last executing test programs: 22m33.303560585s ago: executing program 3 (id=5029): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xd, 0xfa11, 0x6}, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x4003, 0x11a72, 0x3325dc}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/1, 0x1}, {&(0x7f0000000280)=""/48, 0x30}], 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) unshare(0xc040400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r6, 0xfffffe83, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, 0x8, 0x0, 0x0}}, 0x10) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000000, 0x20010, r5, 0x6) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000300)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='net/sockstat\x00') preadv(r7, &(0x7f00000003c0)=[{0x0}], 0x1, 0x13, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10) 22m29.632408028s ago: executing program 3 (id=5039): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x20c89e, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x17) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x6, 0x3, 0x6, 0x7fff, 0x1a, "ee1dd756f560f25a63b2f119c3439425ea59d8"}) 22m29.370746304s ago: executing program 3 (id=5040): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='veth0_vlan\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xfffffff3, 0xbffc, 0xee52, 0x2, 0xc, 0x20008, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x5, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x0, 0x20}, 0xc) r3 = fcntl$dupfd(r2, 0x406, r1) write(r3, &(0x7f0000000840)="d2", 0x1) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x71, 0xffff1896, 0x3, 0x26, 0x0, 0x1a}, 0x9c) 22m28.284128155s ago: executing program 3 (id=5043): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r4, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 22m27.684300025s ago: executing program 3 (id=5044): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) socket$rxrpc(0x21, 0x2, 0xa) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xfff2}, {0xb}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 22m25.742423521s ago: executing program 3 (id=5054): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f0000000180)={r2, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000bc0)="ad9ebf11ada0330a6c939a51d7", &(0x7f0000000700), 0xd, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r7, 0x0) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xe, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x240080c0}, 0x2000014) 22m25.42355617s ago: executing program 32 (id=5054): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f0000000180)={r2, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000bc0)="ad9ebf11ada0330a6c939a51d7", &(0x7f0000000700), 0xd, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r7, 0x0) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xe, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x240080c0}, 0x2000014) 8m24.988465404s ago: executing program 2 (id=6521): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xd, 0xfa11, 0x6}, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x4003, 0x11a72, 0x3325dc}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/1, 0x1}, {&(0x7f0000000280)=""/48, 0x30}], 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) unshare(0xc040400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r6, 0xfffffe83, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, 0x8, 0x0, 0x0}}, 0x10) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000000, 0x20010, r5, 0x6) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000300)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='net/sockstat\x00') preadv(r7, &(0x7f00000003c0)=[{&(0x7f0000001640)=""/4108, 0x100c}], 0x1, 0x13, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10) 8m18.954959649s ago: executing program 2 (id=6533): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000308010200000000000000290a"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) r3 = inotify_init1(0x800) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, 0x0) inotify_rm_watch(r3, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000004c0)={0x4, 0xb000}) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) truncate(&(0x7f0000000200)='./mnt\x00', 0x4) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000540)={0x1, r4}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000980)={0x32c, 0x2, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_NAT={0x178, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xaa}}]}, @CTA_EXPECT_NAT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0xe8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x14, 0x4, @private1}}}]}]}, @CTA_EXPECT_MASK={0x7c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_MASTER={0xa0, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xda78553ffb1c5f79}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASTER={0x6c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x32c}, 0x1, 0x0, 0x0, 0x40004}, 0x20044080) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000040)={0x4, 0x5, 0x7, 0xfff9, 0x1b, "03f37fe99f4da288"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xc9e7c661a6f923d9, &(0x7f0000000040)=[{&(0x7f00000000c0)="d800000019000100000212ba0d8105040a600000ff0f040b047c55a1bc0009007d0006000000000000e4ff3f0200000901ac040000d67f6f94007100a007a290457f0189b316277ce06b9eb4e1ffffffffffff8017cbec4c2ee5a71602b2a10c11ce1b14d600741f795025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fec114c5d46a769b4d4ccd40dd6e4ed01ddceb5a2b5ac3290f9eaef6288b97192309a00000e000000000000000000000000000000000000000000000000000a561800"/216, 0xd8}], 0x1}, 0x0) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 8m13.952994737s ago: executing program 2 (id=6543): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xd, 0xfa11, 0x6}, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x4003, 0x11a72, 0x3325dc}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/1, 0x1}, {&(0x7f0000000280)=""/48, 0x30}], 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) unshare(0xc040400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r6, 0xfffffe83, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, 0x8, 0x0, 0x0}}, 0x10) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000000, 0x20010, r5, 0x6) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000300)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='net/sockstat\x00') preadv(r7, &(0x7f00000003c0)=[{&(0x7f0000001640)=""/4108, 0x100c}], 0x1, 0x13, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10) 8m3.677918209s ago: executing program 2 (id=6562): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902240001"], 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x101001a, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYRES16=r1, @ANYRESDEC=0x0], 0xfb, 0x0, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f00000000c0)="ff02040000ffffffffecffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001840), 0x3b, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$inet(0x2, 0x3, 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x45e, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0xf2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfe, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) sendmmsg$inet6(r3, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b40)=[@hoplimit={{0x14, 0x11a, 0x34, 0x9}}], 0x18}}], 0x1, 0x40) 7m52.283234295s ago: executing program 2 (id=6583): semop(0x0, &(0x7f00000000c0)=[{0x4, 0xb}, {0x2}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x8000}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r4 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000000)={0xa, @pix_mp={0x9, 0x3, 0x32315659, 0x4, 0x1, [{0x400, 0x10}, {0x5, 0xc}, {0x2}, {0x2, 0x3532}, {0x7fff, 0x7}, {0x9, 0xa}, {0x2, 0x1000}, {0x7, 0x401}], 0x0, 0x63, 0x1, 0x0, 0x7}}) shutdown(r0, 0x1) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) fsopen(&(0x7f0000000580)='overlay\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x81) unshare(0x2a020400) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r8}, &(0x7f00000002c0), &(0x7f0000000300)=r7}, 0x20) 7m42.508590049s ago: executing program 2 (id=6600): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x8, 0x0, 0x0) getegid() r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x9}) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000200)) close(0xffffffffffffffff) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020}, 0x2020) write$FUSE_INIT(r2, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef10542a2201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42731b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c32768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e179100a0000000000000021e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90a14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9edb6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc83cccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r4, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r3, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}]) dup3(r3, r2, 0x0) 7m26.864685102s ago: executing program 33 (id=6600): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x8, 0x0, 0x0) getegid() r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x9}) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000200)) close(0xffffffffffffffff) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020}, 0x2020) write$FUSE_INIT(r2, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r4, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r3, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}]) dup3(r3, r2, 0x0) 13.378569559s ago: executing program 6 (id=7144): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0xfffffffffffffffe, 0x6, 0x3}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f8, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x892, &(0x7f0000000380)={0x0, 0x103cfd, 0x40, 0x800005, 0x69}, &(0x7f0000000300)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0x1b4}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x18, 0x0, 0xffffffffffffffff, &(0x7f0000000340)={0x220000, 0x20, 0x30}, 0x0, 0x18, 0x0, 0x12345}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22301, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x0, 0x4a, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x0, 0x7, 0x0, 0xf84, 0x8, 0x0, 0xe3, 0x5, 0x0, 0x56, 0x3, 0x0, 0x0, 0x4, 0x8, 0x0, 0x7e, 0x0, '\x00', 0x5, 0x2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 13.223903364s ago: executing program 6 (id=7146): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x6) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_io_uring_setup(0x497, &(0x7f0000002c80)={0x0, 0xe3d3, 0x8, 0x800005, 0x1f0}, &(0x7f0000000440)=0x0, &(0x7f0000002d00)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002e40)="f8f5", 0x2}], 0x1}, 0x0, 0x24000890, 0x1}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)={0x20, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x22}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) io_uring_enter(r3, 0x3516, 0x0, 0x41, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 11.40017044s ago: executing program 6 (id=7150): syz_usb_connect(0x5, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a240308000b020102082407010500070e11240606060509000600040007000300390c2402050302060254df000a092402050001"], 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000140)={0x12}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000040)={0x11, @private=0xa010100, 0x4e20, 0x2, 'fo\x00', 0x10, 0x6, 0x43}, 0x2c) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x161203, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r2) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) 9.755810854s ago: executing program 6 (id=7157): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000308010200000000000000290a"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) r3 = inotify_init1(0x800) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, 0x0) inotify_rm_watch(r3, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000004c0)={0x4, 0xb000}) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) truncate(&(0x7f0000000200)='./mnt\x00', 0x4) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000540)={0x1, r4}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000980)={0x32c, 0x2, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_NAT={0x178, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xaa}}]}, @CTA_EXPECT_NAT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0xe8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x14, 0x4, @private1}}}]}]}, @CTA_EXPECT_MASK={0x7c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_MASTER={0xa0, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xda78553ffb1c5f79}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASTER={0x6c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x32c}, 0x1, 0x0, 0x0, 0x40004}, 0x20044080) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000040)={0x4, 0x5, 0x7, 0xfff9, 0x1b, "03f37fe99f4da288"}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d800000019000100000212ba0d8105040a600000ff0f040b047c55a1bc0009007d0006000000000000e4ff3f0200000901ac040000d67f6f94007100a007a290457f0189b316277ce06b9eb4e1ffffffffffff8017cbec4c2ee5a71602b2a10c11ce1b14d600741f795025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fec114c5d46a769b4d4ccd40dd6e4ed01ddceb5a2b5ac3290f9eaef6288b97192309a00000e000000000000000000000000000000000000000000000000000a5618000000000000000000", 0xd5}], 0x1}, 0x0) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 7.45033519s ago: executing program 5 (id=7169): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r3, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20, 0x3f}}], 0x1, 0xc0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000200)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, @ax25={0x3, @default}, @l2={0x1f, 0x9, @none, 0x7, 0x2}, 0x27d8, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)='pim6reg\x00', 0x5, 0xec86, 0x595a}) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x8b, 0x100000500) 6.440032882s ago: executing program 5 (id=7173): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000010002507b9409b14ffff00000202be04020506050e1304095c0009003f0020480a0000000d0085a168d0bf46d32345653600648d040012000a00050049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e0ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x15) 6.279935474s ago: executing program 5 (id=7175): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = dup(0xffffffffffffffff) mq_notify(r1, &(0x7f0000000100)={0x0, 0x23, 0x4, @thr={&(0x7f0000000000)="7ba04e129bc74f9778fa302c667e3eb1c534f63c149e1140840311cc427837a79b8da4c2a43b4154291f2a9c5d2573", &(0x7f0000000080)="58a8a30d3b784d2edbd0e41fe713764d86e90dc520f412d30c03fb54a41b14435b2bb2ea9885a1e871fe8421a5c191f975f99cb286aac21e38f9dc14b7e0fd632e63ab374759d3dc21c807"}}) syz_usb_control_io(r0, 0x0, 0x0) 6.117049793s ago: executing program 0 (id=7176): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000}) read$FUSE(r4, &(0x7f00000025c0)={0x2020}, 0x2020) preadv(r4, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/100, 0x64}], 0x1, 0x80000000, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x4000c00) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x300) read$midi(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r8, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f88a8", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 4.697496486s ago: executing program 0 (id=7177): r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0xf9, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000001480)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x300, r0, &(0x7f0000000180)="18266a0d8b5fc1e1e2c2b9", 0xb, 0x8000000000000000, 0x0, 0x2efebe1767052e0e}]) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) utimensat(r3, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x40000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x2c, 0x41624800ab11328c, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r3, @ANYRES32=0x0, @ANYRESHEX=r2], 0x30}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) unshare(0x26020480) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) fadvise64(r7, 0x800001b, 0x0, 0x5) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x54, 0x10, 0x1, 0x60bd25, 0xfffffffc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0x12}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 4.39653494s ago: executing program 4 (id=7178): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x6) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_io_uring_setup(0x497, &(0x7f0000002c80)={0x0, 0xe3d3, 0x8, 0x800005, 0x1f0}, &(0x7f0000000440)=0x0, &(0x7f0000002d00)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002e40)="f8f5", 0x2}], 0x1}, 0x0, 0x24000890, 0x1}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)={0x20, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x22}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) io_uring_enter(r3, 0x3516, 0x0, 0x41, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 4.215990417s ago: executing program 0 (id=7179): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x68, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x503301) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[], 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r2, &(0x7f0000002200)={0x50, 0x0, r3, {0x7, 0x27, 0x2, 0x1dd880, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x50) read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004340)="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", 0x2000, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8cff) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000200)=0x2) r6 = syz_open_procfs(0x0, 0x0) setsockopt$RDS_RECVERR(r6, 0x114, 0x5, &(0x7f0000000140)=0x1, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0xfffffffffffffecc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a31000000ff08000540000000020900020073797a310000000008000a40fffffffc0800034000000010400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0xc0) close_range(r4, 0xffffffffffffffff, 0x0) 4.194665447s ago: executing program 1 (id=7180): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0xfffffffffffffffe, 0x6, 0x3}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f8, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x892, &(0x7f0000000380)={0x0, 0x103cfd, 0x40, 0x800005, 0x69}, &(0x7f0000000300)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0x1b4}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x18, 0x0, 0xffffffffffffffff, &(0x7f0000000340)={0x220000, 0x20, 0x30}, 0x0, 0x18, 0x0, 0x12345}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22301, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x0, 0x4a, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x0, 0x7, 0x0, 0xf84, 0x8, 0x0, 0xe3, 0x5, 0x0, 0x56, 0x3, 0x0, 0x0, 0x4, 0x8, 0x0, 0x7e, 0x0, '\x00', 0x5, 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.100353316s ago: executing program 1 (id=7181): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x5865, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x1e0, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1ac, 0x2, [@TCA_MATCHALL_ACT={0x1a8, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x1, 0xea, 0x100004}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x120, 0xc, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80000001, 0x5, 0x0, 0x7fffffff, 0x3}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xaa, 0x6, "702d7b7ca2605b80fb0bfc581434a99b0850c1e175b9e72d4819877b7effa9a22735ec0257f9035602a8c82a11dcd81f6da90792c83eb930b4651b0842fd8b24ec959c6de4ea9a6fdfff65cf7fc47d67a92fccbcf4fd60e2271bae67b9018d70f2d67b7fcbbfc60cf21233bfcc9ab73d6b2b4e85bed55d04fedeb2f8b470d29a44a7f85406cacfcdfea3e574aeb330772672c017d8cb90971aa75861a28f23ee6cdfb876faaa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_skbedit={0x30, 0x2, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) 3.991902739s ago: executing program 1 (id=7182): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x498, 0xffffffff, 0x3c8, 0x300, 0x288, 0xffffffff, 0xffffffff, 0x3c8, 0x3c8, 0x3c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x118, 0x188, 0x0, {}, [@common=@mh={{0x28}, {"f5bb", 0x1}}, @common=@dst={{0x48}, {0xf202, 0x0, 0x1, [0x6, 0x5, 0xffff, 0x9, 0x1, 0x9, 0x8000, 0xfffd, 0x5, 0x5, 0x8000, 0x9, 0x2, 0x3, 0x4, 0x7], 0xb}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x8, 0x4f0c, 0x1, 0x0, "86f99489dd60a4b34fdca6d5537cb51cb8e34cbde9faf75763cadd40221b94ad47d92b5daf92c6537e3a9754cb6107e90b688fd9447901fafcc35741f749b82e"}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff000000, 0xffffffff, 0xff, 0xff], [0xff, 0x0, 0xffffff00, 0xffffffff], 'veth0_to_team\x00', 'ip_vti0\x00', {0xff}, {}, 0x4, 0xfd, 0x6}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@realm={{0x30}, {0x8, 0x5}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0xf, "06bc", 0x1}}, @common=@dst={{0x48}, {0x2c55, 0x1, 0x1, [0x1, 0x3, 0x885, 0x593, 0x2, 0x1ff, 0x7, 0x0, 0x1, 0xf, 0x7fff, 0x1, 0x7, 0x5, 0x10, 0x3], 0x10}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xd10, 0x3, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f8) 3.894451854s ago: executing program 5 (id=7183): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r3, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20, 0x3f}}], 0x1, 