last executing test programs: 8.120662058s ago: executing program 2 (id=735): getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0xf01000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x600, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) io_destroy(r2) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x24008040) io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 7.136457706s ago: executing program 2 (id=740): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000001580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001540)={&(0x7f0000000980)={0xbb8, 0x1, 0x5, 0x0, 0x0, 0x0, {0x3, 0x0, 0x7}, [{{0x254, 0x1, {{0x2, 0x5}, 0xf3, 0x60, 0xff, 0xfffd, 0x1f, 'syz0\x00', "403d2281551bc1673412fc8673fd57af24fb971eb070fc0b73147afc94d4415f", "6d364a6c907ebb2aaf28d753e9f885ca1e1aa68cb90f9271aafb64db058931f9", [{0x9, 0xff7f, {0x1, 0x1a40}}, {0xffff, 0xfd91, {0x1, 0xf45}}, {0x0, 0x9, {0x0, 0x3}}, {0x4, 0x7, {0x0, 0xfffffffb}}, {0x7f, 0x8, {0x2, 0x4}}, {0x6, 0xff86, {0x0, 0xfffff884}}, {0x0, 0x6, {0x1, 0x7}}, {0xe, 0x6, {0x0, 0x1}}, {0x6, 0x101, {0x1, 0x9}}, {0x4, 0x40, {0x3, 0xb}}, {0x40, 0x200, {0x1, 0x80000000}}, {0x9, 0x1, {0x2, 0x1}}, {0x5, 0x1, {0x1, 0x89}}, {0x9, 0x7, {0x1, 0x10000}}, {0x2, 0x37, {0x3, 0x8}}, {0x3, 0x1, {0x3, 0x3}}, {0x8000, 0x3, {0x0, 0x1}}, {0xfffd, 0x334, {0x0, 0x2aa42e2f}}, {0x1, 0x800, {0x3, 0x2}}, {0x8, 0x5, {0x0, 0x9}}, {0x80, 0x2, {0x1, 0x6}}, {0x5977, 0xfff8, {0x1}}, {0x10, 0x0, {0x1, 0xc5b}}, {0x100, 0x9, {0x0, 0x200}}, {0x0, 0xffff, {0x1, 0x1}}, {0x2, 0x1, {0x3, 0x9}}, {0x3, 0x9, {0x3, 0x1ff}}, {0x0, 0xf, {0x0, 0x6}}, {0x3, 0x8001, {0x3, 0x6}}, {0x1, 0x0, {0x2}}, {0xfff7, 0xb, {0x0, 0x3}}, {0x0, 0x1, {0x1, 0x1}}, {0x1, 0x5, {0x3, 0x3}}, {0xffff, 0x1, {0x1, 0x5}}, {0xfff, 0x6, {0x2, 0x4}}, {0xffc8, 0x6, {0x3, 0x2}}, {0xa0fe, 0x3, {0x0, 0x5}}, {0xa3d, 0x9ba, {0x2, 0xa}}, {0x4, 0x5, {0x0, 0x7c0}}, {0x3, 0x40, {0x0, 0x9}}]}}}, {{0x254, 0x1, {{0x0, 0xc}, 0x1, 0x0, 0x7, 0x3, 0x21, 'syz1\x00', "fa76962e4bc360e54984e187c8d76fe3b66e2815fc812fa845879c45fd2bd6e4", "9673f69646aa19a278036030ec94fb0a67e9aa29b592dab2df27d51df26820f3", [{0xf, 0x7fff, {0x1, 0x7ff}}, {0x5, 0x7, {0x0, 0x7fff}}, {0x0, 0x5, {0x1, 0x4}}, {0x7, 0xc, {0x2}}, {}, {0x1, 0x9, {0x1, 0x8}}, {0x7, 0x1, {0x0, 0x84d4}}, {0xfff7, 0xa, {0x2, 0x1ff}}, {0x1, 0x0, {0x2, 0x2}}, {0x4, 0x6, {0x3}}, {0x83, 0x1, {0x1, 0x9}}, {0xa, 0x4, {0x3, 0x80000001}}, {0xfffe, 0x9eea, {0x1, 0x2}}, {0x5, 0x8000, {0x0, 0x4}}, {0xc, 0x1, {0x3, 0x8000}}, {0x3, 0x3ff, {0x5, 0xf9c7}}, {0x1, 0x0, {0x2, 0x6}}, {0x5014, 0x3, {0x1, 0x9}}, {0xbe5c, 0x0, {0x0, 0x4544c576}}, {0x6, 0xf4, {0x3, 0x2a}}, {0x0, 0xb, {0x3, 0x2}}, {0xd, 0x8, {0x1, 0x8}}, {0xfff8, 0xfffe, {0x1, 0xfffffffe}}, {0x7, 0x4, {0x3, 0x928f}}, {0x80, 0x7, {0x2, 0x3}}, {0x7, 0x101, {0x0, 0x6}}, {0xabb6, 0xeb10, {0x0, 0x80}}, {0x80, 0xd, {0x0, 0x3}}, {0x1, 0xf966, {0x0, 0x8}}, {0x7, 0xb, {0x3, 0x2}}, {0x6, 0x9, {0xf0aaa73e33ca42b1, 0xa81e}}, {0x9, 0x0, {0x1, 0x6}}, {0x9, 0x1000, {0x0, 0x6}}, {0x2, 0x2, {0x2, 0x7}}, {0x6, 0x6a7d, {0x0, 0xc}}, {0x7fff, 0x81, {0x1, 0x2}}, {0x200, 0x8, {0x0, 0x80000001}}, {0x6, 0x1, {0x0, 0x5}}, {0x80, 0x8, {0x0, 0xffffffff}}, {0x100, 0x4, {0x3, 0x9}}]}}}, {{0x254, 0x1, {{0x0, 0x6}, 0x9, 0x6, 0xeb5, 0x3, 0x2, 'syz1\x00', "2c9d993273f05eaaa010c5fdc2f9615fbcd6626d0113281cff974729237b4ca5", "cb1bcc7b5fb1a6c48ecf8b767138a4197cec426c0816e815ccb126fc80c7eed4", [{0xf000, 0x3, {0x1, 0x1}}, {0x0, 0x6, {0x0, 0xe33}}, {0x2, 0xde, {0x3, 0x8}}, {0xe6, 0x2, {0x0, 0x7}}, {0x7, 0x4, {0x1, 0x1}}, {0x7, 0x1, {0x3, 0xffffff9f}}, {0xf29, 0xffff, {0x1, 0x1}}, {0x6, 0x9, {0x2, 0x8}}, {0x44a, 0x1, {0x0, 0x7fffffff}}, {0x3, 0x40}, {0x6, 0x2, {0x1, 0x400}}, {0x7f, 0x3, {0x3, 0x8}}, {0x3, 0x8, {0x1, 0xbb9e}}, {0x10, 0x0, {0x2, 0x7fff}}, {0x200, 0xfff9, {0x1, 0x7}}, {0x4000, 0xb2, {0x0, 0x9}}, {0x3fe, 0x2, {0x0, 0xba}}, {0x7f, 0x800, {0x1, 0x200}}, {0xf, 0x4, {0x0, 0xff}}, {0x8000, 0x9, {0x1, 0x4}}, {0x1ff, 0x5, {0x0, 0x2}}, {0x9, 0x51, {0x2, 0x9}}, {0xbe7f, 0x8, {0x3, 0x2}}, {0x6, 0x4, {0x1, 0x8}}, {0x3, 0x3, {0x3, 0x9}}, {0x4, 0x2, {0x0, 0x9}}, {0x3, 0x0, {0x2, 0x9}}, {0x40, 0x101, {0x2, 0xf}}, {0x146, 0x1, {0x2}}, {0x2, 0x10, {0x3, 0x4}}, {0x6, 0x700, {0x3, 0x300000}}, {0x4, 0xb, {0x1}}, {0x19, 0x7fff, {0x1, 0xb680218}}, {0x6, 0x2, {0x3, 0x1}}, {0x6, 0x7, {0x2, 0x3}}, {0x1, 0x7, {0x1, 0x9}}, {0x65a, 0x9, {0x0, 0x8}}, {0x9167, 0x400, {0x2}}, {0xaf, 0x1, {0x3, 0x7}}, {0x63eb, 0x9, {0x0, 0x8000}}]}}}, {{0x254, 0x1, {{0x0, 0x3}, 0x3, 0x40, 0x2, 0x0, 0xf, 'syz0\x00', "eb61bd6264a634538af6beed8b3078b53356e399423ca66babb0c1775d06f919", "52789077dc5c76247729bb4d24ea047ace3888e9dcfc0ab71133c68cc8749c6f", [{0x4, 0x3, {0x2, 0x8}}, {0xa7b5, 0x5, {0x1, 0xfffffffb}}, {0x4, 0xf, {0x1, 0x9}}, {0x64, 0xf, {0x2, 0xfffffffc}}, {0x8, 0x2, {0x3, 0x8}}, {0x7, 0x4, {0x2, 0x416}}, {0x8, 0x4, {0x3, 0x4}}, {0x80, 0x6, {0x2, 0x2a26}}, {0x9, 0x2, {0x0, 0x6}}, {0x89e, 0x7, {0x2, 0x9}}, {0x2, 0x6b6, {0x0, 0xffff}}, {0x2, 0xe, {0x0, 0x2}}, {0x200, 0x5, {0x1, 0xa52}}, {0x0, 0x2, {0x2, 0x903}}, {0x800, 0x1, {0x3, 0xfffffffe}}, {0x4, 0x7, {0x3, 0x2}}, {0x1, 0x8, {0x2}}, {0x32e, 0x3, {0x0, 0x6}}, {0x7, 0x800, {0x1, 0x8000}}, {0xff, 0x0, {0x3, 0x7}}, {0x7, 0x2, {0x2, 0x6}}, {0x7, 0x1, {0x0, 0x10000}}, {0x0, 0x1, {0x3, 0xffff}}, {0x0, 0x9, {0x2, 0x5}}, {0x0, 0x2, {0x1, 0xc3}}, {0xf, 0x100, {0x1, 0xfffffffc}}, {0x1, 0xfff8, {0x2, 0x8}}, {0x7, 0x63d, {0x3}}, {0xc1, 0x4, {0x1, 0x3}}, {0x2, 0x0, {0x3, 0x1870}}, {0xff01, 0xfffc, {0x3, 0x1000000}}, {0x6, 0x5, {0x3, 0x10000}}, {0x4d3, 0x3, {0x3, 0x3}}, {0x7ff, 0x762f, {0x0, 0x7ff}}, {0xfffc, 0x2cf9, {0x0, 0x8}}, {0x5, 0x81, {0x2, 0xfff}}, {0xa, 0xe6e, {0x2, 0x7}}, {0x1, 0x6, {0x0, 0x100}}, {0x5, 0x8d, {0x3, 0x4}}, {0x12, 0x800, {0x1, 0x1000000}}]}}}, {{0x254, 0x1, {{0x0, 0x9}, 0xfe, 0x6, 0x0, 0x4, 0x5, 'syz0\x00', "543928a0744af811841360ea2828de58e9736d24950e0ac85233fe7d6d276b52", "29e22d43f953cc312cccb703ff9ec968fc463692b13b0e59524298b734d58d94", [{0xd6c1, 0x5, {0x0, 0x369c}}, {0x0, 0x5, {0x0, 0x4}}, {0x4, 0x4, {0x1, 0x1}}, {0x3ff, 0x0, {0x1, 0x7f}}, {0x8001, 0xff, {0x2, 0x6}}, {0xc356, 0x6, {0x1, 0x1}}, {0x8, 0xf7fc, {0x0, 0x1}}, {0x0, 0xe, {0x22ee4bfa8dce3929, 0x8000}}, {0x0, 0x6, {0x2, 0xfffffbff}}, {0x663, 0x1, {0x3, 0x10000}}, {0x401, 0xf6a3, {0x3, 0x1}}, {0x6, 0x7, {0x3, 0x6d}}, {0xd962, 0x8, {0x3}}, {0xfff8, 0x9, {0x2, 0x1}}, {0x200, 0x6, {0x2, 0x1c000000}}, {0x1000, 0xfffc, {0x2, 0x4}}, {0x8, 0x4, {0x3, 0x1}}, {0x8, 0x9, {0x2, 0x6}}, {0xffff, 0xff, {0x2, 0x5}}, {0x8, 0x8, {0x3, 0x4}}, {0xb30, 0x2, {0x3, 0x3}}, {0x1, 0xa98b, {0x3, 0x240000}}, {0x2, 0x3}, {0x7, 0x9, {0x1, 0xdf12}}, {0x1ff, 0x9, {0x0, 0x7}}, {0x9, 0xfe1, {0x2, 0x3ff}}, {0x6, 0x7, {0x0, 0x8}}, {0x4, 0x1, {0x3, 0x3d11f710}}, {0x7, 0x8001, {0x0, 0x200}}, {0x5, 0x3, {0x0, 0xe}}, {0xb, 0x499, {0x1, 0x8}}, {0x8b, 0x3, {0x0, 0x4}}, {0xc1, 0x1, {0x0, 0x80}}, {0x400, 0x100, {0x0, 0x9}}, {0x5, 0x7, {0x0, 0xfffffff6}}, {0x1, 0x400, {0x2, 0x8}}, {0x3, 0x80, {0x3, 0xc16}}, {0x1, 0x9, {0x3, 0xb136}}, {0xe674, 0xfff, {0x2, 0x60000}}, {0x454, 0xe78, {0x3, 0x827}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x22000044}, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) sendto$packet(r1, 0x0, 0x0, 0x80, &(0x7f0000000680)={0x11, 0x5, 0x0, 0x1, 0xb1, 0x6, @random="d95e786bbe90"}, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x68, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000900000000000000040000001800000000800000000000000500000057000000fcffffff95"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.560280956s ago: executing program 2 (id=742): syz_usb_connect(0x0, 0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) quotactl$Q_GETNEXTQUOTA(0x3, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x406, r2) read$FUSE(r3, &(0x7f0000002480)={0x2020}, 0x2020) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) write$tun(r3, &(0x7f0000000400)=ANY=[], 0xa2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r5, 0x0, r7, 0x0, 0x38f9, 0x0) splice(r6, 0x0, r5, 0x0, 0x7fffffffffffffff, 0x1) write(r4, &(0x7f0000000040), 0xffffff4a) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x90c49c71b979d2da}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="58000000101115732513e90ebb353f8300014425de7000ffdbdf2500000000418d476378f69eb614e1634f3f28d87103dce29ad9b3c73ef2a697c18097929a3b5fb9813a8194d30180000000000000917544e20738f3261f3914f15aa83922f58ebbee0fc320d682d411557e4df426da1cfeb9e7c84d3b3364be236edafe47bce05c327012b3ac3eb93be05f4a7d5a7bedbe5706ce3943b5cf673821e1bded0d7b16ef81843c95a3f7690d4710", @ANYRES32=r9, @ANYBLOB="3520040085ed0200380012800e00010069703665727370616e00000024000280050016000200000014000700fc02000000000000000000000000000004001200"], 0x58}, 0x1, 0x0, 0x0, 0x4040014}, 0x20040850) r11 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r11, 0x80046402, 0x0) 3.559396327s ago: executing program 1 (id=750): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=@newlink={0x74, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}, @IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}]}, 0x74}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000840)={{0xdddd0000, 0x111e5001, 0x10, 0x6, 0xd, 0x2, 0x10, 0xc, 0x9, 0x7f, 0xc, 0x8}, {0x8080000, 0x25000, 0xd, 0x4, 0x7f, 0x4, 0x6, 0x2, 0xf8, 0x5, 0x0, 0x4}, {0x1, 0x41000, 0xc, 0x4, 0x0, 0x2, 0xc8, 0x5, 0x3, 0xd, 0x80, 0x8c}, {0x58000, 0x2, 0x8, 0x40, 0x8a, 0x1, 0x2, 0x2, 0x3, 0x5, 0xb, 0x2}, {0x54000, 0xffffffff, 0xa, 0xb6, 0xff, 0xed, 0x6, 0xb, 0x5, 0x3, 0x6, 0x4}, {0x60000, 0x8080000, 0x10, 0xd7, 0x5, 0x4, 0x84, 0x8, 0x2, 0xfa, 0x5f, 0xd}, {0x58000, 0x26000, 0xd, 0x6, 0x4, 0x5, 0x7, 0xff, 0x0, 0x7, 0x40, 0x6}, {0x4010d, 0x100000, 0x0, 0x3e, 0x4, 0x2, 0xf, 0x7, 0x95, 0x0, 0x2, 0x6}, {0xc000, 0x4}, {0x1, 0x9}, 0x20000000, 0x0, 0xa000, 0x20001, 0x0, 0x2100, 0xdddd0000, [0x6, 0x2, 0x2040000001000, 0xffffffffffff5adc]}) 3.541795662s ago: executing program 1 (id=755): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4"], 0x1a4}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x2, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x26, &(0x7f0000000240)={0x0, 0x0, 0x44}, 0x28) sendmsg$tipc(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f", 0x35}], 0x1}, 0x40000) recvmsg(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/52, 0x34}], 0x1}, 0x40fd) syz_open_dev$loop(&(0x7f00000000c0), 0x592b, 0x8800) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e04023520"], 0x7) close(r3) socket(0x200000000000011, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f000000a100)="58785f58471eb4b5b3ff3946acaad41068511507291e72541d949ffc8a54ff637ccef1fe8511899ea7f3c82cbc6539763a34f6760c1608c911801ca672e62708ba4fc023749076ff6a0daba0caa57000acbd9ecf5e97201f7f14e715bc8c089c3d65e92fd65dedb76d61715067ccf6dfec2b56a48f2b274b564d90c3d868f2bdc07b7e636ad78904bca826fa69b7783e7be2b8e7c997b99225467747875695f6d500cb82b479fe9486bb94e06f796f89906bbfccc964830f86986760ade90c3f7a9dde3172a5124c1889075ad30b5ee2a5f257a6ac790a8e89b247ccbc8d241b7b95f8fc649deffc1bc37d51a8c3dfae38ac968eb48695de38df941f9632ef9ad6779e41ccea8a3ff1cac4fa4b47a152a8f9a1bb0094f41580bbf60fa11cfaf2c535a12c866e9414ee9b58226fbdb0d221e1bdc50e3fa300351364f6350030383856f1f809aee19f337f3d3435ae6754916be1eec24643cec1bd1007ffa38418735988cc901603895f66bd6450d54f99e1246ded898499d2a447f899c00368ce1dd4a4f4cf9cdf7d4f8b38d7b98a598ac490f1086ec712b0cb94610abfdb25b0f6947b46e1dd628897ab68445568578049fa6140250a5d821d70f102fadc2fa273a6e486f250712ec847de3b02a121e19775311e8629045f3404bdfa3207aecdac43c3571b86a9423bd716aa67cb688f9ee4f2b14ea42c89f2766c78fd4ec41ab34eebb4256e885bd7e3abe4348772993bb630aa3397084bbc66cdad664d6a9d33767cc375a44dbc0b08931053a6780a796fd31e1d7c512599f9e010883a52c07ec0938ce1acb3fe3baac6af9fb7e9d7942662e41bd3626d240d5ed34ebcbcc0ccf1c3280c76fbf6cdfb04bdb2d3b4ec6a8961b1eb036b211eff6247b95039cc67d222f2ff122340c56d74b4fffa79a202144bb10ad766f1fd6b3276342baf2fdbd26e9563dadd01fce19d7ec025d05d0494e53229379d13c1cae48ec058cff0bc1ccdc94a74b11a9bc87c580bb6a3f45fe15d15d89bf6102dc1085bfe27b2ab462aaf642b8ceed519cf88b31e9e00fdc23e8f6967a72b4c38b2458656dbf26dd75586731bb519a97d0ff43f4358cd40c7ed371ae8a24f46e320d4c4c0a1b8c42f10908a1c283d8032d76f52d4509d78c2f3a0716c37bc0c786ce9174a88d468e88a6d154e4712778aecded0ca5de28e52c04e33672ecea5135438e908aa1bf00e65ba6dacc4bd018b7bb1c30aa5d9acc679220cb5e7207f1759bd7722d10469225aae24973031a21358532a63aab42f33b1f8f40d545fec7799703ba067592b34247fbc7375acdcb3883ace7d34cf33484f2cf662f3f0e18b5c475ae311fb20f6e6b85320b2bc37e56512dc27815b37bfd9f172be1a119197eb53b535c440f97f24724e1d466309c0f8556965bd02d75c3dbe2baa0c6a515db07af1f77306577d0b38f0aa8cb188cf5523368951b8210f4bfc6afa0d058ad84656d27a46faef225e6268396ecb54a5182591bff3a86792db5454e238afe7c26eae85fd3c1c060760d89223bbdbe8966ae2558f47d799839cd959c974b69ad262cf8ab4fee554288e767ede9bc5d7f0cfba05966ef7858e41db363122680abe978345d45e4b52b73fe9f52ad26371a5b0539d88aa0c572aa01a41b079dde5a14e031ad903629d06c8d85ad82828c25a9ba7ce0fef2316eb011643e47feca7d280833f8b3008841fb2d88ea84df65b03aa5baaa29d6234ed5db8db461fc5df77aad38690277cd5dac1ed3c23c9f2778295578561f9a4d31159a826b4b62b2a867e6e8a9514edddaacad22106880e6633fb2f3b17c8d10bec633d6128489f7253b3e3e38e5942743ddd1547dfab27a152549f61891e3a5ad17f733b042f7ef915ad7423b9719fee9142407fe1d10ec8b64a21cd24fd39de4496ca3f394f07149bdbf1393181b5afee090ff40ee31d34a9c6a113e3823fac425fa85e212de1a9f7c4937ba64f3327961fccf85e6fa29be12de9589671d60d4658b1562ce7dedcde8ec79d265c13f5e197b66989c3f067d2801fcd78bb92b45e55fb4089a7cd3b179284af782ae0327ba56fc307a281772384448ee465dccefe41be8d75c8cd0eb5c0217d7ca706848f9b82500b77c2d838cbd536304556af87d3b6fb9183b5dc9cf2d0f7ecbb24d9f790151b9c6092dfb2c14decbe6448362cd7c13515f66a99c37b56134d12e8c7f1a5b75e14e47f84d8658f0b65ea91014e2e4fd361f03dbf8ca509d426ca1bba7e43ce918268393ff16b17d9e1bb49fb2b4f6eeb8b4b226c79303b19412a55b7ea7c8774ccebd8d66abe117a8be9a3c4faea730902136df57aff991b59dd71610ba4c8e1cded8287c21c56526f4fb6c502ea73ae310d56640990b3e695b278de6e1eebd51108cf7547c0e457e5fdf59691baf080dd3f5dc3c9a10bd4cc5e10ba42d4d3d9dc4f7ebe0bd2981a1d6fb06f7457dca1e56fac3f0fa7ca19ec2fb7940ee837e960d93a73bf085eaa2888fe3025aadd33cae85d63273be6ae3a92e35d78602d8e23b9460f04b7c0e0e710d10fdb0dd3fa9b880865603500d81dc7e968e8046569830b526e441f25f8b0af47d524aa80fd7dd9c3f72facec2032e2c06bc33c6b739c5368bf54e32b6acdca9d2d14276a8348ae92bfbd60f6aceecf98f3c6fe70747499b25667a96c52e21236421b27deafbc6b5e2b8a4ea2a0d3cd5ee1a10f3153b529b5c04a1961223a943842e17ee0cd114ce6983536400fc40f3d4708436954803fd60caf2b5ed7e4ce90bc75385e2424191c6a5038fa15d99aade49fa1affe63fb73078a6bb4ee560b0b521aeb33f507bdf876829f4d3f695197468e41503a10870a8e6df800608ac33dfdecc03f64d03fb6180287a684063c7edfc8db1366f6bb502fe446085f6acc4741b273a0b736f0f55da28967390bc7434db54ad0da9d1d002ceaa5c3e53efa95e7aaa792db32501a072e669da29fb734d771a6fa8c753fb2fcc204e31d668992473e7937fcf751bc79b125db1725f2a495bd2a4207e4db8d44810a4db5113705c5cb8733866ade3375d1bdbcb965cbd927e7d285f2933bf037911959088b64cfac0ff1e39244f2e9416653ed87ec564eb686af1062354a8bd7034c1022cb0d0b6996762ef4a0a3ab4f3deb459f023a867a38fcad2a10fcf0872862b386ff7c5ea7ce13abb112d1f0ed0723870eccc76d16f7e3cc00e28945bb93d9f2bd8e2017993102f0824867ec141f20df951202a2ab1cd796516ca0b4fdd9e6de8b82fcd30f9ab85cf0a5547e1ad1ef1ad5be7a878a16864d7c06b4ae002f3ba485a9bb36b8a591ecb64a4a5c0fd3b4beb015f58ea4cfe190f3b46cc4d9108d10c52a9de859814edac575d2a3d937a9b31db049e70aa76c085ab63d61c1317205c228f7027fa39125de8fec40ed7982e36a7cfa9fedca30f0b692bd4c7794f6b56d69ada1fed168cf03cc57321fe37e3a8cea4bd093e87b657fe5acb13d2591bebb526301d16707eaa38e52f913f8aa3e27b2387ca1a217ac69966e287ad5cb0286535d5d00b7006661dbc7923a066945c1a2040a4e95d7b0de4dc8217bf1d4e9b6cccc671fdd9a5770c21e749b407df8c463a3bf17e47bfcba6a890a0435d3fbb7252fe072b149b7bfeb185b088686dd70e0c9cda275497b553aff2b319f7d7b0ed64002c5f9f6ccfc3d55d8c908d314487452f37a650f4561326a84c660b6111702a87db03595b5d080c60288203f091de9f78b997e47233f4bab9b044a98ab118a6c45b7ca746cc2fb90182a923d67216412e24a955c0c2307acc47bdd319955249d8412a5ccf444437f53f524c69ba0167c920f0c1f775cd1a225636200a9e4adf61f418d20f717339d0c8c5386af0936f628cc589a8d5581c1c8cad0b564a3f38b606473280a3fa586a5ba932fd38eeb23096df29a92ab54c409f88ef4f03217f0bb90fea539e629d8a025c802f6b5c3d735fe950c8ff7136e6db287851dfbffea1ef81491a50cb75a103367e85afa3484d6af865dfbca91dc05632b0d94aa384ee0c585424a5ddf80babe0b913b0a2eedda34c7ea7814642a69f8eae868274b16fe0f52fb60b201e6685dad3f419413d5b8186992855a25ffe0d4773a14c7977181a120cbc42af4f9acca3fee1d54ccc125ea49b62ab60c58a0ecdf50ee7c16f3b6b12b254fc08fcc85d409eef7c3f30cf705617f926a17e6588a9fd7e34be9fd863a7b157a2d9a336356d568c2d2dbaf76c2d2b2ff8703748b860e36f02b04d6e4f2fd49511f12ce395dc18622cd51948a32cc432cd797d8a68838cebbbdd9bcb6f2e85719785706012e894cb043bb9a53998131fd4aae3321d81fc001e718c4a99c0580af1d4a0c81665cc5adcf337c8bc00fc0fb3c7be0d5e5ff6a6fae5891858eafedbed69223170ccc71ce36ae439d769c3520972601fbab93f54808d6950cb7cf1e5a3b32d8c6a975e3adccca0b2ee28a4eb5ca3b0ceb9d31a8f767c3f4486a62215171738007675a55abf5916513f7eb9b21ff291f2b4b48bbfcf394cf861fe016b3680be422a8bff49963ce096d1bc17186822b1392e68b1a05fa6c70bd2d9a164f12301a6e78caa8f4cd437497320d383e752dd224aeef80794d3f206741363e74fa181c9f1dc47557553de620794f096c59ccd74a178f5adb466ad5a62fffc1886f56ebceca4ed46ed2396bcbc31160b4eb1b7d69642e33315e3adbdbe1b9794931e7babf745ecfca37dd4190013793d530df12d6521bc069a05a94e0ffe91900a0c2209a6914d2f85bd161ff77284198129a9b1ba600bda3e52769d39c1bd61c4a70c627c3ad89aa0bdf0c93a2c35e166da9a08b4d2f92deacb6e9034274305b6d254c4052868ba32bec9aa3cec75debe24e78e43374efffe444722a983935f9007fe3de37dd83c52be16e034d09592a179275dd0c91281be579cd19c0162123886893713f25cdae19cf258926bf2070741111eee6b3df708c3fc416b7d046c948bf8500779c0cd5460e640bb1f860f58052b8087e6eb2f16e48f4984c9f9fc9fb2652ac5305861ece5362db08ae912ba055af766da1322057d0bfa647d98b8d4f1e7ed43ecdf1050c0eb19dae93b8014da57241cdab4ffacf0ec1348d4a89b3e8ff187098d83d8eba34e5c7ad4215f1977968a9d337d08fd1188754e7cf41baf0189ccaa5f3b1005f807b0255ce1920ca7d919e4684af70c3d089a99922727c607a2b06e713dd61122842a913036f6cd64dfb313fbdf639fcbd712852bb85337d056685b0a54225ae27e1e8c7ce5acd1f017b8f712c268b9cc0ee26d26c63f0a8b0a40fccec5f945431a2e81c35720d178feb481092e4f51978493c5fd502f252bc0152f145f268ead14932990069169483ecc7abc901657460c8730715c078b61059bd2621f50fb838376e0b808a3f118f761efea45bbac4274016960063cc67c428e72e516685552dc3bf473e442d76f2d3ed07b319694490054302a538b52e3b8496b7e37fbf4a2ffff2b484f98fdb14c66ecb8447834733f8a7a5a3c83de34b6647842dd56d8201f9d9240f3b3a5b5cbccf174a08853d06fd164fe74e04608ae12df8a35b73517d22a87c7ebca60942932d03102ff7e8644611b5520b5ebce950945498ce19210c866e48284d18fb7e049deaa43ee5283e3dfad7316ba85490e93182d13efe7ba64ee5ceeaabcff3eb24d46a3a129dd5a6b82e8c48210cb1e6564833f3e15dda4dec383b4319741cebf6374cf2c5d64722afccf7c4e2d81ae28d45f2c35b764281f1f08fec8f8e9277277ae1ae8a8981f85e041d2450afc9374e978f73b66da9aadb2087223f28e21e946eb07710ec86cdcad0948d4ca93827ea34e28806d172c3feb83471ed2d4d7ada2360b209d16b9d35861082d85b6be3c3589a6bdaf6f9b5d52ac8fd7388e32b24f1d5d34b5442c1ceebde311decd709f075d064f07bc60ab14c101ef51039eed56ae1e0a374e3e956603737b3a16db684a81e9b8998a0bb9b17a0876a92b2a3b9924f44b16ae4c7ff376ea8a8c91b504c1dbeb522cf846fc3ec6b9a01f452eeb35cade34c6a0463b92c46e013ee7906ee934141870ddd1464ae688805933504a2dc7cb1f947e28bf22f5eea6afb5de3b950056bf44065b84fd5589385d0feec4ef1db4fb4b595957130e575dc383e3686f4674143debb23e17b398f32683fb4805f297369d0e5f2e63af6891491e4e37186b4a3dffbbdcfff63d1fea4e12d24ef96fde3ed7a323a3605cdf5eaa43da738004556c2c20aa30c40079bc2e9ebe102c1fcf5259f1e3acc6b2a2bc9da4d0b1252433c58a1810581152a235e93deabf7f728eace350bcc4db4f249d4234bbd858c4e61a0eda4e3db0ae530c78eb63425502d651fd0cb986341ba69c44ede18eb3ebf25b2336cdda02447a9e20426d8206368c63b5fd6828612d3b99f627e331bab0009579de8270c36aa03861c300d34f2a3703870712325190073e6c17d8699f6744acb1b5468f93b57ab0366796181a4f543511d7ea2b32606c33cda61e81ed1c2194d305be47a3f1a9145d023620af12e79ec188573526ec35b9ce44e95fdb3530bd0431dd12a227d0ffe317cda1bbd787979261d6c9cf728b3d6bec3ba6ae15a595a30fc242bc5f25d837c1c642219afcfe043bb68a82965574b8b2139789235b262cf4af95a538e6954acf8e27ac3c95328df6e4bd615a376cd96bbc9e0d9802fbb40f80a848225e076219e26e0e63f57330b8bda69ec8dbd8b3272798cbfbb085b1885a1c22b3e2df2a879020ac1110b7af4f53ac97f556596ba0e164df0c85842026a87cf9631c9c9d851549efd8ca37e3b863e88436d5da5f4d3b5b5528e2d08d92b0d3ac6a06a0699653718e93a25b5afe254a068e300751eb6c67e3f5a1813d58d428f1ec108b88ec81444ccb50e8452941510c11f2e80bfd712f64b32b686c92ce922baf6c8eed1e9f0717a654d53b3ce1001880de80b5b15362b20286db9dfdf6c41f48aae84d5ab12ac45310f0eefc56e54113bcf95c1b2a259895af2ae9c679de4e2b898bf8a40a199a2059f8248c1303351dca3fb38906a682f66a94ee660debd6eaaee7b2f1051781084b3c9d626263d011a3daf971b708750a77614753b89b5e1a77a52510ced5708083fb48c554dfd6aacfcf97650f3a3b3f97566050e76da968d4eceb83bc1e005ed1596d6e0ec5e2c90231e62496d7435ec5b28f805e3b7aefdd3718e4ff53065b8e4b15175d80eec59218d8278e711c6049bf6d62ae7069578e957135463d7616b37c1e4bf44d60dac6c7aa04cbbc4a64bb0cc0b059abb6b26f8ed5203232ddd8a6c5882e6e6c53068a71bc84c5834104e85bc96db2163798a3881929248b8c788e5bdc9e46e5f7f3f6ad43fad6fa381a0b924bd938702470b330fb90ba73d557c0d203d55edaed6e3a01aeb53b061dad57713ab27e1a9e0d06b534a65d85beb061bb5258bbb38179ea612a6f402affb8ca018ebf0d6f61d44d5a657c080c7d2dbc9b08c07713b17b0f173ada59b57abb401212f4f1fa026491b48d08cf46a704ab43e46de8ea596d68658523b61a156278b3b77bd1f4491381bfd874ed72b00675fd5b4b7c0ec13c6837434ba8e22230d32e7bb1287e488e14f5c5602cd4ca88012b244c7f23f4897e27027aa862ca139bc8b5fe14be7554832ab02e4ba19699a1e66825d94c7c44451062819a38d3376f0a3716b210c7adf4bfbbc303058aa2e054b3bd53539764f177b11b05451705550f90196997de3d1d480e500cd9d234078cb1a09c63d8911381d327402702c2765fe92b8ba3a0189b2b11b7460996c36eaae3ecb4f4e63bfafd7953ff086dfc0b12e616bbdca4707631467b830d244bd3f4371744bc8a4baac728a397818875d1b6a4a2f0d10be607122a6fe813f52e4456b8a5eb6c9ee0cf889f777a03cc26a055f9f259cfc4f8552b568a4b371260af062619dfb215ecfe7b318f8d627d2777bd5103d6ca2948d19d5812112962b63c2bf3d090ff19185dbc5ad49a580451de717c0baa288cd96669babe88a8b1ab6d0936c4c407878786695f46f59ef06c5c2166b661542c598b6e0551d490946182841184a7a0e669c6ccd73a342f65c4525dc7522dccab15fa72bd07588b5bca71635b9466ca72a504c74cca1c573e8d40d83d1b5c5326481ff8a2055a2e0fb997fe8e4787deaa2a8a57afe74a971e7f1f280895f2fc9d99c41416adef7b70ec47e7a12d0ca3c0ab1dba3c2d65bb172fde1fcd7f97692d3d8c9657e3277ce95947d59bf37dde3f35f7a5d76575f5c14caf7f0926c0896995a5f42efd0d38c42de202bea5b5db39bf697f9a96b54aefec723db523893186634763e7399bfa8029c2708dc817984528601c77a1d78bd4b2c85f10f5ca9363badcdab51a1b315cafa5c2ef64f60395f53efb9d60d89e1b2a5f147508c90d2b09476eee3cb9b5957669a77cd2c522909480dea9be3406d1779ffe4539f2e03efb5f8c2d040f0ea776ff869a36862246294d0ced556a129