last executing test programs: 8.975348057s ago: executing program 3 (id=1936): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) unshare(0x22020400) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = socket(0x1d, 0x2, 0x6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000001840)={0x10000000}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000018c0)=@newchain={0x940, 0x64, 0x200, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0xf}, {0xc, 0x9}, {0xffe0, 0x8}}, [@f_tcindex={{0xc}, {0x8a0, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0xe8b2}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xfff1, 0xfff3}}, @TCA_TCINDEX_SHIFT={0x8}, @TCA_TCINDEX_POLICE={0x874, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x4, 0x7, 0xd1, 0x1, 0x814, 0x100, 0x31bd9a08, 0xa, 0x87e6, 0x7, 0x6, 0x8001, 0x597, 0x6, 0x2, 0x5, 0x8, 0x2, 0x7ff, 0x5, 0x4, 0x9, 0x8, 0x188a, 0x9, 0x101, 0x0, 0xe2, 0x40, 0xb07, 0xfffffffb, 0x0, 0x7f, 0x19, 0x15b, 0xfffffff8, 0x7, 0x10, 0x9, 0x81, 0xb1600, 0x1, 0x0, 0x5, 0x9, 0x66d, 0x13, 0x86, 0x8, 0xffffffff, 0xc58, 0x4, 0xc2, 0x2, 0x3, 0xf, 0x6, 0xc, 0x10, 0x9, 0x101, 0x7, 0x9, 0x6dd, 0xfffffffa, 0x0, 0x1, 0xb, 0x1, 0x80000001, 0x81, 0x7ff8000, 0x0, 0xa, 0xfd9, 0x7, 0x51, 0x7, 0x1, 0x401, 0xe5, 0x8, 0x4, 0x5, 0x1, 0x401, 0x0, 0x4, 0xfffffffb, 0x48, 0xd4, 0x10, 0x6e, 0xfff, 0xa, 0x1, 0x10000, 0xa8f, 0x4c37, 0x0, 0x5, 0x8, 0x4, 0x800, 0x3, 0x9e4, 0x1, 0x32, 0x8, 0x9, 0x101, 0x9, 0x1, 0xf, 0x2, 0x1, 0x2, 0x4b77, 0x6, 0x3, 0x3ff, 0x4, 0xfffffff5, 0x1, 0x1000, 0x3, 0x7, 0x7ff, 0x6, 0x3, 0x6, 0x5, 0x7, 0x5, 0x3, 0x200, 0x3, 0x8, 0x1, 0xbf, 0x4, 0x9, 0x9, 0x0, 0x2, 0x1, 0x8, 0x32a0, 0xff, 0x2, 0x4f44, 0x38c, 0x0, 0x7, 0xffffffff, 0x0, 0xffffff80, 0x0, 0xe2f, 0x8, 0xffffffff, 0xfcc, 0x10001, 0x4, 0x4, 0x3, 0x27, 0xe, 0x2, 0xe33f, 0x5f9a05d2, 0x8001, 0x7, 0x4923, 0x8, 0x4b, 0xfffffff9, 0x5, 0x9, 0x5, 0x7, 0x3, 0x1, 0x3, 0x0, 0x4, 0x7, 0x408b, 0x9, 0x27d, 0x1ff, 0x9, 0x0, 0x567, 0x9, 0x8, 0x3, 0x101, 0x6, 0x7, 0xfffffff7, 0x5a, 0x3, 0x6, 0x9, 0xffffffff, 0x7, 0xfffffff9, 0x1, 0xfff, 0x10, 0x0, 0x468, 0x10001, 0x3, 0x441, 0x5, 0x21c9, 0xffff, 0x1000, 0x81, 0x6, 0x6, 0x7, 0x2, 0x8, 0x400, 0x4, 0x80, 0x0, 0x7, 0x1000, 0x3, 0x0, 0x4, 0x8, 0x7, 0x7fff, 0x10, 0x1dd1, 0x62c, 0x8, 0x3, 0x7b2, 0x9, 0x9, 0x0, 0x3, 0xc, 0x2, 0x8000, 0x6, 0xc, 0x100, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x10, 0x2, 0x96, 0x9, 0x24000000, 0x6, 0x0, 0xf, 0x9, 0xc, 0x7381, 0x100, 0x200, 0x4, 0x98bb, 0xffffff01, 0x2, 0x2, 0x3, 0xc, 0x4, 0xa4, 0x9, 0x0, 0x7f, 0x8, 0x1000000, 0x3, 0xffffffff, 0x300000, 0x8, 0x5, 0xc, 0x7, 0x66f4, 0x80000001, 0x6, 0x5, 0x2, 0x10001, 0x3, 0x3, 0x1, 0x8, 0x8, 0x8, 0x0, 0xb0, 0x1, 0x34, 0x0, 0xc, 0x4, 0x9, 0xf, 0x200, 0x1f54, 0x1, 0x0, 0x80000000, 0x9b, 0xd, 0x1, 0x854c, 0x36, 0x1000, 0x4, 0xff, 0x3, 0x2, 0xfffffff8, 0x9, 0x9, 0x8, 0xec, 0xfffffff9, 0xff, 0x6, 0x9, 0x401, 0x9977, 0xe3, 0x0, 0xf, 0x4, 0x2f, 0x3, 0x4, 0xfffffffd, 0x9, 0x4, 0x8, 0xb, 0x6, 0x2, 0x0, 0x9c83, 0x2, 0x9, 0x3, 0x8, 0x3, 0xffffffa1, 0x81, 0x8, 0x1, 0x3, 0x4c3, 0x6, 0x200000, 0x9, 0x6, 0x3, 0x4, 0x307, 0xff, 0x0, 0x7, 0x1, 0xc03, 0x8, 0xf3, 0x7, 0x4, 0xc3, 0x2, 0x1, 0x4, 0x5, 0x1, 0xfffffffb, 0x3, 0xffff, 0x10, 0x7, 0xffffffff, 0x7, 0xc06b, 0x8, 0x9, 0x3, 0x1, 0x0, 0xe, 0x1, 0x0, 0x2, 0x6f, 0x6, 0x0, 0x0, 0x6, 0x1, 0x3, 0x4, 0x10, 0xb228, 0x8, 0xff, 0x3, 0x5, 0x4, 0x4, 0x2, 0xff, 0x5c75694d, 0xb, 0x7fffffff, 0x7, 0x9, 0x66, 0x8, 0x8e, 0x730, 0x7f, 0x81, 0x3, 0x2, 0x74b, 0x0, 0x1, 0x401, 0x400, 0x1, 0x6, 0x8, 0x8000, 0x9, 0x4, 0x5, 0x8, 0x6, 0xffffffff, 0x80000000, 0x800, 0x5b, 0x1ff, 0x101, 0xe, 0xedba, 0x4, 0x8f8, 0x7, 0xffffff81, 0x2, 0x5, 0x40, 0x40, 0x6, 0x6, 0x1, 0x9, 0x9, 0x7, 0x5607, 0x6, 0x2, 0x7fffffff, 0x7, 0x5, 0x8, 0x7, 0x56, 0x9, 0x5a, 0x3, 0x2, 0x7f, 0x80000001, 0x8c2, 0x5, 0x6, 0x43d9, 0x80000001, 0x6, 0x8, 0x5, 0x481a, 0x8001, 0x1, 0x3, 0x100, 0x0, 0x667, 0x64, 0x6, 0xfff, 0xfffffffa, 0x5, 0x3, 0x1, 0x2, 0x5, 0x3, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x10000000, 0x7, 0x8, 0x94be, {0x1d, 0x0, 0xfff9, 0x3, 0x9, 0xd}, {0xf, 0x2, 0x9, 0x342, 0xfffc, 0x401}, 0x4, 0x6ad, 0x80000000}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfff}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x40}]}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x7, 0xf}}]}}, @f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x1, 0x6}}]}}, @f_rsvp={{0x9}, {0x4c, 0x2, [@TCA_RSVP_POLICE={0x48, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x3, 0x7f, 0x392e, 0x0, {0x1, 0x2, 0x1fa0, 0x700, 0x7, 0x9}, {0x2, 0x0, 0x5, 0x799, 0xff80, 0x9}, 0x0, 0x7, 0x3}}, @TCA_POLICE_AVRATE={0x8}]}]}}]}, 0x940}, 0x1, 0x0, 0x0, 0x84}, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000000)={0xed6, 0x4, 0x10, 0xfffffff7, 0x13, "4ca86f9c3bc93e60e0a255076b5e266d108b42"}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r6, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x1000a0, 0x0, 0xfe, 0x0, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000001240)=ANY=[@ANYBLOB="e895b0e1473d0ed1009c5942b2add9b5027f8d7d6fdbb9d2b34623be85bd7e2d36e1fc0f951c6c9fc562b2b6f344765a7db3e0761d702e31135e413570d796dc30e2cbe6850b44c2f9b0c10e734e8f9e6ce11921fc278bcf78c6227d", @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000080)={0x50, 0x0, r9, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r8, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.79111986s ago: executing program 3 (id=1940): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f0000000000), 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) (fail_nth: 2) 7.32279841s ago: executing program 3 (id=1941): socket(0xa, 0x3, 0x3a) r0 = socket$kcm(0x2, 0x5, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio1(0xffffff9c, &(0x7f00000001c0), 0xa0040, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x6, 0x9, 0xc, 0x0, 0x1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, 0x0, 0x0) ioctl$sock_proto_private(r7, 0x89e4, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) socket$inet6_sctp(0xa, 0x1, 0x84) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x106, 0x6000003f) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000040)=0xfffffbff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) 6.041537404s ago: executing program 3 (id=1954): syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000280)="1a00000002000000", 0x8) shutdown(r0, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0xffff, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, 'hsr0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000001cc0), 0x400000000000026, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$sndtimer(0xffffff9c, &(0x7f0000000300), 0x8080) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000340)={{0x0, 0x0, 0xa2, 0x0, 0x5}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff80) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x36, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000b60000/0x3000)=nil, 0x800000}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 5.853534993s ago: executing program 2 (id=1955): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd2c, 0x0, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0xff, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) unshare(0x2c020400) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config', 0x0, 0x0) utimensat(r2, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010100, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x3, 0x3}]}]}, 0xfc}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000400)={0x1, [0x0]}) socket$kcm(0x2, 0xa, 0x2) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) r4 = openat$tun(0xffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'veth1_to_bond\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[], 0xfdef) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r5, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r5, 0x40096102, &(0x7f0000000140)={{&(0x7f0000000380)={'Accelerator\x00', {&(0x7f0000000240)=@adf_hex={@bank={'Bank', '1', 'InterruptCoalescingEnabled\x00'}, {0x5}, {&(0x7f0000000080)=@adf_str={@bank={'Bank', '0', 'InterruptCoalescingNumResponses\x00'}, {"e0ecbd6a8b310131fb4d70aa761af1e8e5d5192fd95e7ce5c93797d071e9e2d298fde6410bdcceeb0b10a797e979a24079eed9201393f3ec285be601b2b31e0e"}}}}}, {&(0x7f0000000300)={'GENERAL\x00'}}}}, 0x5}) 5.751508203s ago: executing program 2 (id=1956): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r3}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000a00)={r2}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood', 0x8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 5.50629356s ago: executing program 1 (id=1958): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x400000) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x38, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts]}}}}}}}, 0x0) fchdir(r1) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8000, 0xffffffff}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x800) sendto$inet(r5, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x47a}, 0x39) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x2}, 0x8) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000150a0102000000000000010001000080ff00064000000000000000040900020073797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x26006800}, 0x1) sync() getdents(r1, &(0x7f0000000140)=""/72, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) tee(r4, r0, 0x10, 0xe) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 4.847760414s ago: executing program 2 (id=1961): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.494352165s ago: executing program 1 (id=1963): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (fail_nth: 2) 4.29848832s ago: executing program 1 (id=1966): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd2c, 0x0, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0xff, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) unshare(0x2c020400) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config', 0x0, 0x0) utimensat(r2, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010100, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x3, 0x3}]}]}, 0xfc}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000400)={0x1, [0x0]}) socket$kcm(0x2, 0xa, 0x2) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) r4 = openat$tun(0xffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'veth1_to_bond\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[], 0xfdef) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r5, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r5, 0x40096102, &(0x7f0000000140)={{&(0x7f0000000380)={'Accelerator\x00', {&(0x7f0000000240)=@adf_hex={@bank={'Bank', '1', 'InterruptCoalescingEnabled\x00'}, {0x5}, {&(0x7f0000000080)=@adf_str={@bank={'Bank', '0', 'InterruptCoalescingNumResponses\x00'}, {"e0ecbd6a8b310131fb4d70aa761af1e8e5d5192fd95e7ce5c93797d071e9e2d298fde6410bdcceeb0b10a797e979a24079eed9201393f3ec285be601b2b31e0e"}}}}}, {&(0x7f0000000300)={'GENERAL\x00'}}}}, 0x5}) 3.951937417s ago: executing program 1 (id=1968): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000000)={'\x00', 0x8b09, 0x401, 0x3, 0x239d, 0x1, 0x0}) sched_setscheduler(r0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@rdma_map={0x2c, 0x114, 0x3, {{0x0}, 0x0, 0x1}}], 0x2c}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x109081, 0x34) syz_fuse_handle_req(r1, &(0x7f0000006380)="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", 0x2000, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x28, 0x0, 0xffffffffffff6260, {{0x40000, 0x6c2, 0x2, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYBLOB="28eb22000000005e804641308e64859fa703c2dee697ebaf9a6fbd8c31072f7c576464cfa06589ff4e565a7a9775145835d4a1f377859c3c3589f08145acaab913adc672f14912e8ff5ff8ec5b21812bb7568c14d0d15d1a1b2312faa7328faf41b81cab05d5a8518cbb97583204e14a285b36338322e200790c29312607c0cd490ca53157cf006354adbec6a0776dcbe8017328cca3be1c5c9e10c68de365580764bff744c7d9deefacded905ec89bf772a900f04b2c9cee5fee2e92009464a62dde13bd7b45e1cd50e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r7, &(0x7f0000000140)=[{&(0x7f00000000c0)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a74c0", 0x2c}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fcntl$lock(r5, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x9}) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000480)={0x18, 0x10, 0x7, {0x0, 0xffffffffffffffff, 0x3}}, 0x18) syz_open_dev$loop(&(0x7f0000000140), 0x800000764, 0x678d82) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x6c8280, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r11 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r11, 0x80dc5521, &(0x7f0000004540)=""/4120) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) 2.967621992s ago: executing program 3 (id=1971): syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, &(0x7f0000000340)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000040)={0x6f, 0x20, 0x4, 0x3, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) 2.718566602s ago: executing program 2 (id=1972): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000a380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000005c0)={0x50, 0x0, r2, {0x7, 0x1f, 0xffffffff, 0x0, 0x1e64, 0x0, 0x1, 0x5, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004900)="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", 0x2000, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x78, 0x0, 0xffff, {0x7f, 0x11, 0x0, {0x4, 0x5, 0xfff, 0x7, 0xfc, 0x7, 0x80000000, 0xb, 0xc, 0x8000, 0x7, r3, r4, 0x132, 0x8001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000680)=@raw=[@ringbuf_query, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xc6}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @generic={0xfc, 0x6, 0x8, 0x3, 0x9}], &(0x7f0000000740)='syzkaller\x00', 0x18000000, 0xeb, &(0x7f00000007c0)=""/235, 0x41000, 0x14, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x4, 0xe}, 0x10, 0x1fe4a, 0xffffffffffffffff, 0x5, &(0x7f0000000940)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000980)=[{0x2, 0x1, 0x8, 0x4}, {0x5, 0x4, 0x5, 0x7}, {0x5, 0x2, 0x4, 0x8}, {0x2, 0x1, 0x0, 0x3}, {0x5, 0x5, 0xb, 0x6}], 0x10, 0x4}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x7ffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) read$FUSE(0xffffffffffffffff, &(0x7f0000000ac0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000002b00)={0x101, 0x4, {}, {0x0}, 0xe, 0x79aa}) r10 = epoll_create(0x6) r11 = syz_clone(0x80000000, &(0x7f0000002b40)="2602f91ff975889db8041ff01f418315164029ec5e5869ab0f7e045c0a078f066223d418c7c038e0ab43bc7289a5809fa5c281c00b9dce0683d2dc5d17c33238fd605179d9fb", 0x46, &(0x7f0000002bc0), &(0x7f0000002c00), &(0x7f0000002c40)="3b3a0617ce5cc989d4208ccd67b8ba1658e9c0f6529a227aed4dc6ad4014be527821a45587177a04835caa2257f153d43b1fd7fc653581065bec275420b08bcd34a4b5183efc4d4ff20b5044f453d5c200c954dbb89c0aa537d5e36861d35ed5ae2fbf2d4fa559846a8ab3905343dacc3301dc19eb59c1e5aff8a0ab342c89764d807b5bd6b9c916f5c67dc3aa9134d5132e1e43b36ab65e20966aef3f0a2d9ae89110b4b574d19ee269cfbdb79865dbc60b82406b6e15609c5fb6412369d7b662a49d0159ccfa34bcebe6486b27af1e7a5df3f8ec18") stat(&(0x7f0000002d40)='./file0\x00', &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000002e00)='./file0\x00', &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) ioctl$I2C_RDWR(r14, 0x707, &(0x7f0000000180)={&(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0xfff5, 0x1, &(0x7f0000000880)="d4"}], 0x2}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000002ec0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002f00)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f0000003000)=0xe4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003040)={0x0, 0x0, 0x0}, &(0x7f0000003080)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000640)=[{&(0x7f00000001c0)="b9a84801b636de9cfe400eb6217fdcbcac7800ace002582104f397f0b9232b9b98181a6d424615b2e632619c3df0c6cfa3e0506238928e2c344a968f11602796abcfeee8f5dc7393702ad96bae241ed0938c35fe00ea99341d618d8f98a61c1aab0f6a74a9d94da1a3b947f5b72151ec194fc64fa5cb06bf05ba1b98a407944ce599bcb00db47f0a493c5f4a8077aac0164306c44fad4ffe02f19a96f500efe5a082a3f1c883db9fe380f83be382dc4093ae358348fba3ac1d09cb092fd5081d60d115d7", 0xc4}, {&(0x7f00000002c0)="f34bba8b6672a7afa14172dd36f49c12a01f13012c3865644d01357f7b5e483945b44891b5bb41fd1b0fa31dccae52082d0f57330f4da16e6d388deefec3885d4c986b4a1058405e3b7aa72229cfd6c45cd966dd009408b4407be2e7520fceb39ae3099bc31173d1b22a91b43d738538985c0cceafbc75ce03018d9e021cccdf8646a4f0152ceb05ee7c4d", 0x8b}, {&(0x7f0000000380)="78a3115ca18dc1bad5e2227f3883b42d93eeef06f5a06f362d9b491060fb77cb42c952ea6a2417abfe36213d970dab22ce580fa914023135a929e964cbeb24461d0333bbb1c54dee5fa42cc7e3f173b51b0c425f68367d3f69e886f01146d67385b9d91ef91e9d1164484a11d123e1156b935ad9b479ae0d1b95b13979ef2612a976a5bbd1cde5268cba41d6f87d29cf6ec5acbff131cbcee266851f6ee24091d64f8b4a4647b9b119b09faef79ccb0981615892cb3fc02d9292ff45b4a0a2340d5ceedec577807abfe0bd2ca1736fe6ea06a680dea1f8a86872aa3bb6d04f46c314", 0xe2}, {&(0x7f0000000480)="11bbcbbd0743b1d880a9cd3cfc75cf290389a65fc65e62b00a25c873254699a347339a00afbf96c54e51fac014a2526a57af4096918e9b7fe563b685b4f2e29de55a9361c933622ace3dbee1f5b0854b06620872cdda028ef9463db0", 0x5c}, {&(0x7f0000000500)="40a314925c40d5b852b3e100b9b0745d941c74710d2f38b9fde1f15d4f4f2aa4edf8cf235c8493955a86efb0c1265d9266eed6bf63516199d820c8ac1b2b9915f54c1eb6a1677a4af62afddb92b3c0e21a1c4e5cd14dd184ddbc", 0x5a}, {&(0x7f0000000580)="6dc89e5a8826ccbec80708c360abc36c76330b43812b3c8e5a444de47ae4c7", 0x1f}, {&(0x7f00000005c0)="615ed56e9536b0f2d05a8cff0dbf01a8a9692bea27296021300ad8670cf88a25ba820bda5e0cb574e0ba322e987f09c8e10a11ccfdc9d916e6cea52ffcd6690ccc0239512b14ccffec50aecead26c0beb1e4b3a073f93b2a66b9ee1e27bf1dee08306bebb7f4d70d7182d1f4326a2097fb7e61f7cd6414f3c5166842c3f779", 0x7f}], 