last executing test programs: 3m9.923501259s ago: executing program 1 (id=5309): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x1e, 0x2, 0x8, 0xfd, @time={0x5, 0x10001}, {0x0, 0x6}, {}, @note={0xe, 0x4b, 0x80, 0x7, 0xf9ef}}], 0x1c) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000a80)="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", 0x129, 0x8000, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000380)={r2}) sendmsg(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="0fb45d08452378df5d6a03dc4b19f9bf80181a7505577bdfa0351f170cd75a9fcffe92f68b1979439e6fc216c505875e60bdb28274a7468b2771c6c0a3f10131da92bfdb0ee16b00068418c05c7d8b3e9480a69cf645f9b3fba4341a69b7a5cdc760fa4c2a792573b28f4710d4dad623f777c9d4ecaea55cb374670c5937bdc8ebd65da6742743a18d2c30aca86256f00e2d319855680a7455b15368d2d61213b727e7e132e4da7c3364f001c436", 0xae}, {&(0x7f0000000740)="0a37ccb1985b149dd367f925a7fbece22526b2b7c54a8a18fe42cedf44fa22404e6e91f6a7340295c0b82a82751d1d58a05c66f24b7011a2a8f68fa4de6df02918d68579a5203f2a033abcfce39f91904e20270dbab759c8a9af96f7cb5294b2d9a29d61d59ae13c396cfc5049579401258305ff864e5da5dcf5f72d95e878a37a0b90189e47ad330626071339857079d0eca4480cb3028b3e4f0dcbe94ddfcd95a04e5beba22ae3cbe5dae52d204a425ffcd66849d919d333842dbf9c097b681c415aabf3ff4fc7533cbc2339e4027637086f88366f8a74e01452e140cec8cd94a6e966be0449c5c0a3f6d83fdef9995650a2", 0xf3}], 0x2}, 0xe5b208c6d65026c0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000004400050020010000000000000000000000000000000000022b0000000a000000fc010000000000000000000000000000000000000400"/176], 0xfc}}, 0x0) r7 = socket(0x2, 0x3, 0x6) bind$inet(r7, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0xa001, 0x880b, 0x8}}}}}, 0x0) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r8 = gettid() prlimit64(r8, 0x3, 0x0, 0x0) ptrace$getregset(0x4204, r8, 0x201, &(0x7f0000000900)={&(0x7f0000000840)=""/183, 0xb7}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000000)=""/29, &(0x7f0000000240)=0x1d) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000c3fb0000000000000000850000002f000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="16de470b455cde9bbb0d8e80ddc461c224d1a238dff9a43252d69b54e15f5ec8852953a0ad741365092b523f90a5b34ac1e4172da0ead4e7970bee22cf8cc049dd06233276c62c967ca3a8472270690a5e7dd0e6e1e0447752bc568046051f0b4f584763fe017703d93ee7e548441da5fc0d4d4c0adbc5fd6d0c62131d6dd10e20e6833b115c37db51185899278502efc389794603395c0da83c14fd781831fc03b17afd07e4b37654e4c200000000000000", 0x0, 0x9, 0x60000000, 0xef, 0x0, 0x0, 0x0}, 0x5a) sendto$inet(r7, 0x0, 0x0, 0x48890, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10) 3m9.51233513s ago: executing program 1 (id=5311): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe880000000000000000000000000201ff02000000000000000000000000000189009078000000002041"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x119) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f937cd8530410f3700000000", 0x8d, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000008000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="11000000040000000400000008"], 0x48) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x141, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) 3m8.311735533s ago: executing program 1 (id=5315): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@hyper}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000380)=""/59, 0x314000, 0x800, 0x4, 0x3}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900013000000000400004803c0001800b00010065787468647200002c00028008000740000000000500020000000000080003400000004a08000640000000010800044000"], 0x94}}, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0x1, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x9, 0x0, 0xfd, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000240)=0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x66, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8, 0x8010, 0xffffffffffffffff, 0x9ef47000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000004200)=[{{&(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="42668a3f1b635933c65e379aafc45e354f3f18b60a778883ecc53d4ba9b82b2720b397208d5a7a6fe67498e0d657d622a6fd12e0e5ab866e02aa446e30c1410cb8802ebc96bedb051e4821be82a9b279a3cbd5a8f01b44ad680ba3efaf866751e2"}, {&(0x7f0000000580)="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"}, {&(0x7f0000001580)="ef101676a97d5f05c4073b97a3213229514a1f101ac3bf636d1c823448b4f2b7229debf92d3fd5923ddce32a88477da0e65b54d88693b8229e38e50a0f55bd80f7914fc5d1faf63dd2d44416861bead55c528682abf4ab0ff1bf6c506e8e67d6e4f65fca98807600fdcd48b1440dd1783c96ad90bffca816122df6a0c4726334bfba999d99f2eb9542f5f690d65ee1d8df740494c7d88b00d9d483082527d8dfb707f4a97b1246664da4c90e97fb7e3f40f633b99abf4e24eae95034fdfa800340a872257cc7e9466c2b37c46031f17c"}, {&(0x7f0000001680)="da6ac2194884ab1635a25923289b65652e634247b0e7b943242f48a4993a966cba322f6139ec084545f47063c09fcdff3f4c47b569782d93df09379a990e480be028746da73cbee81ea60650f6ee6a8c71a22296b26ee93965f26213d726ac5b29f629bc1c1078739f59546130fe2ba9ec661d12fa7bc48813e20218dbda7e86ccaaec4df1019089019d1b93ce4bd1445648c535035b583b889b"}], 0x0, &(0x7f0000003a00)=[@cred], 0x0, 0x4000001}}], 0x373, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) 3m7.075667094s ago: executing program 1 (id=5319): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe880000000000000000000000000201ff02000000000000000000000000000189009078000000002041"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x119) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f937cd8530410f370000", 0x8b, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000008000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="11000000040000000400000008"], 0x48) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x141, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) 3m5.263093533s ago: executing program 1 (id=5324): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0) 3m5.116664752s ago: executing program 1 (id=5325): r0 = memfd_create(&(0x7f0000000300)='\xff\x00l\x1e\xa00x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x100a}, 0x2}) io_uring_enter(r4, 0x708, 0x41e3, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={r7, r8+10000000}, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x120, 0x0, 0x0) shutdown(r1, 0x0) fcntl$addseals(r0, 0x409, 0x2) r9 = socket(0x2b, 0x80801, 0x1) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) setsockopt$IPT_SO_SET_REPLACE(r9, 0x29, 0x40, 0x0, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r10, 0x4, 0x42000) syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r11, 0xffffffffffffffff, 0x0) r12 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r12, 0x40045731, 0x0) 2m49.895316957s ago: executing program 32 (id=5325): r0 = memfd_create(&(0x7f0000000300)='\xff\x00l\x1e\xa00x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x100a}, 0x2}) io_uring_enter(r4, 0x708, 0x41e3, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={r7, r8+10000000}, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x120, 0x0, 0x0) shutdown(r1, 0x0) fcntl$addseals(r0, 0x409, 0x2) r9 = socket(0x2b, 0x80801, 0x1) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) setsockopt$IPT_SO_SET_REPLACE(r9, 0x29, 0x40, 0x0, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r10, 0x4, 0x42000) syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r11, 0xffffffffffffffff, 0x0) r12 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r12, 0x40045731, 0x0) 11.529044514s ago: executing program 3 (id=5954): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@updpolicy={0x138, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x1a}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x20, 0x16, 0x0, 0xee01}, {0x0, 0x5, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast2, 0x4d3, 0x2b}, 0xa, @in6=@remote, 0x3507, 0x0, 0x3, 0x4, 0x8001, 0x529, 0x265}, {{@in=@loopback, 0x4d6, 0x93}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x3500, 0x0, 0x3, 0x9, 0xfffffffe, 0x1, 0x2}]}]}, 0x138}}, 0x0) (fail_nth: 5) 10.642622849s ago: executing program 3 (id=5956): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) 10.507628149s ago: executing program 5 (id=5957): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100, 0x0, 0x2e0}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x8, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x35a0}}) io_uring_enter(r0, 0x663e, 0x0, 0x2, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0xe0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f00000000c0)={0x80, 0xa, 0x303, 0x0, 0x0, 0x6e9, 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x3, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1b}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8}]}, @CTA_TUPLE_MASTER={0xc, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0xa7e4a71329317a60}, 0x20000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xcb, 0x9d, 0xce, 0x20, 0x3b53, 0xa0d3, 0xe3d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe5, 0x0, 0x0, 0x8, 0x1, 0x1}}]}}]}}, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 8.287948075s ago: executing program 0 (id=5960): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xce, 0xf8, 0xbd, 0x8, 0xe41, 0x4142, 0xbc76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x6a, 0x2f, 0xf6, 0x0, [], [{{0x9, 0x5, 0x1, 0x8, 0x200, 0xb, 0x8, 0x64}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) sendmsg(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0xed, 0x0, 0x774115df}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) open_by_handle_at(r5, &(0x7f0000000240)=ANY=[], 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0x1000, 0x118000}) sendmsg$nl_route(r3, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f00000004c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x54}}, {}, [@ldst={0x0, 0x0, 0x4}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.217930538s ago: executing program 3 (id=5961): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000600)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, 0x0) 7.058339043s ago: executing program 5 (id=5964): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) setns(r0, 0x0) fsopen(&(0x7f0000000100)='rpc_pipefs\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x70bd28, 0x24dfdbfe, {0x81, 0x10, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x884) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) fchdir(r7) r8 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r8, r8, &(0x7f0000000080)=0x2, 0x7f03) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f00000000c0)={r11, 0xffff, 0x8, 0x7, 0x4, 0x3}, 0x14) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 5.848256829s ago: executing program 4 (id=5965): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000240)) r2 = openat$rdma_cm(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000005c0)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) r5 = openat$rdma_cm(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), r6, r2}}, 0x18) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x9, @private2, 0x346e3488}, r4}}, 0x30) lseek(r0, 0x1000, 0x1) 5.697250213s ago: executing program 4 (id=5966): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x10000, 0xfffffff7, 0x8001}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, 0xff7f}}, 0x20}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) r9 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_enable(r9, &(0x7f0000000280)='1', 0x1) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r10, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r11, &(0x7f0000000000), 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) 5.217909579s ago: executing program 2 (id=5968): request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9rust\xe3c*s\xb8dn::e\x00\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x6, 0x4000) openat$binderfs(0xffffff9c, 0x0, 0x2, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x0, 0x0}], 0x1}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0401273, &(0x7f0000000680)={'\x00', 0x8001, 0x101, 0x5308, 0xfffffffffffffffb, 0x40000, 0xffffffffffffffff}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) r4 = dup(r3) syz_usb_connect(0x3, 0x7d, &(0x7f0000001140)={{0x12, 0x1, 0x110, 0x87, 0x80, 0x5b, 0x8, 0x557, 0x2008, 0xa708, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x2, 0xa2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8e, 0x4, 0x2, 0x49, 0xa6, 0xdf, 0x5b, [@uac_control={{0xa, 0x24, 0x1, 0xa, 0x6}, [@extension_unit={0xc, 0x24, 0x8, 0x5, 0x6, 0x7, "0d0a329ce2"}]}], [{{0x9, 0x5, 0x86, 0x10, 0x400, 0xf4, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2f, 0x8}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x81, 0x3, 0xff}}]}}, {{0x9, 0x4, 0x70, 0x1, 0x3, 0xa7, 0x8c, 0x67, 0x3, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0xf7, 0x81, 0x6}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x8, 0x40, 0x4, [@generic={0x7, 0x5, "a6c6415a9f"}]}}, {{0x9, 0x5, 0x85, 0x3, 0x40, 0xb, 0x82, 0xb}}]}}]}}]}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) openat2(r4, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)={0x40000, 0x48, 0x3}, 0x18) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x24) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000480)={r5, 0xcd, "e69ee44cff3cbe82e8b8a23f08a8e55e54daececfead3ebf8917b31f4a261d4d47e9bca52a6a2a951d6fa9efce3e932bd707a47ce61cba21ed45a33dbde43d8ce4443aaa7a78b4fac191f614be8a508f7984b11b2e1720323093ba750b22349dd5b0b762f374b28e702c704849ae5ea799a5cd8370bc7a2fa3db63a944512ad022f75517acf9f6fd18e8cd20fda62e28fa67af3b11127238301406c9069a88f227a9b5392fbef8ed0d65c65bcc67d7647b4bb8646dc7b47751f4ae51d4b21196503a70b5792d4e159850a4c080"}, &(0x7f0000000580)=0xd5) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000041000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32, @ANYBLOB="080004"], 0x4c}}, 0x0) 4.922946975s ago: executing program 5 (id=5969): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000140)={0x7, @output={0x0, 0x0, {0x97, 0x9}, 0x4f2, 0x5}}) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2082, 0x0) mmap(&(0x7f000037a000/0x3000)=nil, 0x3000, 0x1ede8e627471f6fe, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) lsm_get_self_attr(0x69, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000080), 0x0, 0x2000c851, 0x0, 0x0) ptrace(0x10, r2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000006, 0x20010, 0xffffffffffffffff, 0x0) ptrace$poke(0x5, r2, &(0x7f0000000200), 0x0) madvise(&(0x7f000085c000/0x3000)=nil, 0x3000, 0x4) r4 = openat$dsp(0xffffff9c, &(0x7f0000000280), 0x113400, 0x0) ioctl$SOUND_MIXER_INFO(r4, 0x805c4d65, &(0x7f0000000340)) r5 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) sendto$inet6(r5, &(0x7f0000000080)="255b2a20f709b4a43a1307c620044218fe1f90c8", 0x14, 0x800, 0x0, 0x0) r6 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000240)={{&(0x7f00009c5000/0x4000)=nil, 0x4000}, 0x5}) 4.627524127s ago: executing program 3 (id=5970): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0xfffffefd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x24fb, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x31f}, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x40, 0x0, 0x0) 4.466699787s ago: executing program 4 (id=5971): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto(r0, &(0x7f0000000100)="51bf7336f6cdf0ca6c13c866d6bc7b55f2d501845841bb2c078a988b7eb38f11a326083cf884920013fbae4a3a5d9c8ea7ea86669fb6212da0b5c82136d9519daeb17c9f96ad78cccef50ab4eabcafbc1a18735359cd7329816984d180735476f901401079349dfbe2e614f51a07c00544d90a594972ba60e1b497f88dcdc1", 0x7f, 0x800, &(0x7f0000000200)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0xfffffc1f) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r4 = dup(r3) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000380)={{0x3, 0x81}, 'port0\x00', 0x41, 0x20010, 0x2, 0x1ff, 0x8000, 0xfffffffe, 0x8, 0x0, 0x4, 0xf4}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) syz_emit_ethernet(0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500005c0000000000019078ac1e0001ac1414aa05009078e00000e0"], 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000c80), 0x7, 0xc82) ioctl$VIDIOC_SUBDEV_G_FMT(r5, 0xc0585604, &(0x7f0000000cc0)={0x0, 0x0, {0xfffff982, 0x8, 0x300f, 0x3, 0x7, 0x0, 0x2, 0x4}}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000140)={'wlan1\x00', @random="0300000000eb"}) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r6, 0x540a, 0x2) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) shutdown(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) 4.352043608s ago: executing program 3 (id=5972): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) 4.121884461s ago: executing program 0 (id=5973): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00810000007f00000001"], 0x48) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000080)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffda6, 0x22, 0x8, 0x0, 0x0}}, 0x10) r3 = syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, r1, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r3, 0x27e2, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x15, 0x80001088, 0x73}, 0x2c) shutdown(r1, 0x1) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8084) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x1, 0x2}, {0x7, 0xc1}]}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x11) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="89e5451b3712fdec61af143a5d3ed3b530db380fd41abcc78d93f522", 0x1c}], 0x1) pipe2$watch_queue(&(0x7f0000000240), 0x80) 3.696680903s ago: executing program 5 (id=5974): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f00000001c0)='1\x00', 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x1, 0x0, 0xeeca629facc57b89, 0x0, 0x54}, 0x20004894) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1004000, 0x0, 0xb49, 0x0, 0x6, 0x1, 0x3}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_int(r4, 0x0, 0xf, 0x0, &(0x7f0000000100)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000900)=ANY=[@ANYBLOB="016f080001000000ffff14000000458b07ee006800000702907864010102ac1414bb11029078ac14142e36e650a885fbac500bd0f05081b1f211edbb87f21a0156f1130e488bc9e2ceb7215ec06b0dfc375aa4c1a93dd51783f9c9987b903d884a033f871c730788699be13dedeaf350e1d2b78f5ca818cfd2c4726db5daeda1cc6c42767a3435fd6ec26fe199676d6531c6c6e9c85de8f4fd2336089f4bbcc3cdb25b9c49c640bac466127b9d6284dbd08e1ac9834163cbfcd31b17684511327803d71638b2d3a8ab5da11b0b35774be213bd1a7628efb88b34c24d3ee35e0f373b3ba888328f66cbb798611a5247a682e1262595f7d1d4b2be60c2316f0edbee68c4d429b3d48dcf6ec0a092ec91477dc030e32dd4e1106064799372ee76a2e7991df45a61fd7264ce5aacc437c22197a97cdeb772ca3e401d826f5cc46c94d14a191102f1fc44ba55df63eba610aee1a510ef35e61f6f72457b6d9222f211906d1a60c7ce70142c860bc6b276726e167320c3038f1b53a740f418a231ab1a2f0f181d17c84e263c4811cf188a0d90c6440be4cac8fa250cd8d7e4e250f8552045beb96cbd2c8dafa611277f10ba97bcbe3420611459c296b2dd7f65e5f71bbf902d3db8900436037e6dabf37931439ae9bd06d48baed951b1ecd6c6b2929fdacd7b8fa09e891ff1f8d47ed6a5eccaedf8dd1f35a83d1982ba4d56da8394f0cfc13e52ff61d74d2cbcd59f8491da3c32dc5941a5f93153fb6e85fc993f459fc21975ae7f69b6ae9c035c4c1b476613e0f175034df44c48e34fa636d9eca78a7b2a872c41509075a5dcc126ec7e5e67b53ec02574def5f2a0f0be0b59cbdf164d7bd51eb9c57f122289ff252589cc6cbdf8e43168717492aea9d2fd42c3d94e898154a02abc6829e8b89ea7ee3b23bcd31200aac89afdf8d81086eeeea78e06401164621d7d195e2d666963c72a0af1178b4ad44509375fe931ccca1e1c7861a3d3e20e0f7200f548ecac4ed250321d612f0c313cb629484a06e30f4e20ae46a74bf90d40fe42568a66e708e6f5f8b4de453786b1c58f7ad2f1035a3d7fb4685521f674ab92cd6cc9e418b0f7b8a9bb9cfa1f4d64555d19bc32e427a31ae29eb44a7b160dfc896b9ae0de9d548e910e6885f45ef2cc52c4e1b62ba8f664c4fe74fb43bda9d0d6736d7846780b8cab074cac9996072fb85449ce8f96b4bbed1e07472b516df29e25d6cdc49f1bba3058aac0694bc1a15f9c077ceafc988a582619822fa752ff1bf170651b9d3c82e15bbde546c034fb06823aeaaa9aeba9900320bfb81159a93f0de80df7a55e61ec0974d3335673aeea33bef534da77f3b0156486a1bef4080cc67b3cd90dbe36bea90cbe03f1272c89c8436e29f460a169bc2af2f6503c2180f1437013bbe63303ff3efc6c3fccfa6bff8217168e190d74086f7502f6bbd127a4d39588b637bde59a5f70e087a2e84b5e70ffe8971ea2ac23ecdf95b8cd9f6de8c7958496137ae09430542548919d9c27f5bad1d671d36537fa3373ec3b1102fb02fa39e6f64d3e489365ca05fcfbd0374bbba5034eaa113ce288de76ef49d5b2869dcafe1bb0542c64a60944c71b7108db8469c8fc68d5776aaaa3fe634ad98d961f0d8309fe9d38178f867d9b9f47fe40179cf589e30d5c8645128711c471ab5efc1096194a104542e0e42def4e9bdffea61950703d78398449f2ed1cf2c00cbcbd1a596443606e0d48b70930689bba704d3a1bd19784472b615e2dae90567180e116172f845e3ccf2b9cbeea3a195801ca5e0263743a4410a25f89bce5589865ec7addb824ff8c94b94947fff23011d6a05fa6d2b01e896d427feff9a2dd934b1d4ebbe851bf0e53f811d1c033b375efaaa5d3b6c2c088e02a616547d4f3268edcc3b7cc6988437d32b924b2cb8cd5ec06557666aab5946989d97598c968991c646c9dbbf765ad3702d643cc4d6292e56ac46d18fe4f0977dfbd174150870ce8b922be578e763efd5f0895cbb50ebb43c1c804e8cefd12335b4c304d7112b577878fa88134ea5a0820db1ab7c919bb7aee92c4510668178d6d31511f8d7471adc246340aa19623f9ee95b38e7b8fc889a7bab2e4bc6a7af13df00a094b5a0b208cea769eb2f3422d71229229b412905c2a7b02c0c0877efb883cf6682a470266f96fbc644f7eae1744f9d237a718178e9ac7f2d16939631335773e500cb9ab4eafad1edd915a2b477134a71c836a20027412ae5d510eea0049494df24024f7e502668b07b9c1ff854c692d5fb2d3763ea46bddc54172f7b87f2875f5da6f5f6b74bd8d334b4415044a117b5de428d89905fb8a40681b528dcc0ce1aef6352a286901d8e8f9927f5d9c284fb5de777dc6b9909492bcc57171704c44a7cdb111b67da8be5127169078fe61482c1da95d701d8ade539371cde3e696cb638c7b9f5844ecad75a633cdbe97b2f86d91954ff6178a429de01800cd9cecf8fd680926e7972ac4b182f5810977bb8caa504a9a22bc817459ac0e79873ff833579a60718c6dc1944cd006c95ee0b52b44030a45a97f49e0fadc8903f7093215c5f8b4d5d5a8f42b3532d747accb3fa7a7ebc72af988ca7eb562d9858ca59ee23772f5eb01198b4233bb8ddd169d0833870c9926c14305ca0041fdd1a2e4d62613b84b3962b9812301c4ce06b002c7286726eb45ffcb1b8f3e51d4b257843a0b1e3a7873f6e8c0e3dc00766e4a9e9ecc14626b25d5cd3cb79aa98273a9bf016f23a805055a89705dfe1aff42a32b95fe0f34a29d180bf30e6906bb801a5173f91294b7c6c1ddba46d5b840a8cfb9296318c61f600a1cb105abc4afaaac7caff449f59d7d0918d6"], 0x7fc) open(0x0, 0xe8400, 0x11) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r6, 0x4b4a, &(0x7f0000000440)=""/252) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)) socket$alg(0x26, 0x5, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000240)=""/251, &(0x7f00000000c0)=0xfb) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58) close(r7) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x48) r8 