0xc0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000200)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, @ax25={0x3, @default}, @l2={0x1f, 0x9, @none, 0x7, 0x2}, 0x27d8, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)='pim6reg\x00', 0x5, 0xec86, 0x595a}) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x8b, 0x100000500) 3.821513219s ago: executing program 1 (id=7184): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00', 0x0}) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff3, 0x5}, {0x8}, {0xa, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040011}, 0x100440a0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newqdisc={0x2f4, 0x10, 0x1, 0x70bd25, 0xfffffffc, {0x6, 0x0, 0x8100, r2, {0xfff1, 0x10}, {0xfff2}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @qdisc_kind_options=@q_gred={{0x9}, {0x29c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x9}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x6, 0x1, 0x8, 0xffffffff, 0x0, 0x8, 0x10001, 0xb, 0x1, 0x5, 0x14, 0x1, 0x0, 0x2, 0x2}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_DPS={0x10, 0x3, {0xa, 0xf, 0x1, 0x3}}, @TCA_GRED_PARMS={0x38, 0x1, {0x2, 0x200, 0x4, 0x1, 0x1, 0x7, 0x22d, 0x4, 0x2, 0x800, 0x1c, 0x0, 0xa, 0x7f, 0xd, 0x7f}}]}}, @qdisc_kind_options=@q_qfg={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 3.738301999s ago: executing program 1 (id=7185): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000ae9b714005000000d960010203010902240001e80000000904"], 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x22, 0x4c, {0x4c, 0x21, "2397e0106e5f88b5973ee4708da845054bb03e3bddef4ae62c6f3635a17c22707f328f92b38529bd5765a9ae6a586dab2e61e28372d68a76c1f663887c4f3b33bd4854a72e3ad08c6506"}}, &(0x7f0000000080)={0x0, 0x3, 0xf9, @string={0xf9, 0x3, "a4cf26ffbe54a123ae0aed6c48273825c35a77b184e5153dd091eeb3c7b48770e8d3a953d4c88d3c36c46cf142ef6254599ce3866dc5b8289e55c6f85ac1a22d7b997a3169a7ad8a85f0c701b95b08118204f09888b8cd4e7ce939ba23a7a1d51aabb014adedc8544bb10d7e8edea58eb2feb5a159bffce87a82903d0764c0e31c0fdfbbb4f7148de487b3c6b3f1ad388902c25a2542137831c53eb48f49c860cc6d7e00a0b860ac27bec2cd16eee7d5d26881c9e5dd30a0ceac5872ebfb173a5f1289704faf2bc80933990b69fe7e295dc40b5154033bb2065a44dd01c767a4a2513f8d5dc5f0d6152379ddb74cd66df2fd150988878d"}}, &(0x7f0000000180)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xb, 0x3, 0x8}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x20, 0xe992166249153c71, 0x2, 0x80, "bbd4fae6", "a4df10fb"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x80, 0x1, 0x1, 0x80, 0xfff8, 0x3ff}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x20, 0x18, 0xc, "96000836c524d3a297e16fab"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x100, 0x10}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0xa}, &(0x7f0000000480)={0x40, 0xb, 0x2, "c4ec"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x2d}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="6c950598fc69"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @random="fd51326ab3b1"}, &(0x7f0000000580)={0x40, 0x19, 0x2, "a5cd"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0xf88b}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x2}}) 3.691866081s ago: executing program 5 (id=7186): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x4e22, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000000c0)=ANY=[], 0x190) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace(0x10, r5) ptrace$peeksig(0x4209, r5, &(0x7f0000000700)={0x0, 0x0, 0x1}, &(0x7f0000000fc0)=[{}]) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@newtaction={0x18, 0x76, 0x1, 0x6, 0x0, {0x0, 0x0, 0x300}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sched_setscheduler(r5, 0x6, &(0x7f0000000040)=0xb) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="180000009a7559ea1ffb0dfc208c10a0b60f54b2c44e4902bf5c1675a59e65d8c3450a61d1ac6ab4fd594a24bd632d68a3b2050328179364ee30d42bb20fb246146857c99b714708b0cd74822f6d5dbfd2cd474429e530d8eeafda28a4e97911cf2302c297e9e25d35c33640258448f61fdda4c36218cb4c92b24f603c17ba17793a175b82f266b99a51ac0f253cf88b166ccd2e04e46e23bafc92947c8480400d073235474cc7b56a29372b41af77afe19cc879acdd6ad23915f3b281645c", @ANYRES16=r4, @ANYBLOB="01002dbd7000ffdbdf250800000004000180"], 0x18}}, 0x8040) r7 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000009c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xfffa, 0xfff3}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x40}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) socket$netlink(0x10, 0x3, 0x0) 3.416672922s ago: executing program 6 (id=7187): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000}) read$FUSE(r4, &(0x7f00000025c0)={0x2020}, 0x2020) preadv(r4, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/100, 0x64}], 0x1, 0x80000000, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x4000c00) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x300) read$midi(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r8, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f88a8", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 2.079940012s ago: executing program 4 (id=7188): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2619, 0x7721, 0x16, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x810) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000300)=[{r3, 0x3328}, {r1, 0x4236}], 0x2, 0x0, 0x0, 0x0) close(r0) 1.837839239s ago: executing program 4 (id=7189): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, 0x0) socket(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000540)='net/netlink\x00') r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffe, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0xf3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x6, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3486, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x100000001, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x1, 0x7084, 0x0, 0x0, 0x0, 0x0, 0x79a2, 0x0, 0x3, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4a44e74b]}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000180)=0x84000000) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r4, &(0x7f00000003c0)=[{&(0x7f0000000400)="0084", 0x2}], 0x1, 0x7fff, 0x1) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000300)=r5) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000880)=""/99, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000340)=0xfffffffe) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x5, 0x100) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) 1.518746853s ago: executing program 6 (id=7190): syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="55c9aaad2da062470c12d75b7a5158730b5a3d42d450b296185a8de19f1e2ba0bb791d69d10dcec12dac158ec9822bbda13229cdbcd514ba2aae7716f42c0edac21ef2c8a7470b81838b901776e19497cdf52b76ff81bc637e43f171965a60604197af78e60e32b064023a9c93bdf948b3386d6f04e617c09c9504a6bfa781236e6743c06ce37dcdca2ef86df727ef34"], 0x0) 627.846881ms ago: executing program 1 (id=7191): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1502, 0x0) r1 = gettid() timer_create(0x2, &(0x7f00000000c0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000080)={0x0, 0x0, 0x3}) timer_settime(r2, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x473, &(0x7f0000000300)) r6 = syz_io_uring_setup(0x3, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa91, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe, 0x368}, &(0x7f00000000c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r6, 0x48e9, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r9}}, 0x48) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)="a1"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r11 = syz_io_uring_setup(0x52c6, &(0x7f0000000140)={0x0, 0xaee3, 0x10000, 0x2, 0x802ce}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r14 = gettid() rt_sigqueueinfo(r14, 0x21, &(0x7f0000000040)={0x1fc, 0x0, 0x10001}) io_uring_enter(r11, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r10, 0x40046208, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x2000) 431.646479ms ago: executing program 0 (id=7192): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}]}, 0x5c}}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@fallback, 0xffffffffffffffff, 0x6, 0x2}, 0x20) 358.189932ms ago: executing program 4 (id=7193): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x201, 0x9, 0x1, 0x0, 0x8}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) pivot_root(&(0x7f0000000000)='./file1\x00', 0x0) 243.84485ms ago: executing program 0 (id=7194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r7, 0x0, 0x201e00) socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) accept4(r9, 0x0, 0x0, 0x800) bind$alg(r9, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(authenc(blake2b-256-generic,pcbc(fcrypt-generic)))\x00'}, 0x58) 243.509071ms ago: executing program 4 (id=7195): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r2, 0x5420, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x5}, {0x8}, {0xa, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040011}, 0x100440a0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newqdisc={0x2f4, 0x10, 0x1, 0x70bd25, 0xfffffffc, {0x6, 0x0, 0x8100, 0x0, {0xfff1, 0x10}, {0xfff2}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @qdisc_kind_options=@q_gred={{0x9}, {0x29c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x9}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x6, 0x1, 0x8, 0xffffffff, 0x0, 0x8, 0x10001, 0xb, 0x1, 0x5, 0x14, 0x1, 0x0, 0x2, 0x2}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_DPS={0x10, 0x3, {0xa, 0xf, 0x1, 0x3}}, @TCA_GRED_PARMS={0x38, 0x1, {0x2, 0x200, 0x4, 0x1, 0x1, 0x7, 0x22d, 0x4, 0x2, 0x800, 0x1c, 0x0, 0xa, 0x7f, 0xd, 0x7f}}]}}, @qdisc_kind_options=@q_qfg={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 83.902215ms ago: executing program 4 (id=7196): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, @ax25={0x3, @default}, @l2={0x1f, 0x9, @none, 0x7, 0x2}, 0x27d8, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)='pim6reg\x00', 0x5, 0xec86, 0x595a}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x8b, 0x100000500) 78.509555ms ago: executing program 0 (id=7197): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) fcntl$setsig(r1, 0xa, 0x1c) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) 0s ago: executing program 5 (id=7198): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x6) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x497, &(0x7f0000002c80)={0x0, 0xe3d3, 0x8, 0x800005, 0x1f0}, &(0x7f0000000440)=0x0, &(0x7f0000002d00)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002e40)="f8f5", 0x2}], 0x1}, 0x0, 0x24000890, 0x1}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)={0x20, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x22}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = syz_usb_connect$cdc_ecm(0x3, 0x98, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x1, 0x1, 0xff, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x0, "5181da1eca"}, {0x5, 0x24, 0x0, 0xf}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x0, 0x1, 0x10}, [@mdlm={0x15, 0x24, 0x12, 0x5}, @dmm={0x7, 0x24, 0x14, 0x8, 0xffff}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x80}, @dmm={0x7, 0x24, 0x14, 0x4, 0x3}, @mdlm={0x15, 0x24, 0x12, 0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x81, 0x4, 0x35}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0xf9, 0x63}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6, 0xff, 0xf7}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x9, 0x6, 0x9, 0x40, 0x9}, 0x10, &(0x7f0000000100)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x7, 0x7, 0x7}]}, 0x9, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xf32d1a338930d55b}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x6cd6}}, {0x73, &(0x7f0000000200)=@string={0x73, 0x3, "eb735aa1b90420ab9b1968c153573674fd181589a1bbe62dc7d7f9a41ca4ecf3d5b964b2d32cd04dc8d1b7424a81cdd64401c2237b483476d59b4d3bcec461348fcb68a0ada9d7352487faafcd41a71b8dc10a7ba6a222caf8169014dd66476ffa0a2378b7001ddd18e1273b5c50caef80"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x812}}, {0xbb, &(0x7f00000002c0)=@string={0xbb, 0x3, "27a7f9ca1dd0b70694ed19e83e2efebc8a626b4d07e396a465c7e6733a9661ed4b168f4fe3326a43375105077f879b2ec95c4d0be3d70790cb118bd3dce5bc98b44c9616405d25d76d4802895db56def4922d7485ecf9b6dddc7b29ba2c4dcc8e40ee2fced8bd5bcca22cf3813cc05851eeca08f14abcf812a6695e8df5964c929f33c22e0adcafcf08c56f60be26178055b07cb4c471041c2432865fe6a78498ca8b0a892e90e7bf3c1feaba947a4789150ca648ed55066dd"}}, {0x3, &(0x7f0000000380)=@string={0x3, 0x3, "8c"}}, {0x7b, &(0x7f00000003c0)=@string={0x7b, 0x3, "879e220892d4ceb025e696410517a6207ece59476b232846e80927c8cc9a81a19fe368506d0f9b2846aef32de915b217ac769d12f684aa75025ae15d87eb79de7125a230fd47b453b994fde14988c69d02d8d8a5ba4cd877241b1fb1366ba18236cafab885cc9c4925a242dd4473f9275113d79c5993b3465b"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1c09}}, {0xcc, &(0x7f0000000500)=@string={0xcc, 0x3, "3b7bfb5210933d7470907f08ed814b379cdc3c954f1c69e52ad1a8052cc607cd2914aa76cf1b024bdebad6014321c1dcd8a7cba299a3f3296ebf3876707672b3ee17645b3ddab3432879e10f54ea28d8139192295b1af177d359ec02af193ae0eae02b2146a1b05b8d4ca2e440a0f7a07d2f0db3d239ac06de0db498896844d7f94353c48e00e6b9a7d6521c5cd445e84dbd5e9467038fa161a7b48ce3267a1c6b45bac6c5e24a08b5c3e1355bd4f8d557656982983de32cdcbb05e2bacebb986a72cb5b377ea2d2a7aa"}}]}) syz_usb_disconnect(r6) kernel console output (not intermixed with test programs): ss `syz.4.6803'. [ 3319.769242][ T4090] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6802'. [ 3321.624844][ T4109] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6806'. [ 3321.827533][ T4107] random: crng reseeded on system resumption [ 3322.279856][T11630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3322.288151][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3322.463320][ T4120] netlink: 'syz.5.6807': attribute type 4 has an invalid length. [ 3322.769868][ T4122] netlink: 'syz.5.6807': attribute type 4 has an invalid length. [ 3324.199263][ T6537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3324.207760][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3324.352933][ T4143] netlink: 'syz.6.6810': attribute type 13 has an invalid length. [ 3327.693321][ T4172] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6816'. [ 3327.812061][ T4175] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6817'. [ 3327.875111][ T4168] wireguard7: entered promiscuous mode [ 3327.882388][ T4168] wireguard7: entered allmulticast mode [ 3328.042552][ T3012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3328.051287][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3328.059378][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 3328.059450][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 3328.360865][ T4181] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6815'. [ 3329.559992][ T4192] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6819'. [ 3329.959740][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3329.968064][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3331.465571][ T4208] xt_hashlimit: max too large, truncated to 1048576 [ 3333.164165][ T4228] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6826'. [ 3333.800439][T29963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3333.808972][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3334.910153][ T4250] netlink: 'syz.6.6830': attribute type 4 has an invalid length. [ 3334.934976][ T4253] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6831'. [ 3335.010118][ T4254] netlink: 'syz.6.6830': attribute type 4 has an invalid length. [ 3335.789810][ T3012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3335.798051][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3336.718042][ T4269] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6833'. [ 3339.708630][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3339.717745][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3341.135128][ T4301] wireguard12: entered promiscuous mode [ 3341.141051][ T4301] wireguard12: entered allmulticast mode [ 3341.555560][ T3012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3341.564180][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3341.864917][ T30] audit: type=1326 audit(1761904967.772:4307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4311 comm="syz.0.6842" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72fbf8efc9 code=0x0 [ 3342.595813][ T4333] netlink: 'syz.4.6847': attribute type 4 has an invalid length. [ 3342.609157][ T2894] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 3342.711003][ T4337] netlink: 'syz.4.6847': attribute type 4 has an invalid length. [ 3342.800834][ T2894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3342.828208][ T2894] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 3342.856947][ T2894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3342.927056][ T2894] usb 2-1: config 0 descriptor?? [ 3343.409875][ T2894] lg-g15 0003:046D:C222.0030: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 3343.555936][T23641] usb 2-1: USB disconnect, device number 32 [ 3343.652589][ T4347] fido_id[4347]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 3344.375393][ T4352] xt_hashlimit: max too large, truncated to 1048576 [ 3345.319974][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3345.328285][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3347.240546][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3347.249538][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3348.540976][ T4384] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6860'. [ 3348.795101][ T4390] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6862'. [ 3349.236442][ T4398] FAULT_INJECTION: forcing a failure. [ 3349.236442][ T4398] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 3349.268451][ T4398] CPU: 0 UID: 0 PID: 4398 Comm: syz.4.6864 Not tainted syzkaller #0 PREEMPT(full) [ 3349.268481][ T4398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3349.268494][ T4398] Call Trace: [ 3349.268503][ T4398] [ 3349.268513][ T4398] dump_stack_lvl+0x189/0x250 [ 3349.268540][ T4398] ? __pfx____ratelimit+0x10/0x10 [ 3349.268556][ T4398] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3349.268587][ T4398] ? __pfx__printk+0x10/0x10 [ 3349.268607][ T4398] ? __might_fault+0xb0/0x130 [ 3349.268644][ T4398] should_fail_ex+0x414/0x560 [ 3349.268680][ T4398] _copy_from_user+0x2d/0xb0 [ 3349.268706][ T4398] do_sock_getsockopt+0x17d/0x450 [ 3349.268731][ T4398] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 3349.268750][ T4398] ? do_syscall_64+0xa0/0xfa0 [ 3349.268776][ T4398] ? __fget_files+0x2a/0x420 [ 3349.268794][ T4398] ? __fget_files+0x3a0/0x420 [ 3349.268811][ T4398] ? __fget_files+0x2a/0x420 [ 3349.268837][ T4398] __x64_sys_getsockopt+0x1a5/0x250 [ 3349.268857][ T4398] ? do_syscall_64+0xa0/0xfa0 [ 3349.268892][ T4398] ? do_syscall_64+0xa0/0xfa0 [ 3349.268929][ T4398] do_syscall_64+0xfa/0xfa0 [ 3349.268954][ T4398] ? lockdep_hardirqs_on+0x9c/0x150 [ 3349.268980][ T4398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3349.269049][ T4398] ? clear_bhb_loop+0x60/0xb0 [ 3349.269074][ T4398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3349.269100][ T4398] RIP: 0033:0x7f55ebb8efc9 [ 3349.269119][ T4398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3349.269143][ T4398] RSP: 002b:00007f55eca10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 3349.269166][ T4398] RAX: ffffffffffffffda RBX: 00007f55ebde5fa0 RCX: 00007f55ebb8efc9 [ 3349.269180][ T4398] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 3349.269192][ T4398] RBP: 00007f55eca10090 R08: 00002000000002c0 R09: 0000000000000000 [ 3349.269205][ T4398] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 3349.269219][ T4398] R13: 00007f55ebde6038 R14: 00007f55ebde5fa0 R15: 00007f55ebf0fa28 [ 3349.269252][ T4398] [ 3349.923980][ T4403] FAULT_INJECTION: forcing a failure. [ 3349.923980][ T4403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3349.927599][ T4402] syz.0.6865 (4402): drop_caches: 2 [ 3349.997786][ T4403] CPU: 0 UID: 0 PID: 4403 Comm: syz.0.6865 Not tainted syzkaller #0 PREEMPT(full) [ 3349.997819][ T4403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3349.997831][ T4403] Call Trace: [ 3349.997839][ T4403] [ 3349.997848][ T4403] dump_stack_lvl+0x189/0x250 [ 3349.997882][ T4403] ? __pfx____ratelimit+0x10/0x10 [ 3349.997909][ T4403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3349.997936][ T4403] ? __pfx__printk+0x10/0x10 [ 3349.997958][ T4403] ? __might_fault+0xb0/0x130 [ 3349.998011][ T4403] should_fail_ex+0x414/0x560 [ 3349.998046][ T4403] _copy_from_user+0x2d/0xb0 [ 3349.998072][ T4403] core_sys_select+0x4bc/0xa20 [ 3349.998114][ T4403] ? __pfx_core_sys_select+0x10/0x10 [ 3349.998167][ T4403] ? __pfx_set_user_sigmask+0x10/0x10 [ 3349.998202][ T4403] __se_sys_pselect6+0x27a/0x300 [ 3349.998237][ T4403] ? __pfx___se_sys_pselect6+0x10/0x10 [ 3349.998264][ T4403] ? __pfx_ksys_write+0x10/0x10 [ 3349.998296][ T4403] ? __x64_sys_pselect6+0x21/0xf0 [ 3349.998336][ T4403] do_syscall_64+0xfa/0xfa0 [ 3349.998361][ T4403] ? lockdep_hardirqs_on+0x9c/0x150 [ 3349.998386][ T4403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3349.998406][ T4403] ? clear_bhb_loop+0x60/0xb0 [ 3349.998431][ T4403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3349.998449][ T4403] RIP: 0033:0x7f72fbf8efc9 [ 3349.998468][ T4403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3349.998483][ T4403] RSP: 002b:00007f72fcd54038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 