0x7, &(0x7f0000003240)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="2c0000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r7, @ANYRES32=r0, @ANYBLOB="180000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=0xee00, @ANYBLOB="200000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r10, @ANYRES32=r0, @ANYBLOB="280000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="180000000100000002000000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="100000000100000001000000", @ANYRES32=r0, @ANYBLOB="1c0000000100000001000000", @ANYRES32=r0, @ANYRES32=r14, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1801000001000000020000007d0787dfec91108cad7dd4a6aa68f20df61a89c5b7dcb947ece1323f615060e4c6060000000000000004a155aa845aecafadc3ef1edbff32a31cb7b32958a13891063ca6cec1e5e1824a7efae39a97ea2874ebe846c4746ffba14574a1242a7d62", @ANYRES32=r15, @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="100000000100000001000000", @ANYRES32=r0], 0x110, 0x11}}], 0x1, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='westwood', 0x8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r18 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r18, 0x6, 0x4, &(0x7f0000000040)=0x7, 0x4) 2.356845757s ago: executing program 4 (id=1973): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r0, &(0x7f0000000c40), 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0cc5605, &(0x7f00000001c0)={0x1, @pix={0x10001, 0x2, 0x50565559, 0x7, 0x6, 0x8ea, 0x6, 0x7, 0x1, 0x3, 0x1, 0x4}}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) socket$pppoe(0x18, 0x1, 0x0) sendfile(r1, r3, 0x0, 0x2000fb) get_mempolicy(0x0, &(0x7f0000000200), 0xb, &(0x7f00009eb000/0x2000)=nil, 0x3) 2.298276223s ago: executing program 0 (id=1974): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x3}) r2 = eventfd2(0x39, 0x80800) r3 = eventfd2(0x6, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000300)={r2, 0x8, 0x2, r3}) 2.238674638s ago: executing program 0 (id=1975): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000055bed40020000000000000003010902380002000000060904c700010e0101000300d009050a000000000000090400000101be2600090500000000000000080b"], 0x0) syz_usb_connect$cdc_ncm(0x2, 0x86, &(0x7f00000006c0)=ANY=[@ANYBLOB="12011003020000102505a1a44000010203010902740002010690dc0904000001020d0000082406000111a1d8052400fd5c0d240f01030000000104090bce06241a0100221524120300a317a88b045e4f01a607c0ffcb7e392a09058103ff0302050409040100000905820240098009690905030240003f000200"/134], &(0x7f0000000600)={0x5, &(0x7f0000000400)={0xa}, 0x95, &(0x7f0000000780)=ANY=[@ANYBLOB="050f9500050010020000000010100a0001000000000000000000000003100b14100400c8ba844a49650bff35ea98e6cea400005e1000a0b3dd83c1700c2a4c1969c105fd889a3cf5a7aaf64b1260e622355ccdac9c3dd6452d8155ba8a9edf3dab239e3a73893663dc4aa87be5667aac6fc70f982cfa2e4be70895ff54853388c9582942be5097e6df550e21f935268707"], 0x1, [{0x4, &(0x7f00000005c0)=@lang_id={0x4}}]}) 2.118425925s ago: executing program 4 (id=1976): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) ftruncate(r2, 0x3) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x31}}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xebb1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}}, 0x804) 2.011275884s ago: executing program 4 (id=1977): r0 = openat$tcp_congestion(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000100)='reno\x00', 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = mq_open(&(0x7f0000000380)='^\x166\x00', 0x80, 0x110, &(0x7f00000003c0)={0xfffffffd, 0xc, 0xfffffffb, 0x5}) mq_notify(r3, &(0x7f0000000180)={0x20000000, 0x3d, 0x2, @tid=r2}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket(0x2, 0x80805, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x918) syz_io_uring_setup(0xd2, &(0x7f00000000c0)={0x0, 0xf517, 0x1000, 0x0, 0x2e9}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000040), &(0x7f0000000100)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000004000)={0xf, {"a2e3ad21ed0d09f91b50090987f70906d038e7ff7fc6e5539b0d3d0e8b089b33396d63060890e0878f0e1ac6e7049b334a959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5d31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xfffffffffffffe59}}, 0xfa) syz_io_uring_setup(0x3854, &(0x7f0000000280)={0x0, 0x2dc9, 0x100, 0x3, 0x3ce}, &(0x7f0000000300), &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x80280) ioctl$FS_IOC_SETFLAGS(r9, 0x40046602, &(0x7f0000000180)=0x1000) 1.90103714s ago: executing program 4 (id=1978): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd2c, 0x0, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0xff, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) unshare(0x2c020400) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config', 0x0, 0x0) utimensat(r2, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010100, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x3, 0x3}]}]}, 0xfc}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000400)={0x1, [0x0]}) socket$kcm(0x2, 0xa, 0x2) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) r4 = openat$tun(0xffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'veth1_to_bond\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[], 0xfdef) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r5, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r5, 0x40096102, &(0x7f0000000140)={{&(0x7f0000000380)={'Accelerator\x00', {&(0x7f0000000240)=@adf_hex={@bank={'Bank', '1', 'InterruptCoalescingEnabled\x00'}, {0x5}, {&(0x7f0000000080)=@adf_str={@bank={'Bank', '0', 'InterruptCoalescingNumResponses\x00'}, {"e0ecbd6a8b310131fb4d70aa761af1e8e5d5192fd95e7ce5c93797d071e9e2d298fde6410bdcceeb0b10a797e979a24079eed9201393f3ec285be601b2b31e0e"}}}}}, {&(0x7f0000000300)={'GENERAL\x00'}}}}, 0x5}) 1.839222746s ago: executing program 2 (id=1979): r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_getsetattr(r0, &(0x7f00000001c0)={0x0, 0x1, 0x7, 0x5}, &(0x7f0000000200)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000100)='./file0\x00', 0xf) close_range(r4, r4, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x4800003e, r5, 0x0) r7 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r10, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="20002abd7000fddbdf257400000008000300", @ANYRES32=r12, @ANYBLOB="e2a2025292b910705c6626b0653b2da82a9757ebb1b6380cbb99bf765816e3228801e7311d1def08d3ebf50ff68ba30e7c0379057ccf3a2462b08645f9e10ceac70de8cb7e1fa8b68eb5b19cf78b78f96ab427b0a40bf42f88423f97b9ff05ca967d62d793bdc879a24755cf03fb87c93b1808cda9efc3507bbda714423aa3157c41f05c3fbe64e2104116c5a28bd58b50b938513089c607a5b87dea138776bcd9f793608b78bfb8b45542a36bf9d8c1028305e71553ee29cb75b1b4f890f6f7a328dc3b692aaa7f678adb68a371e9e0e1391e5df05a25b56408443492ba30eaef923f9b69f131d230652e528a62d4eae77f0b04288e732a849911c00951efc99dab93b3f0394f84a4848ae4f6516193c31cc75b0cbde588b07988ed914342827a2827373d4b34d3dd2210809d6a23703baddbb00b334d59416968ea846ea3f45e1b1ad90de98f7ef3702bb059dd5738bb93"], 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x81) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000001400000008000a"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.685420936s ago: executing program 4 (id=1980): r0 = syz_io_uring_setup(0x7279, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000180), &(0x7f0000000000)) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0xfffffffb, 0x0, 0xffffffffffffffff}) bind$packet(0xffffffffffffffff, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async) syz_usb_connect(0x0, 0x0, 0x0, 0x0) (async) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0xff08, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (rerun: 64) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) read$alg(r5, 0x0, 0x0) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x82}, 0x20040044) r6 = socket(0x10, 0x80002, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_GROUP={0x8, 0x1b, 0x3}]}, 0x40}}, 0x0) (async) sendmsg$nl_route_sched(r7, 0x0, 0x40040) sendmsg$nl_route(r6, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r8, @ANYBLOB="821400000420fffe96546bad4164e962da19e6096b2b745820238370c48c377343eb52f3107bff86140685a5e8324d5e927eac2be6751efec829304294c3"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) r9 = io_uring_setup(0x160f, &(0x7f00000012c0)={0x0, 0x9e40, 0x800, 0x7, 0xfffffffc}) io_uring_register$IORING_REGISTER_BUFFERS2(r9, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/152, 0x98}, {0x0}, {&(0x7f0000000280)=""/4086, 0xff6}], &(0x7f0000001540)=[0x0, 0x4]}, 0x20) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000000200)={0x3, 'netdevsim0\x00', {0x4}, 0x7}) 1.539047389s ago: executing program 0 (id=1981): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) (fail_nth: 2) close(r1) syz_emit_ethernet(0x36, &(0x7f0000002340)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x24, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x2, 0x0, 0xe7}}}}}}, 0x0) 1.510939874s ago: executing program 4 (id=1982): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.239170283s ago: executing program 0 (id=1983): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x16, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x4, "a13b1f21"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000039c0)={0x44, &(0x7f0000000280)={0x40, 0x7, 0x4, "ca3bca96"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x83, 0x1, "f1"}, 0x0, 0x0}) 882.564722ms ago: executing program 2 (id=1984): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc0) r1 = syz_usbip_server_init(0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, 0x0, 0x4000004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e"], 0x104}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000014935d1071042c03e9ba0102cc3c0902120001000000000904"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write$usbip_server(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x35) 833.642006ms ago: executing program 3 (id=1985): setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r2, 0x9}, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, 0x7, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7fff}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008888}, 0x24008000) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff77) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="18000000780001062abd700000008ec20700"], 0x18}], 0x1, 0x0, 0x0, 0x2000}, 0x4000880) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f0000000040)={0x0, 0xfdd0}) 675.012211ms ago: executing program 1 (id=1986): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x1, 0x2, 0x0, 0x40000}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x40585414, &(0x7f0000000180)) 597.072356ms ago: executing program 0 (id=1987): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0x3000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/82, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001a40)={0x1, 0x0, [{0xb7a66f486e38435c, 0x66, &(0x7f00000006c0)=""/102}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x4000000) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9c000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="8201000000420000140003006272696467655f736c6176655f30000008000400d4000000600016805c00018010000200f9ffffff"], 0x9c}}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c800"}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000080)=0x9, 0x4) syz_usb_connect(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b02"], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_OSF_TTL={0x5, 0x2, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xc8}}, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1"], 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0xa, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200406, 0x6, 0x454f, 0x6, 0x80005, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf3, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x4, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0x2620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x800, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xf43, 0x101]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 525.094504ms ago: executing program 1 (id=1988): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) close(r1) syz_emit_ethernet(0x36, &(0x7f0000002340)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x24, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x2, 0x0, 0xe7}}}}}}, 0x0) 0s ago: executing program 0 (id=1989): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): D [ 486.165994][T11681] netlink: 'syz.0.1675': attribute type 10 has an invalid length. [ 486.186175][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.881048][ T48] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 487.026476][T11692] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 487.044205][T11692] bond2 (unregistering): Released all slaves [ 487.061069][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 487.078209][ T48] usb 5-1: config index 0 descriptor too short (expected 4495, got 71) [ 487.092169][ T48] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 487.100376][ T48] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.155356][ T48] usb 5-1: config 0 has no interface number 0 [ 487.191764][ T48] usb 5-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 487.210999][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.226222][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.251772][ T48] usb 5-1: Product: syz [ 487.261042][ T48] usb 5-1: Manufacturer: syz [ 487.266053][ T48] usb 5-1: SerialNumber: syz [ 487.285191][ T48] usb 5-1: config 0 descriptor?? [ 487.481311][ T5948] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 487.644658][ T5948] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 487.660407][ T48] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 487.668237][ T5948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 487.680828][ T5948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 487.692430][ T48] uvcvideo 5-1:0.105: No valid video chain found. [ 487.693431][ T5948] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 487.714880][ T48] usb 5-1: USB disconnect, device number 102 [ 487.716012][ T5948] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 487.751146][ T5948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.772985][ T5948] usb 4-1: config 0 descriptor?? [ 487.778768][T11696] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 487.797369][ T183] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -61 [ 487.817545][ T183] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 487.892539][T11702] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 487.904234][T11702] bond2 (unregistering): Released all slaves [ 488.143511][T11713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1684'. [ 488.202972][ T5948] plantronics 0003:047F:FFFF.0018: reserved main item tag 0xd [ 488.237893][ T5948] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 488.285609][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.496313][T11696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.510180][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.530559][T11696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.545833][T11724] netlink: 'syz.0.1686': attribute type 10 has an invalid length. [ 488.590309][T11727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1687'. [ 488.670124][T11727] futex_wake_op: syz.2.1687 tries to shift op by -1; fix this program [ 489.089080][ T5926] usb 2-1: USB disconnect, device number 95 [ 489.312168][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.591040][ T183] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 489.681516][ T5948] usb 4-1: reset high-speed USB device number 93 using dummy_hcd [ 489.740992][ T9] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 489.752412][ T183] usb 2-1: Using ep0 maxpacket: 16 [ 489.762499][ T183] usb 2-1: config index 0 descriptor too short (expected 4495, got 71) [ 489.771815][ T183] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 489.780053][ T183] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.790772][ T183] usb 2-1: config 0 has no interface number 0 [ 489.804256][ T183] usb 2-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 489.813885][ T183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.823475][ T183] usb 2-1: Product: syz [ 489.829485][ T183] usb 2-1: Manufacturer: syz [ 489.834481][ T183] usb 2-1: SerialNumber: syz [ 489.841829][ T183] usb 2-1: config 0 descriptor?? [ 489.901390][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 489.921587][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 489.943957][ T9] usb 3-1: config 0 has no interface number 0 [ 489.969799][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 489.993498][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.011108][ T9] usb 3-1: Product: syz [ 490.022721][ T9] usb 3-1: Manufacturer: syz [ 490.034124][ T9] usb 3-1: SerialNumber: syz [ 490.049825][ T9] usb 3-1: config 0 descriptor?? [ 490.085479][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 490.314105][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 490.358574][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.367840][ T183] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 490.398998][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 490.410020][ T183] uvcvideo 2-1:0.105: No valid video chain found. [ 490.432169][T11757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1696'. [ 490.465838][T11757] futex_wake_op: syz.3.1696 tries to shift op by -1; fix this program [ 490.492460][ T183] usb 2-1: USB disconnect, device number 96 [ 490.815049][T11760] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1693'. [ 490.832054][T11760] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1693'. [ 491.132024][ T5948] usb 4-1: device descriptor read/64, error -71 [ 491.395620][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.411128][ T5948] usb 4-1: reset high-speed USB device number 93 using dummy_hcd [ 491.476209][ T5948] usb 4-1: device reset changed ep0 maxpacket size! [ 491.493215][ T5921] usb 4-1: USB disconnect, device number 93 [ 491.574686][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.701137][ T5921] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 491.881212][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 491.911133][T11786] pimreg: entered allmulticast mode [ 491.925262][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 491.961683][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 492.002622][ T5921] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 