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000540)="9112311c52b01fc844dab3b1179d84d2d1ebf6c30bf2d5fdbdc88d09212deab98bbbdc50c7e313684dd41f92c313d134a9c2608827b6335a662672c2c5138f50c113d6259a01000800000000000000000000000000000000000000000000000000000800000000000000000000000000000067508e0de423205aacd9c2f0d8d8237f9ae11c6a561407f36bf5dbe55c1e97a087ab7f4bf581ff920b3e4e46d308b1bd886cd54e7c6f36060a7eb1db6830e87ff5d7b8188b84a2c705a92bc831b0eeac69481201e3d7ab6431c74aa48ac85628df5ebc1051f5b4894b496f83f8dd04d0b982915df4a87089d3e867", 0xed, 0x0) keyctl$describe(0x6, r8, &(0x7f0000001480)=""/226, 0xe2) 3.475138299s ago: executing program 0 (id=5975): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000700)={r0, 0xffffffffffffffff, 0xe80, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x3}}, 0x1e) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, r1, 0x105, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xc) syz_usb_connect(0x2, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x141, 0x39, 0xc9, 0x12, 0x20, 0xc45, 0x62b0, 0x7090, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x17, 0x2, 0x0, 0x13, 0x5a, 0xd3}}]}}]}}, 0x0) sendmsg$sock(r2, &(0x7f0000000480)={&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x2, 0x3, 0x4, {0xa, 0x4e20, 0x9, @mcast1, 0x32a2}}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000004c0)="57a50f324c7e26af7915afa185562af3b18f503e85eb7afcc755d8be6839df55717f3e9ac424605a4b8be3202c0b4854e2cfa96f359eb7604cb0aabb362496f91df58990be6840e57a84bc760fdaef3afab10122e13b1e584f13763281d9b97d1aa200df18ca53962c2665f55612b416f5aadc3739310488987e46feeb8fbc13dc59481fbbf5660032f7753700ef6b4850dd2c4705fde8609d27e1b8e29ef1fe3a6a5cdcaeb8431619fec926a1f00cba84eea81c4ce39b6b9bcae50a3e62fa2ed3c4d94b6519e8251c3066d10a8213a9010efcb91cc19ada17415206fe86df39036a", 0xe2}, {&(0x7f0000000040)="d0ec6acda4a406c09a416a39f4f2c70f4929c71558c025b89e528a6f7fc870a87ea498", 0x23}], 0x2, &(0x7f0000000300)=[@timestamping={{0x10, 0x1, 0x25, 0xdaa}}, @txtime={{0x14}}, @timestamping={{0x10, 0x1, 0x25, 0x1}}], 0x34}, 0x0) 3.137889975s ago: executing program 4 (id=5976): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe880000000000000000000000000201ff02000000000000000000000000000189009078000000002041"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x119) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f937cd8530410f37000000000000", 0x8f, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000008000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="11000000040000000400000008"], 0x48) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x141, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) 2.686933483s ago: executing program 5 (id=5977): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x7) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x4) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x3) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) preadv(r3, &(0x7f0000000500)=[{0x0}, {&(0x7f00000002c0)=""/187, 0xbb}, {&(0x7f0000000380)=""/159, 0x9f}, {0x0}], 0x4, 0x3, 0x75) ioctl$UI_DEV_DESTROY(r2, 0x5502) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000000280)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) unshare(0x26020480) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1.981809181s ago: executing program 3 (id=5978): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x20, &(0x7f0000000040), 0x4) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000040)=0x31, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xffffffff80013248, 0x2d, 0x0, 0x6, 0x5, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000066c0)="a062030607792c01386f28a428828947de99f79cc542703d923c7cb9d4e1f6fd95fbf2f747ab32f6fb041861fb3f87a88cb85405b4e73c0b6b12c81e42a9f13d82c32b7ddb172bcba1aac5c38f083747ac179f08d4d6d342a87ba8dd9bb7a9680f27433c3357b4f6ac97b19a973592f1ac6e7853a0b15ba42a28efb9cc30b146346b546018966e94976ca28f26a1950dd64c0adbb0c2e09bbd9caa9e7886a2b3d6e2b6d6616b718f1322ea2881ca59ef73948b1bcdc2dd3970e63cbc1043ce42af0ea1f95d17268cbc3ef062c8c31a537e94a20c1c505a6022d5ece7f51bd9c754d8c47cbe80bbb30b2159991a94dd3a25e64aff8a7a17374b5a71e0c7c241cbfd7f084e18a50bea512ada902210a3881ffcd42071ab09c4d80139d8980d6dc5d12c2595ced445caf22f80d8fb1a4c243da47fadb8e28e9c04fea820a8a2f032f5adff8b7d9269e63db68d196bf7f416405e52b6b8abd8bb9d9694b8b5eddae348209963738cd9710bd6c291af1c8eaf0e52d2f2f24bef8c8bc9f77eed40104e07c8ee1b4cb358fc73e2653fef6232b5e9f5d0be26b91a0b7967ed5e3bf10c449424ff4d11951d963677001d9576425d6a9c4503268a407d74854f5e1caacc0ccc463dc56e684db1d80b370da238915579ab82cdbd7d155adf10b96ed71100ea92834e8a4e4f5b7b831bff6fb4febe01bb398ea4065446f277f107aa3cc06e0b7a6e98434bf57744ba9ecb8effe704d7f852e16bc33ac113649f7540b7a7a67cf5493b400ce06e571d485af1732938b79ded4de7dad97a7e1c0be7bd479dc264647bb76503168423e3f6fc95f8ac8ea35e39f476ab54e88286fcf73eead1f794784465592fe4ad112ac63bbc3b3f35b87c40bc5fa6e3ca6cad878f9772a61a23aa00491a9e2442eb90a32af2bd74e99d075bcda20288bfc30f3b00a7e8e1a0b4791573abd65284bbb53e2b7d667239b95b332dd423e4d7c512de559bd53fde5285add9795bda81ec142620e693af9c787a4499dd76ca0d77d9c7c4043e537ec6c1cd0b9a642b12adc782a0e00f6c1ed7379d5fff4c2feb19182db977f657b195e4710ff00f78e35a146119897495b0e1a0068a6606292ee72bf65adcd2cd29b4e59a4b3f82eac77d5254013d03d2fb2511975558906741912d09304f0d4cf08c8f62690c67968c869f75a4025224d8e84baf7a42e01b4ecf7e55d7c45839778c2266880d1bb73e3aad618d1a4f8d5a16914d64d70438a88512649fd4caa90506e5a2d58a33ecaebc9b2e5f8a4fbeca57c829ae02fd2dc146e939c3d295ada7df4a07e74b356c6ffd7a9c546b9eddf7e013cbcb2b57ae0d225249f7e06a415681d9f597a060fd55e39bd56f04b863efeca458a0cbc54b660db50ca40d27a3fda3416860e691cfc780593f06b467700968bb918c32547e378b14b4e0dcd11cb0b2fb36ea70946ac62290184b4eed38b51c322a75367b50f558e063bf363341a17c28ddcbf9ce53da06f26303fd156423a25f686809bc9845a78e0cc3d94e04bc8da85f22a4a8ece2c4ac2c79e54dcc4eabc61e067060ad880377a71fe0c2c0305256e4f3c637575f086e4ae3d7ab5d106fde03d24c47dccba3da23a244c1f50a4f60cd8d71b77390c5ce6d5612fd0260a2f33389b064ae6acac783eca62874232fd3808fb2188151a43de6cebc7e245106183f7d929f1eeff6f972da3e3d967170247925fb0f04bf38e88d06321f9ff9d2c296553d842b69036a2b6de2aad3879aedee723ff00736f7b0dffe6182104105ff0f0b636f5192d6bb5ae7ef950825827d2f3d6285d83aedca3f31474e0ad50ce6290a0e546c30d900e5b4208ecc8b3aca0ba3d110fc3c0a7e004a53e5d0ba1cc1c2bb42c3dbcbb4ceb6674151932ae56f6b03cc34ce450c292fecd2456ddcf42b075e6fd49305fbf265a36f3cff61321dd60f16e844089d659130947672a2d059e04af9ef653e8afec926b5a5d411f60a2a435437095a1df8dc60a616bd1a1ce7b5251ed8f905becffebd635eee8ff0055c40f146f1350a406b853ecb005c6ede4dc270ce6751cff915aa27f5f6b0736da14c9949de599d57868c29cc97ad03bd89502a34b88ad29c8762d0dc24a6df759821882a32e70531cab51fa1752a4fc49cf0706cb24d203174b2940f29ef8b0ce65b40cfde4e0c7310c685cc8de8384e485a951192fa8c36c11f9b88a48caf027dca480caa4fccae70ea6c837eb82f926ad7691c7709f217220d71f6e374fb8522a84c118b5c25f3d56acfb25afbe676fc9e574b6c5a59c00a0bbeeff61fd82a1677f3da9bb596133db491a8f11b945d930c8a67de9ce80025c764d518efcbae25d9194dc96c31ed02c63b1ac976715f7233ffed7cb6e929bbb5afabd34bc37c095acd0abbbdb1ea48e40a30ac99550f0ccca19ecef5acb2604c48fffb53b352d114fac72d6fc019ddec558406668f773fed9476148133c0f9ca4d1fd7e70dd04bfa089dc57e5940f29a5fd33dc79913ff48853794fdaf891d71de94c4a4fed0544e09f2bd578b07003031b8602f08ca8a79fa5ebfd5477f4d4f031c3efe0db273446a99d0cbe21a3cf43f3b82774e4657bb4f9675adbaf71c52953f0b18a61e05a9c770536fbad215848f8238e8730b9085189ea4621780dac500d7d7dc7815b45e232f86592498f1515ac8c50306013524cc5f0a74b67bc85d435d332ce69f00641c86a3e91be84b78ac358f35b18d69679df4197d3be8554417cf44aee6dc623f68ce3388df18168efa1c87c776cbda792f6110b6af178eb8200a91dfb72c1e23b5e5a66b5a3ee3f4c2bba2ccac939dcb036006b86e894093922a95fd70baba9424a3d0327a0f209fe10b39f3cec3f669d301a2834e58fd56f94d622dccf653f08e776c9f3e1b0e5b3cdef133834b93c41c70438d51a0b127262868d49ca91623c3d8b75c2cce0b771b9ac941bb96029e782224a3686a7c0dd164e162ede667e0e5817e7bde85ad3bf30a6a5bdc420f751679be74a02f84aa93b971c3f45a67d155f7ecb1d5284660918dbf102bc16f496fb62a1290e6b88ddaff55740583cba13076afd623276634e0c11663be50766980949095003ef5bc6f90a98bbad436b67928513e70115224f672ca2a24e27bb98bd5288c49ea23d47ef13c5ff28c43ce53ca16a6caeccc1f601226253c4a38a88a93828f6c800547cadbaa6d7ad26db618cccd38a671507cad5ba0065ce2edba81a059b95c36c5d04ab456fd6fd81ec3738ebe546d973c0886a5e7b83dd9c2f58f5d6c19519e67575b3732a486555f8d8c4ae004a62e8d07ab2c8ef74cdb96aa99d75aeb1c25985996f281d71106910a3c3da17de35e04dbe00e2b7b75ec2fed177a7f2d04fbf68bd0b8af682b30911867d4d1497ba060b662f4e97a8e7fd3613015cc34302377497cd08bcdc29f06dae240820d2ccddbf8c95c76a4ba5d3e1b37a62369ce3f79fb74ebd9bc82c3fa3edad4034b6715c2853fa7781c974b5a4e541e8b69bf4bd653fcce4e4340d9409fe9112e4d253a3b7e9d43f4426127b10f2d5d3fcd2193490f7d933e0cc53dae552f2d7c9d77b8f9b27c59105cfae43a0aab314a0820fbb5684bf20986e3be215688b42938d272c4c0edd17bcdc84a514d2483456d6cfb4f5c1218859ee55bfc77da36c9c75734932a12fd03df38232063ed92024f8ee7c21f314129feb10670bb4d6a0ad4fb3dc57a64cfe6509a0770650cdec0efd5e0b1fd29433cf871c9ddbe648319bd481357326ac1eb32b4bef4ad89ab6122e92dc786decac88624a4a3963ae771f8023b9a92e446114764c53d7efc07e3ea77a9daac5cabbe648a223e249db62102ef7b7b6d06df46b6ff913911b89848a47aecc0563fb06b6d77fe1daf4541cf619105ab68e0bcdf7a05af22b0551323bf33dec8167df2b7fac62dc9e286dd3462f488c82ad194f7fd5d3ca72fe9c0c37cdb6d75684326e5cb30319ab333fc70bb197320acda161d2e685e78ac2cb1417223f64742b12a316d590b18a4173b2a105a381baf6f383ec2e81d04860b5cc536475d7c5d05bd6a7db1a5d93930bacba8c1de63707bd24785e19fc1f15ba724660ac00d0f2ebbcd5528b8cbe4f3ca332e8611e937a310fc79d234be6c1cd09d6a5cb06ab36a9d667188144c81f86aaf0851763573b36cc21462ba4f3d6e95d38d1e9b943085661d234ef6d079bc9d84c7447c85baba88263451ba10559e1ce326fee5074b26b54872e690a9a1e589e1c444daa3224b292bf9ec4a604dc512760084084f27386c89a1190b8905f0d720508c0ed69272f396725805480188aa4602a26e833c16aa5079c0577a8203ec0b2b929ef3b410bb427c168b7fefd1be652f06efc61c7a295a5d07a9fd61bd5bfe67ac5f74e485a66c92950a1b460257084ca3a3489943ad450300967234b487fa3def4010f9b715196562ebb0846b7ac3eba47646af6285582b4402f64aa684dff7d9cf81fbe1aa88959f7906f06839389f2ad56efb5029afe1d5ceac99a3e698f49ff0da7db06d7c9e94a8773a13fab93def139667b4dc6b741bd2769da7786acecbe315f9006bb6b72abe5bdc587d8d5aa8f67aaefef68197fd2e7874d9b7da2c3a5618720c12e8fc31db3e334c47abcbf10c6181ec14af4f9e90e19a35360a793b1e9b336e49b3ed67568a860cd4c298f967ba323d315821959629e5b7aaac367e1ddb8a1c5d61500afa69331a4c90861852f533657b28b97a343bc531a11ff634b157a6d859a35f0d2a595375e11a32457575f1d73da033bf5eeda12337b9fdd46bce192d3aaaa240a8c65bf47704d6aa64a9531f9de14a96fc9fe380db35dd5ec52321c67fb4c18abcaf22fbe8f602ed201232251317e1a1b71e1e2c924a92d84685de348eec97fed954b7f6681ddf521b4ee03a1aeb2e446ee2a7f4dfa37b1c53831139fc624c14dcc4d144ccdf758fd9f344b4cdc1df70f6a24fa78cab136c912d1ebffa7053ccbc9b9445762236dca409820f738370117d5c369dfc50fd42277f14eeaf29110aedcd503008c42914d04e219a8b6c01e337d04724919b07157e2275ba6365a9dba5ebc8019bd1aa1b8668023f64cf47e1b49b4fbcfc10d560bb74405c90751504db8100d8a8a1a3ff84d98f1262fbbd6b962f492b9531a7411c08e7e56eb0f838075f754b6a395b6b58a8e4c47eb46bfaba2ac94800a396749d18ba0e6219f8d616ec71a1e60b3bcc24e19d4a20ddbc6a871e6d7efa50a362610598d892a5adecbcfe217534deee3620dfc88c7992ec2e710e083ef0a50c20621405f654804d1af4f24d22b8ca48f26303e6969127a74f0b276a5624c3b84410d4d5ee3c62605876e60a88df2bd6e8db8c7e486fdb452178563e7add6bc126b721b9ef8b12181989b87031573a4010d88e34f15a2344e4808b74c99ad68f0c2aca4e8d504397c03e1328c4b1ec43fd902d206c3cfb63d7541ac57fdbc70b0033f87514286101231fe7e79668c802e1c23d61540cdf13a5e675b736e221ddc29ab747d9c64f6213f51d3c1ded2e2b0efc4e45183d90468f61ec1720f7a0b87947e2c54125cebe6563ee4415d886bbe869d17d36371c942c11db1e13c1dd40ed24cabaf7ee80eae6c4db934e982d9619d753dcd679c5650cd95d21582e31b259043a0d03371cd294f4cc028042c75070c9b534a2d79f164ab9d773295795280d1584ca664b53b263fe2e23534d27b0d85742fae8061e03187795129dd272041c6eb9c10c3406da1f752f4ca697bdbddd74975cd4dbba5687fb30ac4fd5d2579494eac73053a63821a852cf41a80f6668006f7e1c4e30b48d638ebab470c558d42baeed1adc8fc71f73e95f3ca212a4b009b508e89898727f805685e4e7650a2961d62c117d1ee9017236a6bffa0c36ae11bc52d346c83399e43c42cdb9f443aa307109a97ee66ceb7a29eeb2f1a2bb3ee1492229116db07301b2aa4126aee7775daa2d0eab4d206fae11b3c6b565dcc4c7b4dd1cf2abec81150d0629803f6eb221be384b8772fe6d6c4fa98c928a9d0a02e9ff8bb7a2168dbebe140323d93bee8983c496bccf752c372b795a3493624cefb3cfeb4307bd39826cac1ea3f18912deef1b8c8db30bc016990a477bc0a925fb36453a9e21354b2d7e6e3d4ca4dd20f27a8db05429d44b7a485365191dc4ba977a815958faf6434813a9f4046054763dd55dbb7fae892b746e169ae046ae3361a9f75cf622b03f75b1633da864395bd1c3a594fab0b1fb37f088dd1f2776e2b795c78635c2026a8ce7ff40968a1960786049a217dd8872ac0c01f4bafcf2d3d751dd46a5e1bec00540a9ca7afca3ef37575d4a8b1291d05be94913092890a9b4bfff39edbff307e5654896e79228777c0f8ea46c55bfe19e522bf457ab4e6b0167d776dbcd0160598370a12c4a03e4edc82b245a7608797b03d4ed89dfc2a5bf07b9fcb251fb8608553f3b3774818717a9aabe6b2ded811515ba454b390a6065bbc59552f3bfe51d38f139792e1aae60093a7c5770b52a1730feb1049c14a7d5261d644f6b738e22ee72aafa422bd93f61e1ccac0a5ef4726c66f61bb539acb937bd63da82c700c0860be90ce5621ced22b52b63d041266fc258fbfa6641aef22e97804e5138ad2ce4405eaf76bb0acd7fc61b2d6de4aabc5c28a850fcf219cff77c97d3cb6bec0067c171b912d11d82c56cbad56c0032a9657d4cdd1eacaca53f40f5e3fe911127e1cd30781351f180e1413933cee2d46ca0eea31ee01fe4e99a567edd0b10565d47b87c8a48366143e889e52d0ff13c920aea092c2545fa9b7056204fec156549d3c0a997bc1cf4a01338483bf5c69d6958ae038f1c3e3b84baeb2c1f9e064c0750602c34c6c483c316391d975f94f21f6dfe74e92c33228b408a9e2b9abcda33c497abba9c48a63e5c8f1a8d0f4c24d36a44e1601e8a09e8a5c7179bd4c44b17e542dd99cace87aab60a5e53325d544c991b6fa5deffa49fd886332980deeca9229cb2f67f495a7b743153854ed81e1623b12dbd65512d08a5732fee2db3fb455cf6df5a1701a2b8674633c6792162dc86ac76e30da225b0167a7e704ad33ba694f9c902afbeed58eef609874767053f59414d4d3eccbbcdbc7eba997c71f9b1f5139bb020d5dae1db6e2dcfbb51b5371b08bdbc3312b05ee6d8c03c8b5a7d4f23da45f276394f222b1a0bdf4e2603243cdba60ee0530387c88bb457ca9932f2283a4d55bb1195e6d325ed93f714e21908b1baafa467f1cec7fa26e5c384ee6828e77978bd1abd014de549a5e5966f2b2f4ba000f9d77f1abfe3a6c337cdb852c1ec59f61b63d543f3062dd2616a163ed7ca60168b0347b5c5646a678dafb4c502c333a0a48f0341b47f5c5946e42e571db0bfa0682a449ca64e71b5661a842975182399245c6de241512c67ac918d7e0c5cb66565010e881b8333567ca584321ead1c383b099d8bf1c56dac08cb218cde4226ad420d6d6313f9c4884d6394722304fdaa76e61db8c0d54eb1151344c41ce1130272928eecb2f9f0f23c752622374eb1223a80efcf0b937dff7d813d7be0340226c0a7b163741d9aecafcb7ddae5a219323323f621c802be82399e06d2e1cc582e759ffa303c5103f8a44d7129d2853b02e506abda57ad2836d7ff16f95232149fbeb8b62e586d3536bb4ae042ecd9e25d1dee789353071f9c89d4361000c47b763556e8902f1f25cbd8ae71679e03ff27db0ec75eeee3fccafc7fcf22c377ac60d3c61a43cb53abf6162118f2efc86a5ce80e69a02bc1db80018beeef6d567941232e4412a958ed012bf7a832c1eaf68134ecabc4927ad666b3d0f21d4e8d52fa37e0a9751124efed8bf47544299138a6f69d89e295677f12606c79b72451c263fca3eec22bf0c47c641159a0bbfb3b2b03154af533e5c06a149e52adcfae31bfc55f30064a8903c8d3b828d275a937b1e4adffa0597da5e253b50bd71b33f057ffeff0b2a0829b3bf33350fbe67c7c79034f80d69e6a21be495a848d328f416f15966491b218eab390544e39d498258ad80ddae248634c845cbe6f1c1e93e7c2b02075411e075fe936bcc75f4a4e1a3687cb3dbbb61cb31ddfbbc87a1859b3a48fccdd8e5915c8bf4eebe8f7093cef6a7a91c8682915f9908c854c483e90c9643467292884d284134dbaddafdbc74d94a5f9713719d62b4f6b4236803d210181847ca27129fde264156895f4e1822ef78a3b215ef56d7e36d2b94c93f5e931a0d13a3a3030061ce62de595eecf47eae6bf698530145757700df18f66fd7261a12c119d6679663b3c0f99d1705aebe66dc862eb21ccb7360b93f54507149b577abf521113991e06f345e8282fdc18de673e1ca7b188ee34b14f37f86ddcf97fef0b913c33cf8e5d5d33707dbcdbe4b27cef056670252f186735cdd02f6ed6bfe5318a704f00e34ffc4fda9855bf37c51be6a7423e44dd8a98883c8fa82ca37c90d681fb7a0db915576b50e49aff545b99aa3aa6343b814ba0bf64e53b2a1edcae2231bf20d65e4bb4da6dc8382120ede652adfb7c30a46e0ee784cbde74563d83eb8d89a1573fa104fddca9d4833c49dc904bda905426c7dee3e48b596c8ee201bea57fedb1a0649457eaac3c5b5f4519af3adb66f10b861e711cd4034448890e15047c2f8902588268b5645051f3f3968ed8d630e050ccef0d01b61ffeade51e4e72d8fd46bba4c20009396e984c424d174934a67a1930665fbea04c809e7cda0a2cdfd3a14d6b99c3a8d8b3691825830456876f188ff871fc861e4c6a0ca377dc1f0cb0f929f7eb1f5da045d9a588a393312acacca5c5a3b15bb1b488b08fc40ad65ae2c1df187eccd8377525a81d80df57579ae52f775fb2efdd172a41c370300fcc594c2635dcf50e9eb9d34fa8b4bbfd13078422e3a7734a8ae6cc09e39d07c7ee19838f8da4cbafe4162c8f8dc44e284840bd0a5c80bfc657c22e37e0d9a96dda34a51ce616c9ccdc95955cf85d93860da902ab30f11aa333eacc25c47981d8636038761ed4d84fcbb0ca92dd2e07863b9505b451c3c49e36a172527578123049ff2dc2b4e258a3f698a12ca4705a6fd0ce6bc4f1767b4d9c2e57c9ed1388527964ac96ff5e4cf5ad6fdb6a853b43905df32af8bd788b520fd526cbb95195a1bc00d654cb080acdf67938517a6cdac741d86730358be16465b4e1301f47f6a444c4e8d2980b8bd98a8dcd6617cde0b287e2d1f59167b5c445146fa49728111b8a2729428cabd02facb8fbddbdb2769680f288648d6baac53e0d909335da3e2b4c13ebd41f32820c9f491e9124ca444a0532f60e2816e15a5810baa91f64454aa355f9d362c7d1a461561689d08b1350a216b6f1bda57aae0706b3710a1b8e52a7e3084e600b5ee3dc540bba0c16267d549304a7840659a32e40070715c9bb912792d4a7b84fa06e73b9ddbc2f06c4edc19d25f5a198c7e3fc6226842e6215da5d826fcf5949612889f78e9de39d4e64b86b7033b5717a21f8f2b81c799a3fc0bfe6f5837b252eefa360c91a6148296bd19d50a343d909c1edf5261e70c8dfb2c488940cf236941ad3fd01247e37902a4bbfdd1839f7c92c260a2c494022fac08629303c8e54108d78ae2c94289c7f998ba3b622b48931ee7c17c59f5499d282467a1b8050acc94a0b17b21836c80b69f519b9b077d18e33c027faad562fa09f2cc6120f8cf5ee18cf7db9d729ffbb9de58885713215b7aebb8c98d9fa009be0a9ef3ceccdb2b31968db555b26c5c94e382d06ebf6d356e8caa85def5813dd1596d823924c4fb63dba5bd094cb64f204d1e59d31287715f831a1f0be95d8749f2166ba0b0b6b64a37991be1fe1c1e922835f2da0c074ec9413561d52166576b1c4f1e18f078dc046d1c284964b80217b55c59a474740c3649116b33e927479736bff6005859c7c00598f22cb8eca38af802f4c86836e8330492ac7ef3707890a8ff856dc7786ed769bba75b18484b257b3b022eeb51aa720639f79e6e6bd3d3c9a61f7822abe562867b4693f0b2f61135aaeaa510b31112efeec48d2602c6d4f2ddeeb51bb03ab18c18d8e127a37e22881febca47742b9332d3f2251003b1a46c40eca111d02446466b669568c70971bd33254ca577777f126f86f8a3665f065b645ff261e78e0f532e83a81b99c5de3488de74ca82daa0e4e7404eff911ae955acbb800f9f91b774e472bc14aa92817b6d85877b1861a6ca92c03c83b6f1490068bad8eab1f58c9e91e1029683de2ca45c99966966031ee86d8c9995f0612480e2a6d5396e8ae361d6fd2e24557613a1191f5019d4c8078628013512ea3a59532efffa6cfe4970d28d8c7aa8c866c4275ff2b0b4ef1a7e56854d7ee4bc445713da9349d13e30a4a802cb9db2f10280fd9ea043b5b3480441e8ed2d907eae1259befba9d87a04ce42b0010c70af157b90e0bf72549852fd122edd6cf3475f76852b13b4bf887cf32e25ad34aed7fd5a6e97b307f9b4ff1c07b2b55beef5ef3dd96eeb2a57720c18209d911a55341cee67e6ff577f7acaba01c2c9690b15a3b8aaa5b9d734196467a8c074b2eeeb5ae931ddf3deb15b1a8d603e72125c2e68ad206f2c4252a659f8248ff882a8e54126ebc0c77a46101072272460e683d465279a3695be6b64c9eeb4a576d95fd520be42eab5c95cbace0dfd80e2d67bab9f683a1cc9c006c02f0f90a21a0f51218c628f5608fbf1abc79aa63452bde1002383033578f32980e3779a8edeb226f6d3f9b36d8f07bddd7479b60346a4b4fa883940e3aef8ad8d834dad4405960a4409a6255e8753d0c0ad0960ff3ef48ce93fbe6b165e86eab36fccb8b989f5b54e6ccaa19749ff065a0a732d15c41b9072bbc6f07e1fd5a3df2775874e46b61ed50714e8c403fbed6884ec06f52ab71d2c191fcc56ac0b17ba3c46d2dab3e11c79383bd8867ff14b5fbca73b9ae594b6a09fb73a2e8f15aee59150e8d6d3dad9659025d045bbd1b9ca257c67bb78abe8f7eb9c8b3bc32951c41f7390bacc8c7059a2a9b078ab50413605aec604e4666a6ace765b0e7ab558fe6232f2703d07811e3d0ac5bf9434e87876e99250ee9db6527a8ccb4a3ee3bde738563c9746f941cf2cd7efacdbd2593cafdbe5171864b2982b54dc5a32c86638c0e650a331625033b8dd65851965ae791880349d5cd52548f4422a317f96ed79e7ccf3bd671e6dc70365f521c65206386eb1f99570a544d11b3d36fea285f8a3770ca303a965a0c1d598ebe3696e647be734ccf760d3d47dec75e236d7ac08019b6622a7b9f08bc8f0937ab75e75a047a7386befbd56fc4b2f89c852dadce8df946cb3fafe4eed2678caadf1a913ae32b2c0b8a37984cb700343c5e24609f8c5ddeff5e653837a9332a41c8e21466a13d79224125d5f6a4fef79b5adae7f4ab7d351c55400545edd3c00637bd27164828925e9bb5d79f1f1e6eb3270ab799ae38772f779565d92c47503de695f7aad7ddacda6f6c71e755b3737231b64715bf07849d3466e4f92239f733436ce674389bd16900", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0xfffffffffffff7fe, {0x100000000407, 0x0, 0xc, 0x9, 0x3, 0x0, {0x6, 0x0, 0x0, 0x0, 0xba, 0x1, 0x0, 0x40000, 0x1, 0xa000, 0x406}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) readlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000080)=""/149, 0x95) readlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000400)=""/39, 0x27) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000080)={{0x2, 0x4e24, @loopback}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x1a, {0x2, 0x4ea6, @empty}, 'gretap0\x00'}) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x50, 0x1801, 0x0, 0x0}, {0x7, 0x4200, 0x0, 0x0}, {0x794, 0xd201, 0x0, 0x0}], 0x3}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) openat$cgroup_ro(r4, &(0x7f0000000480)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x2) syz_open_dev$sndpcmc(&(0x7f00000003c0), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1.923288209s ago: executing program 2 (id=5979): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x0, 0x0, 0x7}]}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xfff1, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffa}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x10}]}, 0x48}, 0x1, 0x0, 0x0, 0x4024}, 0x0) 1.589312561s ago: executing program 0 (id=5980): ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06055c8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000017003900000008000300", @ANYRES32=r2, @ANYBLOB="04005a8024005a80200000800500040002000000140005000000000002"], 0x44}}, 0x0) (fail_nth: 8) 1.44695687s ago: executing program 2 (id=5981): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (fail_nth: 10) 1.243560341s ago: executing program 0 (id=5982): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000002c0)="c1776005aaa7c91a1fb30a8900143592d8f294884627be1c96a769b7f9a332c7f548c8bb24d6e17f6b2f7f9b95715f227daceb996ba57972a06fd356bebc7dd28c0ebfb97c88e00a6169656f7fc0bbbb23478c421dc85c715e8aabb2e243d5", 0x5f}, {&(0x7f0000000400)="740f5c38ded39fc34cbee12a3d4fd9b72e", 0x11}], 0x3, &(0x7f0000000340)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x8000}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000740)=""/197, 0xc5}], 0x1}, 0x2001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000100)={{&(0x7f000050c000/0x3000)=nil, 0x3000}, 0x1}) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)={0x3, 0xe, &(0x7f0000000b80)="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"}) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000f80)={0x14, 0x0, 