ef78327617052dc1ef5cfb4e5986ba2f0e063b90e1657d8977b58827a3c4e3d556eb3cf0540685f7c9eda461aa2ecc539fec3d2d56be99a518f11752f2be2f670c5fbe8010ac4eae0ede31c1a48f747ff2eac9fc069d3700a40bf5fcda80a3a4f5fa920f117a72de6da51195d2d7f0cc92ff7835bce2ba6b564832f582df56b24cf30c8297a826a4bbfe0afeb1da3e986b3d0a95509e0037d212a70178ecb246061e067238ea9238e4c4a9a7c6fc5dcba290970f50c52598423336c523f2de7580d059fb53934cb0beb208585e897fafeba30853e54badefa197478fe6b9f26ed0d33babb53acee7b7221d8e0cad7a6bd0d9383ced6391bf88ca7aa50c75c136075e87b92445f02fbbc92f7cb65fe2bbe0bf0c9fc2577da63a56f1efbeb276c1f4d01da6f6f7a842212d96dd45edcd2aee7f2c553ace15eb9336bb1804ec252998c5c8b25033894b05c01ce7c77b73ec0e239478c67d5378fe5a53fe6269025d54006e9bb1cbd09b81a39615517c609f3d74e377888f641587121f0f097b48d8be85800295ebab9407978a9cd379966577cb6e1f5261e4305696a2cdd50d8cb1964d3ae18ec730d40f9c782533efba47db8378c6aa15ce85985e211fff2659729599802a7b585cbef3a2762595f67e2054a0fb4457b146e7a656abb2c4b2387d760f7e5b8b7864132317d5ba29a662f50af8dc182d2fbe216db8e997ac856bc59855ca48999699cd6c5576cc47bf8a8c30638c7e08847e5083aa82068940409461d1065c2b53292d3ab145d5bb590bcd278e48ebd34920b18a2e1731c1855ae5a3ed637ff568d205a08cf98c58f5d79c99912e6c1ab257ece0d68ef13d69a56364419aac7df43f43d5faa9ad851c9810648f9050012e55475109ca3ada3452b78a7964377e0d862e022c73ca3ed6cee8c5fbb2d7c12f91c4851fea7c5b02e0a3c5364b7fcca110f20f8858465c498d7e9c6049417fc5c7d4e0059852a6d794af426e938a401cf43b2ba9f4f3f6f0f2eb710ecf3c0c36c4b3072597f805eca9cb14602292ec7d5601e6b1555c8d024aa4bb81a4cff98cb03725cb184ea7dbed6814106a1402bf68a2e51660af930a500d5530651a0dbf2fdc01a31a99be25350b5c8a5fe01155343d028c03e09009ef2c386a24eba8d842cac581402c8faec7dca1623afe25a230d8d4a8bd23df3cf12abedc2a50e387285acf1b3105011a2bdefb204a53b20be213b50f5244511f25852271e05c03fb9a799ac7ea675ffbde8de181368748a9707674e7e70f28a75e4036b6cf9e0693f91a65be4478b6630067ad8dae030a4b7b9784a206b2f7cfeeefc65aae11fc20190f4d6387bab05fa6de640bfbfb0c4f604878771aeace0676d12325e61b19a5317c4d4bb9fe6f3fc8b171f1116528b7cbcc4a91c26a729b512196828075f4d0aeac98887e2a6a19b4e1f1f66233962961c0d49df14c3e6123c9ec8dd7152ad045000107365fd5ed7ce6a6d65ae0736a7e227f77c9b0903d4589ac58ceb691583cdb93ae3fc792c886663cb7c5b0640deb66e29b3c69d2f1a3d1d47d7b672ee3c49e90bd406aa84a0189808924c4e67c5495b045e779c58ca65b42889f52d7315c66be3716dc8592b4875629cd0cb02c29d42bdf9ca5c16bc9051c2a6c09d0695bfba58c19a995838c022e9936c407d8999aa65e4a9d6d8eff99f8dcfac9b561375b6d1293441b9d32533161062c053c63ef09f6100cd748700a710f5bfc2a6297b15242b1f41e21bd004b885d6429a0d334a8c115f7d53d278dad24c9d295b97c50eb340d1e6d523f1757e2014c1605c3bd35f0cfdb74f79850423a37e2f95dfe41c56df09724d21065377f1818311f0c70aaf6fb2d4fc8d9eef576136617371d85481770ce9c390859eacfebba34e75a238ce80bcccadd6c42e8e186be3c15451131fbe9e345c05ab8e23f917d269686a9b5f06dd474f95757b9e5a3328416595539cbdfa69efa9702e5a268b1a70c6e5ff2c118a6e574bfecf17b1576e4f2f7ee566b0b2b5388476a68562991ac01412fa463b0f9e586ad4bde59e91a4b303268b5d8644cb7996cfbba422facd59875ed6ac057e563412255c412be0928a0b6fdb6f35d7008b5d5528ca796a4a69bd90b993a52da9c7d62f4b71a2763f822bb39f3ed39cc5ad5a4d51b5c27d31d105000f3f1e705ed5c42067106f3fe6d30151021bcab7f3a1ad9175b3d3644325aa676b9e057bf9d9aa3348b1d9b31bd639c59bb63f46a6c18794ae006db3b1ee20368160a82e26aee5a9fdc6b44df8be294f3ac0a1275e57ebf5e384b141ce89dd51aaf2248274468894645ba54bc4e6b9788b1eb5043c1f0dffe2e13c6179d0238d8cd037b6fe3e484445ab458fa09e4e8010d3288aa6e6cdbfba4b62c7984d058da8993d5de1df75a1ce8e3bd5875709fd2ede4cd5843e7102ed4031ed096a0c6e3ae9d522ad95ef4af83599507dd32fe3325819cdd7718c9797e921e6e365175e1dd53991edcd2baf27df8b1670d01967e97b3e3e75d297f908deedf2e3b91bd61973e8aa75a5a6f9db11525dd35556bbd13873602a320af74677832f93bd01f1e0631c882c8ab254a26b73a60a6c90cf9b96bd576e05b9befbce882c5d29198451bd15acaa894a5276ea9d870f49a33ee9d2429ef35a905b281deb75be54fa0c9e47be5876d7dce01986f2d0e7ae6df9b87a0ba6cfa55cec0c65dd386db5adc427eac18a00c9aded475417add4ebb8880ef3dd218a9ec3e6e13456f8de1630774e918fe5288dbaec3dd2a74698ec9e28ad573761b9e78af3d5c7a61e3eefc1a54c25bb841529b3fc9137836a2e7eff5ffae8e44f0257160da51ec0b3d144b92f1f43d2782513705baf5930903602d40cb4de87feca7243d2248a78a5d684e303ae147acc96e0b755eea77092b5f6efa723afc6c9a44c575738725815a9af1ced500", 0x2000, &(0x7f0000000200)={&(0x7f0000000580)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x77, 0x2143040, 0x7f7f, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004080)="cf6dcad1f5c5c712407a3f1d491539b627c8255f86be020a4f0ff8851dc6d8ab33ec6d10e619ed910e4811af9ee1581a1d0687020937fa7005f26bab6e9591923f5c1086ecd154e9bfbec5afd856afe3429448161089fab21bc7b9ab5158aa219761d845b8307b1fc87605dbaa4cf80fc74737d4d4cfc68fe06c16b87b759a91a368c70b2e05ee4acf0f9111df10f30c4e16b7ee3d1cf380273ab8e6ca382e06022f539c0c4e62b1ad827ff576249375b2231e47038c67b3353242c81baaf90b3645ed12504a4ccf4b0e6419804399f9fe7f60df022a12405093264d225e8003061dd690cd169f922da3507717ade8bfa8ae2c45eccd32e14ffc4e11ae939e90fceb53e0bde3916d9e4e36d1de07fbbdd2dbc24145e1e7bc8f3423f4c3426406fa499a6de404e6827db35840a726a1582be4457f0ce0cde1c414e2f497ff8ff4cb606962f6acac00230b2cbce10b09d2f6b33b9f4efb3839a222c4bc5bb3e552056f8c2b7bc84ab62434bcc61f64b74367a9ec857ec7f5a09ab6b16667bdc846434d22dd95f7b8a47a1246a39d135de1ffc2946cf36034ef8d753b7d692aa00c91fc1636c0be309ef4bf345918a386e76edc3680ee574528bf3369741c9104bd77e61aa72d8b82162bb150d4232e21c8c9453d89467f9e00fd5148bee49da206fbe6357bbc31b111e68f0b95c37063a6c5401a094819e28a2104c37db5624fe075d0b2cc50f7140f4f49396b43d14f93ab9f9649e2dc694cea520cc068a3869a3ea4ec599a995f69d936dd62e2b81499f3ed4879d25b90aff3eae74b28ae35f18f0b457a5af35e2ede43786958b127ef76723d6ffe0e7e3346d5a9f0aabcc0d93fc085316516ef79b3e2400ed2946a0d1b2ace13ea7ed39ac51cb9d98cf70feb30d5bad39f6b5903e8ab654f48bfd7e54dcb502b158f68bd96e6beb4392fa59d3e1048803e4749f3ad522414d3180de3a0da1227bfbb704b66ae6a85b1c2c51e484614a0cc05aebbee77f31b62834169cb49bec0c43090506c8f34ca6e108e6328ced7a9f11cb3d57398b0b1d84c9e75d5cdf17766d619dc2658aacb900ca0f93aa248d702039417b558b8ab4a41921154153cdc86d999b2e7932eabb55a4e6c8c03029c851a9e84ef84acd9affdff84ffc063bb1ab6c97e169071edbe524462fef9116edd9fbb5032478cd5ad2b2c5527fdf64223dbc952fb528f7b1d817ca787f8a57992b40202ca124cd27eadd6d70351379a6456b697b317d101514d1d5d61002e4f3bcf7555c6b36c4c1d18cba0fd4fd7b3a246b72d47d7c1908cc9c3a29fbf43019b5179b0975d7680ec15720f7fc8b96b13522d058ef009719580227489ea68062cc735cca0b6a60a10c44f2b75d2895be41a278c50e62f979674c9e507dfa7a0c087c4fd43ccc32357e34c0bcc526fe43bed33e99632c84ea59780f78e7954d8e5430c9acb7d9dd28ac3761515cba6064fe81d3b4541dacfd6fb916735833704a5cb1723f867322fa806a20d5029a608986b5019402035bebf3e099547702409815bd1d3c63072fb0fc216c2186048f1e4ae5288a12a5c9b25f7649899f84c8aedc3721334d7bcdb656f8e3c0f2bfab9b74ea15c9d6472b6acb58a39babc65d08e529f2f690ea780f43c35698610351fde4615efafba129b2b619135f8af77c7291483262c5555f4d66173b34c5c7f1c415cd6ab15ae4cef34cf5680e11332c6863d2140f00cc3a337b23afb0080fa54360282086b0c0faaf2bc2a9f7335a96fa8af6a52a1e04eed2e7c337d1e378545ded0d0453b8a16b6d0a90860dfe560528515005ba852a314b4540206a8513e73212c65fb4b35f4ac7050d18bd62a6c720cfda30cb2385d3d5217655db1f344fc34361b83b22d31a040366acbdc28d397254b41c3b1f0d20e0a5db4df6338e78ae09b38f82c71fb0208afbb506461384bf578c607e05ad5a6ddb708b9add5d4d363877659a663827136b4dc1b4012c7035a56bb91e14a3d22b3ac3989f91d78808758d1b5bfdbfc66d3389e3362987e13bf9a9747373c90c0c658b7b832eff19aa2f3667f79bcd073765308fbabf2d612d0445fa1be6280cb9d0ba759d218ae971d3dd5d458c10d14f154109bfb2fd03523ac5748bcd8582dc3be5c28ef4be94cb55fdcb12a6271dbb7f11fd33d61382096588167a2b20b02cc43b88729985073a5b21b8e4bb2c43894d7c88bf111576b3b56f905b1f23f0570c07b475d5f86508c3489f4f2e2d0f3b11bfd6c3c58930483f9345f4f755089848c42361d4b0c0e855935d7f6793f78a68b554358b810cdcdec350376c94486c67fc5d11c0a68873312b40b49bb29aca16e1f3e3ce4da7a9e7aaa6ec1d9932b78d9c12c45e61b5f6faa6ffcb21608fc61bc4180f91d26f9db592c98e532d60c28e9fab794ab8a62c21122397193d8b5b72bf050b07f79df5e14069b56359835e3048f182629328e4a72a1fd0530182c802744611637e93deabc6c3ee30041025026be97ac314eaf7b399b0702cf73848e54f355d766121361398609078057473c2aa46b2fbd7e7a7d6d039615eea23fd223c49a9b5b5fd7b0c6f30c9b0e55fbebced3c90ceb668e6dbd5e6511c19d32c29b5fef7d06cf2ffff7872bd541d0fe70e5991ba3c19e44d5533e6fe9652c21338ced211c7d9e912486b4de29998ef4cca892fe94972b31fa33e781386b75b5d6980a9bfb887d7485d71f6744a6f87bc407ccd03281e10eb1bafd5d9bf279d362e2a49e54187e40abb06e21ed8425135a169ba5b8e1a806951352580ae135dfbbe3395e18ccf67fdb891903934739b56dc0e49e258552dc66d46eadfed9a7ceeabf20d02aee2c8ce4060382474252ccd9bab03d7e8eb77195bb712c19e066153bef5a212f2a450d4a1280d243928f3add450c2544c800b507c8b8ffc5d7f3cd9a4526505d05d04fbfdd0fc1f996ba3f4a797c96b24af37c15859b4bcda9234750fb6acef8dc20893ac5051b3d6aee60f01fc34e3b6753848fdca9b18e461c87f08fb8d67ddce234ca56bbe021f468f964ec1416ba6df0434440140090edd222cb9534830fec026788f43899737771e67552df68fb81d90aa90fcc1149149aaa96c1730829c6856407e5194dd2ec7cfe5fa419c2ea6127039ae188649b2cfccb9faf59f45dc9af76f3cb17c8224e68fb5f81b4556980542a928f9563bebcf3db248cff2183fffff15710432f8691041fa8aceb65b6454e9c375402b599503fb4881a3baa5ba58893cac154575ef0ec8efe35a6eeccb98d081f6d4cf2661b484765ce95bca5bda75fc90e630e355d0dd6d22a5d4c7990931ac160da14f211c33b668edb93cd9c87de3881c47e4b0fab746d0e931600478c9cc2e3cc08eab1ee7cb4e3749ab44e7ab4be15e5b031e58d59b294fbe794fb5760a2ceedd1cfc4343b1c2886b0721945a109384cb00fe6e9bdf09e5e406e757a6f24e659495a11a93382d5425d6fcab1d002303aa1531a120b8f30dd17cac7385bb8455503b2ff0daf8b4dc5353f88f34c894fc0b2fd2920c97432aded8b89fba9a9db4c4f3498043f936a1cb0dee7f5d902b1f6d909b637b8e2f05d31a2640eb1ac556ede22006466014d4a407e3486f94ca676ef39be6399ca24bff48b03ab1da71d1a5e3994d0a8723894bfbbc33969923970df3a9fd0b5084a6cbb41f79a0d3338bb61e7dc2cf795f2fa883aa61d7820c4e2215744dd9cf517cc5921850d1d9aaaaede5fb125e663c830c2414655d6af43a90f9b79eccbc2c009b963b503827c7614ab8824b3289ed8e559ed644a163db18fe66789037eb599be39fb66955a27a4831a59322d39b95b6d571d8fffb5352a0297b449719a5246247ec4c24f40b5ace1c8e76fa1029a47065af4adfc03b2732677f81bf9729ba06380a330cb388c9e4f50a0cf4ceb5ea8b6bdda8df0839de274c0c7a57f7a9173d21832b7f19ee8cfc340eea461ce7956f986f828c91697c5a241cb9efec40a1a0f34a2a63821dbd50a111b368a034823191dbd3b7a9fe8bee53cada1902f2a278efe3f10eecbf8279c2f9b2e7bf542076bf0bb41e9f21e766741f3ecfbd5a38158b1ce884255cc227a7b7196f966b631c228fea918d8dfee020dcf4c40231c0ab6fd7ccf4e7444fb360f2be3c1519a577dae770a14cd90df85490995fa8553fb255ee9807e0c7617c582f82ac56a0d902c8cd58244cddcec23cf2a05a79b474c716d9ea92bc28b0132ec48a3c5257dc7e1d9cc3f760d559b5c12ad75c95497962f9a564b0d9ed29f44f63b2c56169b2151d699e8d2d570d94f5f37898d3d8abde9253354fd146af62ccfd171d9014fd4d142e2e390f3ce2370165a01aff0fe566ec44e3084815cecc85540d84d8a11d0504fbd95f2c2709b87083b3cfffe36f611a4a6b9e4237a350d1ad4b1e0239946d86ce535e9f07def01a5e6d2e65ee59f380e55c9f295478c5589425852fd22eec2d6e555828ffb4212b33ad530c38b76254d2baac6bff5f94d3ba19ff4b35cb1c972c0b538e1adb5da70affc99c99c0613bea6111848054b416d26368c90784d845f0507f89fd058381dc7d6c6bb81dae94d11e3a0de778aca82814fec0b63780fb2b4f480da063411cd66356f87e68780448ed0c1f3836a46e536609d672d7cef1cffa0614a4f6286ab7f3fab0baf595b4c3c2e43f979f4f4a89165c24698f71406b4330a333f6c8ee018420b2b47735295043123459fafeb5886fc044a3805b162714a3436f5b364c0713a4be82a7550f37f88cd7f61c0ec27d887285da7ecb4eb32963c8205eff6d5bf532b72976c5f0a24d6d4d2bf4030f04a47a15fb4de2631361fe0895aeacd2028401c5c183223647c1e765e6406542eeac4d979e6a493e389a649af7ddb35fadd32cf1edaeaaf0982ae8131084ae4759e2af1dbd007f7ce00900437be6d8d3559210b3011d1fe52e8485cc5c14ad4aab4c03c7dec4302e7f72abb7fcc799899cec17308151a758b810369c4d53c443cb1278709df6336f84fa39e51d208b4507a31e6f06352dbd99d7dadd86215e47ed645a9b89bdce630cf80fc1fe59dc31eae39010a930965b3b0e01096347158d683de6888f3284c1fd47b3e79e0fcc299cd4f519ce067a007ae7ee906d639789fedc850e60a7b4be9dc525e3e58b01f24b065c4b21b9011e74030aba77931bec74698557b4768ae41eeb4caa2f530578bf1f9379fb623a27561bba03c7623400ef975ca2e2d6881e0f96fe1e7f9ec0e8f6aeac30f70f848399c6dc9c4e58bf50aacbe566965b257943f6c9ffe210af0cb488488d67b09164d98f3254cc313f7cf8dab1f2e1ed3a7e4a86ad85707d4fe0e7fe483c7f311912e92bee9b17819b53a39c374cfbadf8c3641bae4177aafacf3394af12310f222dc0a67eba49c1475da8607c25f3ee7b1e1e0961c7d319b32ab549c002b93852af7146f5e74aab020446d9a446582a2bc19a730bafcca463fbe0cf2664e10746ddbf0966ec1e327e1f8fa6bb67e18cf849fa810c938695de5f8df98d3004065c787181f4bd8324c59b18972ac5ca92f96c51b4a63ea130712d70a51c49def99feb37312fa6a52e188de88f5446fa4688514bf96f195bfdae4b248445ef5a37e5c0169c7ee42a8e613e71793486bfb24e37bd0d9f0cfb3db61b45ed731edd5c4bd7b6b133f5f3f51fb3a12e9e43db5a23a4c6c787c803791341f10aa083760413724031ec83d5d5c03e9d3585e6a6c87f51ad4db6d678cae14936c09e24fba69e90fe4c2ebed615e254b1d2a25c12b07c1226c0e9fa9112a49cffc9238d3303d3a9a293c5bdec80545e76b911aec6f956d2122d0ee2bee424aee05e0a25a7ff72e3e1c10f590380f82f1e693fb45b1466cbc7e8ee741ca97775c2ae15c1ad0f4a8221c55e82b4e4ddbbb3d88516fdc26969707143e3175f56b07ea8a7d40660ee346a511e0985c6cde95b573dab7c53cb9d32eb18bdb67147b562dd99124d744703492a89dc8cf387ad17a992a6850ee683953c70547f2c70ac44ddc4563fb0c0c23ac7b806a0172a3a74db45378568306ab3036b5348f96ddec344a899b6058179c070cb5f3a478a02d94dbd836a0e2223194e406c2296ceb6dd39667ce62b4c191889ea052f382b9c051c272480111fe287b84c10cf7512a6dd0a601a1cb41545915925a63bd09f9d77a1bc156a7d822e204029363b3c713c5cbef590efd01c4ffe00b816745a37d83b27ab05c3a0c2d6ff800276f3fe502bb3bd7b60b38d32376246a3384554072fe63ec409a0182d588b839d319c680f830583db3e4f5071eaa066689e9e19539d9a12fefffe223288b77600dabde9b2bea871cc1ea2b3318a9699d736f02490d76c1e457aaf45ce318445ce10625b43059694e996ace387580589f9f37944b799337fa38ef9292d2276e0f659471134aaef911514212553779be2ba00816187465e278ba2d03e66cd633f9a274ce882ae971f2d07cb4fde38bf88327aea83d5303011b0263f24630916b796d532e5437179882b0470dbf8d693bbae4015ef28b3d57b5e3b643068dc1d1921291f4f1280a8183532298dffc2501cd3ff0bfb6b0e61d2a59c596f21b98db4d730e155936e98c95c96ac6231b1232e4ed89ce65311fe66199e113f9f69084c31444ae9f106e909bc070d83c1cffc514189c1e0b6763c2732a227a6229407af592772c2b843fb944896ff61161449b6df045ba618d117d8361733198f0963850df3e077aa538571efe279f9c7e006e2c882f5301706ee2bbbe769164cf7d9597d0142d0052641eb43a9ffe76d978384ea8c10050a80021d3c9177fcb29652b4906081d926ea23e749c9272731aff7fd0c271ac4859a5829c5b406a1c363752fecb1a76b201a0df467efd6ffe6adc0debe36ec6d1fc84ccebfa07cb136bbea0f1ef74983bdfc087e050430f5aa395cd8786b609941fbce55ab90e00000000000000685cab24847d85f8bc7a5784a4367ba06690cf1a88acfeddcb7cc44c9797f4f0e5daf9d301c6e702652268530c22df26d14da8768a8951f26849fa1e20015878cb6332d033531b8128233e69094cfc5dd71ba9af36ba6aa1c37b24805a45c3dd302bbc1dc8e9348f9a47540e14016bd5357e7978092497b800a97425363a42454eb04c32c9ac959fb37eb00ed6e31f81b2aa67d9f4930eb31dc2260151d845f9865d2b3a301ce3bef54a977492039eb908512a083087961f90ee568c5e5c60d6e726dda2c3f31c072979e09d8fd6f2365f65ef46399a183511904226d8ec72805582107ff5951d2e0d5c028d29e940fa068c0ca1c238420e53297c31d68f70fb543f347d91afb5d66ef1e8460a1431b638a6b0ae259f7fe8eb03aae9ef1ea4cfcfbac7e7b20b5c46ea8b0a2e88527bf54fd866362ab6a99e466bb029259f35711bc376b2f70edd738b48451f20ee404938821419ee5eace0171b3fd73d57bf0a723152933ccb84d567e79737b33e334dab955cdc03298215a2943ee493d815af83d48ee808a5e508903cc574ea4b52de645a18b0f43cd6b81a15a7f089cc7596adde2ea693381c7eaa2e246b9cbec98bb4e8ea3db8b47e57ef8d3a2eace3e2dcc083f6625f4e86bdbe2d6c57fa8ae4902ae9964c847eb292998d485d3326a7076360b85365edd5b733876abb5e26943481a52b10a1c95f34aed88568b873ef481798fbafe036d5d580c7437cb1a651e2a89d98d9002d0bf6418a271f9808df4b2ceaa8508e6c1d7d58e96d87f6db011395a0b74cb39e066411fef6c8ce7942ef8d8bb826be0b06ecada10e46f7ac25eb7ab0e3339752c8d0784659d72a287ea9a5e3a699977456695a6f9fe40eb8f7269b414cda403ba94f512c332fcea82f1927a5695ea2eb2ce7380ae74a0672ffe7fd2c4a19715a984d518b5be67543c31e42962b4c030fbdfedc5977b03d85294db2578d6561fdd9e0f9cfaf7eb1609bfab67105b227ec43189e449c4f2f17b8175b3afb0087f70786673353a3913cd03240761b5ff91a1e6510499c1f4152a759b1ca39ace773a1f27a5a88bb94a4201a91addf5c2c8587547e454d186b562cf89a41a02c36765565c3d753a2d8127d3908853f5ccc1c35346f22284573695c5695a520ace2d0cd13c1138b1fb10f74487b9a2c7a5e01195a1629d3e5d567a77a2aaee24d2936c2618c63eb5cdeb64f5592cb38175d416c05588f03b287c6e16329fee69c8294db5b5bbb81499d7ef18ddb93144c897253e8330cea3be31bab73de42284fce239597ab7cd5b68cfba057b01aaab0f0d4191c31b407fd8f9c7f04eaca31e5d240c7910663bde4ad478f134d09dca902e6acdd292f2745c73cecea2204a56d0098c32da73eeee41b348d5826109ccfd2397bb73a25ebb7e95537df71cce504f14c219ec525795d2fd5027cea9810aadc77e1b874f9fc4e33ed7b90a4007bbc341493302e4e2cbca2a8229fd2c3db7faecec2b8805bde9d92a29f6a7096cfc05ed5b678566e6c079dddfcc0b6c17541047beb477c4493a1588be177490db134d69a225aa6848b27494f17c3882ea2ee436ac1e981256ccaa70ba1f7a621385694b62bda8c4f6b04c61d6798afdc9cec019392d1242a35c3382b09aab4999e1b383714622f2ab80f275ecc8ea67694f020466aef6ed5a4535f32df47f0478e00194b44b9003f6dff232bdecbdf2a06da35246dfbc0d40becfdd5ecf971f0f408913bf094282fa2272cc5683604945e3eba52231f131c81b1035dcbb8a4292059ceaf92f36877aa15049bacc544d2c9bee4eb1bd01d76861557e646082f118454c37bbc7d08a311b4668f2777912cf882439b47e7d3c08bfdefe31e3effcbddf9e5bf175fd7c1ae85f6436cd817580970b3d8303e33ea128d222e8adb1de246fd9583c0385fe89bbf9af2cd82a38083069a997175fc7e96096052d55620554bd723b28de9a177b0aa0a5928d3d991c7da85a3513b1fffb8c75b5bc2874491ac6affc2a71ef1d639a90bb4c53624139ab8764f60e7470592608a520dfa0289c3be27e2a8f6525a31830aaf887213285eeb4286509c4904f2f5c6058e29c9c5c7886e107fc8b6411ea86bef63c88c863c7d7be52424a0126b8642d83946792de32c6150e9ce9be9d20eada4b47bd24fda102ee8cbc3a870743ab1839f979076b79cffac7d2234db5b345de7f994110bbb873a7058e5ad2fe9d9f0527a4a7b3799f81a06c9ee25c1a4a6317c3c454e9b9bb03360775184c37897db2e23dda4fc5cfbbdd477f564ad48416224ab75742d8d2375773c34325b36cead158372821e3db81a2dc99fc4293b39b183f1a71afbd4faa5e66a0d457f15424ca9c39969a85226b03b1ba8a98b0655a4581c7849bad2b1e5eb09236284779235ec2c0f44d547705298a9076bd32cdbb0a1169529a4780629e8cc291bbe25d98eaca72e934b7ef3a26d60dcebb509b8122d9d3de366b1c81c01e1a3f2ec0556d4759917612ba175b48f47534e592293e50e66dfbd0e1d0373cb3f58a43f3c32408ceba4c2614ff35b72a2cc03166f9866904f7ec19650edc06ca73ef63fc759094ae06a8405144dc22a0480155057169e59897eded975544a3e26dc0ba673a803fd35e16f6ef4695fc554e0c92fd97d3287f368b06ebb41e7d9a5956ceac39f27a82dda86f981519e31f544d844109d5ed58c159e7aa1805461149c604f262a1dd0c2f072f8f5b9b9bd4542cff3050c85b981dbf1731805fee07a4f92bb1828842f34395b90b76834a624690bfd431185026fd090c8dce10ac30ea68502dc8d2d85f836eb747c9bb8b6d16da1cb692f33b77f80c05b250496f3a880dca37c6514d5b5e2cf90d0b18bc31fd27a2c96110b9aacbe2afce417c415778e58e0b9ace5f209696980cc45e51bc292b3d5c247e2c8fffecd214d927aab0fecd0f50b359df4971944891fbefd40345e7f14e833486c126df0c1839032e64fa59280d699eed79f03acc206d6a5340cc1c5deb4204cb8780830497f23522b89fc503e6a8a01d11e83de680bbaed65fbd970c71e2087213c3ee64280bcc1f616a274c11d01f0d81f084c3873bc871d50395e05f658a75915118b0da8281a310fc905488ae03aa89726d74d6ed6da76d6dffcdafd7b4d2fa4a867e9b42cdf71db56c542ccf1270974f1efcd80f70fd463d2cfc03c8e111f2d1232bf6e228123c316ecb60eb6d8f650e9281381d540b29b520be3f921bd314eff9ca241b69d95e78256f1bfcbfe37a9f094716d36af6e1ce36184bc6a4dfb88320ee186f52db245dd50d8af51f489f792494c14efffdb88faa1d9ad1d633b327b7ff6523bbfdfe4274b856bbca9e2847499923738207a399dffb514bba855b75d12c9c57aa2e58db0000210f5ad375d3b697f3dda96f5f78c13bfd6d01a5050e01a2e55cc2695a3f2193820286a688cc144fb9043e7c6772bf2cbd7bb5a7a57fee1c18dbdfaadfa5be0d1adfa55dd3a8480807708ee6e11d9f9dfc5bc682e104795928e56af800b42c9c07a25237b092ba1e93a525ed5b5b39ad6e02ac6b41e136c904dd4592370c322f5eb595ed30fa00a277928dfc765930af1c2936f5ad2425c411980b5bb012e0e240c7d50f16ba990540a765cc1fef3809a0344ce6d083ab8705378fabe14a2e63e12eaef453273a78a7d3fabff1fe6a9ba07e208740ab8ed6e50abe2a85b649e1d3ec2f3191e010b50a7ddffdfb25e53e196775655a1ae707daafc4e9709927eb961faaeb1be21ddde0fab9665774086c34af3beac362a5cb712b786a5e1c8811ef574c5b269946939ed530c5bf42306016b69957dd57d83c88cc32a366c0aacc964c693fa7e03c1e89832f2076ec03995f1f9b2cde66acdffa3ca33776b61176369c78e87b2eeb0a14d7cbbaa597c0ae8e1014660baf06e22a6fc4974772975b7d7d0e5e5bc6a4cdf4cd5f2a95dcfc8194d93b273e59baeb350935aef906bdb94d1fd3c0781aa8fcb17f3f68c9afe090ba059acf599d2934481eae73717c4354c8c2b4d425ef7073968624c5d91e46322cc23091c58643316acff626f160b9cb770e0d9595d33cb6f44915d7efb6747973ffbf34119bba44d074472e661095012ad94af00463520deb45a6b6b7b6a173b23aef637e4cc0363d43c5ddb43c81936143f7db63f7f7771a611930f9f82a12f3c59b0f72de98bbc75ad33f1823fa872be154b19f16f0fba01ac3d64d46cbfc1850d1b4b5790cd86633b1880b86fc34a8b9f31100950ea0bda3abf2b037e21ee348418df67cc1d056d74125f9c73b42b104b6ad322ffebfe658dc3c0a06af44d73324b5ae59e2bd99d4782ec053ea07513a271ecf8651b25bc3e026bc88a4aa1513a2b4d4e173c1e21c77302ce64be8331c4d5b6203bbccd96dfbf9debb29a167753e06c55ca88550ec186bd20b3d94f7c2af719bc638cac3f8cc6c80220fd5f4be03bab9bb975e5effa4c5eac098c531590ec5eeaa90faec3630671d9e1a454577b01b73bfea67456ae187f0e61a9292612f428ab8c5780a3803b7dc2ec8221181db3876f2c00", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0x7, {0x80000001, 0x0, 0x0, {0x4, 0x4ae74d36, 0x408, 0x205, 0x3, 0x6d6d, 0x9, 0x200208, 0x6, 0x6000, 0xcd35, 0x0, 0xffffffffffffffff, 0xf, 0x800003}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00') r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r6, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 3.539921711s ago: executing program 0 (id=758): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="d976f308c05c"}) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) syz_extract_tcp_res(&(0x7f00000002c0)={0x41424344}, 0x8, 0xfffffff7) write$tun(r8, &(0x7f0000000080)={@val={0x8, 0x800}, @void, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x6, 0xffce, 0x20, 0x0, 0x8, 0x2f, 0x0, @empty, @empty}, {{0x8100, 0x4e22, 0x41424344, r9, 0x0, 0x0, 0x5, 0x20, 0x5}, {"f5fcffffff07e73dd00000000000008f82c0119dc6ee17b7e01a638e5d7073fbd2086ef89d28ed782a82cad2fb4fc4924a538e501475b65d"}}}}, 0x64) 3.535162314s ago: executing program 1 (id=759): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x3f, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000003c0)={0xffffffffffffffff}, 0x13f}}, 0x20) futex(0x0, 0x8a, 0x0, 0x0, 0x0, 0x4) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000440)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r2, 0x1}}, 0x18) (async) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x0, 0x10000}) r3 = msgget$private(0x0, 0x14) msgsnd(r3, &(0x7f00000002c0)={0x2}, 0x8, 0x800) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x12, &(0x7f0000000140)=0x4, 0x4) (async) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 3.534924925s ago: executing program 3 (id=760): socket$inet6(0xa, 0x80002, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8, 0xca000000}, 0x0, 0x0) 3.473780577s ago: executing program 3 (id=762): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000002740)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002700), 0x2, 0x3}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="80b83d317538fefdda8cc7000000d3a647e7d6afb8691280", 0x18}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0x1001}], 0x3) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) 3.26022842s ago: executing program 2 (id=764): madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)=[{0x0, 0xffe}], 0x1, 0xe4, 0x80400000, 0x2, 0x0, 0x2}) 3.182715573s ago: executing program 1 (id=765): r0 = socket$inet(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x101000) (async) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x1c, 0x48, 0xe4945d2eb074039d}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a1c000000000a0104000000000000000002000000080001006e61740040000000030a0104000000000000000002000000080001006e6174000800030073797a00080007006e61740014000400080001000000000308000200ffffff9c84000000060a0104000000000000000002000000080001006e6174000800020073797a00600004005c0001000b00010074617267657400004c00020009000100444e4154000000000800020000000002340003"], 0x108}}, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@multicast2, @local, @private=0xa010101}, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) (async, rerun: 32) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r5, 0x1000) syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x709080) (async) dup3(r3, r5, 0x80000) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r6 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64) setsockopt$IP_VS_SO_SET_TIMEOUT(r6, 0x0, 0x48a, &(0x7f0000000000)={0x8, 0xfffffff3, 0x80000000}, 0xc) socket$unix(0x1, 0x5, 0x0) (async) socket(0x10, 0x80003, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x40000) 3.121024639s ago: executing program 3 (id=767): syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000002540)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd84f, 0x80000, 0x2004, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x435be, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7dc, 0x40, 0xffffffff, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4000000, 0x8200, 0x2, 0x4c}}], 0x1, &(0x7f0000000340)={0x2e, 0x56, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x700}, 0x1f, 0x0, '\x00', {0xfff9, 0xdc1, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x60000, 0x3) 2.748338445s ago: executing program 2 (id=769): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) syz_emit_ethernet(0x22, &(0x7f0000002840)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}}}}}, 0x0) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000006000/0x1000)=nil) syz_clone(0x204000, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="b1", 0xffe0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback={0x300000000000000}, 0xffffffff}, 0x1c) 2.302710096s ago: executing program 0 (id=770): unshare(0x6a040000) openat$mice(0xffffff9c, 0x0, 0x301) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000000, 0x19ee0}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @private=0xa010102}, @IFLA_GTP_CREATE_SOCKETS={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.204654857s ago: executing program 2 (id=771): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010430b030000000000000109022400010000400009040000010300000009210000000162"], 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c4178c40ba0d0010"], 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x4, @loopback, 0x8}}, 0x20, 0x9, 0x9, 0x3d7, 0xd0, 0x8, 0xf9}, &(0x7f00000001c0)=0x9c) syz_usb_ep_write(r0, 0x81, 0x18, &(0x7f0000000080)="b9425bd02396754b7efc9631358706b66c78dd26900030fd") syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async) syz_usb_disconnect(r0) (async) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) (async) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010430b030000000000000109022400010000400009040000010300000009210000000162"], 0x0) (async) syz_usb_disconnect(r1) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c4178c40ba0d0010"], 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x4, @loopback, 0x8}}, 0x20, 0x9, 0x9, 0x3d7, 0xd0, 0x8, 0xf9}, &(0x7f00000001c0)=0x9c) (async) syz_usb_ep_write(r0, 0x81, 0x18, &(0x7f0000000080)="b9425bd02396754b7efc9631358706b66c78dd26900030fd") (async) 1.712716517s ago: executing program 3 (id=772): write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0xfffffffffffffd9d, &(0x7f0000001f40)={&(0x7f00000018c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000009f9bb6ea9ebd13a80000000000000000000000000000000000000a0000000000000000000000804000000000000000000800000000000000000000000044000500ac141440000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000030000000000008000000000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380100002100010000000000fefffffffc020000000000000000000000000000ac1e0001000000000000000000000000fffc0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200000000000000e8001100fe80000000000000000000000000001164010102000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe880000000000000000000000000101200100000000000000000000000000022b030000043500000a000200fe88000000000000000000000000e92cbf22a7cd300101fc000000000000000000000000000000fe8000000000000000000000000000bbffffffff0000000000000000000000006c01000000"], 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f00000005c0)="1155", 0x2}, {&(0x7f0000000480)="f2e1", 0x2}], 0x2) close(0xffffffffffffffff) 1.421916762s ago: executing program 4 (id=773): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpgid(0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = syz_pidfd_open(r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) pidfd_send_signal(r2, 0x21, 0x0, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = openat$ttyS3(0xffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$TIOCGPTPEER(r6, 0x5441, 0x6) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0xe, 0x0, 0x949, 0x9, 0x8, 0x2, 0x3}, 0x0) r7 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7, {0xec}}, './file0\x00'}) landlock_restrict_self(0xffffffffffffffff, 0x5) r8 = fsopen(&(0x7f00000002c0)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) r9 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', r10, 0x20, 0x40, 0x1001200, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x67, 0x0, 0xf9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) 1.214222005s ago: executing program 3 (id=774): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="3800ffff", @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 937.532727ms ago: executing program 4 (id=775): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x1000000, &(0x7f0000004440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}, 0x1, 0xffc99a3b, 0x0) read$FUSE(r0, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000043c0)={0x50, 0x0, r1, {0x7, 0x2b, 0x6, 0x800, 0x101, 0x2, 0x2, 0x3ff, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000023c0)="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", 0x2000, &(0x7f0000007080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002340)={0x78, 0x0, 0x7, {0x969, 0x2, 0x0, {0x6, 0x7ffffffffffffffe, 0xfffffffffffffc01, 0x400000000000006, 0x6e, 0x4, 0x4, 0x2, 0xbfb, 0x2000, 0x1, r2, 0x0, 0x5, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 828.312077ms ago: executing program 4 (id=776): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000180)="da", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @loopback={0x91ffffffffffffff}, 0xfffffffd}, 0x1c) 769.885185ms ago: executing program 4 (id=777): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000100001000000000c000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) 672.287067ms ago: executing program 3 (id=778): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2e, 0xfffffffd, {0x0, 0x0, 0x12, 0x0, {0x1, 0xa}, {0x5, 0xe}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x7, [0x1, 0x10, 0x45, 0x10, 0x7, 0x1d, 0x9, 0x8, 0xb, 0x5, 0xf, 0x2, 0x2, 0x6, 0xc, 0xd], 0x1, [0x200, 0xc, 0x101, 0x7, 0x486, 0x40, 0x8, 0x5, 0x800, 0x2a, 0x9, 0x134e, 0x9, 0x6, 0x8, 0xba], [0x3, 0x9, 0x3, 0x0, 0x3, 0x0, 0xc5d4, 0x4, 0x3, 0x48aa, 0xffff, 0x7, 0x5, 0x6, 0x6, 0x6]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc004041}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a40001402000", 0x3a}], 0x1}, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) 661.145633ms ago: executing program 4 (id=779): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'batadv0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0) 655.082179ms ago: executing program 0 (id=780): syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') (async) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5962, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4110}, 0x1}) (async) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000b500000036000000d2e057c89500000000000000"], &(0x7f0000000240)='GPL\x00', 0x3, 0xc3, &(0x7f0000000480)=""/195}, 0x94) 472.750893ms ago: executing program 0 (id=781): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ec0)=@newsa={0x14c, 0x10, 0x1, 0x0, 0x14000000, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xfe}, {0x0, 0x0, 0x1, 0x0, 0x40000000000000, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000, 0x2}, {0x10, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x73, 0x4c}, [@algo_crypt={0x60, 0x2, {{'cbc(serpent)\x00'}, 0xc0, "51ad34d9ea841223e5d0f932af16e92125ccc28f24846c99"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 375.268447ms ago: executing program 0 (id=782): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x9000000, 0x33524742, 0x7, 0xa, [{}, {0x0, 0x8}, {}, {0x80}, {0x0, 0x4}, {0x0, 0xffffffff}, {0x4, 0x1000}, {0x0, 0x80000000}], 0x4, 0x0, 0x0, 0x1}}) 129.359635ms ago: executing program 1 (id=783): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0xf5ffffff, 0x0, {0xa, 0x0, 0x8}}], {0x14}}, 0x3c}}, 0x0) 85.026917ms ago: executing program 4 (id=784): r0 = syz_io_uring_setup(0x2fef, &(0x7f0000000140)={0x0, 0x1715, 0x3000, 0x2, 0x164}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) r4 = fsopen(&(0x7f0000000000)='befs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='/dev/null\x00', &(0x7f0000000080)='/dev/null\x00', 0x0) readv(r4, &(0x7f0000000100)=[{&(0x7f0000000280)=""/144, 0x28}], 0x300) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000340)={0x2e, 0x4d, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x1, 0x3b7, 0x0, 0x0, 0x1000, 0x7}}}, &(0x7f00000003c0)) 6.930566ms ago: executing program 1 (id=785): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="eb", 0x1, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d1a090509000000e9ffff08050b01"], 0x0) 0s ago: executing program 0 (id=786): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'batadv0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100000e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0], 0x30}}, 0x0) kernel console output (not intermixed with test programs): T7347] netlink: 144 bytes leftover after parsing attributes in process `syz.3.392'. [ 188.576436][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.601486][ T7355] netlink: 24 bytes leftover after parsing attributes in process `syz.1.393'. [ 188.696728][ T7349] bond2: (slave dummy0): making interface the new active one [ 188.699713][ T7349] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 188.789554][ T7354] dummy0: entered promiscuous mode [ 188.794470][ T7354] bond2: (slave dummy0): Releasing active interface [ 189.117317][ T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 189.265168][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 189.265885][ T25] usb 5-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 189.271631][ T25] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 189.271665][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.285327][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.285411][ T25] usb 5-1: Product: syz [ 189.285457][ T25] usb 5-1: Manufacturer: syz [ 189.285499][ T25] usb 5-1: SerialNumber: syz [ 189.334703][ T25] usb 5-1: config 0 descriptor?? [ 189.358302][ T25] keyspan 5-1:0.0: Keyspan 1 port adapter converter detected [ 189.358629][ T25] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 189.358701][ T25] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 189.438050][ T25] keyspan 5-1:0.0: unsupported endpoint type 0 [ 189.438166][ T25] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 189.438253][ T25] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 189.438340][ T25] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 189.438430][ T25] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 189.509495][ T25] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 189.935473][ T5620] net_ratelimit: 1 callbacks suppressed [ 189.935498][ T5620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.966096][ T7390] fuse: Bad value for 'user_id' [ 189.966118][ T7390] fuse: Bad value for 'user_id' [ 189.976601][ T7390] netlink: 72 bytes leftover after parsing attributes in process `syz.0.403'. [ 190.256879][ T5620] usb 5-1: USB disconnect, device number 9 [ 190.272753][ T5620] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 190.309251][ T5620] keyspan 5-1:0.0: device disconnected [ 190.322245][ T7392] fuse: Bad value for 'user_id' [ 190.322268][ T7392] fuse: Bad value for 'user_id' [ 190.385151][ T7392] netlink: 72 bytes leftover after parsing attributes in process `syz.0.404'. [ 190.607322][ T7394] netlink: 32 bytes leftover after parsing attributes in process `syz.0.405'. [ 190.843656][ T7403] vlan2: entered allmulticast mode [ 190.843681][ T7403] veth0_vlan: entered allmulticast mode [ 190.919146][ T7405] netlink: 'syz.4.410': attribute type 1 has an invalid length. [ 190.955773][ T976] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 190.981047][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.004863][ T5620] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 191.054898][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.106896][ T976] usb 2-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 191.110317][ T976] usb 2-1: config 253 has an invalid interface number: 130 but max is 0 [ 191.110345][ T976] usb 2-1: config 253 has an invalid descriptor of length 110, skipping remainder of the config [ 191.110367][ T976] usb 2-1: config 253 has no interface number 0 [ 191.110406][ T976] usb 2-1: too many endpoints for config 253 interface 130 altsetting 5: 32, using maximum allowed: 30 [ 191.110447][ T976] usb 2-1: config 253 interface 130 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 191.110477][ T976] usb 2-1: config 253 interface 130 has no altsetting 0 [ 191.140692][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.140779][ T976] usb 2-1: Product: syz [ 191.140815][ T976] usb 2-1: Manufacturer: syz [ 191.140860][ T976] usb 2-1: SerialNumber: syz [ 191.212774][ T5620] usb 1-1: unable to get BOS descriptor or descriptor too short [ 191.212826][ T5620] usb 1-1: New USB device found, idVendor=1199, idProduct=0112, bcdDevice=be.fc [ 191.214181][ T5620] usb 1-1: config 4 has an invalid interface number: 85 but max is 3 [ 191.214211][ T5620] usb 1-1: config 4 has an invalid interface number: 94 but max is 3 [ 191.214234][ T5620] usb 1-1: config 4 has an invalid interface number: 168 but max is 3 [ 191.214255][ T5620] usb 1-1: config 4 has an invalid interface number: 240 but max is 3 [ 191.214276][ T5620] usb 1-1: config 4 has no interface number 0 [ 191.214294][ T5620] usb 1-1: config 4 has no interface number 1 [ 191.214311][ T5620] usb 1-1: config 4 has no interface number 2 [ 191.214328][ T5620] usb 1-1: config 4 has no interface number 3 [ 191.214399][ T5620] usb 1-1: config 4 interface 85 altsetting 252 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 191.214431][ T5620] usb 1-1: config 4 interface 85 altsetting 252 has a duplicate endpoint with address 0x9, skipping [ 191.214456][ T5620] usb 1-1: config 4 interface 85 altsetting 252 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 191.214485][ T5620] usb 1-1: config 4 interface 85 altsetting 252 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 191.214514][ T5620] usb 1-1: config 4 interface 85 altsetting 252 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 191.214542][ T5620] usb 1-1: config 4 interface 85 altsetting 252 has a duplicate endpoint with address 0x9, skipping [ 191.214568][ T5620] usb 1-1: config 4 interface 85 altsetting 252 has an invalid descriptor for endpoint zero, skipping [ 191.214592][ T5620] usb 1-1: config 4 interface 85 altsetting 252 has a duplicate endpoint with address 0xB, skipping [ 191.214620][ T5620] usb 1-1: config 4 interface 85 altsetting 252 has an invalid descriptor for endpoint zero, skipping [ 191.214644][ T5620] usb 1-1: config 4 interface 85 altsetting 252 endpoint 0x4 has an invalid bInterval 238, changing to 7 [ 191.214685][ T5620] usb 1-1: config 4 interface 94 altsetting 253 has a duplicate endpoint with address 0x4, skipping [ 191.216277][ T5620] usb 1-1: config 4 interface 94 altsetting 253 has a duplicate endpoint with address 0xF, skipping [ 191.216306][ T5620] usb 1-1: config 4 interface 94 altsetting 253 has a duplicate endpoint with address 0x4, skipping [ 191.216332][ T5620] usb 1-1: config 4 interface 94 altsetting 253 has an invalid descriptor for endpoint zero, skipping [ 191.216355][ T5620] usb 1-1: config 4 interface 94 altsetting 253 has a duplicate endpoint with address 0xF, skipping [ 191.216388][ T5620] usb 1-1: config 4 interface 94 altsetting 253 has a duplicate endpoint with address 0x6, skipping [ 191.216423][ T5620] usb 1-1: config 4 interface 168 altsetting 138 has a duplicate endpoint with address 0xF, skipping [ 191.216447][ T5620] usb 1-1: config 4 interface 85 has no altsetting 0 [ 191.216467][ T5620] usb 1-1: config 4 interface 94 has no altsetting 0 [ 191.216484][ T5620] usb 1-1: config 4 interface 168 has no altsetting 0 [ 191.216504][ T5620] usb 1-1: config 4 interface 240 has no altsetting 0 [ 191.328744][ T5716] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 191.342585][ T5620] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.342615][ T5620] usb 1-1: Product: syz [ 191.342631][ T5620] usb 1-1: Manufacturer: syz [ 191.342647][ T5620] usb 1-1: SerialNumber: syz [ 191.501547][ T5716] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 191.501726][ T5716] usb 3-1: too many configurations: 86, using maximum allowed: 8 [ 191.615353][ T5350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.637100][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.637134][ T5716] usb 3-1: Product: syz [ 191.637151][ T5716] usb 3-1: Manufacturer: syz [ 191.637168][ T5716] usb 3-1: SerialNumber: syz [ 191.694658][ T7388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.705195][ T7388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.818583][ T5620] sierra 1-1:4.85: Sierra USB modem converter detected [ 191.837276][ T5620] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 191.842429][ T5620] usb 1-1: Sierra USB modem converter now attached to ttyUSB1 [ 191.870357][ T5620] usb 1-1: Sierra USB modem converter now attached to ttyUSB2 [ 191.889851][ T5620] usb 1-1: Sierra USB modem converter now attached to ttyUSB3 [ 191.933580][ T5620] sierra 1-1:4.94: Sierra USB modem converter detected [ 191.957538][ T5620] usb 1-1: Sierra USB modem converter now attached to ttyUSB4 [ 191.964305][ T5620] sierra 1-1:4.168: Sierra USB modem converter detected [ 191.999082][ T5620] usb 1-1: Sierra USB modem converter now attached to ttyUSB5 [ 192.017986][ T5620] sierra 1-1:4.240: Sierra USB modem converter detected [ 192.018456][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.022636][ T5620] usb 1-1: Sierra USB modem converter now attached to ttyUSB6 [ 192.051046][ T5620] usb 1-1: USB disconnect, device number 8 [ 192.094857][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.129237][ T5620] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 192.147381][ T5620] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 192.180519][ T5620] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 192.228029][ T5620] sierra ttyUSB3: Sierra USB modem converter now disconnected from ttyUSB3 [ 192.232551][ T5620] sierra 1-1:4.85: device disconnected [ 192.271196][ T7418] fuse: Bad value for 'user_id' [ 192.271217][ T7418] fuse: Bad value for 'user_id' [ 192.288520][ T5620] sierra ttyUSB4: Sierra USB modem converter now disconnected from ttyUSB4 [ 192.289076][ T5620] sierra 1-1:4.94: device disconnected [ 192.301421][ T7418] netlink: 72 bytes leftover after parsing attributes in process `syz.3.414'. [ 192.326534][ T5620] sierra ttyUSB5: Sierra USB modem converter now disconnected from ttyUSB5 [ 192.327123][ T5620] sierra 1-1:4.168: device disconnected [ 192.366410][ T5620] sierra ttyUSB6: Sierra USB modem converter now disconnected from ttyUSB6 [ 192.367001][ T5620] sierra 1-1:4.240: device disconnected [ 192.609828][ T976] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 192.631555][ T976] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 192.631602][ T976] dib0700: firmware download failed at 7 with -22 [ 192.784031][ T976] usb 2-1: USB disconnect, device number 11 [ 192.881510][ T7426] netlink: 52 bytes leftover after parsing attributes in process `syz.3.416'. [ 192.881537][ T7426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.416'. [ 192.881558][ T7426] netlink: 52 bytes leftover after parsing attributes in process `syz.3.416'. [ 193.056414][ T5620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.134892][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.312608][ T7433] netlink: 'syz.3.418': attribute type 2 has an invalid length. [ 193.634317][ T7433] : entered promiscuous mode [ 193.724235][ T31] audit: type=1326 audit(1789499953.982:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7440 comm="syz.4.421" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f290ec code=0x7ffc0000 [ 193.724322][ T31] audit: type=1326 audit(1789499953.982:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7440 comm="syz.4.421" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f290ec code=0x7ffc0000 [ 193.755821][ T31] audit: type=1326 audit(1789499954.012:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7440 comm="syz.4.421" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f290ec code=0x7ffc0000 [ 193.769763][ T31] audit: type=1326 audit(1789499954.012:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7440 comm="syz.4.421" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f290ec code=0x7ffc0000 [ 193.801106][ T31] audit: type=1326 audit(1789499954.052:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7440 comm="syz.4.421" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f290ec code=0x7ffc0000 [ 193.801164][ T31] audit: type=1326 audit(1789499954.052:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7440 comm="syz.4.421" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f290ec code=0x7ffc0000 [ 193.850885][ T31] audit: type=1326 audit(1789499954.112:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7440 comm="syz.4.421" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f290ec code=0x7ffc0000 [ 193.857583][ T31] audit: type=1326 audit(1789499954.112:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7440 comm="syz.4.421" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f290ec code=0x7ffc0000 [ 193.864241][ T31] audit: type=1326 audit(1789499954.122:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7440 comm="syz.4.421" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f290ec code=0x7ffc0000 [ 193.892498][ T31] audit: type=1326 audit(1789499954.152:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7440 comm="syz.4.421" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f290ec code=0x7ffc0000 [ 194.095516][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.230958][ T5716] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 194.231029][ T5716] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 194.231051][ T5716] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 194.275947][ T5716] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 194.355913][ T5716] usb 3-1: USB disconnect, device number 11 [ 194.361984][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.362355][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.397464][ T7451] netlink: 'syz.1.423': attribute type 1 has an invalid length. [ 194.596487][ T7459] fuse: Bad value for 'user_id' [ 194.596510][ T7459] fuse: Bad value for 'user_id' [ 194.622004][ T7459] __nla_validate_parse: 2 callbacks suppressed [ 194.622028][ T7459] netlink: 72 bytes leftover after parsing attributes in process `syz.0.426'. [ 194.842304][ T7451] 8021q: adding VLAN 0 to HW filter on device bond2 [ 194.863996][ T7455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.873587][ T7455] bond2: (slave batadv0): making interface the new active one [ 194.874524][ T7455] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 194.906676][ T7457] bond2: (slave batadv0): Releasing active interface [ 195.145394][ T30] net_ratelimit: 2 callbacks suppressed [ 195.145416][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.205001][ T7470] lo: entered promiscuous mode [ 195.222995][ T7470] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 195.616074][ T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.780412][ T7499] fuse: Bad value for 'user_id' [ 195.780435][ T7499] fuse: Bad value for 'user_id' [ 195.800202][ T7499] netlink: 72 bytes leftover after parsing attributes in process `syz.3.437'. [ 196.186676][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.478410][ T7510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.438'. [ 196.633836][ T7512] netlink: 20 bytes leftover after parsing attributes in process `syz.3.440'. [ 196.648811][ T7518] netlink: 'syz.4.442': attribute type 1 has an invalid length. [ 196.704835][ T5620] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 196.712207][ T7507] netlink: 192 bytes leftover after parsing attributes in process `syz.0.438'. [ 196.736636][ T7518] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 196.856152][ T5620] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 196.857867][ T5620] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.893186][ T5620] usb 3-1: config 0 descriptor?? [ 196.917232][ T5620] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 197.129241][ T7521] binder: 7520:7521 ioctl c008ae88 80019080 returned -22 [ 197.150307][ T7524] netlink: 'syz.4.444': attribute type 1 has an invalid length. [ 197.215668][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.374904][ T5350] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 197.512050][ T7514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.512790][ T7514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.525300][ T5350] usb 2-1: Using ep0 maxpacket: 8 [ 197.542133][ T5350] usb 2-1: unable to get BOS descriptor or descriptor too short [ 197.542185][ T5350] usb 2-1: New USB device found, idVendor=12d1, idProduct=142a, bcdDevice= 0.00 [ 197.555204][ T5350] usb 2-1: config 10 has an invalid interface number: 124 but max is 0 [ 197.555282][ T5350] usb 2-1: config 10 contains an unexpected descriptor of type 0x1, skipping [ 197.555336][ T5350] usb 2-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 197.555391][ T5350] usb 2-1: config 10 has no interface number 0 [ 197.555500][ T5350] usb 2-1: config 10 interface 124 altsetting 1 has an endpoint descriptor with address 0x24, changing to 0x4 [ 197.555569][ T5350] usb 2-1: config 10 interface 124 altsetting 1 endpoint 0x4 has invalid wMaxPacketSize 0 [ 197.555627][ T5350] usb 2-1: config 10 interface 124 altsetting 1 bulk endpoint 0x4 has invalid maxpacket 0 [ 197.555699][ T5350] usb 2-1: config 10 interface 124 has no altsetting 0 [ 197.617608][ T5350] usb 2-1: string descriptor 0 read error: -22 [ 197.617984][ T5350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.671197][ T7514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.695897][ T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.697187][ T7514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.736483][ T5350] usb-storage 2-1:10.124: USB Mass Storage device detected [ 197.843198][ T5620] gspca_stv06xx: I2C: Read error writing address: -71 [ 197.880709][ T5620] usb 3-1: USB disconnect, device number 12 [ 197.926951][ T7521] CIFS: iocharset name too long [ 198.156699][ T5620] usb 2-1: USB disconnect, device number 12 [ 198.255442][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.666938][ T7545] fuse: Bad value for 'user_id' [ 198.666960][ T7545] fuse: Bad value for 'user_id' [ 198.672123][ T7545] netlink: 72 bytes leftover after parsing attributes in process `syz.3.449'. [ 199.296036][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.659996][ T7565] netlink: 'syz.0.454': attribute type 1 has an invalid length. [ 199.757508][ T7565] 8021q: adding VLAN 0 to HW filter on device bond5 [ 199.772711][ T25] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 199.867731][ T7567] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 199.935401][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 199.938951][ T25] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 199.950352][ T25] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 26, changing to 7 [ 199.984822][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.984852][ T25] usb 2-1: Product: syz [ 199.984868][ T25] usb 2-1: Manufacturer: syz [ 199.984884][ T25] usb 2-1: SerialNumber: syz [ 200.272474][ T25] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 200.334316][ T25] usb 2-1: USB disconnect, device number 13 [ 200.371509][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.655007][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.705651][ T5624] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 200.744145][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.756407][ T7578] loop9: detected capacity change from 0 to 7 [ 200.771806][ T7578] Dev loop9: unable to read RDB block 7 [ 200.771852][ T7578] loop9: AHDI p1 p2 p3 [ 200.771877][ T7578] loop9: partition table partially beyond EOD, truncated [ 200.772195][ T7578] loop9: p1 start 5472580 is beyond EOD, truncated [ 200.772217][ T7578] loop9: p2 start 167772160 is beyond EOD, truncated [ 200.894885][ T5624] usb 1-1: Using ep0 maxpacket: 16 [ 200.895673][ T5624] usb 1-1: New USB device found, idVendor=046d, idProduct=087c, bcdDevice=b0.7c [ 200.896865][ T5624] usb 1-1: config 64 has an invalid interface number: 238 but max is 0 [ 200.896892][ T5624] usb 1-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 200.896913][ T5624] usb 1-1: config 64 has no interface number 0 [ 200.896944][ T5624] usb 1-1: config 64 interface 238 has no altsetting 0 [ 200.901652][ T5624] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.901680][ T5624] usb 1-1: Product: syz [ 200.901695][ T5624] usb 1-1: Manufacturer: syz [ 200.901712][ T5624] usb 1-1: SerialNumber: syz [ 201.119350][ T7587] fuse: Bad value for 'user_id' [ 201.119372][ T7587] fuse: Bad value for 'user_id' [ 201.121240][ T7587] netlink: 72 bytes leftover after parsing attributes in process `syz.2.462'. [ 201.227331][ T5624] uvcvideo 1-1:64.238: probe with driver uvcvideo failed with error -22 [ 201.244633][ T5624] usb 1-1: USB disconnect, device number 9 [ 201.353818][ T31] kauditd_printk_skb: 53 callbacks suppressed [ 201.353839][ T31] audit: type=1326 audit(1789499961.612:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7584 comm="syz.1.461" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7fc00000 [ 201.388305][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.392770][ T31] audit: type=1326 audit(1789499961.652:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7584 comm="syz.1.461" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7fc00000 [ 201.399590][ T31] audit: type=1326 audit(1789499961.652:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7584 comm="syz.1.461" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7fc00000 [ 201.399764][ T31] audit: type=1326 audit(1789499961.652:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7584 comm="syz.1.461" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7fc00000 [ 201.399882][ T31] audit: type=1326 audit(1789499961.652:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7584 comm="syz.1.461" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7fc00000 [ 201.441509][ T31] audit: type=1326 audit(1789499961.702:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7584 comm="syz.1.461" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7fc00000 [ 201.453169][ T31] audit: type=1326 audit(1789499961.712:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7584 comm="syz.1.461" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7fc00000 [ 201.453242][ T31] audit: type=1326 audit(1789499961.712:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7584 comm="syz.1.461" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7fc00000 [ 201.453380][ T31] audit: type=1326 audit(1789499961.712:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7584 comm="syz.1.461" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7fc00000 [ 201.453517][ T31] audit: type=1326 audit(1789499961.712:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7584 comm="syz.1.461" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7fc00000 [ 201.645996][ T5350] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 201.694828][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.796754][ T5350] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 201.796800][ T5350] usb 4-1: too many configurations: 86, using maximum allowed: 8 [ 201.861943][ T5350] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.861976][ T5350] usb 4-1: Product: syz [ 201.861997][ T5350] usb 4-1: Manufacturer: syz [ 201.862012][ T5350] usb 4-1: SerialNumber: syz [ 202.032690][ T5687] hid_parser_main: 8 callbacks suppressed [ 202.032719][ T5687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 202.032765][ T5687] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 202.117091][ T5687] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 202.240523][ T7612] netlink: 16 bytes leftover after parsing attributes in process `syz.0.468'. [ 202.270015][ T7610] fido_id[7610]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 202.274295][ T7609] loop9: detected capacity change from 0 to 7 [ 202.312870][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.468'. [ 202.333795][ T7609] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.333835][ T7609] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.333861][ T7609] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.333884][ T7609] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.333941][ T7609] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.333976][ T7609] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.333999][ T7609] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.334010][ T7609] ldm_validate_partition_table(): Disk read failed. [ 202.334031][ T7609] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.334072][ T7609] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.334095][ T7609] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.334156][ T7609] Dev loop9: unable to read RDB block 0 [ 202.334227][ T7609] loop9: unable to read partition table [ 202.334430][ T7609] loop9: partition table beyond EOD, truncated [ 202.334444][ T7609] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 202.334444][ T7609] ) failed (rc=-5) [ 202.418224][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.621855][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.466'. [ 202.621883][ T7609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.466'. [ 202.621913][ T7609] netlink: 'syz.1.466': attribute type 18 has an invalid length. [ 202.734862][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.810705][ T5716] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 202.895523][ T7606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.901576][ T7606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.456860][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.677289][ T7641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.476'. [ 203.699345][ T7641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.476'. [ 203.702003][ T7641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.476'. [ 203.775263][ T5687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.989802][ T5350] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 203.989866][ T5350] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 203.989889][ T5350] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 204.013258][ T5350] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 204.093903][ T5350] usb 4-1: USB disconnect, device number 14 [ 204.755491][ T30] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 204.919855][ T30] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 204.936830][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.953814][ T30] usb 5-1: config 0 descriptor?? [ 204.983550][ T7664] FAULT_INJECTION: forcing a failure. [ 204.983550][ T7664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.983589][ T7664] CPU: 1 UID: 0 PID: 7664 Comm: syz.3.484 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.983619][ T7664] Tainted: [L]=SOFTLOCKUP [ 204.983628][ T7664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 204.983642][ T7664] Call Trace: [ 204.983650][ T7664] [ 204.983660][ T7664] dump_stack_lvl+0xe8/0x150 [ 204.983698][ T7664] should_fail_ex+0x410/0x560 [ 204.983729][ T7664] _copy_from_user+0x2d/0xb0 [ 204.983764][ T7664] ptp_ioctl+0xc0d/0x1fc0 [ 204.983800][ T7664] ? kasan_quarantine_put+0xbb/0x1f0 [ 204.983823][ T7664] ? __pfx_ptp_ioctl+0x10/0x10 [ 204.983860][ T7664] ? tomoyo_path_number_perm+0x219/0x5f0 [ 204.983887][ T7664] ? tomoyo_path_number_perm+0x219/0x5f0 [ 204.983920][ T7664] ? __lock_acquire+0x747/0x2de0 [ 204.983971][ T7664] ? lock_acquire+0x115/0x350 [ 204.984012][ T7664] ? down_read+0x2be/0x330 [ 204.984038][ T7664] ? __fget_files+0x2a/0x420 [ 204.984068][ T7664] ? __pfx_ptp_ioctl+0x10/0x10 [ 204.984102][ T7664] posix_clock_ioctl+0xd9/0x140 [ 204.984133][ T7664] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 204.984156][ T7664] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 204.984176][ T7664] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 204.984197][ T7664] ? __fget_files+0x3a2/0x420 [ 204.984227][ T7664] ? fput+0xa0/0xd0 [ 204.984249][ T7664] ? ksys_write+0x242/0x270 [ 204.984286][ T7664] __do_fast_syscall_32+0x27a/0x6a0 [ 204.984307][ T7664] ? do_fast_syscall_32+0x33/0x70 [ 204.984327][ T7664] ? asm_int80_emulation+0x1a/0x20 [ 204.984344][ T7664] ? do_int80_emulation+0x299/0x500 [ 204.984363][ T7664] ? trace_irq_disable+0x3b/0x140 [ 204.984392][ T7664] do_fast_syscall_32+0x33/0x70 [ 204.984413][ T7664] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.984434][ T7664] RIP: 0023:0xf7f150ec [ 204.984450][ T7664] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 204.984466][ T7664] RSP: 002b:00000000f539450c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 204.984485][ T7664] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000040383d0c [ 204.984498][ T7664] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 204.984509][ T7664] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 204.984519][ T7664] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 204.984530][ T7664] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 204.984554][ T7664] [ 205.273785][ T30] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 205.537315][ T5620] net_ratelimit: 3 callbacks suppressed [ 205.537333][ T5620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.749768][ T7674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.752779][ T7674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.820093][ T7672] syz_tun: entered allmulticast mode [ 205.857463][ T7654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.860304][ T7654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.195922][ T7675] syz_tun (unregistering): left allmulticast mode [ 206.342800][ T30] gspca_stv06xx: I2C: Read error writing address: -71 [ 206.352481][ T7682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.352778][ T7682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.352958][ T7682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.398993][ T30] usb 5-1: USB disconnect, device number 10 [ 206.405399][ T7682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.410506][ T7682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.414241][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.449400][ T7681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.575061][ T5620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.640634][ T7684] loop4: detected capacity change from 0 to 7 [ 206.661894][ T7684] Dev loop4: unable to read RDB block 7 [ 206.661938][ T7684] loop4: unable to read partition table [ 206.662173][ T7684] loop4: partition table beyond EOD, truncated [ 206.662222][ T7684] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 206.821002][ T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.836054][ T7686] fuse: Bad value for 'user_id' [ 206.836075][ T7686] fuse: Bad value for 'user_id' [ 208.130494][ T7715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.497'. [ 208.149064][ T7715] netlink: 192 bytes leftover after parsing attributes in process `syz.4.497'. [ 208.195657][ T7723] fuse: Bad value for 'user_id' [ 208.195672][ T7723] fuse: Bad value for 'user_id' [ 208.517202][ T7728] FAULT_INJECTION: forcing a failure. [ 208.517202][ T7728] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 208.517236][ T7728] CPU: 1 UID: 0 PID: 7728 Comm: syz.0.504 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.517258][ T7728] Tainted: [L]=SOFTLOCKUP [ 208.517264][ T7728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 208.517274][ T7728] Call Trace: [ 208.517280][ T7728] [ 208.517286][ T7728] dump_stack_lvl+0xe8/0x150 [ 208.517314][ T7728] should_fail_ex+0x410/0x560 [ 208.517336][ T7728] prepare_alloc_pages+0x223/0x600 [ 208.517362][ T7728] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 208.517382][ T7728] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 208.517403][ T7728] ? __pfx_policy_nodemask+0x10/0x10 [ 208.517431][ T7728] alloc_pages_mpol+0x21e/0x390 [ 208.517456][ T7728] alloc_pages_noprof+0xb1/0x2b0 [ 208.517478][ T7728] folio_alloc_noprof+0x1e/0x30 [ 208.517498][ T7728] filemap_alloc_folio_noprof+0x111/0x460 [ 208.517523][ T7728] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 208.517550][ T7728] __filemap_get_folio_mpol+0x402/0x1000 [ 208.517578][ T7728] aio_setup_ring+0x3b1/0xe20 [ 208.517604][ T7728] ? __pfx_aio_setup_ring+0x10/0x10 [ 208.517654][ T7728] ioctx_alloc+0x313/0x830 [ 208.517686][ T7728] __ia32_compat_sys_io_setup+0xc0/0x210 [ 208.517724][ T7728] __do_fast_syscall_32+0x27a/0x6a0 [ 208.517761][ T7728] ? do_fast_syscall_32+0x33/0x70 [ 208.517787][ T7728] ? asm_int80_emulation+0x1a/0x20 [ 208.517808][ T7728] ? do_int80_emulation+0x299/0x500 [ 208.517832][ T7728] ? trace_irq_disable+0x3b/0x140 [ 208.517858][ T7728] do_fast_syscall_32+0x33/0x70 [ 208.517884][ T7728] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 208.517912][ T7728] RIP: 0023:0xf7f540ec [ 208.517932][ T7728] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 208.517952][ T7728] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 00000000000000f5 [ 208.517977][ T7728] RAX: ffffffffffffffda RBX: 000000000000239f RCX: 0000000080000380 [ 208.517993][ T7728] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 208.518006][ T7728] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 208.518018][ T7728] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 208.518032][ T7728] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 208.518065][ T7728] [ 208.720007][ T976] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 208.888151][ T976] usb 3-1: Invalid ep0 maxpacket: 64 [ 209.010070][ T7734] netlink: 'syz.0.505': attribute type 10 has an invalid length. [ 209.026236][ T976] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 209.175911][ T976] usb 3-1: Invalid ep0 maxpacket: 64 [ 209.176383][ T976] usb usb3-port1: attempt power cycle [ 209.514814][ T976] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 209.559550][ T976] usb 3-1: Invalid ep0 maxpacket: 64 [ 209.684923][ T976] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 209.722393][ T976] usb 3-1: Invalid ep0 maxpacket: 64 [ 209.724442][ T976] usb usb3-port1: unable to enumerate USB device [ 209.866224][ T5350] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 210.008705][ T7748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.509'. [ 