492.033675][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.063837][ T5921] usb 4-1: Product: syz [ 492.083153][ T5921] usb 4-1: Manufacturer: syz [ 492.102015][ T5921] usb 4-1: SerialNumber: syz [ 492.126830][ T5921] usb 4-1: config 0 descriptor?? [ 492.154335][ T5921] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 492.188749][ T5921] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 492.428701][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.553996][ T5906] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 492.617265][T11779] pimreg: left allmulticast mode [ 492.730997][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 492.744038][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.777767][ T5921] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 492.788211][ T5921] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 492.800996][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.840723][ T5906] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 492.881691][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 492.882048][ T48] usb 3-1: USB disconnect, device number 117 [ 492.897236][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.953586][ T5906] usb 2-1: config 0 descriptor?? [ 492.978549][ T48] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 493.111455][ T48] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 493.142171][ T48] quatech2 3-1:0.51: device disconnected [ 493.224551][T11759] input: syz1 as /devices/virtual/input/input49 [ 493.301643][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.433591][T11795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.442384][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.442597][ T5906] hid_parser_main: 5 callbacks suppressed [ 493.442616][ T5906] ft260 0003:0403:6030.0019: unknown main item tag 0x7 [ 493.475245][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.626775][ T5906] ft260 0003:0403:6030.0019: chip code: 6424 8183 [ 493.827657][ T5906] ft260 0003:0403:6030.0019: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 493.952701][ T48] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 493.975475][ T5921] em28xx 4-1:0.0: AC97 vendor ID = 0x00fc00fe [ 494.028437][ T5906] ft260 0003:0403:6030.0019: failed to retrieve status: -32, no wakeup [ 494.038363][T11790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.063482][T11790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.124468][ T48] usb 3-1: too many endpoints for config 0 interface 0 altsetting 5: 254, using maximum allowed: 30 [ 494.152629][ T48] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.181640][ T48] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 494.219900][ T48] usb 3-1: config 0 interface 0 has no altsetting 0 [ 494.239722][ T48] usb 3-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 494.269412][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.292265][ T48] usb 3-1: config 0 descriptor?? [ 494.331010][ T5921] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 494.359227][ T5921] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 494.381418][ T5921] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 494.399457][ T5921] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 494.419613][ T5921] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 494.433403][ T5947] usb 2-1: USB disconnect, device number 97 [ 494.440670][ T5921] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 494.480316][ T5921] usb 4-1: USB disconnect, device number 94 [ 494.510569][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.591772][ T183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.939548][ T48] usb 3-1: string descriptor 0 read error: -71 [ 494.970118][ T48] uclogic 0003:5543:0081.001A: failed retrieving string descriptor #200: -71 [ 495.014529][ T48] uclogic 0003:5543:0081.001A: failed retrieving pen parameters: -71 [ 495.028484][ T48] uclogic 0003:5543:0081.001A: failed probing pen v2 parameters: -71 [ 495.037938][ T48] uclogic 0003:5543:0081.001A: failed probing parameters: -71 [ 495.060836][ T48] uclogic 0003:5543:0081.001A: probe with driver uclogic failed with error -71 [ 495.089165][ T48] usb 3-1: USB disconnect, device number 118 [ 495.265685][T11830] netlink: 'syz.0.1717': attribute type 10 has an invalid length. [ 495.330378][T11832] pimreg: entered allmulticast mode [ 495.555675][ T48] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 495.576826][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.721171][ T5906] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 495.751105][ T48] usb 2-1: Using ep0 maxpacket: 8 [ 495.767106][ T48] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 495.792959][T11842] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1721'. [ 495.818229][ T48] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 495.861199][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.883435][ T48] usb 2-1: Product: syz [ 495.894358][ T48] usb 2-1: Manufacturer: syz [ 495.906001][ T5906] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 495.920401][ T48] usb 2-1: SerialNumber: syz [ 495.935193][ T5906] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 495.954537][ T48] usb 2-1: config 0 descriptor?? [ 495.960560][ T5906] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 495.971258][T11842] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1721'. [ 495.981116][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 495.993346][ T5906] usb 4-1: SerialNumber: syz [ 496.045437][ T5906] usb 4-1: 0:2 : does not exist [ 496.068638][T11823] pimreg: left allmulticast mode [ 496.081017][ T5921] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 496.253387][ T5921] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 496.282819][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.322379][ T5921] usb 3-1: config 0 descriptor?? [ 496.365053][ T5906] usb 4-1: USB disconnect, device number 95 [ 496.585408][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.749628][T11852] tun0: tun_chr_ioctl cmd 1074025675 [ 496.757362][T11852] tun0: persist enabled [ 496.763544][T11852] tun0: tun_chr_ioctl cmd 1074025675 [ 496.771359][T11852] tun0: persist disabled [ 496.805347][T11854] netlink: zone id is out of range [ 496.817891][T11854] netlink: zone id is out of range [ 496.829899][T11854] netlink: zone id is out of range [ 496.845248][T11854] netlink: zone id is out of range [ 496.857512][T11854] netlink: zone id is out of range [ 496.869694][T11854] netlink: zone id is out of range [ 496.882218][T11854] netlink: zone id is out of range [ 496.901353][T11854] netlink: zone id is out of range [ 497.121190][ T5947] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 497.133031][T11861] netlink: 'syz.0.1727': attribute type 4 has an invalid length. [ 497.281154][ T183] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 497.302750][ T5947] usb 5-1: config 86 has an invalid interface number: 125 but max is 1 [ 497.320617][ T5947] usb 5-1: config 86 has an invalid interface descriptor of length 5, skipping [ 497.340545][ T5947] usb 5-1: config 86 has 1 interface, different from the descriptor's value: 2 [ 497.353712][ T5947] usb 5-1: config 86 has no interface number 0 [ 497.359984][ T5947] usb 5-1: config 86 interface 125 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 497.376877][ T5947] usb 5-1: config 86 interface 125 has no altsetting 0 [ 497.388818][ T5947] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a44, bcdDevice= a.45 [ 497.398519][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.407039][ T5947] usb 5-1: Product: 쟣蝖驢趫噑놵秷묮年⧲凉섢肁晒籨膿Ꭵ熡穆밒⬫ର⸣鏗襥ᛤ⛡璺墫攘Ɯ䊝箰쇊㵒 [ 497.420436][ T5947] usb 5-1: Manufacturer: 笌↏밠面㐉贩㨟⧨Ꭳ녢錙텋꫎뵸﹈鎠렊│₷骑㦤㹘뎩⪲ﺊꞄ靴ꍿ㼘랾 [ 497.434072][ T5947] usb 5-1: SerialNumber: 뇩䭕넞붙벻輭Ȃ䓊蜎샄灈엂Ꮅ錅暑웟쓅㌢陋훇鰴谻⾭꧉琔棝굒㮑匷績둴ᨽ═㮺ﾊ [ 497.451016][ T183] usb 4-1: Using ep0 maxpacket: 32 [ 497.458409][ T183] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.471421][ T183] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.482818][ T5921] usb 3-1: Cannot set autoneg [ 497.490092][ T5921] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 497.503398][ T183] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 497.514049][ T183] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.525646][ T183] usb 4-1: config 0 descriptor?? [ 497.718753][ T5947] usb 5-1: USB disconnect, device number 103 [ 497.952766][ T183] ft260 0003:0403:6030.001B: unknown main item tag 0x7 [ 498.147380][ T183] ft260 0003:0403:6030.001B: chip code: 6424 8183 [ 498.348079][ T183] ft260 0003:0403:6030.001B: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 498.425961][ T5906] usb 2-1: USB disconnect, device number 98 [ 498.548779][ T183] ft260 0003:0403:6030.001B: failed to retrieve status: -32, no wakeup [ 498.551883][T11859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.572262][T11859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.582399][T11876] netlink: 'syz.1.1731': attribute type 10 has an invalid length. [ 498.803778][ T5906] usb 4-1: USB disconnect, device number 96 [ 498.894177][ T5926] usb 3-1: USB disconnect, device number 119 [ 499.194024][T11886] pimreg: entered allmulticast mode [ 500.012259][T11883] pimreg: left allmulticast mode [ 500.431046][ T183] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 500.621099][ T183] usb 4-1: Using ep0 maxpacket: 8 [ 500.640539][ T183] usb 4-1: unable to get BOS descriptor or descriptor too short [ 500.668494][ T5947] net_ratelimit: 1152 callbacks suppressed [ 500.668513][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.684230][ T183] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 500.705450][ T183] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 500.730190][ T183] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 500.746333][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.756414][ T183] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 500.772264][ T183] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.780476][ T183] usb 4-1: Product: syz [ 500.785312][ T183] usb 4-1: Manufacturer: syz [ 500.790058][ T183] usb 4-1: SerialNumber: syz [ 501.025248][ T183] usb 4-1: 0:2 : does not exist [ 501.076025][ T183] usb 4-1: USB disconnect, device number 97 [ 501.118793][T11225] udevd[11225]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 501.232275][ T5947] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 501.401128][ T5947] usb 5-1: Using ep0 maxpacket: 32 [ 501.408033][ T5947] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 501.418197][ T5947] usb 5-1: config 0 has no interface number 0 [ 501.436870][ T5947] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 501.458992][ T5947] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 501.479726][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.489628][T11937] pimreg: entered allmulticast mode [ 501.499398][ T5947] usb 5-1: Product: syz [ 501.510789][ T5947] usb 5-1: Manufacturer: syz [ 501.517612][ T5947] usb 5-1: SerialNumber: syz [ 501.528907][ T5947] usb 5-1: config 0 descriptor?? [ 501.538359][T11917] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 501.625056][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.635095][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.757417][T11917] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 501.786687][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.997715][ T5947] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 502.018606][ T5947] asix 5-1:0.188: probe with driver asix failed with error -32 [ 502.113368][T11943] tun0: tun_chr_ioctl cmd 1074025675 [ 502.119086][T11943] tun0: persist enabled [ 502.124482][T11943] tun0: tun_chr_ioctl cmd 1074025675 [ 502.129971][T11943] tun0: persist disabled [ 502.143906][T11943] netlink: 'syz.1.1755': attribute type 1 has an invalid length. [ 502.153421][T11943] netlink: 'syz.1.1755': attribute type 2 has an invalid length. [ 502.226320][T11934] pimreg: left allmulticast mode [ 502.501114][ T48] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 502.691023][ T48] usb 2-1: config 86 has an invalid interface number: 125 but max is 1 [ 502.731012][ T48] usb 2-1: config 86 has an invalid interface descriptor of length 5, skipping [ 502.739992][ T48] usb 2-1: config 86 has 1 interface, different from the descriptor's value: 2 [ 502.790986][ T48] usb 2-1: config 86 has no interface number 0 [ 502.798083][ T48] usb 2-1: config 86 interface 125 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 502.825950][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.841269][ T48] usb 2-1: config 86 interface 125 has no altsetting 0 [ 502.863159][ T48] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a44, bcdDevice= a.45 [ 502.874158][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.882439][ T48] usb 2-1: Product: 쟣蝖驢趫噑놵秷묮年⧲凉섢肁晒籨膿Ꭵ熡穆밒⬫ର⸣鏗襥ᛤ⛡璺墫攘Ɯ䊝箰쇊㵒 [ 502.895742][ T48] usb 2-1: Manufacturer: 笌↏밠面㐉贩㨟⧨Ꭳ녢錙텋꫎뵸﹈鎠렊│₷骑㦤㹘뎩⪲ﺊꞄ靴ꍿ㼘랾 [ 502.909459][ T48] usb 2-1: SerialNumber: 뇩䭕넞붙벻輭Ȃ䓊蜎샄灈엂Ꮅ錅暑웟쓅㌢陋훇鰴谻⾭꧉琔棝굒㮑匷績둴ᨽ═㮺ﾊ [ 502.911284][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.951916][ T183] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 503.121222][ T183] usb 4-1: Using ep0 maxpacket: 32 [ 503.143006][ T183] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.159792][ T183] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 503.174421][ T183] usb 4-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 503.184114][ T183] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.195906][ T183] usb 4-1: config 0 descriptor?? [ 503.205259][ T183] usb 4-1: bad CDC descriptors [ 503.266115][ T48] usb 2-1: USB disconnect, device number 99 [ 503.409533][T11956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.419692][T11956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.431860][T11956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.440583][T11956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.450165][ T183] usb 4-1: USB disconnect, device number 98 [ 503.701727][ T183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.869640][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.049090][ T48] usb 5-1: USB disconnect, device number 104 [ 504.341002][ T5906] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 504.382490][ T5926] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 504.461037][ T48] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 504.503066][ T5906] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 504.514748][ T5906] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 504.526043][ T5906] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 504.538458][ T5906] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 504.548653][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.558016][ T5926] usb 3-1: Using ep0 maxpacket: 32 [ 504.564276][T11988] FAULT_INJECTION: forcing a failure. [ 504.564276][T11988] name failslab, interval 1, probability 0, space 0, times 0 [ 504.577195][T11988] CPU: 1 UID: 0 PID: 11988 Comm: syz.0.1773 Not tainted syzkaller #0 PREEMPT(full) [ 504.577211][T11988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 504.577219][T11988] Call Trace: [ 504.577225][T11988] [ 504.577230][T11988] dump_stack_lvl+0x189/0x250 [ 504.577246][T11988] ? __pfx____ratelimit+0x10/0x10 [ 504.577261][T11988] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.577272][T11988] ? __pfx__printk+0x10/0x10 [ 504.577286][T11988] ? __pfx_fib_validate_source+0x10/0x10 [ 504.577310][T11988] should_fail_ex+0x414/0x560 [ 504.577334][T11988] should_failslab+0xa8/0x100 [ 504.577358][T11988] kmem_cache_alloc_noprof+0x74/0x6f0 [ 504.577379][T11988] ? dst_alloc+0x105/0x170 [ 504.577403][T11988] dst_alloc+0x105/0x170 [ 504.577418][T11988] ip_route_input_rcu+0x139f/0x30d0 [ 504.577436][T11988] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 504.577447][T11988] ? __local_bh_enable_ip+0x12d/0x1c0 [ 504.577457][T11988] ? lockdep_hardirqs_on+0x98/0x140 [ 504.577467][T11988] ? __local_bh_enable_ip+0x12d/0x1c0 [ 504.577476][T11988] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 504.577487][T11988] ? ip_route_input_noref+0x98/0x250 [ 504.577497][T11988] ? ip_route_input_noref+0x98/0x250 [ 504.577508][T11988] ? ipt_do_table+0x13dd/0x1640 [ 504.577519][T11988] ? ip_route_input_noref+0x98/0x250 [ 504.577530][T11988] ip_route_input_noref+0x167/0x250 [ 504.577544][T11988] ? __pfx_ip_route_input_noref+0x10/0x10 [ 504.577558][T11988] ? ipt_do_table+0x2a3/0x1640 [ 504.577566][T11988] ? __pfx_ipt_do_table+0x10/0x10 [ 504.577577][T11988] ip_rcv_finish_core+0x5af/0x1c00 [ 504.577597][T11988] ip_rcv_finish+0x14c/0x2f0 [ 504.577612][T11988] NF_HOOK+0x30c/0x3a0 [ 504.577626][T11988] ? __pfx_ip_rcv_finish+0x10/0x10 [ 504.577639][T11988] ? NF_HOOK+0x9a/0x3a0 [ 504.577651][T11988] ? __pfx_NF_HOOK+0x10/0x10 [ 504.577662][T11988] ? ip_rcv_core+0x7f7/0xd00 [ 504.577676][T11988] ? __pfx_ip_rcv_finish+0x10/0x10 [ 504.577694][T11988] ? __pfx_ip_rcv+0x10/0x10 [ 504.577705][T11988] __netif_receive_skb+0x143/0x380 [ 504.577717][T11988] ? netif_receive_skb+0x105/0x750 [ 504.577731][T11988] netif_receive_skb+0x1bb/0x750 [ 504.577745][T11988] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 504.577755][T11988] ? __pfx_netif_receive_skb+0x10/0x10 [ 504.577771][T11988] ? tun_rx_batched+0x160/0x730 [ 504.577783][T11988] tun_rx_batched+0x1b9/0x730 [ 504.577797][T11988] ? __pfx_tun_rx_batched+0x10/0x10 [ 504.577810][T11988] ? tun_get_user+0x266d/0x3dc0 [ 504.577825][T11988] ? tun_get_user+0x266d/0x3dc0 [ 504.577835][T11988] tun_get_user+0x2aa3/0x3dc0 [ 504.577848][T11988] ? tun_get_user+0x6fc/0x3dc0 [ 504.577864][T11988] ? aa_file_perm+0x44c/0x1530 [ 504.577876][T11988] ? __pfx_tun_get_user+0x10/0x10 [ 504.577888][T11988] ? __lock_acquire+0x6b6/0x2cf0 [ 504.577899][T11988] ? kstrtoull+0x12f/0x1d0 [ 504.577916][T11988] ? ref_tracker_alloc+0x318/0x460 [ 504.577931][T11988] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 504.577947][T11988] ? tun_get+0x1c/0x2f0 [ 504.577960][T11988] ? tun_get+0x1c/0x2f0 [ 504.577970][T11988] ? tun_get+0x1c/0x2f0 [ 504.577990][T11988] tun_chr_write_iter+0x113/0x200 [ 504.578010][T11988] vfs_write+0x5c9/0xb30 [ 504.578034][T11988] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 504.578052][T11988] ? __pfx_vfs_write+0x10/0x10 [ 504.578080][T11988] ? __fget_files+0x2a/0x420 [ 504.578103][T11988] ksys_write+0x145/0x250 [ 504.578115][T11988] ? exc_page_fault+0x82/0x100 [ 504.578130][T11988] ? __pfx_ksys_write+0x10/0x10 [ 504.578144][T11988] ? __do_fast_syscall_32+0xbe/0x570 [ 504.578156][T11988] __do_fast_syscall_32+0x1f7/0x570 [ 504.578167][T11988] ? rcu_is_watching+0x15/0xb0 [ 504.578178][T11988] ? do_fast_syscall_32+0x34/0x80 [ 504.578190][T11988] do_fast_syscall_32+0x34/0x80 [ 504.578200][T11988] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 504.578212][T11988] RIP: 0023:0xf70dd539 [ 504.578222][T11988] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 504.578231][T11988] RSP: 002b:00000000f54cd520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 504.578242][T11988] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000040 [ 504.578249][T11988] RDX: 000000000000002a RSI: 00000000f7476ff4 RDI: 0000000000000000 [ 504.578255][T11988] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 504.578261][T11988] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 504.578266][T11988] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 504.578281][T11988] [ 504.578494][ T5906] usb 4-1: Product: syz [ 505.029198][ T3098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.030220][ T5906] usb 4-1: Manufacturer: syz [ 505.042704][ T48] usb 5-1: Using ep0 maxpacket: 32 [ 505.048083][ T5906] usb 4-1: SerialNumber: syz [ 505.052952][ T5926] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 505.061345][ T5926] usb 3-1: config 0 has an invalid descriptor of length 108, skipping remainder of the config [ 505.073504][ T48] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 505.081872][ T48] usb 5-1: config 0 has no interface number 0 [ 505.101011][ T5926] usb 3-1: config 0 has no interface number 0 [ 505.107239][ T5926] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 505.119044][ T5926] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 505.130712][ T5926] usb 3-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 505.143925][ T5926] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 505.159257][ T48] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 505.168682][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.177653][ T5926] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 505.187963][ T48] usb 5-1: Product: syz [ 505.192456][ T48] usb 5-1: Manufacturer: syz [ 505.197073][ T48] usb 5-1: SerialNumber: syz [ 505.201773][ T5926] usb 3-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 505.214737][ T5926] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 107, changing to 10 [ 505.227166][ T48] usb 5-1: config 0 descriptor?? [ 505.235379][ T5926] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid maxpacket 25209, setting to 1024 [ 505.246864][ T5926] usb 3-1: config 0 interface 239 has no altsetting 0 [ 505.255432][ T48] smsc95xx v2.0.0 [ 505.262299][ T5926] usb 3-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 505.271596][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.279705][ T5926] usb 3-1: Product: syz [ 505.283946][ T5926] usb 3-1: Manufacturer: syz [ 505.288568][ T5926] usb 3-1: SerialNumber: syz [ 505.298486][ T5926] usb 3-1: config 0 descriptor?? [ 505.304357][T11982] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 505.312335][T11982] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 505.332213][ T5906] usb 4-1: cannot find UAC_HEADER [ 505.376132][ T5906] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 505.397521][ T5906] usb 4-1: USB disconnect, device number 99 [ 505.411154][ T183] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 505.445550][T11172] udevd[11172]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 505.561773][ T5926] usb 3-1: USB disconnect, device number 120 [ 505.568705][T11998] netlink: 'syz.0.1777': attribute type 1 has an invalid length. [ 505.576648][ T5845] Bluetooth: hci5: BCM: Reset failed (-71) [ 505.584515][T11998] netlink: 'syz.0.1777': attribute type 2 has an invalid length. [ 505.612904][ T183] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.623897][ T183] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 505.635104][ T183] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 505.644912][ T183] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 505.653982][ T183] usb 2-1: SerialNumber: syz [ 505.674111][ T183] usb 2-1: 0:2 : does not exist [ 505.691343][ T48] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 505.711197][ T48] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 506.107692][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.474951][T12014] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1783'. [ 506.485872][ T5921] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 506.492106][T12015] pimreg: entered allmulticast mode [ 506.651029][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 506.658618][ T5921] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 506.677183][ T5921] usb 4-1: config 0 has no interface number 0 [ 506.691374][ T5921] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 506.718162][ T5921] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 506.739754][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.749892][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.772549][ T5921] usb 4-1: Product: syz [ 506.782125][ T5921] usb 4-1: Manufacturer: syz [ 506.792974][ T5921] usb 4-1: SerialNumber: syz [ 506.812355][ T5921] usb 4-1: config 0 descriptor?? [ 506.829297][T12008] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 507.059622][T12008] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 507.146165][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.191558][T12009] pimreg: left allmulticast mode [ 507.268844][ T5921] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 507.295666][ T5921] asix 4-1:0.188: probe with driver asix failed with error -32 [ 507.346232][ T48] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -61 [ 507.369817][ T48] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 508.187827][ T183] usb 2-1: USB disconnect, device number 100 [ 508.194126][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.246567][T11225] udevd[11225]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 508.411859][T12030] netlink: zone id is out of range [ 508.421243][T12030] netlink: zone id is out of range [ 508.426522][T12030] netlink: zone id is out of range [ 508.461166][T12030] netlink: zone id is out of range [ 508.467033][T12030] netlink: zone id is out of range [ 508.475879][T12030] netlink: zone id is out of range [ 508.631507][ T5923] usb 5-1: USB disconnect, device number 105 [ 508.878339][T12046] netlink: 'syz.0.1793': attribute type 1 has an invalid length. [ 508.901631][T12046] netlink: 'syz.0.1793': attribute type 2 has an invalid length. [ 509.111356][ T5923] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 509.271077][ T5923] usb 5-1: Using ep0 maxpacket: 8 [ 509.280020][ T183] usb 4-1: USB disconnect, device number 100 [ 509.296380][ T5923] usb 5-1: config 188 has an invalid interface number: 21 but max is 1 [ 509.331963][ T5923] usb 5-1: config 188 has an invalid interface number: 149 but max is 1 [ 509.348066][ T5923] usb 5-1: config 188 has an invalid interface number: 217 but max is 1 [ 509.359993][ T5923] usb 5-1: config 188 contains an unexpected descriptor of type 0x1, skipping [ 509.369254][ T7200] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 509.387711][ T5923] usb 5-1: config 188 has an invalid descriptor of length 195, skipping remainder of the config [ 509.409692][ T5923] usb 5-1: config 188 has 3 interfaces, different from the descriptor's value: 2 [ 509.430136][ T5923] usb 5-1: config 188 has no interface number 0 [ 509.437364][ T5923] usb 5-1: config 188 has no interface number 1 [ 509.443872][ T5923] usb 5-1: config 188 has no interface number 2 [ 509.452632][ T5923] usb 5-1: config 188 interface 149 altsetting 255 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 509.466205][ T5923] usb 5-1: config 188 interface 149 altsetting 255 endpoint 0xE has invalid maxpacket 991, setting to 64 [ 509.478053][ T5923] usb 5-1: config 188 interface 149 altsetting 255 has a duplicate endpoint with address 0xD, skipping [ 509.491025][ T5923] usb 5-1: config 188 interface 149 altsetting 255 has 6 endpoint descriptors, different from the interface descriptor's value: 11 [ 509.508863][ T5923] usb 5-1: too many endpoints for config 188 interface 217 altsetting 199: 112, using maximum allowed: 30 [ 509.520753][ T5923] usb 5-1: config 188 interface 217 altsetting 199 has 0 endpoint descriptors, different from the interface descriptor's value: 112 [ 509.535112][ T7200] usb 2-1: device descriptor read/64, error -71 [ 509.554488][ T5923] usb 5-1: config 188 interface 21 has no altsetting 0 [ 509.568854][ T5923] usb 5-1: config 188 interface 149 has no altsetting 0 [ 509.584532][ T5923] usb 5-1: config 188 interface 217 has no altsetting 0 [ 509.602035][ T5923] usb 5-1: New USB device found, idVendor=0586, idProduct=3416, bcdDevice=7b.30 [ 509.613939][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.630717][ T5923] usb 5-1: Product: syz [ 509.639756][ T5923] usb 5-1: Manufacturer: syz [ 509.649913][ T5923] usb 5-1: SerialNumber: syz [ 509.791352][ T7200] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 509.796739][ T183] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 509.941061][ T7200] usb 2-1: device descriptor read/64, error -71 [ 509.954367][ T5923] usb 5-1: USB disconnect, device number 106 [ 510.071280][ T7200] usb usb2-port1: attempt power cycle [ 510.351086][T12075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.418177][T12075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.432859][ T7200] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 510.461738][ T7200] usb 2-1: device descriptor read/8, error -71 [ 510.484094][ T183] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 510.492512][T12075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.502733][ T183] usb 4-1: can't read configurations, error -71 [ 510.701129][ T7200] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 510.721570][ T7200] usb 2-1: device descriptor read/8, error -71 [ 510.791150][ T48] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 510.831234][ T7200] usb usb2-port1: unable to enumerate USB device [ 510.872421][ T183] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 510.941059][ T48] usb 5-1: Using ep0 maxpacket: 8 [ 510.948065][ T48] usb 5-1: unable to get BOS descriptor or descriptor too short [ 510.957033][ T48] usb 5-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 510.967097][ T48] usb 5-1: config 12 interface 0 has no altsetting 0 [ 510.975736][ T48] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 510.984929][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.993031][ T48] usb 5-1: Product: syz [ 510.997195][ T48] usb 5-1: Manufacturer: syz [ 511.001882][ T5947] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 511.009705][ T48] usb 5-1: SerialNumber: syz [ 511.042847][ T183] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 511.066041][ T183] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 511.078476][ T183] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 511.088122][ T183] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 511.096721][ T183] usb 4-1: SerialNumber: syz [ 511.104776][T12085] netlink: 'syz.0.1807': attribute type 10 has an invalid length. [ 511.161996][ T5947] usb 3-1: Using ep0 maxpacket: 32 [ 511.175581][ T5947] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 511.184118][T12087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.184306][ T5947] usb 3-1: config 0 has no interface number 0 [ 511.199391][T12087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.200719][ T5947] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 511.216094][T12087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.225707][ T5947] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 511.242250][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.248793][ T48] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 511.250313][ T5947] usb 3-1: Product: syz [ 511.261079][T12087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.262735][ T5947] usb 3-1: Manufacturer: syz [ 511.271897][ T48] usb 5-1: selecting invalid altsetting 0 [ 511.277999][ T5947] usb 3-1: SerialNumber: syz [ 511.290380][ T5947] usb 3-1: config 0 descriptor?? [ 511.297058][T12083] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 511.300783][T12087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.320675][ T7200] net_ratelimit: 56 callbacks suppressed [ 511.320694][ T7200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.355414][ T183] usb 4-1: 0:2 : does not exist [ 511.373077][ T48] usb 5-1: USB disconnect, device number 107 [ 511.400855][T12087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.409272][ T183] usb 4-1: USB disconnect, device number 102 [ 511.432467][T11224] udevd[11224]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 511.504143][T11225] udevd[11225]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 511.527337][T12083] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 511.735864][ T5947] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 511.758737][ T5947] asix 3-1:0.188: probe with driver asix failed with error -32 [ 512.009318][T12101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1809'. [ 512.038274][T12101] netlink: 'syz.1.1809': attribute type 13 has an invalid length. [ 512.087761][T12099] can: request_module (can-proto-3) failed. [ 512.364349][ T7200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.513396][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.833526][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.395683][ T7200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.555157][T12124] netlink: zone id is out of range [ 513.577329][T12124] netlink: zone id is out of range [ 513.591655][T12124] netlink: zone id is out of range [ 513.597711][T12124] netlink: zone id is out of range [ 513.613349][T12124] netlink: zone id is out of range [ 513.637638][T12130] FAULT_INJECTION: forcing a failure. [ 513.637638][T12130] name failslab, interval 1, probability 0, space 0, times 0 [ 513.650578][T12130] CPU: 1 UID: 0 PID: 12130 Comm: syz.3.1814 Not tainted syzkaller #0 PREEMPT(full) [ 513.650602][T12130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 513.650611][T12130] Call Trace: [ 513.650619][T12130] [ 513.650626][T12130] dump_stack_lvl+0x189/0x250 [ 513.650651][T12130] ? __pfx____ratelimit+0x10/0x10 [ 513.650675][T12130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 513.650693][T12130] ? __pfx__printk+0x10/0x10 [ 513.650721][T12130] ? __pfx___might_resched+0x10/0x10 [ 513.650743][T12130] should_fail_ex+0x414/0x560 [ 513.650770][T12130] should_failslab+0xa8/0x100 [ 513.650795][T12130] __kmalloc_noprof+0xcb/0x800 [ 513.650816][T12130] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 513.650843][T12130] tomoyo_realpath_from_path+0xe3/0x5d0 [ 513.650864][T12130] ? tomoyo_domain+0xd8/0x130 [ 513.650889][T12130] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 513.650915][T12130] tomoyo_path_number_perm+0x1e8/0x5a0 [ 513.650939][T12130] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 513.650961][T12130] ? __lock_acquire+0x6b6/0x2cf0 [ 513.651008][T12130] ? __fget_files+0x2a/0x420 [ 513.651028][T12130] ? __fget_files+0x3a0/0x420 [ 513.651040][T12130] ? __fget_files+0x2a/0x420 [ 513.651059][T12130] security_file_ioctl_compat+0xcb/0x2d0 [ 513.651086][T12130] __ia32_compat_sys_ioctl+0x128/0x840 [ 513.651110][T12130] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 513.651132][T12130] ? __fget_files+0x3a0/0x420 [ 513.651154][T12130] ? fput+0xa0/0xd0 [ 513.651172][T12130] ? ksys_write+0x22a/0x250 [ 513.651195][T12130] ? __pfx_ksys_write+0x10/0x10 [ 513.651219][T12130] ? __do_fast_syscall_32+0xbe/0x570 [ 513.651242][T12130] __do_fast_syscall_32+0x1f7/0x570 [ 513.651260][T12130] ? rcu_is_watching+0x15/0xb0 [ 513.651277][T12130] ? do_fast_syscall_32+0x34/0x80 [ 513.651301][T12130] do_fast_syscall_32+0x34/0x80 [ 513.651319][T12130] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 513.651339][T12130] RIP: 0023:0xf705d539 [ 513.651355][T12130] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 513.651370][T12130] RSP: 002b:00000000f540b55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 513.651388][T12130] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 000000008070ae9f [ 513.651400][T12130] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 513.651410][T12130] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 513.651421][T12130] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 513.651431][T12130] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 513.651466][T12130] [ 513.915249][T12130] ERROR: Out of memory at tomoyo_realpath_from_path. [ 513.971257][ T5947] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 514.037781][ T5921] usb 3-1: USB disconnect, device number 121 [ 514.132005][ T5947] usb 2-1: Using ep0 maxpacket: 8 [ 514.141385][ T5947] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 514.150791][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.184887][ T5947] usb 2-1: Product: syz [ 514.202467][ T5947] usb 2-1: Manufacturer: syz [ 514.218518][ T5947] usb 2-1: SerialNumber: syz [ 514.256281][ T5947] usb 2-1: config 0 descriptor?? [ 514.295262][T12141] netlink: 'syz.2.1818': attribute type 10 has an invalid length. [ 514.502869][ T5947] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 514.586042][T12144] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1820'. [ 514.941561][ T5921] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 515.101031][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 515.115326][ T5921] usb 3-1: unable to get BOS descriptor or descriptor too short [ 515.131979][ T5921] usb 3-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 515.154848][ T5921] usb 3-1: config 12 interface 0 has no altsetting 0 [ 515.178255][ T5921] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 515.199878][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.225974][ T5921] usb 3-1: Product: syz [ 515.237250][ T5921] usb 3-1: Manufacturer: syz [ 515.252679][ T5921] usb 3-1: SerialNumber: syz [ 515.499528][ T5921] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 515.534149][ T5921] usb 3-1: selecting invalid altsetting 0 [ 515.600497][T12164] FAULT_INJECTION: forcing a failure. [ 515.600497][T12164] name failslab, interval 1, probability 0, space 0, times 0 [ 515.653000][T12164] CPU: 1 UID: 0 PID: 12164 Comm: syz.3.1827 Not tainted syzkaller #0 PREEMPT(full) [ 515.653024][T12164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 515.653035][T12164] Call Trace: [ 515.653043][T12164] [ 515.653052][T12164] dump_stack_lvl+0x189/0x250 [ 515.653075][T12164] ? __pfx____ratelimit+0x10/0x10 [ 515.653099][T12164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 515.653112][T12164] ? __pfx__printk+0x10/0x10 [ 515.653137][T12164] ? __pfx___might_resched+0x10/0x10 [ 515.653153][T12164] ? fs_reclaim_acquire+0x7d/0x100 [ 515.653181][T12164] should_fail_ex+0x414/0x560 [ 515.653208][T12164] should_failslab+0xa8/0x100 [ 515.653225][T12164] __kvmalloc_node_noprof+0x158/0x910 [ 515.653239][T12164] ? trace_kmalloc+0x1f/0xb0 [ 515.653250][T12164] ? io_alloc_cache_init+0x42/0x140 [ 515.653267][T12164] io_alloc_cache_init+0x42/0x140 [ 515.653290][T12164] io_rsrc_cache_init+0x26/0x50 [ 515.653317][T12164] io_ring_ctx_alloc+0x4d9/0xc10 [ 515.653346][T12164] io_uring_create+0x50/0x940 [ 515.653366][T12164] __se_sys_io_uring_setup+0x235/0x240 [ 515.653378][T12164] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 515.653396][T12164] ? __pfx_ksys_write+0x10/0x10 [ 515.653416][T12164] ? __do_fast_syscall_32+0xbe/0x570 [ 515.653435][T12164] __do_fast_syscall_32+0x1f7/0x570 [ 515.653454][T12164] ? rcu_is_watching+0x15/0xb0 [ 515.653472][T12164] ? do_fast_syscall_32+0x34/0x80 [ 515.653494][T12164] do_fast_syscall_32+0x34/0x80 [ 515.653511][T12164] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 515.653524][T12164] RIP: 0023:0xf705d539 [ 515.653534][T12164] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 515.653542][T12164] RSP: 002b:00000000f544d50c EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 515.653554][T12164] RAX: ffffffffffffffda RBX: 0000000000000497 RCX: 00000000800000c0 [ 515.653561][T12164] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 515.653567][T12164] RBP: 0000000080000340 R08: 0000000000000000 R09: 0000000000000000 [ 515.653574][T12164] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 515.653585][T12164] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 515.653611][T12164] [ 515.884273][ C1] vkms_vblank_simulate: vblank timer overrun [ 516.186507][ T5921] usb 3-1: USB disconnect, device number 122 [ 516.382487][ T183] net_ratelimit: 51 callbacks suppressed [ 516.382501][ T183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.397243][ T2921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.406716][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.418422][ T7200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.437818][T12127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1817'. [ 516.460869][T11108] udevd[11108]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 516.506067][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.794871][T12170] netlink: zone id is out of range [ 516.806285][T12170] netlink: zone id is out of range [ 516.811815][T12170] netlink: zone id is out of range [ 516.817765][T12170] netlink: zone id is out of range [ 516.829729][T12170] netlink: zone id is out of range [ 516.951021][ T183] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 517.065613][ T5947] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 517.091421][ T5947] usb 2-1: USB disconnect, device number 105 [ 517.113908][T12175] netlink: 'syz.4.1831': attribute type 10 has an invalid length. [ 517.150991][ T183] usb 4-1: Using ep0 maxpacket: 32 [ 517.163086][ T183] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 517.198093][ T183] usb 4-1: config 0 has no interface number 0 [ 517.214519][ T183] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 517.249278][ T183] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 517.281023][ T183] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.319594][ T183] usb 4-1: Product: syz [ 517.329732][ T183] usb 4-1: Manufacturer: syz [ 517.350026][ T183] usb 4-1: SerialNumber: syz [ 517.372008][ T183] usb 4-1: config 0 descriptor?? [ 517.377864][T12168] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 517.576967][T12185] FAULT_INJECTION: forcing a failure. [ 517.576967][T12185] name failslab, interval 1, probability 0, space 0, times 0 [ 517.591037][T12185] CPU: 0 UID: 0 PID: 12185 Comm: syz.4.1836 Not tainted syzkaller #0 PREEMPT(full) [ 517.591063][T12185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 517.591074][T12185] Call Trace: [ 517.591082][T12185] [ 517.591092][T12185] dump_stack_lvl+0x189/0x250 [ 517.591119][T12185] ? __pfx_dump_stack_lvl+0x10/0x10 [ 517.591137][T12185] ? __pfx__printk+0x10/0x10 [ 517.591168][T12185] should_fail_ex+0x414/0x560 [ 517.591194][T12185] should_failslab+0xa8/0x100 [ 517.591218][T12185] kmem_cache_alloc_noprof+0x74/0x6f0 [ 517.591237][T12185] ? skb_clone+0x212/0x3a0 [ 517.591262][T12185] skb_clone+0x212/0x3a0 [ 517.591281][T12185] __netlink_deliver_tap+0x404/0x850 [ 517.591310][T12185] ? netlink_deliver_tap+0x2e/0x1b0 [ 517.591329][T12185] netlink_deliver_tap+0x19c/0x1b0 [ 517.591348][T12185] netlink_sendskb+0x68/0x140 [ 517.591377][T12185] netlink_unicast+0x397/0x9e0 [ 517.591392][T12185] ? __asan_memcpy+0x40/0x70 [ 517.591416][T12185] ? __pfx_netlink_unicast+0x10/0x10 [ 517.591442][T12185] netlink_rcv_skb+0x28c/0x470 [ 517.591462][T12185] ? __pfx_genl_rcv_msg+0x10/0x10 [ 517.591479][T12185] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 517.591515][T12185] ? down_read+0x274/0x2e0 [ 517.591533][T12185] ? genl_rcv+0xd/0x40 [ 517.591559][T12185] genl_rcv+0x28/0x40 [ 517.591581][T12185] netlink_unicast+0x82f/0x9e0 [ 517.591609][T12185] ? __pfx_netlink_unicast+0x10/0x10 [ 517.591629][T12185] ? netlink_sendmsg+0x642/0xb30 [ 517.591649][T12185] ? skb_put+0x11b/0x210 [ 517.591671][T12185] netlink_sendmsg+0x805/0xb30 [ 517.591703][T12185] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.591727][T12185] ? __import_iovec+0x5d4/0x7f0 [ 517.591743][T12185] ? aa_sock_msg_perm+0xf1/0x1b0 [ 517.591765][T12185] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 517.591787][T12185] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.591810][T12185] __sock_sendmsg+0x21c/0x270 [ 517.591838][T12185] ____sys_sendmsg+0x505/0x820 [ 517.591865][T12185] ? __pfx_____sys_sendmsg+0x10/0x10 [ 517.591891][T12185] ? kstrtouint+0x6e/0xe0 [ 517.591921][T12185] ___sys_sendmsg+0x21f/0x2a0 [ 517.591944][T12185] ? __pfx____sys_sendmsg+0x10/0x10 [ 517.591971][T12185] ? rcu_read_lock_any_held+0xb3/0x120 [ 517.592020][T12185] ? __fget_files+0x2a/0x420 [ 517.592035][T12185] ? __fget_files+0x3a0/0x420 [ 517.592063][T12185] __sys_sendmsg+0x164/0x220 [ 517.592086][T12185] ? __pfx___sys_sendmsg+0x10/0x10 [ 517.592115][T12185] ? __pfx_ksys_write+0x10/0x10 [ 517.592141][T12185] ? __do_fast_syscall_32+0xbe/0x570 [ 517.592164][T12185] __do_fast_syscall_32+0x1f7/0x570 [ 517.592183][T12185] ? rcu_is_watching+0x15/0xb0 [ 517.592201][T12185] ? do_fast_syscall_32+0x34/0x80 [ 517.592224][T12185] do_fast_syscall_32+0x34/0x80 [ 517.592243][T12185] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 517.592262][T12185] RIP: 0023:0xf7fc6539 [ 517.592278][T12185] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 517.592292][T12185] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 517.592309][T12185] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 517.592321][T12185] RDX: 0000000004004050 RSI: 0000000000000000 RDI: 0000000000000000 [ 517.592332][T12185] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 517.592343][T12185] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 517.592354][T12185] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 517.592392][T12185] [ 517.948584][ T5947] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 517.974807][T12168] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 518.111464][ T5947] usb 3-1: Using ep0 maxpacket: 32 [ 518.118540][ T5947] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 518.127300][ T5947] usb 3-1: config 0 has no interface number 0 [ 518.136097][ T5947] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 518.145807][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.154412][ T5947] usb 3-1: Product: syz [ 518.158855][ T5947] usb 3-1: Manufacturer: syz [ 518.164714][ T5947] usb 3-1: SerialNumber: syz [ 518.173995][ T5947] usb 3-1: config 0 descriptor?? [ 518.183665][ T183] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 518.194206][ T183] asix 4-1:0.188: probe with driver asix failed with error -32 [ 518.225540][ T5947] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 518.301265][ T5923] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 518.387617][ T5947] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 518.403082][ T5947] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 518.461012][ T5923] usb 5-1: Using ep0 maxpacket: 8 [ 518.467948][ T5923] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.501821][ T48] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 518.514917][ T5923] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 518.554733][ T5923] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 518.571035][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.579071][ T5923] usb 5-1: Product: syz [ 518.594154][ T5923] usb 5-1: Manufacturer: syz [ 518.598835][ T5923] usb 5-1: SerialNumber: syz [ 518.606603][ T5923] usb 5-1: config 0 descriptor?? [ 518.614704][T12197] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 518.621344][T12197] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 518.636152][T12197] vhci_hcd vhci_hcd.0: Device attached [ 518.648224][T12198] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 518.656249][ T6004] vhci_hcd: stop threads [ 518.660598][ T6004] vhci_hcd: release socket [ 518.665814][ T6004] vhci_hcd: disconnect device [ 518.680965][ T48] usb 2-1: Using ep0 maxpacket: 8 [ 518.688645][ T48] usb 2-1: unable to get BOS descriptor or descriptor too short [ 518.697765][ T48] usb 2-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 518.707703][ T48] usb 2-1: config 12 interface 0 has no altsetting 0 [ 518.717418][ T48] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 518.728497][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.737873][ T48] usb 2-1: Product: syz [ 518.743136][ T48] usb 2-1: Manufacturer: syz [ 518.748006][ T48] usb 2-1: SerialNumber: syz [ 518.863278][T12200] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1833'. [ 518.872720][T12200] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1833'. [ 518.978372][ T48] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 518.988184][ T48] usb 2-1: selecting invalid altsetting 0 [ 519.032845][ T48] usb 2-1: USB disconnect, device number 106 [ 519.082735][ T5923] usb 5-1: USB disconnect, device number 108 [ 519.127968][T11108] udevd[11108]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 519.702518][T12213] tun0: tun_chr_ioctl cmd 1074025675 [ 519.715366][T12213] tun0: persist enabled [ 519.725735][T12213] tun0: tun_chr_ioctl cmd 1074025675 [ 519.737157][ T48] usb 4-1: USB disconnect, device number 103 [ 519.744418][T12213] tun0: persist disabled [ 519.942458][ T5923] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 519.969083][T12217] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 519.982067][T12217] bond5 (unregistering): Released all slaves [ 520.102601][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 520.110543][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.121687][ T7200] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 520.129634][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.141255][ T5923] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 520.176054][ T5923] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 520.202160][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.236675][ T5923] usb 2-1: config 0 descriptor?? [ 520.294041][ T7200] usb 5-1: config 86 has an invalid interface number: 125 but max is 1 [ 520.311391][ T7200] usb 5-1: config 86 has an invalid interface descriptor of length 5, skipping [ 520.321955][ T7200] usb 5-1: config 86 has 1 interface, different from the descriptor's value: 2 [ 520.336203][ T7200] usb 5-1: config 86 has no interface number 0 [ 520.343773][ T7200] usb 5-1: config 86 interface 125 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 520.358365][ T7200] usb 5-1: config 86 interface 125 has no altsetting 0 [ 520.370783][ T7200] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a44, bcdDevice= a.45 [ 520.380496][ T7200] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.389393][ T7200] usb 5-1: Product: 쟣蝖驢趫噑놵秷묮年⧲凉섢肁晒籨膿Ꭵ熡穆밒⬫ର⸣鏗襥ᛤ⛡璺墫攘Ɯ䊝箰쇊㵒 [ 520.408793][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 520.410670][ T5906] usb 3-1: USB disconnect, device number 123 [ 520.435135][ T5906] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 520.450304][ T7200] usb 5-1: Manufacturer: 笌↏밠面㐉贩㨟⧨Ꭳ녢錙텋꫎뵸﹈鎠렊│₷骑㦤㹘뎩⪲ﺊꞄ靴ꍿ㼘랾 [ 520.466322][ T5906] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 520.478286][ T7200] usb 5-1: SerialNumber: 뇩䭕넞붙벻輭Ȃ䓊蜎샄灈엂Ꮅ錅暑웟쓅㌢陋훇鰴谻⾭꧉琔棝굒㮑匷績둴ᨽ═㮺ﾊ [ 520.500683][ T5906] quatech2 3-1:0.51: device disconnected [ 520.670750][ T5923] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.001C/input/input52 [ 520.755045][ T5923] appleir 0003:05AC:8241.001C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 520.811070][ T5926] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 520.831032][ T5906] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 520.897455][ T5923] usb 2-1: USB disconnect, device number 107 [ 520.948647][ T7200] usb 5-1: USB disconnect, device number 109 [ 520.962784][ T5926] usb 4-1: device descriptor read/64, error -71 [ 520.981738][T11604] udevd[11604]: setting owner of /dev/bus/usb/005/109 to uid=0, gid=0 failed: No such file or directory [ 521.003531][ T5906] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.023919][ T5906] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 521.034961][ T5906] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 521.044354][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 521.055946][ T5906] usb 3-1: SerialNumber: syz [ 521.069475][ T5906] usb 3-1: 0:2 : does not exist [ 521.211235][ T5926] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 521.226422][T12237] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1852'. [ 521.351005][ T5926] usb 4-1: device descriptor read/64, error -71 [ 521.463384][ T5926] usb usb4-port1: attempt power cycle [ 521.573350][T12242] net_ratelimit: 1132 callbacks suppressed [ 521.573363][T12242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.605225][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.692643][T12242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.717976][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.730717][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.743379][T12245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.752866][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.761601][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.794445][T12242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.803165][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.811953][ T5926] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 521.831771][ T5926] usb 4-1: device descriptor read/8, error -71 [ 522.071050][ T5926] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 522.092874][ T5926] usb 4-1: device descriptor read/8, error -71 [ 522.105648][ T5947] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 522.114500][T12252] netlink: 'syz.0.1858': attribute type 8 has an invalid length. [ 522.124810][T12252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1858'. [ 522.203931][ T5926] usb usb4-port1: unable to enumerate USB device [ 522.241412][ T7200] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 522.272846][ T5947] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 522.287725][ T5947] usb 2-1: config 0 has no interface number 0 [ 522.295032][ T5947] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.306262][ T5947] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.316621][ T5947] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 522.329990][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.348432][ T5947] usb 2-1: config 0 descriptor?? [ 522.401033][ T7200] usb 5-1: Using ep0 maxpacket: 32 [ 522.408476][ T7200] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 522.417723][ T7200] usb 5-1: config 0 has no interface number 0 [ 522.424039][ T7200] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 522.437751][ T7200] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 522.447580][ T7200] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.456653][ T7200] usb 5-1: Product: syz [ 522.461206][ T7200] usb 5-1: Manufacturer: syz [ 522.465879][ T7200] usb 5-1: SerialNumber: syz [ 522.474478][ T7200] usb 5-1: config 0 descriptor?? [ 522.482031][T12250] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 522.585478][T12248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.596345][T12248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.619084][ T5947] usbhid 2-1:0.1: can't add hid device: -71 [ 522.627635][ T5947] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 522.648682][ T5947] usb 2-1: USB disconnect, device number 108 [ 522.693261][T12250] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 522.903517][ T7200] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 522.914289][ T7200] asix 5-1:0.188: probe with driver asix failed with error -32 [ 523.229783][T12260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.295744][T12260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.392174][T12260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.436480][T12267] tun0: tun_chr_ioctl cmd 1074025675 [ 523.443209][T12267] tun0: persist enabled [ 523.448124][T12267] tun0: tun_chr_ioctl cmd 1074025675 [ 523.454202][T12267] tun0: persist disabled [ 523.460363][T12267] netlink: 'syz.3.1864': attribute type 1 has an invalid length. [ 523.469448][T12267] netlink: 'syz.3.1864': attribute type 2 has an invalid length. [ 523.543163][ T5906] usb 3-1: USB disconnect, device number 124 [ 523.578417][T11225] udevd[11225]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 523.701726][ T9] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 523.831223][ T5947] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 523.861100][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 523.868507][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.882589][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.893596][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 523.907310][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 523.916811][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.928075][ T9] usb 2-1: config 0 descriptor?? [ 523.995399][ T5947] usb 4-1: config 86 has an invalid interface number: 125 but max is 1 [ 524.004069][ T5947] usb 4-1: config 86 has an invalid interface descriptor of length 5, skipping [ 524.014768][ T5947] usb 4-1: config 86 has 1 interface, different from the descriptor's value: 2 [ 524.026737][ T5947] usb 4-1: config 86 has no interface number 0 [ 524.033685][ T5947] usb 4-1: config 86 interface 125 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 524.047441][ T5947] usb 4-1: config 86 interface 125 has no altsetting 0 [ 524.057922][ T5947] usb 4-1: New USB device found, idVendor=0bb4, idProduct=0a44, bcdDevice= a.45 [ 524.067394][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.075969][ T5947] usb 4-1: Product: 쟣蝖驢趫噑놵秷묮年⧲凉섢肁晒籨膿Ꭵ熡穆밒⬫ର⸣鏗襥ᛤ⛡璺墫攘Ɯ䊝箰쇊㵒 [ 524.076032][T12284] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 524.089448][ T5947] usb 4-1: Manufacturer: 笌↏밠面㐉贩㨟⧨Ꭳ녢錙텋꫎뵸﹈鎠렊│₷骑㦤㹘뎩⪲ﺊꞄ靴ꍿ㼘랾 [ 524.095440][T12284] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 524.096890][T12284] vhci_hcd vhci_hcd.0: Device attached [ 524.113104][ T5947] usb 4-1: SerialNumber: 뇩䭕넞붙벻輭Ȃ䓊蜎샄灈엂Ꮅ錅暑웟쓅㌢陋훇鰴谻⾭꧉琔棝굒㮑匷績둴ᨽ═㮺ﾊ [ 524.121048][ T5926] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 524.161224][T12285] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 524.168472][ T2211] vhci_hcd: stop threads [ 524.173182][ T2211] vhci_hcd: release socket [ 524.178056][ T2211] vhci_hcd: disconnect device [ 524.321006][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 524.327905][ T5926] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 524.338897][ T5926] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 524.348127][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.356567][ T5926] usb 3-1: Product: syz [ 524.360846][ T5926] usb 3-1: Manufacturer: syz [ 524.366456][ T5926] usb 3-1: SerialNumber: syz [ 524.376176][ T9] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.001D/input/input53 [ 524.402272][ T5926] usb 3-1: config 0 descriptor?? [ 524.413228][ T5926] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 524.423563][ T5926] usb 3-1: setting power ON [ 524.428105][ T5926] dvb-usb: bulk message failed: -22 (2/0) [ 524.438709][ T5926] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 524.449033][ T5926] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 524.460871][ T5926] usb 3-1: media controller created [ 524.491915][ T9] appleir 0003:05AC:8241.001D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 524.510604][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 524.541733][ T5947] usb 4-1: USB disconnect, device number 108 [ 524.583807][ T7200] usb 2-1: USB disconnect, device number 109 [ 524.615471][ T5926] usb 3-1: selecting invalid altsetting 6 [ 524.616627][T12289] fido_id[12289]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 524.627721][ T5926] usb 3-1: digital interface selection failed (-22) [ 524.649745][ T5926] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 524.659484][ T5926] usb 3-1: setting power OFF [ 524.664636][ T5926] dvb-usb: bulk message failed: -22 (2/0) [ 524.676379][ T5926] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 524.686373][ T5926] (NULL device *): no alternate interface [ 524.748011][ T5926] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 525.007221][ T5947] usb 5-1: USB disconnect, device number 110 [ 525.145386][ T5926] usb 3-1: USB disconnect, device number 125 [ 525.245938][T12299] FAULT_INJECTION: forcing a failure. [ 525.245938][T12299] name failslab, interval 1, probability 0, space 0, times 0 [ 525.270049][T12299] CPU: 1 UID: 0 PID: 12299 Comm: syz.3.1875 Not tainted syzkaller #0 PREEMPT(full) [ 525.270075][T12299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 525.270087][T12299] Call Trace: [ 525.270093][T12299] [ 525.270100][T12299] dump_stack_lvl+0x189/0x250 [ 525.270124][T12299] ? __pfx____ratelimit+0x10/0x10 [ 525.270147][T12299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 525.270165][T12299] ? __pfx__printk+0x10/0x10 [ 525.270192][T12299] ? __pfx___might_resched+0x10/0x10 [ 525.270209][T12299] ? fs_reclaim_acquire+0x7d/0x100 [ 525.270236][T12299] should_fail_ex+0x414/0x560 [ 525.270263][T12299] should_failslab+0xa8/0x100 [ 525.270287][T12299] __kmalloc_noprof+0xcb/0x800 [ 525.270308][T12299] ? tomoyo_encode+0x28b/0x550 [ 525.270333][T12299] tomoyo_encode+0x28b/0x550 [ 525.270357][T12299] tomoyo_realpath_from_path+0x58d/0x5d0 [ 525.270377][T12299] ? tomoyo_domain+0xd8/0x130 [ 525.270397][T12299] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 525.270420][T12299] tomoyo_path_number_perm+0x1e8/0x5a0 [ 525.270447][T12299] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 525.270471][T12299] ? __lock_acquire+0x6b6/0x2cf0 [ 525.270524][T12299] ? __fget_files+0x2a/0x420 [ 525.270545][T12299] ? __fget_files+0x3a0/0x420 [ 525.270560][T12299] ? __fget_files+0x2a/0x420 [ 525.270580][T12299] security_file_ioctl_compat+0xcb/0x2d0 [ 525.270606][T12299] __ia32_compat_sys_ioctl+0x128/0x840 [ 525.270631][T12299] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 525.270652][T12299] ? __fget_files+0x3a0/0x420 [ 525.270675][T12299] ? fput+0xa0/0xd0 [ 525.270693][T12299] ? ksys_write+0x22a/0x250 [ 525.270712][T12299] ? exc_page_fault+0x82/0x100 [ 525.270737][T12299] ? __pfx_ksys_write+0x10/0x10 [ 525.270761][T12299] ? __do_fast_syscall_32+0xbe/0x570 [ 525.270783][T12299] __do_fast_syscall_32+0x1f7/0x570 [ 525.270802][T12299] ? rcu_is_watching+0x15/0xb0 [ 525.270819][T12299] ? do_fast_syscall_32+0x34/0x80 [ 525.270842][T12299] do_fast_syscall_32+0x34/0x80 [ 525.270860][T12299] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 525.270880][T12299] RIP: 0023:0xf705d539 [ 525.270899][T12299] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 525.270912][T12299] RSP: 002b:00000000f544d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 525.270929][T12299] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004080aebf [ 525.270939][T12299] RDX: 00000000800063c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 525.270955][T12299] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 525.270964][T12299] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 525.270973][T12299] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 525.271000][T12299] [ 525.541495][ C1] vkms_vblank_simulate: vblank timer overrun [ 525.561324][ T30] audit: type=1326 audit(1764847708.928:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.2.1877" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 525.585101][T12299] ERROR: Out of memory at tomoyo_realpath_from_path. [ 525.645237][ T30] audit: type=1326 audit(1764847708.978:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.2.1877" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 525.677885][ T30] audit: type=1326 audit(1764847708.978:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.2.1877" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 525.701528][ T24] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 525.738550][ T30] audit: type=1326 audit(1764847708.978:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.2.1877" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 525.793566][ T30] audit: type=1326 audit(1764847708.988:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.2.1877" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 525.817068][ T30] audit: type=1326 audit(1764847708.988:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.2.1877" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 525.839066][ C1] vkms_vblank_simulate: vblank timer overrun [ 525.846050][ T30] audit: type=1326 audit(1764847708.988:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.2.1877" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 525.868161][ C1] vkms_vblank_simulate: vblank timer overrun [ 525.881801][ T30] audit: type=1326 audit(1764847708.988:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.2.1877" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 525.903798][ C1] vkms_vblank_simulate: vblank timer overrun [ 525.911979][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.923172][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 525.933083][ T30] audit: type=1326 audit(1764847708.988:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.2.1877" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 525.955083][ C1] vkms_vblank_simulate: vblank timer overrun [ 525.962414][ T30] audit: type=1326 audit(1764847708.988:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.2.1877" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 525.962890][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 525.984809][ C1] vkms_vblank_simulate: vblank timer overrun [ 526.001200][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 526.009344][ T24] usb 2-1: SerialNumber: syz [ 526.024743][ T24] usb 2-1: 0:2 : does not exist [ 526.041818][ T5947] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 526.172216][ T5947] usb 4-1: device descriptor read/64, error -71 [ 526.261262][T12321] tun0: tun_chr_ioctl cmd 1074025675 [ 526.266649][T12321] tun0: persist enabled [ 526.284455][T12321] tun0: tun_chr_ioctl cmd 1074025675 [ 526.289969][T12321] tun0: persist disabled [ 526.351676][ T9] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 526.421786][ T5947] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 526.500996][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 526.507745][ T9] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 526.525611][ T9] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 526.534898][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.543205][ T9] usb 3-1: Product: syz [ 526.547459][ T9] usb 3-1: Manufacturer: syz [ 526.552222][ T9] usb 3-1: SerialNumber: syz [ 526.560012][ T9] usb 3-1: config 0 descriptor?? [ 526.565422][ T5947] usb 4-1: device descriptor read/64, error -71 [ 526.584647][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 526.593491][ T9] usb 3-1: setting power ON [ 526.598117][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 526.608085][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 526.641597][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 526.650111][ T9] usb 3-1: media controller created [ 526.679204][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 526.688150][ T5947] usb usb4-port1: attempt power cycle [ 526.707667][ T9] usb 3-1: selecting invalid altsetting 6 [ 526.713855][ T9] usb 3-1: digital interface selection failed (-22) [ 526.720613][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 526.729902][ T9] usb 3-1: setting power OFF [ 526.734607][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 526.740343][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 526.750438][ T9] (NULL device *): no alternate interface [ 526.775817][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 526.866702][T12329] netlink: 'syz.0.1886': attribute type 1 has an invalid length. [ 526.875166][T12329] netlink: 'syz.0.1886': attribute type 2 has an invalid length. [ 526.921119][ T5926] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 526.981351][ T48] net_ratelimit: 583 callbacks suppressed [ 526.981369][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.041050][ T5947] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 527.061800][ T5947] usb 4-1: device descriptor read/8, error -71 [ 527.091044][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 527.098164][ T5926] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 527.106746][ T5926] usb 5-1: config 0 has no interface number 0 [ 527.116562][ T5926] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 527.125829][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.134028][ T5926] usb 5-1: Product: syz [ 527.138293][ T5926] usb 5-1: Manufacturer: syz [ 527.143128][ T5926] usb 5-1: SerialNumber: syz [ 527.150529][ T5926] usb 5-1: config 0 descriptor?? [ 527.158824][ T5926] smsc95xx v2.0.0 [ 527.301013][ T5947] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 527.321838][ T5947] usb 4-1: device descriptor read/8, error -71 [ 527.350043][ T5923] usb 3-1: USB disconnect, device number 126 [ 527.431638][ T5947] usb usb4-port1: unable to enumerate USB device [ 527.568300][ T5926] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 527.592079][ T5926] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 527.731396][ T5923] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 527.881034][ T5923] usb 3-1: Using ep0 maxpacket: 8 [ 527.895236][ T5923] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 527.923181][ T5923] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 527.944404][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.969715][ T5923] usb 3-1: Product: syz [ 527.981466][ T5923] usb 3-1: Manufacturer: syz [ 527.992965][ T5923] usb 3-1: SerialNumber: syz [ 528.012532][ T5923] usb 3-1: config 0 descriptor?? [ 528.021364][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.042052][ T5923] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 528.060830][ T5923] usb 3-1: setting power ON [ 528.071650][ T5923] dvb-usb: bulk message failed: -22 (2/0) [ 528.091818][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 528.112138][ T5923] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 528.131669][ T5923] usb 3-1: media controller created [ 528.176883][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 528.216026][ T5923] usb 3-1: selecting invalid altsetting 6 [ 528.232529][ T5923] usb 3-1: digital interface selection failed (-22) [ 528.255211][ T5923] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 528.277630][ T5923] usb 3-1: setting power OFF [ 528.290728][ T5923] dvb-usb: bulk message failed: -22 (2/0) [ 528.307214][ T5923] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 528.347818][ T24] usb 2-1: USB disconnect, device number 110 [ 528.355632][ T5923] (NULL device *): no alternate interface [ 528.420679][T11225] udevd[11225]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 528.486090][ T5923] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 528.555741][T12345] Invalid option length (64407) for dns_resolver key [ 528.665288][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.819584][ T24] usb 3-1: USB disconnect, device number 127 [ 529.061222][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.521016][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 529.646593][ T5926] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -32 [ 529.659579][ T5926] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 529.668164][ T24] usb 3-1: device descriptor read/64, error -71 [ 529.715198][T12369] FAULT_INJECTION: forcing a failure. [ 529.715198][T12369] name failslab, interval 1, probability 0, space 0, times 0 [ 529.733135][T12369] CPU: 1 UID: 0 PID: 12369 Comm: syz.1.1899 Not tainted syzkaller #0 PREEMPT(full) [ 529.733161][T12369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 529.733169][T12369] Call Trace: [ 529.733174][T12369] [ 529.733180][T12369] dump_stack_lvl+0x189/0x250 [ 529.733196][T12369] ? __pfx____ratelimit+0x10/0x10 [ 529.733212][T12369] ? __pfx_dump_stack_lvl+0x10/0x10 [ 529.733223][T12369] ? __pfx__printk+0x10/0x10 [ 529.733237][T12369] ? __pfx___might_resched+0x10/0x10 [ 529.733248][T12369] ? fs_reclaim_acquire+0x7d/0x100 [ 529.733265][T12369] should_fail_ex+0x414/0x560 [ 529.733280][T12369] should_failslab+0xa8/0x100 [ 529.733296][T12369] kmem_cache_alloc_node_noprof+0x77/0x710 [ 529.733309][T12369] ? __alloc_skb+0x255/0x430 [ 529.733319][T12369] ? napi_skb_cache_get+0x4a5/0x780 [ 529.733328][T12369] ? napi_skb_cache_get+0x151/0x780 [ 529.733340][T12369] __alloc_skb+0x255/0x430 [ 529.733351][T12369] ? __pfx___alloc_skb+0x10/0x10 [ 529.733362][T12369] ? netlink_autobind+0xdb/0x300 [ 529.733375][T12369] ? netlink_autobind+0x2c2/0x300 [ 529.733395][T12369] netlink_sendmsg+0x5c6/0xb30 [ 529.733412][T12369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.733425][T12369] ? __import_iovec+0x5d4/0x7f0 [ 529.733434][T12369] ? aa_sock_msg_perm+0xf1/0x1b0 [ 529.733447][T12369] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 529.733461][T12369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.733473][T12369] __sock_sendmsg+0x21c/0x270 [ 529.733490][T12369] ____sys_sendmsg+0x505/0x820 [ 529.733504][T12369] ? __pfx_____sys_sendmsg+0x10/0x10 [ 529.733518][T12369] ? kstrtouint+0x6e/0xe0 [ 529.733540][T12369] ___sys_sendmsg+0x21f/0x2a0 [ 529.733552][T12369] ? __pfx____sys_sendmsg+0x10/0x10 [ 529.733567][T12369] ? rcu_read_lock_any_held+0xb3/0x120 [ 529.733592][T12369] ? __fget_files+0x2a/0x420 [ 529.733602][T12369] ? __fget_files+0x3a0/0x420 [ 529.733616][T12369] __sys_sendmsg+0x164/0x220 [ 529.733628][T12369] ? __pfx___sys_sendmsg+0x10/0x10 [ 529.733646][T12369] ? __pfx_ksys_write+0x10/0x10 [ 529.733661][T12369] ? __do_fast_syscall_32+0xbe/0x570 [ 529.733673][T12369] __do_fast_syscall_32+0x1f7/0x570 [ 529.733684][T12369] ? rcu_is_watching+0x15/0xb0 [ 529.733695][T12369] ? do_fast_syscall_32+0x34/0x80 [ 529.733707][T12369] do_fast_syscall_32+0x34/0x80 [ 529.733718][T12369] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 529.733730][T12369] RIP: 0023:0xf701d539 [ 529.733739][T12369] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 529.733748][T12369] RSP: 002b:00000000f540d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 529.733759][T12369] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 529.733770][T12369] RDX: 0000000000008042 RSI: 0000000000000000 RDI: 0000000000000000 [ 529.733776][T12369] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 529.733782][T12369] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 529.733788][T12369] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 529.733802][T12369] [ 530.102471][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.171025][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 530.321053][ T24] usb 3-1: device descriptor read/64, error -71 [ 530.403496][T12377] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1903'. [ 530.431221][ T24] usb usb3-port1: attempt power cycle [ 530.482676][ T5947] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 530.620987][ T5947] usb 2-1: device descriptor read/64, error -71 [ 530.675871][ T9] usb 5-1: USB disconnect, device number 111 [ 530.791010][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 530.833237][ T24] usb 3-1: device descriptor read/8, error -71 [ 530.901165][ T5947] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 530.955601][T12392] geneve2: entered promiscuous mode [ 530.973239][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.041017][ T5947] usb 2-1: device descriptor read/64, error -71 [ 531.091064][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 531.111629][ T24] usb 3-1: device descriptor read/8, error -71 [ 531.142085][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.153879][ T5947] usb usb2-port1: attempt power cycle [ 531.211402][T12395] netlink: zone id is out of range [ 531.222486][T12395] netlink: zone id is out of range [ 531.231804][ T24] usb usb3-port1: unable to enumerate USB device [ 531.243433][T12395] netlink: zone id is out of range [ 531.522773][ T5947] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 531.571749][ T5947] usb 2-1: device descriptor read/8, error -71 [ 531.735032][T12409] FAULT_INJECTION: forcing a failure. [ 531.735032][T12409] name failslab, interval 1, probability 0, space 0, times 0 [ 531.750583][T12409] CPU: 1 UID: 0 PID: 12409 Comm: syz.0.1914 Not tainted syzkaller #0 PREEMPT(full) [ 531.750607][T12409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 531.750616][T12409] Call Trace: [ 531.750623][T12409] [ 531.750630][T12409] dump_stack_lvl+0x189/0x250 [ 531.750654][T12409] ? __pfx____ratelimit+0x10/0x10 [ 531.750672][T12409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 531.750683][T12409] ? __pfx__printk+0x10/0x10 [ 531.750697][T12409] ? __pfx___might_resched+0x10/0x10 [ 531.750708][T12409] ? fs_reclaim_acquire+0x7d/0x100 [ 531.750724][T12409] should_fail_ex+0x414/0x560 [ 531.750740][T12409] should_failslab+0xa8/0x100 [ 531.750756][T12409] kmem_cache_alloc_node_noprof+0x77/0x710 [ 531.750770][T12409] ? __alloc_skb+0x255/0x430 [ 531.750780][T12409] ? napi_skb_cache_get+0x4a5/0x780 [ 531.750789][T12409] ? napi_skb_cache_get+0x151/0x780 [ 531.750801][T12409] __alloc_skb+0x255/0x430 [ 531.750812][T12409] ? __pfx___alloc_skb+0x10/0x10 [ 531.750823][T12409] ? netlink_autobind+0xdb/0x300 [ 531.750835][T12409] ? netlink_autobind+0x2c2/0x300 [ 531.750850][T12409] netlink_sendmsg+0x5c6/0xb30 [ 531.750867][T12409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.750885][T12409] ? __import_iovec+0x5d4/0x7f0 [ 531.750898][T12409] ? aa_sock_msg_perm+0xf1/0x1b0 [ 531.750916][T12409] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 531.750936][T12409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.750956][T12409] __sock_sendmsg+0x21c/0x270 [ 531.750980][T12409] ____sys_sendmsg+0x505/0x820 [ 531.751003][T12409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 531.751028][T12409] ? kstrtouint+0x6e/0xe0 [ 531.751056][T12409] ___sys_sendmsg+0x21f/0x2a0 [ 531.751078][T12409] ? __pfx____sys_sendmsg+0x10/0x10 [ 531.751104][T12409] ? rcu_read_lock_any_held+0xb3/0x120 [ 531.751147][T12409] ? __fget_files+0x2a/0x420 [ 531.751161][T12409] ? __fget_files+0x3a0/0x420 [ 531.751184][T12409] __sys_sendmsg+0x164/0x220 [ 531.751205][T12409] ? __pfx___sys_sendmsg+0x10/0x10 [ 531.751222][T12409] ? __pfx_ksys_write+0x10/0x10 [ 531.751237][T12409] ? __do_fast_syscall_32+0xbe/0x570 [ 531.751250][T12409] __do_fast_syscall_32+0x1f7/0x570 [ 531.751261][T12409] ? rcu_is_watching+0x15/0xb0 [ 531.751271][T12409] ? do_fast_syscall_32+0x34/0x80 [ 531.751283][T12409] do_fast_syscall_32+0x34/0x80 [ 531.751293][T12409] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 531.751305][T12409] RIP: 0023:0xf70dd539 [ 531.751315][T12409] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 531.751327][T12409] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 531.751339][T12409] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 531.751346][T12409] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 531.751351][T12409] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 531.751357][T12409] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 531.751362][T12409] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 531.751377][T12409] [ 531.811274][ T5947] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 532.081767][ T5947] usb 2-1: device descriptor read/8, error -71 [ 532.181264][ T5923] net_ratelimit: 53 callbacks suppressed [ 532.181284][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.201710][ T5947] usb usb2-port1: unable to enumerate USB device [ 532.249059][T12420] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1917'. [ 532.272880][T12420] openvswitch: netlink: Flow key attr not present in new flow. [ 532.352747][ T183] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 532.540965][ T183] usb 4-1: Using ep0 maxpacket: 32 [ 532.554205][ T183] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 532.566811][ T183] usb 4-1: config 0 has no interface number 0 [ 532.601709][ T183] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 532.612368][ T183] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.620628][ T183] usb 4-1: Product: syz [ 532.625204][ T183] usb 4-1: Manufacturer: syz [ 532.630121][ T183] usb 4-1: SerialNumber: syz [ 532.673897][ T183] usb 4-1: config 0 descriptor?? [ 532.715763][ T183] smsc95xx v2.0.0 [ 533.112765][ T183] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 533.128063][ T183] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 533.148795][T12428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1920'. [ 533.186510][T12428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1920'. [ 533.206788][T12428] futex_wake_op: syz.4.1920 tries to shift op by -1; fix this program [ 533.221458][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.351065][T12432] netlink: zone id is out of range [ 533.356367][T12432] netlink: zone id is out of range [ 533.362082][T12432] netlink: zone id is out of range [ 533.367431][T12432] netlink: zone id is out of range [ 533.373211][T12432] netlink: zone id is out of range [ 533.379582][T12432] netlink: zone id is out of range [ 533.385654][T12432] netlink: zone id is out of range [ 534.576124][T12453] FAULT_INJECTION: forcing a failure. [ 534.576124][T12453] name failslab, interval 1, probability 0, space 0, times 0 [ 534.589151][T12453] CPU: 0 UID: 0 PID: 12453 Comm: syz.1.1929 Not tainted syzkaller #0 PREEMPT(full) [ 534.589173][T12453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 534.589181][T12453] Call Trace: [ 534.589187][T12453] [ 534.589193][T12453] dump_stack_lvl+0x189/0x250 [ 534.589210][T12453] ? __pfx____ratelimit+0x10/0x10 [ 534.589226][T12453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 534.589240][T12453] ? __pfx__printk+0x10/0x10 [ 534.589256][T12453] ? __pfx___might_resched+0x10/0x10 [ 534.589266][T12453] ? fs_reclaim_acquire+0x7d/0x100 [ 534.589282][T12453] should_fail_ex+0x414/0x560 [ 534.589298][T12453] should_failslab+0xa8/0x100 [ 534.589313][T12453] __kmalloc_noprof+0xcb/0x800 [ 534.589327][T12453] ? sock_kmalloc+0xd6/0x160 [ 534.589338][T12453] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 534.589356][T12453] sock_kmalloc+0xd6/0x160 [ 534.589370][T12453] hash_sendmsg+0x666/0x11d0 [ 534.589391][T12453] ? __pfx_hash_sendmsg+0x10/0x10 [ 534.589400][T12453] __sock_sendmsg+0x21c/0x270 [ 534.589417][T12453] ____sys_sendmsg+0x505/0x820 [ 534.589431][T12453] ? __pfx_____sys_sendmsg+0x10/0x10 [ 534.589445][T12453] ? kstrtouint+0x6e/0xe0 [ 534.589463][T12453] ___sys_sendmsg+0x21f/0x2a0 [ 534.589476][T12453] ? __pfx____sys_sendmsg+0x10/0x10 [ 534.589491][T12453] ? rcu_read_lock_any_held+0xb3/0x120 [ 534.589521][T12453] ? __fget_files+0x2a/0x420 [ 534.589536][T12453] ? __fget_files+0x3a0/0x420 [ 534.589558][T12453] __sys_sendmsg+0x164/0x220 [ 534.589575][T12453] ? __pfx___sys_sendmsg+0x10/0x10 [ 534.589590][T12453] ? __pfx_ksys_write+0x10/0x10 [ 534.589605][T12453] ? __do_fast_syscall_32+0xbe/0x570 [ 534.589618][T12453] __do_fast_syscall_32+0x1f7/0x570 [ 534.589629][T12453] ? rcu_is_watching+0x15/0xb0 [ 534.589639][T12453] ? do_fast_syscall_32+0x34/0x80 [ 534.589651][T12453] do_fast_syscall_32+0x34/0x80 [ 534.589661][T12453] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 534.589673][T12453] RIP: 0023:0xf701d539 [ 534.589684][T12453] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 534.589692][T12453] RSP: 002b:00000000f540d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 534.589703][T12453] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800001c0 [ 534.589710][T12453] RDX: 000000000000f400 RSI: 0000000000000000 RDI: 0000000000000000 [ 534.589716][T12453] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 534.589722][T12453] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 534.589728][T12453] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 534.589743][T12453] [ 535.135979][T12461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1933'. [ 535.162279][T12461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1933'. [ 535.174055][T12461] futex_wake_op: syz.1.1933 tries to shift op by -1; fix this program [ 535.221287][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 535.269359][ T183] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -32 [ 535.281690][ T183] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 535.351529][ T9] usb 3-1: device descriptor read/64, error -71 [ 535.591241][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 535.631028][ T48] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 535.731359][ T9] usb 3-1: device descriptor read/64, error -71 [ 535.841704][ T9] usb usb3-port1: attempt power cycle [ 536.100046][T12470] fuse: Unknown parameter '蕰G' [ 536.181658][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 536.212395][ T9] usb 3-1: device descriptor read/8, error -71 [ 536.305012][ T48] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 536.327673][ T48] usb 2-1: can't read configurations, error -71 [ 536.345452][ T5923] usb 4-1: USB disconnect, device number 113 [ 536.461569][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 536.482837][ T9] usb 3-1: device descriptor read/8, error -71 [ 536.537275][T12476] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1937'. [ 536.584473][T12477] pimreg: entered allmulticast mode [ 536.593705][ T9] usb usb3-port1: unable to enumerate USB device [ 536.604089][T12477] fuse: Unknown parameter '蕰G' [ 537.295849][T12471] pimreg: left allmulticast mode [ 537.381714][ T5923] net_ratelimit: 52 callbacks suppressed [ 537.381729][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.574276][T12487] FAULT_INJECTION: forcing a failure. [ 537.574276][T12487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.587729][T12487] CPU: 1 UID: 0 PID: 12487 Comm: syz.3.1940 Not tainted syzkaller #0 PREEMPT(full) [ 537.587756][T12487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 537.587769][T12487] Call Trace: [ 537.587778][T12487] [ 537.587788][T12487] dump_stack_lvl+0x189/0x250 [ 537.587814][T12487] ? __pfx____ratelimit+0x10/0x10 [ 537.587843][T12487] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.587865][T12487] ? __pfx__printk+0x10/0x10 [ 537.587893][T12487] ? __might_fault+0xb0/0x130 [ 537.587932][T12487] should_fail_ex+0x414/0x560 [ 537.587948][T12487] _copy_from_iter+0x1cd/0x1630 [ 537.587969][T12487] ? __pfx__copy_from_iter+0x10/0x10 [ 537.587983][T12487] ? rcu_is_watching+0x15/0xb0 [ 537.587995][T12487] ? trace_kmalloc+0x1f/0xb0 [ 537.588007][T12487] ? __kvmalloc_node_noprof+0x5e9/0x910 [ 537.588021][T12487] ? proc_sys_call_handler+0x3cf/0x700 [ 537.588034][T12487] proc_sys_call_handler+0x423/0x700 [ 537.588046][T12487] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 537.588061][T12487] do_iter_readv_writev+0x623/0x8c0 [ 537.588078][T12487] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 537.588090][T12487] ? rcu_read_lock_any_held+0xb3/0x120 [ 537.588112][T12487] vfs_writev+0x31a/0x960 [ 537.588120][T12487] ? vfs_write+0x956/0xb30 [ 537.588136][T12487] ? __pfx_vfs_writev+0x10/0x10 [ 537.588153][T12487] ? __fget_files+0x2a/0x420 [ 537.588167][T12487] ? __fget_files+0x3a0/0x420 [ 537.588177][T12487] ? __fget_files+0x2a/0x420 [ 537.588191][T12487] do_writev+0x14d/0x2d0 [ 537.588201][T12487] ? __pfx_do_writev+0x10/0x10 [ 537.588212][T12487] ? __do_fast_syscall_32+0xbe/0x570 [ 537.588225][T12487] __do_fast_syscall_32+0x1f7/0x570 [ 537.588235][T12487] ? rcu_is_watching+0x15/0xb0 [ 537.588245][T12487] ? do_fast_syscall_32+0x34/0x80 [ 537.588258][T12487] do_fast_syscall_32+0x34/0x80 [ 537.588268][T12487] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 537.588280][T12487] RIP: 0023:0xf705d539 [ 537.588291][T12487] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 537.588300][T12487] RSP: 002b:00000000f544d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 537.588312][T12487] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800000c0 [ 537.588319][T12487] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 537.588328][T12487] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 537.588333][T12487] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 537.588339][T12487] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 537.588355][T12487] [ 537.878853][T12488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1939'. [ 537.965420][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.267833][T12502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1944'. [ 538.341921][T12502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1944'. [ 538.364902][T12502] futex_wake_op: syz.0.1944 tries to shift op by -1; fix this program [ 538.424244][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.884243][T12521] FAULT_INJECTION: forcing a failure. [ 538.884243][T12521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 538.898882][T12521] CPU: 0 UID: 0 PID: 12521 Comm: syz.2.1950 Not tainted syzkaller #0 PREEMPT(full) [ 538.898907][T12521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 538.898918][T12521] Call Trace: [ 538.898925][T12521] [ 538.898933][T12521] dump_stack_lvl+0x189/0x250 [ 538.898954][T12521] ? __pfx____ratelimit+0x10/0x10 [ 538.898975][T12521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 538.898989][T12521] ? __pfx__printk+0x10/0x10 [ 538.899020][T12521] should_fail_ex+0x414/0x560 [ 538.899046][T12521] _copy_to_user+0x31/0xb0 [ 538.899064][T12521] simple_read_from_buffer+0xe1/0x170 [ 538.899093][T12521] proc_fail_nth_read+0x1b3/0x220 [ 538.899114][T12521] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 538.899150][T12521] ? rw_verify_area+0x2a6/0x4d0 [ 538.899170][T12521] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 538.899192][T12521] vfs_read+0x200/0xa30 [ 538.899212][T12521] ? fdget_pos+0x247/0x320 [ 538.899233][T12521] ? __pfx___mutex_lock+0x10/0x10 [ 538.899250][T12521] ? __pfx_vfs_read+0x10/0x10 [ 538.899268][T12521] ? __fget_files+0x2a/0x420 [ 538.899288][T12521] ? __fget_files+0x3a0/0x420 [ 538.899301][T12521] ? __fget_files+0x2a/0x420 [ 538.899323][T12521] ksys_read+0x145/0x250 [ 538.899339][T12521] ? __pfx_ksys_read+0x10/0x10 [ 538.899353][T12521] ? __do_fast_syscall_32+0xbe/0x570 [ 538.899366][T12521] __do_fast_syscall_32+0x1f7/0x570 [ 538.899376][T12521] ? rcu_is_watching+0x15/0xb0 [ 538.899387][T12521] ? do_fast_syscall_32+0x34/0x80 [ 538.899400][T12521] do_fast_syscall_32+0x34/0x80 [ 538.899410][T12521] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 538.899422][T12521] RIP: 0023:0xf709d539 [ 538.899432][T12521] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 538.899441][T12521] RSP: 002b:00000000f548d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 538.899453][T12521] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f548d620 [ 538.899460][T12521] RDX: 000000000000000f RSI: 00000000f7436ff4 RDI: 0000000000000000 [ 538.899466][T12521] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 538.899472][T12521] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 538.899477][T12521] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 538.899492][T12521] [ 538.899584][T12519] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1949'. [ 538.961129][ T24] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 539.320988][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 539.333645][ T24] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 539.343363][ T24] usb 5-1: config 0 has no interface number 0 [ 539.356552][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 539.365960][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.374828][ T24] usb 5-1: Product: syz [ 539.379184][ T24] usb 5-1: Manufacturer: syz [ 539.384954][ T24] usb 5-1: SerialNumber: syz [ 539.400456][ T24] usb 5-1: config 0 descriptor?? [ 539.411983][ T24] smsc95xx v2.0.0 [ 539.464439][T12532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1955'. [ 539.467289][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.486234][T12532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1955'. [ 539.499394][T12532] futex_wake_op: syz.2.1955 tries to shift op by -1; fix this program [ 539.551750][ T183] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 539.707264][ T183] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 539.718729][ T183] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 539.729759][ T183] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 539.739474][ T183] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 539.748519][ T183] usb 4-1: SerialNumber: syz [ 539.767095][ T183] usb 4-1: 0:2 : does not exist [ 539.812612][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 539.840938][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 539.925688][T12545] fuse: Bad value for 'fd' [ 540.510452][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.811157][ T48] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 540.898317][T12556] FAULT_INJECTION: forcing a failure. [ 540.898317][T12556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.912996][T12556] CPU: 1 UID: 0 PID: 12556 Comm: syz.1.1963 Not tainted syzkaller #0 PREEMPT(full) [ 540.913021][T12556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 540.913034][T12556] Call Trace: [ 540.913041][T12556] [ 540.913049][T12556] dump_stack_lvl+0x189/0x250 [ 540.913074][T12556] ? __pfx____ratelimit+0x10/0x10 [ 540.913097][T12556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 540.913115][T12556] ? __pfx__printk+0x10/0x10 [ 540.913149][T12556] should_fail_ex+0x414/0x560 [ 540.913174][T12556] _copy_to_user+0x31/0xb0 [ 540.913193][T12556] simple_read_from_buffer+0xe1/0x170 [ 540.913222][T12556] proc_fail_nth_read+0x1b3/0x220 [ 540.913245][T12556] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 540.913269][T12556] ? rw_verify_area+0x2a6/0x4d0 [ 540.913288][T12556] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 540.913311][T12556] vfs_read+0x200/0xa30 [ 540.913329][T12556] ? fdget_pos+0x247/0x320 [ 540.913350][T12556] ? __pfx___mutex_lock+0x10/0x10 [ 540.913367][T12556] ? __pfx_vfs_read+0x10/0x10 [ 540.913390][T12556] ? __fget_files+0x2a/0x420 [ 540.913410][T12556] ? __fget_files+0x3a0/0x420 [ 540.913425][T12556] ? __fget_files+0x2a/0x420 [ 540.913449][T12556] ksys_read+0x145/0x250 [ 540.913468][T12556] ? exc_page_fault+0x82/0x100 [ 540.913493][T12556] ? __pfx_ksys_read+0x10/0x10 [ 540.913513][T12556] ? __secure_computing+0xe2/0x2a0 [ 540.913544][T12556] __do_fast_syscall_32+0x1f7/0x570 [ 540.913564][T12556] ? rcu_is_watching+0x15/0xb0 [ 540.913583][T12556] ? do_fast_syscall_32+0x34/0x80 [ 540.913605][T12556] do_fast_syscall_32+0x34/0x80 [ 540.913623][T12556] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 540.913641][T12556] RIP: 0023:0xf701d539 [ 540.913657][T12556] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 540.913673][T12556] RSP: 002b:00000000f540d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 540.913691][T12556] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f540d620 [ 540.913704][T12556] RDX: 000000000000000f RSI: 00000000f73b6ff4 RDI: 0000000000000000 [ 540.913715][T12556] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 540.913725][T12556] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 540.913735][T12556] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 540.913762][T12556] [ 540.958537][T12558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1965'. [ 540.991137][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 540.993809][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.024144][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.070533][T12558] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1965'. [ 541.079114][T12560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1966'. [ 541.220727][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.230857][ T48] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 541.240161][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.240172][T12563] futex_wake_op: syz.1.1966 tries to shift op by -1; fix this program [ 541.261262][ T48] usb 3-1: config 0 descriptor?? [ 541.301734][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.546257][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.557195][T12569] sg_write: data in/out 197376/2 bytes for SCSI command 0x8-- guessing data in; [ 541.557195][T12569] program syz.1.1968 not setting count and/or reply_len properly [ 541.681161][ T48] ft260 0003:0403:6030.001E: unknown main item tag 0x7 [ 541.831579][ T5947] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 541.874867][ T48] ft260 0003:0403:6030.001E: chip code: 0000 0000 [ 541.889498][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -32 [ 541.900728][ T24] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 541.981474][ T5947] usb 2-1: Using ep0 maxpacket: 16 [ 541.991628][ T5947] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 542.000708][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 542.009874][ T5947] usb 2-1: Product: syz [ 542.014631][ T5947] usb 2-1: Manufacturer: syz [ 542.019277][ T5947] usb 2-1: SerialNumber: syz [ 542.028013][ T5947] usb 2-1: config 0 descriptor?? [ 542.076627][ T48] ft260 0003:0403:6030.001E: failed to retrieve system status [ 542.090355][ T48] ft260 0003:0403:6030.001E: probe with driver ft260 failed with error -71 [ 542.108378][ T48] usb 3-1: USB disconnect, device number 10 [ 542.387151][ T183] usb 4-1: USB disconnect, device number 114 [ 542.438947][T11225] udevd[11225]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 542.455832][T12575] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 542.462374][T12575] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 542.471625][T12575] vhci_hcd vhci_hcd.0: Device attached [ 542.480233][T12576] usbip_core: unknown command [ 542.485951][T12576] vhci_hcd: unknown pdu 0 [ 542.490504][T12576] usbip_core: unknown command [ 542.496078][ T69] vhci_hcd: stop threads [ 542.500368][ T69] vhci_hcd: release socket [ 542.505452][ T69] vhci_hcd: disconnect device [ 542.585922][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.761234][ T183] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 542.911311][ T183] usb 4-1: Using ep0 maxpacket: 16 [ 542.918301][ T183] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.930122][ T183] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.941589][ T183] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 542.948290][ T24] usb 5-1: USB disconnect, device number 112 [ 542.955514][ T183] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 542.972311][ T183] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.988791][ T183] usb 4-1: config 0 descriptor?? [ 543.188203][T12591] netlink: 'syz.4.1976': attribute type 1 has an invalid length. [ 543.220298][T12591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.243932][T12591] bond0: (slave gretap1): making interface the new active one [ 543.252742][T12591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.261937][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.270653][T12591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.279053][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.288675][T12591] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 543.331723][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.340453][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.432935][ T183] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.001F/input/input54 [ 543.458000][T12596] __nla_validate_parse: 2 callbacks suppressed [ 543.458019][T12596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1978'. [ 543.498309][T12596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1978'. [ 543.508743][T12596] futex_wake_op: syz.4.1978 tries to shift op by -1; fix this program [ 543.551992][ T183] appleir 0003:05AC:8241.001F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 543.643453][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.652897][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.661333][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.681754][T12600] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1979'. [ 543.749248][ T183] usb 4-1: USB disconnect, device number 115 [ 543.802621][T12607] FAULT_INJECTION: forcing a failure. [ 543.802621][T12607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.816988][T12607] CPU: 1 UID: 0 PID: 12607 Comm: syz.0.1981 Not tainted syzkaller #0 PREEMPT(full) [ 543.817013][T12607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 543.817023][T12607] Call Trace: [ 543.817031][T12607] [ 543.817039][T12607] dump_stack_lvl+0x189/0x250 [ 543.817064][T12607] ? __pfx____ratelimit+0x10/0x10 [ 543.817087][T12607] ? __pfx_dump_stack_lvl+0x10/0x10 [ 543.817105][T12607] ? __pfx__printk+0x10/0x10 [ 543.817138][T12607] should_fail_ex+0x414/0x560 [ 543.817163][T12607] _copy_to_user+0x31/0xb0 [ 543.817182][T12607] simple_read_from_buffer+0xe1/0x170 [ 543.817211][T12607] proc_fail_nth_read+0x1b3/0x220 [ 543.817235][T12607] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 543.817260][T12607] ? rw_verify_area+0x2a6/0x4d0 [ 543.817278][T12607] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 543.817300][T12607] vfs_read+0x200/0xa30 [ 543.817320][T12607] ? fdget_pos+0x247/0x320 [ 543.817339][T12607] ? __pfx___mutex_lock+0x10/0x10 [ 543.817355][T12607] ? __pfx_vfs_read+0x10/0x10 [ 543.817374][T12607] ? __fget_files+0x2a/0x420 [ 543.817470][T12607] ? __fget_files+0x3a0/0x420 [ 543.817485][T12607] ? __fget_files+0x2a/0x420 [ 543.817507][T12607] ksys_read+0x145/0x250 [ 543.817529][T12607] ? __pfx_ksys_read+0x10/0x10 [ 543.817553][T12607] ? __do_fast_syscall_32+0xbe/0x570 [ 543.817573][T12607] __do_fast_syscall_32+0x1f7/0x570 [ 543.817591][T12607] ? rcu_is_watching+0x15/0xb0 [ 543.817609][T12607] ? do_fast_syscall_32+0x34/0x80 [ 543.817629][T12607] do_fast_syscall_32+0x34/0x80 [ 543.817646][T12607] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 543.817664][T12607] RIP: 0023:0xf70dd539 [ 543.817678][T12607] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 543.817692][T12607] RSP: 002b:00000000f54cd590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 543.817709][T12607] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54cd620 [ 543.817720][T12607] RDX: 000000000000000f RSI: 00000000f7476ff4 RDI: 0000000000000000 [ 543.817730][T12607] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 543.817741][T12607] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 543.817752][T12607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 543.817777][T12607] [ 544.048327][ C1] vkms_vblank_simulate: vblank timer overrun [ 544.311227][ T183] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 544.423734][T12613] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 544.430269][T12613] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 544.438325][T12613] vhci_hcd vhci_hcd.0: Device attached [ 544.461378][ T183] usb 5-1: Using ep0 maxpacket: 32 [ 544.469002][ T183] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.481593][ T183] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.493954][ T183] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 544.504923][ T183] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.516481][ T183] usb 5-1: config 0 descriptor?? [ 544.564949][ T48] usb 2-1: USB disconnect, device number 117 [ 544.671000][ T5926] usb 37-1: new low-speed USB device number 8 using vhci_hcd [ 544.680991][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 544.719967][T12621] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1987'. [ 544.891130][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 544.896991][ T24] usb 3-1: too many configurations: 60, using maximum allowed: 8 [ 544.929898][ T24] usb 3-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 544.940574][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 544.949274][ T24] usb 3-1: Product: syz [ 544.955005][ T24] usb 3-1: Manufacturer: syz [ 544.960053][ T24] usb 3-1: SerialNumber: syz [ 544.969312][ T183] ft260 0003:0403:6030.0020: unknown main item tag 0x7 [ 544.979751][ T24] usb 3-1: config 0 descriptor?? [ 544.995497][ T24] pwc: Philips SPC 880NC USB webcam detected. [ 545.156995][ T183] ft260 0003:0403:6030.0020: chip code: 0000 0000 [ 545.193556][T12613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.216339][T12613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.239624][T12614] usbip_core: unknown command [ 545.251539][ T24] pwc: Warning: more than 1 configuration available. [ 545.259721][T12614] vhci_hcd: unknown pdu 0 [ 545.265576][T12614] usbip_core: unknown command [ 545.270649][ T24] pwc: Failed to set LED on/off time (-71) [ 545.278306][ T12] vhci_hcd: stop threads [ 545.284663][ T24] pwc: send_video_command error -71 [ 545.290036][ T12] vhci_hcd: release socket [ 545.299773][ T24] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 545.310696][ T12] vhci_hcd: disconnect device [ 545.329407][ T24] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 545.357523][ T183] ft260 0003:0403:6030.0020: failed to retrieve system status [ 545.371908][ T24] usb 3-1: USB disconnect, device number 11 [ 545.403916][ T183] ft260 0003:0403:6030.0020: probe with driver ft260 failed with error -71 [ 545.439572][T12629] team0: Port device ip6gre0 removed [ 545.465171][ T183] usb 5-1: USB disconnect, device number 113 [ 545.481627][T12629] bond0: (slave team0): Releasing backup interface [ 545.501731][ T48] skbuff: skb_under_panic: text:ffffffff8a180258 len:116 put:40 head:ffff8880576be000 data:ffff8880576bdfe8 tail:0x5c end:0x6c0 dev:bond0 [ 545.535862][ T48] ------------[ cut here ]------------ [ 545.541525][ T48] kernel BUG at net/core/skbuff.c:213! [ 545.560028][ T48] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 545.566306][ T48] CPU: 1 UID: 0 PID: 48 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 545.575521][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 545.585589][ T48] Workqueue: mld mld_ifc_work [ 545.590287][ T48] RIP: 0010:skb_panic+0x157/0x160 [ 545.595333][ T48] Code: c7 20 6b 6e 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 6e 94 f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 545.615527][ T48] RSP: 0000:ffffc90000b972c0 EFLAGS: 00010286 [ 545.621588][ T48] RAX: 0000000000000087 RBX: dffffc0000000000 RCX: 0d721126c81ea800 [ 545.629553][ T48] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 545.637508][ T48] RBP: 00000000000006c0 R08: ffffc90000b96fc7 R09: 1ffff92000172df8 [ 545.645470][ T48] R10: dffffc0000000000 R11: fffff52000172df9 R12: ffff88804c5c0790 [ 545.653430][ T48] R13: ffff8880576be000 R14: ffff8880576bdfe8 R15: 000000000000005c [ 545.661390][ T48] FS: 0000000000000000(0000) GS:ffff8881261a6000(0000) knlGS:0000000000000000 [ 545.670313][ T48] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 545.676897][ T48] CR2: 0000000031814ffc CR3: 000000002f3ce000 CR4: 00000000003526f0 [ 545.684866][ T48] Call Trace: [ 545.688139][ T48] [ 545.691063][ T48] ? ip6gre_header+0xc8/0x790 [ 545.695743][ T48] ? ip6gre_header+0xc8/0x790 [ 545.700406][ T48] skb_push+0xc3/0xe0 [ 545.704376][ T48] ip6gre_header+0xc8/0x790 [ 545.708868][ T48] ? __pfx_ip6gre_header+0x10/0x10 [ 545.713963][ T48] ? read_seqbegin+0x1ac/0x250 [ 545.718711][ T48] ? __pfx_read_seqbegin+0x10/0x10 [ 545.723803][ T48] ? ___neigh_create+0x1c5f/0x2230 [ 545.728988][ T48] ? __pfx_ip6gre_header+0x10/0x10 [ 545.734084][ T48] neigh_connected_output+0x286/0x460 [ 545.739553][ T48] ip6_finish_output2+0xfb3/0x1480 [ 545.744656][ T48] ? __pfx_ip6_finish_output2+0x10/0x10 [ 545.750274][ T48] ? ip6_mtu+0x7d/0x490 [ 545.754420][ T48] ? ip6_mtu+0x38c/0x490 [ 545.758645][ T48] ? ip6_finish_output+0x2ef/0x4e0 [ 545.763739][ T48] ? ip6_output+0x126/0x550 [ 545.768228][ T48] ip6_output+0x340/0x550 [ 545.772539][ T48] NF_HOOK+0x9e/0x380 [ 545.776507][ T48] ? NF_HOOK+0x101/0x380 [ 545.780744][ T48] ? __pfx_NF_HOOK+0x10/0x10 [ 545.785336][ T48] ? __pfx_dst_output+0x10/0x10 [ 545.790179][ T48] ? icmp6_dst_alloc+0x3a5/0x420 [ 545.795101][ T48] ? icmp6_dst_alloc+0x3a5/0x420 [ 545.800023][ T48] mld_sendpack+0x8d4/0xe60 [ 545.804514][ T48] ? mld_sendpack+0x1e7/0xe60 [ 545.809230][ T48] ? __pfx_mld_sendpack+0x10/0x10 [ 545.814323][ T48] mld_ifc_work+0x83e/0xd60 [ 545.818812][ T48] ? _raw_spin_unlock_irq+0x23/0x50 [ 545.824013][ T48] ? process_scheduled_works+0x9ef/0x1770 [ 545.829731][ T48] process_scheduled_works+0xad1/0x1770 [ 545.835278][ T48] ? __pfx_process_scheduled_works+0x10/0x10 [ 545.841326][ T48] worker_thread+0x8a0/0xda0 [ 545.845923][ T48] kthread+0x711/0x8a0 [ 545.849979][ T48] ? __pfx_worker_thread+0x10/0x10 [ 545.855076][ T48] ? __pfx_kthread+0x10/0x10 [ 545.859662][ T48] ? _raw_spin_unlock_irq+0x23/0x50 [ 545.864852][ T48] ? lockdep_hardirqs_on+0x98/0x140 [ 545.870034][ T48] ? __pfx_kthread+0x10/0x10 [ 545.874708][ T48] ret_from_fork+0x599/0xb30 [ 545.879475][ T48] ? __pfx_ret_from_fork+0x10/0x10 [ 545.884585][ T48] ? __switch_to_asm+0x39/0x70 [ 545.889438][ T48] ? __switch_to_asm+0x33/0x70 [ 545.894242][ T48] ? __pfx_kthread+0x10/0x10 [ 545.898823][ T48] ret_from_fork_asm+0x1a/0x30 [ 545.903584][ T48] [ 545.906601][ T48] Modules linked in: [ 545.910556][ C1] vkms_vblank_simulate: vblank timer overrun [ 545.917010][ T48] ---[ end trace 0000000000000000 ]--- [ 545.956890][ T48] RIP: 0010:skb_panic+0x157/0x160 [ 545.963090][ T48] Code: c7 20 6b 6e 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 6e 94 f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 545.983106][ T48] RSP: 0000:ffffc90000b972c0 EFLAGS: 00010286 [ 545.989482][ T48] RAX: 0000000000000087 RBX: dffffc0000000000 RCX: 0d721126c81ea800 [ 545.997749][ T48] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 546.005904][ T48] RBP: 00000000000006c0 R08: ffffc90000b96fc7 R09: 1ffff92000172df8 [ 546.014164][ T48] R10: dffffc0000000000 R11: fffff52000172df9 R12: ffff88804c5c0790 [ 546.022405][ T48] R13: ffff8880576be000 R14: ffff8880576bdfe8 R15: 000000000000005c [ 546.031187][ T48] FS: 0000000000000000(0000) GS:ffff8881261a6000(0000) knlGS:0000000000000000 [ 546.040258][ T48] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 546.047099][ T48] CR2: 000000003151dff8 CR3: 000000002f3ce000 CR4: 00000000003526f0 [ 546.056007][ T48] Kernel panic - not syncing: Fatal exception [ 546.062561][ T48] Kernel Offset: disabled [ 546.066873][ T48] Rebooting in 86400 seconds..