0x0}, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) unshare(0x24060400) setsockopt$sock_int(r5, 0x1, 0x54, &(0x7f0000000040)=0x80, 0x4) r6 = socket$inet_sctp(0x2, 0x5, 0x84) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0x0, 0x1}, {0x63, 0x2}, @period={0x58, 0x0, 0x0, 0x3, 0x80, {0x1, 0x8001, 0xf, 0x1}, 0x0, 0x0}}) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000000)=0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r7, 0x7, 0xe80, 0x0, &(0x7f0000000040)="24c2afc3a2e0527bea33d6541650", 0x0, 0xffb0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000680)=""/211) 683.794777ms ago: executing program 2 (id=5983): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x10}}, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) (async, rerun: 64) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) (async, rerun: 32) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8) (async, rerun: 32) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000040)={0x1c, r6, 0x1, 0x70bd25}, 0x1c}}, 0x0) 618.839548ms ago: executing program 4 (id=5984): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x995, 0x1, 0x7, 0xc, r0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2, 0x7}, 0x50) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000000)={{0x2, 0x4e20, @empty}, {0x0, @random="442da5380ee5"}, 0x3c, {0x2, 0x4e23, @empty}, 'dummy0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x10}}, 0xbc}}, 0x0) 413.171744ms ago: executing program 5 (id=5985): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r1 = epoll_create1(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r3, 0x40087447, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0xce, 0x0, 0x3ff}]}) write(r3, &(0x7f0000000240), 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b900000000109021200"], 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020100000c000000000000000000000005000500000000000a0000000000000000000000000000000040000000000001000000000000000005000600000000000a"], 0x60}}, 0x0) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4c0000000206010800245a81e98a11643b000000050001000600000005000400000000000900020073797a310000000013000300686173683a6e65742c696661636500000500050005000000c456482c2765f8ae56995ac2e15ed2be20c0a88d7a6a8d4b7c0f5cc3c9d6aa11c622ad8010ab3fb03de6b446b2da166210e9a3fb0707cc2bce9ae11278ae15fafe26a5a917bcf5225799d5d88e8e12214398eba9c178e7b79053c3a51f1c6888377cbadf516648ba0043b2851c6e79c4092a5ea87b43d486a0b573cebcb50c84bf6d92e7bdb5a9d9e674f40228511851265e0620a8fc5b1f8d26f5bb88fbaa0371fe"], 0x4c}}, 0x0) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f00000c4000/0x3000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, 0x0, 0x0, 0x1c3}) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="200ce8000000519f4dfc5dae26ab2027f11538c7a3dfebf7ae79118b0f129f1333fb6d94895178314a6ac943f6fb4d93e6e631ea66ac044ee737be56958139d7292f18a5e0562ebd6fae729e9c5c81c18b04d973b2230539f92176a7df9881362e987ae0a421fda432ad1c8bb64fda4b9710a5ba735db032f6464c8691aa1b35b0fe9a6898fd158759cb1231c4cc66a641b5a3b5549d0cfb096103bdba76f44e55db5746f5b053ade4fa127f618f474ba67443098ad01dd26b0e09063632f7ad1c01eeeb3d3808a2f27cc02d660d2ff3473dc6db72ed269af7abbd255e0ac8c30840bff826390fd0c328ba424730"], &(0x7f0000000380)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x18}, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x200, 0x44}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x4}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000500)={0x40, 0xb, 0x2, "9a68"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000580)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000600)={0x40, 0x19, 0x2, "9fcf"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x5}, 0x0, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x1}}) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x40000000}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0xffffffff, 0x2, 0x7, 0x6, 0x1, "8a2d8c3fa88ea34cd4b66fd09f38854a6a5f64"}) 354.570875ms ago: executing program 2 (id=5986): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r1, &(0x7f0000000180)='.\x00', 0x1900, &(0x7f0000001dc0)={0x0, 0x1, 0x100000}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090485871017afbbfe2390c3a90000000000000000020000070900010073797a30000000000900020073797a3202000000400004803c0001800c0001007061796c6f6164002c00028008000440000000000800024000000002080005400000000008000340000000940800064000000002140000001100010000"], 0x94}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0xfffffd19}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000080) 344.900527ms ago: executing program 0 (id=5987): r0 = socket$inet6(0x10, 0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x4000010, r0, 0xa3a1d000) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006280)="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", 0x2000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xd400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) getsockopt$netlink(r3, 0x10e, 0x9, &(0x7f0000001e40)=""/4096, &(0x7f0000000040)=0x1000) r4 = semget(0x3, 0x2, 0x200) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000140)=""/192) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_connect(0x0, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003dc77520ca073528acf50000000109024700010000e0000904"], 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket$inet6(0x10, 0x2, 0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x4000010, r0, 0xa3a1d000) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006280)="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", 0x2000, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xd400, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) socket$netlink(0x10, 0x3, 0x0) (async) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) (async) getsockopt$netlink(r3, 0x10e, 0x9, &(0x7f0000001e40)=""/4096, &(0x7f0000000040)=0x1000) (async) semget(0x3, 0x2, 0x200) (async) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000140)=""/192) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) syz_usb_connect(0x0, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003dc77520ca073528acf50000000109024700010000e0000904"], 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) 321.955998ms ago: executing program 4 (id=5988): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x442, 0x0) mmap(&(0x7f0000131000/0x2000)=nil, 0x2000, 0x200000a, 0x204031, r1, 0xaad23000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0xfdfdffff, 0xd, 0xffffffff, 0x40000005, 0xb, "088aefdd2000"}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 0s ago: executing program 2 (id=5989): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x67, 0x8, 0x0, 0xb49, 0x9, 0x8, 0xffffffff, 0x3}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x0) r3 = socket(0x11, 0x800000003, 0x0) socket(0x1f, 0x2, 0xfffffff9) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r8 = inotify_init() r9 = socket$inet_sctp(0x2, 0x1, 0x84) socket(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@multicast2, @multicast1, r10}, 0xc) setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f00000000c0)={@multicast2=0xe0004000, @private=0xa010100, r10}, 0xc) close_range(r8, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast1, r7}, 0xc) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000280)={0x53, 0x0, 0x6, 0xe, @buffer={0x0, 0x56, &(0x7f00000002c0)=""/86}, &(0x7f00000000c0)="a0437878e4f3", 0x0, 0xa, 0x10000, 0xffffffffffffffff, 0x0}) syz_usb_connect(0x1, 0x3d, &(0x7f0000000000)=ANY=[], 0x0) kernel console output (not intermixed with test programs): ber set to 4269801488 [ 744.590906][T20375] FAULT_INJECTION: forcing a failure. [ 744.590906][T20375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 744.660391][T20375] CPU: 0 UID: 0 PID: 20375 Comm: syz.4.5720 Not tainted syzkaller #0 PREEMPT(full) [ 744.660427][T20375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 744.660443][T20375] Call Trace: [ 744.660455][T20375] [ 744.660465][T20375] dump_stack_lvl+0x189/0x250 [ 744.660502][T20375] ? __pfx____ratelimit+0x10/0x10 [ 744.660534][T20375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 744.660565][T20375] ? __pfx__printk+0x10/0x10 [ 744.660601][T20375] should_fail_ex+0x414/0x560 [ 744.660640][T20375] _copy_to_user+0x31/0xb0 [ 744.660670][T20375] simple_read_from_buffer+0xe1/0x170 [ 744.660710][T20375] proc_fail_nth_read+0x1b3/0x220 [ 744.660743][T20375] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 744.660775][T20375] ? rw_verify_area+0x2a6/0x4d0 [ 744.660806][T20375] ? __lock_acquire+0xab9/0xd20 [ 744.660826][T20375] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 744.660856][T20375] vfs_read+0x200/0xa30 [ 744.660884][T20375] ? fdget_pos+0x247/0x320 [ 744.660910][T20375] ? __pfx___mutex_lock+0x10/0x10 [ 744.660944][T20375] ? __pfx_vfs_read+0x10/0x10 [ 744.660978][T20375] ? __fget_files+0x2a/0x420 [ 744.661004][T20375] ? __fget_files+0x3a0/0x420 [ 744.661025][T20375] ? __fget_files+0x2a/0x420 [ 744.661057][T20375] ksys_read+0x145/0x250 [ 744.661087][T20375] ? __pfx_filldir64+0x10/0x10 [ 744.661121][T20375] ? __pfx_ksys_read+0x10/0x10 [ 744.661156][T20375] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 744.661194][T20375] ? lockdep_hardirqs_on+0x9c/0x150 [ 744.661231][T20375] __do_fast_syscall_32+0xb6/0x2b0 [ 744.661261][T20375] ? lockdep_hardirqs_on+0x9c/0x150 [ 744.661299][T20375] do_fast_syscall_32+0x34/0x80 [ 744.661321][T20375] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 744.661349][T20375] RIP: 0023:0xf70bd539 [ 744.661369][T20375] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 744.661390][T20375] RSP: 002b:00000000f54ad590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 744.661414][T20375] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f54ad620 [ 744.661430][T20375] RDX: 000000000000000f RSI: 00000000f7456ff4 RDI: 0000000000000000 [ 744.661444][T20375] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 744.661457][T20375] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 744.661472][T20375] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 744.661507][T20375] [ 744.941386][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.168103][ T984] pl2303 4-1:162.142: required endpoints missing [ 745.188881][ T984] pl2303 4-1:162.112: required interrupt-in endpoint missing [ 745.233093][ T984] usb 4-1: USB disconnect, device number 97 [ 746.141573][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.580867][ T5921] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 746.805295][ T5921] usb 4-1: unable to get BOS descriptor or descriptor too short [ 746.838491][ T5921] usb 4-1: not running at top speed; connect to a high speed hub [ 746.871714][ T5921] usb 4-1: config 2 has an invalid interface number: 212 but max is 1 [ 746.880109][ T5921] usb 4-1: config 2 has an invalid interface number: 226 but max is 1 [ 746.940638][ T5921] usb 4-1: config 2 has no interface number 0 [ 746.982075][ T5921] usb 4-1: config 2 has no interface number 1 [ 747.000960][ T5921] usb 4-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 747.060832][ T5921] usb 4-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 747.091720][ T5921] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 747.152430][ T5921] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 747.157022][T20396] loop6: detected capacity change from 0 to 7 [ 747.169518][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.195283][T20396] Dev loop6: unable to read RDB block 7 [ 747.210563][T20396] loop6: unable to read partition table [ 747.236647][ T5921] usb 4-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 747.260872][T20396] loop6: partition table beyond EOD, truncated [ 747.314046][T20396] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 747.326912][ T5921] usb 4-1: config 2 interface 212 has no altsetting 0 [ 747.366176][ T5921] usb 4-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 747.379164][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.401880][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.502207][ T5921] usb 4-1: Product: syz [ 747.510940][ T5921] usb 4-1: Manufacturer: syz [ 747.519644][ T5921] usb 4-1: SerialNumber: syz [ 747.804194][ T5921] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.226/input/input47 [ 747.871035][ T5921] usb 4-1: USB disconnect, device number 98 [ 747.871212][ C1] xpad 4-1:2.226: xpad_irq_in - usb_submit_urb failed with result -19 [ 748.377694][T16869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.387130][T20409] FAULT_INJECTION: forcing a failure. [ 748.387130][T20409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 748.441165][T20409] CPU: 0 UID: 0 PID: 20409 Comm: syz.2.5731 Not tainted syzkaller #0 PREEMPT(full) [ 748.441196][T20409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 748.441211][T20409] Call Trace: [ 748.441222][T20409] [ 748.441230][T20409] dump_stack_lvl+0x189/0x250 [ 748.441269][T20409] ? __pfx____ratelimit+0x10/0x10 [ 748.441301][T20409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 748.441331][T20409] ? __pfx__printk+0x10/0x10 [ 748.441355][T20409] ? __might_fault+0xb0/0x130 [ 748.441399][T20409] should_fail_ex+0x414/0x560 [ 748.441440][T20409] _copy_from_iter+0x1de/0x1790 [ 748.441470][T20409] ? rcu_is_watching+0x15/0xb0 [ 748.441493][T20409] ? kmalloc_reserve+0xbd/0x290 [ 748.441509][T20409] ? __pfx__copy_from_iter+0x10/0x10 [ 748.441529][T20409] ? __build_skb_around+0x262/0x3f0 [ 748.441546][T20409] ? netlink_sendmsg+0x642/0xb30 [ 748.441562][T20409] ? skb_put+0x11b/0x210 [ 748.441580][T20409] netlink_sendmsg+0x6b2/0xb30 [ 748.441604][T20409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 748.441623][T20409] ? __import_iovec+0x5d4/0x7f0 [ 748.441641][T20409] ? aa_sock_msg_perm+0xf1/0x1d0 [ 748.441667][T20409] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 748.441683][T20409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 748.441700][T20409] __sock_sendmsg+0x21c/0x270 [ 748.441726][T20409] ____sys_sendmsg+0x505/0x830 [ 748.441749][T20409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 748.441779][T20409] ___sys_sendmsg+0x21f/0x2a0 [ 748.441799][T20409] ? __pfx____sys_sendmsg+0x10/0x10 [ 748.441845][T20409] ? __fget_files+0x2a/0x420 [ 748.441859][T20409] ? __fget_files+0x3a0/0x420 [ 748.441882][T20409] __sys_sendmsg+0x164/0x220 [ 748.441902][T20409] ? __pfx___sys_sendmsg+0x10/0x10 [ 748.441926][T20409] ? __pfx_ksys_write+0x10/0x10 [ 748.441952][T20409] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 748.441994][T20409] ? lockdep_hardirqs_on+0x9c/0x150 [ 748.442023][T20409] __do_fast_syscall_32+0xb6/0x2b0 [ 748.442038][T20409] ? lockdep_hardirqs_on+0x9c/0x150 [ 748.442065][T20409] do_fast_syscall_32+0x34/0x80 [ 748.442080][T20409] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 748.442099][T20409] RIP: 0023:0xf7fb2539 [ 748.442113][T20409] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 748.442127][T20409] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 748.442144][T20409] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 748.442155][T20409] RDX: 0000000000004800 RSI: 0000000000000000 RDI: 0000000000000000 [ 748.442165][T20409] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 748.442174][T20409] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 748.442184][T20409] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 748.442207][T20409] [ 749.036895][T20416] FAULT_INJECTION: forcing a failure. [ 749.036895][T20416] name failslab, interval 1, probability 0, space 0, times 0 [ 749.051143][T20414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5732'. [ 749.120818][T20416] CPU: 0 UID: 0 PID: 20416 Comm: syz.4.5733 Not tainted syzkaller #0 PREEMPT(full) [ 749.120847][T20416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 749.120858][T20416] Call Trace: [ 749.120864][T20416] [ 749.120871][T20416] dump_stack_lvl+0x189/0x250 [ 749.120900][T20416] ? __pfx____ratelimit+0x10/0x10 [ 749.120924][T20416] ? __pfx_dump_stack_lvl+0x10/0x10 [ 749.120947][T20416] ? __pfx__printk+0x10/0x10 [ 749.120968][T20416] ? __pfx___might_resched+0x10/0x10 [ 749.120985][T20416] ? fs_reclaim_acquire+0x7d/0x100 [ 749.121015][T20416] should_fail_ex+0x414/0x560 [ 749.121044][T20416] should_failslab+0xa8/0x100 [ 749.121062][T20416] kmem_cache_alloc_node_noprof+0x77/0x710 [ 749.121085][T20416] ? __alloc_skb+0x112/0x2d0 [ 749.121100][T20416] ? __pfx___mutex_trylock_common+0x10/0x10 [ 749.121124][T20416] __alloc_skb+0x112/0x2d0 [ 749.121143][T20416] netlink_dump+0x1b7/0xe90 [ 749.121163][T20416] ? __netlink_lookup+0xbd/0x8a0 [ 749.121183][T20416] ? __pfx_netlink_dump+0x10/0x10 [ 749.121196][T20416] ? __netlink_lookup+0x7db/0x8a0 [ 749.121225][T20416] ? netlink_lookup+0x30/0x200 [ 749.121239][T20416] ? netlink_lookup+0x30/0x200 [ 749.121251][T20416] ? netlink_lookup+0x30/0x200 [ 749.121270][T20416] __netlink_dump_start+0x5cb/0x7e0 [ 749.121292][T20416] rtnetlink_rcv_msg+0x9eb/0xb70 [ 749.121318][T20416] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 749.121337][T20416] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 749.121361][T20416] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 749.121384][T20416] ? ref_tracker_free+0x63a/0x7d0 [ 749.121399][T20416] ? __pfx_rtnl_dumpit+0x10/0x10 [ 749.121423][T20416] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 749.121441][T20416] ? __skb_clone+0x63/0x7a0 [ 749.121466][T20416] netlink_rcv_skb+0x208/0x470 [ 749.121483][T20416] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 749.121509][T20416] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 749.121534][T20416] ? netlink_deliver_tap+0x2e/0x1b0 [ 749.121556][T20416] netlink_unicast+0x82f/0x9e0 [ 749.121587][T20416] ? __pfx_netlink_unicast+0x10/0x10 [ 749.121613][T20416] ? netlink_sendmsg+0x642/0xb30 [ 749.121635][T20416] ? skb_put+0x11b/0x210 [ 749.121653][T20416] netlink_sendmsg+0x805/0xb30 [ 749.121678][T20416] ? __pfx_netlink_sendmsg+0x10/0x10 [ 749.121696][T20416] ? __import_iovec+0x5d4/0x7f0 [ 749.121715][T20416] ? aa_sock_msg_perm+0xf1/0x1d0 [ 749.121741][T20416] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 749.121757][T20416] ? __pfx_netlink_sendmsg+0x10/0x10 [ 749.121775][T20416] __sock_sendmsg+0x21c/0x270 [ 749.121800][T20416] ____sys_sendmsg+0x505/0x830 [ 749.121823][T20416] ? __pfx_____sys_sendmsg+0x10/0x10 [ 749.121854][T20416] ___sys_sendmsg+0x21f/0x2a0 [ 749.121875][T20416] ? __pfx____sys_sendmsg+0x10/0x10 [ 749.121922][T20416] ? __fget_files+0x2a/0x420 [ 749.121937][T20416] ? __fget_files+0x3a0/0x420 [ 749.121960][T20416] __sys_sendmsg+0x164/0x220 [ 749.121980][T20416] ? __pfx___sys_sendmsg+0x10/0x10 [ 749.122005][T20416] ? __pfx_ksys_write+0x10/0x10 [ 749.122030][T20416] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 749.122057][T20416] ? lockdep_hardirqs_on+0x9c/0x150 [ 749.122084][T20416] __do_fast_syscall_32+0xb6/0x2b0 [ 749.122099][T20416] ? lockdep_hardirqs_on+0x9c/0x150 [ 749.122143][T20416] do_fast_syscall_32+0x34/0x80 [ 749.122164][T20416] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 749.122191][T20416] RIP: 0023:0xf70bd539 [ 749.122210][T20416] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 749.122229][T20416] RSP: 002b:00000000f548c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 749.122251][T20416] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080006040 [ 749.122265][T20416] RDX: 0000000004041080 RSI: 0000000000000000 RDI: 0000000000000000 [ 749.122275][T20416] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 749.122284][T20416] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 749.122293][T20416] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 749.122316][T20416] [ 749.567387][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.576942][T20414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5732'. [ 749.639239][T20420] netlink: 'syz.2.5735': attribute type 8 has an invalid length. [ 750.146702][T20426] blktrace: Concurrent blktraces are not allowed on nullb0 [ 750.390796][ T5920] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 750.444570][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.577170][T20439] IPVS: set_ctl: invalid protocol: 55 0.0.0.0:0 [ 750.888463][T16869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.000722][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 751.019441][ T5920] usb 1-1: config 162 has an invalid interface number: 142 but max is 1 [ 751.032836][ T5920] usb 1-1: config 162 has an invalid interface number: 112 but max is 1 [ 751.105759][ T984] usb 4-1: new low-speed USB device number 99 using dummy_hcd [ 751.171600][ T5920] usb 1-1: config 162 has no interface number 0 [ 751.177902][ T5920] usb 1-1: config 162 has no interface number 1 [ 751.208235][ T5920] usb 1-1: config 162 interface 142 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 751.250781][ T5920] usb 1-1: config 162 interface 112 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 751.269432][T20441] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5742'. [ 751.279254][T20441] netlink: 43 bytes leftover after parsing attributes in process `syz.5.5742'. [ 751.300806][T20441] netlink: 'syz.5.5742': attribute type 6 has an invalid length. [ 751.308581][T20441] netlink: 'syz.5.5742': attribute type 5 has an invalid length. [ 751.321484][ T984] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 751.329884][ T984] usb 4-1: config 0 has no interface number 0 [ 751.338040][ T5920] usb 1-1: config 162 interface 112 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 751.349975][T20441] netlink: 43 bytes leftover after parsing attributes in process `syz.5.5742'. [ 751.370649][ T5920] usb 1-1: config 162 interface 112 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 751.374706][ T984] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 751.416926][ T984] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 751.438877][ T984] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 751.440831][ T5920] usb 1-1: config 162 interface 112 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 751.459198][ T984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.513435][ T984] usb 4-1: config 0 descriptor?? [ 751.519174][T20433] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 751.535554][ T5920] usb 1-1: config 162 interface 142 has no altsetting 0 [ 751.543073][ T984] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 751.561846][ T5920] usb 1-1: config 162 interface 112 has no altsetting 0 [ 751.578554][T20446] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5743'. [ 751.597093][ T5920] usb 1-1: New USB device found, idVendor=0557, idProduct=2008, bcdDevice=a7.08 [ 751.610823][T20446] netlink: 'syz.4.5743': attribute type 1 has an invalid length. [ 751.618696][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.633441][ T5920] usb 1-1: Product: syz [ 751.655371][ T5920] usb 1-1: Manufacturer: syz [ 751.672914][ T5920] usb 1-1: SerialNumber: syz [ 751.961903][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.083933][ T5920] pl2303 1-1:162.142: required endpoints missing [ 752.114946][ T5920] pl2303 1-1:162.112: required interrupt-in endpoint missing [ 752.155956][ T5920] usb 1-1: USB disconnect, device number 102 [ 752.392730][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.393369][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.407811][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.004189][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.483220][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.411399][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.280835][ T5920] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 755.373692][T16869] usb 4-1: USB disconnect, device number 99 [ 755.457289][ T5920] usb 5-1: too many configurations: 12, using maximum allowed: 8 [ 755.506567][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.531078][ T5920] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 755.559465][ T5920] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 755.610216][ T5920] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 755.630888][ T5920] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 755.670456][ T5920] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 755.682662][ T5920] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 755.715165][ T5920] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 755.730764][ T5920] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 755.761559][ T5920] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 755.778619][ T5920] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 755.816775][ T5920] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 755.825742][ T5920] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 755.867978][ T5920] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 755.884345][ T5920] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 755.924079][ T5920] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 755.937132][ T5920] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 756.011332][ T5920] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 756.027028][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.044227][ T5920] usb 5-1: Product: syz [ 756.054260][ T5920] usb 5-1: Manufacturer: syz [ 756.065160][ T5920] usb 5-1: SerialNumber: syz [ 756.146236][ T5920] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 756.276632][T16869] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 756.360704][T20500] FAULT_INJECTION: forcing a failure. [ 756.360704][T20500] name failslab, interval 1, probability 0, space 0, times 0 [ 756.412714][T20500] CPU: 0 UID: 0 PID: 20500 Comm: syz.5.5760 Not tainted syzkaller #0 PREEMPT(full) [ 756.412746][T20500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 756.412761][T20500] Call Trace: [ 756.412771][T20500] [ 756.412780][T20500] dump_stack_lvl+0x189/0x250 [ 756.412817][T20500] ? __pfx____ratelimit+0x10/0x10 [ 756.412849][T20500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 756.412880][T20500] ? __pfx__printk+0x10/0x10 [ 756.412909][T20500] ? __pfx___might_resched+0x10/0x10 [ 756.412932][T20500] ? fs_reclaim_acquire+0x7d/0x100 [ 756.412972][T20500] should_fail_ex+0x414/0x560 [ 756.413025][T20500] should_failslab+0xa8/0x100 [ 756.413050][T20500] __kmalloc_noprof+0xcb/0x7f0 [ 756.413080][T20500] ? tomoyo_encode+0x28b/0x550 [ 756.413121][T20500] tomoyo_encode+0x28b/0x550 [ 756.413161][T20500] tomoyo_realpath_from_path+0x58d/0x5d0 [ 756.413209][T20500] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 756.413238][T20500] tomoyo_path_number_perm+0x1e8/0x5a0 [ 756.413271][T20500] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 756.413339][T20500] ? __lock_acquire+0xab9/0xd20 [ 756.413385][T20500] ? __fget_files+0x2a/0x420 [ 756.413412][T20500] ? __fget_files+0x3a0/0x420 [ 756.413433][T20500] ? __fget_files+0x2a/0x420 [ 756.413460][T20500] security_file_ioctl_compat+0xcb/0x2d0 [ 756.413498][T20500] __ia32_compat_sys_ioctl+0x128/0x840 [ 756.413533][T20500] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 756.413565][T20500] ? __fget_files+0x3a0/0x420 [ 756.413599][T20500] ? fput+0xa0/0xd0 [ 756.413625][T20500] ? ksys_write+0x22a/0x250 [ 756.413655][T20500] ? exc_page_fault+0x82/0x100 [ 756.413689][T20500] ? __pfx_ksys_write+0x10/0x10 [ 756.413725][T20500] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 756.413765][T20500] ? lockdep_hardirqs_on+0x9c/0x150 [ 756.413801][T20500] __do_fast_syscall_32+0xb6/0x2b0 [ 756.413824][T20500] ? lockdep_hardirqs_on+0x9c/0x150 [ 756.413861][T20500] do_fast_syscall_32+0x34/0x80 [ 756.413883][T20500] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 756.413910][T20500] RIP: 0023:0xf7f47539 [ 756.413930][T20500] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 756.413950][T20500] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 756.413974][T20500] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040605346 [ 756.413998][T20500] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 756.414012][T20500] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 756.414025][T20500] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 756.414039][T20500] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 756.414074][T20500] [ 756.414950][T20504] blktrace: Concurrent blktraces are not allowed on nullb0 [ 756.501102][T20500] ERROR: Out of memory at tomoyo_realpath_from_path. [ 756.521129][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.708036][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.813831][T20507] FAULT_INJECTION: forcing a failure. [ 756.813831][T20507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 756.828552][T20507] CPU: 1 UID: 0 PID: 20507 Comm: syz.0.5763 Not tainted syzkaller #0 PREEMPT(full) [ 756.828582][T20507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 756.828596][T20507] Call Trace: [ 756.828605][T20507] [ 756.828618][T20507] dump_stack_lvl+0x189/0x250 [ 756.828654][T20507] ? __pfx____ratelimit+0x10/0x10 [ 756.828684][T20507] ? __pfx_dump_stack_lvl+0x10/0x10 [ 756.828715][T20507] ? __pfx__printk+0x10/0x10 [ 756.828751][T20507] should_fail_ex+0x414/0x560 [ 756.828790][T20507] _copy_to_user+0x31/0xb0 [ 756.828821][T20507] simple_read_from_buffer+0xe1/0x170 [ 756.828859][T20507] proc_fail_nth_read+0x1b3/0x220 [ 756.828891][T20507] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 756.828941][T20507] ? rw_verify_area+0x2a6/0x4d0 [ 756.828970][T20507] ? __lock_acquire+0xab9/0xd20 [ 756.828991][T20507] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 756.829022][T20507] vfs_read+0x200/0xa30 [ 756.829053][T20507] ? fdget_pos+0x247/0x320 [ 756.829079][T20507] ? __pfx___mutex_lock+0x10/0x10 [ 756.829114][T20507] ? __pfx_vfs_read+0x10/0x10 [ 756.829148][T20507] ? __fget_files+0x2a/0x420 [ 756.829190][T20507] ? __fget_files+0x3a0/0x420 [ 756.829210][T20507] ? __fget_files+0x2a/0x420 [ 756.829242][T20507] ksys_read+0x145/0x250 [ 756.829283][T20507] ? __pfx_ksys_read+0x10/0x10 [ 756.829318][T20507] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 756.829356][T20507] ? lockdep_hardirqs_on+0x9c/0x150 [ 756.829393][T20507] __do_fast_syscall_32+0xb6/0x2b0 [ 756.829415][T20507] ? lockdep_hardirqs_on+0x9c/0x150 [ 756.829454][T20507] do_fast_syscall_32+0x34/0x80 [ 756.829475][T20507] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 756.829503][T20507] RIP: 0023:0xf701d539 [ 756.829524][T20507] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 756.829543][T20507] RSP: 002b:00000000f540d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 756.829567][T20507] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f540d620 [ 756.829583][T20507] RDX: 000000000000000f RSI: 00000000f73b6ff4 RDI: 0000000000000000 [ 756.829597][T20507] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 756.829611][T20507] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 756.829625][T20507] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 756.829659][T20507] [ 757.071076][ T5921] usb 5-1: USB disconnect, device number 78 [ 757.120749][ T984] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 757.271725][ T984] usb 4-1: Using ep0 maxpacket: 8 [ 757.292269][ T984] usb 4-1: config 162 has an invalid interface number: 142 but max is 1 [ 757.318666][ T984] usb 4-1: config 162 has an invalid interface number: 112 but max is 1 [ 757.396368][ T984] usb 4-1: config 162 has no interface number 0 [ 757.410824][T16869] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 757.418109][T16869] ath9k_htc: Failed to initialize the device [ 757.466154][ T984] usb 4-1: config 162 has no interface number 1 [ 757.490779][ T5921] usb 5-1: ath9k_htc: USB layer deinitialized [ 757.514622][ T984] usb 4-1: config 162 interface 142 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 757.572093][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.588993][ T984] usb 4-1: config 162 interface 112 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 757.708803][ T984] usb 4-1: config 162 interface 112 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 757.738983][ T984] usb 4-1: config 162 interface 112 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 757.760728][ T984] usb 4-1: config 162 interface 112 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 757.777724][ T984] usb 4-1: config 162 interface 142 has no altsetting 0 [ 757.787563][ T984] usb 4-1: config 162 interface 112 has no altsetting 0 [ 757.799070][ T984] usb 4-1: New USB device found, idVendor=0557, idProduct=2008, bcdDevice=a7.08 [ 757.809050][ T984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.817596][ T984] usb 4-1: Product: syz [ 757.823904][ T984] usb 4-1: Manufacturer: syz [ 757.828564][ T984] usb 4-1: SerialNumber: syz [ 758.422426][ T984] pl2303 4-1:162.142: required endpoints missing [ 758.537517][ T984] pl2303 4-1:162.112: required interrupt-in endpoint missing [ 758.601643][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.672406][ T984] usb 4-1: USB disconnect, device number 100 [ 758.916136][T20535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5773'. [ 758.926675][T20535] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5773'. [ 758.944316][T20535] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5773'. [ 759.092316][T20533] sctp: [Deprecated]: syz.5.5772 (pid 20533) Use of struct sctp_assoc_value in delayed_ack socket option. [ 759.092316][T20533] Use struct sctp_sack_info instead [ 759.345996][T20538] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.353464][T20538] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.513427][T20538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.571735][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.582070][T20538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.641724][T16869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.848336][ T1167] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.860835][ T1167] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.900899][ T1167] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.909822][ T1167] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.128833][T20556] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5782'. [ 760.167976][T20563] FAULT_INJECTION: forcing a failure. [ 760.167976][T20563] name failslab, interval 1, probability 0, space 0, times 0 [ 760.198325][T20563] CPU: 0 UID: 0 PID: 20563 Comm: syz.3.5785 Not tainted syzkaller #0 PREEMPT(full) [ 760.198349][T20563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 760.198366][T20563] Call Trace: [ 760.198376][T20563] [ 760.198387][T20563] dump_stack_lvl+0x189/0x250 [ 760.198424][T20563] ? __pfx____ratelimit+0x10/0x10 [ 760.198457][T20563] ? __pfx_dump_stack_lvl+0x10/0x10 [ 760.198481][T20563] ? __pfx__printk+0x10/0x10 [ 760.198502][T20563] ? __pfx___might_resched+0x10/0x10 [ 760.198520][T20563] ? fs_reclaim_acquire+0x7d/0x100 [ 760.198550][T20563] should_fail_ex+0x414/0x560 [ 760.198578][T20563] should_failslab+0xa8/0x100 [ 760.198596][T20563] __kmalloc_cache_noprof+0x6f/0x6f0 [ 760.198621][T20563] ? nft_flush_table+0xb0a/0xea0 [ 760.198648][T20563] nft_flush_table+0xb0a/0xea0 [ 760.198672][T20563] ? nla_strcmp+0x106/0x140 [ 760.198688][T20563] ? nla_strcmp+0x106/0x140 [ 760.198713][T20563] nf_tables_deltable+0xcbb/0xe10 [ 760.198738][T20563] ? __pfx_nf_tables_deltable+0x10/0x10 [ 760.198757][T20563] ? nfnl_pernet+0x23/0x240 [ 760.198787][T20563] ? __nla_parse+0x40/0x60 [ 760.198808][T20563] nfnetlink_rcv+0x11d9/0x2590 [ 760.198858][T20563] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 760.198919][T20563] ? netlink_deliver_tap+0x2e/0x1b0 [ 760.198949][T20563] netlink_unicast+0x82f/0x9e0 [ 760.198980][T20563] ? __pfx_netlink_unicast+0x10/0x10 [ 760.199006][T20563] ? netlink_sendmsg+0x642/0xb30 [ 760.199021][T20563] ? skb_put+0x11b/0x210 [ 760.199040][T20563] netlink_sendmsg+0x805/0xb30 [ 760.199064][T20563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 760.199082][T20563] ? __import_iovec+0x5d4/0x7f0 [ 760.199101][T20563] ? aa_sock_msg_perm+0xf1/0x1d0 [ 760.199127][T20563] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 760.199143][T20563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 760.199160][T20563] __sock_sendmsg+0x21c/0x270 [ 760.199185][T20563] ____sys_sendmsg+0x505/0x830 [ 760.199207][T20563] ? __pfx_____sys_sendmsg+0x10/0x10 [ 760.199238][T20563] ___sys_sendmsg+0x21f/0x2a0 [ 760.199258][T20563] ? __pfx____sys_sendmsg+0x10/0x10 [ 760.199303][T20563] ? __fget_files+0x2a/0x420 [ 760.199321][T20563] ? __fget_files+0x3a0/0x420 [ 760.199345][T20563] __sys_sendmsg+0x164/0x220 [ 760.199364][T20563] ? __pfx___sys_sendmsg+0x10/0x10 [ 760.199388][T20563] ? __pfx_ksys_write+0x10/0x10 [ 760.199414][T20563] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 760.199444][T20563] ? lockdep_hardirqs_on+0x9c/0x150 [ 760.199471][T20563] __do_fast_syscall_32+0xb6/0x2b0 [ 760.199486][T20563] ? lockdep_hardirqs_on+0x9c/0x150 [ 760.199512][T20563] do_fast_syscall_32+0x34/0x80 [ 760.199527][T20563] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 760.199547][T20563] RIP: 0023:0xf6ffd539 [ 760.199562][T20563] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 760.199576][T20563] RSP: 002b:00000000f53ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 760.199593][T20563] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 760.199604][T20563] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 760.199614][T20563] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 760.199623][T20563] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 760.199633][T20563] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 760.199656][T20563] [ 760.681152][T16869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.721298][ T5919] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 760.830796][ T5889] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 760.890730][ T5919] usb 1-1: Using ep0 maxpacket: 32 [ 760.901078][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.920719][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.939589][T20572] can: request_module (can-proto-3) failed. [ 760.946059][ T5919] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 760.957369][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.059181][ T5889] usb 5-1: Using ep0 maxpacket: 8 [ 761.088910][T20575] can: request_module (can-proto-3) failed. [ 761.161237][ T5889] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 761.197900][ T5889] usb 5-1: config 0 interface 0 has no altsetting 0 [ 761.253073][ T5919] usb 1-1: config 0 descriptor?? [ 761.277810][ T5889] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 761.318269][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.499750][ T5889] usb 5-1: Product: syz [ 761.515065][ T5889] usb 5-1: Manufacturer: syz [ 761.537435][ T5889] usb 5-1: SerialNumber: syz [ 761.647810][ T5889] usb 5-1: config 0 descriptor?? [ 761.688416][ T5889] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 761.702055][ T5919] ft260 0003:0403:6030.001A: unknown main item tag 0x7 [ 761.721719][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.868602][ T5889] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 761.898473][ T5919] ft260 0003:0403:6030.001A: chip code: 6424 8183 [ 761.920980][ T5889] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 761.949219][ T5889] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 761.961242][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.106083][ T5919] ft260 0003:0403:6030.001A: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 762.306801][ T5919] ft260 0003:0403:6030.001A: failed to retrieve status: -32, no wakeup [ 762.347076][ T5919] ft260 0003:0403:6030.001A: failed to retrieve status: -5 [ 762.548970][ T5919] ft260 0003:0403:6030.001A: failed to reset I2C controller: -71 [ 762.614386][ T5919] usb 1-1: USB disconnect, device number 103 [ 762.643596][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.800829][T16869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.161058][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.205362][T20600] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5793'. [ 763.585170][ T5889] usb 5-1: USB disconnect, device number 79 [ 763.881252][T16869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.439489][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880597b2c00: rx timeout, send abort [ 764.449487][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880597b2c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 764.921046][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.348763][T20633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5801'. [ 765.720917][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.950883][T16869] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 765.971242][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.112250][T16869] usb 6-1: Using ep0 maxpacket: 32 [ 766.136474][T16869] usb 6-1: no configurations [ 766.160783][T16869] usb 6-1: can't read configurations, error -22 [ 766.339606][T16869] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 766.501587][T16869] usb 6-1: Using ep0 maxpacket: 32 [ 766.545640][T16869] usb 6-1: no configurations [ 766.575108][T16869] usb 6-1: can't read configurations, error -22 [ 766.646884][T16869] usb usb6-port1: attempt power cycle [ 766.696899][T20662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5808'. [ 766.743217][T20662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5808'. [ 767.047440][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.081104][T20662] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5808'. [ 767.110818][T16869] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 767.141404][T16869] usb 6-1: Using ep0 maxpacket: 32 [ 767.154702][T16869] usb 6-1: no configurations [ 767.174687][T16869] usb 6-1: can't read configurations, error -22 [ 767.340759][T16869] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 767.371448][T16869] usb 6-1: Using ep0 maxpacket: 32 [ 767.386006][T16869] usb 6-1: no configurations [ 767.395558][T16869] usb 6-1: can't read configurations, error -22 [ 767.411989][T16869] usb usb6-port1: unable to enumerate USB device [ 767.870810][T16869] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 768.031957][T16869] usb 4-1: Using ep0 maxpacket: 8 [ 768.054932][T16869] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 768.073156][T16869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.084371][T16869] usb 4-1: Product: syz [ 768.088571][T16869] usb 4-1: Manufacturer: syz [ 768.094186][T16869] usb 4-1: SerialNumber: syz [ 768.105366][T16869] usb 4-1: config 0 descriptor?? [ 768.121236][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.201384][ T984] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 768.327243][T16869] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 768.361523][ T984] usb 5-1: Using ep0 maxpacket: 8 [ 768.376683][ T984] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=e2.f2 [ 768.385846][ T984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.397560][ T984] usb 5-1: config 0 descriptor?? [ 768.608927][T20674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.622280][T20674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.636502][T20674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.648724][T20674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.663076][T20674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.674679][T20674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.690512][T20674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.704465][T20674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.720211][T20674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.732965][T20674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.760971][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.779156][ T984] (null): keene_cmd_main failed (-71) [ 768.810297][ T984] video4linux radio48: keene_cmd_main failed (-71) [ 768.850924][ T984] radio-keene 5-1:0.0: V4L2 device registered as radio48 [ 768.861073][T16869] gspca_sunplus: reg_w_riv err -110 [ 768.869912][T16869] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 768.888701][ T984] usb 5-1: USB disconnect, device number 80 [ 769.171524][T16869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.560959][T20694] blktrace: Concurrent blktraces are not allowed on nullb0 [ 769.952492][ T44] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 770.131172][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 770.143289][ T44] usb 5-1: config 162 has an invalid interface number: 142 but max is 1 [ 770.155796][ T44] usb 5-1: config 162 has an invalid interface number: 112 but max is 1 [ 770.176759][ T44] usb 5-1: config 162 has no interface number 0 [ 770.193468][ T44] usb 5-1: config 162 has no interface number 1 [ 770.208913][ T44] usb 5-1: config 162 interface 142 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 770.223262][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.250473][ T44] usb 5-1: config 162 interface 112 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 770.280267][ T44] usb 5-1: config 162 interface 112 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 770.538201][ T44] usb 5-1: config 162 interface 112 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 770.557953][ T44] usb 5-1: config 162 interface 112 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 770.572563][ T44] usb 5-1: config 162 interface 142 has no altsetting 0 [ 770.580065][ T44] usb 5-1: config 162 interface 112 has no altsetting 0 [ 770.594569][ T44] usb 5-1: New USB device found, idVendor=0557, idProduct=2008, bcdDevice=a7.08 [ 770.624611][ T984] usb 4-1: USB disconnect, device number 101 [ 770.628673][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.638930][ T44] usb 5-1: Product: syz [ 770.645496][ T44] usb 5-1: Manufacturer: syz [ 770.662329][ T44] usb 5-1: SerialNumber: syz [ 771.159951][ T44] pl2303 5-1:162.142: required endpoints missing [ 771.179492][ T44] pl2303 5-1:162.112: required interrupt-in endpoint missing [ 771.241623][T16869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.254298][ T44] usb 5-1: USB disconnect, device number 81 [ 771.561374][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.810961][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.302324][T16869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.808378][T20730] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5826'. [ 772.849263][T20730] FAULT_INJECTION: forcing a failure. [ 772.849263][T20730] name failslab, interval 1, probability 0, space 0, times 0 [ 772.925128][T20730] CPU: 0 UID: 0 PID: 20730 Comm: syz.4.5826 Not tainted syzkaller #0 PREEMPT(full) [ 772.925158][T20730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 772.925172][T20730] Call Trace: [ 772.925180][T20730] [ 772.925189][T20730] dump_stack_lvl+0x189/0x250 [ 772.925223][T20730] ? __pfx____ratelimit+0x10/0x10 [ 772.925252][T20730] ? __pfx_dump_stack_lvl+0x10/0x10 [ 772.925280][T20730] ? __pfx__printk+0x10/0x10 [ 772.925308][T20730] ? __pfx___might_resched+0x10/0x10 [ 772.925337][T20730] should_fail_ex+0x414/0x560 [ 772.925374][T20730] should_failslab+0xa8/0x100 [ 772.925398][T20730] __kvmalloc_node_noprof+0x158/0x910 [ 772.925432][T20730] ? nf_hook_entries_grow+0x281/0x720 [ 772.925456][T20730] ? __pfx___mutex_lock+0x10/0x10 [ 772.925493][T20730] nf_hook_entries_grow+0x281/0x720 [ 772.925531][T20730] __nf_register_net_hook+0x2c9/0x930 [ 772.925565][T20730] nf_register_net_hook+0xb2/0x190 [ 772.925591][T20730] nf_register_net_hooks+0x44/0x1b0 [ 772.925618][T20730] nf_defrag_ipv6_enable+0x87/0x120 [ 772.925642][T20730] nf_ct_netns_do_get+0x1e7/0x5a0 [ 772.925670][T20730] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 772.925699][T20730] ? nft_validate_register_store+0x188/0x1d0 [ 772.925728][T20730] ? nft_parse_register_store+0x239/0x2c0 [ 772.925757][T20730] nft_ct_get_init+0x5bf/0x9c0 [ 772.925790][T20730] nf_tables_newrule+0x1794/0x28a0 [ 772.925847][T20730] ? __pfx_nf_tables_newrule+0x10/0x10 [ 772.925875][T20730] ? nfnl_pernet+0x23/0x240 [ 772.925915][T20730] ? __nla_parse+0x40/0x60 [ 772.925943][T20730] nfnetlink_rcv+0x11d9/0x2590 [ 772.926012][T20730] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 772.926061][T20730] ? ref_tracker_free+0x63a/0x7d0 [ 772.926115][T20730] ? __netlink_deliver_tap+0x807/0x850 [ 772.926136][T20730] ? netlink_deliver_tap+0x2e/0x1b0 [ 772.926178][T20730] netlink_unicast+0x82f/0x9e0 [ 772.926219][T20730] ? __pfx_netlink_unicast+0x10/0x10 [ 772.926251][T20730] ? netlink_sendmsg+0x642/0xb30 [ 772.926270][T20730] ? skb_put+0x11b/0x210 [ 772.926296][T20730] netlink_sendmsg+0x805/0xb30 [ 772.926329][T20730] ? __pfx_netlink_sendmsg+0x10/0x10 [ 772.926354][T20730] ? __import_iovec+0x5d4/0x7f0 [ 772.926379][T20730] ? aa_sock_msg_perm+0xf1/0x1d0 [ 772.926410][T20730] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 772.926433][T20730] ? __pfx_netlink_sendmsg+0x10/0x10 [ 772.926457][T20730] __sock_sendmsg+0x21c/0x270 [ 772.926492][T20730] ____sys_sendmsg+0x505/0x830 [ 772.926522][T20730] ? __pfx_____sys_sendmsg+0x10/0x10 [ 772.926564][T20730] ___sys_sendmsg+0x21f/0x2a0 [ 772.926585][T20730] ? __pfx____sys_sendmsg+0x10/0x10 [ 772.926633][T20730] ? __fget_files+0x2a/0x420 [ 772.926648][T20730] ? __fget_files+0x3a0/0x420 [ 772.926672][T20730] __sys_sendmsg+0x164/0x220 [ 772.926691][T20730] ? __pfx___sys_sendmsg+0x10/0x10 [ 772.926717][T20730] ? __pfx_ksys_write+0x10/0x10 [ 772.926743][T20730] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 772.926770][T20730] ? lockdep_hardirqs_on+0x9c/0x150 [ 772.926796][T20730] __do_fast_syscall_32+0xb6/0x2b0 [ 772.926820][T20730] ? lockdep_hardirqs_on+0x9c/0x150 [ 772.926847][T20730] do_fast_syscall_32+0x34/0x80 [ 772.926862][T20730] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 772.926883][T20730] RIP: 0023:0xf70bd539 [ 772.926898][T20730] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 772.926912][T20730] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 772.926930][T20730] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 772.926941][T20730] RDX: 0000000024000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 772.926951][T20730] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 772.926960][T20730] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 772.926969][T20730] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 772.926993][T20730] [ 773.333456][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.810432][T20740] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5829'. [ 773.844405][T20740] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5829'. [ 773.879909][T20740] netlink: 'syz.0.5829': attribute type 6 has an invalid length. [ 773.911608][T20740] netlink: 'syz.0.5829': attribute type 5 has an invalid length. [ 774.029991][T20740] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5829'. [ 774.571052][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.841198][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.941355][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 775.235884][T20769] input: syz1 as /devices/virtual/input/input49 [ 775.511570][T20777] FAULT_INJECTION: forcing a failure. [ 775.511570][T20777] name failslab, interval 1, probability 0, space 0, times 0 [ 775.525363][T20777] CPU: 0 UID: 0 PID: 20777 Comm: syz.4.5840 Not tainted syzkaller #0 PREEMPT(full) [ 775.525384][T20777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 775.525395][T20777] Call Trace: [ 775.525402][T20777] [ 775.525409][T20777] dump_stack_lvl+0x189/0x250 [ 775.525435][T20777] ? __pfx____ratelimit+0x10/0x10 [ 775.525458][T20777] ? __pfx_dump_stack_lvl+0x10/0x10 [ 775.525480][T20777] ? __pfx__printk+0x10/0x10 [ 775.525500][T20777] ? look_up_lock_class+0x74/0x170 [ 775.525528][T20777] should_fail_ex+0x414/0x560 [ 775.525557][T20777] should_failslab+0xa8/0x100 [ 775.525575][T20777] __kmalloc_noprof+0xcb/0x7f0 [ 775.525598][T20777] ? io_alloc_ocqe+0xd4/0x5c0 [ 775.525623][T20777] ? io_cqe_cache_refill+0x29b/0x490 [ 775.525646][T20777] io_alloc_ocqe+0xd4/0x5c0 [ 775.525671][T20777] ? io_get_cqe_overflow+0x6bb/0x730 [ 775.525699][T20777] io_cqe_overflow_locked+0x26/0x40 [ 775.525722][T20777] __io_submit_flush_completions+0x28a/0xfc0 [ 775.525755][T20777] io_submit_sqes+0x193d/0x1e60 [ 775.525812][T20777] __se_sys_io_uring_enter+0x2df/0x2b20 [ 775.525848][T20777] ? ksys_write+0x1cb/0x250 [ 775.525873][T20777] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 775.525893][T20777] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 775.525936][T20777] ? __pfx_vfs_write+0x10/0x10 [ 775.525960][T20777] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 775.525989][T20777] ? __fget_files+0x3a0/0x420 [ 775.526009][T20777] ? fput+0xa0/0xd0 [ 775.526027][T20777] ? ksys_write+0x22a/0x250 [ 775.526048][T20777] ? exc_page_fault+0x82/0x100 [ 775.526072][T20777] ? __pfx_ksys_write+0x10/0x10 [ 775.526097][T20777] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 775.526125][T20777] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 775.526150][T20777] __do_fast_syscall_32+0xb6/0x2b0 [ 775.526166][T20777] ? lockdep_hardirqs_on+0x9c/0x150 [ 775.526193][T20777] do_fast_syscall_32+0x34/0x80 [ 775.526207][T20777] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 775.526227][T20777] RIP: 0023:0xf70bd539 [ 775.526240][T20777] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 775.526254][T20777] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 775.526271][T20777] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000002d3e [ 775.526282][T20777] RDX: 00000000fffffffd RSI: 0000000000000000 RDI: 0000000000000000 [ 775.526292][T20777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 775.526301][T20777] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 775.526311][T20777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 775.526334][T20777] [ 775.795407][T16869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.180993][ T5889] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 776.470798][ T5889] usb 1-1: Using ep0 maxpacket: 8 [ 776.477950][ T5889] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 776.486868][ T5889] usb 1-1: config 0 has no interface number 0 [ 776.497596][ T5889] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 776.515898][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.525922][T20789] blktrace: Concurrent blktraces are not allowed on nullb0 [ 776.590760][ T5889] usb 1-1: Product: syz [ 776.607315][ T5889] usb 1-1: Manufacturer: syz [ 776.622568][ T5889] usb 1-1: SerialNumber: syz [ 776.646630][ T5889] usb 1-1: config 0 descriptor?? [ 776.723292][T20791] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5846'. [ 776.732538][T20791] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5846'. [ 776.741942][T20791] netlink: 'syz.4.5846': attribute type 6 has an invalid length. [ 776.749835][T20791] netlink: 'syz.4.5846': attribute type 5 has an invalid length. [ 776.758578][T20791] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5846'. [ 776.800748][T16869] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 776.851160][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.878366][T20769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.911642][T20769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.950379][ T5889] uvcvideo 1-1:0.31: probe with driver uvcvideo failed with error -22 [ 776.961841][T16869] usb 4-1: Using ep0 maxpacket: 8 [ 776.971483][T16869] usb 4-1: config 162 has an invalid interface number: 142 but max is 1 [ 776.980153][T16869] usb 4-1: config 162 has an invalid interface number: 112 but max is 1 [ 777.022362][T16869] usb 4-1: config 162 has no interface number 0 [ 777.036033][T16869] usb 4-1: config 162 has no interface number 1 [ 777.052905][T16869] usb 4-1: config 162 interface 142 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 777.079839][ T5889] usb 1-1: USB disconnect, device number 104 [ 777.100024][T16869] usb 4-1: config 162 interface 112 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 777.132942][T16869] usb 4-1: config 162 interface 112 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 777.161251][T16869] usb 4-1: config 162 interface 112 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 777.182370][T16869] usb 4-1: config 162 interface 112 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 777.230741][T16869] usb 4-1: config 162 interface 142 has no altsetting 0 [ 777.258256][T16869] usb 4-1: config 162 interface 112 has no altsetting 0 [ 777.275552][T16869] usb 4-1: New USB device found, idVendor=0557, idProduct=2008, bcdDevice=a7.08 [ 777.286503][T16869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.302058][T16869] usb 4-1: Product: syz [ 777.310891][T16869] usb 4-1: Manufacturer: syz [ 777.322513][T16869] usb 4-1: SerialNumber: syz [ 777.764921][T16869] pl2303 4-1:162.142: required endpoints missing [ 777.868555][T16869] pl2303 4-1:162.112: required interrupt-in endpoint missing [ 777.881144][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.889282][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.951158][T16869] usb 4-1: USB disconnect, device number 102 [ 778.278171][T20816] FAULT_INJECTION: forcing a failure. [ 778.278171][T20816] name failslab, interval 1, probability 0, space 0, times 0 [ 778.305810][T20816] CPU: 0 UID: 0 PID: 20816 Comm: syz.5.5853 Not tainted syzkaller #0 PREEMPT(full) [ 778.305845][T20816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 778.305860][T20816] Call Trace: [ 778.305869][T20816] [ 778.305879][T20816] dump_stack_lvl+0x189/0x250 [ 778.305916][T20816] ? __pfx____ratelimit+0x10/0x10 [ 778.305948][T20816] ? __pfx_dump_stack_lvl+0x10/0x10 [ 778.305979][T20816] ? __pfx__printk+0x10/0x10 [ 778.306010][T20816] ? __pfx___might_resched+0x10/0x10 [ 778.306041][T20816] should_fail_ex+0x414/0x560 [ 778.306082][T20816] should_failslab+0xa8/0x100 [ 778.306108][T20816] __kmalloc_node_track_caller_noprof+0xcd/0x800 [ 778.306143][T20816] ? kobject_set_name_vargs+0x61/0x110 [ 778.306180][T20816] kvasprintf+0xdc/0x190 [ 778.306214][T20816] ? __pfx_kvasprintf+0x10/0x10 [ 778.306242][T20816] ? rcu_is_watching+0x15/0xb0 [ 778.306268][T20816] ? kfree+0x4d/0x6d0 [ 778.306303][T20816] ? kvasprintf_const+0xe1/0x240 [ 778.306336][T20816] kobject_set_name_vargs+0x61/0x110 [ 778.306360][T20816] dev_set_name+0xd4/0x120 [ 778.306388][T20816] ? __pfx_dev_set_name+0x10/0x10 [ 778.306412][T20816] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 778.306444][T20816] ? nfc_allocate_device+0x129/0x560 [ 778.306475][T20816] nfc_allocate_device+0x1d6/0x560 [ 778.306504][T20816] nci_allocate_device+0x1dc/0x360 [ 778.306535][T20816] virtual_ncidev_open+0x75/0x1a0 [ 778.306569][T20816] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 778.306598][T20816] misc_open+0x2d5/0x350 [ 778.306630][T20816] chrdev_open+0x4cc/0x5e0 [ 778.306656][T20816] ? __pfx_chrdev_open+0x10/0x10 [ 778.306682][T20816] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 778.306715][T20816] ? __pfx_chrdev_open+0x10/0x10 [ 778.306735][T20816] do_dentry_open+0x953/0x13f0 [ 778.306775][T20816] vfs_open+0x3b/0x340 [ 778.306798][T20816] ? path_openat+0x2ecd/0x3830 [ 778.306830][T20816] path_openat+0x2ee5/0x3830 [ 778.306898][T20816] ? __pfx_path_openat+0x10/0x10 [ 778.306948][T20816] do_filp_open+0x1fa/0x410 [ 778.306975][T20816] ? __lock_acquire+0xab9/0xd20 [ 778.307000][T20816] ? __pfx_do_filp_open+0x10/0x10 [ 778.307054][T20816] ? _raw_spin_unlock+0x28/0x50 [ 778.307083][T20816] ? alloc_fd+0x64c/0x6c0 [ 778.307131][T20816] do_sys_openat2+0x121/0x1c0 [ 778.307169][T20816] ? __pfx_do_sys_openat2+0x10/0x10 [ 778.307197][T20816] ? ksys_write+0x22a/0x250 [ 778.307227][T20816] ? exc_page_fault+0x82/0x100 [ 778.307260][T20816] ? __pfx_ksys_write+0x10/0x10 [ 778.307297][T20816] __ia32_compat_sys_openat+0x131/0x160 [ 778.307332][T20816] __do_fast_syscall_32+0xb6/0x2b0 [ 778.307355][T20816] ? lockdep_hardirqs_on+0x9c/0x150 [ 778.307404][T20816] do_fast_syscall_32+0x34/0x80 [ 778.307424][T20816] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 778.307452][T20816] RIP: 0023:0xf7f47539 [ 778.307471][T20816] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 778.307491][T20816] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 778.307515][T20816] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000080 [ 778.307531][T20816] RDX: 0000000000005400 RSI: 0000000000000000 RDI: 0000000000000000 [ 778.307545][T20816] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 778.307558][T20816] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 778.307572][T20816] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 778.307606][T20816] [ 778.921839][T16869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.260113][T20836] FAULT_INJECTION: forcing a failure. [ 779.260113][T20836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 779.283827][T20830] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5859'. [ 779.307623][T20830] netlink: 43 bytes leftover after parsing attributes in process `syz.5.5859'. [ 779.323838][T20836] CPU: 1 UID: 0 PID: 20836 Comm: syz.4.5858 Not tainted syzkaller #0 PREEMPT(full) [ 779.323868][T20836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 779.323883][T20836] Call Trace: [ 779.323893][T20836] [ 779.323903][T20836] dump_stack_lvl+0x189/0x250 [ 779.323940][T20836] ? __pfx____ratelimit+0x10/0x10 [ 779.323972][T20836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 779.324002][T20836] ? __pfx__printk+0x10/0x10 [ 779.324036][T20836] should_fail_ex+0x414/0x560 [ 779.324087][T20836] _copy_to_user+0x31/0xb0 [ 779.324116][T20836] simple_read_from_buffer+0xe1/0x170 [ 779.324154][T20836] proc_fail_nth_read+0x1b3/0x220 [ 779.324186][T20836] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 779.324219][T20836] ? rw_verify_area+0x2a6/0x4d0 [ 779.324250][T20836] ? __lock_acquire+0xab9/0xd20 [ 779.324271][T20836] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 779.324302][T20836] vfs_read+0x200/0xa30 [ 779.324332][T20836] ? fdget_pos+0x247/0x320 [ 779.324359][T20836] ? __pfx___mutex_lock+0x10/0x10 [ 779.324394][T20836] ? __pfx_vfs_read+0x10/0x10 [ 779.324428][T20836] ? __fget_files+0x2a/0x420 [ 779.324455][T20836] ? __fget_files+0x3a0/0x420 [ 779.324475][T20836] ? __fget_files+0x2a/0x420 [ 779.324507][T20836] ksys_read+0x145/0x250 [ 779.324537][T20836] ? exc_page_fault+0x82/0x100 [ 779.324570][T20836] ? __pfx_ksys_read+0x10/0x10 [ 779.324604][T20836] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 779.324640][T20836] ? lockdep_hardirqs_on+0x9c/0x150 [ 779.324677][T20836] __do_fast_syscall_32+0xb6/0x2b0 [ 779.324700][T20836] ? lockdep_hardirqs_on+0x9c/0x150 [ 779.324737][T20836] do_fast_syscall_32+0x34/0x80 [ 779.324759][T20836] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 779.324786][T20836] RIP: 0023:0xf70bd539 [ 779.324805][T20836] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 779.324826][T20836] RSP: 002b:00000000f54ad590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 779.324850][T20836] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54ad620 [ 779.324867][T20836] RDX: 000000000000000f RSI: 00000000f7456ff4 RDI: 0000000000000000 [ 779.324881][T20836] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 779.324896][T20836] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 779.324910][T20836] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 779.324944][T20836] [ 779.350581][T20830] netlink: 'syz.5.5859': attribute type 6 has an invalid length. [ 779.408897][T20832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5857'. [ 779.527984][T20830] netlink: 'syz.5.5859': attribute type 5 has an invalid length. [ 779.644595][T20830] netlink: 43 bytes leftover after parsing attributes in process `syz.5.5859'. [ 779.809726][T20845] netlink: 'syz.4.5861': attribute type 2 has an invalid length. [ 779.854416][T20847] netlink: 'syz.3.5871': attribute type 3 has an invalid length. [ 779.867643][T20845] : entered promiscuous mode [ 779.871012][T20847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5871'. [ 779.908099][T20849] FAULT_INJECTION: forcing a failure. [ 779.908099][T20849] name failslab, interval 1, probability 0, space 0, times 0 [ 779.921318][T20849] CPU: 1 UID: 0 PID: 20849 Comm: syz.0.5862 Not tainted syzkaller #0 PREEMPT(full) [ 779.921340][T20849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 779.921351][T20849] Call Trace: [ 779.921358][T20849] [ 779.921365][T20849] dump_stack_lvl+0x189/0x250 [ 779.921392][T20849] ? __pfx____ratelimit+0x10/0x10 [ 779.921415][T20849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 779.921437][T20849] ? __pfx__printk+0x10/0x10 [ 779.921457][T20849] ? __pfx___might_resched+0x10/0x10 [ 779.921479][T20849] should_fail_ex+0x414/0x560 [ 779.921508][T20849] should_failslab+0xa8/0x100 [ 779.921526][T20849] __kmalloc_noprof+0xcb/0x7f0 [ 779.921549][T20849] ? kfree+0x4d/0x6d0 [ 779.921567][T20849] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 779.921598][T20849] tomoyo_realpath_from_path+0xe3/0x5d0 [ 779.921625][T20849] ? tomoyo_domain+0xd9/0x130 [ 779.921644][T20849] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 779.921665][T20849] tomoyo_path_number_perm+0x1e8/0x5a0 [ 779.921689][T20849] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 779.921723][T20849] ? __lock_acquire+0xab9/0xd20 [ 779.921755][T20849] ? __fget_files+0x2a/0x420 [ 779.921774][T20849] ? __fget_files+0x3a0/0x420 [ 779.921788][T20849] ? __fget_files+0x2a/0x420 [ 779.921807][T20849] security_file_ioctl_compat+0xcb/0x2d0 [ 779.921829][T20849] __ia32_compat_sys_ioctl+0x128/0x840 [ 779.921854][T20849] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 779.921876][T20849] ? __fget_files+0x3a0/0x420 [ 779.921896][T20849] ? fput+0xa0/0xd0 [ 779.921915][T20849] ? ksys_write+0x22a/0x250 [ 779.921936][T20849] ? exc_page_fault+0x82/0x100 [ 779.921960][T20849] ? __pfx_ksys_write+0x10/0x10 [ 779.921986][T20849] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 779.922015][T20849] ? lockdep_hardirqs_on+0x9c/0x150 [ 779.922041][T20849] __do_fast_syscall_32+0xb6/0x2b0 [ 779.922057][T20849] ? lockdep_hardirqs_on+0x9c/0x150 [ 779.922084][T20849] do_fast_syscall_32+0x34/0x80 [ 779.922099][T20849] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 779.922118][T20849] RIP: 0023:0xf701d539 [ 779.922133][T20849] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 779.922146][T20849] RSP: 002b:00000000f540d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 779.922163][T20849] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0045005 [ 779.922175][T20849] RDX: 0000000080000380 RSI: 0000000000000000 RDI: 0000000000000000 [ 779.922185][T20849] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 779.922194][T20849] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 779.922204][T20849] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 779.922228][T20849] [ 779.922235][T20849] ERROR: Out of memory at tomoyo_realpath_from_path. [ 780.201754][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.543935][ T30] audit: type=1400 audit(1763602762.638:1305): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=20855 comm="syz.0.5864" [ 780.710740][ T30] audit: type=1326 audit(1763602762.728:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20857 comm="syz.4.5865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 780.785697][T20863] blktrace: Concurrent blktraces are not allowed on nullb0 [ 780.805311][ T30] audit: type=1326 audit(1763602762.728:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20857 comm="syz.4.5865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 780.910406][ T30] audit: type=1326 