3349.998503][ T4403] RAX: ffffffffffffffda RBX: 00007f72fc1e6090 RCX: 00007f72fbf8efc9 [ 3349.998518][ T4403] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000040 [ 3349.998532][ T4403] RBP: 00007f72fcd54090 R08: 0000000000000000 R09: 0000000000000000 [ 3349.998544][ T4403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3349.998555][ T4403] R13: 00007f72fc1e6128 R14: 00007f72fc1e6090 R15: 00007f72fc30fa28 [ 3349.998593][ T4403] [ 3350.506555][ T4414] FAULT_INJECTION: forcing a failure. [ 3350.506555][ T4414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3350.550220][ T4414] CPU: 0 UID: 0 PID: 4414 Comm: syz.6.6868 Not tainted syzkaller #0 PREEMPT(full) [ 3350.550240][ T4414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3350.550248][ T4414] Call Trace: [ 3350.550254][ T4414] [ 3350.550260][ T4414] dump_stack_lvl+0x189/0x250 [ 3350.550282][ T4414] ? __pfx____ratelimit+0x10/0x10 [ 3350.550297][ T4414] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3350.550314][ T4414] ? __pfx__printk+0x10/0x10 [ 3350.550333][ T4414] should_fail_ex+0x414/0x560 [ 3350.550355][ T4414] _copy_to_user+0x31/0xb0 [ 3350.550372][ T4414] simple_read_from_buffer+0xe1/0x170 [ 3350.550394][ T4414] proc_fail_nth_read+0x1b3/0x220 [ 3350.550412][ T4414] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3350.550436][ T4414] ? rw_verify_area+0x2a6/0x4d0 [ 3350.550452][ T4414] ? __lock_acquire+0xab9/0xd20 [ 3350.550464][ T4414] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3350.550480][ T4414] vfs_read+0x200/0xa30 [ 3350.550496][ T4414] ? fdget_pos+0x247/0x320 [ 3350.550510][ T4414] ? __pfx___mutex_lock+0x10/0x10 [ 3350.550528][ T4414] ? __pfx_vfs_read+0x10/0x10 [ 3350.550545][ T4414] ? __fget_files+0x2a/0x420 [ 3350.550559][ T4414] ? __fget_files+0x3a0/0x420 [ 3350.550569][ T4414] ? __fget_files+0x2a/0x420 [ 3350.550586][ T4414] ksys_read+0x145/0x250 [ 3350.550601][ T4414] ? __fget_files+0x2a/0x420 [ 3350.550613][ T4414] ? __pfx_ksys_read+0x10/0x10 [ 3350.550631][ T4414] ? do_syscall_64+0xbe/0xfa0 [ 3350.550650][ T4414] do_syscall_64+0xfa/0xfa0 [ 3350.550664][ T4414] ? lockdep_hardirqs_on+0x9c/0x150 [ 3350.550679][ T4414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3350.550691][ T4414] ? clear_bhb_loop+0x60/0xb0 [ 3350.550706][ T4414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3350.550718][ T4414] RIP: 0033:0x7f8a1298d9dc [ 3350.550730][ T4414] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3350.550741][ T4414] RSP: 002b:00007f8a138b8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3350.550756][ T4414] RAX: ffffffffffffffda RBX: 00007f8a12be5fa0 RCX: 00007f8a1298d9dc [ 3350.550766][ T4414] RDX: 000000000000000f RSI: 00007f8a138b80a0 RDI: 0000000000000004 [ 3350.550774][ T4414] RBP: 00007f8a138b8090 R08: 0000000000000000 R09: 0000000000000000 [ 3350.550781][ T4414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3350.550789][ T4414] R13: 00007f8a12be6038 R14: 00007f8a12be5fa0 R15: 00007f8a12d0fa28 [ 3350.550808][ T4414] [ 3351.079821][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3351.088167][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3351.889469][ T2894] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 3351.987263][ T30] audit: type=1326 audit(1761904977.892:4308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4435 comm="syz.1.6874" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0acdb8efc9 code=0x0 [ 3352.185554][ T2894] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3352.277986][ T2894] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 3352.367367][ T2894] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 3352.377860][ T2894] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3352.387574][ T2894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3352.999716][ T3012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3353.007992][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3353.265831][ T2894] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 3353.490695][ T2894] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 3355.115513][ T2987] usb 7-1: USB disconnect, device number 2 [ 3355.141174][T23641] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 3355.299452][T23641] usb 5-1: Using ep0 maxpacket: 16 [ 3355.325194][T23641] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 3355.356226][T23641] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3355.395101][T23641] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3355.429473][T23641] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 3355.487490][T23641] usb 5-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 3355.514723][T23641] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3355.545054][T23641] usb 5-1: config 0 descriptor?? [ 3355.842964][T23641] usb 5-1: string descriptor 0 read error: -71 [ 3355.925531][T23641] usbhid 5-1:0.0: can't add hid device: -71 [ 3355.947104][T23641] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 3356.020455][T23641] usb 5-1: USB disconnect, device number 70 [ 3356.279723][ T3012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3356.288043][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3356.560934][ T4507] FAULT_INJECTION: forcing a failure. [ 3356.560934][ T4507] name failslab, interval 1, probability 0, space 0, times 0 [ 3356.577222][ T4507] CPU: 1 UID: 0 PID: 4507 Comm: syz.6.6890 Not tainted syzkaller #0 PREEMPT(full) [ 3356.577251][ T4507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3356.577262][ T4507] Call Trace: [ 3356.577271][ T4507] [ 3356.577280][ T4507] dump_stack_lvl+0x189/0x250 [ 3356.577314][ T4507] ? __pfx____ratelimit+0x10/0x10 [ 3356.577340][ T4507] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3356.577368][ T4507] ? __pfx__printk+0x10/0x10 [ 3356.577395][ T4507] ? __pfx___might_resched+0x10/0x10 [ 3356.577423][ T4507] should_fail_ex+0x414/0x560 [ 3356.577460][ T4507] should_failslab+0xa8/0x100 [ 3356.577484][ T4507] __kmalloc_noprof+0xcb/0x7f0 [ 3356.577510][ T4507] ? kfree+0x4d/0x6d0 [ 3356.577532][ T4507] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 3356.577570][ T4507] tomoyo_realpath_from_path+0xe3/0x5d0 [ 3356.577602][ T4507] ? tomoyo_domain+0xd9/0x130 [ 3356.577638][ T4507] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 3356.577664][ T4507] tomoyo_path_number_perm+0x1e8/0x5a0 [ 3356.577693][ T4507] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3356.577764][ T4507] ? __fget_files+0x2a/0x420 [ 3356.577789][ T4507] ? __fget_files+0x3a0/0x420 [ 3356.577807][ T4507] ? __fget_files+0x2a/0x420 [ 3356.577832][ T4507] security_file_ioctl+0xcb/0x2d0 [ 3356.577859][ T4507] __se_sys_ioctl+0x47/0x170 [ 3356.577890][ T4507] do_syscall_64+0xfa/0xfa0 [ 3356.577916][ T4507] ? lockdep_hardirqs_on+0x9c/0x150 [ 3356.577943][ T4507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3356.577963][ T4507] ? clear_bhb_loop+0x60/0xb0 [ 3356.577989][ T4507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3356.578008][ T4507] RIP: 0033:0x7f8a1298efc9 [ 3356.578028][ T4507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3356.578047][ T4507] RSP: 002b:00007f8a138b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3356.578070][ T4507] RAX: ffffffffffffffda RBX: 00007f8a12be5fa0 RCX: 00007f8a1298efc9 [ 3356.578086][ T4507] RDX: 0000200000000280 RSI: 0000000000008904 RDI: 0000000000000003 [ 3356.578100][ T4507] RBP: 00007f8a138b8090 R08: 0000000000000000 R09: 0000000000000000 [ 3356.578113][ T4507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3356.578131][ T4507] R13: 00007f8a12be6038 R14: 00007f8a12be5fa0 R15: 00007f8a12d0fa28 [ 3356.578166][ T4507] [ 3356.578410][ T4507] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3356.909441][ T4510] fuse: Unknown parameter 'M / [ 3356.909441][ T4510] M00000000000000000000' [ 3357.072950][ T4514] FAULT_INJECTION: forcing a failure. [ 3357.072950][ T4514] name failslab, interval 1, probability 0, space 0, times 0 [ 3357.087055][ T4514] CPU: 1 UID: 0 PID: 4514 Comm: syz.6.6893 Not tainted syzkaller #0 PREEMPT(full) [ 3357.087076][ T4514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3357.087084][ T4514] Call Trace: [ 3357.087090][ T4514] [ 3357.087095][ T4514] dump_stack_lvl+0x189/0x250 [ 3357.087117][ T4514] ? __pfx____ratelimit+0x10/0x10 [ 3357.087134][ T4514] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3357.087150][ T4514] ? __pfx__printk+0x10/0x10 [ 3357.087166][ T4514] ? __pfx___might_resched+0x10/0x10 [ 3357.087183][ T4514] should_fail_ex+0x414/0x560 [ 3357.087204][ T4514] should_failslab+0xa8/0x100 [ 3357.087218][ T4514] __kmalloc_noprof+0xcb/0x7f0 [ 3357.087234][ T4514] ? kfree+0x4d/0x6d0 [ 3357.087247][ T4514] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 3357.087270][ T4514] tomoyo_realpath_from_path+0xe3/0x5d0 [ 3357.087289][ T4514] ? tomoyo_domain+0xd9/0x130 [ 3357.087303][ T4514] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 3357.087318][ T4514] tomoyo_path_number_perm+0x1e8/0x5a0 [ 3357.087335][ T4514] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3357.087373][ T4514] ? __fget_files+0x2a/0x420 [ 3357.087415][ T4514] ? __fget_files+0x3a0/0x420 [ 3357.087426][ T4514] ? __fget_files+0x2a/0x420 [ 3357.087440][ T4514] security_file_ioctl+0xcb/0x2d0 [ 3357.087456][ T4514] __se_sys_ioctl+0x47/0x170 [ 3357.087473][ T4514] do_syscall_64+0xfa/0xfa0 [ 3357.087488][ T4514] ? lockdep_hardirqs_on+0x9c/0x150 [ 3357.087504][ T4514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3357.087517][ T4514] ? clear_bhb_loop+0x60/0xb0 [ 3357.087532][ T4514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3357.087543][ T4514] RIP: 0033:0x7f8a1298efc9 [ 3357.087555][ T4514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3357.087566][ T4514] RSP: 002b:00007f8a138b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3357.087581][ T4514] RAX: ffffffffffffffda RBX: 00007f8a12be5fa0 RCX: 00007f8a1298efc9 [ 3357.087591][ T4514] RDX: 0000000000000000 RSI: 00000000801c581f RDI: 0000000000000003 [ 3357.087599][ T4514] RBP: 00007f8a138b8090 R08: 0000000000000000 R09: 0000000000000000 [ 3357.087607][ T4514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3357.087614][ T4514] R13: 00007f8a12be6038 R14: 00007f8a12be5fa0 R15: 00007f8a12d0fa28 [ 3357.087635][ T4514] [ 3357.087643][ T4514] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3357.726399][ T4519] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6895'. [ 3358.331375][ T4536] FAULT_INJECTION: forcing a failure. [ 3358.331375][ T4536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3358.359954][ T4536] CPU: 1 UID: 0 PID: 4536 Comm: syz.4.6899 Not tainted syzkaller #0 PREEMPT(full) [ 3358.359985][ T4536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3358.359997][ T4536] Call Trace: [ 3358.360006][ T4536] [ 3358.360017][ T4536] dump_stack_lvl+0x189/0x250 [ 3358.360050][ T4536] ? __pfx____ratelimit+0x10/0x10 [ 3358.360076][ T4536] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3358.360103][ T4536] ? __pfx__printk+0x10/0x10 [ 3358.360125][ T4536] ? __might_fault+0xb0/0x130 [ 3358.360166][ T4536] should_fail_ex+0x414/0x560 [ 3358.360202][ T4536] _copy_from_user+0x2d/0xb0 [ 3358.360228][ T4536] do_ip6t_set_ctl+0x69f/0xce0 [ 3358.360264][ T4536] ? rcu_is_watching+0x15/0xb0 [ 3358.360289][ T4536] ? trace_contention_end+0x39/0x120 [ 3358.360315][ T4536] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 3358.360371][ T4536] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3358.360410][ T4536] ? __pfx_aa_sk_perm+0x10/0x10 [ 3358.360445][ T4536] nf_setsockopt+0x26f/0x290 [ 3358.360472][ T4536] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 3358.360504][ T4536] do_sock_setsockopt+0x17c/0x1b0 [ 3358.360531][ T4536] __x64_sys_setsockopt+0x13f/0x1b0 [ 3358.360558][ T4536] do_syscall_64+0xfa/0xfa0 [ 3358.360583][ T4536] ? lockdep_hardirqs_on+0x9c/0x150 [ 3358.360609][ T4536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3358.360630][ T4536] ? clear_bhb_loop+0x60/0xb0 [ 3358.360664][ T4536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3358.360685][ T4536] RIP: 0033:0x7f55ebb8efc9 [ 3358.360704][ T4536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3358.360722][ T4536] RSP: 002b:00007f55eca10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3358.360744][ T4536] RAX: ffffffffffffffda RBX: 00007f55ebde5fa0 RCX: 00007f55ebb8efc9 [ 3358.360760][ T4536] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 3358.360773][ T4536] RBP: 00007f55eca10090 R08: 00000000000004f8 R09: 0000000000000000 [ 3358.360786][ T4536] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 3358.360799][ T4536] R13: 00007f55ebde6038 R14: 00007f55ebde5fa0 R15: 00007f55ebf0fa28 [ 3358.360834][ T4536] [ 3358.759683][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3358.768035][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3358.775485][ T4545] libceph: resolve '0..' (ret=-3): failed [ 3358.871595][ T30] audit: type=1326 audit(1761904984.782:4309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4544 comm="syz.0.6905" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72fbf8efc9 code=0x0 [ 3358.897969][ T4552] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 3358.915394][ T2987] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 3359.068872][ T2987] usb 6-1: device descriptor read/64, error -71 [ 3359.077204][ T4562] FAULT_INJECTION: forcing a failure. [ 3359.077204][ T4562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3359.101225][ T4562] CPU: 0 UID: 0 PID: 4562 Comm: syz.4.6911 Not tainted syzkaller #0 PREEMPT(full) [ 3359.101256][ T4562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3359.101269][ T4562] Call Trace: [ 3359.101278][ T4562] [ 3359.101287][ T4562] dump_stack_lvl+0x189/0x250 [ 3359.101322][ T4562] ? __pfx____ratelimit+0x10/0x10 [ 3359.101348][ T4562] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3359.101374][ T4562] ? __pfx__printk+0x10/0x10 [ 3359.101396][ T4562] ? __might_fault+0xb0/0x130 [ 3359.101436][ T4562] should_fail_ex+0x414/0x560 [ 3359.101471][ T4562] _copy_from_user+0x2d/0xb0 [ 3359.101500][ T4562] __se_sys_io_pgetevents+0x115/0x420 [ 3359.101527][ T4562] ? __pfx___se_sys_io_pgetevents+0x10/0x10 [ 3359.101549][ T4562] ? __pfx_ksys_write+0x10/0x10 [ 3359.101582][ T4562] ? __x64_sys_io_pgetevents+0x21/0xf0 [ 3359.101608][ T4562] do_syscall_64+0xfa/0xfa0 [ 3359.101632][ T4562] ? lockdep_hardirqs_on+0x9c/0x150 [ 3359.101656][ T4562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3359.101683][ T4562] ? clear_bhb_loop+0x60/0xb0 [ 3359.101709][ T4562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3359.101728][ T4562] RIP: 0033:0x7f55ebb8efc9 [ 3359.101748][ T4562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3359.101763][ T4562] RSP: 002b:00007f55eca10038 EFLAGS: 00000246 ORIG_RAX: 000000000000014d [ 3359.101787][ T4562] RAX: ffffffffffffffda RBX: 00007f55ebde5fa0 RCX: 00007f55ebb8efc9 [ 3359.101802][ T4562] RDX: 00000000080002ae RSI: 0000000000000003 RDI: 00007f55ec9ef000 [ 3359.101816][ T4562] RBP: 00007f55eca10090 R08: 0000200000000140 R09: 00002000000003c0 [ 3359.101830][ T4562] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 3359.101843][ T4562] R13: 00007f55ebde6038 R14: 00007f55ebde5fa0 R15: 00007f55ebf0fa28 [ 3359.101877][ T4562] [ 3359.649657][ T2987] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 3359.799020][ T2987] usb 6-1: device descriptor read/64, error -71 [ 3359.879166][T30972] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 3359.909582][ T2987] usb usb6-port1: attempt power cycle [ 3360.042023][T30972] usb 5-1: Using ep0 maxpacket: 16 [ 3360.052327][T30972] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3360.061133][T30972] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 3360.072930][T30972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3360.089380][T30972] usb 5-1: config 0 descriptor?? [ 3360.258833][ T2987] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 3360.293210][ T2987] usb 6-1: device descriptor read/8, error -71 [ 3360.506181][ T4572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3360.525557][ T4572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3360.546835][T30972] usbhid 5-1:0.0: can't add hid device: -71 [ 3360.555071][ T2987] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 3360.564454][T30972] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 3360.584169][T30972] usb 5-1: USB disconnect, device number 71 [ 3360.601012][ T2987] usb 6-1: device descriptor read/8, error -71 [ 3360.626271][ T30] audit: type=1326 audit(1761904986.532:4310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.1.6917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acdb8efc9 code=0x7ffc0000 [ 3360.651832][ T30] audit: type=1326 audit(1761904986.532:4311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.1.6917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acdb8efc9 code=0x7ffc0000 [ 3360.677188][ T30] audit: type=1326 audit(1761904986.532:4312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.1.6917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f0acdb8efc9 code=0x7ffc0000 [ 3360.703481][ T30] audit: type=1326 audit(1761904986.532:4313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.1.6917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acdb8efc9 code=0x7ffc0000 [ 3360.719068][ T2894] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 3360.728268][ T2987] usb usb6-port1: unable to enumerate USB device [ 3360.741474][ T30] audit: type=1326 audit(1761904986.532:4314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.1.6917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f0acdb8efc9 code=0x7ffc0000 [ 3360.771123][ T30] audit: type=1326 audit(1761904986.532:4315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.1.6917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acdb8efc9 code=0x7ffc0000 [ 3360.796721][ T30] audit: type=1326 audit(1761904986.532:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.1.6917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acdb8efc9 code=0x7ffc0000 [ 3360.821921][ T30] audit: type=1326 audit(1761904986.532:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.1.6917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0acdb8efc9 code=0x7ffc0000 [ 3360.845002][ T30] audit: type=1326 audit(1761904986.532:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.1.6917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acdb8efc9 code=0x7ffc0000 [ 3361.019162][ T2894] usb 7-1: Using ep0 maxpacket: 8 [ 3361.026248][ T2894] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 3361.054626][ T2894] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3361.091426][ T2894] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3361.142659][ T2894] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3361.171549][ T2894] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3361.181237][ T2894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3361.246965][ T2894] usbtmc 7-1:16.0: bulk endpoints not found [ 3361.773626][ T4597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3361.782908][ T4597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3361.794718][ T4597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3361.808370][ T4597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3361.959822][T11630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3361.968215][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3362.129274][ T4600] ip6gre1: entered promiscuous mode [ 3362.137382][ T4600] ip6gre1: entered allmulticast mode [ 3362.146662][ T6537] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3362.160555][ T4600] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3362.169366][ T6537] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3362.177335][ T5926] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3362.319144][ T5926] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3362.846894][ T5926] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3362.987377][ T4601] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 3363.007079][ T4601] batman_adv: batadv0: Adding interface: ip6gretap1 [ 3363.015525][ T4601] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3363.049870][ T4601] batman_adv: batadv0: Interface activated: ip6gretap1 [ 3363.802350][ T2894] usb 7-1: USB disconnect, device number 3 [ 3363.880075][T11630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3363.888370][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3364.058886][T23641] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 3364.208792][T23641] usb 5-1: Using ep0 maxpacket: 32 [ 3364.216515][T23641] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3364.239379][T23641] usb 5-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 3364.249011][T23641] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3364.281603][T23641] usb 5-1: config 0 descriptor?? [ 3364.726852][T23641] kye 0003:0458:5015.0031: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 3364.770883][T23641] kye 0003:0458:5015.0031: hidraw0: USB HID v10.00 Device [HID 0458:5015] on usb-dummy_hcd.4-1/input0 [ 3364.811540][T23641] kye 0003:0458:5015.0031: tablet-enabling feature report not found [ 3364.843053][T23641] kye 0003:0458:5015.0031: tablet enabling failed [ 3364.853067][ T4641] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6931'. [ 3365.538874][ T4648] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6934'. [ 3365.737956][ T4650] ip6tnl0: Caught tx_queue_len zero misconfig [ 3365.908716][T23641] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 3366.068914][T23641] usb 6-1: Using ep0 