210.018043][ T5350] usb 4-1: Using ep0 maxpacket: 16 [ 210.023524][ T5350] usb 4-1: New USB device found, idVendor=046d, idProduct=087c, bcdDevice=b0.7c [ 210.057382][ T5350] usb 4-1: config 64 has an invalid interface number: 238 but max is 0 [ 210.057414][ T5350] usb 4-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 210.057435][ T5350] usb 4-1: config 64 has no interface number 0 [ 210.057466][ T5350] usb 4-1: config 64 interface 238 has no altsetting 0 [ 210.062875][ T5350] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.062906][ T5350] usb 4-1: Product: syz [ 210.062923][ T5350] usb 4-1: Manufacturer: syz [ 210.062939][ T5350] usb 4-1: SerialNumber: syz [ 210.349800][ T5350] uvcvideo 4-1:64.238: probe with driver uvcvideo failed with error -22 [ 210.372334][ T5350] usb 4-1: USB disconnect, device number 15 [ 210.623699][ T7756] fuse: Bad value for 'user_id' [ 210.623716][ T7756] fuse: Bad value for 'user_id' [ 210.843545][ T30] net_ratelimit: 5 callbacks suppressed [ 210.843569][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.273304][ T5866] IPVS: starting estimator thread 0... [ 211.327358][ T7768] netlink: 40 bytes leftover after parsing attributes in process `syz.0.518'. [ 211.363417][ T7768] bridge2: entered promiscuous mode [ 211.363436][ T7768] bridge2: entered allmulticast mode [ 211.375634][ T7772] IPVS: using max 37 ests per chain, 88800 per kthread [ 211.782915][ T5622] Bluetooth: hci0: command 0x0406 tx timeout [ 211.782957][ T5622] Bluetooth: hci3: command 0x0406 tx timeout [ 211.782982][ T5622] Bluetooth: hci4: command 0x0406 tx timeout [ 211.783009][ T5622] Bluetooth: hci1: command 0x0406 tx timeout [ 211.865053][ T5620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.310582][ T5620] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 212.486853][ T5620] usb 1-1: unable to get BOS descriptor or descriptor too short [ 212.486921][ T5620] usb 1-1: New USB device found, idVendor=e4b7, idProduct=cda2, bcdDevice= 0.01 [ 212.523209][ T5620] usb 1-1: config 3 has an invalid interface number: 86 but max is 0 [ 212.523230][ T5620] usb 1-1: config 3 has an invalid descriptor of length 34, skipping remainder of the config [ 212.523244][ T5620] usb 1-1: config 3 has no interface number 0 [ 212.523314][ T5620] usb 1-1: config 3 interface 86 altsetting 11 endpoint 0xC has invalid maxpacket 56804, setting to 1024 [ 212.523341][ T5620] usb 1-1: config 3 interface 86 altsetting 11 bulk endpoint 0xC has invalid maxpacket 1024 [ 212.523364][ T5620] usb 1-1: config 3 interface 86 has no altsetting 0 [ 212.585699][ T5620] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 212.585732][ T5620] usb 1-1: SerialNumber: syz [ 212.591223][ T7779] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 212.813307][ T7786] netlink: 424 bytes leftover after parsing attributes in process `syz.2.523'. [ 212.813352][ T7786] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 212.897507][ T5350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.897633][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.955027][ T7786] FAULT_INJECTION: forcing a failure. [ 212.955027][ T7786] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 212.955072][ T7786] CPU: 0 UID: 0 PID: 7786 Comm: syz.2.523 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.955103][ T7786] Tainted: [L]=SOFTLOCKUP [ 212.955110][ T7786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.955124][ T7786] Call Trace: [ 212.955133][ T7786] [ 212.955143][ T7786] dump_stack_lvl+0xe8/0x150 [ 212.955181][ T7786] should_fail_ex+0x410/0x560 [ 212.955215][ T7786] prepare_alloc_pages+0x223/0x600 [ 212.955247][ T7786] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 212.955277][ T7786] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 212.955307][ T7786] ? __pfx_policy_nodemask+0x10/0x10 [ 212.955338][ T7786] ? do_raw_spin_lock+0x12b/0x2f0 [ 212.955376][ T7786] alloc_pages_mpol+0x21e/0x390 [ 212.955413][ T7786] alloc_pages_noprof+0xb1/0x2b0 [ 212.955445][ T7786] pte_alloc_one+0x22/0x370 [ 212.955477][ T7786] __pte_alloc+0x25/0x1a0 [ 212.955504][ T7786] copy_pmd_range+0x539a/0x5c10 [ 212.955540][ T7786] ? __lock_acquire+0x747/0x2de0 [ 212.955579][ T7786] ? __pfx___css_rstat_updated+0x10/0x10 [ 212.955620][ T7786] ? __pfx_copy_pmd_range+0x10/0x10 [ 212.955660][ T7786] ? __lock_acquire+0x747/0x2de0 [ 212.955691][ T7786] ? mas_wr_store_type+0xf80/0x1980 [ 212.955724][ T7786] copy_page_range+0xc82/0x1290 [ 212.955773][ T7786] ? __pfx_copy_page_range+0x10/0x10 [ 212.955808][ T7786] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 212.955844][ T7786] ? __mapping_rmap_tree_augment_rotate+0x16e/0x1a0 [ 212.955895][ T7786] dup_mmap+0xf17/0x1dc0 [ 212.955950][ T7786] ? __pfx_dup_mmap+0x10/0x10 [ 212.955985][ T7786] ? do_raw_spin_lock+0x12b/0x2f0 [ 212.956032][ T7786] ? lock_acquire+0x115/0x350 [ 212.956075][ T7786] copy_mm+0x11a/0x480 [ 212.956108][ T7786] ? copy_process+0xd3c/0x43e0 [ 212.956130][ T7786] copy_process+0x1e75/0x43e0 [ 212.956161][ T7786] ? copy_process+0xd3c/0x43e0 [ 212.956205][ T7786] ? __pfx_copy_process+0x10/0x10 [ 212.956230][ T7786] ? get_pid_task+0x20/0x1f0 [ 212.956254][ T7786] kernel_clone+0x2d7/0x940 [ 212.956284][ T7786] ? __pfx_kernel_clone+0x10/0x10 [ 212.956321][ T7786] ? ksys_write+0x1e6/0x270 [ 212.956356][ T7786] __ia32_compat_sys_ia32_clone+0x1b4/0x230 [ 212.956378][ T7786] ? __fget_files+0x2a/0x420 [ 212.956410][ T7786] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 212.956449][ T7786] ? ksys_write+0x242/0x270 [ 212.956496][ T7786] __do_fast_syscall_32+0x27a/0x6a0 [ 212.956523][ T7786] ? do_fast_syscall_32+0x33/0x70 [ 212.956548][ T7786] ? asm_int80_emulation+0x1a/0x20 [ 212.956570][ T7786] ? do_int80_emulation+0x299/0x500 [ 212.956594][ T7786] ? trace_irq_disable+0x3b/0x140 [ 212.956623][ T7786] do_fast_syscall_32+0x33/0x70 [ 212.956649][ T7786] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 212.956677][ T7786] RIP: 0023:0xf7f890ec [ 212.956697][ T7786] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 212.956717][ T7786] RSP: 002b:00000000f54254bc EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 212.956742][ T7786] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000040 [ 212.956758][ T7786] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 212.956771][ T7786] RBP: 00000000f7445018 R08: 0000000000000000 R09: 0000000000000000 [ 212.956785][ T7786] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 212.956798][ T7786] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 212.956832][ T7786] [ 213.127715][ T30] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 213.328628][ T30] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 213.350034][ T30] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 213.350071][ T30] usb 4-1: config 0 interface 0 has no altsetting 0 [ 213.350470][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.384096][ T30] usb 4-1: config 0 descriptor?? [ 213.392939][ T7789] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 213.530474][ T7792] fuse: Bad value for 'user_id' [ 213.530499][ T7792] fuse: Bad value for 'user_id' [ 213.704392][ T7796] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 213.704464][ T7796] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 213.723807][ T7796] netlink: 'syz.1.528': attribute type 13 has an invalid length. [ 213.805546][ T30] hid (null): unknown global tag 0xc [ 213.805615][ T30] hid (null): unknown global tag 0xe [ 213.831185][ T30] aquacomputer_d5next 0003:0C70:F00B.0004: unknown main item tag 0x0 [ 213.831259][ T30] aquacomputer_d5next 0003:0C70:F00B.0004: unknown main item tag 0x0 [ 213.831292][ T30] aquacomputer_d5next 0003:0C70:F00B.0004: unknown main item tag 0x0 [ 213.831323][ T30] aquacomputer_d5next 0003:0C70:F00B.0004: unknown main item tag 0x0 [ 213.831357][ T30] aquacomputer_d5next 0003:0C70:F00B.0004: unknown main item tag 0x0 [ 213.831422][ T30] aquacomputer_d5next 0003:0C70:F00B.0004: unknown main item tag 0x0 [ 213.831456][ T30] aquacomputer_d5next 0003:0C70:F00B.0004: unknown main item tag 0x0 [ 213.831489][ T30] aquacomputer_d5next 0003:0C70:F00B.0004: unknown main item tag 0x0 [ 213.831548][ T30] aquacomputer_d5next 0003:0C70:F00B.0004: unknown main item tag 0x0 [ 213.831580][ T30] aquacomputer_d5next 0003:0C70:F00B.0004: unknown main item tag 0x0 [ 213.834014][ T30] aquacomputer_d5next 0003:0C70:F00B.0004: unknown global tag 0xc [ 213.834070][ T30] aquacomputer_d5next 0003:0C70:F00B.0004: item 0 0 1 12 parsing failed [ 213.940246][ T30] aquacomputer_d5next 0003:0C70:F00B.0004: probe with driver aquacomputer_d5next failed with error -22 [ 213.962951][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.015012][ T25] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 214.076073][ T7777] netlink: 28 bytes leftover after parsing attributes in process `syz.4.520'. [ 214.076200][ T7777] netlink: 28 bytes leftover after parsing attributes in process `syz.4.520'. [ 214.196451][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 214.204476][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 214.204531][ T25] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=27.24 [ 214.229459][ T25] usb 3-1: config 165 has an invalid interface number: 162 but max is 0 [ 214.229492][ T25] usb 3-1: config 165 has no interface number 0 [ 214.229552][ T25] usb 3-1: config 165 interface 162 has no altsetting 0 [ 214.232316][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.232345][ T25] usb 3-1: Product: syz [ 214.232390][ T25] usb 3-1: Manufacturer: syz [ 214.232408][ T25] usb 3-1: SerialNumber: syz [ 214.361412][ T7805] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 214.361444][ T7805] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 214.664016][ T7824] tipc: Started in network mode [ 214.664038][ T7824] tipc: Node identity , cluster identity 4711 [ 214.664056][ T7824] tipc: Failed to set node id, please configure manually [ 214.664101][ T7824] tipc: Enabling of bearer rejected, failed to enable media [ 214.824984][ T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.883921][ T5624] usb 4-1: USB disconnect, device number 16 [ 214.977078][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.034351][ T7832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.534'. [ 215.045329][ T7832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.534'. [ 215.046834][ T7832] netlink: 28 bytes leftover after parsing attributes in process `syz.1.534'. [ 215.404850][ T5350] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 215.555817][ T5350] usb 5-1: New USB device found, idVendor=056a, idProduct=0013, bcdDevice= 0.40 [ 215.558054][ T5350] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 215.558090][ T5350] usb 5-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 215.558121][ T5350] usb 5-1: config 1 interface 0 has no altsetting 0 [ 215.562427][ T5350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.562454][ T5350] usb 5-1: Product: syz [ 215.562470][ T5350] usb 5-1: Manufacturer: syz [ 215.562487][ T5350] usb 5-1: SerialNumber: syz [ 215.638227][ T7834] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 215.764033][ T7837] loop5: detected capacity change from 0 to 7 [ 215.786828][ T7837] loop5: [ 215.786861][ T7837] loop5: partition table partially beyond EOD, truncated [ 216.015532][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.113687][ T7845] netlink: 'syz.3.537': attribute type 1 has an invalid length. [ 216.260700][ T7845] 8021q: adding VLAN 0 to HW filter on device bond2 [ 216.302123][ T25] i2c-tiny-usb 3-1:165.162: version 27.24 found at bus 003 address 017 [ 216.304494][ T25] (null): error -EIO: failure setting delay to 10us [ 216.304590][ T25] i2c-tiny-usb 3-1:165.162: probe with driver i2c-tiny-usb failed with error -5 [ 216.369026][ T25] usb 3-1: USB disconnect, device number 17 [ 216.439088][ T7847] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 216.502474][ T5620] rndis_host 1-1:3.86: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 216.545169][ T5620] usb 1-1: USB disconnect, device number 10 [ 216.663867][ T7849] fuse: Bad value for 'user_id' [ 216.663889][ T7849] fuse: Bad value for 'user_id' [ 216.752923][ T5350] usbhid 5-1:1.0: can't add hid device: -71 [ 216.753036][ T5350] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 216.774882][ T5350] usb 5-1: USB disconnect, device number 11 [ 217.005148][ T7864] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 217.057617][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.165495][ T5620] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 217.221638][ T7873] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 217.305534][ T5620] usb 4-1: device descriptor read/64, error -71 [ 217.365318][ T30] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 217.518120][ T30] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 217.519165][ T30] usb 1-1: config 0 has no interfaces? [ 217.519203][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.525227][ T30] usb 1-1: config 0 descriptor?? [ 217.558083][ T5350] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 217.565841][ T5620] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 217.692573][ T7885] fuse: Bad value for 'user_id' [ 217.693539][ T7885] fuse: Bad value for 'user_id' [ 217.706878][ T5620] usb 4-1: device descriptor read/64, error -71 [ 217.726210][ T5350] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 217.726257][ T5350] usb 3-1: too many configurations: 86, using maximum allowed: 8 [ 217.781116][ T5350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.781147][ T5350] usb 3-1: Product: syz [ 217.781162][ T5350] usb 3-1: Manufacturer: syz [ 217.781178][ T5350] usb 3-1: SerialNumber: syz [ 217.817477][ T7871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.818471][ T7871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.826618][ T5620] usb usb4-port1: attempt power cycle [ 217.858155][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.095103][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.175395][ T5620] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 218.198756][ T5620] usb 4-1: device descriptor read/8, error -71 [ 218.319397][ T7871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.322392][ T7871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.342684][ T7871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.354672][ T7871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.382145][ T5624] usb 1-1: USB disconnect, device number 11 [ 218.455016][ T5620] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 218.477497][ T5620] usb 4-1: device descriptor read/8, error -71 [ 218.585280][ T5620] usb usb4-port1: unable to enumerate USB device [ 218.899659][ T5350] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 218.899720][ T5350] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 218.899744][ T5350] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 218.903519][ T5350] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 218.934605][ T5350] usb 3-1: USB disconnect, device number 18 [ 219.136301][ T5620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.240586][ T7914] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 219.259332][ T7916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.259824][ T7916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.295951][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.390699][ T7920] syzkaller1: entered promiscuous mode [ 219.390718][ T7920] syzkaller1: entered allmulticast mode [ 219.496108][ T5350] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 219.629491][ T5350] usb 5-1: device descriptor read/64, error -71 [ 219.734915][ T5716] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 219.865013][ T5350] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 219.884816][ T5716] usb 3-1: Using ep0 maxpacket: 8 [ 219.887292][ T5716] usb 3-1: unable to get BOS descriptor or descriptor too short [ 219.887343][ T5716] usb 3-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 219.888653][ T5716] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.888704][ T5716] usb 3-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 219.888733][ T5716] usb 3-1: config 1 interface 0 has no altsetting 0 [ 219.891617][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.891645][ T5716] usb 3-1: Product: syz [ 219.891662][ T5716] usb 3-1: Manufacturer: syz [ 219.891678][ T5716] usb 3-1: SerialNumber: syz [ 219.928563][ T25] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 219.945591][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.947770][ T976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.018317][ T5350] usb 5-1: device descriptor read/64, error -71 [ 220.125668][ T5350] usb usb5-port1: attempt power cycle [ 220.156247][ T25] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 220.160705][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 220.160741][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 220.160768][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 220.160832][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.163957][ T25] usb 2-1: config 0 descriptor?? [ 220.227203][ T25] em28xx 2-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 220.227240][ T25] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 220.254327][ T7926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.263452][ T7926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.274142][ T7937] capability: warning: `syz.2.563' uses 32-bit capabilities (legacy support in use) [ 220.343665][ T5716] usbhid 3-1:1.0: can't add hid device: -71 [ 220.343779][ T5716] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 220.369112][ T5716] usb 3-1: USB disconnect, device number 19 [ 220.484831][ T5350] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 220.503503][ T25] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 220.507076][ T5350] usb 5-1: device descriptor read/8, error -71 [ 220.510002][ T25] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 220.516796][ T25] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 220.516818][ T25] em28xx 2-1:0.0: No AC97 audio processor [ 220.562352][ T7941] FAULT_INJECTION: forcing a failure. [ 220.562352][ T7941] name failslab, interval 1, probability 0, space 0, times 0 [ 220.562401][ T7941] CPU: 0 UID: 0 PID: 7941 Comm: syz.0.566 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.562431][ T7941] Tainted: [L]=SOFTLOCKUP [ 220.562440][ T7941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 220.562453][ T7941] Call Trace: [ 220.562462][ T7941] [ 220.562471][ T7941] dump_stack_lvl+0xe8/0x150 [ 220.562510][ T7941] should_fail_ex+0x410/0x560 [ 220.562540][ T7941] should_failslab+0xa8/0x100 [ 220.562570][ T7941] __kmalloc_cache_noprof+0xa3/0x600 [ 220.562594][ T7941] ? __kmalloc_cache_noprof+0x14d/0x600 [ 220.562615][ T7941] ? sctp_add_bind_addr+0x8c/0x370 [ 220.562645][ T7941] ? sctp_add_bind_addr+0x8c/0x370 [ 220.562684][ T7941] sctp_add_bind_addr+0x8c/0x370 [ 220.562720][ T7941] sctp_copy_local_addr_list+0x31a/0x4e0 [ 220.562756][ T7941] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 220.562789][ T7941] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 220.562824][ T7941] ? sctp_v6_is_any+0x64/0x80 [ 220.562860][ T7941] ? sctp_copy_one_addr+0x93/0x360 [ 220.562896][ T7941] sctp_bind_addr_copy+0xb3/0x3c0 [ 220.562929][ T7941] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 220.562966][ T7941] sctp_connect_new_asoc+0x2ff/0x6b0 [ 220.562993][ T7941] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 220.563023][ T7941] ? __local_bh_enable_ip+0xd6/0x140 [ 220.563051][ T7941] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 220.563081][ T7941] ? security_sctp_bind_connect+0x7e/0x2c0 [ 220.563120][ T7941] sctp_sendmsg+0x159b/0x2d00 [ 220.563157][ T7941] ? __pfx_sctp_sendmsg+0x10/0x10 [ 220.563161][ T25] usb 2-1: USB disconnect, device number 15 [ 220.563184][ T7941] ? lock_acquire+0x115/0x350 [ 220.563224][ T7941] ? aa_sock_msg_perm+0xf5/0x210 [ 220.563249][ T7941] ? sock_rps_record_flow+0x19/0x350 [ 220.563285][ T7941] ? inet_sendmsg+0x298/0x320 [ 220.563320][ T7941] ? __pfx_inet_sendmsg+0x10/0x10 [ 220.563351][ T7941] sock_sendmsg_nosec+0x10e/0x180 [ 220.563398][ T7941] __sys_sendto+0x408/0x5a0 [ 220.563430][ T7941] ? __pfx___sys_sendto+0x10/0x10 [ 220.563469][ T7941] ? __fget_files+0x3a2/0x420 [ 220.563511][ T7941] ? ksys_write+0x242/0x270 [ 220.563552][ T7941] __ia32_sys_sendto+0xdd/0x100 [ 220.563582][ T7941] __do_fast_syscall_32+0x27a/0x6a0 [ 220.563609][ T7941] ? do_fast_syscall_32+0x33/0x70 [ 220.563634][ T7941] ? asm_int80_emulation+0x1a/0x20 [ 220.563656][ T7941] ? do_int80_emulation+0x299/0x500 [ 220.563680][ T7941] ? trace_irq_disable+0x3b/0x140 [ 220.563707][ T7941] do_fast_syscall_32+0x33/0x70 [ 220.563734][ T7941] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 220.563761][ T7941] RIP: 0023:0xf7f540ec [ 220.563782][ T7941] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 220.563800][ T7941] RSP: 002b:00000000f53f550c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 220.563824][ T7941] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 220.563840][ T7941] RDX: 000000000000ffe0 RSI: 000000000400c0d4 RDI: 0000000080000140 [ 220.563855][ T7941] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 220.563869][ T7941] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 220.563883][ T7941] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 220.563916][ T7941] [ 220.756113][ T5350] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 220.796242][ T5350] usb 5-1: device descriptor read/8, error -71 [ 220.919692][ T5350] usb usb5-port1: unable to enumerate USB device [ 220.932719][ T25] em28xx 2-1:0.0: Disconnecting em28xx [ 220.958625][ T25] em28xx: Freeing device [ 221.215045][ T25] net_ratelimit: 5 callbacks suppressed [ 221.215068][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.673610][ T7973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.575'. [ 222.091973][ T7957] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 222.092271][ T7957] bridge1: left promiscuous mode [ 222.092752][ T7957] bond1: left promiscuous mode [ 222.092773][ T7957] ip6gre1: left promiscuous mode [ 222.255382][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.289546][ T7973] 8021q: adding VLAN 0 to HW filter on device bond3 [ 222.326724][ T5866] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.328776][ T6505] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.328912][ T6505] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.418758][ T7981] netlink: 'syz.1.578': attribute type 21 has an invalid length. [ 222.442958][ T7974] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 222.461809][ T7981] netlink: 'syz.1.578': attribute type 3 has an invalid length. [ 222.461834][ T7981] netlink: 144 bytes leftover after parsing attributes in process `syz.1.578'. [ 222.705537][ T7983] input: syz1 as /devices/virtual/input/input10 [ 222.750024][ T7992] netlink: 28 bytes leftover after parsing attributes in process `syz.1.582'. [ 223.295323][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.398729][ T8006] netlink: 20 bytes leftover after parsing attributes in process `syz.1.585'. [ 223.705154][ T25] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 223.705414][ T5624] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 223.794827][ T5350] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 223.854937][ T5624] usb 5-1: Using ep0 maxpacket: 16 [ 223.856386][ T5624] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 223.859581][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 223.859633][ T25] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 223.860471][ T5624] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.860493][ T5624] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.860509][ T5624] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 223.860549][ T5624] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.862328][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.862347][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.964588][ T5350] usb 3-1: Using ep0 maxpacket: 8 [ 223.970582][ T5624] usb 5-1: config 0 descriptor?? [ 223.974571][ T5350] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 223.997351][ T5350] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 223.997381][ T5350] usb 3-1: config 179 has no interface number 0 [ 223.997422][ T5350] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 223.997462][ T5350] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 223.997492][ T5350] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 223.997519][ T5350] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 223.997543][ T5350] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 223.997562][ T5350] usb 3-1: config 179 interface 65 has no altsetting 0 [ 223.997588][ T5350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.999780][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.999809][ T25] usb 4-1: Product: syz [ 223.999825][ T25] usb 4-1: Manufacturer: syz [ 223.999842][ T25] usb 4-1: SerialNumber: syz [ 224.088888][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.166238][ T25] usb 4-1: selecting invalid altsetting 1 [ 224.167762][ T25] usb 4-1: unit 6 not found! [ 224.230506][ T5350] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input11 [ 224.341413][ T5620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.429146][ T5350] usb 3-1: USB disconnect, device number 20 [ 224.434368][ T5624] hid_parser_main: 111 callbacks suppressed [ 224.434397][ T5624] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 224.434461][ T5624] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 224.434493][ T5624] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 224.434524][ T5624] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 224.434555][ T5624] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 224.485930][ T5624] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 224.486002][ T5624] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 224.486035][ T5624] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 224.486066][ T5624] microsoft 0003:045E:07DA.0005: item fetching failed at offset 32/34 [ 224.521552][ T5624] microsoft 0003:045E:07DA.0005: parse failed [ 224.521713][ T5624] microsoft 0003:045E:07DA.0005: probe with driver microsoft failed with error -22 [ 224.687877][ T5688] usb 5-1: USB disconnect, device number 16 [ 224.822589][ T8019] gretap0: entered promiscuous mode [ 224.862014][ T8019] vlan3: entered promiscuous mode [ 225.043318][ T8012] input: syz0 as /devices/virtual/input/input12 [ 225.065399][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.067396][ T335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.118324][ T5350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.118920][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.210136][ T8025] netlink: 'syz.0.593': attribute type 1 has an invalid length. [ 225.414391][ T25] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 225.432288][ T25] usb 4-1: USB disconnect, device number 21 [ 225.498371][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 225.525935][ T8025] 8021q: adding VLAN 0 to HW filter on device bond6 [ 226.089561][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'. [ 226.311088][ T8068] FAULT_INJECTION: forcing a failure. [ 226.311088][ T8068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.311128][ T8068] CPU: 0 UID: 0 PID: 8068 Comm: syz.3.605 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.311164][ T8068] Tainted: [L]=SOFTLOCKUP [ 226.311172][ T8068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 226.311186][ T8068] Call Trace: [ 226.311198][ T8068] [ 226.311208][ T8068] dump_stack_lvl+0xe8/0x150 [ 226.311246][ T8068] should_fail_ex+0x410/0x560 [ 226.311277][ T8068] _copy_to_user+0x31/0xb0 [ 226.311308][ T8068] bpf_verifier_vlog+0x496/0x900 [ 226.311357][ T8068] bpf_verifier_log_write+0x11d/0x1a0 [ 226.311388][ T8068] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 226.311413][ T8068] ? __kvmalloc_node_noprof+0x345/0x820 [ 226.311441][ T8068] ? bpf_insn_def32+0x1ae/0x650 [ 226.311480][ T8068] bpf_compute_live_registers+0x1aca/0x1ff0 [ 226.311528][ T8068] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 226.311568][ T8068] bpf_check+0x25ed/0x2e10 [ 226.311606][ T8068] ? ktime_get_with_offset+0x93/0x2d0 [ 226.311635][ T8068] ? __pfx_bpf_check+0x10/0x10 [ 226.311663][ T8068] ? bpf_obj_name_cpy+0x194/0x1e0 [ 226.311699][ T8068] bpf_prog_load+0x14d6/0x1c20 [ 226.311739][ T8068] ? __pfx_bpf_prog_load+0x10/0x10 [ 226.311794][ T8068] __sys_bpf+0xd0d/0xd90 [ 226.311830][ T8068] ? __pfx___sys_bpf+0x10/0x10 [ 226.311858][ T8068] ? ksys_write+0x1e6/0x270 [ 226.311896][ T8068] ? __mutex_unlock_slowpath+0x731/0x900 [ 226.311967][ T8068] ? fput+0xa0/0xd0 [ 226.311995][ T8068] ? ksys_write+0x242/0x270 [ 226.312036][ T8068] __ia32_sys_bpf+0xba/0xd0 [ 226.312063][ T8068] __do_fast_syscall_32+0x27a/0x6a0 [ 226.312090][ T8068] ? do_fast_syscall_32+0x33/0x70 [ 226.312116][ T8068] ? asm_int80_emulation+0x1a/0x20 [ 226.312137][ T8068] ? do_int80_emulation+0x299/0x500 [ 226.312162][ T8068] ? trace_irq_disable+0x3b/0x140 [ 226.312189][ T8068] do_fast_syscall_32+0x33/0x70 [ 226.312215][ T8068] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 226.312242][ T8068] RIP: 0023:0xf7f150ec [ 226.312262][ T8068] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 226.312281][ T8068] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 226.312306][ T8068] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800001c0 [ 226.312321][ T8068] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 226.312335][ T8068] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 226.312349][ T8068] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 226.312362][ T8068] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 226.312396][ T8068] [ 226.466287][ T25] net_ratelimit: 1 callbacks suppressed [ 226.466307][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.728466][ T8071] netlink: 'syz.2.607': attribute type 1 has an invalid length. [ 226.780007][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 226.780046][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 226.802984][ T8071] 8021q: adding VLAN 0 to HW filter on device bond4 [ 226.844786][ T8077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.874961][ T25] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 226.883736][ T8077] bond4: (slave batadv0): making interface the new active one [ 226.907005][ T8077] bond4: (slave batadv0): Enslaving as an active interface with an up link [ 226.980071][ T8079] fido_id[8079]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 227.061978][ T8071] bond4: (slave batadv0): Releasing active interface [ 227.171281][ T8071] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 227.495942][ T8094] netlink: 'syz.2.612': attribute type 1 has an invalid length. [ 227.535268][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.662860][ T8102] netlink: 'syz.1.614': attribute type 1 has an invalid length. [ 227.802315][ T8094] 8021q: adding VLAN 0 to HW filter on device bond5 [ 227.838232][ T8101] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 228.005815][ T8102] 8021q: adding VLAN 0 to HW filter on device bond3 [ 228.068798][ T8107] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 228.176781][ T5350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.325364][ T8116] netlink: 'syz.0.617': attribute type 2 has an invalid length. [ 228.408648][ T8123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.409349][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.579706][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.681765][ T5716] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 228.898395][ T8130] binder: 8129:8130 ioctl 4008ae89 80000100 returned -22 [ 228.938978][ T8136] fido_id[8136]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 228.978848][ T8083] netlink: 'syz.3.610': attribute type 4 has an invalid length. [ 229.092789][ T8140] netlink: 'syz.2.626': attribute type 1 has an invalid length. [ 229.106491][ T8142] fuse: Bad value for 'user_id' [ 229.106513][ T8142] fuse: Bad value for 'user_id' [ 229.108256][ T8142] netlink: 72 bytes leftover after parsing attributes in process `syz.1.625'. [ 229.221934][ T8140] 8021q: adding VLAN 0 to HW filter on device bond6 [ 229.340315][ T8148] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 229.476311][ T5716] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 229.519345][ T8158] FAULT_INJECTION: forcing a failure. [ 229.519345][ T8158] name failslab, interval 1, probability 0, space 0, times 0 [ 229.519385][ T8158] CPU: 0 UID: 0 PID: 8158 Comm: syz.2.630 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.519415][ T8158] Tainted: [L]=SOFTLOCKUP [ 229.519424][ T8158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 229.519437][ T8158] Call Trace: [ 229.519446][ T8158] [ 229.519456][ T8158] dump_stack_lvl+0xe8/0x150 [ 229.519495][ T8158] should_fail_ex+0x410/0x560 [ 229.519526][ T8158] should_failslab+0xa8/0x100 [ 229.519556][ T8158] __kvmalloc_node_noprof+0x176/0x820 [ 229.519584][ T8158] ? rcu_is_watching+0x16/0xb0 [ 229.519611][ T8158] ? analyze_subprog+0x846/0x9e00 [ 229.519671][ T8158] ? analyze_subprog+0x846/0x9e00 [ 229.519705][ T8158] analyze_subprog+0x846/0x9e00 [ 229.519730][ T8158] ? is_bpf_text_address+0x292/0x2b0 [ 229.519766][ T8158] ? kernel_text_address+0xa5/0xe0 [ 229.519799][ T8158] ? arch_stack_walk+0xfb/0x150 [ 229.519841][ T8158] ? __pfx_stack_trace_save+0x10/0x10 [ 229.519892][ T8158] ? call_instance+0x263/0x560 [ 229.519915][ T8158] ? bpf_compute_subprog_arg_access+0x2a3/0x14d0 [ 229.519940][ T8158] ? bpf_compute_live_registers+0x8d3/0x1ff0 [ 229.519967][ T8158] ? __pfx_analyze_subprog+0x10/0x10 [ 229.519991][ T8158] ? __ia32_sys_bpf+0xba/0xd0 [ 229.520011][ T8158] ? __do_fast_syscall_32+0x27a/0x6a0 [ 229.520036][ T8158] ? do_fast_syscall_32+0x33/0x70 [ 229.520060][ T8158] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 229.520123][ T8158] ? call_instance+0x263/0x560 [ 229.520160][ T8158] ? rcu_is_watching+0x16/0xb0 [ 229.520184][ T8158] ? call_instance+0x263/0x560 [ 229.520206][ T8158] ? trace_kmalloc+0x2a/0xf0 [ 229.520245][ T8158] ? call_instance+0x263/0x560 [ 229.520285][ T8158] ? __kvmalloc_node_noprof+0x52f/0x820 [ 229.520311][ T8158] ? __kvmalloc_node_noprof+0x345/0x820 [ 229.520334][ T8158] ? call_instance+0x263/0x560 [ 229.520357][ T8158] ? call_instance+0x263/0x560 [ 229.520388][ T8158] ? call_instance+0x42e/0x560 [ 229.520421][ T8158] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 229.520473][ T8158] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 229.520502][ T8158] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 229.520528][ T8158] ? trace_kmalloc+0x2a/0xf0 [ 229.520561][ T8158] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 229.520595][ T8158] ? __kvmalloc_node_noprof+0x345/0x820 [ 229.520619][ T8158] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 229.520645][ T8158] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 229.520680][ T8158] bpf_compute_live_registers+0x8d3/0x1ff0 [ 229.520729][ T8158] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 229.520769][ T8158] bpf_check+0x25ed/0x2e10 [ 229.520807][ T8158] ? ktime_get_with_offset+0x93/0x2d0 [ 229.520834][ T8158] ? __pfx_bpf_check+0x10/0x10 [ 229.520861][ T8158] ? bpf_obj_name_cpy+0x194/0x1e0 [ 229.520898][ T8158] bpf_prog_load+0x14d6/0x1c20 [ 229.520943][ T8158] ? __pfx_bpf_prog_load+0x10/0x10 [ 229.520998][ T8158] __sys_bpf+0xd0d/0xd90 [ 229.521033][ T8158] ? __pfx___sys_bpf+0x10/0x10 [ 229.521062][ T8158] ? ksys_write+0x1e6/0x270 [ 229.521100][ T8158] ? __mutex_unlock_slowpath+0x731/0x900 [ 229.521147][ T8158] ? fput+0xa0/0xd0 [ 229.521174][ T8158] ? ksys_write+0x242/0x270 [ 229.521215][ T8158] __ia32_sys_bpf+0xba/0xd0 [ 229.521242][ T8158] __do_fast_syscall_32+0x27a/0x6a0 [ 229.521269][ T8158] ? do_fast_syscall_32+0x33/0x70 [ 229.521303][ T8158] ? asm_int80_emulation+0x1a/0x20 [ 229.521324][ T8158] ? do_int80_emulation+0x299/0x500 [ 229.521349][ T8158] ? trace_irq_disable+0x3b/0x140 [ 229.521376][ T8158] do_fast_syscall_32+0x33/0x70 [ 229.521403][ T8158] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 229.521431][ T8158] RIP: 0023:0xf7f890ec [ 229.521451][ T8158] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 229.521471][ T8158] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 229.521497][ T8158] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 229.521513][ T8158] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 229.521527][ T8158] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 229.521540][ T8158] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 229.521554][ T8158] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 229.521586][ T8158] [ 229.645065][ T5716] usb 5-1: Using ep0 maxpacket: 32 [ 229.678814][ T5716] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 229.703428][ T5716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.768764][ T5716] usb 5-1: config 0 descriptor?? [ 230.043320][ T5716] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 230.055746][ T5716] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 230.058173][ T5716] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 230.058211][ T5716] usb 5-1: media controller created [ 230.131797][ T5716] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 230.253376][ T5716] az6027: usb out operation failed. (-71) [ 230.283871][ T5716] az6027: usb out operation failed. (-71) [ 230.283891][ T5716] stb0899_attach: Driver disabled by Kconfig [ 230.283902][ T5716] az6027: no front-end attached [ 230.283902][ T5716] [ 230.297436][ T5716] az6027: usb out operation failed. (-71) [ 230.297455][ T5716] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 230.330918][ T5716] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13 [ 230.347807][ T5716] dvb-usb: schedule remote query interval to 400 msecs. [ 230.347832][ T5716] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 230.387095][ T5716] usb 5-1: USB disconnect, device number 17 [ 230.472165][ T8165] FAULT_INJECTION: forcing a failure. [ 230.472165][ T8165] name failslab, interval 1, probability 0, space 0, times 0 [ 230.472214][ T8165] CPU: 0 UID: 0 PID: 8165 Comm: syz.1.633 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.472244][ T8165] Tainted: [L]=SOFTLOCKUP [ 230.472252][ T8165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.472265][ T8165] Call Trace: [ 230.472273][ T8165] [ 230.472283][ T8165] dump_stack_lvl+0xe8/0x150 [ 230.472322][ T8165] should_fail_ex+0x410/0x560 [ 230.472343][ T8165] should_failslab+0xa8/0x100 [ 230.472364][ T8165] ? alloc_vfsmnt+0x23/0x410 [ 230.472381][ T8165] kmem_cache_alloc_noprof+0xa1/0x600 [ 230.472407][ T8165] ? alloc_vfsmnt+0x23/0x410 [ 230.472423][ T8165] ? lock_acquire+0x115/0x350 [ 230.472442][ T8165] alloc_vfsmnt+0x23/0x410 [ 230.472460][ T8165] clone_mnt+0x4b/0x9b0 [ 230.472481][ T8165] copy_tree+0x3d8/0x940 [ 230.472508][ T8165] copy_mnt_ns+0x3de/0xcc0 [ 230.472532][ T8165] ? trace_kmem_cache_alloc+0x29/0xe0 [ 230.472557][ T8165] ? __pfx_copy_mnt_ns+0x10/0x10 [ 230.472580][ T8165] ? create_new_namespaces+0x33/0x6b0 [ 230.472600][ T8165] ? kmem_cache_alloc_noprof+0x156/0x600 [ 230.472623][ T8165] ? create_new_namespaces+0x33/0x6b0 [ 230.472654][ T8165] create_new_namespaces+0xcf/0x6b0 [ 230.472675][ T8165] ? copy_namespaces+0x5c/0x4b0 [ 230.472695][ T8165] ? bpf_lsm_capable+0x9/0x20 [ 230.472708][ T8165] ? security_capable+0x7e/0x2c0 [ 230.472726][ T8165] ? copy_namespaces+0x5c/0x4b0 [ 230.472747][ T8165] ? copy_namespaces+0x5c/0x4b0 [ 230.472768][ T8165] copy_namespaces+0x432/0x4b0 [ 230.472789][ T8165] ? copy_process+0xd3c/0x43e0 [ 230.472810][ T8165] copy_process+0x1ec0/0x43e0 [ 230.472841][ T8165] ? copy_process+0xd3c/0x43e0 [ 230.472875][ T8165] ? __pfx_copy_process+0x10/0x10 [ 230.472897][ T8165] ? get_pid_task+0x20/0x1f0 [ 230.472918][ T8165] kernel_clone+0x2d7/0x940 [ 230.472945][ T8165] ? __pfx_kernel_clone+0x10/0x10 [ 230.472975][ T8165] ? ksys_write+0x1e6/0x270 [ 230.473004][ T8165] __ia32_compat_sys_ia32_clone+0x1b4/0x230 [ 230.473022][ T8165] ? __fget_files+0x2a/0x420 [ 230.473045][ T8165] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 230.473072][ T8165] ? ksys_write+0x242/0x270 [ 230.473125][ T8165] __do_fast_syscall_32+0x27a/0x6a0 [ 230.473154][ T8165] ? do_fast_syscall_32+0x33/0x70 [ 230.473178][ T8165] ? asm_int80_emulation+0x1a/0x20 [ 230.473200][ T8165] ? do_int80_emulation+0x299/0x500 [ 230.473223][ T8165] ? trace_irq_disable+0x3b/0x140 [ 230.473254][ T8165] do_fast_syscall_32+0x33/0x70 [ 230.473273][ T8165] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 230.473293][ T8165] RIP: 0023:0xf706f0ec [ 230.473307][ T8165] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 230.473321][ T8165] RSP: 002b:00000000f545d4bc EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 230.473339][ T8165] RAX: ffffffffffffffda RBX: 00000000648e7000 RCX: 0000000000000000 [ 230.473350][ T8165] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 230.473359][ T8165] RBP: 00000000f7464f80 R08: 0000000000000000 R09: 0000000000000000 [ 230.473369][ T8165] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 230.473378][ T8165] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 230.473400][ T8165] [ 230.575760][ T5350] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 230.706728][ T5624] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 230.836169][ T5350] usb 3-1: Using ep0 maxpacket: 8 [ 230.838083][ T5350] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 230.873936][ T5350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.873966][ T5350] usb 3-1: Product: syz [ 230.873977][ T5350] usb 3-1: Manufacturer: syz [ 230.873987][ T5350] usb 3-1: SerialNumber: syz [ 230.916540][ T5624] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 230.917859][ T5624] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.921121][ T5624] usb 1-1: config 0 descriptor?? [ 230.921830][ T5716] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 231.003342][ T5624] cp210x 1-1:0.0: cp210x converter detected [ 231.021684][ T25] hid_parser_main: 2 callbacks suppressed [ 231.021710][ T25] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 231.021768][ T25] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 231.040877][ T5350] usb 3-1: config 0 descriptor?? [ 231.082422][ T25] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 231.084630][ T5350] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 231.348530][ T8163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.349246][ T8163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.550383][ T8176] fido_id[8176]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 231.608125][ T8163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.614584][ T8163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.682876][ T5624] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 231.682912][ T5624] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 231.728084][ T5624] usb 1-1: cp210x converter now attached to ttyUSB0 [ 231.738265][ T5716] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 231.751826][ T5624] usb 1-1: USB disconnect, device number 12 [ 231.762349][ T5624] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 231.763278][ T5624] cp210x 1-1:0.0: device disconnected [ 231.778706][ T25] net_ratelimit: 4 callbacks suppressed [ 231.778726][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.371587][ T8187] fuse: Bad value for 'user_id' [ 232.371604][ T8187] fuse: Bad value for 'user_id' [ 232.407224][ T8187] netlink: 72 bytes leftover after parsing attributes in process `syz.1.638'. [ 232.745338][ T5350] gspca_sonixj: reg_w1 err -110 [ 232.745466][ T5350] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 232.815724][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.868460][ T8197] netlink: 'syz.0.642': attribute type 1 has an invalid length. [ 232.931892][ T8197] 8021q: adding VLAN 0 to HW filter on device bond7 [ 233.012009][ T8197] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 233.294841][ T5688] usb 3-1: USB disconnect, device number 21 [ 233.639116][ T5688] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 233.639160][ T5688] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 233.662035][ T5688] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 233.858155][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.005510][ T8223] fido_id[8223]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 234.150239][ T8221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.646'. [ 234.150282][ T8221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.646'. [ 234.266267][ T5350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.655166][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.702629][ T8208] netlink: 'syz.0.645': attribute type 4 has an invalid length. [ 234.895011][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.964114][ T8236] syzkaller0: entered promiscuous mode [ 234.964140][ T8236] syzkaller0: entered allmulticast mode [ 235.087849][ T8239] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 235.209720][ T31] kauditd_printk_skb: 78 callbacks suppressed [ 235.209742][ T31] audit: type=1326 audit(1789499995.472:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.3.651" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f150ec code=0x0 [ 235.555592][ T8246] netlink: 3718 bytes leftover after parsing attributes in process `syz.2.654'. [ 235.694806][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.954285][ T5624] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 235.954325][ T5624] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 235.975441][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.983326][ T5624] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 236.113608][ T8258] fido_id[8258]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 236.303474][ T8265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.660'. [ 236.476184][ T5624] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 236.530595][ T8272] FAULT_INJECTION: forcing a failure. [ 236.530595][ T8272] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 236.530639][ T8272] CPU: 1 UID: 0 PID: 8272 Comm: syz.2.663 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.530676][ T8272] Tainted: [L]=SOFTLOCKUP [ 236.530684][ T8272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.530711][ T8272] Call Trace: [ 236.530720][ T8272] [ 236.530730][ T8272] dump_stack_lvl+0xe8/0x150 [ 236.530772][ T8272] should_fail_ex+0x410/0x560 [ 236.530802][ T8272] prepare_alloc_pages+0x223/0x600 [ 236.530834][ T8272] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 236.530863][ T8272] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 236.530893][ T8272] ? __pfx_policy_nodemask+0x10/0x10 [ 236.530932][ T8272] alloc_pages_mpol+0x21e/0x390 [ 236.530967][ T8272] alloc_pages_noprof+0xb1/0x2b0 [ 236.530998][ T8272] folio_alloc_noprof+0x1e/0x30 [ 236.531026][ T8272] filemap_alloc_folio_noprof+0x111/0x460 [ 236.531061][ T8272] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 236.531101][ T8272] __filemap_get_folio_mpol+0x402/0x1000 [ 236.531141][ T8272] aio_setup_ring+0x3b1/0xe20 [ 236.531179][ T8272] ? __pfx_aio_setup_ring+0x10/0x10 [ 236.531216][ T8272] ioctx_alloc+0x313/0x830 [ 236.531246][ T8272] __ia32_compat_sys_io_setup+0xc0/0x210 [ 236.531284][ T8272] __do_fast_syscall_32+0x27a/0x6a0 [ 236.531312][ T8272] ? do_fast_syscall_32+0x33/0x70 [ 236.531337][ T8272] ? asm_int80_emulation+0x1a/0x20 [ 236.531359][ T8272] ? do_int80_emulation+0x299/0x500 [ 236.531383][ T8272] ? trace_irq_disable+0x3b/0x140 [ 236.531411][ T8272] do_fast_syscall_32+0x33/0x70 [ 236.531437][ T8272] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 236.531465][ T8272] RIP: 0023:0xf7f890ec [ 236.531485][ T8272] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 236.531505][ T8272] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 00000000000000f5 [ 236.531529][ T8272] RAX: ffffffffffffffda RBX: 000000000000239f RCX: 0000000080000380 [ 236.531545][ T8272] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 236.531564][ T8272] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 236.531578][ T8272] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 236.531591][ T8272] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 236.531628][ T8272] [ 236.711078][ T5624] usb 2-1: unable to get BOS descriptor or descriptor too short [ 236.711119][ T5624] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 236.752288][ T5624] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.752319][ T5624] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 236.834111][ T5624] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.834142][ T5624] usb 2-1: Product: syz [ 236.834157][ T5624] usb 2-1: Manufacturer: syz [ 236.834173][ T5624] usb 2-1: SerialNumber: syz [ 236.882670][ T5624] usb 2-1: selecting invalid altsetting 1 [ 236.883452][ T5624] usb 2-1: unit 6 not found! [ 236.977696][ T8275] fuse: Bad value for 'user_id' [ 236.977720][ T8275] fuse: Bad value for 'user_id' [ 237.022649][ T8275] netlink: 72 bytes leftover after parsing attributes in process `syz.4.665'. [ 237.066228][ T30] net_ratelimit: 1 callbacks suppressed [ 237.066251][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.297901][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.379014][ T5688] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 237.428264][ T8290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.670'. [ 237.434494][ T8290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.670'. [ 237.455727][ T8290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.670'. [ 237.525575][ T5688] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 237.528107][ T5688] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 237.528145][ T5688] usb 3-1: can't read configurations, error -61 [ 237.618713][ T25] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 237.618754][ T25] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 237.644976][ T25] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 237.664116][ T5688] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 237.825173][ T5688] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 237.830160][ T5688] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 237.830199][ T5688] usb 3-1: can't read configurations, error -61 [ 237.830671][ T5688] usb usb3-port1: attempt power cycle [ 237.877534][ T8264] input: syz0 as /devices/virtual/input/input14 [ 237.900581][ T8295] fido_id[8295]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 238.025017][ T5624] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 238.027841][ T5624] usb 2-1: USB disconnect, device number 16 [ 238.095665][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.099774][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.156011][ T8306] tipc: Enabling of bearer rejected, failed to enable media [ 238.185199][ T5688] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 238.208040][ T5688] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 238.210161][ T5688] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 238.210199][ T5688] usb 3-1: can't read configurations, error -61 [ 238.309015][ T8319] syzkaller0: left promiscuous mode [ 238.309038][ T8319] syzkaller0: left allmulticast mode [ 238.327710][ T8319] tc action pedit unable to extract header offset for header type (0x5) [ 238.327734][ T8319] tc action pedit unable to extract header offset for header type (0x5) [ 238.327748][ T8319] tc action pedit unable to extract header offset for header type (0x5) [ 238.327762][ T8319] tc action pedit unable to extract header offset for header type (0x5) [ 238.327775][ T8319] tc action pedit unable to extract header offset for header type (0x5) [ 238.327789][ T8319] tc action pedit unable to extract header offset for header type (0x5) [ 238.327803][ T8319] tc action pedit unable to extract header offset for header type (0x5) [ 238.327816][ T8319] tc action pedit unable to extract header offset for header type (0x5) [ 238.327830][ T8319] tc action pedit unable to extract header offset for header type (0x5) [ 238.327844][ T8319] tc action pedit unable to extract header offset for header type (0x5) [ 238.327871][ T8319] 0: reclassify loop, rule prio 0, protocol 800 [ 238.335681][ T5688] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 238.363242][ T5688] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 238.370193][ T5688] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 238.370297][ T5688] usb 3-1: can't read configurations, error -61 [ 238.370878][ T5688] usb usb3-port1: unable to enumerate USB device [ 238.474807][ T5350] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 238.626001][ T5350] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0121, bcdDevice=ec.4e [ 238.629121][ T5350] usb 4-1: config 128 has an invalid interface number: 246 but max is 0 [ 238.629152][ T5350] usb 4-1: config 128 has no interface number 0 [ 238.635753][ T5350] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.635819][ T5350] usb 4-1: Product: syz [ 238.635862][ T5350] usb 4-1: Manufacturer: syz [ 238.635905][ T5350] usb 4-1: SerialNumber: syz [ 238.830076][ T8324] loop8: detected capacity change from 0 to 16384 [ 238.949468][ T8328] ======================================================= [ 238.949468][ T8328] WARNING: The mand mount option has been deprecated and [ 238.949468][ T8328] and is ignored by this kernel. Remove the mand [ 238.949468][ T8328] option from the mount to silence this warning. [ 238.949468][ T8328] ======================================================= [ 238.949548][ T8328] fuse: Unknown parameter '–Ù}HvÝŒ/kcé' [ 239.135256][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.135287][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.826199][ T5624] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 239.826240][ T5624] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 239.859333][ T5624] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 239.934345][ T8338] fido_id[8338]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 240.121901][ T8340] loop5: detected capacity change from 0 to 7 [ 240.142486][ T8340] loop5: [ 240.142508][ T8340] loop5: partition table partially beyond EOD, truncated [ 240.175377][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.360542][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.445731][ T8346] netlink: 'syz.2.689': attribute type 1 has an invalid length. [ 240.580702][ T8346] 8021q: adding VLAN 0 to HW filter on device bond7 [ 240.622227][ T8350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.637879][ T8350] bond7: (slave batadv0): Enslaving as a backup interface with an up link [ 240.704979][ T1108] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 240.824902][ T335] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 241.299415][ T5350] ftdi_sio 4-1:128.246: FTDI USB Serial Device converter detected [ 241.317151][ T5350] ftdi_sio ttyUSB0: unknown device type: 0xec4e [ 241.353206][ T5350] usb 4-1: USB disconnect, device number 22 [ 241.372777][ T5350] ftdi_sio 4-1:128.246: device disconnected [ 241.460026][ T8368] loop8: detected capacity change from 0 to 16384 [ 241.835307][ T8373] loop8: detected capacity change from 16384 to 16383 [ 241.995474][ T5624] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 242.154820][ T5624] usb 4-1: Using ep0 maxpacket: 8 [ 242.155692][ T5624] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 242.156992][ T5624] usb 4-1: config 0 has no interfaces? [ 242.157027][ T5624] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.194975][ T5624] usb 4-1: config 0 descriptor?? [ 242.256962][ T25] net_ratelimit: 1 callbacks suppressed [ 242.256985][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.575917][ T5688] usb 4-1: USB disconnect, device number 23 [ 243.017752][ T8359] netlink: 28 bytes leftover after parsing attributes in process `syz.2.692'. [ 243.284349][ T8395] FAULT_INJECTION: forcing a failure. [ 243.284349][ T8395] name failslab, interval 1, probability 0, space 0, times 0 [ 243.284387][ T8395] CPU: 1 UID: 0 PID: 8395 Comm: syz.0.698 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.284414][ T8395] Tainted: [L]=SOFTLOCKUP [ 243.284421][ T8395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 243.284432][ T8395] Call Trace: [ 243.284440][ T8395] [ 243.284448][ T8395] dump_stack_lvl+0xe8/0x150 [ 243.284482][ T8395] should_fail_ex+0x410/0x560 [ 243.284509][ T8395] should_failslab+0xa8/0x100 [ 243.284535][ T8395] __kvmalloc_node_noprof+0x176/0x820 [ 243.284556][ T8395] ? __kmalloc_cache_noprof+0x321/0x600 [ 243.284575][ T8395] ? __kmalloc_cache_noprof+0x14d/0x600 [ 243.284592][ T8395] ? percpu_ref_init+0xc5/0x350 [ 243.284609][ T8395] ? io_alloc_cache_init+0x42/0x140 [ 243.284636][ T8395] ? io_alloc_cache_init+0x42/0x140 [ 243.284671][ T8395] io_alloc_cache_init+0x42/0x140 [ 243.284710][ T8395] io_ring_ctx_alloc+0x508/0xb80 [ 243.284752][ T8395] io_uring_create+0x50/0x990 [ 243.284788][ T8395] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 243.284810][ T8395] ? __fget_files+0x2a/0x420 [ 243.284839][ T8395] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 243.284872][ T8395] ? ksys_write+0x242/0x270 [ 243.284913][ T8395] __do_fast_syscall_32+0x27a/0x6a0 [ 243.284936][ T8395] ? do_fast_syscall_32+0x33/0x70 [ 243.284956][ T8395] ? asm_int80_emulation+0x1a/0x20 [ 243.284975][ T8395] ? do_int80_emulation+0x299/0x500 [ 243.284995][ T8395] ? trace_irq_disable+0x3b/0x140 [ 243.285018][ T8395] do_fast_syscall_32+0x33/0x70 [ 243.285040][ T8395] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 243.285063][ T8395] RIP: 0023:0xf7f540ec [ 243.285081][ T8395] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 243.285098][ T8395] RSP: 002b:00000000f541643c EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 243.285120][ T8395] RAX: ffffffffffffffda RBX: 00000000000006d1 RCX: 0000000080000a88 [ 243.285134][ T8395] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 243.285146][ T8395] RBP: 00000000f54164fc R08: 0000000000000000 R09: 0000000000000000 [ 243.285158][ T8395] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 243.285170][ T8395] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 243.285197][ T8395] [ 243.300090][ T5624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.375892][ T5688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.634391][ T8393] ipvlan2: entered allmulticast mode [ 243.634416][ T8393] vlan0: entered allmulticast mode [ 243.634430][ T8393] veth0_vlan: entered allmulticast mode [ 243.657401][ T8393] batman_adv: batadv0: Adding interface: ipvlan2 [ 243.657421][ T8393] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.657942][ T8393] batman_adv: batadv0: Interface activated: ipvlan2 [ 243.994931][ T5688] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 244.146868][ T5688] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 244.150855][ T5688] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.150908][ T5688] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 244.150932][ T5688] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 244.150956][ T5688] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 244.151001][ T5688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.174890][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.338757][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.496654][ T5624] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 244.496694][ T5624] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 244.520733][ T5624] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 244.793500][ T8426] fido_id[8426]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 245.116616][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.711'. [ 245.137474][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.711'. [ 245.152666][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.711'. [ 245.173886][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.711'. [ 245.174196][ T8450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.193483][ T31] audit: type=1326 audit(1789500005.452:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8441 comm="syz.1.713" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x0 [ 245.215034][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.225764][ T8450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.239554][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.711'. [ 245.241662][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.711'. [ 245.244103][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.711'. [ 245.251965][ T8450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.281828][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.711'. [ 245.283484][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.711'. [ 245.301157][ T8450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.594516][ T8469] netlink: 'syz.3.716': attribute type 1 has an invalid length. [ 245.646846][ T8469] 8021q: adding VLAN 0 to HW filter on device bond3 [ 245.669363][ T8471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.689796][ T8471] bond3: (slave batadv0): Enslaving as a backup interface with an up link [ 245.755792][ T8473] netlink: 'syz.2.717': attribute type 1 has an invalid length. [ 245.877299][ T8473] 8021q: adding VLAN 0 to HW filter on device bond8 [ 245.936588][ T8476] bond7: (slave batadv0): Removing an active aggregator [ 245.943598][ T8476] bond7: (slave batadv0): Releasing backup interface [ 245.999697][ T8476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.019133][ T8476] bond8: (slave batadv0): Enslaving as a backup interface with an up link [ 246.102454][ T30] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 246.102504][ T30] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 246.131189][ T30] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 246.289478][ T8485] fido_id[8485]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 246.523398][ T8495] bridge0: port 3(netdevsim0) entered disabled state [ 246.792482][ T8500] netlink: 'syz.3.725': attribute type 1 has an invalid length. [ 246.808293][ T5688] usb 1-1: USB disconnect, device number 13 [ 246.987784][ T8513] netlink: 'syz.3.725': attribute type 10 has an invalid length. [ 247.098473][ T8500] 8021q: adding VLAN 0 to HW filter on device bond4 [ 247.109817][ T8451] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.113321][ T59] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.113372][ T59] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.113413][ T59] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.342108][ T8503] bond4: (slave veth3): Enslaving as an active interface with a down link [ 247.469573][ T8508] bond4: (slave dummy0): making interface the new active one [ 247.471766][ T8508] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 247.524458][ T8513] dummy0: entered promiscuous mode [ 247.560773][ T8513] bond4: (slave dummy0): Releasing active interface [ 247.562757][ T8522] FAULT_INJECTION: forcing a failure. [ 247.562757][ T8522] name failslab, interval 1, probability 0, space 0, times 0 [ 247.562797][ T8522] CPU: 0 UID: 0 PID: 8522 Comm: syz.1.728 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.562842][ T8522] Tainted: [L]=SOFTLOCKUP [ 247.562851][ T8522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.562864][ T8522] Call Trace: [ 247.562873][ T8522] [ 247.562883][ T8522] dump_stack_lvl+0xe8/0x150 [ 247.562920][ T8522] should_fail_ex+0x410/0x560 [ 247.562952][ T8522] should_failslab+0xa8/0x100 [ 247.562980][ T8522] ? sctp_chunkify+0x5a/0x260 [ 247.563018][ T8522] kmem_cache_alloc_noprof+0xa1/0x600 [ 247.563053][ T8522] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 247.563076][ T8522] ? _sctp_make_chunk+0x59/0x290 [ 247.563109][ T8522] ? sctp_chunkify+0x5a/0x260 [ 247.563149][ T8522] sctp_chunkify+0x5a/0x260 [ 247.563184][ T8522] _sctp_make_chunk+0x122/0x290 [ 247.563222][ T8522] sctp_make_datafrag_empty+0x12a/0x240 [ 247.563254][ T8522] ? __kasan_kmalloc+0x93/0xb0 [ 247.563281][ T8522] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 247.563313][ T8522] ? skb_put+0x112/0x210 [ 247.563343][ T8522] ? sctp_user_addto_chunk+0x9c/0x230 [ 247.563381][ T8522] sctp_datamsg_from_user+0x735/0xef0 [ 247.563435][ T8522] sctp_sendmsg_to_asoc+0x13cf/0x1880 [ 247.563468][ T8522] ? sctp_assoc_add_peer+0xd57/0x1430 [ 247.563510][ T8522] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 247.563535][ T8522] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 247.563568][ T8522] ? __local_bh_enable_ip+0xd6/0x140 [ 247.563606][ T8522] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 247.563638][ T8522] ? security_sctp_bind_connect+0x7e/0x2c0 [ 247.563678][ T8522] sctp_sendmsg+0x1bb5/0x2d00 [ 247.563717][ T8522] ? __pfx_sctp_sendmsg+0x10/0x10 [ 247.563744][ T8522] ? lock_acquire+0x115/0x350 [ 247.563783][ T8522] ? aa_sock_msg_perm+0xf5/0x210 [ 247.563808][ T8522] ? sock_rps_record_flow+0x19/0x350 [ 247.563839][ T8522] ? inet_sendmsg+0x298/0x320 [ 247.563868][ T8522] ? __pfx_inet_sendmsg+0x10/0x10 [ 247.563893][ T8522] sock_sendmsg_nosec+0x10e/0x180 [ 247.563923][ T8522] __sys_sendto+0x408/0x5a0 [ 247.563948][ T8522] ? __pfx___sys_sendto+0x10/0x10 [ 247.563990][ T8522] ? __fget_files+0x3a2/0x420 [ 247.564024][ T8522] ? ksys_write+0x242/0x270 [ 247.564056][ T8522] __ia32_sys_sendto+0xdd/0x100 [ 247.564080][ T8522] __do_fast_syscall_32+0x27a/0x6a0 [ 247.564103][ T8522] ? do_fast_syscall_32+0x33/0x70 [ 247.564123][ T8522] ? asm_int80_emulation+0x1a/0x20 [ 247.564140][ T8522] ? do_int80_emulation+0x299/0x500 [ 247.564159][ T8522] ? trace_irq_disable+0x3b/0x140 [ 247.564181][ T8522] do_fast_syscall_32+0x33/0x70 [ 247.564202][ T8522] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 247.564223][ T8522] RIP: 0023:0xf706f0ec [ 247.564239][ T8522] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 247.564255][ T8522] RSP: 002b:00000000f543c50c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 247.564274][ T8522] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 247.564286][ T8522] RDX: 000000000000ffe0 RSI: 000000000400c0d4 RDI: 0000000080000140 [ 247.564298][ T8522] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 247.564308][ T8522] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 247.564319][ T8522] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 247.564344][ T8522] [ 248.387989][ T8529] loop8: detected capacity change from 16383 to 16384 [ 248.586600][ T8535] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 248.586633][ T8535] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 248.628068][ T8535] netlink: 'syz.1.731': attribute type 13 has an invalid length. [ 248.925111][ T30] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 249.077415][ T30] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 249.078615][ T30] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 249.078648][ T30] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.078680][ T30] usb 5-1: config 0 interface 0 has no altsetting 0 [ 249.078717][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.088097][ T30] usb 5-1: config 0 descriptor?? [ 249.644305][ T30] hid-led 0003:0FC5:B080.000F: unknown main item tag 0x0 [ 249.644347][ T30] hid-led 0003:0FC5:B080.000F: unknown main item tag 0x0 [ 249.644377][ T30] hid-led 0003:0FC5:B080.000F: unknown main item tag 0x0 [ 249.644406][ T30] hid-led 0003:0FC5:B080.000F: unknown main item tag 0x0 [ 249.644435][ T30] hid-led 0003:0FC5:B080.000F: unknown main item tag 0x0 [ 249.644464][ T30] hid-led 0003:0FC5:B080.000F: unknown main item tag 0x0 [ 249.644493][ T30] hid-led 0003:0FC5:B080.000F: unknown main item tag 0x0 [ 249.644522][ T30] hid-led 0003:0FC5:B080.000F: unknown main item tag 0x0 [ 249.644551][ T30] hid-led 0003:0FC5:B080.000F: unknown main item tag 0x0 [ 249.644580][ T30] hid-led 0003:0FC5:B080.000F: unknown main item tag 0x0 [ 250.265713][ T8557] netlink: 'syz.1.749': attribute type 1 has an invalid length. [ 250.426983][ T8555] dummy0: left promiscuous mode [ 250.947782][ T8555] vlan2: left allmulticast mode [ 250.947807][ T8555] veth0_vlan: left allmulticast mode [ 250.991552][ T8555] bridge2: left promiscuous mode [ 250.991608][ T8555] bridge2: left allmulticast mode [ 251.012689][ T8557] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 251.044276][ T8451] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.056522][ T1118] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.063307][ T59] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.063750][ T59] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.166435][ T5707] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 251.190239][ T30] hid-led 0003:0FC5:B080.000F: probe with driver hid-led failed with error -71 [ 251.215916][ T30] usb 5-1: USB disconnect, device number 19 [ 251.323944][ T5707] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 251.323994][ T5707] usb 4-1: too many configurations: 86, using maximum allowed: 8 [ 251.427803][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.427835][ T5707] usb 4-1: Product: syz [ 251.427851][ T5707] usb 4-1: Manufacturer: syz [ 251.427867][ T5707] usb 4-1: SerialNumber: syz [ 251.956485][ T8606] vlan2: entered allmulticast mode [ 251.962151][ T8605] syzkaller0: entered promiscuous mode [ 251.962178][ T8605] syzkaller0: entered allmulticast mode [ 251.998641][ T8605] netlink: 'syz.4.746': attribute type 13 has an invalid length. [ 252.754405][ T8623] __nla_validate_parse: 28 callbacks suppressed [ 252.754429][ T8623] netlink: 72 bytes leftover after parsing attributes in process `syz.4.754'. [ 252.844209][ T5625] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 252.923823][ T5707] net_ratelimit: 13 callbacks suppressed [ 252.923844][ T5707] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 252.923882][ T5707] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 252.923897][ T5707] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 252.947743][ T5707] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 253.014538][ T5707] usb 4-1: USB disconnect, device number 24 [ 254.033634][ T8640] : entered promiscuous mode [ 254.098321][ T8644] syzkaller1: entered allmulticast mode [ 254.131486][ T8645] openvswitch: : Dropping previously announced user features [ 254.254355][ T8655] FAULT_INJECTION: forcing a failure. [ 254.254355][ T8655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.254403][ T8655] CPU: 0 UID: 0 PID: 8655 Comm: syz.4.766 Tainted: G L syzkaller #0 PREEMPT(full) [ 254.254434][ T8655] Tainted: [L]=SOFTLOCKUP [ 254.254442][ T8655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 254.254455][ T8655] Call Trace: [ 254.254464][ T8655] [ 254.254474][ T8655] dump_stack_lvl+0xe8/0x150 [ 254.254512][ T8655] should_fail_ex+0x410/0x560 [ 254.254542][ T8655] _copy_to_user+0x31/0xb0 [ 254.254573][ T8655] bpf_verifier_vlog+0x496/0x900 [ 254.254620][ T8655] bpf_verifier_log_write+0x11d/0x1a0 [ 254.254650][ T8655] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 254.254679][ T8655] ? __kvmalloc_node_noprof+0x345/0x820 [ 254.254707][ T8655] ? bpf_insn_def32+0x1ae/0x650 [ 254.254745][ T8655] bpf_compute_live_registers+0x1a0a/0x1ff0 [ 254.254793][ T8655] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 254.254832][ T8655] bpf_check+0x25ed/0x2e10 [ 254.254869][ T8655] ? ktime_get_with_offset+0x93/0x2d0 [ 254.254898][ T8655] ? __pfx_bpf_check+0x10/0x10 [ 254.254926][ T8655] ? bpf_obj_name_cpy+0x194/0x1e0 [ 254.254962][ T8655] bpf_prog_load+0x14d6/0x1c20 [ 254.255001][ T8655] ? __pfx_bpf_prog_load+0x10/0x10 [ 254.255054][ T8655] __sys_bpf+0xd0d/0xd90 [ 254.255089][ T8655] ? __pfx___sys_bpf+0x10/0x10 [ 254.255117][ T8655] ? ksys_write+0x1e6/0x270 [ 254.255155][ T8655] ? __mutex_unlock_slowpath+0x731/0x900 [ 254.255200][ T8655] ? fput+0xa0/0xd0 [ 254.255227][ T8655] ? ksys_write+0x242/0x270 [ 254.255266][ T8655] __ia32_sys_bpf+0xba/0xd0 [ 254.255293][ T8655] __do_fast_syscall_32+0x27a/0x6a0 [ 254.255320][ T8655] ? do_fast_syscall_32+0x33/0x70 [ 254.255344][ T8655] ? asm_int80_emulation+0x1a/0x20 [ 254.255366][ T8655] ? do_int80_emulation+0x299/0x500 [ 254.255397][ T8655] ? trace_irq_disable+0x3b/0x140 [ 254.255424][ T8655] do_fast_syscall_32+0x33/0x70 [ 254.255450][ T8655] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 254.255477][ T8655] RIP: 0023:0xf7f290ec [ 254.255497][ T8655] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 254.255516][ T8655] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 254.255541][ T8655] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800001c0 [ 254.255557][ T8655] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 254.255569][ T8655] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 254.255582][ T8655] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 254.255596][ T8655] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 254.255626][ T8655] [ 254.835460][ T5707] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 254.949772][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.768'. [ 254.950132][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.768'. [ 254.995576][ T5707] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 254.998783][ T5707] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 254.998840][ T5707] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 254.998867][ T5707] usb 2-1: config 0 interface 0 has no altsetting 0 [ 255.001301][ T5707] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 255.001330][ T5707] usb 2-1: Product: syz [ 255.001347][ T5707] usb 2-1: Manufacturer: syz [ 255.001364][ T5707] usb 2-1: SerialNumber: syz [ 255.072214][ T5707] usb 2-1: config 0 descriptor?? [ 255.081672][ T5707] hub 2-1:0.0: bad descriptor, ignoring hub [ 255.081703][ T5707] hub 2-1:0.0: probe with driver hub failed with error -5 [ 255.113461][ T5707] usb 2-1: selecting invalid altsetting 0 [ 255.319913][ T8657] netlink: 'syz.1.765': attribute type 4 has an invalid length. [ 255.344538][ T8673] netlink: 'syz.1.765': attribute type 4 has an invalid length. [ 255.490752][ T25] hid_parser_main: 30 callbacks suppressed [ 255.490772][ T25] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 255.506939][ T25] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 255.666755][ T8584] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 255.703990][ T8680] fido_id[8680]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 255.780331][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.780400][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.819324][ T8584] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 255.848853][ T8584] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.848907][ T8584] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.876140][ T8584] usb 3-1: config 0 descriptor?? [ 256.093057][ T8584] usbhid 3-1:0.0: can't add hid device: -71 [ 256.093171][ T8584] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 256.128015][ T8584] usb 3-1: USB disconnect, device number 26 [ 256.144644][ T8682] netlink: 72 bytes leftover after parsing attributes in process `syz.3.772'. [ 256.322688][ T8656] snd-usb-audio 2-1:0.0: Runtime PM usage count underflow! [ 256.465193][ T976] usb 2-1: USB disconnect, device number 17 [ 256.468407][ T8688] syzkaller0: entered promiscuous mode [ 256.468427][ T8688] syzkaller0: entered allmulticast mode [ 256.687678][ T8584] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 256.835473][ T8584] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 256.838876][ T8584] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.838933][ T8584] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.843605][ T8584] usb 3-1: config 0 descriptor?? [ 256.911459][ T8705] netlink: 'syz.4.779': attribute type 1 has an invalid length. [ 256.996896][ T8705] 8021q: adding VLAN 0 to HW filter on device bond1 [ 257.001704][ T8708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.022809][ T8708] bond1: (slave batadv0): Enslaving as a backup interface with an up link [ 257.026897][ T5707] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 257.099918][ T8678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.103916][ T8678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.109372][ T59] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 257.134964][ T8584] usbhid 3-1:0.0: can't add hid device: -71 [ 257.135077][ T8584] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 257.142893][ T8584] usb 3-1: USB disconnect, device number 27 [ 257.176807][ T5707] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 257.178028][ T5707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 257.178058][ T5707] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 257.178086][ T5707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 5632, setting to 64 [ 257.181043][ T5707] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 257.182086][ T5707] usb 4-1: Manufacturer: syz [ 257.203366][ T5707] usb 4-1: config 0 descriptor?? [ 257.266576][ T5707] smsusb:smsusb_probe: board id=9, interface number 0 [ 257.298732][ T5707] smsusb:siano_media_device_register: media controller created [ 257.327070][ T5707] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 257.327101][ T5707] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 257.366497][ T59] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 257.409781][ T5707] ------------[ cut here ]------------ [ 257.409799][ T5707] !PageLargeKmalloc(page) [ 257.409814][ T5707] WARNING: mm/slub.c:6724 at free_large_kmalloc+0x97/0x110, CPU#1: kworker/1:5/5707 [ 257.431581][ T5707] Modules linked in: [ 257.436031][ T5707] CPU: 1 UID: 0 PID: 5707 Comm: kworker/1:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.447787][ T5707] Tainted: [L]=SOFTLOCKUP [ 257.452995][ T5707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 257.465372][ T5707] Workqueue: usb_hub_wq hub_event [ 257.470476][ T5707] RIP: 0010:free_large_kmalloc+0x97/0x110 [ 257.476916][ T5707] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 7a c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 2a af fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 78 22 49 8e 5b 41 5e 5d e9 73 c8 fb fe [ 257.497638][ T5707] RSP: 0000:ffffc900042e6b08 EFLAGS: 00010206 [ 257.503773][ T5707] RAX: 00000000ff000000 RBX: ffffea00012f9880 RCX: 0000000000000001 [ 257.513610][ T5707] RDX: ffffc9001d944000 RSI: ffff88804be62000 RDI: ffffea00012f9880 [ 257.521862][ T5707] RBP: 0000000000000000 R08: ffff888067a23203 R09: 1ffff1100cf44640 [ 257.530477][ T5707] R10: dffffc0000000000 R11: ffffed100cf44641 R12: 1ffff11009029a82 [ 257.539305][ T5707] R13: 0000000000000000 R14: ffff888067a23260 R15: dffffc0000000000 [ 257.548129][ T5707] FS: 0000000000000000(0000) GS:ffff888124dd2000(0000) knlGS:0000000000000000 [ 257.558771][ T5707] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 257.565580][ T5707] CR2: 000000005688a20c CR3: 0000000060e02000 CR4: 00000000003526f0 [ 257.575134][ T5707] Call Trace: [ 257.578482][ T5707] [ 257.581467][ T5707] usb_free_urb+0xd0/0x120 [ 257.585996][ T5707] smsusb_term_device+0x1d0/0x3d0 [ 257.592011][ T5707] smsusb_probe+0x1aba/0x2280 [ 257.597456][ T5707] ? __pfx_smsusb_probe+0x10/0x10 [ 257.602555][ T5707] ? do_raw_spin_lock+0x12b/0x2f0 [ 257.607728][ T5707] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 257.613353][ T5707] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 257.619449][ T5707] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 257.625388][ T5707] ? __pm_runtime_set_status+0x994/0xc80 [ 257.631093][ T5707] usb_probe_interface+0x788/0xe50 [ 257.636355][ T5707] ? __pfx_usb_probe_interface+0x10/0x10 [ 257.642044][ T5707] ? sysfs_do_create_link_sd+0xe0/0x110 [ 257.647730][ T5707] ? driver_sysfs_add+0x1fe/0x210 [ 257.652845][ T5707] ? __pfx_usb_probe_interface+0x10/0x10 [ 257.658598][ T5707] really_probe+0x254/0xae0 [ 257.663171][ T5707] __driver_probe_device+0x1e8/0x360 [ 257.668645][ T5707] driver_probe_device+0x4f/0x240 [ 257.673766][ T5707] __device_attach_driver+0x270/0x410 [ 257.675128][ T8584] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 257.686876][ T5707] bus_for_each_drv+0x258/0x2f0 [ 257.691879][ T5707] ? __pfx___device_attach_driver+0x10/0x10 [ 257.698705][ T5707] ? __pfx_bus_for_each_drv+0x10/0x10 [ 257.704791][ T5707] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 257.710731][ T976] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 257.718887][ T5707] __device_attach+0x2c4/0x450 [ 257.723843][ T5707] ? __pfx___device_attach+0x10/0x10 [ 257.729236][ T5707] ? do_raw_spin_unlock+0xf5/0x200 [ 257.734443][ T5707] ? _raw_spin_unlock+0x28/0x50 [ 257.739437][ T5707] device_initial_probe+0xa1/0xd0 [ 257.744516][ T5707] bus_probe_device+0x12a/0x220 [ 257.749499][ T5707] device_add+0x7d7/0xb80 [ 257.753918][ T5707] usb_set_configuration+0x1ad8/0x2180 [ 257.759531][ T5707] usb_generic_driver_probe+0x8d/0x150 [ 257.765117][ T5707] usb_probe_device+0x1c3/0x3b0 [ 257.770130][ T5707] ? __pfx_usb_probe_device+0x10/0x10 [ 257.775607][ T5707] really_probe+0x254/0xae0 [ 257.780210][ T5707] __driver_probe_device+0x1e8/0x360 [ 257.785584][ T5707] driver_probe_device+0x4f/0x240 [ 257.790685][ T5707] __device_attach_driver+0x270/0x410 [ 257.796951][ T5707] bus_for_each_drv+0x258/0x2f0 [ 257.801868][ T5707] ? __pfx___device_attach_driver+0x10/0x10 [ 257.808430][ T5707] ? __pfx_bus_for_each_drv+0x10/0x10 [ 257.813875][ T5707] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 257.819830][ T5707] __device_attach+0x2c4/0x450 [ 257.824719][ T5707] ? __pfx___device_attach+0x10/0x10 [ 257.828209][ T8584] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.00 [ 257.831905][ T8584] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.832023][ T8584] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.858279][ T5707] ? do_raw_spin_unlock+0xf5/0x200 [ 257.863491][ T5707] ? _raw_spin_unlock+0x28/0x50 [ 257.868505][ T5707] device_initial_probe+0xa1/0xd0 [ 257.873592][ T5707] bus_probe_device+0x12a/0x220 [ 257.878549][ T5707] device_add+0x7d7/0xb80 [ 257.882932][ T5707] usb_new_device+0x9aa/0x1690 [ 257.887801][ T5707] ? __pfx_usb_new_device+0x10/0x10 [ 257.893054][ T5707] ? _raw_spin_unlock_irq+0x23/0x50 [ 257.899194][ T5707] hub_event+0x28e8/0x4d30 [ 257.899975][ T976] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 257.913427][ T5707] ? do_raw_spin_unlock+0xf5/0x200 [ 257.918707][ T5707] ? __pfx_hub_event+0x10/0x10 [ 257.919206][ T976] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 257.923322][ T8584] usb 3-1: config 0 descriptor?? [ 257.935878][ T5707] ? rcu_is_watching+0x16/0xb0 [ 257.940696][ T5707] ? process_scheduled_works+0x97a/0x1630 [ 257.945182][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 257.945276][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 257.967113][ T5707] process_scheduled_works+0xc3d/0x1630 [ 257.972763][ T5707] ? __pfx_process_scheduled_works+0x10/0x10 [ 257.978855][ T5707] ? assign_work+0x3cf/0x5d0 [ 257.983515][ T5707] worker_thread+0xa47/0xfb0 [ 257.988289][ T5707] kthread+0x38b/0x480 [ 257.992417][ T5707] ? __pfx_worker_thread+0x10/0x10 [ 257.997634][ T5707] ? __pfx_kthread+0x10/0x10 [ 258.003101][ T5707] ret_from_fork+0x514/0xb70 [ 258.008284][ T5707] ? __pfx_ret_from_fork+0x10/0x10 [ 258.013470][ T5707] ? __switch_to+0xc89/0x1420 [ 258.018375][ T5707] ? __pfx_kthread+0x10/0x10 [ 258.023018][ T5707] ret_from_fork_asm+0x1a/0x30 [ 258.027898][ T5707] [ 258.030960][ T5707] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 258.038284][ T5707] CPU: 1 UID: 0 PID: 5707 Comm: kworker/1:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.049266][ T5707] Tainted: [L]=SOFTLOCKUP [ 258.053626][ T5707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 258.063737][ T5707] Workqueue: usb_hub_wq hub_event [ 258.068826][ T5707] Call Trace: [ 258.072146][ T5707] [ 258.075112][ T5707] vpanic+0x56d/0xa60 [ 258.079159][ T5707] ? __pfx__printk+0x10/0x10 [ 258.083836][ T5707] ? __pfx_vpanic+0x10/0x10 [ 258.088394][ T5707] ? is_bpf_text_address+0x292/0x2b0 [ 258.093741][ T5707] ? is_bpf_text_address+0x26/0x2b0 [ 258.098981][ T5707] panic+0xc5/0xd0 [ 258.102746][ T5707] ? __pfx_panic+0x10/0x10 [ 258.107210][ T5707] ? ret_from_fork_asm+0x1a/0x30 [ 258.112194][ T5707] __warn+0x315/0x4c0 [ 258.116219][ T5707] ? free_large_kmalloc+0x97/0x110 [ 258.121361][ T5707] ? free_large_kmalloc+0x97/0x110 [ 258.126536][ T5707] __report_bug+0x276/0x570 [ 258.131096][ T5707] ? free_large_kmalloc+0x97/0x110 [ 258.136245][ T5707] ? __pfx___report_bug+0x10/0x10 [ 258.141338][ T5707] ? lockdep_hardirqs_on+0x7b/0x110 [ 258.146590][ T5707] ? irqentry_exit+0x218/0x910 [ 258.151383][ T5707] ? trace_irq_disable+0x3b/0x140 [ 258.156442][ T5707] ? free_large_kmalloc+0x99/0x110 [ 258.161587][ T5707] ? free_large_kmalloc+0x97/0x110 [ 258.166724][ T5707] report_bug+0x16b/0x220 [ 258.171081][ T5707] ? free_large_kmalloc+0x97/0x110 [ 258.176213][ T5707] ? free_large_kmalloc+0x99/0x110 [ 258.181439][ T5707] handle_bug+0x9c/0x200 [ 258.185713][ T5707] exc_invalid_op+0x1a/0x50 [ 258.190255][ T5707] asm_exc_invalid_op+0x1a/0x20 [ 258.195135][ T5707] RIP: 0010:free_large_kmalloc+0x97/0x110 [ 258.200877][ T5707] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 7a c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 2a af fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 78 22 49 8e 5b 41 5e 5d e9 73 c8 fb fe [ 258.220537][ T5707] RSP: 0000:ffffc900042e6b08 EFLAGS: 00010206 [ 258.226635][ T5707] RAX: 00000000ff000000 RBX: ffffea00012f9880 RCX: 0000000000000001 [ 258.234630][ T5707] RDX: ffffc9001d944000 RSI: ffff88804be62000 RDI: ffffea00012f9880 [ 258.242713][ T5707] RBP: 0000000000000000 R08: ffff888067a23203 R09: 1ffff1100cf44640 [ 258.250713][ T5707] R10: dffffc0000000000 R11: ffffed100cf44641 R12: 1ffff11009029a82 [ 258.258737][ T5707] R13: 0000000000000000 R14: ffff888067a23260 R15: dffffc0000000000 [ 258.266759][ T5707] usb_free_urb+0xd0/0x120 [ 258.271226][ T5707] smsusb_term_device+0x1d0/0x3d0 [ 258.276279][ T5707] smsusb_probe+0x1aba/0x2280 [ 258.281000][ T5707] ? __pfx_smsusb_probe+0x10/0x10 [ 258.286061][ T5707] ? do_raw_spin_lock+0x12b/0x2f0 [ 258.291141][ T5707] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 258.296713][ T5707] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 258.302563][ T5707] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 258.308402][ T5707] ? __pm_runtime_set_status+0x994/0xc80 [ 258.314076][ T5707] usb_probe_interface+0x788/0xe50 [ 258.319228][ T5707] ? __pfx_usb_probe_interface+0x10/0x10 [ 258.324894][ T5707] ? sysfs_do_create_link_sd+0xe0/0x110 [ 258.330472][ T5707] ? driver_sysfs_add+0x1fe/0x210 [ 258.335521][ T5707] ? __pfx_usb_probe_interface+0x10/0x10 [ 258.341183][ T5707] really_probe+0x254/0xae0 [ 258.345717][ T5707] __driver_probe_device+0x1e8/0x360 [ 258.351036][ T5707] driver_probe_device+0x4f/0x240 [ 258.356087][ T5707] __device_attach_driver+0x270/0x410 [ 258.361489][ T5707] bus_for_each_drv+0x258/0x2f0 [ 258.366377][ T5707] ? __pfx___device_attach_driver+0x10/0x10 [ 258.372295][ T5707] ? __pfx_bus_for_each_drv+0x10/0x10 [ 258.377697][ T5707] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 258.383545][ T5707] __device_attach+0x2c4/0x450 [ 258.388348][ T5707] ? __pfx___device_attach+0x10/0x10 [ 258.393656][ T5707] ? do_raw_spin_unlock+0xf5/0x200 [ 258.398803][ T5707] ? _raw_spin_unlock+0x28/0x50 [ 258.403708][ T5707] device_initial_probe+0xa1/0xd0 [ 258.408770][ T5707] bus_probe_device+0x12a/0x220 [ 258.413655][ T5707] device_add+0x7d7/0xb80 [ 258.418010][ T5707] usb_set_configuration+0x1ad8/0x2180 [ 258.423530][ T5707] usb_generic_driver_probe+0x8d/0x150 [ 258.429020][ T5707] usb_probe_device+0x1c3/0x3b0 [ 258.433906][ T5707] ? __pfx_usb_probe_device+0x10/0x10 [ 258.439308][ T5707] really_probe+0x254/0xae0 [ 258.443841][ T5707] __driver_probe_device+0x1e8/0x360 [ 258.449163][ T5707] driver_probe_device+0x4f/0x240 [ 258.454218][ T5707] __device_attach_driver+0x270/0x410 [ 258.459644][ T5707] bus_for_each_drv+0x258/0x2f0 [ 258.464527][ T5707] ? __pfx___device_attach_driver+0x10/0x10 [ 258.470447][ T5707] ? __pfx_bus_for_each_drv+0x10/0x10 [ 258.475852][ T5707] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 258.481699][ T5707] __device_attach+0x2c4/0x450 [ 258.486493][ T5707] ? __pfx___device_attach+0x10/0x10 [ 258.491799][ T5707] ? do_raw_spin_unlock+0xf5/0x200 [ 258.496941][ T5707] ? _raw_spin_unlock+0x28/0x50 [ 258.501824][ T5707] device_initial_probe+0xa1/0xd0 [ 258.506875][ T5707] bus_probe_device+0x12a/0x220 [ 258.511765][ T5707] device_add+0x7d7/0xb80 [ 258.516122][ T5707] usb_new_device+0x9aa/0x1690 [ 258.520915][ T5707] ? __pfx_usb_new_device+0x10/0x10 [ 258.526136][ T5707] ? _raw_spin_unlock_irq+0x23/0x50 [ 258.531369][ T5707] hub_event+0x28e8/0x4d30 [ 258.535806][ T5707] ? do_raw_spin_unlock+0xf5/0x200 [ 258.540999][ T5707] ? __pfx_hub_event+0x10/0x10 [ 258.545797][ T5707] ? rcu_is_watching+0x16/0xb0 [ 258.550589][ T5707] ? process_scheduled_works+0x97a/0x1630 [ 258.556363][ T5707] process_scheduled_works+0xc3d/0x1630 [ 258.561961][ T5707] ? __pfx_process_scheduled_works+0x10/0x10 [ 258.568056][ T5707] ? assign_work+0x3cf/0x5d0 [ 258.572674][ T5707] worker_thread+0xa47/0xfb0 [ 258.577341][ T5707] kthread+0x38b/0x480 [ 258.581430][ T5707] ? __pfx_worker_thread+0x10/0x10 [ 258.586570][ T5707] ? __pfx_kthread+0x10/0x10 [ 258.591185][ T5707] ret_from_fork+0x514/0xb70 [ 258.595798][ T5707] ? __pfx_ret_from_fork+0x10/0x10 [ 258.600939][ T5707] ? __switch_to+0xc89/0x1420 [ 258.605650][ T5707] ? __pfx_kthread+0x10/0x10 [ 258.610264][ T5707] ret_from_fork_asm+0x1a/0x30 [ 258.615078][ T5707] [ 258.618818][ T5707] Kernel Offset: disabled [ 258.623158][ T5707] Rebooting in 86400 seconds..