audit(1763602762.728:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20857 comm="syz.4.5865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=371 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 780.932953][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.988502][ T30] audit: type=1326 audit(1763602762.728:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20857 comm="syz.4.5865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 781.079227][ T30] audit: type=1326 audit(1763602762.728:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20857 comm="syz.4.5865" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 781.102926][ T10] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 781.167109][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.284022][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.360732][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 781.368610][ T10] usb 5-1: config 162 has an invalid interface number: 142 but max is 1 [ 781.394075][ T10] usb 5-1: config 162 has an invalid interface number: 112 but max is 1 [ 781.455855][ T10] usb 5-1: config 162 has no interface number 0 [ 781.533644][ T10] usb 5-1: config 162 has no interface number 1 [ 781.598248][ T10] usb 5-1: config 162 interface 142 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 781.646883][ T10] usb 5-1: config 162 interface 112 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 781.672318][ T10] usb 5-1: config 162 interface 112 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 781.754015][ T10] usb 5-1: config 162 interface 112 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 781.799879][ T10] usb 5-1: config 162 interface 112 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 781.865498][ T10] usb 5-1: config 162 interface 142 has no altsetting 0 [ 781.906027][ T10] usb 5-1: config 162 interface 112 has no altsetting 0 [ 781.939166][ T10] usb 5-1: New USB device found, idVendor=0557, idProduct=2008, bcdDevice=a7.08 [ 781.963978][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.986465][ T10] usb 5-1: Product: syz [ 781.994250][ T10] usb 5-1: Manufacturer: syz [ 781.998973][ T10] usb 5-1: SerialNumber: syz [ 782.325464][ T984] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 782.361810][T16869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.496329][ T10] pl2303 5-1:162.142: required endpoints missing [ 782.531312][ T10] pl2303 5-1:162.112: required interrupt-in endpoint missing [ 782.554072][ T984] usb 1-1: Using ep0 maxpacket: 8 [ 782.603004][ T984] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 782.612391][ T10] usb 5-1: USB disconnect, device number 82 [ 782.649184][ T984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.788478][ T984] pvrusb2: Hardware description: Terratec Grabster AV400 [ 783.087858][ T984] pvrusb2: ********** [ 783.092319][ T984] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 783.108623][ T984] pvrusb2: Important functionality might not be entirely working. [ 783.116720][ T984] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 783.128188][ T984] pvrusb2: ********** [ 783.139458][ T2347] pvrusb2: Invalid write control endpoint [ 783.238154][ T2347] pvrusb2: Invalid write control endpoint [ 783.245657][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 783.295384][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 783.338710][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 783.369289][ T2347] pvrusb2: Device being rendered inoperable [ 783.394958][T20878] pvrusb2: Attempted to execute control transfer when device not ok [ 783.404122][T16869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.427077][ T2347] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 783.444030][ T10] usb 1-1: USB disconnect, device number 105 [ 783.450292][ T2347] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 783.486418][ T2347] pvrusb2: Attached sub-driver cx25840 [ 783.497345][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 783.524238][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 783.671795][T20900] lo: entered allmulticast mode [ 783.687080][T20900] lo: left allmulticast mode [ 783.961601][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.231948][ T5920] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 784.402791][ T5920] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 784.417775][ T5920] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 784.443704][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.462282][ T5920] usb 6-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 784.474160][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.490802][ T5920] usb 6-1: Product: syz [ 784.495114][ T5920] usb 6-1: Manufacturer: syz [ 784.499708][ T5920] usb 6-1: SerialNumber: syz [ 784.512261][ T5920] usb 6-1: config 0 descriptor?? [ 784.536807][T20907] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 784.621522][T20907] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 784.646823][ T5920] option 6-1:0.0: GSM modem (1-port) converter detected [ 784.823954][ T5920] usb 6-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 784.902052][ T5920] usb 6-1: USB disconnect, device number 17 [ 784.909799][T20919] FAULT_INJECTION: forcing a failure. [ 784.909799][T20919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 784.932061][ T5920] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 784.943901][T20919] CPU: 1 UID: 0 PID: 20919 Comm: syz.0.5886 Not tainted syzkaller #0 PREEMPT(full) [ 784.943929][T20919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 784.943943][T20919] Call Trace: [ 784.943953][T20919] [ 784.943963][T20919] dump_stack_lvl+0x189/0x250 [ 784.943998][T20919] ? __pfx____ratelimit+0x10/0x10 [ 784.944028][T20919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 784.944059][T20919] ? __pfx__printk+0x10/0x10 [ 784.944081][T20919] ? __might_fault+0xb0/0x130 [ 784.944125][T20919] should_fail_ex+0x414/0x560 [ 784.944163][T20919] _copy_from_user+0x2d/0xb0 [ 784.944193][T20919] __sys_sendto+0x25c/0x520 [ 784.944219][T20919] ? __pfx___sys_sendto+0x10/0x10 [ 784.944237][T20919] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 784.944285][T20919] ? __fget_files+0x3a0/0x420 [ 784.944318][T20919] ? ksys_write+0x22a/0x250 [ 784.944348][T20919] ? exc_page_fault+0x82/0x100 [ 784.944380][T20919] ? __pfx_ksys_write+0x10/0x10 [ 784.944416][T20919] __ia32_sys_sendto+0xdd/0x100 [ 784.944442][T20919] __do_fast_syscall_32+0xb6/0x2b0 [ 784.944464][T20919] ? lockdep_hardirqs_on+0x9c/0x150 [ 784.944499][T20919] do_fast_syscall_32+0x34/0x80 [ 784.944520][T20919] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 784.944547][T20919] RIP: 0023:0xf701d539 [ 784.944566][T20919] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 784.944585][T20919] RSP: 002b:00000000f540d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 784.944615][T20919] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 784.944631][T20919] RDX: 00000000000005dc RSI: 0000000004008000 RDI: 0000000080000080 [ 784.944645][T20919] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 784.944659][T20919] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 784.944672][T20919] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 784.944705][T20919] [ 784.945788][ T5920] option 6-1:0.0: device disconnected [ 785.190851][ T5836] Bluetooth: hci6: command 0x0406 tx timeout [ 785.274050][T20921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5887'. [ 785.310788][T20921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5887'. [ 785.511097][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.737497][T20928] FAULT_INJECTION: forcing a failure. [ 785.737497][T20928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 786.001648][T20928] CPU: 1 UID: 0 PID: 20928 Comm: syz.2.5890 Not tainted syzkaller #0 PREEMPT(full) [ 786.001679][T20928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 786.001693][T20928] Call Trace: [ 786.001703][T20928] [ 786.001712][T20928] dump_stack_lvl+0x189/0x250 [ 786.001748][T20928] ? __pfx____ratelimit+0x10/0x10 [ 786.001779][T20928] ? __pfx_dump_stack_lvl+0x10/0x10 [ 786.001809][T20928] ? __pfx__printk+0x10/0x10 [ 786.001832][T20928] ? __might_fault+0xb0/0x130 [ 786.001876][T20928] should_fail_ex+0x414/0x560 [ 786.001916][T20928] _copy_from_user+0x2d/0xb0 [ 786.001945][T20928] get_compat_msghdr+0xad/0x4a0 [ 786.001976][T20928] ? __pfx_get_compat_msghdr+0x10/0x10 [ 786.002015][T20928] ___sys_sendmsg+0x193/0x2a0 [ 786.002043][T20928] ? __pfx____sys_sendmsg+0x10/0x10 [ 786.002106][T20928] ? __fget_files+0x2a/0x420 [ 786.002126][T20928] ? __fget_files+0x3a0/0x420 [ 786.002159][T20928] __sys_sendmsg+0x164/0x220 [ 786.002185][T20928] ? __pfx___sys_sendmsg+0x10/0x10 [ 786.002220][T20928] ? __pfx_ksys_write+0x10/0x10 [ 786.002254][T20928] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 786.002289][T20928] ? lockdep_hardirqs_on+0x9c/0x150 [ 786.002325][T20928] __do_fast_syscall_32+0xb6/0x2b0 [ 786.002347][T20928] ? lockdep_hardirqs_on+0x9c/0x150 [ 786.002383][T20928] do_fast_syscall_32+0x34/0x80 [ 786.002404][T20928] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 786.002431][T20928] RIP: 0023:0xf7fb2539 [ 786.002450][T20928] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 786.002470][T20928] RSP: 002b:00000000f548555c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 786.002493][T20928] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 786.002509][T20928] RDX: 00000000240000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 786.002523][T20928] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 786.002545][T20928] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 786.002559][T20928] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 786.002592][T20928] [ 786.741518][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.142311][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.190875][ T5897] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 787.801618][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.862643][ T5897] usb 6-1: Using ep0 maxpacket: 32 [ 787.887514][ T5897] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 787.937995][ T5897] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 787.954404][ T5897] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 787.965113][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 787.977424][ T5897] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 787.987676][ T5897] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 788.002721][ T5897] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 788.012808][ T44] usb 1-1: new low-speed USB device number 106 using dummy_hcd [ 788.023819][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.055429][ T5897] usb 6-1: config 0 descriptor?? [ 788.151021][ T44] usb 1-1: device descriptor read/64, error -71 [ 788.280353][ T5897] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 788.304232][ T5920] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 788.348625][ T5897] usb 6-1: USB disconnect, device number 18 [ 788.372718][ T5897] usblp0: removed [ 788.411381][ T44] usb 1-1: new low-speed USB device number 107 using dummy_hcd [ 788.424312][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880267e6400: rx timeout, send abort [ 788.432809][ C0] vcan0: j1939_tp_rxtimer: 0xffff888020f2cc00: rx timeout, send abort [ 788.441313][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880267e6400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 788.456489][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888020f2cc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 788.485245][ T5920] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 788.552174][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.560222][ T5920] usb 5-1: Product: syz [ 788.569339][ T44] usb 1-1: device descriptor read/64, error -71 [ 788.613495][ T5920] usb 5-1: Manufacturer: syz [ 788.618320][ T5920] usb 5-1: SerialNumber: syz [ 788.711607][ T44] usb usb1-port1: attempt power cycle [ 788.841569][T18018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.892717][ T984] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 789.043495][T20949] can: request_module (can-proto-3) failed. [ 789.070987][ T984] usb 6-1: Using ep0 maxpacket: 16 [ 789.083977][ T984] usb 6-1: too many configurations: 123, using maximum allowed: 8 [ 789.112409][ T984] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 789.148152][ T984] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 789.186702][ T984] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 789.221792][ T984] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 789.270298][ T984] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 789.322409][ T984] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 789.355614][ T984] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 789.400534][ T984] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 789.432546][ T984] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 789.441568][ T44] usb usb1-port1: Cannot enable. Maybe the USB cable is bad? [ 789.459690][ T984] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 789.480033][ T984] usb 6-1: SerialNumber: syz [ 789.501512][ T984] usb 6-1: config 0 descriptor?? [ 789.525266][ T984] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input51 [ 789.570859][ T44] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 789.605455][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 789.623029][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 789.643192][ T44] usb 1-1: config 0 has no interfaces? [ 789.655557][ T44] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 789.665280][T18018] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 789.677910][ T5184] bcm5974 6-1:0.0: could not read from device [ 789.694307][ T5184] bcm5974 6-1:0.0: could not read from device [ 789.695741][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.740555][ T44] usb 1-1: config 0 descriptor?? [ 789.743525][ T5184] bcm5974 6-1:0.0: could not read from device [ 789.762827][ T984] usb 6-1: USB disconnect, device number 19 [ 789.777368][ T5184] bcm5974 6-1:0.0: could not read from device [ 789.841626][T18018] usb 4-1: Using ep0 maxpacket: 32 [ 789.854071][T18018] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 789.885817][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.914901][T18018] usb 4-1: config 0 has no interfaces? [ 789.920505][T18018] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 789.958951][T18018] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.997718][T18018] usb 4-1: config 0 descriptor?? [ 790.175833][ T10] usb 1-1: USB disconnect, device number 109 [ 790.203481][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.236627][T20963] FAULT_INJECTION: forcing a failure. [ 790.236627][T20963] name failslab, interval 1, probability 0, space 0, times 0 [ 790.249468][T20963] CPU: 1 UID: 0 PID: 20963 Comm: syz.3.5899 Not tainted syzkaller #0 PREEMPT(full) [ 790.249496][T20963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 790.249511][T20963] Call Trace: [ 790.249521][T20963] [ 790.249531][T20963] dump_stack_lvl+0x189/0x250 [ 790.249566][T20963] ? __pfx____ratelimit+0x10/0x10 [ 790.249597][T20963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 790.249628][T20963] ? __pfx__printk+0x10/0x10 [ 790.249659][T20963] ? __pfx___might_resched+0x10/0x10 [ 790.249689][T20963] should_fail_ex+0x414/0x560 [ 790.249729][T20963] should_failslab+0xa8/0x100 [ 790.249754][T20963] __kmalloc_noprof+0xcb/0x7f0 [ 790.249784][T20963] ? kfree+0x4d/0x6d0 [ 790.249808][T20963] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 790.249850][T20963] tomoyo_realpath_from_path+0xe3/0x5d0 [ 790.249886][T20963] ? tomoyo_domain+0xd9/0x130 [ 790.249913][T20963] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 790.249942][T20963] tomoyo_path_number_perm+0x1e8/0x5a0 [ 790.249985][T20963] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 790.250032][T20963] ? __lock_acquire+0xab9/0xd20 [ 790.250075][T20963] ? __fget_files+0x2a/0x420 [ 790.250101][T20963] ? __fget_files+0x3a0/0x420 [ 790.250120][T20963] ? __fget_files+0x2a/0x420 [ 790.250151][T20963] security_file_ioctl_compat+0xcb/0x2d0 [ 790.250181][T20963] __ia32_compat_sys_ioctl+0x128/0x840 [ 790.250212][T20963] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 790.250241][T20963] ? __fget_files+0x3a0/0x420 [ 790.250269][T20963] ? fput+0xa0/0xd0 [ 790.250294][T20963] ? ksys_write+0x22a/0x250 [ 790.250326][T20963] ? __pfx_ksys_write+0x10/0x10 [ 790.250359][T20963] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 790.250395][T20963] ? lockdep_hardirqs_on+0x9c/0x150 [ 790.250429][T20963] __do_fast_syscall_32+0xb6/0x2b0 [ 790.250457][T20963] do_fast_syscall_32+0x34/0x80 [ 790.250477][T20963] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 790.250503][T20963] RIP: 0023:0xf6ffd539 [ 790.250521][T20963] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 790.250540][T20963] RSP: 002b:00000000f53ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 790.250562][T20963] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 000000000000ae80 [ 790.250577][T20963] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 790.250589][T20963] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 790.250602][T20963] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 790.250614][T20963] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 790.250647][T20963] [ 790.671030][T20963] ERROR: Out of memory at tomoyo_realpath_from_path. [ 790.774790][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.802742][ T984] usb 4-1: USB disconnect, device number 103 [ 790.827509][T20974] FAULT_INJECTION: forcing a failure. [ 790.827509][T20974] name failslab, interval 1, probability 0, space 0, times 0 [ 790.841776][T18018] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 790.849700][T20974] CPU: 1 UID: 0 PID: 20974 Comm: syz.2.5903 Not tainted syzkaller #0 PREEMPT(full) [ 790.849728][T20974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 790.849740][T20974] Call Trace: [ 790.849749][T20974] [ 790.849759][T20974] dump_stack_lvl+0x189/0x250 [ 790.849798][T20974] ? __pfx____ratelimit+0x10/0x10 [ 790.849829][T20974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 790.849858][T20974] ? __pfx__printk+0x10/0x10 [ 790.849883][T20974] ? __pfx___might_resched+0x10/0x10 [ 790.849906][T20974] ? fs_reclaim_acquire+0x7d/0x100 [ 790.849945][T20974] should_fail_ex+0x414/0x560 [ 790.849982][T20974] should_failslab+0xa8/0x100 [ 790.850005][T20974] __kmalloc_cache_noprof+0x6f/0x6f0 [ 790.850036][T20974] ? nfnetlink_rcv+0xf97/0x2590 [ 790.850071][T20974] nfnetlink_rcv+0xf97/0x2590 [ 790.850139][T20974] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 790.850187][T20974] ? ref_tracker_free+0x63a/0x7d0 [ 790.850241][T20974] ? __netlink_deliver_tap+0x807/0x850 [ 790.850265][T20974] ? netlink_deliver_tap+0x2e/0x1b0 [ 790.850316][T20974] netlink_unicast+0x82f/0x9e0 [ 790.850359][T20974] ? __pfx_netlink_unicast+0x10/0x10 [ 790.850394][T20974] ? netlink_sendmsg+0x642/0xb30 [ 790.850415][T20974] ? skb_put+0x11b/0x210 [ 790.850441][T20974] netlink_sendmsg+0x805/0xb30 [ 790.850475][T20974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 790.850501][T20974] ? __import_iovec+0x5d4/0x7f0 [ 790.850527][T20974] ? aa_sock_msg_perm+0xf1/0x1d0 [ 790.850562][T20974] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 790.850583][T20974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 790.850607][T20974] __sock_sendmsg+0x21c/0x270 [ 790.850641][T20974] ____sys_sendmsg+0x505/0x830 [ 790.850672][T20974] ? __pfx_____sys_sendmsg+0x10/0x10 [ 790.850715][T20974] ___sys_sendmsg+0x21f/0x2a0 [ 790.850742][T20974] ? __pfx____sys_sendmsg+0x10/0x10 [ 790.850810][T20974] ? __fget_files+0x2a/0x420 [ 790.850832][T20974] ? __fget_files+0x3a0/0x420 [ 790.850866][T20974] __sys_sendmsg+0x164/0x220 [ 790.850893][T20974] ? __pfx___sys_sendmsg+0x10/0x10 [ 790.850930][T20974] ? __pfx_ksys_write+0x10/0x10 [ 790.850966][T20974] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 790.851004][T20974] ? lockdep_hardirqs_on+0x9c/0x150 [ 790.851041][T20974] __do_fast_syscall_32+0xb6/0x2b0 [ 790.851063][T20974] ? lockdep_hardirqs_on+0x9c/0x150 [ 790.851101][T20974] do_fast_syscall_32+0x34/0x80 [ 790.851123][T20974] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 790.851152][T20974] RIP: 0023:0xf7fb2539 [ 790.851172][T20974] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 790.851193][T20974] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 790.851218][T20974] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 790.851235][T20974] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 790.851249][T20974] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 790.851263][T20974] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 790.851283][T20974] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 790.851318][T20974] [ 791.158128][ C1] vkms_vblank_simulate: vblank timer overrun [ 791.501768][T16869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.520839][T18018] usb 6-1: Using ep0 maxpacket: 32 [ 791.529032][T18018] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 791.542579][T18018] usb 6-1: config 0 has no interfaces? [ 791.564539][T18018] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 791.580330][T18018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.668586][ T5920] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 791.682278][ T5920] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 791.701966][T18018] usb 6-1: config 0 descriptor?? [ 791.729402][ T5920] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 791.814544][ T5920] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 791.867208][ T5920] usb 5-1: USB disconnect, device number 83 [ 791.951256][T20983] FAULT_INJECTION: forcing a failure. [ 791.951256][T20983] name failslab, interval 1, probability 0, space 0, times 0 [ 792.031578][T20983] CPU: 1 UID: 0 PID: 20983 Comm: syz.4.5907 Not tainted syzkaller #0 PREEMPT(full) [ 792.031601][T20983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 792.031612][T20983] Call Trace: [ 792.031618][T20983] [ 792.031625][T20983] dump_stack_lvl+0x189/0x250 [ 792.031652][T20983] ? __pfx____ratelimit+0x10/0x10 [ 792.031675][T20983] ? __pfx_dump_stack_lvl+0x10/0x10 [ 792.031697][T20983] ? __pfx__printk+0x10/0x10 [ 792.031716][T20983] ? __pfx___might_resched+0x10/0x10 [ 792.031734][T20983] ? fs_reclaim_acquire+0x7d/0x100 [ 792.031763][T20983] should_fail_ex+0x414/0x560 [ 792.031793][T20983] should_failslab+0xa8/0x100 [ 792.031812][T20983] __kmalloc_cache_noprof+0x6f/0x6f0 [ 792.031836][T20983] ? __asan_memset+0x22/0x50 [ 792.031854][T20983] ? tomoyo_init_log+0x183/0x1f70 [ 792.031880][T20983] ? number+0xd18/0xf60 [ 792.031900][T20983] tomoyo_init_log+0x183/0x1f70 [ 792.031935][T20983] ? __pfx_number+0x10/0x10 [ 792.031951][T20983] ? __kasan_save_free_info+0x46/0x50 [ 792.031972][T20983] ? tomoyo_path_mknod+0xf3/0x190 [ 792.031992][T20983] ? format_decode+0xd9/0xe30 [ 792.032016][T20983] ? __pfx_tomoyo_init_log+0x10/0x10 [ 792.032039][T20983] ? tomoyo_profile+0x11/0x50 [ 792.032062][T20983] ? tomoyo_profile+0x11/0x50 [ 792.032086][T20983] ? tomoyo_domain_quota_is_ok+0x42b/0x570 [ 792.032111][T20983] tomoyo_supervisor+0x340/0x1480 [ 792.032147][T20983] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 792.032171][T20983] ? kasan_quarantine_put+0xdd/0x220 [ 792.032194][T20983] ? lockdep_hardirqs_on+0x9c/0x150 [ 792.032222][T20983] ? tomoyo_realpath_from_path+0x598/0x5d0 [ 792.032246][T20983] ? kfree+0x19a/0x6d0 [ 792.032271][T20983] ? tomoyo_check_mkdev_acl+0x128/0x4a0 [ 792.032294][T20983] ? tomoyo_check_acl+0x386/0x400 [ 792.032314][T20983] ? __pfx_tomoyo_check_mkdev_acl+0x10/0x10 [ 792.032338][T20983] tomoyo_mkdev_perm+0x348/0x510 [ 792.032358][T20983] ? __lock_acquire+0xab9/0xd20 [ 792.032373][T20983] ? tomoyo_mkdev_perm+0x1a3/0x510 [ 792.032394][T20983] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 792.032444][T20983] ? __pfx_current_check_access_path+0x10/0x10 [ 792.032476][T20983] tomoyo_path_mknod+0xf3/0x190 [ 792.032495][T20983] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 792.032515][T20983] ? __pfx_filename_create+0x10/0x10 [ 792.032541][T20983] security_path_mknod+0x17e/0x3a0 [ 792.032569][T20983] do_mknodat+0x274/0x4d0 [ 792.032592][T20983] ? __pfx_do_mknodat+0x10/0x10 [ 792.032613][T20983] ? getname_flags+0x1e5/0x540 [ 792.032633][T20983] __ia32_sys_mknodat+0xa7/0xc0 [ 792.032658][T20983] __do_fast_syscall_32+0xb6/0x2b0 [ 792.032673][T20983] ? lockdep_hardirqs_on+0x9c/0x150 [ 792.032700][T20983] do_fast_syscall_32+0x34/0x80 [ 792.032715][T20983] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 792.032736][T20983] RIP: 0023:0xf70bd539 [ 792.032751][T20983] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 792.032765][T20983] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000129 [ 792.032783][T20983] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 792.032795][T20983] RDX: 0000000000002000 RSI: 0000000000000103 RDI: 0000000000000000 [ 792.032805][T20983] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 792.032814][T20983] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 792.032824][T20983] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 792.032848][T20983] [ 792.379046][ C1] vkms_vblank_simulate: vblank timer overrun [ 792.744146][T18018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.911977][T20986] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 793.280912][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.373948][T20990] syzkaller0: entered promiscuous mode [ 793.379527][T20990] syzkaller0: entered allmulticast mode [ 793.812127][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.898486][ T984] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 794.060764][ T984] usb 5-1: device descriptor read/64, error -71 [ 794.122615][T21003] IPVS: set_ctl: invalid protocol: 51 172.20.20.61:20004 [ 794.123624][ T5889] usb 6-1: USB disconnect, device number 20 [ 794.146385][T21003] CUSE: unknown device info "€" [ 794.160878][T21003] CUSE: unknown device info "Ö" [ 794.165792][T21003] CUSE: unknown device info "" [ 794.213696][T21003] CUSE: unknown device info "€" [ 794.224346][T21003] CUSE: unknown device info "ðÿÿÿ" [ 794.244278][T21003] CUSE: unknown device info "" [ 794.278409][T21003] CUSE: unknown device info "" [ 794.283527][T21003] CUSE: unknown device info "" [ 794.288662][T21003] CUSE: zero length info key specified [ 794.353716][ T984] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 794.494006][ T984] usb 5-1: device descriptor read/64, error -71 [ 794.671012][ T984] usb usb5-port1: attempt power cycle [ 794.845476][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.080811][ T984] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 795.141682][ T984] usb 5-1: device descriptor read/8, error -71 [ 795.401374][ T984] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 795.431532][ T984] usb 5-1: device descriptor read/8, error -71 [ 795.511128][ T5920] usb 1-1: new full-speed USB device number 110 using dummy_hcd [ 795.552789][ T984] usb usb5-port1: unable to enumerate USB device [ 795.688467][ T5920] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 795.697878][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.721849][ T5920] usb 1-1: config 0 descriptor?? [ 795.742663][ T5920] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 795.881501][T18018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.156940][ T5920] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 796.174932][ T5920] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 796.361330][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.679602][T21013] æÿîÿ: entered promiscuous mode [ 796.921566][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.078826][T21030] random: crng reseeded on system resumption [ 797.150361][T21031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.182174][T21031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.234078][T21031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.560870][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.151003][ T5920] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 798.313143][ T5920] usb 4-1: Using ep0 maxpacket: 8 [ 798.467734][T21047] FAULT_INJECTION: forcing a failure. [ 798.467734][T21047] name failslab, interval 1, probability 0, space 0, times 0 [ 798.496156][T21047] CPU: 0 UID: 0 PID: 21047 Comm: syz.0.5925 Not tainted syzkaller #0 PREEMPT(full) [ 798.496194][T21047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 798.496215][T21047] Call Trace: [ 798.496229][T21047] [ 798.496244][T21047] dump_stack_lvl+0x189/0x250 [ 798.496281][T21047] ? __pfx____ratelimit+0x10/0x10 [ 798.496322][T21047] ? __pfx_dump_stack_lvl+0x10/0x10 [ 798.496352][T21047] ? __pfx__printk+0x10/0x10 [ 798.496381][T21047] ? __pfx___might_resched+0x10/0x10 [ 798.496403][T21047] ? fs_reclaim_acquire+0x7d/0x100 [ 798.496440][T21047] should_fail_ex+0x414/0x560 [ 798.496477][T21047] should_failslab+0xa8/0x100 [ 798.496501][T21047] __kmalloc_cache_noprof+0x6f/0x6f0 [ 798.496531][T21047] ? sctp_v6_to_sk_saddr+0x100/0x1c0 [ 798.496561][T21047] ? sctp_association_new+0x89/0x25f0 [ 798.496585][T21047] ? __asan_memcpy+0x40/0x70 [ 798.496616][T21047] sctp_association_new+0x89/0x25f0 [ 798.496646][T21047] ? sctp_do_bind+0x65a/0x940 [ 798.496675][T21047] ? __ipv6_addr_type+0x247/0x2f0 [ 798.496705][T21047] sctp_connect_new_asoc+0x2c5/0x690 [ 798.496732][T21047] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 798.496753][T21047] ? __local_bh_enable_ip+0x12d/0x1c0 [ 798.496784][T21047] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 798.496807][T21047] ? security_sctp_bind_connect+0x7e/0x2e0 [ 798.496837][T21047] sctp_sendmsg+0x155c/0x2810 [ 798.496873][T21047] ? __pfx_sctp_sendmsg+0x10/0x10 [ 798.496899][T21047] ? aa_sk_perm+0x81e/0x950 [ 798.496936][T21047] ? __pfx_aa_sk_perm+0x10/0x10 [ 798.496970][T21047] ? sock_rps_record_flow+0x19/0x410 [ 798.496994][T21047] ? inet_sendmsg+0x2f4/0x370 [ 798.497019][T21047] __sock_sendmsg+0x19c/0x270 [ 798.497053][T21047] __sys_sendto+0x3bd/0x520 [ 798.497075][T21047] ? __pfx___sys_sendto+0x10/0x10 [ 798.497094][T21047] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 798.497141][T21047] ? __fget_files+0x3a0/0x420 [ 798.497173][T21047] ? ksys_write+0x22a/0x250 [ 798.497203][T21047] ? exc_page_fault+0x82/0x100 [ 798.497235][T21047] ? __pfx_ksys_write+0x10/0x10 [ 798.497272][T21047] __ia32_sys_sendto+0xdd/0x100 [ 798.497299][T21047] __do_fast_syscall_32+0xb6/0x2b0 [ 798.497321][T21047] ? lockdep_hardirqs_on+0x9c/0x150 [ 798.497356][T21047] do_fast_syscall_32+0x34/0x80 [ 798.497377][T21047] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 798.497404][T21047] RIP: 0023:0xf701d539 [ 798.497424][T21047] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 798.497444][T21047] RSP: 002b:00000000f540d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 798.497467][T21047] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 798.497483][T21047] RDX: 000000000000ff2e RSI: 000000002004c144 RDI: 00000000800000c0 [ 798.497497][T21047] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 798.497510][T21047] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 798.497524][T21047] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 798.497558][T21047] [ 798.834009][ T44] usb 1-1: USB disconnect, device number 110 [ 798.871179][ T5920] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 798.914114][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 798.978046][ T5920] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 799.001206][T18018] net_ratelimit: 2 callbacks suppressed [ 799.001221][T18018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.126832][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.135841][ T5920] usb 4-1: Product: syz [ 799.140385][ T5920] usb 4-1: Manufacturer: syz [ 799.151341][ T5920] usb 4-1: SerialNumber: syz [ 799.175845][ T5920] usb 4-1: config 0 descriptor?? [ 799.199388][ T5920] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 799.415638][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.444200][ T5920] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 799.461384][ T5920] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 799.480507][ T5920] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 799.547026][T21057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5929'. [ 799.777042][T21059] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5931'. [ 799.787116][T21059] mmap: syz.5.5931 (21059): VmData 45760512 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 799.806016][ T30] audit: type=1326 audit(1763602781.898:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21060 comm="syz.4.5930" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bd539 code=0x0 [ 800.041568][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.201605][T21031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.370989][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.955559][ T5919] usb 4-1: USB disconnect, device number 104 [ 801.090841][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.242685][T21081] ip6t_REJECT: ECHOREPLY is not supported [ 802.011920][T21084] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5938'. [ 802.124841][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.383061][T21092] fuse: Bad value for 'rootmode' [ 802.514978][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.548305][T21096] FAULT_INJECTION: forcing a failure. [ 802.548305][T21096] name failslab, interval 1, probability 0, space 0, times 0 [ 802.602408][T21096] CPU: 1 UID: 0 PID: 21096 Comm: syz.5.5941 Not tainted syzkaller #0 PREEMPT(full) [ 802.602437][T21096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 802.602451][T21096] Call Trace: [ 802.602460][T21096] [ 802.602470][T21096] dump_stack_lvl+0x189/0x250 [ 802.602504][T21096] ? __pfx____ratelimit+0x10/0x10 [ 802.602535][T21096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 802.602564][T21096] ? __pfx__printk+0x10/0x10 [ 802.602592][T21096] ? __pfx___might_resched+0x10/0x10 [ 802.602621][T21096] should_fail_ex+0x414/0x560 [ 802.602659][T21096] should_failslab+0xa8/0x100 [ 802.602683][T21096] __kmalloc_noprof+0xcb/0x7f0 [ 802.602714][T21096] ? copy_splice_read+0x143/0xa50 [ 802.602752][T21096] copy_splice_read+0x143/0xa50 [ 802.602784][T21096] ? __pfx_pipe_to_null+0x10/0x10 [ 802.602805][T21096] ? pipe_unlock+0x56/0x80 [ 802.602836][T21096] ? splice_from_pipe+0x108/0x160 [ 802.602869][T21096] ? __pfx_pipe_to_null+0x10/0x10 [ 802.602888][T21096] ? __pfx_copy_splice_read+0x10/0x10 [ 802.602917][T21096] ? look_up_lock_class+0x74/0x170 [ 802.602960][T21096] ? file_end_write+0xd8/0x250 [ 802.602982][T21096] ? direct_splice_actor+0x10c/0x160 [ 802.603004][T21096] ? __pfx_copy_splice_read+0x10/0x10 [ 802.603035][T21096] splice_direct_to_actor+0x4a9/0xcc0 [ 802.603096][T21096] ? __pfx_direct_splice_actor+0x10/0x10 [ 802.603129][T21096] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 802.603173][T21096] do_splice_direct+0x181/0x270 [ 802.603208][T21096] ? __pfx_do_splice_direct+0x10/0x10 [ 802.603239][T21096] ? common_file_perm+0x1b5/0x230 [ 802.603271][T21096] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 802.603295][T21096] ? bpf_lsm_file_permission+0x9/0x20 [ 802.603318][T21096] ? security_file_permission+0x75/0x290 [ 802.603346][T21096] ? rw_verify_area+0x255/0x4d0 [ 802.603380][T21096] do_sendfile+0x4da/0x7e0 [ 802.603412][T21096] ? __pfx_do_sendfile+0x10/0x10 [ 802.603439][T21096] ? __pfx_ksys_write+0x10/0x10 [ 802.603472][T21096] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 802.603504][T21096] ? __ia32_compat_sys_sendfile+0x180/0x1d0 [ 802.603525][T21096] ? lockdep_hardirqs_on+0x9c/0x150 [ 802.603559][T21096] __do_fast_syscall_32+0xb6/0x2b0 [ 802.603580][T21096] ? lockdep_hardirqs_on+0x9c/0x150 [ 802.603615][T21096] do_fast_syscall_32+0x34/0x80 [ 802.603636][T21096] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 802.603661][T21096] RIP: 0023:0xf7f47539 [ 802.603680][T21096] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 802.603698][T21096] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 00000000000000bb [ 802.603720][T21096] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000003 [ 802.603735][T21096] RDX: 0000000000000000 RSI: 000000000000f63c RDI: 0000000000000000 [ 802.603748][T21096] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 802.603761][T21096] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 802.603774][T21096] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 802.603805][T21096] [ 802.912367][ C1] vkms_vblank_simulate: vblank timer overrun [ 803.271362][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.420739][ T5920] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 803.612640][ T5920] usb 4-1: Using ep0 maxpacket: 32 [ 803.640338][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.684433][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 803.709915][ T5920] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 803.873349][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.922049][ T5920] usb 4-1: config 0 descriptor?? [ 804.244513][ T30] audit: type=1326 audit(1763602786.318:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21110 comm="syz.4.5946" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bd539 code=0x0 [ 804.281962][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.353733][ T5920] ft260 0003:0403:6030.001B: unknown main item tag 0x7 [ 804.751276][ T5920] ft260 0003:0403:6030.001B: chip code: 6424 8183 [ 804.959224][ T5920] ft260 0003:0403:6030.001B: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 805.159979][ T5920] ft260 0003:0403:6030.001B: failed to retrieve status: -32, no wakeup [ 805.321260][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.377634][ T5920] usb 4-1: USB disconnect, device number 105 [ 805.626753][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.541266][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.978556][T21131] binder: 21129:21131 unknown command 0 [ 807.043643][T21134] binder: 21129:21134 ioctl c0306201 80000300 returned -11 [ 807.055725][T21131] binder: 21129:21131 ioctl c0306201 80000080 returned -22 [ 807.098197][T21135] syzkaller0: entered promiscuous mode [ 807.119882][T21135] syzkaller0: entered allmulticast mode [ 807.150920][T21136] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 807.174054][T21136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 807.334301][T21138] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5953'. [ 807.371879][T21140] FAULT_INJECTION: forcing a failure. [ 807.371879][T21140] name failslab, interval 1, probability 0, space 0, times 0 [ 807.404419][T21140] CPU: 1 UID: 0 PID: 21140 Comm: syz.3.5954 Not tainted syzkaller #0 PREEMPT(full) [ 807.404451][T21140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 807.404466][T21140] Call Trace: [ 807.404476][T21140] [ 807.404486][T21140] dump_stack_lvl+0x189/0x250 [ 807.404523][T21140] ? __pfx____ratelimit+0x10/0x10 [ 807.404555][T21140] ? __pfx_dump_stack_lvl+0x10/0x10 [ 807.404587][T21140] ? __pfx__printk+0x10/0x10 [ 807.404617][T21140] ? __pfx___might_resched+0x10/0x10 [ 807.404641][T21140] ? fs_reclaim_acquire+0x7d/0x100 [ 807.404681][T21140] should_fail_ex+0x414/0x560 [ 807.404721][T21140] should_failslab+0xa8/0x100 [ 807.404747][T21140] __kvmalloc_node_noprof+0x158/0x910 [ 807.404783][T21140] ? xfrm_user_rcv_msg_compat+0x47d/0x1460 [ 807.404816][T21140] ? __nla_parse+0x40/0x60 [ 807.404845][T21140] xfrm_user_rcv_msg_compat+0x47d/0x1460 [ 807.404891][T21140] ? __pfx_xfrm_user_rcv_msg_compat+0x10/0x10 [ 807.404975][T21140] ? xfrm_get_translator+0x1b/0x240 [ 807.405004][T21140] ? xfrm_get_translator+0x1b/0x240 [ 807.405038][T21140] xfrm_user_rcv_msg+0x285/0xab0 [ 807.405073][T21140] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 807.405141][T21140] ? __pfx___mutex_trylock_common+0x10/0x10 [ 807.405176][T21140] ? rcu_is_watching+0x15/0xb0 [ 807.405203][T21140] ? trace_contention_end+0x39/0x120 [ 807.405229][T21140] ? __mutex_lock+0x335/0x1350 [ 807.405269][T21140] netlink_rcv_skb+0x208/0x470 [ 807.405293][T21140] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 807.405322][T21140] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 807.405359][T21140] ? netlink_deliver_tap+0x2e/0x1b0 [ 807.405382][T21140] ? netlink_deliver_tap+0x2e/0x1b0 [ 807.405409][T21140] xfrm_netlink_rcv+0x79/0x90 [ 807.405436][T21140] netlink_unicast+0x82f/0x9e0 [ 807.405480][T21140] ? __pfx_netlink_unicast+0x10/0x10 [ 807.405514][T21140] ? netlink_sendmsg+0x642/0xb30 [ 807.405533][T21140] ? skb_put+0x11b/0x210 [ 807.405562][T21140] netlink_sendmsg+0x805/0xb30 [ 807.405599][T21140] ? __pfx_netlink_sendmsg+0x10/0x10 [ 807.405624][T21140] ? __import_iovec+0x5d4/0x7f0 [ 807.405650][T21140] ? aa_sock_msg_perm+0xf1/0x1d0 [ 807.405686][T21140] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 807.405708][T21140] ? __pfx_netlink_sendmsg+0x10/0x10 [ 807.405733][T21140] __sock_sendmsg+0x21c/0x270 [ 807.405771][T21140] ____sys_sendmsg+0x505/0x830 [ 807.405800][T21140] ? __pfx_____sys_sendmsg+0x10/0x10 [ 807.405843][T21140] ___sys_sendmsg+0x21f/0x2a0 [ 807.405873][T21140] ? __pfx____sys_sendmsg+0x10/0x10 [ 807.405949][T21140] ? __fget_files+0x2a/0x420 [ 807.405973][T21140] ? __fget_files+0x3a0/0x420 [ 807.406008][T21140] __sys_sendmsg+0x164/0x220 [ 807.406038][T21140] ? __pfx___sys_sendmsg+0x10/0x10 [ 807.406075][T21140] ? __pfx_ksys_write+0x10/0x10 [ 807.406113][T21140] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 807.406153][T21140] ? lockdep_hardirqs_on+0x9c/0x150 [ 807.406191][T21140] __do_fast_syscall_32+0xb6/0x2b0 [ 807.406214][T21140] ? lockdep_hardirqs_on+0x9c/0x150 [ 807.406254][T21140] do_fast_syscall_32+0x34/0x80 [ 807.406277][T21140] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 807.406306][T21140] RIP: 0023:0xf6ffd539 [ 807.406327][T21140] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 807.406348][T21140] RSP: 002b:00000000f53ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 807.406374][T21140] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000580 [ 807.406391][T21140] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 807.406405][T21140] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 807.406420][T21140] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 807.406434][T21140] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 807.406471][T21140] [ 807.782116][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.807076][ T5920] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 809.016684][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.030809][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.263384][ T5920] usb 6-1: Using ep0 maxpacket: 32 [ 809.421391][ T5920] usb 6-1: config 0 has an invalid interface number: 229 but max is 0 [ 809.438091][ T5920] usb 6-1: config 0 has no interface number 0 [ 809.467782][ T5920] usb 6-1: New USB device found, idVendor=3b53, idProduct=a0d3, bcdDevice=e3.d4 [ 809.640499][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.650898][ T5920] usb 6-1: Product: syz [ 809.655192][ T5920] usb 6-1: Manufacturer: syz [ 809.672725][ T5920] usb 6-1: SerialNumber: syz [ 809.737163][ T5920] usb 6-1: config 0 descriptor?? [ 809.766338][ T5920] usb-storage 6-1:0.229: USB Mass Storage device detected [ 809.971054][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.051956][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.596597][ T5897] usb 6-1: USB disconnect, device number 21 [ 811.105486][ T44] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 811.105657][ T5920] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 811.120928][T18018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.670784][ T5920] usb 4-1: Using ep0 maxpacket: 32 [ 811.678122][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 811.697622][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.697725][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 811.697770][ T5920] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 811.697796][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.701742][ T44] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 811.701779][ T44] usb 1-1: config 0 interface 0 has no altsetting 0 [ 811.820872][ T44] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 811.820908][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.820932][ T44] usb 1-1: Product: syz [ 811.820949][ T44] usb 1-1: Manufacturer: syz [ 811.820967][ T44] usb 1-1: SerialNumber: syz [ 811.977971][ T5920] usb 4-1: config 0 descriptor?? [ 812.041248][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.086437][ T44] usb 1-1: config 0 descriptor?? [ 812.091954][ T44] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 812.422792][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.481773][ T44] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 812.481979][ T44] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 