maxpacket: 8 [ 3366.076514][T23641] usb 6-1: config 0 has an invalid interface number: 246 but max is 0 [ 3366.093304][T23641] usb 6-1: config 0 has no interface number 0 [ 3366.108802][T23641] usb 6-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 3366.131931][T23641] usb 6-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 3366.141629][T23641] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3366.150552][T23641] usb 6-1: Product: syz [ 3366.155066][T23641] usb 6-1: Manufacturer: syz [ 3366.160561][T23641] usb 6-1: SerialNumber: syz [ 3366.358819][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3366.388034][T23641] usb 6-1: config 0 descriptor?? [ 3366.582306][ T2894] usb 5-1: USB disconnect, device number 72 [ 3366.588827][T23641] msi2500 6-1:0.246: Registered as swradio24 [ 3366.628396][T23641] msi2500 6-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 3366.688062][ T4648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3366.711979][ T4648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3366.810718][ T4660] FAULT_INJECTION: forcing a failure. [ 3366.810718][ T4660] name failslab, interval 1, probability 0, space 0, times 0 [ 3366.834125][ T4660] CPU: 0 UID: 0 PID: 4660 Comm: syz.4.6936 Not tainted syzkaller #0 PREEMPT(full) [ 3366.834156][ T4660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3366.834169][ T4660] Call Trace: [ 3366.834178][ T4660] [ 3366.834187][ T4660] dump_stack_lvl+0x189/0x250 [ 3366.834221][ T4660] ? __pfx____ratelimit+0x10/0x10 [ 3366.834249][ T4660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3366.834277][ T4660] ? __pfx__printk+0x10/0x10 [ 3366.834306][ T4660] ? __pfx___might_resched+0x10/0x10 [ 3366.834328][ T4660] ? fs_reclaim_acquire+0x7d/0x100 [ 3366.834365][ T4660] should_fail_ex+0x414/0x560 [ 3366.834413][ T4660] should_failslab+0xa8/0x100 [ 3366.834436][ T4660] kmem_cache_alloc_node_noprof+0x77/0x710 [ 3366.834466][ T4660] ? __alloc_skb+0x112/0x2d0 [ 3366.834495][ T4660] ? netlink_autobind+0xdb/0x300 [ 3366.834522][ T4660] __alloc_skb+0x112/0x2d0 [ 3366.834558][ T4660] netlink_sendmsg+0x5c6/0xb30 [ 3366.834589][ T4660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3366.834613][ T4660] ? aa_sock_msg_perm+0xf1/0x1d0 [ 3366.834644][ T4660] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3366.834665][ T4660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3366.834685][ T4660] __sock_sendmsg+0x21c/0x270 [ 3366.834717][ T4660] ____sys_sendmsg+0x505/0x830 [ 3366.834745][ T4660] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3366.834779][ T4660] ? import_iovec+0x74/0xa0 [ 3366.834808][ T4660] ___sys_sendmsg+0x21f/0x2a0 [ 3366.834834][ T4660] ? __pfx____sys_sendmsg+0x10/0x10 [ 3366.834896][ T4660] ? __fget_files+0x2a/0x420 [ 3366.834916][ T4660] ? __fget_files+0x3a0/0x420 [ 3366.834948][ T4660] __x64_sys_sendmsg+0x19b/0x260 [ 3366.834973][ T4660] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3366.835005][ T4660] ? __pfx_ksys_write+0x10/0x10 [ 3366.835038][ T4660] ? do_syscall_64+0xbe/0xfa0 [ 3366.835069][ T4660] do_syscall_64+0xfa/0xfa0 [ 3366.835094][ T4660] ? lockdep_hardirqs_on+0x9c/0x150 [ 3366.835121][ T4660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3366.835141][ T4660] ? clear_bhb_loop+0x60/0xb0 [ 3366.835166][ T4660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3366.835186][ T4660] RIP: 0033:0x7f55ebb8efc9 [ 3366.835205][ T4660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3366.835223][ T4660] RSP: 002b:00007f55eca10038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3366.835246][ T4660] RAX: ffffffffffffffda RBX: 00007f55ebde5fa0 RCX: 00007f55ebb8efc9 [ 3366.835262][ T4660] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 3366.835276][ T4660] RBP: 00007f55eca10090 R08: 0000000000000000 R09: 0000000000000000 [ 3366.835289][ T4660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3366.835302][ T4660] R13: 00007f55ebde6038 R14: 00007f55ebde5fa0 R15: 00007f55ebf0fa28 [ 3366.835336][ T4660] [ 3367.172998][ T2894] usb 6-1: USB disconnect, device number 50 [ 3367.477819][ T4668] FAULT_INJECTION: forcing a failure. [ 3367.477819][ T4668] name failslab, interval 1, probability 0, space 0, times 0 [ 3367.492015][ T4668] CPU: 0 UID: 0 PID: 4668 Comm: syz.6.6938 Not tainted syzkaller #0 PREEMPT(full) [ 3367.492044][ T4668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3367.492056][ T4668] Call Trace: [ 3367.492064][ T4668] [ 3367.492074][ T4668] dump_stack_lvl+0x189/0x250 [ 3367.492107][ T4668] ? __pfx____ratelimit+0x10/0x10 [ 3367.492133][ T4668] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3367.492161][ T4668] ? __pfx__printk+0x10/0x10 [ 3367.492188][ T4668] ? __pfx___might_resched+0x10/0x10 [ 3367.492211][ T4668] ? fs_reclaim_acquire+0x7d/0x100 [ 3367.492243][ T4668] should_fail_ex+0x414/0x560 [ 3367.492278][ T4668] should_failslab+0xa8/0x100 [ 3367.492300][ T4668] kmem_cache_alloc_node_noprof+0x77/0x710 [ 3367.492328][ T4668] ? __alloc_skb+0x112/0x2d0 [ 3367.492355][ T4668] ? netlink_autobind+0xdb/0x300 [ 3367.492381][ T4668] __alloc_skb+0x112/0x2d0 [ 3367.492413][ T4668] netlink_sendmsg+0x5c6/0xb30 [ 3367.492441][ T4668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3367.492464][ T4668] ? aa_sock_msg_perm+0xf1/0x1d0 [ 3367.492494][ T4668] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3367.492514][ T4668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3367.492533][ T4668] __sock_sendmsg+0x21c/0x270 [ 3367.492563][ T4668] ____sys_sendmsg+0x505/0x830 [ 3367.492591][ T4668] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3367.492622][ T4668] ? import_iovec+0x74/0xa0 [ 3367.492652][ T4668] ___sys_sendmsg+0x21f/0x2a0 [ 3367.492686][ T4668] ? __pfx____sys_sendmsg+0x10/0x10 [ 3367.492747][ T4668] ? __fget_files+0x2a/0x420 [ 3367.492765][ T4668] ? __fget_files+0x3a0/0x420 [ 3367.492794][ T4668] __x64_sys_sendmsg+0x19b/0x260 [ 3367.492818][ T4668] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3367.492849][ T4668] ? __pfx_ksys_write+0x10/0x10 [ 3367.492882][ T4668] ? do_syscall_64+0xbe/0xfa0 [ 3367.492913][ T4668] do_syscall_64+0xfa/0xfa0 [ 3367.492938][ T4668] ? lockdep_hardirqs_on+0x9c/0x150 [ 3367.492963][ T4668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3367.492983][ T4668] ? clear_bhb_loop+0x60/0xb0 [ 3367.493007][ T4668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3367.493026][ T4668] RIP: 0033:0x7f8a1298efc9 [ 3367.493046][ T4668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3367.493064][ T4668] RSP: 002b:00007f8a138b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3367.493087][ T4668] RAX: ffffffffffffffda RBX: 00007f8a12be5fa0 RCX: 00007f8a1298efc9 [ 3367.493102][ T4668] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 3367.493115][ T4668] RBP: 00007f8a138b8090 R08: 0000000000000000 R09: 0000000000000000 [ 3367.493128][ T4668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3367.493140][ T4668] R13: 00007f8a12be6038 R14: 00007f8a12be5fa0 R15: 00007f8a12d0fa28 [ 3367.493174][ T4668] [ 3367.777127][ T6537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3367.786070][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3368.069404][ T5926] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 3368.171602][ T4672] netlink: 'syz.0.6939': attribute type 13 has an invalid length. [ 3368.190250][ T4551] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 3368.209854][ T2894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3368.239202][ T5926] usb 7-1: Using ep0 maxpacket: 8 [ 3368.261270][ T5926] usb 7-1: unable to get BOS descriptor or descriptor too short [ 3368.281493][ T5926] usb 7-1: config 0 has an invalid interface number: 238 but max is 0 [ 3368.291128][ T5926] usb 7-1: config 0 has no interface number 0 [ 3368.306339][ T5926] usb 7-1: config 0 interface 238 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1023 [ 3368.317209][ T5926] usb 7-1: config 0 interface 238 has no altsetting 0 [ 3368.343633][ T5926] usb 7-1: New USB device found, idVendor=06e0, idProduct=f108, bcdDevice=9e.70 [ 3368.372858][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3368.405900][ T5926] usb 7-1: Product: syz [ 3368.424840][ T5926] usb 7-1: Manufacturer: syz [ 3368.499166][ T5926] usb 7-1: SerialNumber: syz [ 3368.509459][ T5926] usb 7-1: config 0 descriptor?? [ 3368.521666][ T4670] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 3368.611650][ T2894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3368.760528][ T5926] ti_usb_3410_5052 7-1:0.238: TI USB 3410 1 port adapter converter detected [ 3368.793774][ T5926] ti_usb_3410_5052 7-1:0.238: missing endpoints [ 3368.876703][ T5926] usb 7-1: USB disconnect, device number 4 [ 3369.062948][ T4683] input: syz1 as /devices/virtual/input/input77 [ 3369.639901][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3369.648419][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3369.841007][ T2894] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 3370.001181][ T2894] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3370.012874][ T2894] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3370.027893][ T4689] ip6gre1: entered promiscuous mode [ 3370.054240][ T2894] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3370.130490][ T2894] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3370.154677][ T4689] ip6gre1: entered allmulticast mode [ 3370.162057][ T2894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3370.192292][ T2894] usb 7-1: config 0 descriptor?? [ 3370.411275][ T4551] usb 5-1: unable to read config index 0 descriptor/all [ 3370.418928][ T4551] usb 5-1: can't read configurations, error -71 [ 3370.498288][ T4701] netlink: 'syz.1.6947': attribute type 4 has an invalid length. [ 3370.557730][ T4704] netlink: 'syz.1.6947': attribute type 4 has an invalid length. [ 3370.786097][ T2894] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 3371.092244][ T4714] netlink: 'syz.5.6950': attribute type 1 has an invalid length. [ 3371.187209][ T4719] netlink: 92 bytes leftover after parsing attributes in process `syz.6.6943'. [ 3371.380485][T30972] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 3371.548780][T30972] usb 6-1: device descriptor read/64, error -71 [ 3371.679974][ T4723] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6951'. [ 3371.788722][T30972] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 3371.870698][ C0] plantronics 0003:047F:FFFF.0032: usb_submit_urb(ctrl) failed: -1 [ 3371.930859][T30972] usb 6-1: device descriptor read/64, error -71 [ 3372.008737][ T2987] usb 7-1: reset high-speed USB device number 5 using dummy_hcd [ 3372.053535][T30972] usb usb6-port1: attempt power cycle [ 3372.165016][ T2987] usb 7-1: device descriptor read/64, error -32 [ 3372.403009][T30972] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 3372.403191][ T2987] usb 7-1: reset high-speed USB device number 5 using dummy_hcd [ 3372.422271][ T4732] netlink: 'syz.1.6952': attribute type 16 has an invalid length. [ 3372.422289][ T4732] netlink: 'syz.1.6952': attribute type 17 has an invalid length. [ 3372.423716][T30972] usb 6-1: device descriptor read/8, error -71 [ 3372.529467][ T2987] usb 7-1: device descriptor read/64, error -32 [ 3372.668686][T30972] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 3372.703654][ T4700] tty tty20: ldisc open failed (-12), clearing slot 19 [ 3372.717359][T30972] usb 6-1: device descriptor read/8, error -71 [ 3372.778795][ T2987] usb 7-1: reset high-speed USB device number 5 using dummy_hcd [ 3372.799150][ T2987] usb 7-1: device descriptor read/8, error -32 [ 3372.828970][T30972] usb usb6-port1: unable to enumerate USB device [ 3372.999640][ T2892] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 3373.050329][ T2987] usb 7-1: reset high-speed USB device number 5 using dummy_hcd [ 3373.089232][ T2987] usb 7-1: device descriptor read/8, error -32 [ 3373.160946][ T2892] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 3373.168552][ T2892] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3373.180331][ T2892] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3373.195078][ T2892] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3373.207376][ T2892] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3373.218740][ T2987] raw-gadget.1 gadget.6: failed to queue suspend event [ 3373.219679][ T4551] usb 7-1: USB disconnect, device number 5 [ 3373.234044][ T2892] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 3373.242282][ T2892] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3373.254625][ T2892] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3373.260815][ T4551] raw-gadget.1 gadget.6: failed to queue reset event [ 3373.267024][ T2894] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 3373.282199][ T2892] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3373.294229][ T2892] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3373.309532][ T2892] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 3373.319950][ T2892] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 3373.331961][ T2892] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3373.344411][ T2892] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 3373.356385][ T2892] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 3373.370911][ T4551] raw-gadget.1 gadget.6: failed to queue resume event [ 3373.373855][ T2892] usb 2-1: string descriptor 0 read error: -22 [ 3373.385407][ T2892] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 3373.395092][ T2892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3373.422962][ T2892] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 3373.449372][ T2894] usb 5-1: Using ep0 maxpacket: 16 [ 3373.457107][ T2894] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3373.458761][ T4551] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 3373.477031][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 3373.477038][ T2894] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3373.477087][ T2894] usb 5-1: New USB device found, idVendor=0079, idProduct=1844, bcdDevice= 0.00 [ 3373.485160][ T3012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3373.485388][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3373.518194][ T2894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3373.529207][ T4551] raw-gadget.1 gadget.6: failed to queue reset event [ 3373.541896][ T2894] usb 5-1: config 0 descriptor?? [ 3373.608874][ T4551] raw-gadget.1 gadget.6: failed to queue resume event [ 3373.669302][ T4551] usb 7-1: device descriptor read/64, error -32 [ 3373.701800][ T4760] fuse: Bad value for 'fd' [ 3373.750502][ T5926] usb 2-1: USB disconnect, device number 33 [ 3373.778476][ T4759] usb 2-1: Couldn't submit interrupt_out_urb -19 [ 3373.789105][ T4551] raw-gadget.1 gadget.6: failed to queue suspend event [ 3373.800254][ T4551] raw-gadget.1 gadget.6: failed to queue reset event [ 3373.898784][ T4551] raw-gadget.1 gadget.6: failed to queue resume event [ 3373.920130][ T4686] raw-gadget.1 gadget.6: failed to queue suspend event [ 3373.927312][ T4686] raw-gadget.1 gadget.6: failed to queue disconnect event [ 3373.988740][ T4551] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 3374.245630][ T4745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3374.288795][ T4745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3374.324956][ T2894] usbhid 5-1:0.0: can't add hid device: -71 [ 3374.375536][ T2894] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 3374.452112][ T2894] usb 5-1: USB disconnect, device number 75 [ 3374.758796][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3374.816741][ T4772] syz.5.6965 (4772): drop_caches: 2 [ 3374.823472][ T4772] FAULT_INJECTION: forcing a failure. [ 3374.823472][ T4772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3374.840379][ T4772] CPU: 0 UID: 0 PID: 4772 Comm: syz.5.6965 Not tainted syzkaller #0 PREEMPT(full) [ 3374.840405][ T4772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3374.840417][ T4772] Call Trace: [ 3374.840425][ T4772] [ 3374.840434][ T4772] dump_stack_lvl+0x189/0x250 [ 3374.840467][ T4772] ? __pfx____ratelimit+0x10/0x10 [ 3374.840492][ T4772] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3374.840526][ T4772] ? __pfx__printk+0x10/0x10 [ 3374.840547][ T4772] ? __might_fault+0xb0/0x130 [ 3374.840585][ T4772] should_fail_ex+0x414/0x560 [ 3374.840620][ T4772] core_sys_select+0x729/0xa20 [ 3374.840660][ T4772] ? __pfx_core_sys_select+0x10/0x10 [ 3374.840712][ T4772] ? __pfx_set_user_sigmask+0x10/0x10 [ 3374.840737][ T4772] __se_sys_pselect6+0x27a/0x300 [ 3374.840758][ T4772] ? __pfx___se_sys_pselect6+0x10/0x10 [ 3374.840776][ T4772] ? __pfx_ksys_write+0x10/0x10 [ 3374.840794][ T4772] ? __x64_sys_pselect6+0x21/0xf0 [ 3374.840814][ T4772] do_syscall_64+0xfa/0xfa0 [ 3374.840829][ T4772] ? lockdep_hardirqs_on+0x9c/0x150 [ 3374.840845][ T4772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3374.840858][ T4772] ? clear_bhb_loop+0x60/0xb0 [ 3374.840872][ T4772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3374.840884][ T4772] RIP: 0033:0x7ff04398efc9 [ 3374.840896][ T4772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3374.840907][ T4772] RSP: 002b:00007ff04484d038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 3374.840922][ T4772] RAX: ffffffffffffffda RBX: 00007ff043be5fa0 RCX: 00007ff04398efc9 [ 3374.840932][ T4772] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000040 [ 3374.840940][ T4772] RBP: 00007ff04484d090 R08: 0000000000000000 R09: 0000000000000000 [ 3374.840948][ T4772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3374.840955][ T4772] R13: 00007ff043be6038 R14: 00007ff043be5fa0 R15: 00007ff043d0fa28 [ 3374.840975][ T4772] [ 3375.287622][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 3375.287637][ T30] audit: type=1326 audit(1761905001.192:4342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4782 comm="syz.0.6970" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72fbf8efc9 code=0x0 [ 3375.413376][T11630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3375.421831][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3375.452745][ T4789] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6969'. [ 3376.068986][ T2894] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 3376.199503][ T2894] usb 2-1: device descriptor read/64, error -71 [ 3376.459904][ T2894] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 3376.639156][ T2894] usb 2-1: device descriptor read/64, error -71 [ 3376.664455][ T4813] netlink: 'syz.4.6976': attribute type 13 has an invalid length. [ 3376.867167][ T2894] usb usb2-port1: attempt power cycle [ 3377.229011][ T2894] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 3377.263775][ T2894] usb 2-1: device descriptor read/8, error -71 [ 3377.549481][ T2894] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 3377.841312][ T2894] usb 2-1: device descriptor read/8, error -71 [ 3377.955484][ T2894] usb usb2-port1: unable to enumerate USB device [ 3378.067906][ T30] audit: type=1800 audit(1761905003.972:4343): pid=4816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6977" name="SYSV00000000" dev="tmpfs" ino=6 res=0 errno=0 [ 3378.931052][ T4824] loop9: detected capacity change from 0 to 7 [ 3378.941034][ T4455] Dev loop9: unable to read RDB block 7 [ 3378.952406][ T4455] loop9: unable to read partition table [ 3378.969081][ T4455] loop9: partition table beyond EOD, truncated [ 3379.049783][ T4824] Dev loop9: unable to read RDB block 7 [ 3379.055496][ T4824] loop9: unable to read partition table [ 3379.063268][ T4824] loop9: partition table beyond EOD, truncated [ 3379.071322][ T4824] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 3379.250121][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3379.258661][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3379.267199][ T4828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3379.659001][ T2894] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 3379.875071][ T30] audit: type=1326 audit(1761905005.782:4344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4842 comm="syz.1.6984" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0acdb8efc9 code=0x0 [ 3379.900402][ T2987] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 3380.049134][ T2894] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3380.062253][ T2894] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 3380.070936][ T2987] usb 5-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 3380.081893][ T2894] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 3380.092404][ T2987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3380.101749][ T2894] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3380.111549][ T2894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3380.128131][ T2987] usb 5-1: config 0 descriptor?? [ 3380.247593][ T2894] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 3380.529267][ T2894] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 3380.572831][ T2987] gembird 0003:11FF:3331.0033: item fetching failed at offset 1/5 [ 3380.591713][ T2987] gembird 0003:11FF:3331.0033: probe with driver gembird failed with error -22 [ 3380.837457][ T4851] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3380.950823][ T4857] netlink: 'syz.1.6987': attribute type 13 has an invalid length. [ 3381.160106][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3381.168517][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3382.203503][ T4859] netlink: 45 bytes leftover after parsing attributes in process `syz.0.6988'. [ 3382.343606][ T4551] usb 7-1: USB disconnect, device number 8 [ 3382.375758][ T4861] futex_wake_op: syz.1.6990 tries to shift op by -1; fix this program [ 3382.623394][ T4875] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6992'. [ 3382.698732][ T4551] usb 5-1: USB disconnect, device number 76 [ 3382.910385][ T4883] syzkaller0: Caught tx_queue_len zero misconfig [ 3383.023745][ T4885] only policy match revision 0 supported [ 3383.023771][ T4885] unable to load match [ 3383.349831][ T30] audit: type=1326 audit(1761905009.252:4345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4887 comm="syz.4.6997" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55ebb8efc9 code=0x0 [ 3385.021816][T11630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3385.030147][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3385.643534][ T4905] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 3385.826472][ T4913] pimreg: entered allmulticast mode [ 3386.779487][ T4928] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.7006'. [ 3386.789967][ T4931] tipc: Bearer : already 2 bearers with priority 10 [ 3386.814359][ T4931] tipc: Bearer : trying with adjusted priority [ 3386.837638][ T4931] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 3386.850742][ T4925] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.7006'. [ 3386.908726][T23641] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 3386.919723][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3386.923822][ T4928] syz.4.7006 (4928): drop_caches: 2 [ 3386.928056][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3387.070143][T23641] usb 2-1: Using ep0 maxpacket: 8 [ 3387.077358][T23641] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3387.084680][T23641] usb 2-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 3387.098007][T23641] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3387.125385][T23641] usb 2-1: config 0 descriptor?? [ 3387.556469][ T4927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3387.568536][ T4954] FAULT_INJECTION: forcing a failure. [ 3387.568536][ T4954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3387.582249][ T4927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3387.595933][ T4954] CPU: 0 UID: 0 PID: 4954 Comm: syz.6.7017 Not tainted syzkaller #0 PREEMPT(full) [ 3387.595952][ T4954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3387.595960][ T4954] Call Trace: [ 3387.595965][ T4954] [ 3387.595971][ T4954] dump_stack_lvl+0x189/0x250 [ 3387.595996][ T4954] ? __pfx____ratelimit+0x10/0x10 [ 3387.596013][ T4954] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3387.596029][ T4954] ? __pfx__printk+0x10/0x10 [ 3387.596050][ T4954] should_fail_ex+0x414/0x560 [ 3387.596072][ T4954] strncpy_from_user+0x36/0x290 [ 3387.596092][ T4954] getname_flags+0xf3/0x540 [ 3387.596108][ T4954] __x64_sys_linkat+0xc1/0xf0 [ 3387.596127][ T4954] do_syscall_64+0xfa/0xfa0 [ 3387.596142][ T4954] ? lockdep_hardirqs_on+0x9c/0x150 [ 3387.596158][ T4954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3387.596170][ T4954] ? clear_bhb_loop+0x60/0xb0 [ 3387.596184][ T4954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3387.596197][ T4954] RIP: 0033:0x7f8a1298efc9 [ 3387.596209][ T4954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3387.596220][ T4954] RSP: 002b:00007f8a138b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 3387.596235][ T4954] RAX: ffffffffffffffda RBX: 00007f8a12be5fa0 RCX: 00007f8a1298efc9 [ 3387.596244][ T4954] RDX: ffffffffffffff9c RSI: 0000200000000500 RDI: ffffffffffffff9c [ 3387.596253][ T4954] RBP: 00007f8a138b8090 R08: 0000000000000000 R09: 0000000000000000 [ 3387.596261][ T4954] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 3387.596269][ T4954] R13: 00007f8a12be6038 R14: 00007f8a12be5fa0 R15: 00007f8a12d0fa28 [ 3387.596288][ T4954] [ 3387.928270][T23641] wacom 0003:056A:00BA.0034: Unknown device_type for 'HID 056a:00ba'. Assuming pen. [ 3387.947890][T23641] wacom 0003:056A:00BA.0034: hidraw0: USB HID v0.02 Device [HID 056a:00ba] on usb-dummy_hcd.1-1/input0 [ 3387.977528][T23641] input: Wacom Intuos4 8x13 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00BA.0034/input/input78 [ 3388.109633][T23641] usb 2-1: USB disconnect, device number 38 [ 3388.413106][ T4956] fido_id[4956]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 3388.978804][T23641] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 3388.991918][ T4972] FAULT_INJECTION: forcing a failure. [ 3388.991918][ T4972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3389.014043][ T4972] CPU: 0 UID: 0 PID: 4972 Comm: syz.1.7020 Not tainted syzkaller #0 PREEMPT(full) [ 3389.014064][ T4972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3389.014072][ T4972] Call Trace: [ 3389.014079][ T4972] [ 3389.014085][ T4972] dump_stack_lvl+0x189/0x250 [ 3389.014106][ T4972] ? __pfx____ratelimit+0x10/0x10 [ 3389.014122][ T4972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3389.014138][ T4972] ? __pfx__printk+0x10/0x10 [ 3389.014151][ T4972] ? __might_fault+0xb0/0x130 [ 3389.014174][ T4972] should_fail_ex+0x414/0x560 [ 3389.014195][ T4972] _copy_from_iter+0x1de/0x1790 [ 3389.014212][ T4972] ? rcu_is_watching+0x15/0xb0 [ 3389.014229][ T4972] ? kmalloc_reserve+0xbd/0x290 [ 3389.014248][ T4972] ? __pfx__copy_from_iter+0x10/0x10 [ 3389.014262][ T4972] ? __build_skb_around+0x262/0x3f0 [ 3389.014282][ T4972] ? netlink_sendmsg+0x642/0xb30 [ 3389.014292][ T4972] ? skb_put+0x11b/0x210 [ 3389.014306][ T4972] netlink_sendmsg+0x6b2/0xb30 [ 3389.014323][ T4972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3389.014337][ T4972] ? aa_sock_msg_perm+0xf1/0x1d0 [ 3389.014355][ T4972] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3389.014367][ T4972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3389.014379][ T4972] __sock_sendmsg+0x21c/0x270 [ 3389.014398][ T4972] ____sys_sendmsg+0x505/0x830 [ 3389.014414][ T4972] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3389.014432][ T4972] ? import_iovec+0x74/0xa0 [ 3389.014449][ T4972] ___sys_sendmsg+0x21f/0x2a0 [ 3389.014463][ T4972] ? __pfx____sys_sendmsg+0x10/0x10 [ 3389.014496][ T4972] ? __fget_files+0x2a/0x420 [ 3389.014507][ T4972] ? __fget_files+0x3a0/0x420 [ 3389.014524][ T4972] __x64_sys_sendmsg+0x19b/0x260 [ 3389.014545][ T4972] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3389.014563][ T4972] ? __pfx_ksys_write+0x10/0x10 [ 3389.014582][ T4972] ? do_syscall_64+0xbe/0xfa0 [ 3389.014599][ T4972] do_syscall_64+0xfa/0xfa0 [ 3389.014614][ T4972] ? lockdep_hardirqs_on+0x9c/0x150 [ 3389.014630][ T4972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3389.014642][ T4972] ? clear_bhb_loop+0x60/0xb0 [ 3389.014656][ T4972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3389.014668][ T4972] RIP: 0033:0x7f0acdb8efc9 [ 3389.014680][ T4972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3389.014691][ T4972] RSP: 002b:00007f0acea98038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3389.014706][ T4972] RAX: ffffffffffffffda RBX: 00007f0acdde5fa0 RCX: 00007f0acdb8efc9 [ 3389.014715][ T4972] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 3389.014723][ T4972] RBP: 00007f0acea98090 R08: 0000000000000000 R09: 0000000000000000 [ 3389.014731][ T4972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3389.014739][ T4972] R13: 00007f0acdde6038 R14: 00007f0acdde5fa0 R15: 00007f0acdf0fa28 [ 3389.014757][ T4972] [ 3389.468714][T23641] usb 7-1: Using ep0 maxpacket: 16 [ 3389.476935][T23641] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 3389.488162][T23641] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3389.498349][T23641] usb 7-1: config 0 has no interface number 0 [ 3389.504512][T23641] usb 7-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 3389.513663][T23641] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3389.523658][T23641] usb 7-1: config 0 descriptor?? [ 3389.532267][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 3389.532693][T23641] uvcvideo 7-1:0.64: probe with driver uvcvideo failed with error -22 [ 3389.554317][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 3389.714406][ T4975] netlink: 'syz.1.7021': attribute type 16 has an invalid length. [ 3389.800991][ T4975] netlink: 708 bytes leftover after parsing attributes in process `syz.1.7021'. [ 3389.817236][ T4975] veth0_macvtap: entered allmulticast mode [ 3389.853121][T23641] usb 7-1: USB disconnect, device number 9 [ 3390.223568][ T4991] bridge0: entered allmulticast mode [ 3390.240554][ T4991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7023'. [ 3390.709214][ T2894] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 3390.762393][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3390.770788][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3390.918259][ T2894] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 3390.967262][ T2894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3391.027863][ T2894] usb 6-1: Product: syz [ 3391.053633][ T2894] usb 6-1: Manufacturer: syz [ 3391.064708][ T2894] usb 6-1: SerialNumber: syz [ 3391.087762][ T2894] usb 6-1: config 0 descriptor?? [ 3391.336504][ T2894] hso 6-1:0.0: Failed to find BULK IN ep [ 3391.395314][ T2894] usb-storage 6-1:0.0: USB Mass Storage device detected [ 3391.402517][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3392.047167][ T6537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3392.056243][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3392.303667][ T5011] FAULT_INJECTION: forcing a failure. [ 3392.303667][ T5011] name failslab, interval 1, probability 0, space 0, times 0 [ 3392.318395][ T5011] CPU: 1 UID: 0 PID: 5011 Comm: syz.6.7032 Not tainted syzkaller #0 PREEMPT(full) [ 3392.318424][ T5011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3392.318437][ T5011] Call Trace: [ 3392.318446][ T5011] [ 3392.318456][ T5011] dump_stack_lvl+0x189/0x250 [ 3392.318490][ T5011] ? __pfx____ratelimit+0x10/0x10 [ 3392.318516][ T5011] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3392.318542][ T5011] ? __pfx__printk+0x10/0x10 [ 3392.318574][ T5011] ? __pfx___might_resched+0x10/0x10 [ 3392.318602][ T5011] should_fail_ex+0x414/0x560 [ 3392.318638][ T5011] should_failslab+0xa8/0x100 [ 3392.318661][ T5011] __kmalloc_noprof+0xcb/0x7f0 [ 3392.318689][ T5011] ? rtm_to_fib_config+0x107f/0x13c0 [ 3392.318708][ T5011] ? fib_trie_table+0x33/0x1d0 [ 3392.318741][ T5011] fib_trie_table+0x33/0x1d0 [ 3392.318770][ T5011] fib_new_table+0x135/0x2d0 [ 3392.318813][ T5011] inet_rtm_newroute+0x115/0x210 [ 3392.318844][ T5011] ? __lock_acquire+0xab9/0xd20 [ 3392.318867][ T5011] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 3392.318923][ T5011] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 3392.318954][ T5011] rtnetlink_rcv_msg+0x7cf/0xb70 [ 3392.318990][ T5011] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 3392.319020][ T5011] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3392.319048][ T5011] ? ref_tracker_free+0x63a/0x7d0 [ 3392.319069][ T5011] ? __asan_memcpy+0x40/0x70 [ 3392.319095][ T5011] ? __pfx_ref_tracker_free+0x10/0x10 [ 3392.319129][ T5011] netlink_rcv_skb+0x208/0x470 [ 3392.319164][ T5011] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3392.319196][ T5011] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3392.319242][ T5011] ? netlink_deliver_tap+0x2e/0x1b0 [ 3392.319284][ T5011] netlink_unicast+0x82f/0x9e0 [ 3392.319324][ T5011] ? __pfx_netlink_unicast+0x10/0x10 [ 3392.319356][ T5011] ? netlink_sendmsg+0x642/0xb30 [ 3392.319373][ T5011] ? skb_put+0x11b/0x210 [ 3392.319421][ T5011] netlink_sendmsg+0x805/0xb30 [ 3392.319453][ T5011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3392.319478][ T5011] ? aa_sock_msg_perm+0xf1/0x1d0 [ 3392.319511][ T5011] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3392.319532][ T5011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3392.319553][ T5011] __sock_sendmsg+0x21c/0x270 [ 3392.319584][ T5011] __sys_sendto+0x3bd/0x520 [ 3392.319620][ T5011] ? __pfx___sys_sendto+0x10/0x10 [ 3392.319648][ T5011] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 3392.319693][ T5011] ? __fget_files+0x3a0/0x420 [ 3392.319726][ T5011] ? ksys_write+0x22a/0x250 [ 3392.319757][ T5011] ? __pfx_ksys_write+0x10/0x10 [ 3392.319799][ T5011] __x64_sys_sendto+0xde/0x100 [ 3392.319823][ T5011] do_syscall_64+0xfa/0xfa0 [ 3392.319849][ T5011] ? lockdep_hardirqs_on+0x9c/0x150 [ 3392.319876][ T5011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3392.319897][ T5011] ? clear_bhb_loop+0x60/0xb0 [ 3392.319924][ T5011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3392.319945][ T5011] RIP: 0033:0x7f8a1298efc9 [ 3392.319965][ T5011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3392.319982][ T5011] RSP: 002b:00007f8a138b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 3392.320005][ T5011] RAX: ffffffffffffffda RBX: 00007f8a12be5fa0 RCX: 00007f8a1298efc9 [ 3392.320021][ T5011] RDX: 0000000000000078 RSI: 0000200000000080 RDI: 0000000000000003 [ 3392.320034][ T5011] RBP: 00007f8a138b8090 R08: 0000000000000000 R09: 0000000000000015 [ 3392.320047][ T5011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3392.320059][ T5011] R13: 00007f8a12be6038 R14: 00007f8a12be5fa0 R15: 00007f8a12d0fa28 [ 3392.320096][ T5011] [ 3392.714691][ T5013] tipc: Resetting bearer [ 3392.720971][ T5013] tipc: Resetting bearer [ 3392.739340][ T5013] tipc: Resetting bearer [ 3392.742279][T23641] usb 6-1: USB disconnect, device number 55 [ 3392.745142][ T5013] tipc: Resetting bearer [ 3392.765368][ T5015] netlink: 'syz.4.7033': attribute type 16 has an invalid length. [ 3392.808654][ T5015] netlink: 708 bytes leftover after parsing attributes in process `syz.4.7033'. [ 3392.832026][ T5017] netlink: 27 bytes leftover after parsing attributes in process `syz.5.7034'. [ 3393.368256][ T5028] FAULT_INJECTION: forcing a failure. [ 3393.368256][ T5028] name failslab, interval 1, probability 0, space 0, times 0 [ 3393.381644][ T5028] CPU: 1 UID: 0 PID: 5028 Comm: syz.0.7039 Not tainted syzkaller #0 PREEMPT(full) [ 3393.381664][ T5028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3393.381671][ T5028] Call Trace: [ 3393.381678][ T5028] [ 3393.381683][ T5028] dump_stack_lvl+0x189/0x250 [ 3393.381705][ T5028] ? __pfx____ratelimit+0x10/0x10 [ 3393.381721][ T5028] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3393.381737][ T5028] ? __pfx__printk+0x10/0x10 [ 3393.381750][ T5028] ? __lock_acquire+0xab9/0xd20 [ 3393.381767][ T5028] should_fail_ex+0x414/0x560 [ 3393.381788][ T5028] should_failslab+0xa8/0x100 [ 3393.381802][ T5028] kmem_cache_alloc_noprof+0x74/0x6e0 [ 3393.381819][ T5028] ? sctp_get_port_local+0x6d3/0x1680 [ 3393.381842][ T5028] sctp_get_port_local+0x6d3/0x1680 [ 3393.381861][ T5028] ? __pfx_sctp_get_port_local+0x10/0x10 [ 3393.381875][ T5028] ? sctp_bind_addr_match+0x28b/0x2b0 [ 3393.381893][ T5028] sctp_do_bind+0x4ea/0x940 [ 3393.381911][ T5028] sctp_connect_new_asoc+0x25c/0x690 [ 3393.381925][ T5028] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 3393.381940][ T5028] ? sctp_get_af_specific+0x29/0x80 [ 3393.381956][ T5028] ? sctp_inet6_send_verify+0x80/0x300 [ 3393.381971][ T5028] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 3393.381984][ T5028] __sctp_connect+0x5ba/0xd50 [ 3393.382002][ T5028] ? __pfx___sctp_connect+0x10/0x10 [ 3393.382015][ T5028] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 3393.382028][ T5028] ? security_sctp_bind_connect+0x7e/0x2e0 [ 3393.382045][ T5028] sctp_getsockopt_connectx3+0x2c4/0x440 [ 3393.382063][ T5028] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 3393.382079][ T5028] ? __local_bh_enable_ip+0x12d/0x1c0 [ 3393.382093][ T5028] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 3393.382112][ T5028] sctp_getsockopt+0x98a/0xb60 [ 3393.382129][ T5028] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 3393.382147][ T5028] do_sock_getsockopt+0x372/0x450 [ 3393.382162][ T5028] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 3393.382174][ T5028] ? do_syscall_64+0xa0/0xfa0 [ 3393.382188][ T5028] ? __fget_files+0x2a/0x420 [ 3393.382200][ T5028] ? __fget_files+0x3a0/0x420 [ 3393.382211][ T5028] ? __fget_files+0x2a/0x420 [ 3393.382225][ T5028] __x64_sys_getsockopt+0x1a5/0x250 [ 3393.382237][ T5028] ? do_syscall_64+0xa0/0xfa0 [ 3393.382253][ T5028] ? do_syscall_64+0xa0/0xfa0 [ 3393.382270][ T5028] do_syscall_64+0xfa/0xfa0 [ 3393.382285][ T5028] ? lockdep_hardirqs_on+0x9c/0x150 [ 3393.382301][ T5028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3393.382312][ T5028] ? clear_bhb_loop+0x60/0xb0 [ 3393.382327][ T5028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3393.382338][ T5028] RIP: 0033:0x7f72fbf8efc9 [ 3393.382351][ T5028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3393.382361][ T5028] RSP: 002b:00007f72fcd75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 3393.382376][ T5028] RAX: ffffffffffffffda RBX: 00007f72fc1e5fa0 RCX: 00007f72fbf8efc9 [ 3393.382386][ T5028] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 3393.382394][ T5028] RBP: 00007f72fcd75090 R08: 00002000000002c0 R09: 0000000000000000 [ 3393.382402][ T5028] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 3393.382409][ T5028] R13: 00007f72fc1e6038 R14: 00007f72fc1e5fa0 R15: 00007f72fc30fa28 [ 3393.382427][ T5028] [ 3393.389155][T23641] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 3393.859387][ T5040] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 3394.119462][ T2894] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 3394.232793][ T5045] syz.1.7042 (5045): drop_caches: 2 [ 3394.285915][ T2894] usb 5-1: Using ep0 maxpacket: 16 [ 3394.398991][ T2894] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3394.479580][T23641] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3394.503859][ T2894] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3394.531849][ T2894] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3394.550979][T23641] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 3394.559105][ T2894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3394.596574][T23641] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 3394.608496][ T2894] usb 5-1: Product: syz [ 3394.619768][ T2894] usb 5-1: Manufacturer: syz [ 3394.639228][T23641] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3394.649116][ T2894] usb 5-1: SerialNumber: syz [ 3394.752410][T23641] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3394.893356][ T5040] syzkaller1: entered promiscuous mode [ 3394.911915][ T5040] syzkaller1: entered allmulticast mode [ 3395.479221][ T2894] usb 5-1: 0:2 : does not exist [ 3395.506207][ T2894] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 3395.610559][ T5058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7044'. [ 3395.671543][ T2894] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 3395.702107][ T2894] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 3395.769943][T23641] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 3395.781144][ T2894] usb 5-1: USB disconnect, device number 77 [ 3395.932033][T23641] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 3396.047974][ T4432] udevd[4432]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 3396.126485][ T4455] udevd[4455]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3396.520141][ T6537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3396.528449][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3397.118780][ T30] audit: type=1326 audit(1761905023.022:4346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5072 comm="syz.0.7048" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72fbf8efc9 code=0x0 [ 3397.210960][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3397.219589][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3397.229872][ T5066] wireguard6: entered promiscuous mode [ 3397.237399][ T5066] wireguard6: entered allmulticast mode [ 3397.298244][ T5070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7046'. [ 3397.632632][ T5082] FAULT_INJECTION: forcing a failure. [ 3397.632632][ T5082] name failslab, interval 1, probability 0, space 0, times 0 [ 3397.645967][ T5082] CPU: 1 UID: 0 PID: 5082 Comm: syz.1.7050 Not tainted syzkaller #0 PREEMPT(full) [ 3397.645985][ T5082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3397.645993][ T5082] Call Trace: [ 3397.645999][ T5082] [ 3397.646004][ T5082] dump_stack_lvl+0x189/0x250 [ 3397.646026][ T5082] ? __pfx____ratelimit+0x10/0x10 [ 3397.646042][ T5082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3397.646058][ T5082] ? __pfx__printk+0x10/0x10 [ 3397.646074][ T5082] ? __pfx___might_resched+0x10/0x10 [ 3397.646087][ T5082] ? fs_reclaim_acquire+0x7d/0x100 [ 3397.646108][ T5082] should_fail_ex+0x414/0x560 [ 3397.646129][ T5082] should_failslab+0xa8/0x100 [ 3397.646142][ T5082] __kmalloc_noprof+0xcb/0x7f0 [ 3397.646159][ T5082] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 3397.646179][ T5082] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 3397.646198][ T5082] genl_family_rcv_msg_doit+0xb8/0x300 [ 3397.646217][ T5082] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 3397.646237][ T5082] ? apparmor_capable+0x137/0x1b0 [ 3397.646252][ T5082] ? bpf_lsm_capable+0x9/0x20 [ 3397.646266][ T5082] ? security_capable+0x7e/0x2e0 [ 3397.646286][ T5082] genl_rcv_msg+0x60e/0x790 [ 3397.646304][ T5082] ? __pfx_genl_rcv_msg+0x10/0x10 [ 3397.646318][ T5082] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 3397.646331][ T5082] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 3397.646346][ T5082] ? __pfx_nl80211_post_doit+0x10/0x10 [ 3397.646367][ T5082] netlink_rcv_skb+0x208/0x470 [ 3397.646384][ T5082] ? __lock_acquire+0xab9/0xd20 [ 3397.646396][ T5082] ? __pfx_genl_rcv_msg+0x10/0x10 [ 3397.646412][ T5082] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3397.646441][ T5082] ? down_read+0x1ad/0x2e0 [ 3397.646460][ T5082] genl_rcv+0x28/0x40 [ 3397.646473][ T5082] netlink_unicast+0x82f/0x9e0 [ 3397.646495][ T5082] ? __pfx_netlink_unicast+0x10/0x10 [ 3397.646513][ T5082] ? netlink_sendmsg+0x642/0xb30 [ 3397.646523][ T5082] ? skb_put+0x11b/0x210 [ 3397.646538][ T5082] netlink_sendmsg+0x805/0xb30 [ 3397.646555][ T5082] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3397.646569][ T5082] ? aa_sock_msg_perm+0xf1/0x1d0 [ 3397.646587][ T5082] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3397.646598][ T5082] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3397.646625][ T5082] __sock_sendmsg+0x21c/0x270 [ 3397.646644][ T5082] ____sys_sendmsg+0x505/0x830 [ 3397.646660][ T5082] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3397.646678][ T5082] ? import_iovec+0x74/0xa0 [ 3397.646696][ T5082] ___sys_sendmsg+0x21f/0x2a0 [ 3397.646711][ T5082] ? __pfx____sys_sendmsg+0x10/0x10 [ 3397.646745][ T5082] ? __fget_files+0x2a/0x420 [ 3397.646756][ T5082] ? __fget_files+0x3a0/0x420 [ 3397.646774][ T5082] __x64_sys_sendmsg+0x19b/0x260 [ 3397.646789][ T5082] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3397.646807][ T5082] ? __pfx_ksys_write+0x10/0x10 [ 3397.646827][ T5082] ? do_syscall_64+0xbe/0xfa0 [ 3397.646845][ T5082] do_syscall_64+0xfa/0xfa0 [ 3397.646859][ T5082] ? lockdep_hardirqs_on+0x9c/0x150 [ 3397.646874][ T5082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3397.646887][ T5082] ? clear_bhb_loop+0x60/0xb0 [ 3397.646902][ T5082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3397.646913][ T5082] RIP: 0033:0x7f0acdb8efc9 [ 3397.646925][ T5082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3397.646936][ T5082] RSP: 002b:00007f0acea77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3397.646950][ T5082] RAX: ffffffffffffffda RBX: 00007f0acdde6090 RCX: 00007f0acdb8efc9 [ 3397.646959][ T5082] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 3397.646967][ T5082] RBP: 00007f0acea77090 R08: 0000000000000000 R09: 0000000000000000 [ 3397.646975][ T5082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3397.646982][ T5082] R13: 00007f0acdde6128 R14: 00007f0acdde6090 R15: 00007f0acdf0fa28 [ 3397.647007][ T5082] [ 3397.648084][ T5082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3398.211833][ T5926] usb 7-1: USB disconnect, device number 10 [ 3398.421613][ T5097] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7053'. [ 3399.502134][ T5108] tipc: Enabled bearer , priority 10 [ 3401.131733][ T5112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7054'. [ 3401.639206][ T2894] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 3401.758899][T23641] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 3401.928980][ T5135] FAULT_INJECTION: forcing a failure. [ 3401.928980][ T5135] name failslab, interval 1, probability 0, space 0, times 0 [ 3401.954127][T23641] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 3401.970714][ T5135] CPU: 0 UID: 0 PID: 5135 Comm: syz.0.7061 Not tainted syzkaller #0 PREEMPT(full) [ 3401.970740][ T5135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3401.970748][ T5135] Call Trace: [ 3401.970754][ T5135] [ 3401.970759][ T5135] dump_stack_lvl+0x189/0x250 [ 3401.970781][ T5135] ? __pfx____ratelimit+0x10/0x10 [ 3401.970797][ T5135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3401.970814][ T5135] ? __pfx__printk+0x10/0x10 [ 3401.970829][ T5135] ? __pfx___might_resched+0x10/0x10 [ 3401.970845][ T5135] should_fail_ex+0x414/0x560 [ 3401.970871][ T5135] should_failslab+0xa8/0x100 [ 3401.970892][ T5135] kmem_cache_alloc_node_noprof+0x77/0x710 [ 3401.970910][ T5135] ? __alloc_skb+0x112/0x2d0 [ 3401.970932][ T5135] __alloc_skb+0x112/0x2d0 [ 3401.970952][ T5135] netlink_ack+0x146/0xa50 [ 3401.970969][ T5135] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3401.970996][ T5135] netlink_rcv_skb+0x28c/0x470 [ 3401.971013][ T5135] ? __lock_acquire+0xab9/0xd20 [ 3401.971026][ T5135] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3401.971044][ T5135] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3401.971069][ T5135] ? netlink_deliver_tap+0x2e/0x1b0 [ 3401.971092][ T5135] netlink_unicast+0x82f/0x9e0 [ 3401.971114][ T5135] ? __pfx_netlink_unicast+0x10/0x10 [ 3401.971132][ T5135] ? netlink_sendmsg+0x642/0xb30 [ 3401.971142][ T5135] ? skb_put+0x11b/0x210 [ 3401.971155][ T5135] netlink_sendmsg+0x805/0xb30 [ 3401.971173][ T5135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3401.971187][ T5135] ? aa_sock_msg_perm+0xf1/0x1d0 [ 3401.971206][ T5135] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3401.971219][ T5135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3401.971231][ T5135] __sock_sendmsg+0x21c/0x270 [ 3401.971249][ T5135] __sys_sendto+0x3bd/0x520 [ 3401.971269][ T5135] ? __pfx___sys_sendto+0x10/0x10 [ 3401.971286][ T5135] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 3401.971311][ T5135] ? __fget_files+0x3a0/0x420 [ 3401.971329][ T5135] ? ksys_write+0x22a/0x250 [ 3401.971347][ T5135] ? __pfx_ksys_write+0x10/0x10 [ 3401.971366][ T5135] __x64_sys_sendto+0xde/0x100 [ 3401.971380][ T5135] do_syscall_64+0xfa/0xfa0 [ 3401.971395][ T5135] ? lockdep_hardirqs_on+0x9c/0x150 [ 3401.971410][ T5135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3401.971422][ T5135] ? clear_bhb_loop+0x60/0xb0 [ 3401.971437][ T5135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3401.971448][ T5135] RIP: 0033:0x7f72fbf8efc9 [ 3401.971461][ T5135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3401.971472][ T5135] RSP: 002b:00007f72fcd75038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 3401.971487][ T5135] RAX: ffffffffffffffda RBX: 00007f72fc1e5fa0 RCX: 00007f72fbf8efc9 [ 3401.971496][ T5135] RDX: 0000000000000078 RSI: 0000200000000080 RDI: 0000000000000003 [ 3401.971505][ T5135] RBP: 00007f72fcd75090 R08: 0000000000000000 R09: 0000000000000015 [ 3401.971513][ T5135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3401.971520][ T5135] R13: 00007f72fc1e6038 R14: 00007f72fc1e5fa0 R15: 00007f72fc30fa28 [ 3401.971540][ T5135] [ 3402.276405][T23641] usb 5-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 32 [ 3402.288896][T23641] usb 5-1: config 1 interface 0 has no altsetting 0 [ 3402.667644][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3402.675979][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3402.692960][T23641] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3402.702429][T23641] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3402.710828][T23641] usb 5-1: Product: 珫ꅚҹꬠᦛ셨坓琶᣽褕뮡ⷦ퟇ꓹꐜ맕뉤ⳓ䷐퇈䊷腊훍ń⏂䡻瘴鯕㭍쓎㑡쮏ꁨꦭ㗗蜤꿺䇍ᮧ속笊ꊦ쨢ᛸᒐ曝潇ૺ砣·㬧停 [ 3402.719103][ T2894] usb 6-1: Using ep0 maxpacket: 8 [ 3402.734916][T23641] usb 5-1: Manufacturer: 泖 [ 3402.739907][T23641] usb 5-1: SerialNumber: ࠒ [ 3402.751228][ T5126] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 3402.984791][T23641] usb 5-1: bad CDC descriptors [ 3403.178720][T23641] usb 5-1: USB disconnect, device number 78 [ 3403.307144][ T5143] netlink: 27 bytes leftover after parsing attributes in process `syz.6.7064'. [ 3403.400987][ T36] tipc: Subscription rejected, illegal request [ 3404.179835][ T2894] usb 6-1: device descriptor read/all, error -71 [ 3404.344485][ T5165] wireguard13: entered promiscuous mode [ 3404.350421][ T5165] wireguard13: entered allmulticast mode [ 3404.841508][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3404.849887][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3405.581649][ T5170] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3405.587715][ T5170] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 3405.760577][ T5193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3405.789371][ T5193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3405.869633][ T5170] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 3405.895164][ T5170] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 3406.110134][ T4551] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 3406.169168][T23641] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 3406.310904][ T4551] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3406.332745][ T4551] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 3406.346440][T23641] usb 2-1: Using ep0 maxpacket: 8 [ 3406.360460][ T4551] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 3406.376125][T23641] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 38, changing to 9 [ 3406.396415][ T4551] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3406.406014][T23641] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50174, setting to 1024 [ 3406.427273][ T4551] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3406.443928][T23641] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3406.472056][ T4551] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 3406.496218][T23641] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 3406.590351][T23641] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3406.626666][T23641] usb 2-1: config 0 descriptor?? [ 3406.808134][ T4551] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 3407.071164][T23641] hid_parser_main: 11 callbacks suppressed [ 3407.071184][T23641] hid-rmi 0003:06CB:81A7.0035: unknown main item tag 0x0 [ 3407.086026][T23641] hid-rmi 0003:06CB:81A7.0035: unknown main item tag 0x0 [ 3407.093483][T23641] hid-rmi 0003:06CB:81A7.0035: unknown main item tag 0x0 [ 3407.101309][T23641] hid-rmi 0003:06CB:81A7.0035: unknown main item tag 0x0 [ 3407.108474][T23641] hid-rmi 0003:06CB:81A7.0035: unknown main item tag 0x0 [ 3407.116236][T23641] hid-rmi 0003:06CB:81A7.0035: unbalanced collection at end of report description [ 3407.135761][T23641] hid-rmi 0003:06CB:81A7.0035: parse failed [ 3407.150947][T23641] hid-rmi 0003:06CB:81A7.0035: probe with driver hid-rmi failed with error -22 [ 3407.299167][ T2894] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 3407.440849][ T5211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3407.489331][ T5211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3407.497907][ T5211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3407.510224][ T2894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3407.525057][ T5212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3407.532962][ T2894] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 3407.535961][ T5212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3407.551732][ T5212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3407.560781][ T2894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3407.581711][ T2894] usb 6-1: Product: syz [ 3407.591227][ T2894] usb 6-1: Manufacturer: syz [ 3407.603134][ T2894] usb 6-1: SerialNumber: syz [ 3407.624512][ T2894] usb 6-1: config 0 descriptor?? [ 3407.798831][ C0] net_ratelimit: 5 callbacks suppressed [ 3407.798855][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3407.858842][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3407.867713][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3407.883337][ T5205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3407.901481][ T5205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3407.913624][ T2894] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 3407.926334][ T2894] dvb_usb_af9035 6-1:0.0: probe with driver dvb_usb_af9035 failed with error -8 [ 3407.928718][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3407.943669][ T2894] usb 6-1: USB disconnect, device number 58 [ 3408.039478][T11630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3408.047936][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3408.188886][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3408.197407][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3408.259888][ T5212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3408.324115][ T5215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3408.379211][ T5217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7078'. [ 3408.465272][ T5217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3408.485218][ T5217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3408.689525][ T2894] usb 2-1: USB disconnect, device number 39 [ 3408.767318][ T5225] pim6reg1: entered promiscuous mode [ 3408.775158][ T5225] pim6reg1: entered allmulticast mode [ 3408.949365][ T4800] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 3409.114245][ T4800] usb 6-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 3409.157140][ T4800] usb 6-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 32 [ 3409.202100][ T4800] usb 6-1: config 1 interface 0 has no altsetting 0 [ 3409.237334][ T4800] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3409.252562][ T4800] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3409.339237][ T4800] usb 6-1: Product: 珫ꅚҹꬠᦛ셨坓琶᣽褕뮡ⷦ퟇ꓹꐜ맕뉤ⳓ䷐퇈䊷腊훍ń⏂䡻瘴鯕㭍쓎㑡쮏ꁨꦭ㗗蜤꿺䇍ᮧ속笊ꊦ쨢ᛸᒐ曝潇ૺ砣·㬧停 [ 3409.370079][ T4800] usb 6-1: Manufacturer: 泖 [ 3409.380319][ T4800] usb 6-1: SerialNumber: ࠒ [ 3409.491465][ T5223] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 3409.934195][T23641] usb 5-1: USB disconnect, device number 79 [ 3410.068002][ T5231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7082'. [ 3410.103040][ T5231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3410.461879][T23641] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 3410.529253][ T5926] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 3410.618686][T23641] usb 5-1: Using ep0 maxpacket: 8 [ 3410.630804][T23641] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 3410.657883][T23641] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3410.685638][ T5926] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 3410.696132][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3410.705697][ T5926] usb 7-1: Product: syz [ 3410.711138][ T5926] usb 7-1: Manufacturer: syz [ 3410.716002][ T5926] usb 7-1: SerialNumber: syz [ 3410.724320][ T5926] usb 7-1: config 0 descriptor?? [ 3410.735860][T23641] usb 5-1: Product: syz [ 3410.741824][T23641] usb 5-1: Manufacturer: syz [ 3410.755126][T23641] usb 5-1: SerialNumber: syz [ 3410.782128][T23641] usb 5-1: config 0 descriptor?? [ 3410.889769][ T5242] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7087'. [ 3410.899281][ T5242] FAULT_INJECTION: forcing a failure. [ 3410.899281][ T5242] name failslab, interval 1, probability 0, space 0, times 0 [ 3410.912827][ T5242] CPU: 0 UID: 0 PID: 5242 Comm: syz.1.7087 Not tainted syzkaller #0 PREEMPT(full) [ 3410.912854][ T5242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3410.912866][ T5242] Call Trace: [ 3410.912874][ T5242] [ 3410.912884][ T5242] dump_stack_lvl+0x189/0x250 [ 3410.912917][ T5242] ? __pfx____ratelimit+0x10/0x10 [ 3410.912948][ T5242] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3410.912974][ T5242] ? __pfx__printk+0x10/0x10 [ 3410.913001][ T5242] ? __pfx___might_resched+0x10/0x10 [ 3410.913028][ T5242] should_fail_ex+0x414/0x560 [ 3410.913062][ T5242] should_failslab+0xa8/0x100 [ 3410.913081][ T5242] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 3410.913106][ T5242] ? __d_alloc+0x36/0x7a0 [ 3410.913131][ T5242] __d_alloc+0x36/0x7a0 [ 3410.913158][ T5242] d_alloc_parallel+0xe1/0x1610 [ 3410.913183][ T5242] ? __lock_acquire+0xab9/0xd20 [ 3410.913215][ T5242] ? __lock_acquire+0xab9/0xd20 [ 3410.913242][ T5242] ? __pfx_d_alloc_parallel+0x10/0x10 [ 3410.913269][ T5242] ? __raw_spin_lock_init+0x45/0x100 [ 3410.913294][ T5242] ? __init_waitqueue_head+0xa9/0x150 [ 3410.913327][ T5242] __lookup_slow+0x116/0x3d0 [ 3410.913352][ T5242] ? __pfx___lookup_slow+0x10/0x10 [ 3410.913385][ T5242] ? d_lookup+0x8a/0xa0 [ 3410.913407][ T5242] ? lookup_noperm+0x112/0x220 [ 3410.913435][ T5242] simple_start_creating+0xfd/0x1e0 [ 3410.913456][ T5242] ? __pfx_simple_start_creating+0x10/0x10 [ 3410.913490][ T5242] debugfs_start_creating+0x10f/0x180 [ 3410.913521][ T5242] __debugfs_create_file+0x79/0x4f0 [ 3410.913557][ T5242] debugfs_create_file_full+0x3f/0x60 [ 3410.913590][ T5242] ref_tracker_dir_debugfs+0x14e/0x270 [ 3410.913611][ T5242] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 3410.913660][ T5242] ? trace_kmalloc+0x1f/0xd0 [ 3410.913680][ T5242] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 3410.913718][ T5242] ? __raw_spin_lock_init+0x45/0x100 [ 3410.913745][ T5242] alloc_netdev_mqs+0x272/0x11b0 [ 3410.913768][ T5242] ? __pfx_gtp_link_setup+0x10/0x10 [ 3410.913795][ T5242] rtnl_create_link+0x31f/0xd10 [ 3410.913827][ T5242] rtnl_newlink_create+0x25c/0xb00 [ 3410.913854][ T5242] ? __lock_acquire+0xab9/0xd20 [ 3410.913878][ T5242] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 3410.913904][ T5242] ? __pfx___mutex_lock+0x10/0x10 [ 3410.913942][ T5242] ? ns_capable+0x8a/0xf0 [ 3410.913968][ T5242] rtnl_newlink+0x16e4/0x1c80 [ 3410.914013][ T5242] ? __pfx_rtnl_newlink+0x10/0x10 [ 3410.914048][ T5242] ? is_bpf_text_address+0x26/0x2b0 [ 3410.914075][ T5242] ? is_bpf_text_address+0x292/0x2b0 [ 3410.914097][ T5242] ? is_bpf_text_address+0x26/0x2b0 [ 3410.914125][ T5242] ? __lock_acquire+0xab9/0xd20 [ 3410.914160][ T5242] ? __lock_acquire+0xab9/0xd20 [ 3410.914210][ T5242] ? irqentry_exit+0x74/0x90 [ 3410.914237][ T5242] ? lockdep_hardirqs_on+0x9c/0x150 [ 3410.914274][ T5242] ? __lock_acquire+0xab9/0xd20 [ 3410.914323][ T5242] ? __pfx_rtnl_newlink+0x10/0x10 [ 3410.914352][ T5242] rtnetlink_rcv_msg+0x7cf/0xb70 [ 3410.914379][ T5242] ? __lock_acquire+0xab9/0xd20 [ 3410.914402][ T5242] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 3410.914429][ T5242] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3410.914478][ T5242] netlink_rcv_skb+0x208/0x470 [ 3410.914507][ T5242] ? __lock_acquire+0xab9/0xd20 [ 3410.914529][ T5242] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3410.914561][ T5242] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3410.914607][ T5242] ? netlink_deliver_tap+0x2e/0x1b0 [ 3410.914647][ T5242] netlink_unicast+0x82f/0x9e0 [ 3410.914687][ T5242] ? __pfx_netlink_unicast+0x10/0x10 [ 3410.914727][ T5242] ? netlink_sendmsg+0x642/0xb30 [ 3410.914746][ T5242] ? skb_put+0x11b/0x210 [ 3410.914769][ T5242] netlink_sendmsg+0x805/0xb30 [ 3410.914802][ T5242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3410.914824][ T5242] ? aa_sock_msg_perm+0xf1/0x1d0 [ 3410.914854][ T5242] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3410.914873][ T5242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3410.914893][ T5242] __sock_sendmsg+0x21c/0x270 [ 3410.914922][ T5242] ____sys_sendmsg+0x505/0x830 [ 3410.914950][ T5242] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3410.914984][ T5242] ? import_iovec+0x74/0xa0 [ 3410.915015][ T5242] ___sys_sendmsg+0x21f/0x2a0 [ 3410.915042][ T5242] ? __pfx____sys_sendmsg+0x10/0x10 [ 3410.915106][ T5242] ? __fget_files+0x2a/0x420 [ 3410.915124][ T5242] ? __fget_files+0x3a0/0x420 [ 3410.915156][ T5242] __x64_sys_sendmsg+0x19b/0x260 [ 3410.915182][ T5242] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3410.915214][ T5242] ? __pfx_ksys_write+0x10/0x10 [ 3410.915247][ T5242] ? do_syscall_64+0xbe/0xfa0 [ 3410.915279][ T5242] do_syscall_64+0xfa/0xfa0 [ 3410.915304][ T5242] ? lockdep_hardirqs_on+0x9c/0x150 [ 3410.915329][ T5242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3410.915349][ T5242] ? clear_bhb_loop+0x60/0xb0 [ 3410.915374][ T5242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3410.915394][ T5242] RIP: 0033:0x7f0acdb8efc9 [ 3410.915414][ T5242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3410.915433][ T5242] RSP: 002b:00007f0acea98038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3410.915454][ T5242] RAX: ffffffffffffffda RBX: 00007f0acdde5fa0 RCX: 00007f0acdb8efc9 [ 3410.915469][ T5242] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 3410.915494][ T5242] RBP: 00007f0acea98090 R08: 0000000000000000 R09: 0000000000000000 [ 3410.915508][ T5242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3410.915521][ T5242] R13: 00007f0acdde6038 R14: 00007f0acdde5fa0 R15: 00007f0acdf0fa28 [ 3410.915557][ T5242] [ 3410.933938][ T5926] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 3411.022046][T23641] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 3411.066814][ T5244] ip6gre1: entered promiscuous mode [ 3411.191152][ T5245] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3411.511560][ T5244] ip6gre1: entered allmulticast mode [ 3411.523695][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3411.534182][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3411.549402][ T2893] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3411.718299][T23641] gspca_sunplus: reg_w_riv err -71 [ 3411.739410][T23641] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 3411.756587][T23641] usb 5-1: USB disconnect, device number 80 [ 3411.789362][ T2893] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3411.849764][ T2893] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3412.092342][ T4800] usb 6-1: bad CDC descriptors [ 3412.103473][ T4800] usb 6-1: USB disconnect, device number 59 [ 3412.723412][ T5236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3412.761465][ T5236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3412.786683][ T5926] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 3412.799464][ T4800] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 3412.811961][ T5926] usb 7-1: USB disconnect, device number 11 [ 3412.961445][ T4800] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3412.973310][ T4800] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 3412.988453][ T4800] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3413.000448][ T4800] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3413.010617][ T4800] usb 6-1: Product: syz [ 3413.015051][ T4800] usb 6-1: Manufacturer: syz [ 3413.022149][ T4800] usb 6-1: SerialNumber: syz [ 3413.085048][ T4800] cdc_mbim 6-1:1.0: skipping garbage [ 3413.160796][ T1157] net_ratelimit: 3 callbacks suppressed [ 3413.160813][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3413.175319][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3413.314304][ T5265] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 3413.512997][ T5268] FAULT_INJECTION: forcing a failure. [ 3413.512997][ T5268] name failslab, interval 1, probability 0, space 0, times 0 [ 3413.526960][ T5268] CPU: 0 UID: 0 PID: 5268 Comm: syz.6.7095 Not tainted syzkaller #0 PREEMPT(full) [ 3413.526991][ T5268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3413.527005][ T5268] Call Trace: [ 3413.527015][ T5268] [ 3413.527025][ T5268] dump_stack_lvl+0x189/0x250 [ 3413.527061][ T5268] ? __pfx____ratelimit+0x10/0x10 [ 3413.527087][ T5268] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3413.527113][ T5268] ? __pfx__printk+0x10/0x10 [ 3413.527141][ T5268] ? __pfx___might_resched+0x10/0x10 [ 3413.527162][ T5268] ? fs_reclaim_acquire+0x7d/0x100 [ 3413.527199][ T5268] should_fail_ex+0x414/0x560 [ 3413.527236][ T5268] should_failslab+0xa8/0x100 [ 3413.527259][ T5268] __kmalloc_cache_noprof+0x6f/0x6f0 [ 3413.527287][ T5268] ? sctp_v6_to_sk_saddr+0x100/0x1c0 [ 3413.527315][ T5268] ? sctp_association_new+0x89/0x25f0 [ 3413.527342][ T5268] ? __asan_memcpy+0x40/0x70 [ 3413.527372][ T5268] sctp_association_new+0x89/0x25f0 [ 3413.527393][ T5268] ? sctp_do_bind+0x65a/0x940 [ 3413.527426][ T5268] sctp_connect_new_asoc+0x2c5/0x690 [ 3413.527451][ T5268] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 3413.527479][ T5268] ? sctp_get_af_specific+0x29/0x80 [ 3413.527505][ T5268] ? sctp_inet6_send_verify+0x80/0x300 [ 3413.527530][ T5268] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 3413.527552][ T5268] __sctp_connect+0x5ba/0xd50 [ 3413.527586][ T5268] ? __pfx___sctp_connect+0x10/0x10 [ 3413.527611][ T5268] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 3413.527642][ T5268] ? security_sctp_bind_connect+0x7e/0x2e0 [ 3413.527671][ T5268] sctp_getsockopt_connectx3+0x2c4/0x440 [ 3413.527701][ T5268] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 3413.527731][ T5268] ? __local_bh_enable_ip+0x12d/0x1c0 [ 3413.527754][ T5268] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 3413.527789][ T5268] sctp_getsockopt+0x98a/0xb60 [ 3413.527819][ T5268] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 3413.527849][ T5268] do_sock_getsockopt+0x372/0x450 [ 3413.527874][ T5268] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 3413.527894][ T5268] ? do_syscall_64+0xa0/0xfa0 [ 3413.527920][ T5268] ? __fget_files+0x2a/0x420 [ 3413.527939][ T5268] ? __fget_files+0x3a0/0x420 [ 3413.527957][ T5268] ? __fget_files+0x2a/0x420 [ 3413.527984][ T5268] __x64_sys_getsockopt+0x1a5/0x250 [ 3413.528005][ T5268] ? do_syscall_64+0xa0/0xfa0 [ 3413.528033][ T5268] ? do_syscall_64+0xa0/0xfa0 [ 3413.528065][ T5268] do_syscall_64+0xfa/0xfa0 [ 3413.528090][ T5268] ? lockdep_hardirqs_on+0x9c/0x150 [ 3413.528115][ T5268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3413.528135][ T5268] ? clear_bhb_loop+0x60/0xb0 [ 3413.528161][ T5268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3413.528182][ T5268] RIP: 0033:0x7f8a1298efc9 [ 3413.528202][ T5268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3413.528219][ T5268] RSP: 002b:00007f8a138b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 3413.528243][ T5268] RAX: ffffffffffffffda RBX: 00007f8a12be5fa0 RCX: 00007f8a1298efc9 [ 3413.528258][ T5268] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 3413.528270][ T5268] RBP: 00007f8a138b8090 R08: 00002000000002c0 R09: 0000000000000000 [ 3413.528283][ T5268] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 3413.528296][ T5268] R13: 00007f8a12be6038 R14: 00007f8a12be5fa0 R15: 00007f8a12d0fa28 [ 3413.528332][ T5268] [ 3414.542506][ T5265] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 3414.583335][ T4800] cdc_mbim 6-1:1.0: setting tx_max = 16384 [ 3414.591574][ T4800] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 3414.695215][ T4800] wwan wwan0: port wwan0mbim0 attached [ 3414.879911][ T4800] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, d6:37:69:67:6e:29 [ 3414.969202][ T4800] usb 6-1: USB disconnect, device number 60 [ 3415.011333][ T4800] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 3415.029936][T23641] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 3415.151668][ T4800] wwan wwan0: port wwan0mbim0 disconnected [ 3415.160120][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3415.235532][T23641] usb 7-1: Using ep0 maxpacket: 8 [ 3415.265356][T23641] usb 7-1: config 11 has an invalid interface number: 61 but max is 0 [ 3415.305321][T23641] usb 7-1: config 11 has no interface number 0 [ 3415.326331][T23641] usb 7-1: config 11 interface 61 has no altsetting 0 [ 3415.390743][T23641] usb 7-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 3415.436153][T23641] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3415.470578][T23641] usb 7-1: Product: syz [ 3415.485004][T23641] usb 7-1: Manufacturer: syz [ 3415.506161][T23641] usb 7-1: SerialNumber: syz [ 3415.767960][ T5281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3415.824030][ T5281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3416.171866][T23641] usb 7-1: USB disconnect, device number 12 [ 3416.361958][T11630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3416.370609][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3416.579220][ T4800] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 3416.732765][ T4800] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 3416.805153][ T4800] usb 2-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 32 [ 3416.843430][ T4800] usb 2-1: config 1 interface 0 has no altsetting 0 [ 3416.893994][ T5318] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7107'. [ 3416.921180][ T4800] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3416.943256][ T4800] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3416.961751][ T4800] usb 2-1: Product: 珫ꅚҹꬠᦛ셨坓琶᣽褕뮡ⷦ퟇ꓹꐜ맕뉤ⳓ䷐퇈䊷腊훍ń⏂䡻瘴鯕㭍쓎㑡쮏ꁨꦭ㗗蜤꿺䇍ᮧ속笊ꊦ쨢ᛸᒐ曝潇ૺ砣·㬧停 [ 3417.012516][ T4800] usb 2-1: Manufacturer: 泖 [ 3417.029025][ T4800] usb 2-1: SerialNumber: ࠒ [ 3417.064021][ T5309] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3417.554037][ T5333] netlink: 'syz.0.7110': attribute type 13 has an invalid length. [ 3417.628908][T23641] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3418.135578][T23641] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3418.281036][T11630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3418.290162][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3420.084191][ T4800] usb 2-1: bad CDC descriptors [ 3420.306068][ T4800] usb 2-1: USB disconnect, device number 40 [ 3421.064245][ T30] audit: type=1326 audit(1761905046.972:4347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5362 comm="syz.5.7116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04398efc9 code=0x7ffc0000 [ 3421.159986][ T30] audit: type=1326 audit(1761905047.002:4348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5362 comm="syz.5.7116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04398efc9 code=0x7ffc0000 [ 3421.208972][ T30] audit: type=1326 audit(1761905047.002:4349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5362 comm="syz.5.7116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff04398efc9 code=0x7ffc0000 [ 3421.269488][ T30] audit: type=1326 audit(1761905047.002:4350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5362 comm="syz.5.7116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04398efc9 code=0x7ffc0000 [ 3421.319318][ T30] audit: type=1326 audit(1761905047.002:4351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5362 comm="syz.5.7116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7ff04398efc9 code=0x7ffc0000 [ 3421.359444][ T30] audit: type=1326 audit(1761905047.012:4352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5362 comm="syz.5.7116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04398efc9 code=0x7ffc0000 [ 3421.385116][ T30] audit: type=1326 audit(1761905047.012:4353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5362 comm="syz.5.7116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04398efc9 code=0x7ffc0000 [ 3421.411039][ T30] audit: type=1326 audit(1761905047.012:4354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5362 comm="syz.5.7116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff04398efc9 code=0x7ffc0000 [ 3421.434178][ T30] audit: type=1326 audit(1761905047.012:4355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5362 comm="syz.5.7116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04398efc9 code=0x7ffc0000 [ 3421.461249][ T30] audit: type=1326 audit(1761905047.012:4356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5362 comm="syz.5.7116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04398efc9 code=0x7ffc0000 [ 3422.119342][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3422.127714][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3422.238355][ T5378] program syz.5.7120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3422.758732][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3422.804491][ T5387] netlink: 'syz.4.7122': attribute type 4 has an invalid length. [ 3422.931530][ T5389] netlink: 'syz.4.7122': attribute type 4 has an invalid length. [ 3423.399799][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3423.408141][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3423.899569][ T2893] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 3424.399268][ T2893] usb 6-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 3424.403248][ T5399] netlink: 'syz.1.7125': attribute type 16 has an invalid length. [ 3424.423946][ T5399] netlink: 708 bytes leftover after parsing attributes in process `syz.1.7125'. [ 3424.474080][ T5402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7128'. [ 3424.498737][ T2893] usb 6-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 32 [ 3424.513578][ T2893] usb 6-1: config 1 interface 0 has no altsetting 0 [ 3424.525658][ T5404] netlink: 'syz.0.7126': attribute type 10 has an invalid length. [ 3424.536438][ T5404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7126'. [ 3424.552648][ T2893] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3424.569262][ T2893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3424.577525][ T2893] usb 6-1: Product: 珫ꅚҹꬠᦛ셨坓琶᣽褕뮡ⷦ퟇ꓹꐜ맕뉤ⳓ䷐퇈䊷腊훍ń⏂䡻瘴鯕㭍쓎㑡쮏ꁨꦭ㗗蜤꿺䇍ᮧ속笊ꊦ쨢ᛸᒐ曝潇ૺ砣·㬧停 [ 3424.634311][ T2893] usb 6-1: Manufacturer: 泖 [ 3424.647887][ T2893] usb 6-1: SerialNumber: ࠒ [ 3424.663510][ T5409] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7127'. [ 3424.677978][ T5396] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3425.958776][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3427.393747][ T2893] usb 6-1: bad CDC descriptors [ 3427.413884][ T2893] usb 6-1: USB disconnect, device number 61 [ 3427.880692][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3427.889122][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3428.116162][ T5440] netlink: 'syz.5.7137': attribute type 4 has an invalid length. [ 3428.180166][ T5440] netlink: 'syz.5.7137': attribute type 4 has an invalid length. [ 3428.440100][ T6537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3428.448457][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3428.776454][ T5448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3428.869297][ T5448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3429.258946][ T2893] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 3429.408917][ T2893] usb 2-1: Using ep0 maxpacket: 8 [ 3429.419675][ T2893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 38, changing to 9 [ 3429.433886][ T2893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50174, setting to 1024 [ 3429.446833][ T2893] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3429.461610][ T2893] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 3429.471233][ T2893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3429.482010][ T2893] usb 2-1: config 0 descriptor?? [ 3429.788588][ T5457] tipc: Resetting bearer [ 3429.794151][ T5457] tipc: Resetting bearer [ 3429.802176][ T5457] bridge0: port 1(bridge_slave_0) entered disabled state [ 3429.815704][ T5458] netlink: 'syz.6.7143': attribute type 16 has an invalid length. [ 3429.817051][ T5457] bridge0: port 2(bridge_slave_1) entered disabled state [ 3429.831326][ T5458] netlink: 'syz.6.7143': attribute type 17 has an invalid length. [ 3429.902619][ T5458] bridge0: port 1(bridge_slave_0) entered blocking state [ 3429.909889][ T5458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3429.921316][ T5458] bridge0: port 2(bridge_slave_1) entered blocking state [ 3429.927886][ T2893] hid-rmi 0003:06CB:81A7.0036: unknown main item tag 0x0 [ 3429.928691][ T5458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3429.937429][ T2893] hid-rmi 0003:06CB:81A7.0036: unknown main item tag 0x0 [ 3430.002521][ T2893] hid-rmi 0003:06CB:81A7.0036: unknown main item tag 0x0 [ 3430.010428][ T2893] hid-rmi 0003:06CB:81A7.0036: unknown main item tag 0x0 [ 3430.017779][ T2893] hid-rmi 0003:06CB:81A7.0036: unknown main item tag 0x0 [ 3430.025484][ T2893] hid-rmi 0003:06CB:81A7.0036: unbalanced collection at end of report description [ 3430.036458][ T2893] hid-rmi 0003:06CB:81A7.0036: parse failed [ 3430.043570][ T2893] hid-rmi 0003:06CB:81A7.0036: probe with driver hid-rmi failed with error -22 [ 3430.162537][ T5450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3430.191891][ T5464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3430.262697][ T5464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3430.519431][ T2893] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 3430.679321][ T4800] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 3430.687149][ T2893] usb 6-1: Using ep0 maxpacket: 8 [ 3430.698457][ T2893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 38, changing to 9 [ 3430.711830][ T2893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50174, setting to 1024 [ 3430.723833][ T2893] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3430.737332][ T2893] usb 6-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 3430.746716][ T2893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3430.767768][ T2893] usb 6-1: config 0 descriptor?? [ 3430.919331][ T4800] usb 5-1: device descriptor read/64, error -71 [ 3431.169273][ T4800] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 3431.243351][ T2893] hid-rmi 0003:06CB:81A7.0037: unknown main item tag 0x0 [ 3431.260204][ T2893] hid-rmi 0003:06CB:81A7.0037: unknown main item tag 0x0 [ 3431.284006][ T2893] hid-rmi 0003:06CB:81A7.0037: unknown main item tag 0x0 [ 3431.305169][ T2893] hid-rmi 0003:06CB:81A7.0037: unknown main item tag 0x0 [ 3431.313249][ T4800] usb 5-1: device descriptor read/64, error -71 [ 3431.330284][ T2893] hid-rmi 0003:06CB:81A7.0037: unknown main item tag 0x0 [ 3431.346870][ T2893] hid-rmi 0003:06CB:81A7.0037: unbalanced collection at end of report description [ 3431.374766][ T2893] hid-rmi 0003:06CB:81A7.0037: parse failed [ 3431.385439][ T2893] hid-rmi 0003:06CB:81A7.0037: probe with driver hid-rmi failed with error -22 [ 3431.429568][ T4800] usb usb5-port1: attempt power cycle [ 3431.568307][ T2893] usb 6-1: USB disconnect, device number 62 [ 3431.758347][ T2893] usb 2-1: USB disconnect, device number 41 [ 3431.779431][ T4800] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 3431.821631][ T4800] usb 5-1: device descriptor read/8, error -71 [ 3432.059279][ T4800] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 3432.108360][ T4800] usb 5-1: device descriptor read/8, error -71 [ 3432.219393][ T5926] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 3432.271607][ T4800] usb usb5-port1: unable to enumerate USB device [ 3432.376779][ T5926] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 3432.423938][ T5926] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3432.458339][ T5926] usb 7-1: config 0 has no interface number 0 [ 3432.529024][ T5488] wireguard14: entered promiscuous mode [ 3432.530049][ T5926] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 3432.544419][ T5488] wireguard14: entered allmulticast mode [ 3432.583251][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3432.619238][ T5926] usb 7-1: Product: syz [ 3432.638777][ T2987] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 3432.698069][ T5926] usb 7-1: Manufacturer: syz [ 3432.739033][ T5926] usb 7-1: SerialNumber: syz [ 3432.760995][ T5926] usb 7-1: config 0 descriptor?? [ 3432.868660][ T2987] usb 6-1: Using ep0 maxpacket: 16 [ 3432.935625][ T2987] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 3432.955205][ T2987] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3432.982239][ T2987] usb 6-1: config 0 has no interface number 0 [ 3432.991976][ T5926] uvcvideo 7-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 3433.009475][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3433.017914][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3433.036861][ T2987] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 3433.057422][ T5926] uvcvideo 7-1:0.64: No valid video chain found. [ 3433.066750][ T2987] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3433.086974][ T5926] usb 7-1: USB disconnect, device number 13 [ 3433.101999][ T2987] usb 6-1: Product: syz [ 3433.106224][ T2987] usb 6-1: Manufacturer: syz [ 3433.151995][ T2987] usb 6-1: SerialNumber: syz [ 3433.195251][ T2987] usb 6-1: config 0 descriptor?? [ 3433.675141][ T2987] uvcvideo 6-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 3433.697580][ T5510] netlink: 'syz.4.7155': attribute type 4 has an invalid length. [ 3433.784603][ T2987] uvcvideo 6-1:0.105: No valid video chain found. [ 3433.786346][ T5517] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7157'. [ 3433.921624][ T5522] netlink: 'syz.4.7155': attribute type 4 has an invalid length. [ 3434.193372][ T5529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7161'. [ 3434.289978][ T6537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3434.298442][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3435.586118][ T2987] usb 6-1: USB disconnect, device number 63 [ 3435.739762][ T5538] delete_channel: no stack [ 3436.839139][ T5564] netlink: 'syz.1.7171': attribute type 16 has an invalid length. [ 3436.855951][ T5564] netlink: 708 bytes leftover after parsing attributes in process `syz.1.7171'. [ 3437.160935][ T5578] netlink: 'syz.4.7172': attribute type 4 has an invalid length. [ 3437.225958][ T5579] netlink: 'syz.4.7172': attribute type 4 has an invalid length. [ 3437.428839][ T2987] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 3438.018666][ T2987] usb 6-1: Using ep0 maxpacket: 16 [ 3438.026087][ T2987] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3438.038062][ T2987] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3438.077542][ T2987] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 3438.118154][ T2987] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3438.118782][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3438.217577][ T2987] usb 6-1: config 0 descriptor?? [ 3438.697137][ T2987] usbhid 6-1:0.0: can't add hid device: -71 [ 3438.721496][ T2987] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 3438.759709][T11630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3438.768152][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3438.770083][ T2987] usb 6-1: USB disconnect, device number 64 [ 3439.607489][ T5611] netlink: 'syz.1.7184': attribute type 16 has an invalid length. [ 3439.617473][ T5611] netlink: 708 bytes leftover after parsing attributes in process `syz.1.7184'. [ 3439.918913][ T5926] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 3440.040746][T11630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3440.049244][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3440.082839][ T5926] usb 2-1: config 232 has an invalid descriptor of length 0, skipping remainder of the config [ 3440.105745][ T5926] usb 2-1: New USB device found, idVendor=0005, idProduct=0000, bcdDevice=60.d9 [ 3440.124862][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3440.146204][ T5926] usb 2-1: Product: syz [ 3440.157674][ T5926] usb 2-1: Manufacturer: syz [ 3440.169306][ T5926] usb 2-1: SerialNumber: syz [ 3442.218749][ T2987] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 3442.678721][ T2987] usb 7-1: device descriptor read/64, error -71 [ 3442.692483][ T5926] usb 2-1: USB disconnect, device number 42 [ 3442.918681][ T2987] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 3443.068703][ T2987] usb 7-1: device descriptor read/64, error -71 [ 3443.192346][ T5661] tipc: Resetting bearer [ 3443.199351][ T2987] usb usb7-port1: attempt power cycle [ 3443.213113][ T5661] tipc: Resetting bearer [ 3443.251030][ T5661] netlink: 'syz.4.7195': attribute type 16 has an invalid length. [ 3443.259181][ T5661] netlink: 708 bytes leftover after parsing attributes in process `syz.4.7195'. [ 3443.361945][ T5666] ip6gre1: entered promiscuous mode [ 3443.369212][ T5666] ip6gre1: entered allmulticast mode [ 3443.375274][ T5667] [ 3443.377648][ T5667] ===================================================== [ 3443.384774][ T5667] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 3443.392241][ T5667] syzkaller #0 Not tainted [ 3443.396777][ T5667] ----------------------------------------------------- [ 3443.403744][ T5667] syz.0.7197/5667 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 3443.411560][ T5667] ffffffff8dc0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 3443.420369][ T5667] [ 3443.420369][ T5667] and this task is already holding: [ 3443.428088][ T5667] ffff888053f24e20 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 3443.437240][ T5667] which would create a new lock dependency: [ 3443.443133][ T5667] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 3443.450723][ T5667] [ 3443.450723][ T5667] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 3443.460175][ T5667] (&dev->event_lock#2){..-.}-{3:3} [ 3443.460209][ T5667] [ 3443.460209][ T5667] ... which became SOFTIRQ-irq-safe at: [ 3443.473114][ T5667] lock_acquire+0x120/0x360 [ 3443.477714][ T5667] _raw_spin_lock_irqsave+0xa7/0xf0 [ 3443.483111][ T5667] input_inject_event+0xa5/0x340 [ 3443.488323][ T5667] led_trigger_event+0x138/0x210 [ 3443.493357][ T5667] kbd_bh+0x1c6/0x2e0 [ 3443.497436][ T5667] tasklet_action_common+0x36c/0x580 [ 3443.502823][ T5667] handle_softirqs+0x286/0x870 [ 3443.507681][ T5667] __irq_exit_rcu+0xca/0x1f0 [ 3443.512410][ T5667] irq_exit_rcu+0x9/0x30 [ 3443.516745][ T5667] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 3443.522476][ T5667] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3443.528571][ T5667] _raw_spin_unlock_irq+0x29/0x50 [ 3443.533782][ T5667] n_tty_ioctl_helper+0x27e/0x340 [ 3443.538916][ T5667] tty_ioctl+0x9c6/0xde0 [ 3443.543358][ T5667] __se_sys_ioctl+0xfc/0x170 [ 3443.548153][ T5667] do_syscall_64+0xfa/0xfa0 [ 3443.552773][ T5667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3443.558790][ T5667] [ 3443.558790][ T5667] to a SOFTIRQ-irq-unsafe lock: [ 3443.565822][ T5667] (tasklist_lock){.+.+}-{3:3} [ 3443.565851][ T5667] [ 3443.565851][ T5667] ... which became SOFTIRQ-irq-unsafe at: [ 3443.578754][ T5667] ... [ 3443.578763][ T5667] lock_acquire+0x120/0x360 [ 3443.586051][ T5667] _raw_read_lock+0x36/0x50 [ 3443.590665][ T5667] __do_wait+0xde/0x740 [ 3443.594921][ T5667] do_wait+0x1f8/0x510 [ 3443.599097][ T5667] kernel_wait+0xab/0x170 [ 3443.603617][ T5667] call_usermodehelper_exec_work+0xbe/0x230 [ 3443.609658][ T5667] process_scheduled_works+0xae1/0x17b0 [ 3443.615309][ T5667] worker_thread+0x8a0/0xda0 [ 3443.620104][ T5667] kthread+0x711/0x8a0 [ 3443.624297][ T5667] ret_from_fork+0x4bc/0x870 [ 3443.629001][ T5667] ret_from_fork_asm+0x1a/0x30 [ 3443.633881][ T5667] [ 3443.633881][ T5667] other info that might help us debug this: [ 3443.633881][ T5667] [ 3443.644128][ T5667] Chain exists of: [ 3443.644128][ T5667] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 3443.644128][ T5667] [ 3443.657442][ T5667] Possible interrupt unsafe locking scenario: [ 3443.657442][ T5667] [ 3443.665784][ T5667] CPU0 CPU1 [ 3443.671153][ T5667] ---- ---- [ 3443.676523][ T5667] lock(tasklist_lock); [ 3443.680777][ T5667] local_irq_disable(); [ 3443.687542][ T5667] lock(&dev->event_lock#2); [ 3443.694752][ T5667] lock(&f_owner->lock); [ 3443.701633][ T5667] [ 3443.705104][ T5667] lock(&dev->event_lock#2); [ 3443.709969][ T5667] [ 3443.709969][ T5667] *** DEADLOCK *** [ 3443.709969][ T5667] [ 3443.718113][ T5667] 2 locks held by syz.0.7197/5667: [ 3443.723227][ T5667] #0: ffff888032465358 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b0/0x4f0 [ 3443.731903][ T5667] #1: ffff888053f24e20 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 3443.741052][ T5667] [ 3443.741052][ T5667] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 3443.751504][ T5667] -> (&dev->event_lock#2){..-.}-{3:3} { [ 3443.757511][ T5667] IN-SOFTIRQ-W at: [ 3443.761929][ T5667] lock_acquire+0x120/0x360 [ 3443.768789][ T5667] _raw_spin_lock_irqsave+0xa7/0xf0 [ 3443.776451][ T5667] input_inject_event+0xa5/0x340 [ 3443.783745][ T5667] led_trigger_event+0x138/0x210 [ 3443.791083][ T5667] kbd_bh+0x1c6/0x2e0 [ 3443.797607][ T5667] tasklet_action_common+0x36c/0x580 [ 3443.805335][ T5667] handle_softirqs+0x286/0x870 [ 3443.812538][ T5667] __irq_exit_rcu+0xca/0x1f0 [ 3443.819480][ T5667] irq_exit_rcu+0x9/0x30 [ 3443.826161][ T5667] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 3443.834147][ T5667] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3443.842497][ T5667] _raw_spin_unlock_irq+0x29/0x50 [ 3443.849890][ T5667] n_tty_ioctl_helper+0x27e/0x340 [ 3443.857383][ T5667] tty_ioctl+0x9c6/0xde0 [ 3443.863996][ T5667] __se_sys_ioctl+0xfc/0x170 [ 3443.871055][ T5667] do_syscall_64+0xfa/0xfa0 [ 3443.877930][ T5667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3443.886178][ T5667] INITIAL USE at: [ 3443.890430][ T5667] lock_acquire+0x120/0x360 [ 3443.897203][ T5667] _raw_spin_lock_irqsave+0xa7/0xf0 [ 3443.904668][ T5667] input_inject_event+0xa5/0x340 [ 3443.911877][ T5667] kbd_led_trigger_activate+0xbc/0x100 [ 3443.919600][ T5667] led_trigger_set+0x52d/0x950 [ 3443.926913][ T5667] led_trigger_set_default+0x260/0x2a0 [ 3443.934754][ T5667] led_classdev_register_ext+0x73d/0x930 [ 3443.942915][ T5667] input_leds_connect+0x517/0x790 [ 3443.950394][ T5667] input_register_device+0xd00/0x1140 [ 3443.958033][ T5667] atkbd_connect+0x72e/0xa00 [ 3443.964903][ T5667] serio_driver_probe+0x82/0xd0 [ 3443.972208][ T5667] really_probe+0x26d/0x9e0 [ 3443.979157][ T5667] __driver_probe_device+0x18c/0x2f0 [ 3443.986713][ T5667] driver_probe_device+0x4f/0x430 [ 3443.994004][ T5667] __driver_attach+0x452/0x700 [ 3444.001166][ T5667] bus_for_each_dev+0x233/0x2b0 [ 3444.008280][ T5667] serio_handle_event+0x1f9/0x8d0 [ 3444.015580][ T5667] process_scheduled_works+0xae1/0x17b0 [ 3444.023509][ T5667] worker_thread+0x8a0/0xda0 [ 3444.030631][ T5667] kthread+0x711/0x8a0 [ 3444.036981][ T5667] ret_from_fork+0x4bc/0x870 [ 3444.044013][ T5667] ret_from_fork_asm+0x1a/0x30 [ 3444.051227][ T5667] } [ 3444.054095][ T5667] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 3444.063660][ T5667] -> (kbd_event_lock){....}-{3:3} { [ 3444.069147][ T5667] INITIAL USE at: [ 3444.073309][ T5667] lock_acquire+0x120/0x360 [ 3444.079904][ T5667] _raw_spin_lock_irqsave+0xa7/0xf0 [ 3444.087195][ T5667] vt_reset_unicode+0x2b/0x160 [ 3444.094166][ T5667] reset_vc+0x68/0x1b0 [ 3444.100329][ T5667] vc_init+0x70/0x4a0 [ 3444.106502][ T5667] con_init+0x385/0x9c0 [ 3444.112958][ T5667] console_init+0x10e/0x430 [ 3444.119769][ T5667] start_kernel+0x254/0x410 [ 3444.126457][ T5667] x86_64_start_reservations+0x24/0x30 [ 3444.134440][ T5667] x86_64_start_kernel+0x143/0x1c0 [ 3444.141770][ T5667] common_startup_64+0x13e/0x147 [ 3444.148850][ T5667] } [ 3444.151619][ T5667] ... key at: [] kbd_event_lock+0x18/0xa0 [ 3444.159703][ T5667] ... acquired at: [ 3444.163779][ T5667] lock_acquire+0x120/0x360 [ 3444.168461][ T5667] _raw_spin_lock+0x2e/0x40 [ 3444.173166][ T5667] kbd_event+0xd2/0x3f70 [ 3444.177681][ T5667] input_handle_events_default+0xd4/0x1a0 [ 3444.183583][ T5667] input_pass_values+0x288/0x890 [ 3444.188709][ T5667] input_event_dispose+0x330/0x6b0 [ 3444.194002][ T5667] input_inject_event+0x1dd/0x340 [ 3444.199215][ T5667] evdev_write+0x2fc/0x480 [ 3444.203848][ T5667] vfs_write+0x27e/0xb30 [ 3444.208273][ T5667] ksys_write+0x145/0x250 [ 3444.212789][ T5667] do_syscall_64+0xfa/0xfa0 [ 3444.217480][ T5667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3444.223558][ T5667] [ 3444.225894][ T5667] -> (&tty->flow.lock){....}-{3:3} { [ 3444.231379][ T5667] INITIAL USE at: [ 3444.235538][ T5667] lock_acquire+0x120/0x360 [ 3444.241961][ T5667] _raw_spin_lock_irqsave+0xa7/0xf0 [ 3444.249268][ T5667] start_tty+0x20/0x70 [ 3444.255279][ T5667] n_tty_set_termios+0xa7c/0x1090 [ 3444.262496][ T5667] tty_set_termios+0xda4/0x17e0 [ 3444.269453][ T5667] set_termios+0x516/0x6c0 [ 3444.275799][ T5667] tty_mode_ioctl+0x47e/0x740 [ 3444.282406][ T5667] tty_ioctl+0x9c6/0xde0 [ 3444.288578][ T5667] __se_sys_ioctl+0xfc/0x170 [ 3444.295179][ T5667] do_syscall_64+0xfa/0xfa0 [ 3444.301698][ T5667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3444.309597][ T5667] } [ 3444.312274][ T5667] ... key at: [] alloc_tty_struct.__key.35+0x0/0x20 [ 3444.321133][ T5667] ... acquired at: [ 3444.325111][ T5667] lock_acquire+0x120/0x360 [ 3444.329879][ T5667] _raw_spin_lock_irqsave+0xa7/0xf0 [ 3444.335404][ T5667] start_tty+0x20/0x70 [ 3444.339755][ T5667] kbd_event+0x2b72/0x3f70 [ 3444.344533][ T5667] input_handle_events_default+0xd4/0x1a0 [ 3444.350442][ T5667] input_pass_values+0x288/0x890 [ 3444.355563][ T5667] input_event_dispose+0x330/0x6b0 [ 3444.360857][ T5667] input_inject_event+0x1dd/0x340 [ 3444.366068][ T5667] evdev_write+0x2fc/0x480 [ 3444.370676][ T5667] vfs_write+0x27e/0xb30 [ 3444.375110][ T5667] ksys_write+0x145/0x250 [ 3444.379624][ T5667] do_syscall_64+0xfa/0xfa0 [ 3444.384339][ T5667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3444.390409][ T5667] [ 3444.392741][ T5667] -> (&new->fa_lock){....}-{3:3} { [ 3444.398055][ T5667] INITIAL USE at: [ 3444.402307][ T5667] lock_acquire+0x120/0x360 [ 3444.408878][ T5667] _raw_write_lock_irq+0xa2/0xf0 [ 3444.415769][ T5667] fasync_remove_entry+0xf1/0x1c0 [ 3444.422713][ T5667] __fput+0x8a2/0xa70 [ 3444.428440][ T5667] task_work_run+0x1d4/0x260 [ 3444.434784][ T5667] exit_to_user_mode_loop+0xe9/0x130 [ 3444.441900][ T5667] do_syscall_64+0x2bd/0xfa0 [ 3444.448329][ T5667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3444.456230][ T5667] INITIAL READ USE at: [ 3444.460739][ T5667] lock_acquire+0x120/0x360 [ 3444.467601][ T5667] _raw_read_lock_irqsave+0xaf/0x100 [ 3444.475243][ T5667] kill_fasync+0x199/0x4d0 [ 3444.481840][ T5667] snd_fasync_work_fn+0x162/0x210 [ 3444.489050][ T5667] process_scheduled_works+0xae1/0x17b0 [ 3444.496781][ T5667] worker_thread+0x8a0/0xda0 [ 3444.503548][ T5667] kthread+0x711/0x8a0 [ 3444.509890][ T5667] ret_from_fork+0x4bc/0x870 [ 3444.516657][ T5667] ret_from_fork_asm+0x1a/0x30 [ 3444.523628][ T5667] } [ 3444.526229][ T5667] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 3444.535093][ T5667] ... acquired at: [ 3444.538983][ T5667] lock_acquire+0x120/0x360 [ 3444.543663][ T5667] _raw_read_lock_irqsave+0xaf/0x100 [ 3444.549132][ T5667] kill_fasync+0x199/0x4d0 [ 3444.553740][ T5667] __start_tty+0x18c/0x220 [ 3444.558427][ T5667] start_tty+0x2b/0x70 [ 3444.562770][ T5667] n_tty_set_termios+0xa7c/0x1090 [ 3444.567977][ T5667] tty_set_termios+0xda4/0x17e0 [ 3444.573011][ T5667] set_termios+0x516/0x6c0 [ 3444.577613][ T5667] tty_mode_ioctl+0x47e/0x740 [ 3444.582476][ T5667] tty_ioctl+0x9c6/0xde0 [ 3444.586904][ T5667] __se_sys_ioctl+0xfc/0x170 [ 3444.591765][ T5667] do_syscall_64+0xfa/0xfa0 [ 3444.596543][ T5667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3444.602613][ T5667] [ 3444.604941][ T5667] -> (&f_owner->lock){....}-{3:3} { [ 3444.610170][ T5667] INITIAL USE at: [ 3444.614069][ T5667] lock_acquire+0x120/0x360 [ 3444.620147][ T5667] _raw_write_lock_irq+0xa2/0xf0 [ 3444.626661][ T5667] __f_setown+0x67/0x370 [ 3444.632504][ T5667] generic_setlease+0xd60/0x1240 [ 3444.639021][ T5667] fcntl_setlease+0x3a2/0x4c0 [ 3444.645276][ T5667] do_fcntl+0x6a9/0x1910 [ 3444.651093][ T5667] __se_sys_fcntl+0xc8/0x150 [ 3444.657253][ T5667] do_syscall_64+0xfa/0xfa0 [ 3444.663331][ T5667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3444.670805][ T5667] INITIAL READ USE at: [ 3444.675238][ T5667] lock_acquire+0x120/0x360 [ 3444.681748][ T5667] _raw_read_lock_irqsave+0xaf/0x100 [ 3444.689044][ T5667] send_sigio+0x38/0x370 [ 3444.695298][ T5667] kill_fasync+0x24d/0x4d0 [ 3444.701752][ T5667] lease_break_callback+0x26/0x30 [ 3444.708790][ T5667] __break_lease+0x6a5/0x1620 [ 3444.715483][ T5667] do_dentry_open+0x8b7/0x13f0 [ 3444.722251][ T5667] vfs_open+0x3b/0x340 [ 3444.728321][ T5667] dentry_open+0x61/0xa0 [ 3444.734656][ T5667] do_mq_open+0x59e/0x780 [ 3444.740989][ T5667] __x64_sys_mq_open+0x16a/0x1c0 [ 3444.747929][ T5667] do_syscall_64+0xfa/0xfa0 [ 3444.754438][ T5667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3444.762423][ T5667] } [ 3444.764924][ T5667] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 3444.773779][ T5667] ... acquired at: [ 3444.777581][ T5667] lock_acquire+0x120/0x360 [ 3444.782285][ T5667] _raw_read_lock_irqsave+0xaf/0x100 [ 3444.787754][ T5667] send_sigio+0x38/0x370 [ 3444.792176][ T5667] kill_fasync+0x24d/0x4d0 [ 3444.796772][ T5667] lease_break_callback+0x26/0x30 [ 3444.802070][ T5667] __break_lease+0x6a5/0x1620 [ 3444.806939][ T5667] do_dentry_open+0x8b7/0x13f0 [ 3444.811908][ T5667] vfs_open+0x3b/0x340 [ 3444.816155][ T5667] dentry_open+0x61/0xa0 [ 3444.820578][ T5667] do_mq_open+0x59e/0x780 [ 3444.825262][ T5667] __x64_sys_mq_open+0x16a/0x1c0 [ 3444.830465][ T5667] do_syscall_64+0xfa/0xfa0 [ 3444.835267][ T5667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3444.841347][ T5667] [ 3444.843753][ T5667] [ 3444.843753][ T5667] the dependencies between the lock to be acquired [ 3444.843761][ T5667] and SOFTIRQ-irq-unsafe lock: [ 3444.857288][ T5667] -> (tasklist_lock){.+.+}-{3:3} { [ 3444.862421][ T5667] HARDIRQ-ON-R at: [ 3444.866404][ T5667] lock_acquire+0x120/0x360 [ 3444.872566][ T5667] _raw_read_lock+0x36/0x50 [ 3444.878729][ T5667] __do_wait+0xde/0x740 [ 3444.884544][ T5667] do_wait+0x1f8/0x510 [ 3444.890457][ T5667] kernel_wait+0xab/0x170 [ 3444.896477][ T5667] call_usermodehelper_exec_work+0xbe/0x230 [ 3444.904057][ T5667] process_scheduled_works+0xae1/0x17b0 [ 3444.911285][ T5667] worker_thread+0x8a0/0xda0 [ 3444.917540][ T5667] kthread+0x711/0x8a0 [ 3444.923274][ T5667] ret_from_fork+0x4bc/0x870 [ 3444.929521][ T5667] ret_from_fork_asm+0x1a/0x30 [ 3444.935941][ T5667] SOFTIRQ-ON-R at: [ 3444.939929][ T5667] lock_acquire+0x120/0x360 [ 3444.946091][ T5667] _raw_read_lock+0x36/0x50 [ 3444.952253][ T5667] __do_wait+0xde/0x740 [ 3444.958074][ T5667] do_wait+0x1f8/0x510 [ 3444.963806][ T5667] kernel_wait+0xab/0x170 [ 3444.969796][ T5667] call_usermodehelper_exec_work+0xbe/0x230 [ 3444.977341][ T5667] process_scheduled_works+0xae1/0x17b0 [ 3444.984559][ T5667] worker_thread+0x8a0/0xda0 [ 3444.990977][ T5667] kthread+0x711/0x8a0 [ 3444.996799][ T5667] ret_from_fork+0x4bc/0x870 [ 3445.003129][ T5667] ret_from_fork_asm+0x1a/0x30 [ 3445.009546][ T5667] INITIAL USE at: [ 3445.013447][ T5667] lock_acquire+0x120/0x360 [ 3445.019604][ T5667] _raw_write_lock_irq+0xa2/0xf0 [ 3445.026141][ T5667] copy_process+0x224f/0x3c00 [ 3445.032393][ T5667] kernel_clone+0x21e/0x840 [ 3445.038465][ T5667] user_mode_thread+0xdd/0x140 [ 3445.044811][ T5667] rest_init+0x23/0x300 [ 3445.050542][ T5667] start_kernel+0x3ae/0x410 [ 3445.056738][ T5667] x86_64_start_reservations+0x24/0x30 [ 3445.063770][ T5667] x86_64_start_kernel+0x143/0x1c0 [ 3445.070455][ T5667] common_startup_64+0x13e/0x147 [ 3445.076966][ T5667] INITIAL READ USE at: [ 3445.081309][ T5667] lock_acquire+0x120/0x360 [ 3445.087876][ T5667] _raw_read_lock+0x36/0x50 [ 3445.094400][ T5667] __do_wait+0xde/0x740 [ 3445.100748][ T5667] do_wait+0x1f8/0x510 [ 3445.106860][ T5667] kernel_wait+0xab/0x170 [ 3445.113203][ T5667] call_usermodehelper_exec_work+0xbe/0x230 [ 3445.121165][ T5667] process_scheduled_works+0xae1/0x17b0 [ 3445.128722][ T5667] worker_thread+0x8a0/0xda0 [ 3445.135326][ T5667] kthread+0x711/0x8a0 [ 3445.141413][ T5667] ret_from_fork+0x4bc/0x870 [ 3445.148095][ T5667] ret_from_fork_asm+0x1a/0x30 [ 3445.154867][ T5667] } [ 3445.157376][ T5667] ... key at: [] tasklist_lock+0x18/0x40 [ 3445.165196][ T5667] ... acquired at: [ 3445.169008][ T5667] lock_acquire+0x120/0x360 [ 3445.173691][ T5667] _raw_read_lock+0x36/0x50 [ 3445.178380][ T5667] send_sigurg+0x12b/0x420 [ 3445.182977][ T5667] sk_send_sigurg+0x6c/0x2e0 [ 3445.187753][ T5667] queue_oob+0x420/0x4f0 [ 3445.192176][ T5667] unix_stream_sendmsg+0xc3f/0xdf0 [ 3445.197468][ T5667] __sock_sendmsg+0x21c/0x270 [ 3445.202329][ T5667] ____sys_sendmsg+0x52d/0x830 [ 3445.207270][ T5667] ___sys_sendmsg+0x21f/0x2a0 [ 3445.212127][ T5667] __sys_sendmmsg+0x227/0x430 [ 3445.217072][ T5667] __x64_sys_sendmmsg+0xa0/0xc0 [ 3445.222122][ T5667] do_syscall_64+0xfa/0xfa0 [ 3445.226820][ T5667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3445.232984][ T5667] [ 3445.235312][ T5667] [ 3445.235312][ T5667] stack backtrace: [ 3445.241209][ T5667] CPU: 1 UID: 0 PID: 5667 Comm: syz.0.7197 Not tainted syzkaller #0 PREEMPT(full) [ 3445.241229][ T5667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3445.241240][ T5667] Call Trace: [ 3445.241248][ T5667] [ 3445.241255][ T5667] dump_stack_lvl+0x189/0x250 [ 3445.241279][ T5667] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3445.241300][ T5667] ? __pfx__printk+0x10/0x10 [ 3445.241319][ T5667] validate_chain+0x1f05/0x2140 [ 3445.241345][ T5667] __lock_acquire+0xab9/0xd20 [ 3445.241362][ T5667] ? send_sigurg+0x12b/0x420 [ 3445.241379][ T5667] lock_acquire+0x120/0x360 [ 3445.241393][ T5667] ? send_sigurg+0x12b/0x420 [ 3445.241412][ T5667] ? _raw_read_lock_irqsave+0xbb/0x100 [ 3445.241434][ T5667] _raw_read_lock+0x36/0x50 [ 3445.241451][ T5667] ? send_sigurg+0x12b/0x420 [ 3445.241467][ T5667] send_sigurg+0x12b/0x420 [ 3445.241486][ T5667] sk_send_sigurg+0x6c/0x2e0 [ 3445.241506][ T5667] queue_oob+0x420/0x4f0 [ 3445.241526][ T5667] ? __pfx_queue_oob+0x10/0x10 [ 3445.241545][ T5667] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 3445.241564][ T5667] unix_stream_sendmsg+0xc3f/0xdf0 [ 3445.241582][ T5667] ? lockdep_hardirqs_on+0x9c/0x150 [ 3445.241604][ T5667] ? trace_sched_exit_tp+0x36/0x110 [ 3445.241627][ T5667] ? __schedule+0x17ae/0x4cc0 [ 3445.241646][ T5667] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 3445.241665][ T5667] ? aa_sock_msg_perm+0xda/0x1d0 [ 3445.241688][ T5667] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3445.241703][ T5667] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 3445.241721][ T5667] __sock_sendmsg+0x21c/0x270 [ 3445.241742][ T5667] ____sys_sendmsg+0x52d/0x830 [ 3445.241759][ T5667] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3445.241777][ T5667] ? import_iovec+0x74/0xa0 [ 3445.241798][ T5667] ___sys_sendmsg+0x21f/0x2a0 [ 3445.241814][ T5667] ? __pfx____sys_sendmsg+0x10/0x10 [ 3445.241840][ T5667] ? __fget_files+0x2a/0x420 [ 3445.241861][ T5667] ? __fget_files+0x3a0/0x420 [ 3445.241878][ T5667] __sys_sendmmsg+0x227/0x430 [ 3445.241895][ T5667] ? __pfx___sys_sendmmsg+0x10/0x10 [ 3445.241914][ T5667] ? __pfx_do_futex+0x10/0x10 [ 3445.241942][ T5667] ? __pfx___se_sys_futex+0x10/0x10 [ 3445.241966][ T5667] __x64_sys_sendmmsg+0xa0/0xc0 [ 3445.241982][ T5667] do_syscall_64+0xfa/0xfa0 [ 3445.242003][ T5667] ? lockdep_hardirqs_on+0x9c/0x150 [ 3445.242022][ T5667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3445.242037][ T5667] ? clear_bhb_loop+0x60/0xb0 [ 3445.242055][ T5667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3445.242069][ T5667] RIP: 0033:0x7f72fbf8efc9 [ 3445.242084][ T5667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3445.242098][ T5667] RSP: 002b:00007f72fcd75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3445.242118][ T5667] RAX: ffffffffffffffda RBX: 00007f72fc1e5fa0 RCX: 00007f72fbf8efc9 [ 3445.242131][ T5667] RDX: 0000000000000001 RSI: 0000200000006c40 RDI: 0000000000000003 [ 3445.242142][ T5667] RBP: 00007f72fc011f91 R08: 0000000000000000 R09: 0000000000000000 [ 3445.242152][ T5667] R10: 0000000000040015 R11: 0000000000000246 R12: 0000000000000000 [ 3445.242163][ T5667] R13: 00007f72fc1e6038 R14: 00007f72fc1e5fa0 R15: 00007f72fc30fa28 [ 3445.242180][ T5667] [ 3445.553340][ C1] vkms_vblank_simulate: vblank timer overrun [ 3445.560028][ T1157] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3445.567915][ T1157] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3445.571027][ T3012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3445.584169][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3445.589063][T23641] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3445.690765][ T2987] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 3445.799936][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3445.808371][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3445.908762][ T2987] usb 7-1: device not accepting address 16, error -71 [ 3445.958743][T30972] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3445.999030][ T5926] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 3446.019011][T30972] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3446.151648][ T5926] usb 6-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 3446.163527][ T5926] usb 6-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 32 [ 3446.173798][ T5926] usb 6-1: config 1 interface 0 has no altsetting 0 [ 3446.183445][ T5926] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3446.192932][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3446.201644][ T5926] usb 6-1: Product: 珫ꅚҹꬠᦛ셨坓琶᣽褕뮡ⷦ퟇ꓹꐜ맕뉤ⳓ䷐퇈䊷腊훍ń⏂䡻瘴鯕㭍쓎㑡쮏ꁨꦭ㗗蜤꿺䇍ᮧ속笊ꊦ쨢ᛸᒐ曝潇ૺ砣·㬧停 [ 3446.220151][ T5926] usb 6-1: Manufacturer: 泖 [ 3446.224824][ T5926] usb 6-1: SerialNumber: ࠒ [ 3446.235078][ T5671] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3446.455630][ T5926] usb 6-1: bad CDC descriptors [ 3446.463294][ T5926] usb 6-1: USB disconnect, device number 65 [ 3449.249259][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3450.919652][ T3012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3450.927917][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3450.931441][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 3450.942509][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 3451.559375][ T3012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3451.567735][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog