0001: unknown main item tag 0x0 [ 207.358298][ T5600] logitech-djreceiver 0003:046D:C71C.0001: unknown main item tag 0x0 [ 207.358317][ T5600] logitech-djreceiver 0003:046D:C71C.0001: unknown main item tag 0x0 [ 207.358336][ T5600] logitech-djreceiver 0003:046D:C71C.0001: unknown main item tag 0x0 [ 207.358355][ T5600] logitech-djreceiver 0003:046D:C71C.0001: unknown main item tag 0x0 [ 207.358374][ T5600] logitech-djreceiver 0003:046D:C71C.0001: unknown main item tag 0x0 [ 207.358394][ T5600] logitech-djreceiver 0003:046D:C71C.0001: unknown main item tag 0x0 [ 207.358413][ T5600] logitech-djreceiver 0003:046D:C71C.0001: unknown main item tag 0x0 [ 207.363412][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 207.603420][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.647499][ T1581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.750987][ T10] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 207.791408][ T10] usb 5-1: config 1 has an invalid interface number: 27 but max is 1 [ 207.791435][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.791453][ T10] usb 5-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 207.791488][ T10] usb 5-1: config 1 has no interface number 2 [ 207.791551][ T10] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 207.791574][ T10] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.791600][ T10] usb 5-1: config 1 interface 1 has no altsetting 0 [ 207.870103][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.870131][ T10] usb 5-1: Product: syz [ 207.870146][ T10] usb 5-1: Manufacturer: syz [ 207.870160][ T10] usb 5-1: SerialNumber: syz [ 207.966108][ T5856] usb 1-1: USB disconnect, device number 7 [ 208.540340][ T6593] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 208.620787][ T6605] IPVS: set_ctl: invalid protocol: 47 172.30.0.2:21 [ 208.696535][ T1237] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 208.723636][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.863281][ T1237] usb 3-1: Using ep0 maxpacket: 32 [ 208.882761][ T1237] usb 3-1: unable to get BOS descriptor or descriptor too short [ 208.882812][ T1237] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 208.912251][ T1237] usb 3-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 16 [ 208.912282][ T1237] usb 3-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.912310][ T1237] usb 3-1: config 1 interface 0 has no altsetting 0 [ 208.950994][ T1237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.951019][ T1237] usb 3-1: Product: syz [ 208.951033][ T1237] usb 3-1: Manufacturer: syz [ 208.951046][ T1237] usb 3-1: SerialNumber: syz [ 209.010212][ T6602] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 209.185781][ T10] ATM dev 0: failed to start ADSL synchronisation: -32 [ 209.186110][ C0] usbatm_complete: 6 callbacks suppressed [ 209.186127][ C0] ATM dev 0: usbatm_complete: urb 0xffff888034009a00 failed (-71)! [ 209.186183][ C0] ATM dev 0: usbatm_complete: urb 0xffff888034009900 failed (-71)! [ 209.186236][ C0] ATM dev 0: usbatm_complete: urb 0xffff888034009800 failed (-71)! [ 209.186703][ C0] ATM dev 0: usbatm_complete: urb 0xffff888034009700 failed (-71)! [ 209.304026][ C0] ATM dev 0: usbatm_complete: urb 0xffff888034009a00 failed (-71)! [ 209.304089][ C0] ATM dev 0: usbatm_complete: urb 0xffff888034009900 failed (-71)! [ 209.304141][ C0] ATM dev 0: usbatm_complete: urb 0xffff888034009800 failed (-71)! [ 209.304195][ C0] ATM dev 0: usbatm_complete: urb 0xffff888034009700 failed (-71)! [ 209.413694][ C0] ATM dev 0: usbatm_complete: urb 0xffff888034009a00 failed (-71)! [ 209.413763][ C0] ATM dev 0: usbatm_complete: urb 0xffff888034009900 failed (-71)! [ 209.445047][ T37] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 209.731332][ T37] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 209.736960][ T37] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.737025][ T37] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.891166][ T5600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.931513][ T10] speedtch 5-1:1.27: speedtch_bind: failed to claim interface 0 (-16)! [ 209.931542][ T10] speedtch 5-1:1.27: usbatm_usb_probe: bind failed: -16! [ 209.931613][ T10] speedtch 5-1:1.27: probe with driver speedtch failed with error -16 [ 210.098832][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.098852][ T37] usb 2-1: Product: syz [ 210.098862][ T37] usb 2-1: Manufacturer: syz [ 210.098871][ T37] usb 2-1: SerialNumber: syz [ 210.526845][ T6603] Process accounting paused [ 210.860664][ T1237] usblp0: Disabling reads from problematic bidirectional printer [ 210.878616][ T37] usb 2-1: 0:2 : does not exist [ 210.878673][ T37] usb 2-1: unit 9 not found! [ 211.190633][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.266104][ T10] usb 5-1: USB disconnect, device number 7 [ 212.333092][ T1581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.336810][ T5711] ATM dev 0: error -71 fetching device status [ 212.445237][ T37] usb 2-1: 4:0: cannot get min/max values for control 1 (id 4) [ 212.509045][ T37] usb 2-1: 4:0: cannot get min/max values for control 2 (id 4) [ 212.512381][ T6623] ALSA: mixer_oss: invalid OSS volume '' [ 212.842498][ T1237] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 7 proto 1 vid 0x03F0 pid 0x0004 [ 212.914958][ T1237] usb 3-1: USB disconnect, device number 8 [ 212.978833][ T37] usb 2-1: USB disconnect, device number 8 [ 213.003875][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 213.223579][ T6128] udevd[6128]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.277516][ T6627] IPVS: set_ctl: invalid protocol: 29 100.1.1.0:20003 [ 213.486144][ T1581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.614170][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 213.622579][ T10] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 213.730493][ T10] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 213.730521][ T10] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 213.730542][ T10] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 213.730560][ T10] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 213.730579][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 213.730598][ T10] usb 5-1: config 0 has no interface number 0 [ 213.730639][ T10] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 213.730666][ T10] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 213.730693][ T10] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 213.730726][ T10] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.730771][ T10] usb 5-1: config 0 interface 125 has no altsetting 0 [ 213.730791][ T10] usb 5-1: config 0 interface 125 has no altsetting 2 [ 214.430180][ T6631] netlink: 16 bytes leftover after parsing attributes in process `syz.3.241'. [ 215.582968][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.752091][ T10] usb 5-1: string descriptor 0 read error: -71 [ 215.752223][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.222446][ T6635] IPv6: Can't replace route, no match found [ 216.771712][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.772242][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.803335][ T1237] usblp0: removed [ 216.849453][ T10] usb 5-1: config 0 descriptor?? [ 216.864347][ T10] usb 5-1: can't set config #0, error -71 [ 216.883999][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.958899][ T10] usb 5-1: USB disconnect, device number 8 [ 217.334324][ T10] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 217.437592][ T6647] netlink: 36 bytes leftover after parsing attributes in process `syz.2.247'. [ 217.484283][ T10] usb 5-1: Invalid ep0 maxpacket: 64 [ 217.527463][ T5607] Bluetooth: hci1: command 0x0406 tx timeout [ 217.527611][ T5607] Bluetooth: hci4: command 0x0406 tx timeout [ 217.527635][ T5607] Bluetooth: hci0: command 0x0406 tx timeout [ 217.527800][ T5607] Bluetooth: hci3: command 0x0406 tx timeout [ 217.527829][ T5607] Bluetooth: hci2: command 0x0406 tx timeout [ 217.696471][ T10] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 217.868979][ T38] kauditd_printk_skb: 102 callbacks suppressed [ 217.868999][ T38] audit: type=1800 audit(1790368207.723:2): pid=6647 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.247" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 217.947826][ T10] usb 5-1: Invalid ep0 maxpacket: 64 [ 217.948125][ T10] usb usb5-port1: attempt power cycle [ 218.043656][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.164847][ T6653] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #108: comm syz.2.247: No space for directory leaf checksum. Please run e2fsck -D. [ 218.164895][ T6653] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #108: comm syz.2.247: checksumming directory block 0 [ 218.274466][ T5600] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 218.284407][ T10] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 218.305126][ T10] usb 5-1: Invalid ep0 maxpacket: 64 [ 218.427923][ T5600] usb 2-1: Using ep0 maxpacket: 8 [ 218.428817][ T5600] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 218.430033][ T5600] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 218.430056][ T5600] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 218.430084][ T5600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.453412][ T5600] usb 2-1: config 0 descriptor?? [ 218.474429][ T10] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 218.495691][ T10] usb 5-1: Invalid ep0 maxpacket: 64 [ 218.496006][ T10] usb usb5-port1: unable to enumerate USB device [ 218.574467][ T5724] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 218.726006][ T5724] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 218.728691][ T5724] usb 1-1: config 1 has an invalid interface number: 27 but max is 1 [ 218.728713][ T5724] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.728727][ T5724] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 218.728743][ T5724] usb 1-1: config 1 has no interface number 2 [ 218.730191][ T5724] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 218.730236][ T5724] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.730498][ T5724] usb 1-1: config 1 interface 1 has no altsetting 0 [ 218.781289][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.787162][ T5724] usb 1-1: Product: syz [ 218.787210][ T5724] usb 1-1: Manufacturer: syz [ 218.790967][ T5724] usb 1-1: SerialNumber: syz [ 219.043140][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'. [ 219.340126][ T1581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.399450][ T5600] hid_parser_main: 30 callbacks suppressed [ 219.399562][ T5600] lenovo 0003:17EF:6047.0002: unknown main item tag 0x5 [ 219.399787][ T5600] lenovo 0003:17EF:6047.0002: unknown main item tag 0x3 [ 219.400051][ T5600] lenovo 0003:17EF:6047.0002: reserved main item tag 0xd [ 219.400087][ T5600] lenovo 0003:17EF:6047.0002: collection stack underflow [ 219.400108][ T5600] lenovo 0003:17EF:6047.0002: item 0 1 0 12 parsing failed [ 219.401516][ T5600] lenovo 0003:17EF:6047.0002: hid_parse failed [ 219.401699][ T5600] lenovo 0003:17EF:6047.0002: probe with driver lenovo failed with error -22 [ 219.744297][ T6656] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 219.767491][ T6666] netlink: 88 bytes leftover after parsing attributes in process `syz.2.250'. [ 219.827228][ T6666] FAULT_INJECTION: forcing a failure. [ 219.827228][ T6666] name failslab, interval 1, probability 0, space 0, times 0 [ 219.827260][ T6666] CPU: 0 UID: 0 PID: 6666 Comm: syz.2.250 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 219.827283][ T6666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 219.827295][ T6666] Call Trace: [ 219.827305][ T6666] [ 219.827313][ T6666] dump_stack_lvl+0xe8/0x150 [ 219.827348][ T6666] should_fail_ex+0x46b/0x600 [ 219.827382][ T6666] should_failslab+0xa8/0x100 [ 219.827416][ T6666] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 219.827448][ T6666] ? kobject_set_name_vargs+0x61/0x110 [ 219.827472][ T6666] ? kobject_set_name_vargs+0x61/0x110 [ 219.827505][ T6666] kvasprintf+0xeb/0x1a0 [ 219.827545][ T6666] ? __pfx_kvasprintf+0x10/0x10 [ 219.827576][ T6666] ? rcu_is_watching+0x16/0xb0 [ 219.827608][ T6666] ? kfree+0x4d/0x6d0 [ 219.827633][ T6666] ? kvasprintf_const+0xe1/0x240 [ 219.827664][ T6666] kobject_set_name_vargs+0x61/0x110 [ 219.827690][ T6666] dev_set_name+0xe2/0x140 [ 219.827722][ T6666] ? __pfx_dev_set_name+0x10/0x10 [ 219.827749][ T6666] ? nfc_allocate_device+0x129/0x560 [ 219.827769][ T6666] ? nfc_allocate_device+0x129/0x560 [ 219.827795][ T6666] nfc_allocate_device+0x1d6/0x560 [ 219.827820][ T6666] nci_allocate_device+0x1da/0x380 [ 219.827846][ T6666] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 219.827867][ T6666] virtual_ncidev_open+0x75/0x190 [ 219.827891][ T6666] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 219.827911][ T6666] misc_open+0x2de/0x350 [ 219.827936][ T6666] chrdev_open+0x4dc/0x600 [ 219.827968][ T6666] ? __pfx_chrdev_open+0x10/0x10 [ 219.827997][ T6666] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 219.828031][ T6666] ? __pfx_chrdev_open+0x10/0x10 [ 219.828059][ T6666] do_dentry_open+0x849/0x1420 [ 219.828101][ T6666] vfs_open+0x3b/0x350 [ 219.828128][ T6666] ? path_openat+0x142d/0x1d60 [ 219.828155][ T6666] path_openat+0x1448/0x1d60 [ 219.828198][ T6666] do_file_open+0x23e/0x4a0 [ 219.828229][ T6666] ? __pfx_do_file_open+0x10/0x10 [ 219.828277][ T6666] ? alloc_fd+0x654/0x6d0 [ 219.828308][ T6666] do_sys_openat2+0x115/0x200 [ 219.828339][ T6666] ? __se_sys_futex+0x3a8/0x450 [ 219.828360][ T6666] ? __pfx_do_sys_openat2+0x10/0x10 [ 219.828395][ T6666] ? rcu_is_watching+0x16/0xb0 [ 219.828429][ T6666] __x64_sys_openat+0x138/0x170 [ 219.828453][ T6666] do_syscall_64+0x166/0x520 [ 219.828474][ T6666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.828494][ T6666] ? clear_bhb_loop+0x70/0xc0 [ 219.828526][ T6666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.828548][ T6666] RIP: 0033:0x7faa3ae2e159 [ 219.828566][ T6666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.828584][ T6666] RSP: 002b:00007faa39086028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 219.828607][ T6666] RAX: ffffffffffffffda RBX: 00007faa3b0b5fa0 RCX: 00007faa3ae2e159 [ 219.828623][ T6666] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 219.828637][ T6666] RBP: 00007faa3aec506b R08: 0000000000000000 R09: 0000000000000000 [ 219.828651][ T6666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.828663][ T6666] R13: 00007faa3b0b6038 R14: 00007faa3b0b5fa0 R15: 00007ffdddaab338 [ 219.828693][ T6666] [ 219.845228][ T5575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.448960][ T5724] ATM dev 0: failed to start ADSL synchronisation: -32 [ 220.449279][ C1] ATM dev 0: usbatm_complete: urb 0xffff8880263d7d00 failed (-71)! [ 220.449330][ C1] ATM dev 0: usbatm_complete: urb 0xffff8880263d7c00 failed (-71)! [ 220.449370][ C1] ATM dev 0: usbatm_complete: urb 0xffff88803477c100 failed (-71)! [ 220.449410][ C1] ATM dev 0: usbatm_complete: urb 0xffff888034061d00 failed (-71)! [ 220.511425][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 220.526304][ T5724] speedtch 1-1:1.27: speedtch_bind: failed to claim interface 0 (-16)! [ 220.526331][ T5724] speedtch 1-1:1.27: usbatm_usb_probe: bind failed: -16! [ 220.526392][ T5724] speedtch 1-1:1.27: probe with driver speedtch failed with error -16 [ 220.554921][ C1] ATM dev 0: usbatm_complete: urb 0xffff8880263d7d00 failed (-71)! [ 220.554982][ C1] ATM dev 0: usbatm_complete: urb 0xffff8880263d7c00 failed (-71)! [ 220.555032][ C1] ATM dev 0: usbatm_complete: urb 0xffff88803477c100 failed (-71)! [ 220.555081][ C1] ATM dev 0: usbatm_complete: urb 0xffff888034061d00 failed (-71)! [ 220.616470][ T6665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.621282][ T5575] usb 2-1: USB disconnect, device number 9 [ 220.656252][ T5856] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 220.664921][ C1] ATM dev 0: usbatm_complete: urb 0xffff8880263d7d00 failed (-71)! [ 220.773893][ T5724] usb 1-1: USB disconnect, device number 8 [ 220.837526][ T5856] usb 4-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 220.838702][ T5856] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 220.838749][ T5856] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 220.838772][ T5856] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 220.838794][ T5856] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 220.838809][ T5856] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 24929, setting to 1024 [ 220.838825][ T5856] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 220.838840][ T5856] usb 4-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 220.841734][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.841757][ T5856] usb 4-1: Product: syz [ 220.841769][ T5856] usb 4-1: Manufacturer: syz [ 220.841782][ T5856] usb 4-1: SerialNumber: syz [ 221.013479][ T6674] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 221.013617][ T6674] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 221.015335][ T6674] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 221.017564][ T6674] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 221.097653][ T5856] keyspan 4-1:1.0: Keyspan 1 port adapter converter detected [ 221.098450][ T5856] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 221.134941][ T5856] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 82 [ 221.135068][ T5856] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 221.146961][ T5856] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 221.334861][ T1237] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 221.367906][ T6681] IPv6: Can't replace route, no match found [ 221.640199][ T6684] ALSA: mixer_oss: invalid OSS volume '' [ 221.912115][ T1237] usb 3-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 221.933085][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.966184][ T1237] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 221.966216][ T1237] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.966242][ T1237] usb 3-1: config 0 interface 0 has no altsetting 0 [ 221.966280][ T1237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.030895][ T1237] usb 3-1: config 0 descriptor?? [ 223.105375][ T6665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.112643][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.171920][ T1237] usbhid 3-1:0.0: can't add hid device: -71 [ 223.172022][ T1237] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 223.211387][ T1237] usb 3-1: USB disconnect, device number 9 [ 223.385037][ T5856] usb 4-1: USB disconnect, device number 4 [ 223.785849][ T5856] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 223.800492][ T5856] keyspan 4-1:1.0: device disconnected [ 224.693840][ T5576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.796283][ T6707] netlink: 20 bytes leftover after parsing attributes in process `syz.2.262'. [ 224.895382][ T6708] netlink: 43 bytes leftover after parsing attributes in process `syz.1.260'. [ 227.298739][ T6704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.298775][ T6704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.298796][ T6704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.298818][ T6704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.298839][ T6704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.309588][ T6704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.401623][ T6704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.415854][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.468931][ T6704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.469061][ T6704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.977807][ T6726] ALSA: mixer_oss: invalid OSS volume '' [ 231.115317][ T6740] netlink: 36 bytes leftover after parsing attributes in process `syz.0.269'. [ 231.364712][ T6747] netlink: 43 bytes leftover after parsing attributes in process `syz.1.272'. [ 232.423009][ T6665] net_ratelimit: 20 callbacks suppressed [ 232.423031][ T6665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.587863][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.021343][ T1237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.276283][ T6760] netlink: 43 bytes leftover after parsing attributes in process `syz.0.275'. [ 234.666685][ T5576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.089903][ T6768] netlink: 108 bytes leftover after parsing attributes in process `syz.4.277'. [ 235.133526][ T6768] FAULT_INJECTION: forcing a failure. [ 235.133526][ T6768] name failslab, interval 1, probability 0, space 0, times 0 [ 235.133563][ T6768] CPU: 0 UID: 0 PID: 6768 Comm: syz.4.277 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 235.133589][ T6768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 235.133611][ T6768] Call Trace: [ 235.133620][ T6768] [ 235.133628][ T6768] dump_stack_lvl+0xe8/0x150 [ 235.133666][ T6768] should_fail_ex+0x46b/0x600 [ 235.133701][ T6768] should_failslab+0xa8/0x100 [ 235.133736][ T6768] __kmalloc_cache_noprof+0xa1/0x680 [ 235.133768][ T6768] ? virtual_ncidev_open+0x54/0x190 [ 235.133790][ T6768] ? virtual_ncidev_open+0x54/0x190 [ 235.133817][ T6768] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 235.133839][ T6768] virtual_ncidev_open+0x54/0x190 [ 235.133863][ T6768] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 235.133885][ T6768] misc_open+0x2de/0x350 [ 235.133911][ T6768] chrdev_open+0x4dc/0x600 [ 235.133944][ T6768] ? __pfx_chrdev_open+0x10/0x10 [ 235.133975][ T6768] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 235.134011][ T6768] ? __pfx_chrdev_open+0x10/0x10 [ 235.134039][ T6768] do_dentry_open+0x849/0x1420 [ 235.134082][ T6768] vfs_open+0x3b/0x350 [ 235.134120][ T6768] ? path_openat+0x142d/0x1d60 [ 235.134148][ T6768] path_openat+0x1448/0x1d60 [ 235.134191][ T6768] do_file_open+0x23e/0x4a0 [ 235.134223][ T6768] ? __pfx_do_file_open+0x10/0x10 [ 235.134311][ T6768] ? alloc_fd+0x654/0x6d0 [ 235.134345][ T6768] do_sys_openat2+0x115/0x200 [ 235.134383][ T6768] ? __se_sys_futex+0x3a8/0x450 [ 235.134406][ T6768] ? __pfx_do_sys_openat2+0x10/0x10 [ 235.134448][ T6768] ? rcu_is_watching+0x16/0xb0 [ 235.134486][ T6768] __x64_sys_openat+0x138/0x170 [ 235.134515][ T6768] do_syscall_64+0x166/0x520 [ 235.134538][ T6768] ? trace_irq_disable+0x3b/0x140 [ 235.134569][ T6768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.134602][ T6768] ? clear_bhb_loop+0x70/0xc0 [ 235.134631][ T6768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.134659][ T6768] RIP: 0033:0x7fee42a3e159 [ 235.134681][ T6768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.134702][ T6768] RSP: 002b:00007fee40c96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 235.134727][ T6768] RAX: ffffffffffffffda RBX: 00007fee42cc5fa0 RCX: 00007fee42a3e159 [ 235.134744][ T6768] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 235.134762][ T6768] RBP: 00007fee42ad506b R08: 0000000000000000 R09: 0000000000000000 [ 235.134777][ T6768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.134790][ T6768] R13: 00007fee42cc6038 R14: 00007fee42cc5fa0 R15: 00007ffd77880ac8 [ 235.134826][ T6768] [ 236.396597][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.636573][ T10] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 237.056999][ T1237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.207603][ T10] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 237.208929][ T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 237.208954][ T10] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 237.208974][ T10] usb 1-1: config 179 has no interface number 0 [ 237.209017][ T10] usb 1-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 237.209059][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.528224][ T5576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.616424][ T6771] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 238.797954][ T5575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.798525][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.889033][ T5575] usb 1-1: USB disconnect, device number 9 [ 239.353552][ T6787] ALSA: mixer_oss: invalid OSS volume '' [ 239.692220][ T5597] Bluetooth: hci0: command 0x0406 tx timeout [ 240.103751][ T6800] netlink: 43 bytes leftover after parsing attributes in process `syz.4.284'. [ 240.307095][ T5576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.561709][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.750168][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.027101][ T5575] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 241.048660][ T6665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.053021][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.053627][ T5594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.054026][ T5600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.197340][ T5575] usb 1-1: Using ep0 maxpacket: 8 [ 241.315106][ T5575] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 241.390521][ T5575] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 241.390590][ T5575] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 241.390659][ T5575] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.611451][ T5575] usb 1-1: config 0 descriptor?? [ 242.721075][ T6811] netlink: 43 bytes leftover after parsing attributes in process `syz.1.288'. [ 243.008680][ T5575] usbhid 1-1:0.0: can't add hid device: -71 [ 243.008803][ T5575] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 243.041125][ T5575] usb 1-1: USB disconnect, device number 10 [ 243.129138][ T5600] net_ratelimit: 1 callbacks suppressed [ 243.129159][ T5600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.321857][ T6815] netlink: 108 bytes leftover after parsing attributes in process `syz.0.290'. [ 243.372229][ T6816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.372440][ T6816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.372607][ T6816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.385079][ T6816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.385656][ T6816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.415822][ T6816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.416453][ T6816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.427336][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.430189][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.493641][ T6584] Process accounting resumed [ 243.495938][ T6818] IPv6: Can't replace route, no match found [ 245.838491][ T6837] netlink: 43 bytes leftover after parsing attributes in process `syz.4.296'. [ 246.427935][ T5600] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 246.667827][ T5600] usb 3-1: Using ep0 maxpacket: 8 [ 246.670109][ T5600] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 246.676782][ T5600] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 246.676820][ T5600] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 246.676901][ T5600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.835194][ T5600] usb 3-1: config 0 descriptor?? [ 247.425307][ T6840] batadv_slave_1: entered promiscuous mode [ 247.443060][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'. [ 247.443713][ T6840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.614180][ T6847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.295'. [ 247.723871][ T6840] batadv_slave_1 (unregistering): left promiscuous mode [ 247.723964][ T6840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.759788][ T5600] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 247.759821][ T5600] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 247.759844][ T5600] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 247.759964][ T5600] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 247.759991][ T5600] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 247.760017][ T5600] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 247.760043][ T5600] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 247.760076][ T5600] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 248.018719][ T5575] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 248.064129][ T5600] lenovo 0003:17EF:6047.0003: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 248.220803][ T5575] usb 4-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 248.302407][ T5575] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 248.302457][ T5575] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 248.302488][ T5575] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 248.302527][ T5575] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.371772][ T5575] usb 4-1: config 0 descriptor?? [ 248.373936][ T6847] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 248.412328][ T6855] netlink: 'syz.0.299': attribute type 10 has an invalid length. [ 248.947141][ T5575] hid (null): global environment stack underflow [ 248.968823][ T5576] net_ratelimit: 22 callbacks suppressed [ 248.968835][ T5576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.094644][ T5600] lenovo 0003:17EF:6047.0003: Sensitivity setting failed: -71 [ 249.111476][ T5600] usb 3-1: USB disconnect, device number 10 [ 249.202194][ T5575] uclogic 0003:28BD:0075.0004: interface is invalid, ignoring [ 249.510656][ T5724] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 249.658061][ T5724] usb 2-1: Using ep0 maxpacket: 8 [ 249.659500][ T5724] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 249.664883][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 249.664913][ T5724] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 249.664952][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.740784][ T6861] netlink: 16 bytes leftover after parsing attributes in process `syz.4.298'. [ 249.744355][ T5724] usb 2-1: config 0 descriptor?? [ 250.009867][ T5575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.010995][ T5575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.227638][ T6869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.300'. [ 250.255953][ T5575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.516345][ T5724] lenovo 0003:17EF:6047.0005: unknown main item tag 0x5 [ 250.516424][ T5724] lenovo 0003:17EF:6047.0005: unknown main item tag 0x3 [ 250.516451][ T5724] lenovo 0003:17EF:6047.0005: reserved main item tag 0xd [ 250.516485][ T5724] lenovo 0003:17EF:6047.0005: collection stack underflow [ 250.516507][ T5724] lenovo 0003:17EF:6047.0005: item 0 1 0 12 parsing failed [ 250.517165][ T5724] lenovo 0003:17EF:6047.0005: hid_parse failed [ 250.517230][ T5724] lenovo 0003:17EF:6047.0005: probe with driver lenovo failed with error -22 [ 250.590842][ T5575] usb 4-1: USB disconnect, device number 5 [ 250.835035][ T6665] usb 2-1: USB disconnect, device number 10 [ 251.122303][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.106925][ T5575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.182689][ T6665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.511197][ T6887] netlink: 108 bytes leftover after parsing attributes in process `syz.3.309'. [ 252.548445][ T6887] FAULT_INJECTION: forcing a failure. [ 252.548445][ T6887] name failslab, interval 1, probability 0, space 0, times 0 [ 252.548487][ T6887] CPU: 1 UID: 0 PID: 6887 Comm: syz.3.309 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 252.548511][ T6887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 252.548538][ T6887] Call Trace: [ 252.548548][ T6887] [ 252.548556][ T6887] dump_stack_lvl+0xe8/0x150 [ 252.548591][ T6887] should_fail_ex+0x46b/0x600 [ 252.548627][ T6887] should_failslab+0xa8/0x100 [ 252.548660][ T6887] __kmalloc_cache_noprof+0xa1/0x680 [ 252.548689][ T6887] ? nci_hci_allocate+0x53/0x2b0 [ 252.548717][ T6887] ? nci_hci_allocate+0x53/0x2b0 [ 252.548747][ T6887] ? mutex_rt_init_lockdep+0x66/0x80 [ 252.548771][ T6887] nci_hci_allocate+0x53/0x2b0 [ 252.548805][ T6887] nci_allocate_device+0x207/0x380 [ 252.548830][ T6887] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 252.548851][ T6887] virtual_ncidev_open+0x75/0x190 [ 252.548874][ T6887] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 252.548894][ T6887] misc_open+0x2de/0x350 [ 252.548919][ T6887] chrdev_open+0x4dc/0x600 [ 252.548951][ T6887] ? __pfx_chrdev_open+0x10/0x10 [ 252.548980][ T6887] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 252.549014][ T6887] ? __pfx_chrdev_open+0x10/0x10 [ 252.549042][ T6887] do_dentry_open+0x849/0x1420 [ 252.549083][ T6887] vfs_open+0x3b/0x350 [ 252.549112][ T6887] ? path_openat+0x142d/0x1d60 [ 252.549140][ T6887] path_openat+0x1448/0x1d60 [ 252.549184][ T6887] do_file_open+0x23e/0x4a0 [ 252.549216][ T6887] ? __pfx_do_file_open+0x10/0x10 [ 252.549263][ T6887] ? alloc_fd+0x654/0x6d0 [ 252.549294][ T6887] do_sys_openat2+0x115/0x200 [ 252.549324][ T6887] ? __se_sys_futex+0x3a8/0x450 [ 252.549345][ T6887] ? __pfx_do_sys_openat2+0x10/0x10 [ 252.549381][ T6887] ? rcu_is_watching+0x16/0xb0 [ 252.549415][ T6887] __x64_sys_openat+0x138/0x170 [ 252.549440][ T6887] do_syscall_64+0x166/0x520 [ 252.549460][ T6887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.549491][ T6887] ? clear_bhb_loop+0x70/0xc0 [ 252.549516][ T6887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.549537][ T6887] RIP: 0033:0x7f543b12e159 [ 252.549555][ T6887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.549573][ T6887] RSP: 002b:00007f5439386028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 252.549595][ T6887] RAX: ffffffffffffffda RBX: 00007f543b3b5fa0 RCX: 00007f543b12e159 [ 252.549611][ T6887] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 252.549626][ T6887] RBP: 00007f543b1c506b R08: 0000000000000000 R09: 0000000000000000 [ 252.549639][ T6887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.549652][ T6887] R13: 00007f543b3b6038 R14: 00007f543b3b5fa0 R15: 00007fff3e72c018 [ 252.549683][ T6887] [ 253.421544][ T6900] netlink: 43 bytes leftover after parsing attributes in process `syz.4.308'. [ 253.709724][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.731975][ T5600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.208661][ T5600] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 254.339489][ T6917] netlink: 'syz.1.313': attribute type 10 has an invalid length. [ 254.363484][ T5600] usb 1-1: Using ep0 maxpacket: 16 [ 254.367465][ T5600] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 254.393304][ T5600] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 254.393329][ T5600] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 254.393347][ T5600] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 254.393364][ T5600] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 254.393386][ T5600] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 254.393399][ T5600] usb 1-1: config 0 has no interface number 0 [ 254.393427][ T5600] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 254.393445][ T5600] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 254.393459][ T5600] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 254.393480][ T5600] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 254.393497][ T5600] usb 1-1: config 0 interface 125 has no altsetting 0 [ 254.393509][ T5600] usb 1-1: config 0 interface 125 has no altsetting 2 [ 254.397720][ T5600] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.397737][ T5600] usb 1-1: Product: syz [ 254.397747][ T5600] usb 1-1: Manufacturer: syz [ 254.397756][ T5600] usb 1-1: SerialNumber: syz [ 255.367440][ T5600] usb 1-1: config 0 descriptor?? [ 255.433351][ T5600] usb 1-1: selecting invalid altsetting 2 [ 255.539935][ T6665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.993028][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.108339][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.573488][ T5600] get_1284_register timeout [ 256.741741][ T5594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.288380][ C1] usb 1-1: async_complete: urb error -104 [ 257.294886][ C1] usb 1-1: async_complete: urb error -104 [ 257.294946][ C1] usb 1-1: async_complete: urb error -104 [ 257.295180][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 257.388167][ T6665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.825713][ T6932] IPVS: set_ctl: invalid protocol: 29 100.1.1.0:20003 [ 258.119909][ T5600] usb 1-1: USB disconnect, device number 11 [ 258.549454][ T5600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.661110][ T6929] netlink: 16 bytes leftover after parsing attributes in process `syz.4.315'. [ 259.686286][ T5576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.809841][ T1237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.890003][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.846728][ T5575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.879766][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.816272][ T6956] netlink: 43 bytes leftover after parsing attributes in process `syz.3.325'. [ 262.897522][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.163373][ T5594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.167985][ T6955] FAULT_INJECTION: forcing a failure. [ 263.167985][ T6955] name failslab, interval 1, probability 0, space 0, times 0 [ 263.168020][ T6955] CPU: 1 UID: 0 PID: 6955 Comm: syz.0.324 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 263.168067][ T6955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 263.168091][ T6955] Call Trace: [ 263.168106][ T6955] [ 263.168117][ T6955] dump_stack_lvl+0xe8/0x150 [ 263.168151][ T6955] should_fail_ex+0x46b/0x600 [ 263.168184][ T6955] should_failslab+0xa8/0x100 [ 263.168218][ T6955] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 263.168247][ T6955] ? kobject_set_name_vargs+0x61/0x110 [ 263.168270][ T6955] ? kobject_set_name_vargs+0x61/0x110 [ 263.168302][ T6955] kvasprintf+0xeb/0x1a0 [ 263.168335][ T6955] ? __pfx_kvasprintf+0x10/0x10 [ 263.168365][ T6955] ? rcu_is_watching+0x16/0xb0 [ 263.168414][ T6955] ? kfree+0x4d/0x6d0 [ 263.168441][ T6955] ? kvasprintf_const+0xe1/0x240 [ 263.168476][ T6955] kobject_set_name_vargs+0x61/0x110 [ 263.168504][ T6955] dev_set_name+0xe2/0x140 [ 263.168536][ T6955] ? __pfx_dev_set_name+0x10/0x10 [ 263.168565][ T6955] ? nfc_allocate_device+0x129/0x560 [ 263.168585][ T6955] ? nfc_allocate_device+0x129/0x560 [ 263.168621][ T6955] nfc_allocate_device+0x1d6/0x560 [ 263.168659][ T6955] nci_allocate_device+0x1da/0x380 [ 263.168686][ T6955] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 263.168707][ T6955] virtual_ncidev_open+0x75/0x190 [ 263.168730][ T6955] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 263.168750][ T6955] misc_open+0x2de/0x350 [ 263.168774][ T6955] chrdev_open+0x4dc/0x600 [ 263.168805][ T6955] ? __pfx_chrdev_open+0x10/0x10 [ 263.168835][ T6955] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 263.168869][ T6955] ? __pfx_chrdev_open+0x10/0x10 [ 263.168897][ T6955] do_dentry_open+0x849/0x1420 [ 263.168936][ T6955] vfs_open+0x3b/0x350 [ 263.168963][ T6955] ? path_openat+0x142d/0x1d60 [ 263.168991][ T6955] path_openat+0x1448/0x1d60 [ 263.169035][ T6955] do_file_open+0x23e/0x4a0 [ 263.169066][ T6955] ? __pfx_do_file_open+0x10/0x10 [ 263.169112][ T6955] ? alloc_fd+0x654/0x6d0 [ 263.169144][ T6955] do_sys_openat2+0x115/0x200 [ 263.169174][ T6955] ? __se_sys_futex+0x3a8/0x450 [ 263.169195][ T6955] ? __pfx_do_sys_openat2+0x10/0x10 [ 263.169231][ T6955] ? rcu_is_watching+0x16/0xb0 [ 263.169265][ T6955] __x64_sys_openat+0x138/0x170 [ 263.169290][ T6955] do_syscall_64+0x166/0x520 [ 263.169310][ T6955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.169329][ T6955] ? clear_bhb_loop+0x70/0xc0 [ 263.169354][ T6955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.169373][ T6955] RIP: 0033:0x7f7cf785e159 [ 263.169392][ T6955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.169409][ T6955] RSP: 002b:00007f7cf5a95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 263.169431][ T6955] RAX: ffffffffffffffda RBX: 00007f7cf7ae6090 RCX: 00007f7cf785e159 [ 263.169447][ T6955] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 263.169462][ T6955] RBP: 00007f7cf78f506b R08: 0000000000000000 R09: 0000000000000000 [ 263.169475][ T6955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.169487][ T6955] R13: 00007f7cf7ae6128 R14: 00007f7cf7ae6090 R15: 00007fff34a3e978 [ 263.169517][ T6955] [ 264.199540][ T6970] netlink: 20 bytes leftover after parsing attributes in process `syz.2.327'. [ 264.851579][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.252544][ T6980] Bluetooth: MGMT ver 1.23 [ 267.200594][ T5576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.201035][ T5575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.401612][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.520985][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.555312][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.576291][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.965320][ T6996] netlink: 43 bytes leftover after parsing attributes in process `syz.0.336'. [ 269.151057][ T7005] netlink: 'syz.1.338': attribute type 10 has an invalid length. [ 269.303195][ T7007] FAULT_INJECTION: forcing a failure. [ 269.303195][ T7007] name failslab, interval 1, probability 0, space 0, times 0 [ 269.303236][ T7007] CPU: 1 UID: 0 PID: 7007 Comm: syz.3.340 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 269.303262][ T7007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 269.303275][ T7007] Call Trace: [ 269.303284][ T7007] [ 269.303293][ T7007] dump_stack_lvl+0xe8/0x150 [ 269.303331][ T7007] should_fail_ex+0x46b/0x600 [ 269.303367][ T7007] should_failslab+0xa8/0x100 [ 269.303403][ T7007] __kmalloc_cache_noprof+0xa1/0x680 [ 269.303433][ T7007] ? nci_hci_allocate+0x53/0x2b0 [ 269.303457][ T7007] ? nci_hci_allocate+0x53/0x2b0 [ 269.303479][ T7007] ? mutex_rt_init_lockdep+0x66/0x80 [ 269.303497][ T7007] nci_hci_allocate+0x53/0x2b0 [ 269.303521][ T7007] nci_allocate_device+0x207/0x380 [ 269.303540][ T7007] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 269.303555][ T7007] virtual_ncidev_open+0x75/0x190 [ 269.303570][ T7007] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 269.303585][ T7007] misc_open+0x2de/0x350 [ 269.303602][ T7007] chrdev_open+0x4dc/0x600 [ 269.303625][ T7007] ? __pfx_chrdev_open+0x10/0x10 [ 269.303647][ T7007] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 269.303671][ T7007] ? __pfx_chrdev_open+0x10/0x10 [ 269.303692][ T7007] do_dentry_open+0x849/0x1420 [ 269.303722][ T7007] vfs_open+0x3b/0x350 [ 269.303742][ T7007] ? path_openat+0x142d/0x1d60 [ 269.303763][ T7007] path_openat+0x1448/0x1d60 [ 269.303794][ T7007] do_file_open+0x23e/0x4a0 [ 269.303816][ T7007] ? __pfx_do_file_open+0x10/0x10 [ 269.303851][ T7007] ? alloc_fd+0x654/0x6d0 [ 269.303878][ T7007] do_sys_openat2+0x115/0x200 [ 269.303901][ T7007] ? __se_sys_futex+0x3a8/0x450 [ 269.303916][ T7007] ? __pfx_do_sys_openat2+0x10/0x10 [ 269.303942][ T7007] ? rcu_is_watching+0x16/0xb0 [ 269.303969][ T7007] __x64_sys_openat+0x138/0x170 [ 269.303986][ T7007] do_syscall_64+0x166/0x520 [ 269.304000][ T7007] ? trace_irq_disable+0x3b/0x140 [ 269.304018][ T7007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.304034][ T7007] ? clear_bhb_loop+0x70/0xc0 [ 269.304051][ T7007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.304066][ T7007] RIP: 0033:0x7f543b12e159 [ 269.304079][ T7007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.304092][ T7007] RSP: 002b:00007f5439386028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 269.304121][ T7007] RAX: ffffffffffffffda RBX: 00007f543b3b5fa0 RCX: 00007f543b12e159 [ 269.304132][ T7007] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 269.304142][ T7007] RBP: 00007f543b1c506b R08: 0000000000000000 R09: 0000000000000000 [ 269.304150][ T7007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.304159][ T7007] R13: 00007f543b3b6038 R14: 00007f543b3b5fa0 R15: 00007fff3e72c018 [ 269.304180][ T7007] [ 269.630717][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.750425][ T5594] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 269.859873][ T7014] netlink: 60 bytes leftover after parsing attributes in process `syz.0.343'. [ 270.040956][ T5594] usb 3-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 270.043721][ T5594] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 270.043754][ T5594] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 270.043780][ T5594] usb 3-1: config 0 interface 0 has no altsetting 0 [ 270.043811][ T5594] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.146257][ T5594] usb 3-1: config 0 descriptor?? [ 270.847226][ T1237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.977632][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.200707][ T1237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.354693][ T7024] netlink: 43 bytes leftover after parsing attributes in process `syz.0.346'. [ 271.365695][ T5600] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 271.775285][ T5594] usbhid 3-1:0.0: can't add hid device: -71 [ 271.775394][ T5594] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 271.814458][ T5594] usb 3-1: USB disconnect, device number 11 [ 271.891199][ T5600] usb 2-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 271.893327][ T5600] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.893360][ T5600] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 271.893376][ T5600] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 271.893391][ T5600] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 271.893406][ T5600] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 271.893420][ T5600] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 271.893434][ T5600] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 271.898412][ T5600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.898429][ T5600] usb 2-1: Product: syz [ 271.898438][ T5600] usb 2-1: Manufacturer: syz [ 271.898447][ T5600] usb 2-1: SerialNumber: syz [ 272.026795][ T7020] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 272.027019][ T7020] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 272.027186][ T7020] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 272.073525][ T5600] keyspan 2-1:1.0: Keyspan 1 port adapter converter detected [ 272.073920][ T5600] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 272.080231][ T5600] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 82 [ 272.080333][ T5600] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 272.151240][ T5600] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 273.352534][ T5724] net_ratelimit: 1 callbacks suppressed [ 273.352586][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.759671][ T7030] Process accounting paused [ 273.889136][ T5575] usb 2-1: USB disconnect, device number 11 [ 273.897766][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.974886][ T5575] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 273.993374][ T5575] keyspan 2-1:1.0: device disconnected [ 274.234295][ T7045] netlink: 43 bytes leftover after parsing attributes in process `syz.2.352'. [ 274.417339][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.609557][ T7047] FAULT_INJECTION: forcing a failure. [ 274.609557][ T7047] name failslab, interval 1, probability 0, space 0, times 0 [ 274.609590][ T7047] CPU: 1 UID: 0 PID: 7047 Comm: syz.0.354 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 274.609613][ T7047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 274.609626][ T7047] Call Trace: [ 274.609634][ T7047] [ 274.609642][ T7047] dump_stack_lvl+0xe8/0x150 [ 274.609677][ T7047] should_fail_ex+0x46b/0x600 [ 274.609718][ T7047] should_failslab+0xa8/0x100 [ 274.609752][ T7047] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 274.609782][ T7047] ? kobject_set_name_vargs+0x61/0x110 [ 274.609799][ T7047] ? kobject_set_name_vargs+0x61/0x110 [ 274.609819][ T7047] kvasprintf+0xeb/0x1a0 [ 274.609842][ T7047] ? __pfx_kvasprintf+0x10/0x10 [ 274.609863][ T7047] ? rcu_is_watching+0x16/0xb0 [ 274.609884][ T7047] ? kfree+0x4d/0x6d0 [ 274.609901][ T7047] ? kvasprintf_const+0xe1/0x240 [ 274.609924][ T7047] kobject_set_name_vargs+0x61/0x110 [ 274.609941][ T7047] dev_set_name+0xe2/0x140 [ 274.609962][ T7047] ? __pfx_dev_set_name+0x10/0x10 [ 274.609980][ T7047] ? nfc_allocate_device+0x129/0x560 [ 274.609993][ T7047] ? nfc_allocate_device+0x129/0x560 [ 274.610011][ T7047] nfc_allocate_device+0x1d6/0x560 [ 274.610028][ T7047] nci_allocate_device+0x1da/0x380 [ 274.610045][ T7047] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 274.610059][ T7047] virtual_ncidev_open+0x75/0x190 [ 274.610074][ T7047] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 274.610087][ T7047] misc_open+0x2de/0x350 [ 274.610104][ T7047] chrdev_open+0x4dc/0x600 [ 274.610128][ T7047] ? __pfx_chrdev_open+0x10/0x10 [ 274.610148][ T7047] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 274.610172][ T7047] ? __pfx_chrdev_open+0x10/0x10 [ 274.610192][ T7047] do_dentry_open+0x849/0x1420 [ 274.610221][ T7047] vfs_open+0x3b/0x350 [ 274.610240][ T7047] ? path_openat+0x142d/0x1d60 [ 274.610259][ T7047] path_openat+0x1448/0x1d60 [ 274.610288][ T7047] do_file_open+0x23e/0x4a0 [ 274.610309][ T7047] ? __pfx_do_file_open+0x10/0x10 [ 274.610342][ T7047] ? alloc_fd+0x654/0x6d0 [ 274.610362][ T7047] do_sys_openat2+0x115/0x200 [ 274.610383][ T7047] ? __se_sys_futex+0x3a8/0x450 [ 274.610396][ T7047] ? __pfx_do_sys_openat2+0x10/0x10 [ 274.610421][ T7047] ? rcu_is_watching+0x16/0xb0 [ 274.610445][ T7047] __x64_sys_openat+0x138/0x170 [ 274.610461][ T7047] do_syscall_64+0x166/0x520 [ 274.610473][ T7047] ? trace_irq_disable+0x3b/0x140 [ 274.610491][ T7047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.610505][ T7047] ? clear_bhb_loop+0x70/0xc0 [ 274.610522][ T7047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.610536][ T7047] RIP: 0033:0x7f7cf785e159 [ 274.610548][ T7047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.610560][ T7047] RSP: 002b:00007f7cf5ab6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 274.610575][ T7047] RAX: ffffffffffffffda RBX: 00007f7cf7ae5fa0 RCX: 00007f7cf785e159 [ 274.610586][ T7047] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 274.610595][ T7047] RBP: 00007f7cf78f506b R08: 0000000000000000 R09: 0000000000000000 [ 274.610604][ T7047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.610612][ T7047] R13: 00007f7cf7ae6038 R14: 00007f7cf7ae5fa0 R15: 00007fff34a3e978 [ 274.610633][ T7047] [ 275.057159][ T7056] netlink: 'syz.3.355': attribute type 10 has an invalid length. [ 275.179722][ T7059] netlink: 60 bytes leftover after parsing attributes in process `syz.4.356'. [ 276.156092][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.847007][ T5575] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 277.121407][ T5594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.866082][ T7075] netlink: 148 bytes leftover after parsing attributes in process `syz.4.360'. [ 278.044861][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.578630][ T5575] usb 1-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 278.634957][ T5575] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 278.634992][ T5575] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.635018][ T5575] usb 1-1: config 0 interface 0 has no altsetting 0 [ 278.635048][ T5575] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.862449][ T7085] IPVS: set_ctl: invalid protocol: 47 172.30.0.3:21 [ 279.052826][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.588684][ T5575] usb 1-1: config 0 descriptor?? [ 279.602145][ T5575] usb 1-1: can't set config #0, error -71 [ 279.631622][ T5575] usb 1-1: USB disconnect, device number 12 [ 279.931556][ T7095] netlink: 43 bytes leftover after parsing attributes in process `syz.3.367'. [ 280.179850][ T5576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.216333][ T5594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.473612][ T7100] FAULT_INJECTION: forcing a failure. [ 280.473612][ T7100] name failslab, interval 1, probability 0, space 0, times 0 [ 280.473649][ T7100] CPU: 0 UID: 0 PID: 7100 Comm: syz.0.369 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 280.473679][ T7100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 280.473693][ T7100] Call Trace: [ 280.473702][ T7100] [ 280.473712][ T7100] dump_stack_lvl+0xe8/0x150 [ 280.473749][ T7100] should_fail_ex+0x46b/0x600 [ 280.473784][ T7100] should_failslab+0xa8/0x100 [ 280.473820][ T7100] ? __pfx_nci_transceive+0x10/0x10 [ 280.473848][ T7100] __kmalloc_cache_noprof+0xa1/0x680 [ 280.473879][ T7100] ? nfc_allocate_device+0x129/0x560 [ 280.473899][ T7100] ? nfc_allocate_device+0x129/0x560 [ 280.473926][ T7100] ? __pfx_nci_transceive+0x10/0x10 [ 280.473970][ T7100] nfc_allocate_device+0x129/0x560 [ 280.473991][ T7100] ? __init_swait_queue_head+0xa8/0x150 [ 280.474015][ T7100] nci_allocate_device+0x1da/0x380 [ 280.474039][ T7100] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 280.474061][ T7100] virtual_ncidev_open+0x75/0x190 [ 280.474083][ T7100] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 280.474103][ T7100] misc_open+0x2de/0x350 [ 280.474128][ T7100] chrdev_open+0x4dc/0x600 [ 280.474159][ T7100] ? __pfx_chrdev_open+0x10/0x10 [ 280.474189][ T7100] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 280.474222][ T7100] ? __pfx_chrdev_open+0x10/0x10 [ 280.474250][ T7100] do_dentry_open+0x849/0x1420 [ 280.474290][ T7100] vfs_open+0x3b/0x350 [ 280.474317][ T7100] ? path_openat+0x142d/0x1d60 [ 280.474343][ T7100] path_openat+0x1448/0x1d60 [ 280.474385][ T7100] do_file_open+0x23e/0x4a0 [ 280.474416][ T7100] ? __pfx_do_file_open+0x10/0x10 [ 280.474461][ T7100] ? alloc_fd+0x654/0x6d0 [ 280.474490][ T7100] do_sys_openat2+0x115/0x200 [ 280.474520][ T7100] ? __se_sys_futex+0x3a8/0x450 [ 280.474541][ T7100] ? __pfx_do_sys_openat2+0x10/0x10 [ 280.474575][ T7100] ? rcu_is_watching+0x16/0xb0 [ 280.474608][ T7100] __x64_sys_openat+0x138/0x170 [ 280.474631][ T7100] do_syscall_64+0x166/0x520 [ 280.474653][ T7100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.474674][ T7100] ? clear_bhb_loop+0x70/0xc0 [ 280.474699][ T7100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.474720][ T7100] RIP: 0033:0x7f7cf785e159 [ 280.474739][ T7100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.474758][ T7100] RSP: 002b:00007f7cf5ab6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 280.474781][ T7100] RAX: ffffffffffffffda RBX: 00007f7cf7ae5fa0 RCX: 00007f7cf785e159 [ 280.474797][ T7100] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 280.474812][ T7100] RBP: 00007f7cf78f506b R08: 0000000000000000 R09: 0000000000000000 [ 280.474825][ T7100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.474838][ T7100] R13: 00007f7cf7ae6038 R14: 00007f7cf7ae5fa0 R15: 00007fff34a3e978 [ 280.474869][ T7100] [ 280.855147][ T5594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.286800][ T5600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.113644][ T7106] netlink: 148 bytes leftover after parsing attributes in process `syz.1.370'. [ 282.461355][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.022579][ T7113] netlink: 'syz.2.371': attribute type 10 has an invalid length. [ 283.303846][ T5594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.538336][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.075616][ T7127] IPVS: set_ctl: invalid protocol: 47 172.30.0.2:21 [ 284.452156][ T5724] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 284.581793][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.614085][ T5724] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 284.615356][ T5724] usb 4-1: config 1 has an invalid interface number: 27 but max is 1 [ 284.615381][ T5724] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.615401][ T5724] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 284.615422][ T5724] usb 4-1: config 1 has no interface number 2 [ 284.615488][ T5724] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 284.615513][ T5724] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 284.615539][ T5724] usb 4-1: config 1 interface 1 has no altsetting 0 [ 284.618214][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.618240][ T5724] usb 4-1: Product: syz [ 284.618255][ T5724] usb 4-1: Manufacturer: syz [ 284.618270][ T5724] usb 4-1: SerialNumber: syz [ 285.266541][ T7129] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 285.502719][ T7145] netlink: 43 bytes leftover after parsing attributes in process `syz.2.382'. [ 285.773390][ T5576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.802702][ T7129] raw-gadget.0 gadget.3: fail, usb_ep_queue returned -108 [ 285.934284][ T5724] usb 4-1: reset high-speed USB device number 6 using dummy_hcd [ 286.123360][ T37] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 286.380250][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.833092][ T5600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.869452][ T37] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 287.003200][ T37] usb 5-1: config 1 has an invalid interface number: 27 but max is 1 [ 287.003233][ T37] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.003254][ T37] usb 5-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 287.003276][ T37] usb 5-1: config 1 has no interface number 2 [ 287.003344][ T37] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 287.003379][ T37] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 287.003406][ T37] usb 5-1: config 1 interface 1 has no altsetting 0 [ 287.501196][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.501243][ T37] usb 5-1: Product: syz [ 287.501260][ T37] usb 5-1: Manufacturer: syz [ 287.501275][ T37] usb 5-1: SerialNumber: syz [ 290.411558][ T5594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.495927][ T5724] speedtch 4-1:1.0: speedtch_bind: device reset failed (-19)! [ 290.496109][ T5724] usb 4-1: selecting invalid altsetting 0 [ 290.496142][ T5724] speedtch 4-1:1.0: usbatm_usb_probe: bind failed: -19! [ 290.613999][ T5724] speedtch 4-1:1.27: speedtch_bind: setting interface to 1 failed (-19)! [ 290.615043][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.618640][ T5594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.658306][ T7163] IPVS: set_ctl: invalid protocol: 47 172.30.0.4:21 [ 290.719203][ T37] speedtch 5-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 290.719263][ T37] usb 5-1: selecting invalid altsetting 0 [ 290.719293][ T37] speedtch 5-1:1.0: usbatm_usb_probe: bind failed: -71! [ 290.719346][ T37] speedtch 5-1:1.0: probe with driver speedtch failed with error -71 [ 290.773040][ T5724] usb 4-1: selecting invalid altsetting 0 [ 290.773079][ T5724] speedtch 4-1:1.27: usbatm_usb_probe: bind failed: -19! [ 290.816074][ T37] speedtch 5-1:1.27: speedtch_bind: setting interface to 1 failed (-71)! [ 290.819529][ T5724] usb 4-1: selecting invalid altsetting 0 [ 290.819560][ T5724] usbtest 4-1:1.1: probe with driver usbtest failed with error -22 [ 290.820051][ T5724] usb 4-1: selecting invalid altsetting 0 [ 290.820081][ T5724] speedtch 4-1:1.1: probe with driver speedtch failed with error -22 [ 290.876036][ T37] usb 5-1: selecting invalid altsetting 0 [ 290.876079][ T37] speedtch 5-1:1.27: usbatm_usb_probe: bind failed: -71! [ 290.876146][ T37] speedtch 5-1:1.27: probe with driver speedtch failed with error -71 [ 290.933286][ T5724] usb 4-1: USB disconnect, device number 6 [ 290.948890][ T37] usb 5-1: selecting invalid altsetting 0 [ 290.948923][ T37] usbtest 5-1:1.1: probe with driver usbtest failed with error -22 [ 290.985477][ T37] usb 5-1: selecting invalid altsetting 0 [ 290.985507][ T37] speedtch 5-1:1.1: probe with driver speedtch failed with error -22 [ 291.029393][ T37] usb 5-1: USB disconnect, device number 13 [ 292.120830][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.162434][ T7188] IPVS: set_ctl: invalid protocol: 47 172.30.0.3:21 [ 292.329343][ T7193] netlink: 43 bytes leftover after parsing attributes in process `syz.0.396'. [ 293.343513][ T5594] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 293.526625][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.798159][ T5575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.083479][ T37] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 294.258988][ T37] usb 5-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 294.306048][ T37] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 294.306216][ T37] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 294.306257][ T37] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 294.306311][ T37] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 294.306364][ T37] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 24929, setting to 1024 [ 294.306421][ T37] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 294.306478][ T37] usb 5-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 294.538339][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.538399][ T37] usb 5-1: Product: syz [ 294.538443][ T37] usb 5-1: Manufacturer: syz [ 294.538458][ T37] usb 5-1: SerialNumber: syz [ 294.575828][ T5576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.032901][ T7205] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 295.037629][ T7205] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 295.100366][ T7205] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 295.101583][ T7205] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 295.251133][ T37] keyspan 5-1:1.0: Keyspan 1 port adapter converter detected [ 295.441254][ T37] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 295.615141][ T37] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 82 [ 295.616755][ T37] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 295.859807][ T37] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 295.897368][ T5576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.930720][ T37] usb 5-1: USB disconnect, device number 14 [ 295.958077][ T5594] usb 3-1: device descriptor read/all, error -71 [ 297.966315][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.107112][ T5600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.155924][ T37] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 298.159890][ T37] keyspan 5-1:1.0: device disconnected [ 298.194274][ T7219] FAULT_INJECTION: forcing a failure. [ 298.194274][ T7219] name failslab, interval 1, probability 0, space 0, times 0 [ 298.194306][ T7219] CPU: 0 UID: 0 PID: 7219 Comm: syz.2.405 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 298.194329][ T7219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 298.194342][ T7219] Call Trace: [ 298.194350][ T7219] [ 298.194358][ T7219] dump_stack_lvl+0xe8/0x150 [ 298.194394][ T7219] should_fail_ex+0x46b/0x600 [ 298.194428][ T7219] should_failslab+0xa8/0x100 [ 298.194462][ T7219] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 298.194494][ T7219] ? kobject_set_name_vargs+0x61/0x110 [ 298.194517][ T7219] ? kobject_set_name_vargs+0x61/0x110 [ 298.194548][ T7219] kvasprintf+0xeb/0x1a0 [ 298.194581][ T7219] ? __pfx_kvasprintf+0x10/0x10 [ 298.194611][ T7219] ? rcu_is_watching+0x16/0xb0 [ 298.194642][ T7219] ? kfree+0x4d/0x6d0 [ 298.194668][ T7219] ? kvasprintf_const+0xe1/0x240 [ 298.194703][ T7219] kobject_set_name_vargs+0x61/0x110 [ 298.194730][ T7219] dev_set_name+0xe2/0x140 [ 298.194769][ T7219] ? __pfx_dev_set_name+0x10/0x10 [ 298.194796][ T7219] ? nfc_allocate_device+0x129/0x560 [ 298.194816][ T7219] ? nfc_allocate_device+0x129/0x560 [ 298.194843][ T7219] nfc_allocate_device+0x1d6/0x560 [ 298.194869][ T7219] nci_allocate_device+0x1da/0x380 [ 298.194895][ T7219] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 298.194916][ T7219] virtual_ncidev_open+0x75/0x190 [ 298.194939][ T7219] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 298.194959][ T7219] misc_open+0x2de/0x350 [ 298.195005][ T7219] chrdev_open+0x4dc/0x600 [ 298.195036][ T7219] ? __pfx_chrdev_open+0x10/0x10 [ 298.195066][ T7219] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 298.195099][ T7219] ? __pfx_chrdev_open+0x10/0x10 [ 298.195128][ T7219] do_dentry_open+0x849/0x1420 [ 298.195167][ T7219] vfs_open+0x3b/0x350 [ 298.195196][ T7219] ? path_openat+0x142d/0x1d60 [ 298.195223][ T7219] path_openat+0x1448/0x1d60 [ 298.195267][ T7219] do_file_open+0x23e/0x4a0 [ 298.195298][ T7219] ? __pfx_do_file_open+0x10/0x10 [ 298.195346][ T7219] ? alloc_fd+0x654/0x6d0 [ 298.195376][ T7219] do_sys_openat2+0x115/0x200 [ 298.195406][ T7219] ? __se_sys_futex+0x3a8/0x450 [ 298.195427][ T7219] ? __pfx_do_sys_openat2+0x10/0x10 [ 298.195463][ T7219] ? rcu_is_watching+0x16/0xb0 [ 298.195497][ T7219] __x64_sys_openat+0x138/0x170 [ 298.195521][ T7219] do_syscall_64+0x166/0x520 [ 298.195540][ T7219] ? trace_irq_disable+0x3b/0x140 [ 298.195566][ T7219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.195587][ T7219] ? clear_bhb_loop+0x70/0xc0 [ 298.195611][ T7219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.195632][ T7219] RIP: 0033:0x7faa3ae2e159 [ 298.195650][ T7219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.195668][ T7219] RSP: 002b:00007faa39086028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 298.195691][ T7219] RAX: ffffffffffffffda RBX: 00007faa3b0b5fa0 RCX: 00007faa3ae2e159 [ 298.195706][ T7219] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 298.195721][ T7219] RBP: 00007faa3aec506b R08: 0000000000000000 R09: 0000000000000000 [ 298.195734][ T7219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.195754][ T7219] R13: 00007faa3b0b6038 R14: 00007faa3b0b5fa0 R15: 00007ffdddaab338 [ 298.195786][ T7219] [ 299.803462][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.877138][ T7231] netlink: 'syz.1.408': attribute type 2 has an invalid length. [ 299.990139][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.397831][ T7241] netlink: 43 bytes leftover after parsing attributes in process `syz.2.413'. [ 300.716760][ T37] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 300.815883][ T5576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.886812][ T7246] ALSA: mixer_oss: invalid OSS volume '' [ 300.904081][ T37] usb 4-1: Using ep0 maxpacket: 8 [ 300.904948][ T37] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 300.907496][ T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 300.907526][ T37] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 300.907564][ T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.996903][ T37] usb 4-1: config 0 descriptor?? [ 301.068240][ T1237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.221128][ T7239] batadv_slave_1: entered promiscuous mode [ 301.230047][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.414'. [ 301.230612][ T7239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.436087][ T7239] batadv_slave_1 (unregistering): left promiscuous mode [ 301.436391][ T7239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.436543][ T7251] IPVS: set_ctl: invalid protocol: 47 172.30.0.3:21 [ 301.631286][ T37] lenovo 0003:17EF:6047.0006: unknown main item tag 0x5 [ 301.631368][ T37] lenovo 0003:17EF:6047.0006: unknown main item tag 0x3 [ 301.631396][ T37] lenovo 0003:17EF:6047.0006: reserved main item tag 0xd [ 301.631431][ T37] lenovo 0003:17EF:6047.0006: collection stack underflow [ 301.631454][ T37] lenovo 0003:17EF:6047.0006: item 0 1 0 12 parsing failed [ 301.633361][ T37] lenovo 0003:17EF:6047.0006: hid_parse failed [ 301.633429][ T37] lenovo 0003:17EF:6047.0006: probe with driver lenovo failed with error -22 [ 301.855388][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.584970][ T5856] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 302.745991][ T5856] usb 3-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 302.752634][ T5856] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 302.752693][ T5856] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 302.752721][ T5856] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 302.752745][ T5856] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 302.752769][ T5856] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 24929, setting to 1024 [ 302.752795][ T5856] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 302.752817][ T5856] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 302.762125][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.762152][ T5856] usb 3-1: Product: syz [ 302.762168][ T5856] usb 3-1: Manufacturer: syz [ 302.762185][ T5856] usb 3-1: SerialNumber: syz [ 302.878616][ T7262] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 302.878949][ T7262] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 302.879227][ T7262] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 302.879396][ T7262] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 302.895133][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.943338][ T5856] keyspan 3-1:1.0: Keyspan 1 port adapter converter detected [ 302.944020][ T5856] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 302.969342][ T5856] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 82 [ 302.969457][ T5856] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 303.006376][ T5856] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 303.109381][ T5940] usb 3-1: USB disconnect, device number 14 [ 303.325382][ T7268] IPVS: set_ctl: invalid protocol: 29 100.1.1.0:20003 [ 303.628549][ T5940] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 303.757072][ T5940] keyspan 3-1:1.0: device disconnected [ 303.940101][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.232927][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.827290][ T37] usb 4-1: USB disconnect, device number 7 [ 304.851538][ T7262] Process accounting resumed [ 304.974800][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.284873][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.304365][ T7276] netlink: 'syz.2.423': attribute type 2 has an invalid length. [ 307.031382][ T7289] IPVS: set_ctl: invalid protocol: 29 100.1.1.0:20003 [ 307.535862][ T5576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.772009][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.575487][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.545307][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.577366][ T5576] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 310.490123][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.578547][ T5576] usb 2-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 311.582527][ T1237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.604146][ T5576] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 311.604179][ T5576] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 311.604204][ T5576] usb 2-1: config 0 interface 0 has no altsetting 0 [ 311.604234][ T5576] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.677340][ T5576] usb 2-1: config 0 descriptor?? [ 311.726919][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.847415][ T7310] FAULT_INJECTION: forcing a failure. [ 311.847415][ T7310] name failslab, interval 1, probability 0, space 0, times 0 [ 311.847449][ T7310] CPU: 1 UID: 0 PID: 7310 Comm: syz.4.424 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 311.847475][ T7310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 311.847487][ T7310] Call Trace: [ 311.847495][ T7310] [ 311.847503][ T7310] dump_stack_lvl+0xe8/0x150 [ 311.847537][ T7310] should_fail_ex+0x46b/0x600 [ 311.847577][ T7310] should_failslab+0xa8/0x100 [ 311.847609][ T7310] ? do_getname+0x2e/0x250 [ 311.847639][ T7310] kmem_cache_alloc_noprof+0x9e/0x690 [ 311.847666][ T7310] ? do_getname+0x2e/0x250 [ 311.847700][ T7310] do_getname+0x2e/0x250 [ 311.847728][ T7310] ? user_path_at+0x1e/0x160 [ 311.847752][ T7310] user_path_at+0x2a/0x160 [ 311.847778][ T7310] __se_sys_mount+0x2dc/0x420 [ 311.847804][ T7310] ? __pfx___se_sys_mount+0x10/0x10 [ 311.847830][ T7310] ? __x64_sys_mount+0x20/0xc0 [ 311.847853][ T7310] do_syscall_64+0x166/0x520 [ 311.847874][ T7310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.847896][ T7310] ? clear_bhb_loop+0x70/0xc0 [ 311.847921][ T7310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.847941][ T7310] RIP: 0033:0x7fee42a3e159 [ 311.847960][ T7310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.847979][ T7310] RSP: 002b:00007fee40c96028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 311.848001][ T7310] RAX: ffffffffffffffda RBX: 00007fee42cc5fa0 RCX: 00007fee42a3e159 [ 311.848017][ T7310] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000000 [ 311.848030][ T7310] RBP: 00007fee42ad506b R08: 0000000000000000 R09: 0000000000000000 [ 311.848043][ T7310] R10: 0000000001200810 R11: 0000000000000246 R12: 0000000000000000 [ 311.848054][ T7310] R13: 00007fee42cc6038 R14: 00007fee42cc5fa0 R15: 00007ffd77880ac8 [ 311.848084][ T7310] [ 311.872225][ T37] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 312.075980][ T5576] usbhid 2-1:0.0: can't add hid device: -71 [ 312.076100][ T5576] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 312.109194][ T5576] usb 2-1: USB disconnect, device number 12 [ 312.143369][ T37] usb 3-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 312.157346][ T37] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 312.157396][ T37] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 312.157422][ T37] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 312.157444][ T37] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 312.157467][ T37] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 24929, setting to 1024 [ 312.157489][ T37] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 312.157518][ T37] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 312.177377][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.177400][ T37] usb 3-1: Product: syz [ 312.177414][ T37] usb 3-1: Manufacturer: syz [ 312.177429][ T37] usb 3-1: SerialNumber: syz [ 312.277474][ T7306] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 312.277586][ T7306] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 312.277692][ T7306] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 312.277833][ T7306] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 312.286227][ T37] keyspan 3-1:1.0: Keyspan 1 port adapter converter detected [ 312.305471][ T37] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 312.333006][ T37] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 82 [ 312.333135][ T37] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 312.357055][ T37] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 312.532075][ T7321] netlink: 43 bytes leftover after parsing attributes in process `syz.1.437'. [ 312.926948][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.959488][ T5576] usb 3-1: USB disconnect, device number 15 [ 313.001071][ T5576] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 313.004610][ T7316] netlink: 'syz.3.436': attribute type 2 has an invalid length. [ 313.027908][ T5576] keyspan 3-1:1.0: device disconnected [ 313.442584][ T7327] netlink: 60 bytes leftover after parsing attributes in process `syz.3.440'. [ 313.566527][ T7332] netlink: 60 bytes leftover after parsing attributes in process `syz.4.442'. [ 314.655967][ T5594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.766637][ T5600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.778536][ T5600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.645906][ T5600] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 316.922168][ T5576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.942367][ T5600] usb 3-1: Using ep0 maxpacket: 16 [ 316.943195][ T5600] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 318.129089][ T5600] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 318.129171][ T5600] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 318.129310][ T5600] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 318.129422][ T5600] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 318.129495][ T5600] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 318.129569][ T5600] usb 3-1: config 0 has no interface number 0 [ 318.328408][ T5600] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 318.372648][ T1237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.373711][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.373799][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.391016][ T5600] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 318.391048][ T5600] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 318.391087][ T5600] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 318.391114][ T5600] usb 3-1: config 0 interface 125 has no altsetting 0 [ 318.391131][ T5600] usb 3-1: config 0 interface 125 has no altsetting 2 [ 318.501951][ T5576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.658639][ T5594] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 318.757906][ T5600] usb 3-1: string descriptor 0 read error: -71 [ 318.758064][ T5600] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.784050][ T5600] usb 3-1: config 0 descriptor?? [ 318.784727][ T5600] usb 3-1: can't set config #0, error -71 [ 318.801484][ T5600] usb 3-1: USB disconnect, device number 16 [ 318.809745][ T5594] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 318.836805][ T5594] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 318.836830][ T5594] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 318.836849][ T5594] usb 1-1: config 179 has no interface number 0 [ 318.836889][ T5594] usb 1-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 318.836928][ T5594] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.085888][ T7366] netlink: 43 bytes leftover after parsing attributes in process `syz.3.449'. [ 319.156148][ T5594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.537998][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.586742][ T7370] netlink: 'syz.2.450': attribute type 2 has an invalid length. [ 320.116573][ T5940] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 320.220486][ T7357] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 320.347042][ T5856] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 320.371786][ T5600] usb 1-1: USB disconnect, device number 13 [ 320.387811][ T5940] usb 3-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 320.391576][ T5940] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 320.391637][ T5940] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 320.391662][ T5940] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 320.391686][ T5940] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 320.391708][ T5940] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 24929, setting to 1024 [ 320.391732][ T5940] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 320.391753][ T5940] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 320.396060][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.396084][ T5940] usb 3-1: Product: syz [ 320.396099][ T5940] usb 3-1: Manufacturer: syz [ 320.396114][ T5940] usb 3-1: SerialNumber: syz [ 320.522830][ T5856] usb 4-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 320.545529][ T5856] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 320.545580][ T5856] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 320.545604][ T5856] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 320.545627][ T5856] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 320.545651][ T5856] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 24929, setting to 1024 [ 320.545676][ T5856] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 320.545699][ T5856] usb 4-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 320.578131][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.650974][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.651001][ T5856] usb 4-1: Product: syz [ 320.651015][ T5856] usb 4-1: Manufacturer: syz [ 320.651030][ T5856] usb 4-1: SerialNumber: syz [ 320.699034][ T7374] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 320.699148][ T7374] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 320.699257][ T7374] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 320.699363][ T7374] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 320.758130][ T5940] keyspan 3-1:1.0: Keyspan 1 port adapter converter detected [ 320.758793][ T5940] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 320.786011][ T5940] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 82 [ 320.786122][ T5940] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 320.806203][ T5940] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 320.808722][ T7376] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 320.812062][ T7376] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 320.839482][ T7376] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 320.845233][ T7376] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 320.917956][ T5856] keyspan 4-1:1.0: Keyspan 1 port adapter converter detected [ 320.918731][ T5856] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 320.944808][ T5856] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 82 [ 320.944926][ T5856] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 320.974293][ T5856] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB1 [ 321.095310][ T5856] usb 3-1: USB disconnect, device number 17 [ 321.173481][ T5594] usb 4-1: USB disconnect, device number 8 [ 321.203740][ T5856] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 321.216408][ T5597] Bluetooth: hci0: command 0x0406 tx timeout [ 321.227425][ T5856] keyspan 3-1:1.0: device disconnected [ 321.386803][ T1237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.426695][ T5594] keyspan_1 ttyUSB1: Keyspan 1 port adapter converter now disconnected from ttyUSB1 [ 321.429354][ T5594] keyspan 4-1:1.0: device disconnected [ 321.589351][ T7382] FAULT_INJECTION: forcing a failure. [ 321.589351][ T7382] name failslab, interval 1, probability 0, space 0, times 0 [ 321.589387][ T7382] CPU: 1 UID: 0 PID: 7382 Comm: syz.1.448 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 321.589409][ T7382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 321.589422][ T7382] Call Trace: [ 321.589429][ T7382] [ 321.589438][ T7382] dump_stack_lvl+0xe8/0x150 [ 321.589472][ T7382] should_fail_ex+0x46b/0x600 [ 321.589503][ T7382] should_failslab+0xa8/0x100 [ 321.589536][ T7382] ? do_getname+0x2e/0x250 [ 321.589566][ T7382] kmem_cache_alloc_noprof+0x9e/0x690 [ 321.589593][ T7382] ? do_getname+0x2e/0x250 [ 321.589629][ T7382] do_getname+0x2e/0x250 [ 321.589657][ T7382] ? user_path_at+0x1e/0x160 [ 321.589681][ T7382] user_path_at+0x2a/0x160 [ 321.589706][ T7382] __se_sys_mount+0x2dc/0x420 [ 321.589734][ T7382] ? __pfx___se_sys_mount+0x10/0x10 [ 321.589761][ T7382] ? __x64_sys_mount+0x20/0xc0 [ 321.589784][ T7382] do_syscall_64+0x166/0x520 [ 321.589804][ T7382] ? trace_irq_disable+0x3b/0x140 [ 321.589832][ T7382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.589852][ T7382] ? clear_bhb_loop+0x70/0xc0 [ 321.589877][ T7382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.589896][ T7382] RIP: 0033:0x7fd0dd99e159 [ 321.589914][ T7382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.589932][ T7382] RSP: 002b:00007fd0dbbf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 321.589954][ T7382] RAX: ffffffffffffffda RBX: 00007fd0ddc25fa0 RCX: 00007fd0dd99e159 [ 321.589973][ T7382] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000000 [ 321.589986][ T7382] RBP: 00007fd0dda3506b R08: 0000000000000000 R09: 0000000000000000 [ 321.589999][ T7382] R10: 0000000001200810 R11: 0000000000000246 R12: 0000000000000000 [ 321.590013][ T7382] R13: 00007fd0ddc26038 R14: 00007fd0ddc25fa0 R15: 00007ffe3a605848 [ 321.590044][ T7382] [ 321.622563][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.014578][ T7383] IPVS: set_ctl: invalid protocol: 29 100.1.1.0:20003 [ 322.658426][ T5576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.697412][ T5576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.452847][ T5856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.691961][ T7391] netlink: 'syz.2.456': attribute type 2 has an invalid length. [ 327.162768][ T7407] netlink: 'syz.0.461': attribute type 2 has an invalid length. [ 327.717592][ T5600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.718723][ T1237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.047437][ T7413] netlink: 43 bytes leftover after parsing attributes in process `syz.4.462'. [ 329.209832][ T5594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.226577][ T7420] ALSA: mixer_oss: invalid OSS volume '' [ 330.107628][ T5600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.317444][ T5594] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 330.322145][ T7430] netlink: 20 bytes leftover after parsing attributes in process `syz.4.466'. [ 331.858239][ T1237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.188122][ T5594] usb 3-1: device not accepting address 18, error -71 [ 332.778127][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.893210][ T7438] netlink: 60 bytes leftover after parsing attributes in process `syz.2.469'. [ 332.907816][ T5940] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 333.157823][ T5940] usb 1-1: Using ep0 maxpacket: 8 [ 333.158596][ T5940] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 333.160017][ T5940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 333.160048][ T5940] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 333.160086][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.848477][ T5940] usb 1-1: config 0 descriptor?? [ 334.074966][ T7441] batadv_slave_1: entered promiscuous mode [ 334.108802][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.467'. [ 334.108938][ T7441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.178292][ T5576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.263940][ T7441] batadv_slave_1 (unregistering): left promiscuous mode [ 334.264028][ T7441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.507003][ T5940] lenovo 0003:17EF:6047.0007: unknown main item tag 0x5 [ 334.507084][ T5940] lenovo 0003:17EF:6047.0007: unknown main item tag 0x3 [ 334.507112][ T5940] lenovo 0003:17EF:6047.0007: reserved main item tag 0xd [ 334.507147][ T5940] lenovo 0003:17EF:6047.0007: collection stack underflow [ 334.507169][ T5940] lenovo 0003:17EF:6047.0007: item 0 1 0 12 parsing failed [ 334.549056][ T5940] lenovo 0003:17EF:6047.0007: hid_parse failed [ 334.549128][ T5940] lenovo 0003:17EF:6047.0007: probe with driver lenovo failed with error -22 [ 334.898690][ T5594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.163918][ T7446] Process accounting paused [ 335.218936][ T6665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.397597][ T5575] usb 1-1: USB disconnect, device number 14 [ 335.609368][ T7452] IPVS: set_ctl: invalid protocol: 29 100.1.1.0:20003 [ 336.510126][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.551273][ T5576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.907160][ T7465] netlink: 43 bytes leftover after parsing attributes in process `syz.4.476'. [ 337.941250][ T5594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.339080][ T1237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.422304][ T7462] netlink: 'syz.1.475': attribute type 2 has an invalid length. [ 338.499811][ T6665] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 338.579196][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.669367][ T6665] usb 3-1: Using ep0 maxpacket: 8 [ 338.670934][ T6665] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 338.672789][ T6665] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 338.672852][ T6665] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 338.672895][ T6665] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.744463][ T6665] usb 3-1: config 0 descriptor?? [ 339.789196][ T7477] ALSA: mixer_oss: invalid OSS volume '' [ 340.489044][ T6665] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 340.489081][ T6665] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 340.489107][ T6665] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 340.489132][ T6665] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 340.489158][ T6665] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 340.489183][ T6665] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 340.489208][ T6665] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 340.489233][ T6665] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 340.995021][ T5576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.998199][ T5594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.054892][ T6665] lenovo 0003:17EF:6047.0008: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 341.128733][ T5576] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 341.281877][ T5576] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 341.283148][ T5576] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 341.283172][ T5576] usb 2-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 341.283191][ T5576] usb 2-1: config 179 has no interface number 0 [ 341.283655][ T5576] usb 2-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 341.283711][ T5576] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.455242][ T6665] lenovo 0003:17EF:6047.0008: Failed to switch middle button: -71 [ 341.455744][ T6665] lenovo 0003:17EF:6047.0008: Fn-lock setting failed: -71 [ 341.456230][ T6665] lenovo 0003:17EF:6047.0008: Sensitivity setting failed: -71 [ 341.516243][ T6665] usb 3-1: USB disconnect, device number 20 [ 341.693053][ T7492] fido_id[7492]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 342.008039][ T7496] IPVS: set_ctl: invalid protocol: 29 100.1.1.0:20003 [ 342.051568][ T6665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.663760][ T7484] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 342.917561][ T6665] usb 2-1: USB disconnect, device number 13 [ 343.008996][ T5575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.069561][ T5576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.619157][ T5597] Bluetooth: hci0: command 0x0406 tx timeout [ 344.019934][ T5575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.116478][ T5576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.822488][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 344.862925][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 344.867079][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 344.886614][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 344.956227][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 345.142864][ T6665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.887960][ T7523] netlink: 'syz.1.489': attribute type 2 has an invalid length. [ 346.809994][ T6665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.059933][ T1237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.060311][ T5597] Bluetooth: hci5: command tx timeout [ 347.237820][ T7531] netlink: 43 bytes leftover after parsing attributes in process `syz.2.491'. [ 347.979805][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.034918][ T5575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.171360][ T5597] Bluetooth: hci5: command tx timeout [ 351.071805][ T5594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.232530][ T5597] Bluetooth: hci5: command tx timeout [ 351.540153][ T6665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.559422][ T6717] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.150028][ T5575] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 352.309998][ T5575] usb 5-1: Using ep0 maxpacket: 8 [ 352.311146][ T5575] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 352.312438][ T5575] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 352.312507][ T5575] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 352.312562][ T5575] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.396981][ T5575] usb 5-1: config 0 descriptor?? [ 352.424226][ T1237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.683922][ T5594] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 353.091163][ T5594] usb 2-1: Using ep0 maxpacket: 16 [ 353.099598][ T5594] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 353.301121][ T5597] Bluetooth: hci5: command tx timeout [ 353.468719][ T5594] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 353.468862][ T5594] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 353.468916][ T5594] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 353.469032][ T5594] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 353.469097][ T5594] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 353.469206][ T5594] usb 2-1: config 0 has no interface number 0 [ 353.469475][ T5594] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 353.469632][ T5594] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 353.469753][ T5594] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 353.469798][ T5594] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 353.470237][ T5594] usb 2-1: config 0 interface 125 has no altsetting 0 [ 353.470417][ T5594] usb 2-1: config 0 interface 125 has no altsetting 2 [ 354.106188][ T1237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.144613][ T5594] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.144671][ T5594] usb 2-1: Product: syz [ 354.144855][ T5594] usb 2-1: Manufacturer: syz [ 354.145027][ T5594] usb 2-1: SerialNumber: syz [ 354.240907][ T5576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.268959][ T5594] usb 2-1: config 0 descriptor?? [ 354.313410][ T5594] usb 2-1: selecting invalid altsetting 2 [ 354.433206][ T5575] lenovo 0003:17EF:6047.0009: unknown main item tag 0x0 [ 354.433251][ T5575] lenovo 0003:17EF:6047.0009: unknown main item tag 0x0 [ 354.433494][ T5575] lenovo 0003:17EF:6047.0009: unknown main item tag 0x0 [ 354.433524][ T5575] lenovo 0003:17EF:6047.0009: unknown main item tag 0x0 [ 354.433547][ T5575] lenovo 0003:17EF:6047.0009: unknown main item tag 0x0 [ 354.433571][ T5575] lenovo 0003:17EF:6047.0009: unknown main item tag 0x0 [ 354.433806][ T5575] lenovo 0003:17EF:6047.0009: unknown main item tag 0x0 [ 354.433830][ T5575] lenovo 0003:17EF:6047.0009: unknown main item tag 0x0 [ 354.434617][ T6717] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.647778][ T5575] lenovo 0003:17EF:6047.0009: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 354.854238][ T5575] lenovo 0003:17EF:6047.0009: Failed to switch middle button: -71 [ 354.854788][ T5575] lenovo 0003:17EF:6047.0009: Fn-lock setting failed: -71 [ 354.896928][ T5575] lenovo 0003:17EF:6047.0009: Sensitivity setting failed: -71 [ 354.943607][ T5575] usb 5-1: USB disconnect, device number 15 [ 355.120703][ T7579] netlink: 43 bytes leftover after parsing attributes in process `syz.2.504'. [ 355.380668][ T5594] get_1284_register timeout [ 355.488235][ C0] usb 2-1: async_complete: urb error -104 [ 355.488721][ C0] usb 2-1: async_complete: urb error -104 [ 355.488921][ C0] usb 2-1: async_complete: urb error -104 [ 355.618223][ T6665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.703661][ T6717] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.920429][ T5594] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 356.071211][ T5594] usb 1-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 356.072601][ T5594] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 356.072650][ T5594] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 356.072675][ T5594] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 356.072699][ T5594] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 356.072721][ T5594] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 24929, setting to 1024 [ 356.072746][ T5594] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 356.072770][ T5594] usb 1-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 356.075105][ T5594] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.075128][ T5594] usb 1-1: Product: syz [ 356.075142][ T5594] usb 1-1: Manufacturer: syz [ 356.075156][ T5594] usb 1-1: SerialNumber: syz [ 356.195622][ T7585] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 356.195809][ T7585] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 356.195993][ T7585] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 356.196182][ T7585] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 356.234227][ T5575] usb 2-1: USB disconnect, device number 14 [ 356.285424][ T5594] keyspan 1-1:1.0: Keyspan 1 port adapter converter detected [ 356.286148][ T5594] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 357.165061][ T5594] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 82 [ 357.165174][ T5594] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 357.189200][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.211607][ T5594] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 357.259912][ T5576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.359796][ T5594] usb 1-1: USB disconnect, device number 15 [ 357.381373][ T5600] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 357.531928][ T5600] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 357.536026][ T5594] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 357.545063][ T5594] keyspan 1-1:1.0: device disconnected [ 357.591384][ T5600] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 357.591410][ T5600] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 357.591430][ T5600] usb 5-1: config 179 has no interface number 0 [ 357.591470][ T5600] usb 5-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 357.591511][ T5600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.663950][ T6717] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.091513][ T7591] ALSA: mixer_oss: invalid OSS volume '' [ 358.183133][ T5600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.183324][ T5600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.956099][ T7588] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 359.143135][ T5575] usb 5-1: USB disconnect, device number 16 [ 359.220953][ T5576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.633343][ T5575] kernel read not supported for file /vcsa (pid: 5575 comm: kworker/0:3) [ 359.777821][ T7617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.512'. [ 359.941705][ T5597] Bluetooth: hci0: command 0x0406 tx timeout [ 360.263934][ T5600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.687441][ T7628] netlink: 43 bytes leftover after parsing attributes in process `syz.1.516'. [ 361.257434][ T5594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.302287][ T5576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.023022][ T1237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.282926][ T7644] FAULT_INJECTION: forcing a failure. [ 362.282926][ T7644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.282985][ T7644] CPU: 1 UID: 0 PID: 7644 Comm: syz.1.518 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 362.283015][ T7644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 362.283033][ T7644] Call Trace: [ 362.283072][ T7644] [ 362.283134][ T7644] dump_stack_lvl+0xe8/0x150 [ 362.283283][ T7644] should_fail_ex+0x46b/0x600 [ 362.283353][ T7644] _copy_to_user+0x31/0xb0 [ 362.283399][ T7644] bpf_prog_test_run_raw_tp+0x604/0x840 [ 362.283505][ T7644] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 362.283563][ T7644] ? __fget_files+0x2a/0x420 [ 362.283621][ T7644] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 362.283649][ T7644] bpf_prog_test_run+0x2cb/0x340 [ 362.283707][ T7644] __sys_bpf+0xa22/0xd90 [ 362.283755][ T7644] ? __pfx___sys_bpf+0x10/0x10 [ 362.283791][ T7644] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 362.283883][ T7644] ? rt_mutex_slowunlock+0x219/0x460 [ 362.283938][ T7644] ? ksys_write+0x248/0x270 [ 362.283974][ T7644] ? __pfx_ksys_write+0x10/0x10 [ 362.284006][ T7644] __x64_sys_bpf+0xba/0xd0 [ 362.284037][ T7644] do_syscall_64+0x166/0x520 [ 362.284083][ T7644] ? trace_irq_disable+0x3b/0x140 [ 362.284128][ T7644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.284171][ T7644] ? clear_bhb_loop+0x70/0xc0 [ 362.284198][ T7644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.284225][ T7644] RIP: 0033:0x7fd0dd99e159 [ 362.284274][ T7644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.284294][ T7644] RSP: 002b:00007fd0dbbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 362.284353][ T7644] RAX: ffffffffffffffda RBX: 00007fd0ddc25fa0 RCX: 00007fd0dd99e159 [ 362.284370][ T7644] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 362.284385][ T7644] RBP: 00007fd0dbbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 362.284399][ T7644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.284412][ T7644] R13: 00007fd0ddc26038 R14: 00007fd0ddc25fa0 R15: 00007ffe3a605848 [ 362.284447][ T7644] [ 362.536503][ T6717] bridge_slave_1: left allmulticast mode [ 362.536668][ T6717] bridge_slave_1: left promiscuous mode [ 362.572640][ T6717] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.725843][ T6717] bridge_slave_0: left allmulticast mode [ 362.725877][ T6717] bridge_slave_0: left promiscuous mode [ 362.726098][ T6717] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.982322][ C0] BUG: sleeping function called from invalid context at net/core/sock.c:3839 [ 362.982348][ C0] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 16, name: ktimers/0 [ 362.982368][ C0] preempt_count: 0, expected: 0 [ 362.982380][ C0] RCU nest depth: 2, expected: 0 [ 362.982401][ C0] locks held by ktimers/0/16: 4, last CPU#0: [ 362.982492][ C0] #0: ffffffff8e059540 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 362.982645][ C0] #1: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 362.982719][ C0] #2: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb_core+0x33/0x2b0 [ 362.982848][ C0] #3: ffff888031bdc358 (sk_lock-AF_X25){+.+.}-{0:0}, at: x25_kill_by_neigh+0x134/0x2a0 [ 362.982976][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 362.983004][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 362.983018][ C0] Call Trace: [ 362.983028][ C0] [ 362.983037][ C0] dump_stack_lvl+0xe8/0x150 [ 362.983072][ C0] __might_resched+0x31b/0x470 [ 362.983121][ C0] lock_sock_nested+0x56/0x130 [ 362.983186][ C0] x25_kill_by_neigh+0x134/0x2a0 [ 362.983217][ C0] ? x25_kill_by_neigh+0x2b/0x2a0 [ 362.983253][ C0] x25_lapb_receive_frame+0x1b0/0xfb0 [ 362.983292][ C0] ? netif_receive_skb_core+0x33/0x2b0 [ 362.983322][ C0] ? netif_receive_skb_core+0x33/0x2b0 [ 362.983349][ C0] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 362.983386][ C0] netif_receive_skb_core+0x2a6/0x2b0 [ 362.983422][ C0] lapbeth_napi_poll+0x45/0x90 [ 362.983523][ C0] __napi_poll+0xae/0x550 [ 362.983583][ C0] net_rx_action+0x621/0xd70 [ 362.983631][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 362.983708][ C0] handle_softirqs+0x1da/0x6d0 [ 362.983753][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 362.983788][ C0] run_ktimerd+0x6a/0x100 [ 362.983824][ C0] smpboot_thread_fn+0x565/0xa70 [ 362.983862][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 362.983905][ C0] kthread+0x38b/0x470 [ 362.983929][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 362.983961][ C0] ? __pfx_kthread+0x10/0x10 [ 362.983987][ C0] ret_from_fork+0x514/0xb70 [ 362.984024][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 362.984048][ C0] ? __switch_to+0xc89/0x1420 [ 362.984100][ C0] ? __pfx_kthread+0x10/0x10 [ 362.984126][ C0] ret_from_fork_asm+0x1a/0x30 [ 362.984168][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 364.162614][ T6665] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 364.312020][ T6665] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 364.313503][ T6665] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 364.313540][ T6665] usb 2-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 364.313559][ T6665] usb 2-1: config 179 has no interface number 0 [ 364.313598][ T6665] usb 2-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 364.313637][ T6665] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.903503][ T6717] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.973916][ T6717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.996671][ T6717] bond0 (unregistering): Released all slaves [ 365.213360][ T7655] Process accounting resumed [ 365.585495][ T5856] usb 2-1: USB disconnect, device number 15 [ 365.760501][ T5247] 8021q: adding VLAN 0 to HW filter on device eth1 [ 367.203691][ T5247] 8021q: adding VLAN 0 to HW filter on device eth2 [ 367.661841][ T6717] hsr_slave_0: left promiscuous mode [ 367.701988][ T6717] hsr_slave_1: left promiscuous mode [ 367.703258][ T6717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.703342][ T6717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.822793][ T6717] veth1_vlan: left promiscuous mode [ 367.823126][ T6717] veth0_vlan: left promiscuous mode [ 368.403168][ T6717] team0 (unregistering): Port device team_slave_1 removed [ 368.456658][ T6717] team0 (unregistering): Port device team_slave_0 removed [ 368.685156][ T5247] 8021q: adding VLAN 0 to HW filter on device eth3 [ 369.173624][ T5247] 8021q: adding VLAN 0 to HW filter on device eth4 [ 369.949101][ T6717] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.268725][ T6717] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.514026][ T6717] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.786337][ T6717] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.416468][ T6717] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.575284][ T5247] 8021q: adding VLAN 0 to HW filter on device eth5 [ 371.852026][ T6717] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.145548][ T6717] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.188536][ T5247] 8021q: adding VLAN 0 to HW filter on device eth6 [ 372.440355][ T6717] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.631407][ T5247] 8021q: adding VLAN 0 to HW filter on device eth7