812.483854][ T44] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 812.720276][ T5920] ft260 0003:0403:6030.001C: unknown main item tag 0x7 [ 812.919580][ T5920] ft260 0003:0403:6030.001C: chip code: 6424 8183 [ 812.953772][T21189] binder: 21188:21189 ioctl 8008f513 80000240 returned -22 [ 813.120269][ T5920] ft260 0003:0403:6030.001C: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 813.323288][ T5920] ft260 0003:0403:6030.001C: failed to retrieve status: -32, no wakeup [ 813.481228][T18018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.537098][T18018] usb 4-1: USB disconnect, device number 106 [ 813.623939][T21193] netlink: 'syz.4.5966': attribute type 1 has an invalid length. [ 813.797241][T21198] blktrace: Concurrent blktraces are not allowed on nullb0 [ 813.809139][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.809201][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.521638][T18018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.575684][T18018] usb 1-1: USB disconnect, device number 111 [ 815.180758][T21219] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 815.311917][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.326268][T21211] [U]  [ 815.634966][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.820739][ T5919] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 816.063272][ T5919] usb 1-1: config 0 has an invalid interface number: 23 but max is 0 [ 816.088493][ T5919] usb 1-1: config 0 has no interface number 0 [ 816.141828][ T5919] usb 1-1: config 0 interface 23 has no altsetting 0 [ 816.171048][ T5919] usb 1-1: New USB device found, idVendor=0c45, idProduct=62b0, bcdDevice=70.90 [ 816.180584][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.190312][ T5919] usb 1-1: Product: syz [ 816.245014][ T5919] usb 1-1: Manufacturer: syz [ 816.249882][ T5919] usb 1-1: SerialNumber: syz [ 816.307702][ T5919] usb 1-1: config 0 descriptor?? [ 816.356311][ T5919] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62b0 [ 816.371634][T21235] input: syz1 as /devices/virtual/input/input52 [ 816.527210][ T5919] gspca_sn9c20x: Write register 1000 failed -71 [ 816.557951][ T5919] gspca_sn9c20x: Device initialization failed [ 816.650837][ T5919] gspca_sn9c20x 1-1:0.23: probe with driver gspca_sn9c20x failed with error -71 [ 816.666205][ T5919] usb 1-1: USB disconnect, device number 112 [ 816.684582][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.386799][T21251] FAULT_INJECTION: forcing a failure. [ 817.386799][T21251] name failslab, interval 1, probability 0, space 0, times 0 [ 817.455226][T21251] CPU: 1 UID: 0 PID: 21251 Comm: syz.2.5981 Not tainted syzkaller #0 PREEMPT(full) [ 817.455249][T21251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 817.455260][T21251] Call Trace: [ 817.455267][T21251] [ 817.455275][T21251] dump_stack_lvl+0x189/0x250 [ 817.455302][T21251] ? __pfx____ratelimit+0x10/0x10 [ 817.455325][T21251] ? __pfx_dump_stack_lvl+0x10/0x10 [ 817.455347][T21251] ? __pfx__printk+0x10/0x10 [ 817.455369][T21251] ? __pfx___might_resched+0x10/0x10 [ 817.455391][T21251] should_fail_ex+0x414/0x560 [ 817.455421][T21251] should_failslab+0xa8/0x100 [ 817.455440][T21251] __kmalloc_noprof+0xcb/0x7f0 [ 817.455463][T21251] ? unregister_netdevice_many_notify+0xc06/0x2390 [ 817.455492][T21251] unregister_netdevice_many_notify+0xc06/0x2390 [ 817.455518][T21251] ? call_rcu+0x6ff/0x9c0 [ 817.455543][T21251] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 817.455574][T21251] ? __pfx_call_rcu+0x10/0x10 [ 817.455599][T21251] unregister_netdevice_queue+0x33c/0x380 [ 817.455618][T21251] ? kernfs_remove_by_name_ns+0xee/0x130 [ 817.455645][T21251] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 817.455675][T21251] _cfg80211_unregister_wdev+0x165/0x590 [ 817.455706][T21251] ieee80211_if_remove+0x256/0x310 [ 817.455735][T21251] ieee80211_del_iface+0x19/0x30 [ 817.455755][T21251] cfg80211_remove_virtual_intf+0x231/0x3f0 [ 817.455782][T21251] genl_family_rcv_msg_doit+0x215/0x300 [ 817.455810][T21251] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 817.455843][T21251] ? bpf_lsm_capable+0x9/0x20 [ 817.455863][T21251] ? security_capable+0x7e/0x2e0 [ 817.455890][T21251] genl_rcv_msg+0x60e/0x790 [ 817.455917][T21251] ? __pfx_genl_rcv_msg+0x10/0x10 [ 817.455936][T21251] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 817.455954][T21251] ? __pfx_nl80211_del_interface+0x10/0x10 [ 817.455980][T21251] ? __pfx_nl80211_post_doit+0x10/0x10 [ 817.456000][T21251] ? __asan_memcpy+0x40/0x70 [ 817.456020][T21251] ? __pfx_ref_tracker_free+0x10/0x10 [ 817.456042][T21251] netlink_rcv_skb+0x208/0x470 [ 817.456057][T21251] ? __lock_acquire+0xab9/0xd20 [ 817.456074][T21251] ? __pfx_genl_rcv_msg+0x10/0x10 [ 817.456096][T21251] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 817.456127][T21251] ? down_read+0x1ad/0x2e0 [ 817.456145][T21251] genl_rcv+0x28/0x40 [ 817.456164][T21251] netlink_unicast+0x82f/0x9e0 [ 817.456195][T21251] ? __pfx_netlink_unicast+0x10/0x10 [ 817.456221][T21251] ? netlink_sendmsg+0x642/0xb30 [ 817.456236][T21251] ? skb_put+0x11b/0x210 [ 817.456257][T21251] netlink_sendmsg+0x805/0xb30 [ 817.456281][T21251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 817.456300][T21251] ? __import_iovec+0x5d4/0x7f0 [ 817.456319][T21251] ? aa_sock_msg_perm+0xf1/0x1d0 [ 817.456344][T21251] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 817.456360][T21251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 817.456378][T21251] __sock_sendmsg+0x21c/0x270 [ 817.456403][T21251] ____sys_sendmsg+0x505/0x830 [ 817.456425][T21251] ? __pfx_____sys_sendmsg+0x10/0x10 [ 817.456457][T21251] ___sys_sendmsg+0x21f/0x2a0 [ 817.456477][T21251] ? __pfx____sys_sendmsg+0x10/0x10 [ 817.456524][T21251] ? __fget_files+0x2a/0x420 [ 817.456539][T21251] ? __fget_files+0x3a0/0x420 [ 817.456562][T21251] __sys_sendmsg+0x164/0x220 [ 817.456582][T21251] ? __pfx___sys_sendmsg+0x10/0x10 [ 817.456607][T21251] ? __pfx_ksys_write+0x10/0x10 [ 817.456633][T21251] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 817.456659][T21251] ? lockdep_hardirqs_on+0x9c/0x150 [ 817.456686][T21251] __do_fast_syscall_32+0xb6/0x2b0 [ 817.456701][T21251] ? lockdep_hardirqs_on+0x9c/0x150 [ 817.456729][T21251] do_fast_syscall_32+0x34/0x80 [ 817.456745][T21251] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 817.456764][T21251] RIP: 0023:0xf7fb2539 [ 817.456778][T21251] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 817.456791][T21251] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 817.456808][T21251] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 817.456820][T21251] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 817.456829][T21251] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 817.456838][T21251] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 817.456847][T21251] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 817.456871][T21251] [ 817.545781][ T10] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 817.905551][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.053037][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.063407][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 818.080871][ T10] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 818.090075][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.182376][ T10] usb 4-1: config 0 descriptor?? [ 818.213916][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 818.249234][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 818.263781][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 818.291565][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 818.307645][ T10] usb 4-1: media controller created [ 818.322448][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 818.364533][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.398042][T21239] dvb-usb: bulk message failed: -22 (2/0) [ 818.412537][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 818.446142][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 818.489725][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input53 [ 818.529745][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 818.568104][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 818.574960][T21265] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5986'. [ 818.730897][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 818.742955][ T10] dvb-usb: error while querying for an remote control event. [ 818.880751][T18018] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 818.922198][ T31] INFO: task syz.1.5325:19014 blocked for more than 163 seconds. [ 818.930476][ T31] Not tainted syzkaller #0 [ 818.940208][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 818.955875][ T5889] dvb-usb: bulk message failed: -22 (1/0) [ 818.959579][ T31] task:syz.1.5325 state:D stack:25576 pid:19014 tgid:19014 ppid:12399 task_flags:0x400040 flags:0x10080002 [ 818.971081][ T5889] dvb-usb: error while querying for an remote control event. [ 818.973871][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.990668][ T31] Call Trace: [ 818.993990][ T31] [ 819.000858][ T31] __schedule+0x1798/0x4cc0 [ 819.005451][ T31] ? __pfx___schedule+0x10/0x10 [ 819.036397][ T31] ? schedule+0x91/0x360 [ 819.050917][T18018] usb 6-1: Using ep0 maxpacket: 8 [ 819.060506][ T31] schedule+0x165/0x360 [ 819.071717][T18018] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 819.094024][ T31] schedule_preempt_disabled+0x13/0x30 [ 819.099560][ T31] __mutex_lock+0x7e6/0x1350 [ 819.120827][T18018] usb 6-1: config 0 has no interfaces? [ 819.134593][T18018] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 819.150724][ T31] ? __mutex_lock+0x5bb/0x1350 [ 819.176692][ T31] ? ima_file_free+0x16c/0x460 [ 819.186309][T18018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.194880][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 819.201472][ T5889] dvb-usb: bulk message failed: -22 (1/0) [ 819.205035][ T31] ? locks_remove_file+0x344/0xea0 [ 819.211164][ T5889] dvb-usb: error while querying for an remote control event. [ 819.246216][T18018] usb 6-1: config 0 descriptor?? [ 819.251389][ T31] ima_file_free+0x16c/0x460 [ 819.277173][ T31] ? __pfx_ima_file_free+0x10/0x10 [ 819.312628][ T31] ? __pfx___might_resched+0x10/0x10 [ 819.318014][ T31] security_file_release+0x93/0x150 [ 819.347897][ T31] __fput+0x3b3/0xa70 [ 819.360342][ T31] task_work_run+0x1d4/0x260 [ 819.374103][ T31] ? __pfx_task_work_run+0x10/0x10 [ 819.389624][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 819.395235][ T5889] dvb-usb: bulk message failed: -22 (1/0) [ 819.404071][ T5889] dvb-usb: error while querying for an remote control event. [ 819.422498][ T31] exit_to_user_mode_loop+0xe9/0x130 [ 819.433531][ T31] __do_fast_syscall_32+0x1f4/0x2b0 [ 819.446829][ T31] do_fast_syscall_32+0x34/0x80 [ 819.459722][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 819.477916][ T31] RIP: 0023:0xf7f34539 [ 819.487297][ T31] RSP: 002b:00000000f751faec EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 819.509780][ T31] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 819.527280][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 819.550270][ T31] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 819.571173][ T5889] dvb-usb: bulk message failed: -22 (1/0) [ 819.578885][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 819.594960][ T5889] dvb-usb: error while querying for an remote control event. [ 819.602576][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.616663][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 819.639949][ T31] [ 819.648802][ T31] [ 819.648802][ T31] Showing all locks held in the system: [ 819.666363][ T31] 1 lock held by khungtaskd/31: [ 819.678633][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 819.702145][ T31] 5 locks held by kworker/1:2/876: [ 819.713040][ T31] #0: ffff888020eef548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 819.741038][ T31] #1: ffffc900035e7ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 819.766373][ T31] #2: ffff8880288cb198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 819.791869][ T5889] dvb-usb: bulk message failed: -22 (1/0) [ 819.820816][ T31] #3: ffff8880288ce518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 819.823115][ T5889] dvb-usb: error while querying for an remote control event. [ 819.842875][ T31] #4: ffff888144fa9268 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 819.867626][ T31] 2 locks held by getty/5589: [ 819.875207][ T31] #0: ffff88814d9490a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 819.906344][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 819.940808][T18018] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 819.967951][ T31] 5 locks held by kworker/1:5/5904: [ 819.990799][ T31] #0: ffff888020eef548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 820.012789][ T31] #1: ffffc900045c7ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 820.025722][ T5889] dvb-usb: bulk message failed: -22 (1/0) [ 820.031709][ T5889] dvb-usb: error while querying for an remote control event. [ 820.039277][ T31] #2: ffff88814537a198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 820.041319][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.048492][ T31] #3: ffff88814537c518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 820.070198][ T31] #4: ffff888144f97068 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 820.081080][ T31] 6 locks held by kworker/1:10/18018: [ 820.086594][ T31] #0: ffff888020eef548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 820.099054][ T31] #1: ffffc900001f7ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 820.110709][T18018] usb 1-1: Using ep0 maxpacket: 32 [ 820.119625][ T31] #2: ffff8880278d5198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 820.129993][ T31] #3: ffff88802789c518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 820.141019][T18018] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 820.141172][ T31] #4: [ 820.151371][T18018] usb 1-1: New USB device found, idVendor=07ca, idProduct=2835, bcdDevice=f5.ac [ 820.152093][ T31] ffffffff8de18f90 [ 820.154171][T18018] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.179257][ T31] (console_srcu){....}-{0:0}, at: sock_def_readable+0xbe/0x550 [ 820.187438][ T31] #5: ffff8880b883a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 820.191505][T18018] usb 1-1: config 0 descriptor?? [ 820.198406][ T5889] dvb-usb: bulk message failed: -22 (1/0) [ 820.209910][ T5889] dvb-usb: error while querying for an remote control event. [ 820.220395][ T31] 1 lock held by syz.1.5325/19014: [ 820.226447][ T31] #0: ffff88805f0fcc18 (&ima_iint_mutex_key[depth]#2){+.+.}-{4:4}, at: ima_file_free+0x16c/0x460 [ 820.233649][T18018] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 820.237850][ T31] 1 lock held by syz.1.5325/19015: [ 820.250569][ T31] 2 locks held by syz.3.5978/21245: [ 820.253725][T18018] dvb_usb_af9035 1-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 820.257625][ T31] #0: ffffffff8f2cbc08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 820.278032][ T31] #1: ffffffff8df43178 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 820.299407][ T31] [ 820.304437][ T31] ============================================= [ 820.304437][ T31] [ 820.313527][ T31] NMI backtrace for cpu 0 [ 820.313545][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 820.313570][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 820.313585][ T31] Call Trace: [ 820.313594][ T31] [ 820.313603][ T31] dump_stack_lvl+0x189/0x250 [ 820.313643][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 820.313674][ T31] ? __pfx__printk+0x10/0x10 [ 820.313712][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 820.313742][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 820.313772][ T31] ? __pfx__printk+0x10/0x10 [ 820.313800][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 820.313838][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 820.313868][ T31] watchdog+0xf60/0xfa0 [ 820.313897][ T31] ? watchdog+0x1e2/0xfa0 [ 820.313926][ T31] kthread+0x711/0x8a0 [ 820.313959][ T31] ? __pfx_watchdog+0x10/0x10 [ 820.313981][ T31] ? __pfx_kthread+0x10/0x10 [ 820.314014][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 820.314044][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 820.314072][ T31] ? __pfx_kthread+0x10/0x10 [ 820.314105][ T31] ret_from_fork+0x4bc/0x870 [ 820.314130][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 820.314162][ T31] ? __switch_to_asm+0x39/0x70 [ 820.314179][ T31] ? __switch_to_asm+0x33/0x70 [ 820.314203][ T31] ? __pfx_kthread+0x10/0x10 [ 820.314234][ T31] ret_from_fork_asm+0x1a/0x30 [ 820.314271][ T31] [ 820.314305][ T31] Sending NMI from CPU 0 to CPUs 1: [ 820.461533][ C1] NMI backtrace for cpu 1 [ 820.461563][ C1] CPU: 1 UID: 0 PID: 19015 Comm: syz.1.5325 Not tainted syzkaller #0 PREEMPT(full) [ 820.461585][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 820.461597][ C1] RIP: 0010:sha256_transform_rorx+0xda3/0x1100 [ 820.461628][ C1] Code: 06 45 21 c7 41 01 f3 45 31 f5 c4 43 7b f0 e3 0d 45 31 cf c4 43 7b f0 f3 16 44 89 de 45 31 e6 c4 43 7b f0 e3 02 44 03 54 3c 14 <09> de 45 31 e6 45 89 dc 21 c6 41 21 dc 45 01 ef 44 01 d1 44 09 e6 [ 820.461648][ C1] RSP: 0018:ffffc9000d56ebe0 EFLAGS: 00000292 [ 820.461666][ C1] RAX: 0000000010b9754d RBX: 00000000a079b88e RCX: 000000006549e521 [ 820.461679][ C1] RDX: 00000000f63cd651 RSI: 0000000089471c5d RDI: 00000000000000c0 [ 820.461691][ C1] RBP: ffffc9000d56ee10 R08: 0000000047b629f8 R09: 0000000032ac4da9 [ 820.461705][ C1] R10: 00000000ab7b2fec R11: 0000000089471c5d R12: 000000006251c717 [ 820.461724][ C1] R13: 000000000502d241 R14: 00000000fe9d3c1d R15: 00000000763c4451 [ 820.461737][ C1] FS: 0000000000000000(0000) GS:ffff88812623b000(0063) knlGS:00000000f5426b40 [ 820.461754][ C1] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 820.461767][ C1] CR2: 00000000f5413528 CR3: 0000000031d48000 CR4: 00000000003526f0 [ 820.461783][ C1] Call Trace: [ 820.461791][ C1] [ 820.461831][ C1] sha256_blocks_avx2+0x3d/0x60 [ 820.461857][ C1] __sha256_update+0xf7/0x150 [ 820.461880][ C1] crypto_sha256_update+0x27/0x40 [ 820.461909][ C1] ima_calc_file_hash+0x8a0/0x16f0 [ 820.461936][ C1] ? __lock_acquire+0xab9/0xd20 [ 820.461959][ C1] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 820.462007][ C1] ? stack_trace_save+0x9c/0xe0 [ 820.462033][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 820.462059][ C1] ? stack_depot_save_flags+0x40/0x860 [ 820.462088][ C1] ? make_vfsgid+0x49/0xa0 [ 820.462112][ C1] ? generic_fillattr+0x63d/0x9a0 [ 820.462139][ C1] ima_collect_measurement+0x428/0x8f0 [ 820.462167][ C1] ? __pfx_ima_collect_measurement+0x10/0x10 [ 820.462194][ C1] ? trace_contention_end+0x39/0x120 [ 820.462218][ C1] ? __mutex_lock+0x335/0x1350 [ 820.462262][ C1] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 820.462297][ C1] process_measurement+0x1121/0x1a40 [ 820.462327][ C1] ? __pfx_process_measurement+0x10/0x10 [ 820.462346][ C1] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 820.462371][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 820.462414][ C1] ? __pfx_apparmor_file_open+0x10/0x10 [ 820.462437][ C1] ? mnt_get_write_access+0x66/0x280 [ 820.462460][ C1] ? tomoyo_file_open+0x165/0x220 [ 820.462484][ C1] ima_file_check+0xd7/0x120 [ 820.462506][ C1] ? __pfx_ima_file_check+0x10/0x10 [ 820.462531][ C1] security_file_post_open+0xbb/0x290 [ 820.462556][ C1] path_openat+0x2f26/0x3830 [ 820.462600][ C1] ? __pfx_path_openat+0x10/0x10 [ 820.462635][ C1] do_filp_open+0x1fa/0x410 [ 820.462658][ C1] ? __lock_acquire+0xab9/0xd20 [ 820.462677][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 820.462720][ C1] ? _raw_spin_unlock+0x28/0x50 [ 820.462744][ C1] ? alloc_fd+0x64c/0x6c0 [ 820.462779][ C1] do_sys_openat2+0x121/0x1c0 [ 820.462803][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 820.462826][ C1] ? exc_page_fault+0x82/0x100 [ 820.462858][ C1] __ia32_compat_sys_openat+0x131/0x160 [ 820.462885][ C1] __do_fast_syscall_32+0xb6/0x2b0 [ 820.462903][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 820.462932][ C1] do_fast_syscall_32+0x34/0x80 [ 820.462950][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 820.462973][ C1] RIP: 0023:0xf7f34539 [ 820.462988][ C1] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 820.463005][ C1] RSP: 002b:00000000f5426490 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 820.463023][ C1] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f54264e0 [ 820.463038][ C1] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f73c6ff4 [ 820.463049][ C1] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 820.463061][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 820.463072][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 820.463094][ C1] [ 820.464677][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 820.465977][T18018] usb 4-1: USB disconnect, device number 107 [ 820.469047][ T10] dvb-usb: error while querying for an remote control event. [ 820.630747][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 820.641106][T21278] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5985'. [ 820.652776][ T10] dvb-usb: error while querying for an remote control event. [ 820.707989][ T5920] usb 1-1: USB disconnect, device number 113 [ 820.902071][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 820.957438][ T10] dvb-usb: error while querying for an remote control event. [ 820.999979][T18018] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 821.090817][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.414833][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.423689][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.433901][T18018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.442854][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.023418][ T5920] usb 6-1: USB disconnect, device number 22 [ 822.121460][T18018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.161061][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.070839][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.201211][T18018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.520946][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.280945][T18018] net_ratelimit: 1 callbacks suppressed [ 826.280972][T18018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.323020][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.561287][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.360973][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog