last executing test programs: 17.843852537s ago: executing program 2 (id=2062): socket$kcm(0xa, 0x3, 0x3a) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000280)=@chain) r7 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_MODE_SETGAMMA(r7, 0xc02064a5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 16.728086684s ago: executing program 2 (id=2066): mremap(&(0x7f000087f000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) timerfd_create(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef10542a2201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42731b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c32768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e179100a0000000000000021e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90a14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9edb6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc83cccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r5, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}]) dup3(r5, r3, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @broadcast}, {0x0, 0x4e20, 0xd, 0x0, @gue={{0x1, 0x1, 0x0, 0x2, 0x100, @void}, "0daad131fa59dbf7"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0xa) 14.96363661s ago: executing program 2 (id=2069): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) close_range(r0, r0, 0x0) 14.764241337s ago: executing program 2 (id=2072): socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc800}, 0x40044) syz_emit_ethernet(0x36, 0x0, 0x0) syz_emit_ethernet(0xf5, 0x0, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x42300, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000003b40)=0x4000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12.304485759s ago: executing program 4 (id=2078): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0xffff, 0x91}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002380)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000595000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f00000ce000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xe29, 0xc000, 0x2, 0xc1}) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000000)={0x3, 0x1, 0x80, 0x0, 0x6}) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) syz_clone3(&(0x7f0000000500)={0x100000000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x20}, &(0x7f0000000380)=""/82, 0x52, &(0x7f0000000400)=""/242, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r1}}, 0x58) ptrace(0x4207, r2) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r3 = syz_open_pts(r0, 0x0) r4 = dup3(r3, r0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000200)=0x17) 9.621724761s ago: executing program 0 (id=2080): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_CHANINFO(r0, 0x80306403, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0}) 8.665977959s ago: executing program 4 (id=2081): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) close_range(r0, r0, 0x0) 8.653199033s ago: executing program 0 (id=2082): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x18) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x100000000000f7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r1], 0x0, 0x5a, 0x0, 0x0, 0x80000}, 0x28) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000000fc00000008004500001c0000000000029078ac1e0001e0000001167e9078ac14"], 0x0) 8.235381096s ago: executing program 0 (id=2085): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f0000000200)={0xa, 0x4e1e, 0x80000, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000290075dd370000003300000000000000"], 0x18}, 0x40) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) r4 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r4, 0xa, 0x21) syz_open_procfs(0x0, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)="19ccd38199d998c018d0ee49f342e9", 0xf}], 0x1}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000005c0)={0x24, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f0000000900)=ANY=[], 0x0, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xff77, 0x0, 0x1, {0x22, 0x5c2}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000780)={0x0, 0x16}, &(0x7f0000000600)={0x0, 0xa, 0x1}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)=ANY=[@ANYBLOB="2001150000001798dd6cdeda1671c4e4f758e4637e4917adf9fafe"], &(0x7f0000000880)={0x20, 0x3, 0x1, 0x2}}) sendto$inet(r0, 0x0, 0x0, 0xc74d, &(0x7f0000e68000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000740)="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", 0x13c}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce", 0xad}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="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", 0x124}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d2", 0x59}], 0x1}}], 0x3, 0x2090) 8.223296634s ago: executing program 4 (id=2086): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000280)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) fgetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000100)=""/61, 0x3d) socket$inet_tcp(0x2, 0x1, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x2801, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@fallback=0xffffffffffffffff, 0x31, 0x2000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x81) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b4b, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x1d, 0x100, 0x0}) 6.951355718s ago: executing program 1 (id=2088): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(r0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x77359400}}, 0x0) timer_gettime(r0, &(0x7f0000000200)) 6.872000326s ago: executing program 4 (id=2089): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) times(0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="00170100000017eb899294d1d8e38ad854d48a4903aa2e0b3cfd7ee0813fe4ca35fa4c7e5594d84e5b504566db04c940c2dbaef678c5d3f8d43d0b52dc7ac46611a46339a93cd155ca6e547e21"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) ioctl$KDDISABIO(r2, 0x4b37) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x2, 0x4040) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@updpolicy={0x13c, 0x19, 0x200, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x20001000, 0x6, 0x9, 0x0, 0x5, 0x8}, {0x0, 0x0, 0x800, 0x2}, 0x200, 0x6e6bb4, 0x1, 0x1, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010100, 0x34fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040}, {{@in=@remote, 0x2000, 0x3c}, 0x2, @in6=@dev, 0x0, 0x0, 0x0, 0xfd}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x400c081}, 0x2004091) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x80302, 0x0) syz_open_dev$mouse(&(0x7f0000000200), 0x8, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r4) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000040)={'vlan1\x00', @random="2e2e004010ff"}) 6.87109629s ago: executing program 1 (id=2090): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f00000009c0)="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", &(0x7f0000000000)=""/93}, 0x20) 5.855157297s ago: executing program 3 (id=2091): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0xffff, 0x91}) recvmmsg(0xffffffffffffffff, &(0x7f00000021c0), 0x0, 0x0, &(0x7f0000002380)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000595000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f00000ce000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xe29, 0xc000, 0x2, 0xc1}) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000000)={0x3, 0x1, 0x80, 0x0, 0x6}) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) syz_clone3(&(0x7f0000000500)={0x100000000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x20}, &(0x7f0000000380)=""/82, 0x52, &(0x7f0000000400)=""/242, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r1}}, 0x58) ptrace(0x4207, r2) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r3 = syz_open_pts(r0, 0x0) r4 = dup3(r3, r0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000200)=0x17) 5.844158641s ago: executing program 2 (id=2092): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090524"], 0x0) epoll_create1(0x80000) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x20001) write$P9_RVERSION(r0, 0x0, 0xfffffcd9) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090524"], 0x0) (async) epoll_create1(0x80000) (async) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x20001) (async) write$P9_RVERSION(r0, 0x0, 0xfffffcd9) (async) 5.791894943s ago: executing program 1 (id=2093): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x1400, 0xd, 0x4}, 0x18, 0x2) landlock_restrict_self(r0, 0x0) migrate_pages(0xffffffffffffffff, 0x6, 0x0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d) r2 = landlock_create_ruleset(&(0x7f0000000100)={0x2fbd, 0x1}, 0x18, 0x0) unshare(0x24020400) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d80140003"], 0x1f0}}, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r4, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') pread64(r5, &(0x7f0000000200)=""/4087, 0xff7, 0x1c) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000001c0)={0x2, @pix={0x5, 0x5, 0x50424752, 0x1, 0x6, 0x101, 0xb, 0x1, 0x1, 0x8, 0x1, 0x6}}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) readv(r7, &(0x7f0000000140)=[{&(0x7f0000001380)=""/162, 0xa2}, {&(0x7f00000012c0)=""/177, 0xb1}], 0x10000000000000e4) setsockopt(r7, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) landlock_restrict_self(r2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r1, &(0x7f0000000000)='./file0\x00', 0x4) 5.308679753s ago: executing program 0 (id=2094): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, 0x0, 0x25, 0x0, @void}, 0x10) sendmmsg$inet(r0, &(0x7f0000006040)=[{{&(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000002440)=[{&(0x7f0000002300)="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", 0xfa}, {&(0x7f0000000100)}, {&(0x7f0000002400)="a8c8498564e56f5ee0491538bac2ce", 0xf}], 0x3, &(0x7f0000002480)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x78, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x28, 0x1, 0x8, [{@broadcast}]}, @generic={0x83, 0x12, "7f5ac30000001900000007cbeaeb471a"}, @timestamp={0x44, 0x4, 0xce, 0x0, 0x2}, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0xbc, 0x0, 0x5, [0x3, 0x7fffffff, 0xd, 0x1]}, @end, @noop, @timestamp={0x44, 0x2c, 0xb7, 0x0, 0x4, [0x9, 0x92d9, 0x1, 0x4, 0x2, 0x2, 0x1, 0x10001, 0x6f, 0x3]}]}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x6e, 0x0, 0x2, [0x8, 0xfffffffa]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x800}}], 0xe0}}, {{&(0x7f0000002580)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000003940)=[{&(0x7f00000025c0)="7a2cc4fa2ecd933698d77dab11b84733c32f1863c5ddd22112b55b64233653c5381d8e2d944caf60c96dc0a9ce92b250e2fefa7dea9c83a82a5e21255dcd3104e15bb992cfc7f997511e45ee3bde7be391541e351f5f693953498f6c83ae838307d60d824a65aff3372d2d0921e87eb358180dc242afceac8c7eeb0faba04697389ef6dfc56073584299d71b72436a8be636cb7cd07a50f1aabdbebfdd73a2449bcfe1", 0xa3}, {&(0x7f0000006400)="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"/4107, 0x100b}, {&(0x7f0000002680)="cd4354698cdb512eb17bc34f3d3e3d3325144a538aedd1e4a48b536124b33f269dd62f51a24c949dad6255ea599956e53d3d72cbf46caf26aea3801059dc3118e1406ab4b864fe60a324a62a6c7e99538d9ea16d3793c3197d84480cb3780b4bd6f24835177d242115ff02102abc038772e30e592f69f93ff2b4247360f7253a31d5d78a005d19cf", 0x88}, {&(0x7f0000003780)="e2c97674c51673cb4399", 0xa}, {&(0x7f00000037c0)="24ed1d8187bedd9718c19deaa57ac4a7159f16a3ab66e542a022dcf61f01cb8e27354c71908c166a50a120f0f0ce5fabde22a6ddb99e3188a8a07749bade834a840917e354d01aac656f53d384d79d8529fbb1faf96d894f8975f4a286312a551ccdf8d8f4d3a7d3b8a37b751362b2f70a915739f5759440ef115ca1619e6583b7c55cb9056961d6e2bf9c30bd21b4fb889681109ccd8138d6cbed26abbe6ac7a2964ced6af4b74594d5dcc230842538dd8ef6be5bd996f69a99c7038f351c1b376af6659b5513c201", 0xc9}, {&(0x7f00000038c0)="f91d4a980844ed7476be431aafd7a4c800eec42bd9f6ad0888a12a3c8a4a567eda60f1a6d2e0db292b46816690ac08fac4c260b849418daed9fcd344a72a9137af077d36ef724933456a12795c15e6dd111b7c75", 0x54}], 0x6, &(0x7f0000003c00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2f}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x39}, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x70, [@dev={0xac, 0x14, 0x14, 0x31}, @remote]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x100}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000003d00)="d03f07c354e2bd09cd8d092647cf58528fd0570a7ae59b0c8b2e4cc0db403a948edaaa533ba67bb7bff1ab67181e7f719c90b0e04ef4e2121519a22c7b2289f81f9cb97b162af4da9ff58c6098531380a535f991381ec833b456259ca91fdca6ceeebd7827aa756ddf3f3991dde04cbd38968c07b43e21554a28b9dbed4e8773e139881baa2c662afd0d56b0c7228455e95234329a2b41c761896c7ebb7c7b0382816ea00050e0780d2c78a818fc9114f09228fe23afec089e209cbc2ca757f2d2b73988e70ebb83e672a4e98b68ad0d3d911c66e05172abcf517126ed7b1873dea46893d951102b80cc3f9176b13a17201ceb572b5f75", 0xf7}], 0x1, &(0x7f0000006200)=[@ip_retopts={{0xb0, 0x0, 0x7, {[@noop, @rr={0x7, 0xf, 0xf, [@loopback, @dev={0xac, 0x14, 0x14, 0x43}, @remote]}, @timestamp_prespec={0x44, 0x4c, 0x39, 0x3, 0x4, [{@broadcast, 0x984}, {@remote, 0x3}, {@local, 0x5}, {@remote, 0x101}, {@local, 0x7}, {@multicast2, 0x8}, {@loopback, 0x80}, {@rand_addr=0x64010102, 0x1}, {@local, 0x8}]}, @generic={0x88, 0x7, "19b3cc1b21"}, @timestamp_prespec={0x44, 0x3c, 0x7e, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x38}, 0x5}, {@empty, 0x1}, {@broadcast, 0x3}, {@local}, {@private=0xa010102, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@local, 0x800}]}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x65aacf00}}, @ip_retopts={{0x10}}], 0xd8}}, {{&(0x7f0000004000)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000004300)=[{&(0x7f0000004040)="1e576b2e96c98c5613ca4210900869e03e7b96acb72c0895e011daa0a8e1a0a329da3b6c0b9ec71d", 0x28}, {&(0x7f0000004080)="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", 0xfe}, {&(0x7f0000004180)="f35eadb0b7fcb04398ffe23b132b0af4c412c0dc6d6130ce71509af7972b8c4e5dc9b3a288580c44372c04ddb5e819", 0x2f}, {&(0x7f00000041c0)="941dc96dd9de892282a9276c0dba058dba22e8119c8cde1a9f09fc90ccb77fcd665393cd79110febc1e2ab6f9132ced4be523758f11d6c9ae11a4dd49f66e4e86bfe1aa93a62893e0af276e08629350f48dcc585f58aa5a4a1e4153b453f79711e23ee950f12fc7e19b0f0e63d3602a8ef9459e224831af29fa96031e189610a7e6ff5ff1721f82cc7ffb4085a99ef31", 0x90}, {&(0x7f0000003b80)="58fd004eeba5b745f7f9a55031d307a356891f0e1867c710d58a717c2740a0622bebc5ee8c39b6a548ef161e6a5491462894d36030ce495e02b96a991762a1603b95d554a83b16a1d82f4c0e62bfa626f6cc94a376ba49335fac061ea8d2610737ba4e5666", 0x65}], 0x5, &(0x7f0000004400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @dev={0xac, 0x14, 0x14, 0x14}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb}}, @ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_retopts={{0x70, 0x0, 0x7, {[@noop, @noop, @ssrr={0x89, 0xf, 0xc0, [@multicast1, @dev={0xac, 0x14, 0x14, 0x12}, @remote]}, @timestamp_addr={0x44, 0x4c, 0xe0, 0x1, 0x8, [{@broadcast, 0xffffff81}, {@empty, 0xffffffff}, {@empty, 0x10}, {@private=0xa010101, 0x7}, {@multicast2, 0x4}, {@local, 0x1000}, {@rand_addr=0x64010102, 0x3}, {@local, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}]}}}], 0xf0}}, {{&(0x7f0000004500)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000005600)=[{&(0x7f0000004540)="03a4f593f97360c64f219491250d7fea4c19dc30df802a3c99b147dc678b19be1d8a3dfb57d1ed9116086b702d177656906d8ce3c26f4ec73888f4e7af4dd4815ea4e645b72b9c28fe503d99e3bbef3dede7a6925062771f0a49348154162d78d69485a3b5794d3101134956e8e0ad6616a70de14b5e74ef69cbc250a5341e15387219188760b4b993fdcb9bf24e016fe20c0fefd7924f57f2030091ed381a4870172e21a6161b45d2e6835a27e57ce463979e07abeb2255ac57", 0xba}, {&(0x7f0000004600)="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", 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000005b80)=[{&(0x7f0000005640)="3af8907d893188281f3aa89a5e51fefee3ff4eb64f3ed48f18b1ebbbe81ade46837fa6ef598dba28202aa89e557ba5babefd0d4f9de56e7a8e6f581f86534f09dcaec781a11debad1092895f0c46a7c43240e98ddb06905c787cc201435e332df0db2757a9ea036eff", 0x69}, {&(0x7f00000056c0)="079d4b4961e205352163b935ae936209df0009d571c97f47bb8ad7b304cb19880ca7f880b7e8fd31b6f2ce80838f6ea4c7aedf0718a97598ee16dcc32e2d59d8c281da12abe199b445f12278ee0a325f310e8c4021c4ebdf722ec0f8bc085a9c3a81c0feb5705803af6e96219fba4beb3ac9f43c3bbe4303286e4bd9ca809798ee6872d8c14d8adfe3c84e56d6df4faf93d10f0c6865613c61695918a0ca94b012f1ad34c80e0e0e913720bcceeadf0e46dda2d773301b5aa429010f22b7079b881fd5", 0xc3}, {&(0x7f00000057c0)="385affe93242b0b8cde08f88fb2fa1c83406d575cb61a1efede3bcbca9a83a12cfaddb3ba149481756ced68f1f6a58552d637db83e44e7714518928ef11d68be8800a614231d0a9348d9eeed1cc1b52d", 0x50}, {&(0x7f0000005840)="f77aabd378d8d0e885325b59295be073d353f5e84614bb5ed16ccafec4ce8be7415f9004a37150ba00878f660373cbf0aefc48aaab32f851f8b1d3ff17d4c341c01f5b7a66f3e17fc22b0b87b81b125a5432dc71e49e328d4e5fe05851586ee59be374868e09d17209e2509a0349dc66cf12ab776818fdab13e9f6fec0a448256045840068205f70d1d1720b208a1adcff5161231f1d4fbdf322459b8467ae23f6a3cda3", 0xa4}, {&(0x7f0000005900)="c7dc17edeff1c1f81309f57445aa60fc43358f5373c8f69122fde0eb464f8e37841a8510d7544cc7acb99e716a4c8e96c92426e3a1cb8f59de6463c083f0b2b41fd48d0269a70b7da2514856f6d22c2e3370d5749c0faee28e603c4447b2319e5493a8dbbec37d49711271081b2b985e23388e0f0921abfcfd5e80638771a5210206959f0be752a991779dd80dc7a5b5afed2e786b8e5b1cb6f41dfcf30d6f3a959d4212b5044df626faf6ceeedc70d2e289989dd50700d79c310837a78b6caad986cf16c956820e61b41b6603f533d0805211fbf90f9c38f2429341d8d041da7f852594d89774ea3a48d8348f", 0xed}, {&(0x7f0000005a00)="6efc12f237f700fc489cf70d6a7dbc58d07df2d8b5f487161cba174287eee377b6bb1952ac32f5e9675ee3c0f5dd434f65b60e50a1fda8d9597054b6ca96ff21099327ee763990ae3105d13f3bfefca088", 0x51}, {&(0x7f0000005a80)="f2b0d92190ff2132aa63fef891c2ab01328501afa6a3616a0dfd6eb54d08e084c5d569aecbc0a3edfc1592c12650c349a3f3c952bf3c7413f8080e551bcde1c922d9ce86389fa8c97bde3f7bb02170eef4384bcf62cfbb854953e03744a00b9636f38e0131d91128903be75e28b25ef7406190f1eea1a5c946c6ac585815e4f1c730e773aaf026f07dbc46cb7c4650cddb97e1694fc1451f0a7445edd107e178fe6ddb8de7ef8b3ded0bc992d3315824abad5bb5aa5aa3529b821347149a0799ab52095a507b7869f108b049a72f5e4a2a0d636cb2002e9ed190c05681990cb356f60f5bb9790a5a290ddaee624e", 0xee}], 0x7, &(0x7f0000005c00)}}, {{0x0, 0x0, &(0x7f0000005d40)=[{&(0x7f0000005c40)="541febf56ff3da06320e00536cae8266f45e594eba94abbbf473595ffc1734ccc42ae751c6d5a8b09bf2f47d15b99c17a6146efab2ebdc5c544cbc668cabacabea3c8a4c17dbac619b9df0ba750b5daede5f869fd87941b08394b232adeb9c5f2cba2d935f503d23da96ffb5ed20aa25b157768113a71915a8a6e4d51d626e1d58dac1d93bf1d08e1cbbbdab020460a9c1f4df25d090e624ee13722de5d12b53ae6222dd48d111e55bb52e4173e1ed9952e7af2af4dbff7f4c06598a918105ec7f4b5c465f2f15440e29f9a481b0a028912f0b55f6d1ac37dda1ab29a68b59b320f45eb38acf764627a0ad1bc421cd673193046140", 0xf5}], 0x1, &(0x7f0000005ec0)=[@ip_retopts={{0x28, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x8, 0x1f, 0x0, 0x8, [0x6]}, @ssrr={0x89, 0xf, 0x36, [@remote, @dev={0xac, 0x14, 0x14, 0x12}, @local]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010104}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@lsrr={0x83, 0x1f, 0x6, [@broadcast, @loopback, @rand_addr=0x64010102, @multicast2, @dev={0xac, 0x14, 0x14, 0x3f}, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x4, 0x30, 0x1, 0xa}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010100}}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x138}}], 0x7, 0x800) rt_tgsigqueueinfo(r1, r1, 0x2a, 0x0) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000002240)=ANY=[@ANYBLOB="12010102000000101e04003a09000000000000006e000301635002080b0002010130020904090000000000000000000000000100000009040100000102300009040101010102300009050109ff0309ff021a25250400000080030009040200000102300009040201010102300009058209ff030908050a25256577b46a5896bf33dda4b0ef0afd895c80000000020800"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f0000002740), 0x80080) r5 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x2020) mount(0x0, 0x0, &(0x7f0000000180)='tmpfs\x00', 0x2204c96, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r7, 0xfffd, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f00000001c0)=[{&(0x7f0000000400)='\r', 0x1}], 0x1, 0x0) vmsplice(r8, &(0x7f0000000380)=[{&(0x7f0000000300)="5be6", 0x2}], 0x1, 0x4) socket(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x3}}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x800, [{0x0, 0x1}]}]}}, 0x0, 0x4a}, 0x28) 4.774144102s ago: executing program 3 (id=2095): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x18) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x100000000000f7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r1], 0x0, 0x5a, 0x0, 0x0, 0x80000}, 0x28) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000000fc00000008004500001c0000000000029078ac1e0001e0000001167e9078ac14"], 0x0) 4.6655785s ago: executing program 3 (id=2096): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x3, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) close_range(r0, r0, 0x0) 4.583475578s ago: executing program 1 (id=2097): r0 = inotify_init() r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0x9aa9b000) r3 = msgget(0x2, 0x624) msgctl$IPC_RMID(r3, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) close_range(r0, 0xffffffffffffffff, 0x0) 4.453775451s ago: executing program 1 (id=2098): socket$inet6(0xa, 0x80002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}}, 0x20044084) close(r0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0227664bfe629b1925ab55203fda000000040000f2072fae253cdfe6ebc33acff476c54714bb0200000000000000e893eb6dd82ed1416e7623513bb9405e927af6cee97dda20aabd78ba21f7e56db14695a5128a63ffe566c674751512ed8daf9f21acd485b6f517ef8fe2223ace4806c7845643b20e", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="010000000500"/28], 0x50) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000001c0)={0x17}) 4.39527771s ago: executing program 3 (id=2099): unshare(0x200) io_setup(0x222, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001740)=ANY=[@ANYRES16, @ANYRES8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lseek(0xffffffffffffffff, 0x81, 0x0) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x5a) process_madvise(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000300)="9631581ab311b95e2f723970055f282589bc62f035b049dbd1ff21e452c1b8ad213e6429540d722466d3826614333ff04463c82936945eea3429663a9ce58026fa853a4924a6afe85b1794bc3e29d22a9ef468b5e878f94406e9b50abebf99da94b24120f0c085638b6cb5401f0fa4e05f009a443c8c94909aade9722c2205300bc83b0d98fc36e5f40a8a5aa22848ff9c784f2119de1364d191d8d8a10c0873c5f4102046d0860b6bb3b0", 0xab}], 0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], 0x0, 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_vhci(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x6b) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x1) write$binfmt_elf32(r4, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x3, 0xa, 0x5, 0x1d360, 0x3, 0x6, 0x10001, 0x1b, 0x38, 0x1a4, 0x408, 0x3, 0x20, 0x2, 0x5, 0x8000, 0x1ff}, [{0x5, 0x1f, 0x3, 0x2, 0x1, 0x7, 0x7, 0x9}, {0x6474e551, 0xa, 0xd1, 0x1, 0x2000001, 0x2, 0xfff}]}, 0x78) close(r4) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2.91596991s ago: executing program 1 (id=2100): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8\t\x00\x00\x00.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99\xe2V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96(\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93X\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad', 0x0) fcntl$addseals(r3, 0x409, 0x8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000002280)={{0x12, 0x1, 0x110, 0xa3, 0xb5, 0x34, 0x40, 0x129b, 0x160c, 0x2186, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x3, 0x90, 0xfa, "", [{{0x9, 0x4, 0x14, 0x9, 0x0, 0x3d, 0x5c, 0xad, 0xeb}}]}}]}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@ipv4_delrule={0x34, 0x21, 0x800, 0x70bd2d, 0x25dfdbff, {0x2, 0x80, 0x0, 0x4, 0x2, 0x0, 0x0, 0x2, 0xc}, [@FRA_TUN_ID={0xc}, @FRA_TUN_ID={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.915152391s ago: executing program 2 (id=2101): socket$kcm(0xa, 0x3, 0x3a) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f00000002c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x4, 0x8}, {0x2, 0x7, 0x2, 0x4}}}}, 0x15) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000280)=@chain) r7 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_MODE_SETGAMMA(r7, 0xc02064a5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 2.730993787s ago: executing program 3 (id=2102): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x40000000, &(0x7f00000054c0)={0x4, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r4 = socket(0x10, 0x803, 0x2) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000480)={&(0x7f0000000180), 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20000008}, 0x14) 2.019343199s ago: executing program 0 (id=2103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}}, 0x0) 1.585011392s ago: executing program 4 (id=2104): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000480)) landlock_restrict_self(r0, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x7) landlock_restrict_self(r0, 0x3) landlock_restrict_self(r0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r7, &(0x7f0000000000)='D', 0x1, 0x28004044, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @empty, 0xfffffffd}, 0x1c) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) syz_clone3(&(0x7f0000000300)={0x1040000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x3d}, &(0x7f0000000140)=""/228, 0xe4, &(0x7f0000000240)=""/21, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x5}, 0x58) 1.356922076s ago: executing program 3 (id=2105): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0xffff, 0x91}) recvmmsg(0xffffffffffffffff, &(0x7f00000021c0), 0x0, 0x0, &(0x7f0000002380)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000595000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f00000ce000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xe29, 0xc000, 0x2, 0xc1}) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000000)={0x3, 0x1, 0x80, 0x0, 0x6}) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) syz_clone3(&(0x7f0000000500)={0x100000000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f00000001c0), {0x20}, &(0x7f0000000380)=""/82, 0x52, &(0x7f0000000400)=""/242, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r1}}, 0x58) ptrace(0x4207, r2) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r3 = syz_open_pts(r0, 0x0) r4 = dup3(r3, r0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000200)=0x17) 162.422446ms ago: executing program 0 (id=2106): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x18) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x100000000000f7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r1], 0x0, 0x5a, 0x0, 0x0, 0x80000}, 0x28) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000000fc00000008004500001c0000000000029078ac1e0001e0000001167e9078ac1414"], 0x0) 0s ago: executing program 4 (id=2107): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000010) syz_usb_connect(0x3, 0x2d, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000061c2f20c81403006c050102030109021b00010000000009040000"], 0x0) kernel console output (not intermixed with test programs): 000000 [ 484.590011][T11399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.590018][T11399] R13: 00007fdee1736038 R14: 00007fdee1735fa0 R15: 00007ffc5779aca8 [ 484.590034][T11399] [ 484.845295][ T36] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 485.001545][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 485.011751][ T36] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 485.011781][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.011802][ T36] usb 5-1: Product: syz [ 485.011817][ T36] usb 5-1: Manufacturer: syz [ 485.011832][ T36] usb 5-1: SerialNumber: syz [ 485.029507][ T36] usb 5-1: config 0 descriptor?? [ 485.048421][ T36] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 485.406230][ T5811] Bluetooth: Wrong link type (-22) [ 485.411110][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.623812][ T37] kauditd_printk_skb: 26 callbacks suppressed [ 485.623829][ T37] audit: type=1326 audit(1772619928.485:4770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11397 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6524edc799 code=0x7ffc0000 [ 485.625932][ T37] audit: type=1326 audit(1772619928.485:4771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11397 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6524edc799 code=0x7ffc0000 [ 485.628149][ T37] audit: type=1326 audit(1772619928.485:4772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11397 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f6524edc799 code=0x7ffc0000 [ 485.629289][ T37] audit: type=1326 audit(1772619928.485:4773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11397 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6524edc799 code=0x7ffc0000 [ 485.635263][ T37] audit: type=1326 audit(1772619928.485:4774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11397 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6524edc799 code=0x7ffc0000 [ 485.636996][ T37] audit: type=1326 audit(1772619928.495:4775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11397 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6524edc42b code=0x7ffc0000 [ 485.638760][ T37] audit: type=1326 audit(1772619928.495:4776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11397 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6524edc42b code=0x7ffc0000 [ 485.640900][ T37] audit: type=1326 audit(1772619928.495:4777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11397 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6524e9cfce code=0x7ffc0000 [ 485.771429][ T10] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 485.919875][ T37] audit: type=1326 audit(1772619928.775:4778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11397 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6524edc799 code=0x7ffc0000 [ 485.919925][ T37] audit: type=1326 audit(1772619928.775:4779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11397 comm="syz.4.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6524edc799 code=0x7ffc0000 [ 485.929961][ T4709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.051413][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 486.054989][ T10] usb 4-1: config 83 has an invalid interface number: 110 but max is 2 [ 486.055019][ T10] usb 4-1: config 83 contains an unexpected descriptor of type 0x2, skipping [ 486.055047][ T10] usb 4-1: config 83 has an invalid descriptor of length 0, skipping remainder of the config [ 486.055066][ T10] usb 4-1: config 83 has 1 interface, different from the descriptor's value: 3 [ 486.055088][ T10] usb 4-1: config 83 has no interface number 0 [ 486.055133][ T10] usb 4-1: config 83 interface 110 altsetting 9 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 486.055161][ T10] usb 4-1: config 83 interface 110 altsetting 9 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 486.055189][ T10] usb 4-1: config 83 interface 110 altsetting 9 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 486.055216][ T10] usb 4-1: config 83 interface 110 altsetting 9 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 486.055244][ T10] usb 4-1: config 83 interface 110 altsetting 9 bulk endpoint 0xD has invalid maxpacket 1023 [ 486.055269][ T10] usb 4-1: config 83 interface 110 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 486.055293][ T10] usb 4-1: config 83 interface 110 altsetting 9 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 486.055320][ T10] usb 4-1: config 83 interface 110 altsetting 9 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 486.055348][ T10] usb 4-1: config 83 interface 110 altsetting 9 has an endpoint descriptor with address 0x1A, changing to 0xA [ 486.055375][ T10] usb 4-1: config 83 interface 110 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 486.055398][ T10] usb 4-1: config 83 interface 110 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 486.055421][ T10] usb 4-1: config 83 interface 110 altsetting 9 has 11 endpoint descriptors, different from the interface descriptor's value: 13 [ 486.055449][ T10] usb 4-1: config 83 interface 110 has no altsetting 0 [ 486.058244][ T10] usb 4-1: Dual-Role OTG device on HNP port [ 486.058554][ T10] usb 4-1: New USB device found, idVendor=19d2, idProduct=ff75, bcdDevice= d.97 [ 486.058579][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.058600][ T10] usb 4-1: Product: 島ۃ꿐羗苄⻧뭐኱䟯괰鹼꺿ᨥ㴺흄圐鲛㹼큸酭텴抧伝᳥ꁱ潽̤䷸㫩꿻⬜᩽黅斋ꨴᩜቆ푶驫㰚竜﹪ꡌ鳄솘IJ쐏㪈셬ﺰ⏗厴炊ꏒ갸臮䊵뉯圅욎瘙 ✜許Ñᕮ쩋敬旓嶚쥧᠃乱⠸ŠΗ奃㤌ﱌ崲豾鰉ㇰ觟⹐囹購㽵ᵂ⒁䖙횫㞭雿⍚♑㙹댽Ϋ㶝츊䄟ꩍဒ꾈椆즑 [ 486.058635][ T10] usb 4-1: Manufacturer: 椟ğέﮣଢ଼⯩옞滴ꀦ怭촐捘耹㹺뽐뙾ዢ⍹ﶗᾊ灸࣊ [ 486.058653][ T10] usb 4-1: SerialNumber: 줷௧⭥स沨凛ʅ [ 486.221497][ T5888] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 486.320467][T11421] trusted_key: syz.2.1866 sent an empty control message without MSG_MORE. [ 486.354173][T11411] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 486.381423][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 486.383979][ T5888] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 486.384020][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.407584][ T5888] usb 2-1: config 0 descriptor?? [ 486.432967][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.584914][ T10] option 4-1:83.110: GSM modem (1-port) converter detected [ 486.611565][ T10] usb 4-1: USB disconnect, device number 55 [ 486.633638][ T10] option 4-1:83.110: device disconnected [ 486.656755][ T5888] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 486.743667][ T5888] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 486.768909][ T5888] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 486.768981][ T5888] usb 2-1: media controller created [ 486.851026][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 486.945871][T11430] FAULT_INJECTION: forcing a failure. [ 486.945871][T11430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.945904][T11430] CPU: 0 UID: 0 PID: 11430 Comm: syz.2.1870 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 486.945926][T11430] Tainted: [L]=SOFTLOCKUP [ 486.945933][T11430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 486.945942][T11430] Call Trace: [ 486.945949][T11430] [ 486.945956][T11430] dump_stack_lvl+0xe8/0x150 [ 486.945991][T11430] should_fail_ex+0x46b/0x600 [ 486.946024][T11430] _copy_from_iter+0x1d3/0x1670 [ 486.946052][T11430] ? trace_kmem_cache_alloc+0x29/0xf0 [ 486.946078][T11430] ? __alloc_skb+0x27d/0x7d0 [ 486.946098][T11430] ? __pfx__copy_from_iter+0x10/0x10 [ 486.946112][T11430] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 486.946132][T11430] ? __alloc_skb+0x27d/0x7d0 [ 486.946151][T11430] ? netlink_sendmsg+0x650/0xb40 [ 486.946167][T11430] ? skb_put+0x11b/0x210 [ 486.946187][T11430] netlink_sendmsg+0x6c0/0xb40 [ 486.946209][T11430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.946231][T11430] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 486.946257][T11430] ____sys_sendmsg+0xa4e/0xac0 [ 486.946285][T11430] ? __pfx_____sys_sendmsg+0x10/0x10 [ 486.946312][T11430] ? import_iovec+0x73/0xa0 [ 486.946332][T11430] ___sys_sendmsg+0x2a5/0x360 [ 486.946363][T11430] ? __pfx____sys_sendmsg+0x10/0x10 [ 486.946412][T11430] ? __fget_files+0x2a/0x420 [ 486.946433][T11430] ? __fget_files+0x3a6/0x420 [ 486.946461][T11430] __x64_sys_sendmsg+0x1c3/0x2a0 [ 486.946487][T11430] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 486.946518][T11430] ? __pfx_ksys_write+0x10/0x10 [ 486.946547][T11430] do_syscall_64+0x14d/0xf80 [ 486.946566][T11430] ? trace_irq_disable+0x3b/0x150 [ 486.946594][T11430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.946609][T11430] ? clear_bhb_loop+0x40/0x90 [ 486.946626][T11430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.946641][T11430] RIP: 0033:0x7ff826b9c799 [ 486.946655][T11430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.946668][T11430] RSP: 002b:00007ff824df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.946684][T11430] RAX: ffffffffffffffda RBX: 00007ff826e15fa0 RCX: 00007ff826b9c799 [ 486.946695][T11430] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 486.946704][T11430] RBP: 00007ff824df6090 R08: 0000000000000000 R09: 0000000000000000 [ 486.946713][T11430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.946722][T11430] R13: 00007ff826e16038 R14: 00007ff826e15fa0 R15: 00007fff88604208 [ 486.946745][T11430] [ 487.021488][ T808] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 487.156386][ T36] gspca_ov534_9: reg_r err -71 [ 487.193051][ T808] usb 1-1: Using ep0 maxpacket: 8 [ 487.193415][T11432] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 487.228862][ T5888] DVB: Unable to find symbol dib7000p_attach() [ 487.228879][ T5888] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 487.274555][T11428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.280133][T11428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.293270][T11425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1868'. [ 487.311750][ T808] usb 1-1: unable to get BOS descriptor or descriptor too short [ 487.312780][ T808] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 487.312813][ T808] usb 1-1: can't read configurations, error -71 [ 487.395111][T11437] FAULT_INJECTION: forcing a failure. [ 487.395111][T11437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.395147][T11437] CPU: 1 UID: 0 PID: 11437 Comm: syz.3.1872 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 487.395173][T11437] Tainted: [L]=SOFTLOCKUP [ 487.395180][T11437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 487.395192][T11437] Call Trace: [ 487.395200][T11437] [ 487.395209][T11437] dump_stack_lvl+0xe8/0x150 [ 487.395243][T11437] should_fail_ex+0x46b/0x600 [ 487.395278][T11437] _copy_from_iter+0x1d3/0x1670 [ 487.395309][T11437] ? trace_kmem_cache_alloc+0x29/0xf0 [ 487.395337][T11437] ? __alloc_skb+0x27d/0x7d0 [ 487.395359][T11437] ? __pfx__copy_from_iter+0x10/0x10 [ 487.395378][T11437] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 487.395402][T11437] ? __alloc_skb+0x27d/0x7d0 [ 487.395429][T11437] ? netlink_sendmsg+0x650/0xb40 [ 487.395448][T11437] ? skb_put+0x11b/0x210 [ 487.395474][T11437] netlink_sendmsg+0x6c0/0xb40 [ 487.395503][T11437] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.395530][T11437] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 487.395558][T11437] ____sys_sendmsg+0xa4e/0xac0 [ 487.395590][T11437] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.395624][T11437] ? import_iovec+0x73/0xa0 [ 487.395652][T11437] ___sys_sendmsg+0x2a5/0x360 [ 487.395684][T11437] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.395745][T11437] ? __fget_files+0x2a/0x420 [ 487.395768][T11437] ? __fget_files+0x3a6/0x420 [ 487.395802][T11437] __x64_sys_sendmsg+0x1c3/0x2a0 [ 487.395831][T11437] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 487.395867][T11437] ? __pfx_ksys_write+0x10/0x10 [ 487.395914][T11437] do_syscall_64+0x14d/0xf80 [ 487.395940][T11437] ? trace_irq_disable+0x3b/0x150 [ 487.395963][T11437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.395983][T11437] ? clear_bhb_loop+0x40/0x90 [ 487.396007][T11437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.396027][T11437] RIP: 0033:0x7f4e94b7c799 [ 487.396046][T11437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.396063][T11437] RSP: 002b:00007f4e92dce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.396084][T11437] RAX: ffffffffffffffda RBX: 00007f4e94df5fa0 RCX: 00007f4e94b7c799 [ 487.396099][T11437] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 487.396112][T11437] RBP: 00007f4e92dce090 R08: 0000000000000000 R09: 0000000000000000 [ 487.396124][T11437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.396137][T11437] R13: 00007f4e94df6038 R14: 00007f4e94df5fa0 R15: 00007ffd99bdd3f8 [ 487.396168][T11437] [ 487.401980][ T5888] rc_core: IR keymap rc-dib0700-rc5 not found [ 487.402000][ T5888] Registered IR keymap rc-empty [ 487.402830][ T5888] dvb-usb: could not initialize remote control. [ 487.402840][ T5888] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 487.413700][ T36] gspca_ov534_9: Unknown sensor 0000 [ 487.413852][ T36] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 487.423276][ T36] usb 5-1: USB disconnect, device number 52 [ 487.477424][ T7439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.934413][ T5811] Bluetooth: Wrong link type (-22) [ 488.343768][T11447] Invalid argument reading file caps for ./file0 [ 488.348751][ T36] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 488.524502][ T1244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.546167][ T36] usb 3-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 488.554662][ T36] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 488.554911][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.554934][ T36] usb 3-1: Product: syz [ 488.554949][ T36] usb 3-1: Manufacturer: syz [ 488.554964][ T36] usb 3-1: SerialNumber: syz [ 488.885421][T11460] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request [ 488.987226][ T5888] usb 2-1: USB disconnect, device number 36 [ 488.992366][ T4709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.076787][T11441] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1873'. [ 489.077450][T11441] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1873'. [ 489.131467][ T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 489.181444][ T36] usb 3-1: Limiting number of CPorts to U8_MAX [ 489.183021][ T36] usb 3-1: Not enough endpoints found in device, aborting! [ 489.283762][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 489.287381][ T10] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 489.287410][ T10] usb 5-1: config 0 has no interface number 0 [ 489.287454][ T10] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 489.287481][ T10] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 489.337708][ T10] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 489.337739][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.337760][ T10] usb 5-1: Product: syz [ 489.337775][ T10] usb 5-1: Manufacturer: syz [ 489.337791][ T10] usb 5-1: SerialNumber: syz [ 489.447495][T11464] 9p: Bad value for 'rfdno' [ 489.460198][ T5888] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 489.501861][ T5873] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 489.821774][ T5873] usb 4-1: Using ep0 maxpacket: 8 [ 490.189006][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.193128][ T10] usb 5-1: config 0 descriptor?? [ 490.251813][T11460] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 490.251934][T11460] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 490.367574][ T5873] usb 4-1: config 83 has an invalid interface number: 110 but max is 2 [ 490.367606][ T5873] usb 4-1: config 83 contains an unexpected descriptor of type 0x2, skipping [ 490.367626][ T5873] usb 4-1: config 83 has an invalid descriptor of length 0, skipping remainder of the config [ 490.367646][ T5873] usb 4-1: config 83 has 1 interface, different from the descriptor's value: 3 [ 490.367668][ T5873] usb 4-1: config 83 has no interface number 0 [ 490.367720][ T5873] usb 4-1: config 83 interface 110 altsetting 9 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 490.367747][ T5873] usb 4-1: config 83 interface 110 altsetting 9 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 490.367775][ T5873] usb 4-1: config 83 interface 110 altsetting 9 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 490.367802][ T5873] usb 4-1: config 83 interface 110 altsetting 9 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 490.367829][ T5873] usb 4-1: config 83 interface 110 altsetting 9 bulk endpoint 0xD has invalid maxpacket 1023 [ 490.367853][ T5873] usb 4-1: config 83 interface 110 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 490.367876][ T5873] usb 4-1: config 83 interface 110 altsetting 9 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 490.367904][ T5873] usb 4-1: config 83 interface 110 altsetting 9 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 490.367930][ T5873] usb 4-1: config 83 interface 110 altsetting 9 has an endpoint descriptor with address 0x1A, changing to 0xA [ 490.367954][ T5873] usb 4-1: config 83 interface 110 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 490.367977][ T5873] usb 4-1: config 83 interface 110 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 490.367999][ T5873] usb 4-1: config 83 interface 110 altsetting 9 has 11 endpoint descriptors, different from the interface descriptor's value: 13 [ 490.368026][ T5873] usb 4-1: config 83 interface 110 has no altsetting 0 [ 490.385210][ T5888] usb 3-1: USB disconnect, device number 33 [ 490.436353][T11469] binder: 11468:11469 ioctl c0306201 2000000002c0 returned -14 [ 490.511939][ T5873] usb 4-1: Dual-Role OTG device on HNP port [ 490.512257][ T5873] usb 4-1: New USB device found, idVendor=19d2, idProduct=ff75, bcdDevice= d.97 [ 490.512283][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.512304][ T5873] usb 4-1: Product: 島ۃ꿐羗苄⻧뭐኱䟯괰鹼꺿ᨥ㴺흄圐鲛㹼큸酭텴抧伝᳥ꁱ潽̤䷸㫩꿻⬜᩽黅斋ꨴᩜቆ푶驫㰚竜﹪ꡌ鳄솘IJ쐏㪈셬ﺰ⏗厴炊ꏒ갸臮䊵뉯圅욎瘙 ✜許Ñᕮ쩋敬旓嶚쥧᠃乱⠸ŠΗ奃㤌ﱌ崲豾鰉ㇰ觟⹐囹購㽵ᵂ⒁䖙횫㞭雿⍚♑㙹댽Ϋ㶝츊䄟ꩍဒ꾈椆즑 [ 490.512335][ T5873] usb 4-1: Manufacturer: 椟ğέﮣଢ଼⯩옞滴ꀦ怭촐捘耹㹺뽐뙾ዢ⍹ﶗᾊ灸࣊ [ 490.512352][ T5873] usb 4-1: SerialNumber: 줷௧⭥स沨凛ʅ [ 490.576682][T11460] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 490.576810][T11460] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 490.699879][T11463] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 490.941572][ T5873] option 4-1:83.110: GSM modem (1-port) converter detected [ 490.977953][ T5873] usb 4-1: USB disconnect, device number 56 [ 490.982968][ T10] asix 5-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 490.983255][ T10] asix 5-1:0.251: probe with driver asix failed with error -524 [ 491.021499][ T6379] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 491.026064][ T5873] option 4-1:83.110: device disconnected [ 491.188658][ T5888] usb 5-1: USB disconnect, device number 53 [ 491.262372][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.346929][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.347326][ T6379] usb 1-1: Using ep0 maxpacket: 8 [ 491.369335][ T6379] usb 1-1: unable to get BOS descriptor or descriptor too short [ 491.373180][ T6379] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 491.373215][ T6379] usb 1-1: can't read configurations, error -71 [ 491.502771][ T5811] Bluetooth: Wrong link type (-22) [ 491.502915][ T5811] Bluetooth: hci5: link tx timeout [ 491.503263][ T5811] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 491.508896][ T5811] Bluetooth: hci5: link tx timeout [ 491.508915][ T5811] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 491.508962][ T5811] Bluetooth: hci5: killing stalled connection 00:00:00:00:00:00 [ 492.031921][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.033000][T11492] FAULT_INJECTION: forcing a failure. [ 492.033000][T11492] name failslab, interval 1, probability 0, space 0, times 0 [ 492.033022][T11492] CPU: 1 UID: 0 PID: 11492 Comm: syz.2.1893 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 492.033038][T11492] Tainted: [L]=SOFTLOCKUP [ 492.033042][T11492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 492.033049][T11492] Call Trace: [ 492.033053][T11492] [ 492.033059][T11492] dump_stack_lvl+0xe8/0x150 [ 492.033081][T11492] should_fail_ex+0x46b/0x600 [ 492.033102][T11492] should_failslab+0xa8/0x100 [ 492.033121][T11492] __kmalloc_noprof+0xdf/0x7b0 [ 492.033137][T11492] ? _ib_alloc_device+0x40/0x6f0 [ 492.033227][T11492] ? ib_device_get_by_netdev+0x81/0x4f0 [ 492.033243][T11492] _ib_alloc_device+0x40/0x6f0 [ 492.033256][T11492] rxe_net_add+0x2a/0x110 [ 492.033304][T11492] rxe_newlink+0xdd/0x190 [ 492.033339][T11492] nldev_newlink+0x5bd/0x650 [ 492.033372][T11492] ? __pfx_nldev_newlink+0x10/0x10 [ 492.033433][T11492] ? __kernel_text_address+0xd/0x30 [ 492.033457][T11492] ? cap_capable+0x123/0x490 [ 492.033498][T11492] ? safesetid_security_capable+0xa9/0x1a0 [ 492.033515][T11492] ? bpf_lsm_capable+0x9/0x20 [ 492.033553][T11492] ? security_capable+0x7e/0x2c0 [ 492.033571][T11492] ? __pfx_nldev_newlink+0x10/0x10 [ 492.033583][T11492] rdma_nl_rcv+0x6d7/0xa10 [ 492.033623][T11492] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 492.033634][T11492] ? __netlink_lookup+0x7e4/0x8b0 [ 492.033657][T11492] ? netlink_deliver_tap+0x2e/0x1b0 [ 492.033673][T11492] netlink_unicast+0x831/0x9f0 [ 492.033694][T11492] ? __pfx_netlink_unicast+0x10/0x10 [ 492.033712][T11492] ? netlink_sendmsg+0x650/0xb40 [ 492.033722][T11492] ? skb_put+0x11b/0x210 [ 492.033738][T11492] netlink_sendmsg+0x813/0xb40 [ 492.033755][T11492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.033771][T11492] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 492.033794][T11492] ____sys_sendmsg+0xa4e/0xac0 [ 492.033825][T11492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 492.033857][T11492] ? import_iovec+0x73/0xa0 [ 492.033883][T11492] ___sys_sendmsg+0x2a5/0x360 [ 492.033913][T11492] ? __pfx____sys_sendmsg+0x10/0x10 [ 492.033959][T11492] ? __fget_files+0x2a/0x420 [ 492.033973][T11492] ? __fget_files+0x3a6/0x420 [ 492.033991][T11492] __x64_sys_sendmsg+0x1c3/0x2a0 [ 492.034007][T11492] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 492.034027][T11492] ? __pfx_ksys_write+0x10/0x10 [ 492.034062][T11492] do_syscall_64+0x14d/0xf80 [ 492.034086][T11492] ? trace_irq_disable+0x3b/0x150 [ 492.034107][T11492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.034125][T11492] ? clear_bhb_loop+0x40/0x90 [ 492.034148][T11492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.034167][T11492] RIP: 0033:0x7ff826b9c799 [ 492.034185][T11492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.034195][T11492] RSP: 002b:00007ff824df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 492.034207][T11492] RAX: ffffffffffffffda RBX: 00007ff826e15fa0 RCX: 00007ff826b9c799 [ 492.034215][T11492] RDX: 0000000000000810 RSI: 0000200000000240 RDI: 0000000000000003 [ 492.034222][T11492] RBP: 00007ff824df6090 R08: 0000000000000000 R09: 0000000000000000 [ 492.034229][T11492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.034236][T11492] R13: 00007ff826e16038 R14: 00007ff826e15fa0 R15: 00007fff88604208 [ 492.034253][T11492] [ 492.034441][T11492] rdma_rxe: rxe_newlink: failed to add lo [ 492.071476][ T5888] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 492.221662][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 492.226095][ T5888] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 492.226124][ T5888] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=239 [ 492.226146][ T5888] usb 4-1: Product: syz [ 492.226160][ T5888] usb 4-1: Manufacturer: syz [ 492.226175][ T5888] usb 4-1: SerialNumber: syz [ 492.271162][ T5888] usb 4-1: config 0 descriptor?? [ 492.272196][ T7439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.277590][ T5888] gspca_main: sq905-2.14.0 probing 2770:9120 [ 492.301464][ T36] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 492.451519][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 492.454521][ T36] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 492.454549][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.505518][ T36] usb 5-1: config 0 descriptor?? [ 492.721244][ T36] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 492.810088][ T36] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 492.822007][ T36] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 492.822294][ T36] usb 5-1: media controller created [ 492.891993][ T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 492.901515][ T5888] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 492.901605][ T5888] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 492.973457][ T5888] usb 4-1: USB disconnect, device number 57 [ 493.171608][ T36] DVB: Unable to find symbol dib7000p_attach() [ 493.171626][ T36] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 493.351864][ T36] rc_core: IR keymap rc-dib0700-rc5 not found [ 493.351885][ T36] Registered IR keymap rc-empty [ 493.422789][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.500509][T11511] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1899'. [ 493.500538][T11511] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1899'. [ 493.551422][ T5113] Bluetooth: hci5: command 0x0405 tx timeout [ 493.601476][ T808] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 493.657763][T11514] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request [ 493.751649][ T808] usb 1-1: Using ep0 maxpacket: 8 [ 493.766286][ T808] usb 1-1: config 83 has an invalid interface number: 110 but max is 2 [ 493.766316][ T808] usb 1-1: config 83 contains an unexpected descriptor of type 0x2, skipping [ 493.766337][ T808] usb 1-1: config 83 has an invalid descriptor of length 0, skipping remainder of the config [ 493.766356][ T808] usb 1-1: config 83 has 1 interface, different from the descriptor's value: 3 [ 493.766389][ T808] usb 1-1: config 83 has no interface number 0 [ 493.766436][ T808] usb 1-1: config 83 interface 110 altsetting 9 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 493.766463][ T808] usb 1-1: config 83 interface 110 altsetting 9 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 493.766491][ T808] usb 1-1: config 83 interface 110 altsetting 9 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 493.766526][ T808] usb 1-1: config 83 interface 110 altsetting 9 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 493.766553][ T808] usb 1-1: config 83 interface 110 altsetting 9 bulk endpoint 0xD has invalid maxpacket 1023 [ 493.766578][ T808] usb 1-1: config 83 interface 110 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 493.766602][ T808] usb 1-1: config 83 interface 110 altsetting 9 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 493.766630][ T808] usb 1-1: config 83 interface 110 altsetting 9 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 493.766655][ T808] usb 1-1: config 83 interface 110 altsetting 9 has an endpoint descriptor with address 0x1A, changing to 0xA [ 493.766680][ T808] usb 1-1: config 83 interface 110 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 493.766704][ T808] usb 1-1: config 83 interface 110 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 493.766726][ T808] usb 1-1: config 83 interface 110 altsetting 9 has 11 endpoint descriptors, different from the interface descriptor's value: 13 [ 493.766754][ T808] usb 1-1: config 83 interface 110 has no altsetting 0 [ 493.792002][ T808] usb 1-1: Dual-Role OTG device on HNP port [ 493.795957][ T808] usb 1-1: New USB device found, idVendor=19d2, idProduct=ff75, bcdDevice= d.97 [ 493.795987][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.796007][ T808] usb 1-1: Product: 島ۃ꿐羗苄⻧뭐኱䟯괰鹼꺿ᨥ㴺흄圐鲛㹼큸酭텴抧伝᳥ꁱ潽̤䷸㫩꿻⬜᩽黅斋ꨴᩜቆ푶驫㰚竜﹪ꡌ鳄솘IJ쐏㪈셬ﺰ⏗厴炊ꏒ갸臮䊵뉯圅욎瘙 ✜許Ñᕮ쩋敬旓嶚쥧᠃乱⠸ŠΗ奃㤌ﱌ崲豾鰉ㇰ觟⹐囹購㽵ᵂ⒁䖙횫㞭雿⍚♑㙹댽Ϋ㶝츊䄟ꩍဒ꾈椆즑 [ 493.796041][ T808] usb 1-1: Manufacturer: 椟ğέﮣଢ଼⯩옞滴ꀦ怭촐捘耹㹺뽐뙾ዢ⍹ﶗᾊ灸࣊ [ 493.796060][ T808] usb 1-1: SerialNumber: 줷௧⭥स沨凛ʅ [ 493.951516][ T5888] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 494.094627][T11521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1904'. [ 494.179367][T11509] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 494.268108][ T5113] Bluetooth: Wrong link type (-22) [ 494.301501][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 494.304435][ T5888] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 494.304461][ T5888] usb 4-1: config 0 has no interface number 0 [ 494.304554][ T5888] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 494.304582][ T5888] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 494.360418][ T5888] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 494.360512][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.360534][ T5888] usb 4-1: Product: syz [ 494.360550][ T5888] usb 4-1: Manufacturer: syz [ 494.360565][ T5888] usb 4-1: SerialNumber: syz [ 494.418524][ T5888] usb 4-1: config 0 descriptor?? [ 494.427351][T11514] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 494.427963][T11514] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 494.451914][ T1244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.626957][ T808] option 1-1:83.110: GSM modem (1-port) converter detected [ 494.637588][T11514] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 494.638024][T11514] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 494.661033][T11522] dummy0: entered promiscuous mode [ 494.672852][T11522] vlan2: entered promiscuous mode [ 494.725187][ T808] usb 1-1: USB disconnect, device number 46 [ 494.762530][ T808] option 1-1:83.110: device disconnected [ 495.075613][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.095454][ T5888] asix 4-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 495.095749][ T5888] asix 4-1:0.251: probe with driver asix failed with error -524 [ 495.211615][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 495.238797][T11532] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1906'. [ 495.281105][T11534] FAULT_INJECTION: forcing a failure. [ 495.281105][T11534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.281129][T11534] CPU: 1 UID: 0 PID: 11534 Comm: syz.0.1907 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 495.281154][T11534] Tainted: [L]=SOFTLOCKUP [ 495.281162][T11534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 495.281174][T11534] Call Trace: [ 495.281181][T11534] [ 495.281191][T11534] dump_stack_lvl+0xe8/0x150 [ 495.281227][T11534] should_fail_ex+0x46b/0x600 [ 495.281260][T11534] _copy_from_iter+0x1d3/0x1670 [ 495.281277][T11534] ? trace_kmem_cache_alloc+0x29/0xf0 [ 495.281293][T11534] ? __alloc_skb+0x27d/0x7d0 [ 495.281312][T11534] ? __pfx__copy_from_iter+0x10/0x10 [ 495.281330][T11534] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 495.281355][T11534] ? __alloc_skb+0x27d/0x7d0 [ 495.281380][T11534] ? netlink_sendmsg+0x650/0xb40 [ 495.281402][T11534] ? skb_put+0x11b/0x210 [ 495.281428][T11534] netlink_sendmsg+0x6c0/0xb40 [ 495.281459][T11534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.281483][T11534] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 495.281501][T11534] ____sys_sendmsg+0xa4e/0xac0 [ 495.281528][T11534] ? __pfx_____sys_sendmsg+0x10/0x10 [ 495.281568][T11534] ? import_iovec+0x73/0xa0 [ 495.281595][T11534] ___sys_sendmsg+0x2a5/0x360 [ 495.281628][T11534] ? __pfx____sys_sendmsg+0x10/0x10 [ 495.281665][T11534] ? __fget_files+0x2a/0x420 [ 495.281678][T11534] ? __fget_files+0x3a6/0x420 [ 495.281706][T11534] __x64_sys_sendmsg+0x1c3/0x2a0 [ 495.281736][T11534] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 495.281773][T11534] ? __pfx_ksys_write+0x10/0x10 [ 495.281807][T11534] do_syscall_64+0x14d/0xf80 [ 495.281822][T11534] ? trace_irq_disable+0x3b/0x150 [ 495.281834][T11534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.281844][T11534] ? clear_bhb_loop+0x40/0x90 [ 495.281864][T11534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.281884][T11534] RIP: 0033:0x7fdee14bc799 [ 495.281903][T11534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.281918][T11534] RSP: 002b:00007fdedf70e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.281939][T11534] RAX: ffffffffffffffda RBX: 00007fdee1735fa0 RCX: 00007fdee14bc799 [ 495.281954][T11534] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 495.281966][T11534] RBP: 00007fdedf70e090 R08: 0000000000000000 R09: 0000000000000000 [ 495.281973][T11534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.281980][T11534] R13: 00007fdee1736038 R14: 00007fdee1735fa0 R15: 00007ffc5779aca8 [ 495.281996][T11534] [ 495.334627][ T808] usb 4-1: USB disconnect, device number 58 [ 495.475448][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.564337][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 495.635773][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 495.637020][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 495.637061][ T10] usb 2-1: can't read configurations, error -71 [ 495.709761][T11536] Invalid argument reading file caps for ./file0 [ 495.712655][ T5113] Bluetooth: hci5: command 0x0405 tx timeout [ 496.511646][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.531529][ T808] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 496.892485][ T808] usb 1-1: Using ep0 maxpacket: 8 [ 496.907391][ T808] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 496.907536][ T808] usb 1-1: New USB device strings: Mfr=17, Product=2, SerialNumber=239 [ 496.907561][ T808] usb 1-1: Product: syz [ 496.907576][ T808] usb 1-1: Manufacturer: syz [ 496.907591][ T808] usb 1-1: SerialNumber: syz [ 496.918785][ T808] usb 1-1: config 0 descriptor?? [ 497.141628][ T5113] Bluetooth: Wrong link type (-22) [ 497.371648][ T808] gspca_main: sq905-2.14.0 probing 2770:9120 [ 497.552116][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.142689][ T6379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.552572][ T36] dvb-usb: could not initialize remote control. [ 498.552589][ T36] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 498.691902][ T5113] Bluetooth: hci5: command 0x0405 tx timeout [ 498.693170][ T808] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 498.693262][ T808] sq905 1-1:0.0: probe with driver sq905 failed with error -71 [ 498.696217][ T808] usb 1-1: USB disconnect, device number 47 [ 498.717344][ T36] usb 5-1: USB disconnect, device number 54 [ 498.739836][ T7439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.849208][T11568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.850802][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.629036][T11567] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1918'. [ 499.750253][ T36] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 499.796651][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.962535][T11582] FAULT_INJECTION: forcing a failure. [ 499.962535][T11582] name failslab, interval 1, probability 0, space 0, times 0 [ 499.962571][T11582] CPU: 0 UID: 0 PID: 11582 Comm: syz.1.1923 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 499.962599][T11582] Tainted: [L]=SOFTLOCKUP [ 499.962606][T11582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 499.962618][T11582] Call Trace: [ 499.962626][T11582] [ 499.962635][T11582] dump_stack_lvl+0xe8/0x150 [ 499.962669][T11582] should_fail_ex+0x46b/0x600 [ 499.962706][T11582] should_failslab+0xa8/0x100 [ 499.962742][T11582] kmem_cache_alloc_noprof+0x87/0x680 [ 499.962769][T11582] ? skb_clone+0x212/0x3a0 [ 499.962801][T11582] skb_clone+0x212/0x3a0 [ 499.962831][T11582] __netlink_deliver_tap+0x404/0x850 [ 499.962866][T11582] ? netlink_deliver_tap+0x2e/0x1b0 [ 499.962889][T11582] netlink_deliver_tap+0x19c/0x1b0 [ 499.962911][T11582] netlink_unicast+0x805/0x9f0 [ 499.962949][T11582] ? __pfx_netlink_unicast+0x10/0x10 [ 499.962980][T11582] ? netlink_sendmsg+0x650/0xb40 [ 499.963000][T11582] ? skb_put+0x11b/0x210 [ 499.963026][T11582] netlink_sendmsg+0x813/0xb40 [ 499.963057][T11582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.963087][T11582] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 499.963119][T11582] sock_write_iter+0x509/0x550 [ 499.963141][T11582] ? __pfx_sock_write_iter+0x10/0x10 [ 499.963181][T11582] vfs_write+0x629/0xba0 [ 499.963218][T11582] ? __pfx_vfs_write+0x10/0x10 [ 499.963255][T11582] ? __fget_files+0x2a/0x420 [ 499.963288][T11582] ksys_write+0x156/0x270 [ 499.963318][T11582] ? __pfx_ksys_write+0x10/0x10 [ 499.963356][T11582] do_syscall_64+0x14d/0xf80 [ 499.963382][T11582] ? trace_irq_disable+0x3b/0x150 [ 499.963404][T11582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.963424][T11582] ? clear_bhb_loop+0x40/0x90 [ 499.963448][T11582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.963467][T11582] RIP: 0033:0x7fc385d7c799 [ 499.963487][T11582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.963504][T11582] RSP: 002b:00007fc383fce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 499.963531][T11582] RAX: ffffffffffffffda RBX: 00007fc385ff5fa0 RCX: 00007fc385d7c799 [ 499.963545][T11582] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 499.963558][T11582] RBP: 00007fc383fce090 R08: 0000000000000000 R09: 0000000000000000 [ 499.963571][T11582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.963583][T11582] R13: 00007fc385ff6038 R14: 00007fc385ff5fa0 R15: 00007ffed0c5a078 [ 499.963615][T11582] [ 500.013225][T11582] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1923'. [ 500.481486][ T9] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 500.641572][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 500.748005][T11587] FAULT_INJECTION: forcing a failure. [ 500.748005][T11587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.748029][T11587] CPU: 1 UID: 0 PID: 11587 Comm: syz.1.1924 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 500.748053][T11587] Tainted: [L]=SOFTLOCKUP [ 500.748060][T11587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 500.748072][T11587] Call Trace: [ 500.748080][T11587] [ 500.748089][T11587] dump_stack_lvl+0xe8/0x150 [ 500.748123][T11587] should_fail_ex+0x46b/0x600 [ 500.748158][T11587] _copy_from_iter+0x1d3/0x1670 [ 500.748175][T11587] ? trace_kmem_cache_alloc+0x29/0xf0 [ 500.748190][T11587] ? __alloc_skb+0x27d/0x7d0 [ 500.748204][T11587] ? __pfx__copy_from_iter+0x10/0x10 [ 500.748224][T11587] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 500.748251][T11587] ? __alloc_skb+0x27d/0x7d0 [ 500.748279][T11587] ? netlink_sendmsg+0x650/0xb40 [ 500.748300][T11587] ? skb_put+0x11b/0x210 [ 500.748325][T11587] netlink_sendmsg+0x6c0/0xb40 [ 500.748342][T11587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.748358][T11587] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 500.748380][T11587] ____sys_sendmsg+0xa4e/0xac0 [ 500.748416][T11587] ? __pfx_____sys_sendmsg+0x10/0x10 [ 500.748451][T11587] ? import_iovec+0x73/0xa0 [ 500.748479][T11587] ___sys_sendmsg+0x2a5/0x360 [ 500.748505][T11587] ? __pfx____sys_sendmsg+0x10/0x10 [ 500.748540][T11587] ? __fget_files+0x2a/0x420 [ 500.748563][T11587] ? __fget_files+0x3a6/0x420 [ 500.748596][T11587] __x64_sys_sendmsg+0x1c3/0x2a0 [ 500.748626][T11587] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 500.748657][T11587] ? __pfx_ksys_write+0x10/0x10 [ 500.748678][T11587] do_syscall_64+0x14d/0xf80 [ 500.748692][T11587] ? trace_irq_disable+0x3b/0x150 [ 500.748710][T11587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.748731][T11587] ? clear_bhb_loop+0x40/0x90 [ 500.748755][T11587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.748775][T11587] RIP: 0033:0x7fc385d7c799 [ 500.748794][T11587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.748811][T11587] RSP: 002b:00007fc383fce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.748826][T11587] RAX: ffffffffffffffda RBX: 00007fc385ff5fa0 RCX: 00007fc385d7c799 [ 500.748834][T11587] RDX: 0000000000004080 RSI: 0000200000006040 RDI: 0000000000000004 [ 500.748841][T11587] RBP: 00007fc383fce090 R08: 0000000000000000 R09: 0000000000000000 [ 500.748848][T11587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.748854][T11587] R13: 00007fc385ff6038 R14: 00007fc385ff5fa0 R15: 00007ffed0c5a078 [ 500.748877][T11587] [ 500.752113][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 500.754742][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 500.754780][ T9] usb 1-1: can't read configurations, error -71 [ 500.791460][ T6379] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 500.831778][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.832011][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.951451][ T6379] usb 4-1: Using ep0 maxpacket: 8 [ 500.957992][ T6379] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 500.958021][ T6379] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=239 [ 500.958042][ T6379] usb 4-1: Product: syz [ 500.958057][ T6379] usb 4-1: Manufacturer: syz [ 500.958072][ T6379] usb 4-1: SerialNumber: syz [ 500.976825][ T6379] usb 4-1: config 0 descriptor?? [ 501.020250][ T6379] gspca_main: sq905-2.14.0 probing 2770:9120 [ 501.151771][ T4709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.503655][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.761558][ T5873] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 501.790898][ T6379] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 501.791001][ T6379] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 501.873566][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.006171][ T6379] usb 4-1: USB disconnect, device number 59 [ 502.141881][ T5873] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 502.141938][ T5873] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 502.141962][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.153657][ T5873] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 502.241504][ T4709] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 502.372849][ T6379] usb 2-1: USB disconnect, device number 39 [ 502.399605][ T4709] usb 3-1: config index 0 descriptor too short (expected 2051, got 53) [ 502.399634][ T4709] usb 3-1: config 98 contains an unexpected descriptor of type 0x2, skipping [ 502.399653][ T4709] usb 3-1: config 98 has an invalid descriptor of length 121, skipping remainder of the config [ 502.399673][ T4709] usb 3-1: config 98 has 0 interfaces, different from the descriptor's value: 6 [ 502.413393][ T4709] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 502.413423][ T4709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.413444][ T4709] usb 3-1: Product: syz [ 502.413457][ T4709] usb 3-1: Manufacturer: syz [ 502.413473][ T4709] usb 3-1: SerialNumber: syz [ 502.641987][ T4709] usb 3-1: USB disconnect, device number 34 [ 502.937585][T11611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.951876][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.175054][ T4709] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 504.196116][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.510699][ T5811] Bluetooth: Wrong link type (-22) [ 504.541574][ T4709] usb 3-1: Using ep0 maxpacket: 32 [ 504.545966][ T4709] usb 3-1: config 109 has an invalid interface number: 123 but max is 3 [ 504.545994][ T4709] usb 3-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 504.546015][ T4709] usb 3-1: config 109 has an invalid descriptor of length 0, skipping remainder of the config [ 504.546036][ T4709] usb 3-1: config 109 has 1 interface, different from the descriptor's value: 4 [ 504.546057][ T4709] usb 3-1: config 109 has no interface number 0 [ 504.546161][ T4709] usb 3-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 504.546206][ T4709] usb 3-1: config 109 interface 123 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 504.546251][ T4709] usb 3-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 504.546288][ T4709] usb 3-1: config 109 interface 123 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 504.546310][ T4709] usb 3-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 504.546334][ T4709] usb 3-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024 [ 504.546375][ T4709] usb 3-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 504.546414][ T4709] usb 3-1: config 109 interface 123 altsetting 8 bulk endpoint 0xF has invalid maxpacket 8 [ 504.546452][ T4709] usb 3-1: config 109 interface 123 altsetting 8 has 9 endpoint descriptors, different from the interface descriptor's value: 14 [ 504.546496][ T4709] usb 3-1: config 109 interface 123 has no altsetting 0 [ 504.553286][ T4709] usb 3-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7 [ 504.553332][ T4709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.553368][ T4709] usb 3-1: Product: syz [ 504.553398][ T4709] usb 3-1: Manufacturer: syz [ 504.553413][ T4709] usb 3-1: SerialNumber: syz [ 504.760822][T11624] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 505.031431][ T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 505.103136][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.116014][T11624] netlink: 'syz.2.1938': attribute type 16 has an invalid length. [ 505.143714][ T4709] option 3-1:109.123: GSM modem (1-port) converter detected [ 505.155188][ T4709] usb 3-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 505.172720][ T4709] usb 3-1: USB disconnect, device number 35 [ 505.561756][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 505.769046][ T4709] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 505.789373][ T4709] option 3-1:109.123: device disconnected [ 505.859074][T11627] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1939'. [ 505.889319][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 505.890339][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 505.890374][ T9] usb 1-1: can't read configurations, error -71 [ 506.113408][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.228372][T11641] FAULT_INJECTION: forcing a failure. [ 506.228372][T11641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.228411][T11641] CPU: 1 UID: 0 PID: 11641 Comm: syz.1.1944 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 506.228439][T11641] Tainted: [L]=SOFTLOCKUP [ 506.228446][T11641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 506.228458][T11641] Call Trace: [ 506.228467][T11641] [ 506.228476][T11641] dump_stack_lvl+0xe8/0x150 [ 506.228509][T11641] should_fail_ex+0x46b/0x600 [ 506.228546][T11641] _copy_to_user+0x31/0xb0 [ 506.228572][T11641] bpf_test_finish+0x191/0x6b0 [ 506.228600][T11641] ? __pfx____migrate_enable+0x10/0x10 [ 506.228630][T11641] ? __pfx_bpf_test_finish+0x10/0x10 [ 506.228650][T11641] ? preempt_schedule_common+0x82/0xd0 [ 506.228676][T11641] ? preempt_schedule_thunk+0x16/0x30 [ 506.228700][T11641] ? bpf_test_timer_leave+0x20b/0x290 [ 506.228727][T11641] bpf_prog_test_run_flow_dissector+0x478/0x610 [ 506.228763][T11641] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 506.228786][T11641] ? __fget_files+0x2a/0x420 [ 506.228813][T11641] ? __fget_files+0x2a/0x420 [ 506.228839][T11641] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 506.228859][T11641] bpf_prog_test_run+0x2cd/0x340 [ 506.228889][T11641] __sys_bpf+0x643/0x950 [ 506.228914][T11641] ? __pfx___sys_bpf+0x10/0x10 [ 506.228934][T11641] ? rt_mutex_slowunlock+0x1cb/0x300 [ 506.228971][T11641] ? ksys_write+0x248/0x270 [ 506.229000][T11641] ? __pfx_ksys_write+0x10/0x10 [ 506.229035][T11641] __x64_sys_bpf+0x7c/0x90 [ 506.229057][T11641] do_syscall_64+0x14d/0xf80 [ 506.229082][T11641] ? trace_irq_disable+0x3b/0x150 [ 506.229104][T11641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.229124][T11641] ? clear_bhb_loop+0x40/0x90 [ 506.229147][T11641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.229167][T11641] RIP: 0033:0x7fc385d7c799 [ 506.229186][T11641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.229201][T11641] RSP: 002b:00007fc383fce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 506.229221][T11641] RAX: ffffffffffffffda RBX: 00007fc385ff5fa0 RCX: 00007fc385d7c799 [ 506.229235][T11641] RDX: 000000000000004c RSI: 0000200000000640 RDI: 000000000000000a [ 506.229246][T11641] RBP: 00007fc383fce090 R08: 0000000000000000 R09: 0000000000000000 [ 506.229258][T11641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.229269][T11641] R13: 00007fc385ff6038 R14: 00007fc385ff5fa0 R15: 00007ffed0c5a078 [ 506.229297][T11641] [ 506.433233][T11648] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 506.455005][T11648] FAULT_INJECTION: forcing a failure. [ 506.455005][T11648] name fail_iommufd, interval 1, probability 0, space 0, times 1 [ 506.455040][T11648] CPU: 1 UID: 0 PID: 11648 Comm: syz.1.1947 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 506.455075][T11648] Tainted: [L]=SOFTLOCKUP [ 506.455083][T11648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 506.455095][T11648] Call Trace: [ 506.455102][T11648] [ 506.455111][T11648] dump_stack_lvl+0xe8/0x150 [ 506.455145][T11648] should_fail_ex+0x46b/0x600 [ 506.455182][T11648] iommufd_get_object+0x78/0x4b0 [ 506.455297][T11648] ? tomoyo_path_number_perm+0x219/0x630 [ 506.455325][T11648] ? __pfx_iommufd_get_object+0x10/0x10 [ 506.455344][T11648] ? tomoyo_path_number_perm+0x219/0x630 [ 506.455372][T11648] ? do_vfs_ioctl+0x117b/0x1540 [ 506.455405][T11648] iommufd_hwpt_invalidate+0x3c8/0x840 [ 506.455466][T11648] ? __pfx_iommufd_hwpt_invalidate+0x10/0x10 [ 506.455505][T11648] iommufd_fops_ioctl+0x4b8/0x5d0 [ 506.455529][T11648] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 506.455562][T11648] ? __fget_files+0x2a/0x420 [ 506.455589][T11648] ? bpf_lsm_file_ioctl+0x9/0x20 [ 506.455608][T11648] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 506.455630][T11648] __se_sys_ioctl+0xff/0x170 [ 506.455660][T11648] do_syscall_64+0x14d/0xf80 [ 506.455686][T11648] ? trace_irq_disable+0x3b/0x150 [ 506.455708][T11648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.455727][T11648] ? clear_bhb_loop+0x40/0x90 [ 506.455751][T11648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.455771][T11648] RIP: 0033:0x7fc385d7c799 [ 506.455789][T11648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.455807][T11648] RSP: 002b:00007fc383fce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 506.455827][T11648] RAX: ffffffffffffffda RBX: 00007fc385ff5fa0 RCX: 00007fc385d7c799 [ 506.455841][T11648] RDX: 0000200000000280 RSI: 0000000000003b8d RDI: 0000000000000003 [ 506.455854][T11648] RBP: 00007fc383fce090 R08: 0000000000000000 R09: 0000000000000000 [ 506.455868][T11648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.455879][T11648] R13: 00007fc385ff6038 R14: 00007fc385ff5fa0 R15: 00007ffed0c5a078 [ 506.455910][T11648] [ 506.474158][T11649] FAULT_INJECTION: forcing a failure. [ 506.474158][T11649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.474195][T11649] CPU: 1 UID: 0 PID: 11649 Comm: syz.3.1948 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 506.474223][T11649] Tainted: [L]=SOFTLOCKUP [ 506.474230][T11649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 506.474243][T11649] Call Trace: [ 506.474251][T11649] [ 506.474259][T11649] dump_stack_lvl+0xe8/0x150 [ 506.474293][T11649] should_fail_ex+0x46b/0x600 [ 506.474349][T11649] _copy_from_iter+0x1d3/0x1670 [ 506.474378][T11649] ? trace_kmem_cache_alloc+0x29/0xf0 [ 506.474405][T11649] ? __alloc_skb+0x27d/0x7d0 [ 506.474429][T11649] ? __pfx__copy_from_iter+0x10/0x10 [ 506.474449][T11649] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 506.474475][T11649] ? __alloc_skb+0x27d/0x7d0 [ 506.474511][T11649] ? netlink_sendmsg+0x650/0xb40 [ 506.474532][T11649] ? skb_put+0x11b/0x210 [ 506.474559][T11649] netlink_sendmsg+0x6c0/0xb40 [ 506.474589][T11649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.474618][T11649] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 506.474648][T11649] ____sys_sendmsg+0xa4e/0xac0 [ 506.474682][T11649] ? __pfx_____sys_sendmsg+0x10/0x10 [ 506.474725][T11649] ? import_iovec+0x73/0xa0 [ 506.474752][T11649] ___sys_sendmsg+0x2a5/0x360 [ 506.474782][T11649] ? __pfx____sys_sendmsg+0x10/0x10 [ 506.474841][T11649] ? __fget_files+0x2a/0x420 [ 506.474863][T11649] ? __fget_files+0x3a6/0x420 [ 506.474895][T11649] __x64_sys_sendmsg+0x1c3/0x2a0 [ 506.474924][T11649] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 506.474963][T11649] ? __pfx_ksys_write+0x10/0x10 [ 506.475007][T11649] do_syscall_64+0x14d/0xf80 [ 506.475034][T11649] ? trace_irq_disable+0x3b/0x150 [ 506.475056][T11649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.475075][T11649] ? clear_bhb_loop+0x40/0x90 [ 506.475098][T11649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.475117][T11649] RIP: 0033:0x7f4e94b7c799 [ 506.475136][T11649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.475153][T11649] RSP: 002b:00007f4e92dce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 506.475172][T11649] RAX: ffffffffffffffda RBX: 00007f4e94df5fa0 RCX: 00007f4e94b7c799 [ 506.475186][T11649] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 506.475199][T11649] RBP: 00007f4e92dce090 R08: 0000000000000000 R09: 0000000000000000 [ 506.475210][T11649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.475222][T11649] R13: 00007f4e94df6038 R14: 00007f4e94df5fa0 R15: 00007ffd99bdd3f8 [ 506.475252][T11649] [ 506.491621][ T36] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 506.659342][ T36] usb 5-1: Using ep0 maxpacket: 8 [ 506.719497][ T36] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 506.719536][ T36] usb 5-1: New USB device strings: Mfr=17, Product=2, SerialNumber=239 [ 506.719558][ T36] usb 5-1: Product: syz [ 506.719573][ T36] usb 5-1: Manufacturer: syz [ 506.719588][ T36] usb 5-1: SerialNumber: syz [ 506.737809][ T36] usb 5-1: config 0 descriptor?? [ 506.768144][ T36] gspca_main: sq905-2.14.0 probing 2770:9120 [ 507.330953][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.396265][ T5811] Bluetooth: Wrong link type (-22) [ 507.518741][ T7439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.563359][T11664] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.725153][ T36] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 507.725247][ T36] sq905 5-1:0.0: probe with driver sq905 failed with error -71 [ 507.781404][ T36] usb 5-1: USB disconnect, device number 55 [ 508.020404][T11671] overlayfs: failed to resolve './file1': -2 [ 508.421498][ T36] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 508.571500][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 508.574207][ T36] usb 1-1: config 109 has an invalid interface number: 123 but max is 3 [ 508.574234][ T36] usb 1-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 508.574254][ T36] usb 1-1: config 109 has an invalid descriptor of length 0, skipping remainder of the config [ 508.574273][ T36] usb 1-1: config 109 has 1 interface, different from the descriptor's value: 4 [ 508.574294][ T36] usb 1-1: config 109 has no interface number 0 [ 508.574339][ T36] usb 1-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 508.574369][ T36] usb 1-1: config 109 interface 123 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 508.574389][ T36] usb 1-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 508.574404][ T36] usb 1-1: config 109 interface 123 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 508.574416][ T36] usb 1-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 508.574428][ T36] usb 1-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024 [ 508.574441][ T36] usb 1-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 508.574454][ T36] usb 1-1: config 109 interface 123 altsetting 8 bulk endpoint 0xF has invalid maxpacket 8 [ 508.574467][ T36] usb 1-1: config 109 interface 123 altsetting 8 has 9 endpoint descriptors, different from the interface descriptor's value: 14 [ 508.574481][ T36] usb 1-1: config 109 interface 123 has no altsetting 0 [ 508.578614][ T36] usb 1-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7 [ 508.578649][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.578669][ T36] usb 1-1: Product: syz [ 508.578681][ T36] usb 1-1: Manufacturer: syz [ 508.578690][ T36] usb 1-1: SerialNumber: syz [ 508.640731][T11675] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 508.642206][T11666] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 508.662020][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.857820][T11666] netlink: 'syz.0.1953': attribute type 16 has an invalid length. [ 508.887467][ T37] kauditd_printk_skb: 141 callbacks suppressed [ 508.887488][ T37] audit: type=1804 audit(1772619951.705:4921): pid=11678 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.1957" name="bus" dev="ramfs" ino=30945 res=1 errno=0 [ 508.893095][T11680] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 508.899645][ T36] option 1-1:109.123: GSM modem (1-port) converter detected [ 508.914433][ T37] audit: type=1804 audit(1772619951.775:4922): pid=11675 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.1957" name="bus" dev="ramfs" ino=30945 res=1 errno=0 [ 508.941957][ T36] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 508.971456][ T36] usb 1-1: USB disconnect, device number 52 [ 509.011791][ T36] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 509.012569][ T36] option 1-1:109.123: device disconnected [ 509.713045][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.901496][ T9] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 510.044298][T11696] FAULT_INJECTION: forcing a failure. [ 510.044298][T11696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.044334][T11696] CPU: 1 UID: 0 PID: 11696 Comm: syz.1.1962 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 510.044361][T11696] Tainted: [L]=SOFTLOCKUP [ 510.044369][T11696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 510.044380][T11696] Call Trace: [ 510.044388][T11696] [ 510.044397][T11696] dump_stack_lvl+0xe8/0x150 [ 510.044429][T11696] should_fail_ex+0x46b/0x600 [ 510.044465][T11696] _copy_to_user+0x31/0xb0 [ 510.044486][T11696] simple_read_from_buffer+0xe1/0x170 [ 510.044503][T11696] proc_fail_nth_read+0x1be/0x230 [ 510.044519][T11696] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 510.044536][T11696] ? rw_verify_area+0x2ac/0x4e0 [ 510.044550][T11696] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 510.044563][T11696] vfs_read+0x212/0xa80 [ 510.044582][T11696] ? __pfx_vfs_read+0x10/0x10 [ 510.044597][T11696] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 510.044613][T11696] ? lockdep_hardirqs_on+0x7a/0x110 [ 510.044628][T11696] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 510.044642][T11696] ? mutex_lock_nested+0x152/0x1d0 [ 510.044653][T11696] ? fdget_pos+0x252/0x320 [ 510.044670][T11696] ksys_read+0x156/0x270 [ 510.044685][T11696] ? __pfx_ksys_read+0x10/0x10 [ 510.044706][T11696] do_syscall_64+0x14d/0xf80 [ 510.044720][T11696] ? trace_irq_disable+0x3b/0x150 [ 510.044733][T11696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.044744][T11696] ? clear_bhb_loop+0x40/0x90 [ 510.044757][T11696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.044768][T11696] RIP: 0033:0x7fc385d3cfce [ 510.044779][T11696] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 510.044788][T11696] RSP: 002b:00007fc383fcdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 510.044801][T11696] RAX: ffffffffffffffda RBX: 00007fc383fce6c0 RCX: 00007fc385d3cfce [ 510.044809][T11696] RDX: 000000000000000f RSI: 00007fc383fce0a0 RDI: 0000000000000004 [ 510.044816][T11696] RBP: 00007fc383fce090 R08: 0000000000000000 R09: 0000000000000000 [ 510.044823][T11696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.044829][T11696] R13: 00007fc385ff6038 R14: 00007fc385ff5fa0 R15: 00007ffed0c5a078 [ 510.044846][T11696] [ 510.191551][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 510.319677][T11690] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1960'. [ 510.337572][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 510.338542][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 510.338576][ T9] usb 1-1: can't read configurations, error -71 [ 510.363092][ T6379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.472196][ T6379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.540288][T11702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1965'. [ 510.540901][T11702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.540956][T11702] batadv0: mtu less than device minimum [ 510.619008][T11704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1965'. [ 511.002248][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.097323][T11702] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 511.260620][T11702] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 511.301165][T11702] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 511.370331][T11702] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 511.502001][T11712] fuse: Unknown parameter 'gro0kuup_id' [ 511.584744][ T808] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 511.690090][T11702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.736419][ T808] usb 5-1: Using ep0 maxpacket: 8 [ 511.755923][ T808] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 511.755955][ T808] usb 5-1: New USB device strings: Mfr=17, Product=2, SerialNumber=239 [ 511.755976][ T808] usb 5-1: Product: syz [ 511.755991][ T808] usb 5-1: Manufacturer: syz [ 511.756006][ T808] usb 5-1: SerialNumber: syz [ 511.759680][ T808] usb 5-1: config 0 descriptor?? [ 511.826569][ T808] gspca_main: sq905-2.14.0 probing 2770:9120 [ 512.361482][ T7439] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 512.384346][ T808] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 512.384448][ T808] sq905 5-1:0.0: probe with driver sq905 failed with error -71 [ 512.390497][ T808] usb 5-1: USB disconnect, device number 56 [ 512.571499][ T7439] usb 3-1: Using ep0 maxpacket: 32 [ 512.576511][ T7439] usb 3-1: config 109 has an invalid interface number: 123 but max is 3 [ 512.576540][ T7439] usb 3-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 512.576559][ T7439] usb 3-1: config 109 has an invalid descriptor of length 0, skipping remainder of the config [ 512.576579][ T7439] usb 3-1: config 109 has 1 interface, different from the descriptor's value: 4 [ 512.576599][ T7439] usb 3-1: config 109 has no interface number 0 [ 512.576635][ T7439] usb 3-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 512.576652][ T7439] usb 3-1: config 109 interface 123 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 512.576664][ T7439] usb 3-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 512.576676][ T7439] usb 3-1: config 109 interface 123 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 512.576688][ T7439] usb 3-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 512.576700][ T7439] usb 3-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024 [ 512.576713][ T7439] usb 3-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 512.576725][ T7439] usb 3-1: config 109 interface 123 altsetting 8 bulk endpoint 0xF has invalid maxpacket 8 [ 512.576738][ T7439] usb 3-1: config 109 interface 123 altsetting 8 has 9 endpoint descriptors, different from the interface descriptor's value: 14 [ 512.576752][ T7439] usb 3-1: config 109 interface 123 has no altsetting 0 [ 512.580297][ T7439] usb 3-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7 [ 512.580327][ T7439] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.580348][ T7439] usb 3-1: Product: syz [ 512.580362][ T7439] usb 3-1: Manufacturer: syz [ 512.580371][ T7439] usb 3-1: SerialNumber: syz [ 512.821364][T11719] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 512.940048][ T37] audit: type=1326 audit(1772619955.795:4923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11723 comm="syz.0.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee14bc799 code=0x7ffc0000 [ 512.963394][ T37] audit: type=1326 audit(1772619955.825:4924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11723 comm="syz.0.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee14bc799 code=0x7ffc0000 [ 512.965194][ T37] audit: type=1326 audit(1772619955.825:4925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11723 comm="syz.0.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fdee14bc799 code=0x7ffc0000 [ 512.965951][ T37] audit: type=1326 audit(1772619955.825:4926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11723 comm="syz.0.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee14bc799 code=0x7ffc0000 [ 512.966045][ T37] audit: type=1326 audit(1772619955.825:4927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11723 comm="syz.0.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee14bc799 code=0x7ffc0000 [ 512.966822][ T37] audit: type=1326 audit(1772619955.825:4928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11723 comm="syz.0.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fdee14bc799 code=0x7ffc0000 [ 513.085742][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1972'. [ 513.206329][ T37] audit: type=1326 audit(1772619956.055:4929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11723 comm="syz.0.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee14bc799 code=0x7ffc0000 [ 513.221075][ T37] audit: type=1326 audit(1772619956.065:4930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11723 comm="syz.0.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee14bc799 code=0x7ffc0000 [ 514.103500][T11719] netlink: 'syz.2.1970': attribute type 16 has an invalid length. [ 514.120116][ T36] net_ratelimit: 19 callbacks suppressed [ 514.120134][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.124943][ T7439] option 3-1:109.123: GSM modem (1-port) converter detected [ 514.153489][ T7439] usb 3-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 514.176578][ T7439] usb 3-1: USB disconnect, device number 36 [ 514.191114][ T7439] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 514.192146][ T7439] option 3-1:109.123: device disconnected [ 514.225949][T11728] team0 (unregistering): Port device team_slave_0 removed [ 514.270924][T11728] team0 (unregistering): Port device team_slave_1 removed [ 514.678352][T11750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1979'. [ 514.679738][ T5113] Bluetooth: Wrong link type (-22) [ 514.721504][ T7439] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 514.871502][ T7439] usb 1-1: Using ep0 maxpacket: 8 [ 514.878307][T11743] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1977'. [ 514.880820][ T7439] usb 1-1: unable to get BOS descriptor or descriptor too short [ 514.903858][ T7439] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 514.903899][ T7439] usb 1-1: can't read configurations, error -71 [ 515.221778][ T1244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.804579][ T5113] Bluetooth: hci3: command 0x1003 tx timeout [ 515.842066][ T5811] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 516.272651][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.009594][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.080756][T11754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.312055][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.342686][T11777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.654124][T11786] FAULT_INJECTION: forcing a failure. [ 517.654124][T11786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.654162][T11786] CPU: 1 UID: 0 PID: 11786 Comm: syz.4.1987 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 517.654189][T11786] Tainted: [L]=SOFTLOCKUP [ 517.654199][T11786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 517.654211][T11786] Call Trace: [ 517.654220][T11786] [ 517.654228][T11786] dump_stack_lvl+0xe8/0x150 [ 517.654261][T11786] should_fail_ex+0x46b/0x600 [ 517.654297][T11786] strncpy_from_user+0x36/0x2b0 [ 517.654330][T11786] do_getname+0x77/0x250 [ 517.654355][T11786] user_path_at+0x2a/0x160 [ 517.654382][T11786] bpf_obj_get_user+0xbb/0x430 [ 517.654449][T11786] ? __pfx_bpf_obj_get_user+0x10/0x10 [ 517.654487][T11786] __sys_bpf+0x7e9/0x950 [ 517.654511][T11786] ? __pfx___sys_bpf+0x10/0x10 [ 517.654529][T11786] ? rt_mutex_slowunlock+0x1cb/0x300 [ 517.654567][T11786] ? ksys_write+0x248/0x270 [ 517.654595][T11786] ? __pfx_ksys_write+0x10/0x10 [ 517.654627][T11786] __x64_sys_bpf+0x7c/0x90 [ 517.654647][T11786] do_syscall_64+0x14d/0xf80 [ 517.654671][T11786] ? trace_irq_disable+0x3b/0x150 [ 517.654692][T11786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.654711][T11786] ? clear_bhb_loop+0x40/0x90 [ 517.654734][T11786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.654753][T11786] RIP: 0033:0x7f6524edc799 [ 517.654773][T11786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.654789][T11786] RSP: 002b:00007f652310d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 517.654811][T11786] RAX: ffffffffffffffda RBX: 00007f6525156090 RCX: 00007f6524edc799 [ 517.654826][T11786] RDX: 0000000000000018 RSI: 0000200000000200 RDI: 0000000000000007 [ 517.654839][T11786] RBP: 00007f652310d090 R08: 0000000000000000 R09: 0000000000000000 [ 517.654851][T11786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.654863][T11786] R13: 00007f6525156128 R14: 00007f6525156090 R15: 00007ffd472c2148 [ 517.654912][T11786] [ 517.914159][T11767] rtc_cmos 00:00: Alarms can be up to one day in the future [ 518.136477][ T6379] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 518.352176][ T7439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.411459][ T6379] usb 3-1: Using ep0 maxpacket: 32 [ 518.414333][ T6379] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 518.414361][ T6379] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 518.414383][ T6379] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 518.414405][ T6379] usb 3-1: config 1 has no interface number 0 [ 518.414462][ T6379] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 518.414489][ T6379] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 518.414531][ T6379] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 518.414555][ T6379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.430877][ T6379] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 518.459772][ T5113] Bluetooth: Wrong link type (-22) [ 518.467359][ T5888] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 518.660365][T11807] gretap0: entered promiscuous mode [ 518.660563][T11807] vlan2: entered promiscuous mode [ 518.673906][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 518.676529][ T5888] usb 2-1: config 109 has an invalid interface number: 123 but max is 3 [ 518.676558][ T5888] usb 2-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 518.676578][ T5888] usb 2-1: config 109 has an invalid descriptor of length 0, skipping remainder of the config [ 518.676598][ T5888] usb 2-1: config 109 has 1 interface, different from the descriptor's value: 4 [ 518.676619][ T5888] usb 2-1: config 109 has no interface number 0 [ 518.676670][ T5888] usb 2-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 518.676701][ T5888] usb 2-1: config 109 interface 123 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 518.676722][ T5888] usb 2-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 518.676746][ T5888] usb 2-1: config 109 interface 123 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 518.676768][ T5888] usb 2-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 518.676790][ T5888] usb 2-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024 [ 518.676815][ T5888] usb 2-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 518.676838][ T5888] usb 2-1: config 109 interface 123 altsetting 8 bulk endpoint 0xF has invalid maxpacket 8 [ 518.676862][ T5888] usb 2-1: config 109 interface 123 altsetting 8 has 9 endpoint descriptors, different from the interface descriptor's value: 14 [ 518.676890][ T5888] usb 2-1: config 109 interface 123 has no altsetting 0 [ 518.780288][ T5888] usb 2-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7 [ 518.780319][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.780340][ T5888] usb 2-1: Product: syz [ 518.780355][ T5888] usb 2-1: Manufacturer: syz [ 518.780370][ T5888] usb 2-1: SerialNumber: syz [ 518.875684][ T808] rtc_cmos 00:00: Alarms can be up to one day in the future [ 518.875945][ T808] rtc_cmos 00:00: Alarms can be up to one day in the future [ 518.877478][ T6379] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 518.901576][T11797] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 518.924466][ T808] rtc_cmos 00:00: Alarms can be up to one day in the future [ 518.924913][ T808] rtc_cmos 00:00: Alarms can be up to one day in the future [ 518.924933][ T808] rtc rtc0: __rtc_set_alarm: err=-22 [ 519.104864][T11810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.127603][T11810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.152549][T11797] netlink: 'syz.1.1991': attribute type 16 has an invalid length. [ 519.202016][ T5888] option 2-1:109.123: GSM modem (1-port) converter detected [ 519.208092][ T5888] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 519.245592][ T5888] usb 2-1: USB disconnect, device number 40 [ 519.270027][ T5888] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 519.280806][ T5888] option 2-1:109.123: device disconnected [ 519.392567][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.503111][ T808] usb 3-1: USB disconnect, device number 37 [ 519.535000][T11815] rtc_cmos 00:00: Alarms can be up to one day in the future [ 519.632590][ T808] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 519.880782][ T808] rtc_cmos 00:00: Alarms can be up to one day in the future [ 519.893810][ T808] rtc_cmos 00:00: Alarms can be up to one day in the future [ 519.895297][ T808] rtc_cmos 00:00: Alarms can be up to one day in the future [ 519.897841][ T808] rtc_cmos 00:00: Alarms can be up to one day in the future [ 519.897939][ T808] rtc rtc0: __rtc_set_alarm: err=-22 [ 520.374990][ T6379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.453146][T11826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.612262][T11833] FAULT_INJECTION: forcing a failure. [ 520.612262][T11833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.612298][T11833] CPU: 0 UID: 0 PID: 11833 Comm: syz.4.2005 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 520.612326][T11833] Tainted: [L]=SOFTLOCKUP [ 520.612333][T11833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 520.612346][T11833] Call Trace: [ 520.612354][T11833] [ 520.612363][T11833] dump_stack_lvl+0xe8/0x150 [ 520.612397][T11833] should_fail_ex+0x46b/0x600 [ 520.612435][T11833] _copy_from_iter+0x1d3/0x1670 [ 520.612465][T11833] ? trace_kmem_cache_alloc+0x29/0xf0 [ 520.612493][T11833] ? __alloc_skb+0x27d/0x7d0 [ 520.612527][T11833] ? __pfx__copy_from_iter+0x10/0x10 [ 520.612547][T11833] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 520.612575][T11833] ? __alloc_skb+0x27d/0x7d0 [ 520.612604][T11833] ? netlink_sendmsg+0x650/0xb40 [ 520.612625][T11833] ? skb_put+0x11b/0x210 [ 520.612653][T11833] netlink_sendmsg+0x6c0/0xb40 [ 520.612684][T11833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 520.612714][T11833] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 520.612745][T11833] ____sys_sendmsg+0xa4e/0xac0 [ 520.612781][T11833] ? __pfx_____sys_sendmsg+0x10/0x10 [ 520.612816][T11833] ? import_iovec+0x73/0xa0 [ 520.612844][T11833] ___sys_sendmsg+0x2a5/0x360 [ 520.612876][T11833] ? __pfx____sys_sendmsg+0x10/0x10 [ 520.612936][T11833] ? __fget_files+0x2a/0x420 [ 520.612959][T11833] ? __fget_files+0x3a6/0x420 [ 520.612992][T11833] __x64_sys_sendmsg+0x1c3/0x2a0 [ 520.613022][T11833] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 520.613058][T11833] ? __pfx_ksys_write+0x10/0x10 [ 520.613097][T11833] do_syscall_64+0x14d/0xf80 [ 520.613123][T11833] ? trace_irq_disable+0x3b/0x150 [ 520.613146][T11833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.613166][T11833] ? clear_bhb_loop+0x40/0x90 [ 520.613190][T11833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.613210][T11833] RIP: 0033:0x7f6524edc799 [ 520.613229][T11833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.613246][T11833] RSP: 002b:00007f652312e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 520.613267][T11833] RAX: ffffffffffffffda RBX: 00007f6525155fa0 RCX: 00007f6524edc799 [ 520.613282][T11833] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 520.613294][T11833] RBP: 00007f652312e090 R08: 0000000000000000 R09: 0000000000000000 [ 520.613306][T11833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.613317][T11833] R13: 00007f6525156038 R14: 00007f6525155fa0 R15: 00007ffd472c2148 [ 520.613344][T11833] [ 520.639804][T11835] FAULT_INJECTION: forcing a failure. [ 520.639804][T11835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.639841][T11835] CPU: 0 UID: 0 PID: 11835 Comm: syz.1.2004 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 520.639868][T11835] Tainted: [L]=SOFTLOCKUP [ 520.639875][T11835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 520.639887][T11835] Call Trace: [ 520.639895][T11835] [ 520.639904][T11835] dump_stack_lvl+0xe8/0x150 [ 520.639938][T11835] should_fail_ex+0x46b/0x600 [ 520.639976][T11835] _copy_from_iter+0x1d3/0x1670 [ 520.640005][T11835] ? trace_kmem_cache_alloc+0x29/0xf0 [ 520.640031][T11835] ? __alloc_skb+0x27d/0x7d0 [ 520.640055][T11835] ? __pfx__copy_from_iter+0x10/0x10 [ 520.640075][T11835] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 520.640102][T11835] ? __alloc_skb+0x27d/0x7d0 [ 520.640129][T11835] ? netlink_sendmsg+0x650/0xb40 [ 520.640150][T11835] ? skb_put+0x11b/0x210 [ 520.640177][T11835] netlink_sendmsg+0x6c0/0xb40 [ 520.640207][T11835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 520.640236][T11835] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 520.640267][T11835] ____sys_sendmsg+0xa4e/0xac0 [ 520.640300][T11835] ? __pfx_____sys_sendmsg+0x10/0x10 [ 520.640335][T11835] ? import_iovec+0x73/0xa0 [ 520.640362][T11835] ___sys_sendmsg+0x2a5/0x360 [ 520.640393][T11835] ? __pfx____sys_sendmsg+0x10/0x10 [ 520.640452][T11835] ? __fget_files+0x2a/0x420 [ 520.640474][T11835] ? __fget_files+0x3a6/0x420 [ 520.640513][T11835] __x64_sys_sendmsg+0x1c3/0x2a0 [ 520.640541][T11835] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 520.640576][T11835] ? __pfx_ksys_write+0x10/0x10 [ 520.640614][T11835] do_syscall_64+0x14d/0xf80 [ 520.640640][T11835] ? trace_irq_disable+0x3b/0x150 [ 520.640662][T11835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.640682][T11835] ? clear_bhb_loop+0x40/0x90 [ 520.640705][T11835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.640723][T11835] RIP: 0033:0x7fc385d7c799 [ 520.640742][T11835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.640759][T11835] RSP: 002b:00007fc383fad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 520.640780][T11835] RAX: ffffffffffffffda RBX: 00007fc385ff6090 RCX: 00007fc385d7c799 [ 520.640794][T11835] RDX: 0000000000000810 RSI: 0000200000000280 RDI: 0000000000000004 [ 520.640807][T11835] RBP: 00007fc383fad090 R08: 0000000000000000 R09: 0000000000000000 [ 520.640818][T11835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.640830][T11835] R13: 00007fc385ff6128 R14: 00007fc385ff6090 R15: 00007ffed0c5a078 [ 520.640861][T11835] [ 521.305789][ T5113] Bluetooth: Wrong link type (-22) [ 521.476412][ T7439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.952017][ T6379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.952670][ T4484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.004493][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.007004][ T4709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.090213][T11848] bond2: option packets_per_slave: mode dependency failed, not supported in mode broadcast(3) [ 522.131879][T11848] bond2 (unregistering): Released all slaves [ 522.291946][T11860] bridge0: port 3(syz_tun) entered blocking state [ 522.292334][T11860] bridge0: port 3(syz_tun) entered disabled state [ 522.292482][T11860] syz_tun: entered allmulticast mode [ 522.296933][T11860] syz_tun: entered promiscuous mode [ 522.301248][T11860] bridge0: port 3(syz_tun) entered blocking state [ 522.331276][T11860] bridge0: port 3(syz_tun) entered forwarding state [ 522.496432][ T7439] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 522.529043][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.782679][ T7439] usb 1-1: Using ep0 maxpacket: 32 [ 522.884878][ T7439] usb 1-1: config 109 has an invalid interface number: 123 but max is 3 [ 522.885016][ T7439] usb 1-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 522.885093][ T7439] usb 1-1: config 109 has an invalid descriptor of length 0, skipping remainder of the config [ 522.885196][ T7439] usb 1-1: config 109 has 1 interface, different from the descriptor's value: 4 [ 522.885272][ T7439] usb 1-1: config 109 has no interface number 0 [ 522.885931][ T7439] usb 1-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 522.886044][ T7439] usb 1-1: config 109 interface 123 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 522.886149][ T7439] usb 1-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 522.886227][ T7439] usb 1-1: config 109 interface 123 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 522.886303][ T7439] usb 1-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 522.886358][ T7439] usb 1-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024 [ 522.886479][ T7439] usb 1-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 522.886627][ T7439] usb 1-1: config 109 interface 123 altsetting 8 bulk endpoint 0xF has invalid maxpacket 8 [ 522.886705][ T7439] usb 1-1: config 109 interface 123 altsetting 8 has 9 endpoint descriptors, different from the interface descriptor's value: 14 [ 522.886788][ T7439] usb 1-1: config 109 interface 123 has no altsetting 0 [ 523.057564][ T7439] usb 1-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7 [ 523.057596][ T7439] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.057617][ T7439] usb 1-1: Product: syz [ 523.057632][ T7439] usb 1-1: Manufacturer: syz [ 523.057647][ T7439] usb 1-1: SerialNumber: syz [ 523.098709][T11858] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 523.307614][T11858] netlink: 'syz.0.2012': attribute type 16 has an invalid length. [ 523.330623][ T7439] option 1-1:109.123: GSM modem (1-port) converter detected [ 523.354188][ T7439] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 523.393912][ T4709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.561435][ T7439] usb 1-1: USB disconnect, device number 57 [ 523.659925][ T5113] Bluetooth: Wrong link type (-22) [ 523.985186][ T7439] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 524.148252][ T7439] option 1-1:109.123: device disconnected [ 524.348490][T11885] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request [ 524.662862][ T7439] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 524.718436][ T36] net_ratelimit: 1 callbacks suppressed [ 524.718481][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.872132][ T7439] usb 4-1: Using ep0 maxpacket: 16 [ 524.957502][ T7439] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 524.958894][ T7439] usb 4-1: config 0 has no interface number 0 [ 524.959896][ T7439] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 524.960019][ T7439] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 525.380761][ T4709] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 525.389963][ T7439] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 525.389997][ T7439] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.390018][ T7439] usb 4-1: Product: syz [ 525.390033][ T7439] usb 4-1: Manufacturer: syz [ 525.390049][ T7439] usb 4-1: SerialNumber: syz [ 525.434064][ T7439] usb 4-1: config 0 descriptor?? [ 525.438102][T11885] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 525.438287][T11885] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 525.539748][ T4709] usb 5-1: Using ep0 maxpacket: 8 [ 525.546532][ T4709] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 525.546564][ T4709] usb 5-1: New USB device strings: Mfr=17, Product=2, SerialNumber=239 [ 525.546585][ T4709] usb 5-1: Product: syz [ 525.546599][ T4709] usb 5-1: Manufacturer: syz [ 525.546615][ T4709] usb 5-1: SerialNumber: syz [ 525.563620][ T4709] usb 5-1: config 0 descriptor?? [ 525.587517][ T4709] gspca_main: sq905-2.14.0 probing 2770:9120 [ 525.644796][T11885] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 525.644972][T11885] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 525.752697][T11903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2027'. [ 525.792076][ T1244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.978616][ T4709] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 525.978694][ T4709] sq905 5-1:0.0: probe with driver sq905 failed with error -71 [ 526.080787][ T7439] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 526.080819][ T7439] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 526.081113][ T7439] asix 4-1:0.251: probe with driver asix failed with error -71 [ 526.099351][ T7439] usb 4-1: USB disconnect, device number 60 [ 526.133562][ T4709] usb 5-1: USB disconnect, device number 57 [ 526.173464][T11910] netlink: 'syz.0.2029': attribute type 1 has an invalid length. [ 526.432630][ T4709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.938240][ T7439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.644472][ T5113] Bluetooth: Wrong link type (-22) [ 527.996322][ T808] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 528.015871][ T1244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.018502][T11939] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 528.152874][ T808] usb 3-1: Using ep0 maxpacket: 8 [ 528.157052][ T808] usb 3-1: config 83 has an invalid interface number: 110 but max is 2 [ 528.157084][ T808] usb 3-1: config 83 has an invalid interface number: 15 but max is 2 [ 528.157106][ T808] usb 3-1: config 83 has an invalid interface number: 211 but max is 2 [ 528.157127][ T808] usb 3-1: config 83 has no interface number 0 [ 528.157141][ T808] usb 3-1: config 83 has no interface number 1 [ 528.157156][ T808] usb 3-1: config 83 has no interface number 2 [ 528.157224][ T808] usb 3-1: config 83 interface 110 altsetting 9 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 528.157251][ T808] usb 3-1: config 83 interface 110 altsetting 9 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 528.157277][ T808] usb 3-1: config 83 interface 110 altsetting 9 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 528.157304][ T808] usb 3-1: config 83 interface 110 altsetting 9 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 528.157330][ T808] usb 3-1: config 83 interface 110 altsetting 9 bulk endpoint 0xD has invalid maxpacket 1023 [ 528.157356][ T808] usb 3-1: config 83 interface 110 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 528.157379][ T808] usb 3-1: config 83 interface 110 altsetting 9 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 528.157407][ T808] usb 3-1: config 83 interface 110 altsetting 9 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 528.157433][ T808] usb 3-1: config 83 interface 110 altsetting 9 has an endpoint descriptor with address 0x1A, changing to 0xA [ 528.157459][ T808] usb 3-1: config 83 interface 110 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 528.157481][ T808] usb 3-1: config 83 interface 110 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 528.157504][ T808] usb 3-1: config 83 interface 110 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 528.157541][ T808] usb 3-1: config 83 interface 15 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 528.157564][ T808] usb 3-1: config 83 interface 15 altsetting 9 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 528.157591][ T808] usb 3-1: config 83 interface 15 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 528.157643][ T808] usb 3-1: config 83 interface 211 altsetting 11 has a duplicate endpoint with address 0xF, skipping [ 528.157667][ T808] usb 3-1: config 83 interface 211 altsetting 11 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 528.157696][ T808] usb 3-1: config 83 interface 211 altsetting 11 endpoint 0x1 has an invalid bInterval 235, changing to 11 [ 528.157723][ T808] usb 3-1: config 83 interface 110 has no altsetting 0 [ 528.157753][ T808] usb 3-1: config 83 interface 15 has no altsetting 0 [ 528.157771][ T808] usb 3-1: config 83 interface 211 has no altsetting 0 [ 528.363640][ T808] usb 3-1: Dual-Role OTG device on HNP port [ 528.375285][ T808] usb 3-1: New USB device found, idVendor=19d2, idProduct=ff75, bcdDevice= d.97 [ 528.375312][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.375331][ T808] usb 3-1: Product: 島ۃ꿐羗苄⻧뭐኱䟯괰鹼꺿ᨥ㴺흄圐鲛㹼큸酭텴抧伝᳥ꁱ潽̤䷸㫩꿻⬜᩽黅斋ꨴᩜቆ푶驫㰚竜﹪ꡌ鳄솘IJ쐏㪈셬ﺰ⏗厴炊ꏒ갸臮䊵뉯圅욎瘙 ✜許Ñᕮ쩋敬旓嶚쥧᠃乱⠸ŠΗ奃㤌ﱌ崲豾鰉ㇰ觟⹐囹購㽵ᵂ⒁䖙횫㞭雿⍚♑㙹댽Ϋ㶝츊䄟ꩍဒ꾈椆즑 [ 528.375364][ T808] usb 3-1: Manufacturer: 椟ğέﮣଢ଼⯩옞滴ꀦ怭촐捘耹㹺뽐뙾ዢ⍹ﶗᾊ灸࣊ [ 528.375382][ T808] usb 3-1: SerialNumber: 줷௧⭥स沨凛ʅ [ 528.420598][T11946] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2039'. [ 528.421079][T11946] netlink: 'syz.0.2039': attribute type 4 has an invalid length. [ 528.429569][T11946] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2039'. [ 528.459258][T11929] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 528.689231][ T808] option 3-1:83.110: GSM modem (1-port) converter detected [ 528.733494][ T808] usbhid 3-1:83.211: couldn't find an input interrupt endpoint [ 528.739265][ T808] usb 3-1: USB disconnect, device number 38 [ 528.768803][ T808] option 3-1:83.110: device disconnected [ 528.889157][T11962] netlink: 'syz.3.2044': attribute type 1 has an invalid length. [ 528.907244][T11961] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request [ 528.974088][T11962] bond1: entered promiscuous mode [ 528.974467][T11962] 8021q: adding VLAN 0 to HW filter on device bond1 [ 528.978800][T11962] FAULT_INJECTION: forcing a failure. [ 528.978800][T11962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 528.978823][T11962] CPU: 0 UID: 0 PID: 11962 Comm: syz.3.2044 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 528.978840][T11962] Tainted: [L]=SOFTLOCKUP [ 528.978844][T11962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 528.978851][T11962] Call Trace: [ 528.978856][T11962] [ 528.978861][T11962] dump_stack_lvl+0xe8/0x150 [ 528.978881][T11962] should_fail_ex+0x46b/0x600 [ 528.978902][T11962] _copy_from_iter+0x1d3/0x1670 [ 528.978919][T11962] ? trace_kmem_cache_alloc+0x29/0xf0 [ 528.978942][T11962] ? __alloc_skb+0x27d/0x7d0 [ 528.978964][T11962] ? __pfx__copy_from_iter+0x10/0x10 [ 528.978982][T11962] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 528.979008][T11962] ? __alloc_skb+0x27d/0x7d0 [ 528.979034][T11962] ? netlink_sendmsg+0x650/0xb40 [ 528.979055][T11962] ? skb_put+0x11b/0x210 [ 528.979079][T11962] netlink_sendmsg+0x6c0/0xb40 [ 528.979096][T11962] ? __pfx_netlink_sendmsg+0x10/0x10 [ 528.979112][T11962] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 528.979129][T11962] ____sys_sendmsg+0xa4e/0xac0 [ 528.979149][T11962] ? __pfx_____sys_sendmsg+0x10/0x10 [ 528.979167][T11962] ? import_iovec+0x73/0xa0 [ 528.979182][T11962] ___sys_sendmsg+0x2a5/0x360 [ 528.979200][T11962] ? __pfx____sys_sendmsg+0x10/0x10 [ 528.979233][T11962] ? __fget_files+0x2a/0x420 [ 528.979246][T11962] ? __fget_files+0x3a6/0x420 [ 528.979263][T11962] __x64_sys_sendmsg+0x1c3/0x2a0 [ 528.979278][T11962] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 528.979298][T11962] ? __pfx_ksys_write+0x10/0x10 [ 528.979318][T11962] do_syscall_64+0x14d/0xf80 [ 528.979333][T11962] ? trace_irq_disable+0x3b/0x150 [ 528.979348][T11962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.979359][T11962] ? clear_bhb_loop+0x40/0x90 [ 528.979372][T11962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.979383][T11962] RIP: 0033:0x7f4e94b7c799 [ 528.979394][T11962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.979404][T11962] RSP: 002b:00007f4e92dce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 528.979417][T11962] RAX: ffffffffffffffda RBX: 00007f4e94df5fa0 RCX: 00007f4e94b7c799 [ 528.979430][T11962] RDX: 00000000000440b0 RSI: 0000200000000280 RDI: 0000000000000004 [ 528.979443][T11962] RBP: 00007f4e92dce090 R08: 0000000000000000 R09: 0000000000000000 [ 528.979455][T11962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.979466][T11962] R13: 00007f4e94df6038 R14: 00007f4e94df5fa0 R15: 00007ffd99bdd3f8 [ 528.979493][T11962] [ 529.081959][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.171488][ T6379] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 529.331906][ T6379] usb 2-1: Using ep0 maxpacket: 16 [ 529.334255][ T6379] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 529.334282][ T6379] usb 2-1: config 0 has no interface number 0 [ 529.334324][ T6379] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 529.334349][ T6379] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 529.337073][ T6379] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 529.337101][ T6379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.337122][ T6379] usb 2-1: Product: syz [ 529.337137][ T6379] usb 2-1: Manufacturer: syz [ 529.337151][ T6379] usb 2-1: SerialNumber: syz [ 529.354021][ T6379] usb 2-1: config 0 descriptor?? [ 529.355161][ T4709] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 529.372333][T11961] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 529.372502][T11961] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 529.653346][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.671464][T11961] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 529.671765][T11961] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 529.681498][ T4709] usb 1-1: Using ep0 maxpacket: 16 [ 529.684907][ T4709] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 529.684933][ T4709] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 529.685005][ T4709] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 529.685027][ T4709] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 529.686759][ T4709] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 529.686785][ T4709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 529.686804][ T4709] usb 1-1: SerialNumber: syz [ 530.491784][ T4709] cdc_acm 1-1:1.0: skipping garbage [ 530.505614][ T4709] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 530.679619][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.704913][ T6379] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 530.704944][ T6379] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 530.705233][ T6379] asix 2-1:0.251: probe with driver asix failed with error -71 [ 530.728689][ T9] usb 1-1: USB disconnect, device number 58 [ 530.741827][ T6379] usb 2-1: USB disconnect, device number 41 [ 531.673323][T11986] Invalid argument reading file caps for ./file0 [ 531.743950][ T4709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.861706][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.671832][ T6379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.961488][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.232371][T12010] program syz.1.2059 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 534.341484][ T6379] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 534.440472][ T7439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.581636][ T6379] usb 4-1: Using ep0 maxpacket: 8 [ 535.417304][ T6379] usb 4-1: config 83 has an invalid interface number: 110 but max is 2 [ 535.417335][ T6379] usb 4-1: config 83 has an invalid interface number: 15 but max is 2 [ 535.417355][ T6379] usb 4-1: config 83 has an invalid interface number: 211 but max is 2 [ 535.417376][ T6379] usb 4-1: config 83 has no interface number 0 [ 535.417393][ T6379] usb 4-1: config 83 has no interface number 1 [ 535.417417][ T6379] usb 4-1: config 83 has no interface number 2 [ 535.417486][ T6379] usb 4-1: config 83 interface 110 altsetting 9 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 535.417516][ T6379] usb 4-1: config 83 interface 110 altsetting 9 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 535.417544][ T6379] usb 4-1: config 83 interface 110 altsetting 9 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 535.417572][ T6379] usb 4-1: config 83 interface 110 altsetting 9 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 535.417600][ T6379] usb 4-1: config 83 interface 110 altsetting 9 bulk endpoint 0xD has invalid maxpacket 1023 [ 535.417625][ T6379] usb 4-1: config 83 interface 110 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 535.417649][ T6379] usb 4-1: config 83 interface 110 altsetting 9 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 535.417677][ T6379] usb 4-1: config 83 interface 110 altsetting 9 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 535.417703][ T6379] usb 4-1: config 83 interface 110 altsetting 9 has an endpoint descriptor with address 0x1A, changing to 0xA [ 535.417730][ T6379] usb 4-1: config 83 interface 110 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 535.417752][ T6379] usb 4-1: config 83 interface 110 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 535.417775][ T6379] usb 4-1: config 83 interface 110 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 535.417811][ T6379] usb 4-1: config 83 interface 15 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 535.417835][ T6379] usb 4-1: config 83 interface 15 altsetting 9 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 535.417860][ T6379] usb 4-1: config 83 interface 15 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 535.417896][ T6379] usb 4-1: config 83 interface 211 altsetting 11 has a duplicate endpoint with address 0xF, skipping [ 535.417921][ T6379] usb 4-1: config 83 interface 211 altsetting 11 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 535.417948][ T6379] usb 4-1: config 83 interface 211 altsetting 11 endpoint 0x1 has an invalid bInterval 235, changing to 11 [ 535.417975][ T6379] usb 4-1: config 83 interface 110 has no altsetting 0 [ 535.417993][ T6379] usb 4-1: config 83 interface 15 has no altsetting 0 [ 535.418009][ T6379] usb 4-1: config 83 interface 211 has no altsetting 0 [ 535.425484][ T6379] usb 4-1: Dual-Role OTG device on HNP port [ 535.425800][ T6379] usb 4-1: New USB device found, idVendor=19d2, idProduct=ff75, bcdDevice= d.97 [ 535.425825][ T6379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.425846][ T6379] usb 4-1: Product: 島ۃ꿐羗苄⻧뭐኱䟯괰鹼꺿ᨥ㴺흄圐鲛㹼큸酭텴抧伝᳥ꁱ潽̤䷸㫩꿻⬜᩽黅斋ꨴᩜቆ푶驫㰚竜﹪ꡌ鳄솘IJ쐏㪈셬ﺰ⏗厴炊ꏒ갸臮䊵뉯圅욎瘙 ✜許Ñᕮ쩋敬旓嶚쥧᠃乱⠸ŠΗ奃㤌ﱌ崲豾鰉ㇰ觟⹐囹購㽵ᵂ⒁䖙횫㞭雿⍚♑㙹댽Ϋ㶝츊䄟ꩍဒ꾈椆즑 [ 535.425880][ T6379] usb 4-1: Manufacturer: 椟ğέﮣଢ଼⯩옞滴ꀦ怭촐捘耹㹺뽐뙾ዢ⍹ﶗᾊ灸࣊ [ 535.425898][ T6379] usb 4-1: SerialNumber: 줷௧⭥स沨凛ʅ [ 535.473740][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.495357][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 535.495374][ T37] audit: type=1326 audit(1772619978.355:4934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12023 comm="syz.4.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6524edc799 code=0x7ffc0000 [ 535.495417][ T37] audit: type=1326 audit(1772619978.355:4935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12023 comm="syz.4.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6524edc799 code=0x7ffc0000 [ 535.496836][ T37] audit: type=1326 audit(1772619978.355:4936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12023 comm="syz.4.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f6524edc799 code=0x7ffc0000 [ 535.497578][ T37] audit: type=1326 audit(1772619978.355:4937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12023 comm="syz.4.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6524edc799 code=0x7ffc0000 [ 535.497621][ T37] audit: type=1326 audit(1772619978.355:4938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12023 comm="syz.4.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6524edc799 code=0x7ffc0000 [ 535.497664][ T37] audit: type=1326 audit(1772619978.355:4939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12023 comm="syz.4.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6524edc799 code=0x7ffc0000 [ 535.503088][ T37] audit: type=1326 audit(1772619978.355:4940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12023 comm="syz.4.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6524edc799 code=0x7ffc0000 [ 535.503131][ T37] audit: type=1326 audit(1772619978.355:4941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12023 comm="syz.4.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6524edc799 code=0x7ffc0000 [ 535.503172][ T37] audit: type=1326 audit(1772619978.355:4942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12023 comm="syz.4.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6524edc799 code=0x7ffc0000 [ 535.503214][ T37] audit: type=1326 audit(1772619978.355:4943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12023 comm="syz.4.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6524edc799 code=0x7ffc0000 [ 536.091937][ T808] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 536.408341][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 536.408376][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1160, setting to 1024 [ 536.408403][ T808] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 536.408446][ T808] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 536.408469][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.424599][ T808] usb 5-1: config 0 descriptor?? [ 536.427931][T12026] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 536.575733][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.711473][ T1244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.711783][ T6379] usb 4-1: can't set config #83, error -71 [ 536.830318][T12039] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request [ 536.941481][ T6379] usb 4-1: USB disconnect, device number 61 [ 536.968777][ T808] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 537.336310][T12045] nvme_fabrics: missing parameter 'transport=%s' [ 537.336328][T12045] nvme_fabrics: missing parameter 'nqn=%s' [ 537.537387][T12056] overlayfs: conflicting options: userxattr,metacopy=on [ 537.882768][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.923158][ T6379] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 538.107750][ T6379] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 538.107873][ T6379] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 538.107902][ T6379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 538.107928][ T6379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 538.107987][ T6379] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 538.108013][ T6379] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 538.108026][ T6379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.121211][ T6379] usb 4-1: config 0 descriptor?? [ 538.463639][ T9] usb 5-1: reset high-speed USB device number 58 using dummy_hcd [ 538.816884][ T6379] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 538.835091][ T9] usb 5-1: device descriptor read/64, error -32 [ 538.839242][ T6379] plantronics 0003:047F:FFFF.0006: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 539.202333][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.778862][ T7439] usb 4-1: USB disconnect, device number 62 [ 539.804667][ T4709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.922230][T12077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2077'. [ 540.020454][T12073] loop6: detected capacity change from 0 to 7 [ 540.092573][ C1] blk_print_req_error: 10 callbacks suppressed [ 540.092595][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 540.092625][ C1] buffer_io_error: 10 callbacks suppressed [ 540.092636][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 540.105042][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 540.106013][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 540.122177][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 540.122212][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 540.279313][ T7439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.288269][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 540.288359][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 540.290752][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 540.290801][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 540.303398][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 540.303466][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 540.309746][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 540.309811][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 540.311131][T12073] ldm_validate_partition_table(): Disk read failed. [ 540.326111][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 540.326199][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 540.339487][T12077] vlan2: entered promiscuous mode [ 540.374363][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 540.374400][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 540.378646][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 540.378913][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 540.421737][T12073] Dev loop6: unable to read RDB block 0 [ 540.466360][T12073] loop6: unable to read partition table [ 540.470755][T12073] loop6: partition table beyond EOD, truncated [ 540.470966][T12073] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 540.538179][ T5873] usb 5-1: USB disconnect, device number 58 [ 541.483211][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.483275][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.522895][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.589118][T12074] fido_id[12074]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 543.408939][ T6379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.557203][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.745295][T12098] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request [ 544.235450][T12102] Invalid argument reading file caps for ./file0 [ 544.642541][ T7439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.181515][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.267257][ T5113] Bluetooth: Wrong link type (-22) [ 546.311490][ T808] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 546.362087][T12117] netlink: 'syz.1.2093': attribute type 3 has an invalid length. [ 546.362109][T12117] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2093'. [ 546.431677][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.461430][ T808] usb 5-1: Using ep0 maxpacket: 32 [ 546.468976][ T808] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 546.469006][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.469027][ T808] usb 5-1: Product: syz [ 546.469042][ T808] usb 5-1: Manufacturer: syz [ 546.469056][ T808] usb 5-1: SerialNumber: syz [ 546.483491][ T808] usb 5-1: config 0 descriptor?? [ 546.490928][ T808] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 546.581441][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 546.734840][ T9] usb 3-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x24, changing to 0x4 [ 546.734877][ T9] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid wMaxPacketSize 0 [ 546.734914][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 546.772706][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 546.772738][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 546.772758][ T9] usb 3-1: Product: syz [ 546.772772][ T9] usb 3-1: Manufacturer: syz [ 546.772786][ T9] usb 3-1: SerialNumber: syz [ 546.815498][ T9] usb 3-1: config 0 descriptor?? [ 546.829505][ T9] usb 3-1: selecting invalid altsetting 0 [ 546.934318][ T37] kauditd_printk_skb: 41 callbacks suppressed [ 546.934336][ T37] audit: type=1326 audit(1772619989.795:4985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12110 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6524edc799 code=0x7ffc0000 [ 546.935518][ T37] audit: type=1326 audit(1772619989.795:4986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12110 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6524edc799 code=0x7ffc0000 [ 546.939145][ T37] audit: type=1326 audit(1772619989.795:4987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12110 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f6524edc799 code=0x7ffc0000 [ 546.939500][ T37] audit: type=1326 audit(1772619989.795:4988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12110 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6524edc799 code=0x7ffc0000 [ 546.945011][ T37] audit: type=1326 audit(1772619989.795:4989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12110 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6524edc799 code=0x7ffc0000 [ 546.946743][ T37] audit: type=1326 audit(1772619989.805:4990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12110 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6524edc42b code=0x7ffc0000 [ 546.948424][ T37] audit: type=1326 audit(1772619989.805:4991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12110 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6524edc42b code=0x7ffc0000 [ 546.951752][ T37] audit: type=1326 audit(1772619989.815:4992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12110 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6524e9cfce code=0x7ffc0000 [ 547.123055][T12121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.140374][T12121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.154543][ T37] audit: type=1326 audit(1772619990.015:4993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12110 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6524edc799 code=0x7ffc0000 [ 547.155118][ T37] audit: type=1326 audit(1772619990.015:4994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12110 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6524edc799 code=0x7ffc0000 [ 547.189126][ T5853] usb 3-1: USB disconnect, device number 39 [ 547.255271][ T5888] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 547.393111][ T7439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.401510][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 547.403970][ T5888] usb 1-1: unable to get BOS descriptor or descriptor too short [ 547.404116][ T5888] usb 1-1: no configurations [ 547.404128][ T5888] usb 1-1: can't read configurations, error -22 [ 547.543106][ T5888] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 547.554434][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.692001][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 547.695921][ T5888] usb 1-1: unable to get BOS descriptor or descriptor too short [ 547.696056][ T5888] usb 1-1: no configurations [ 547.696071][ T5888] usb 1-1: can't read configurations, error -22 [ 547.697083][ T5888] usb usb1-port1: attempt power cycle [ 548.704825][T12146] Invalid argument reading file caps for ./file0 [ 548.759820][ T808] gspca_ov534_9: reg_r err -110 [ 548.931514][ T1244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.146446][ T5888] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 549.162173][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 549.164423][ T5888] usb 1-1: unable to get BOS descriptor or descriptor too short [ 549.164503][ T5888] usb 1-1: no configurations [ 549.164514][ T5888] usb 1-1: can't read configurations, error -22 [ 549.231514][ T808] gspca_ov534_9: Unknown sensor 0000 [ 549.231608][ T808] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 549.316694][T12150] netlink: 'syz.1.2100': attribute type 1 has an invalid length. [ 549.383797][ T5888] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 549.402217][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 549.404944][ T5888] usb 1-1: unable to get BOS descriptor or descriptor too short [ 549.405036][ T5888] usb 1-1: no configurations [ 549.405050][ T5888] usb 1-1: can't read configurations, error -22 [ 549.405704][ T5888] usb usb1-port1: unable to enumerate USB device [ 549.443556][T12150] bond0: entered promiscuous mode [ 549.443981][T12150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.794708][ T5113] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 550.412652][ T9] usb 5-1: USB disconnect, device number 59 [ 550.416240][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.787516][ T4709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.787834][ T4709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.790996][ T5873] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 550.817953][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.838281][ T6379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.838963][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.042738][ T5873] usb 2-1: config 6 has an invalid interface number: 20 but max is 0 [ 552.042769][ T5873] usb 2-1: config 6 has no interface number 0 [ 552.042799][ T5873] usb 2-1: config 6 interface 20 has no altsetting 0 [ 552.045503][ T5873] usb 2-1: New USB device found, idVendor=129b, idProduct=160c, bcdDevice=21.86 [ 552.045532][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.045554][ T5873] usb 2-1: Product: syz [ 552.045570][ T5873] usb 2-1: Manufacturer: syz [ 552.045586][ T5873] usb 2-1: SerialNumber: syz [ 552.149057][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.293802][ T5873] usb 2-1: Could not find all expected endpoints [ 552.308697][ T5873] ================================================================== [ 552.308777][ T5873] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 552.308871][ T5873] Read of size 8 at addr ffffc9000e301008 by task kworker/0:4/5873 [ 552.308888][ T5873] [ 552.308931][ T5873] CPU: 0 UID: 0 PID: 5873 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 552.308960][ T5873] Tainted: [L]=SOFTLOCKUP [ 552.308968][ T5873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 552.308982][ T5873] Workqueue: usb_hub_wq hub_event [ 552.309090][ T5873] Call Trace: [ 552.309099][ T5873] [ 552.309108][ T5873] dump_stack_lvl+0xe8/0x150 [ 552.309147][ T5873] print_report+0xba/0x230 [ 552.309182][ T5873] ? __list_add_valid_or_report+0x4e/0x130 [ 552.309210][ T5873] kasan_report+0x117/0x150 [ 552.309330][ T5873] ? __list_add_valid_or_report+0x4e/0x130 [ 552.309362][ T5873] __list_add_valid_or_report+0x4e/0x130 [ 552.309392][ T5873] kcov_remote_stop+0x457/0x680 [ 552.309418][ T5873] hub_event+0x49d8/0x4f60 [ 552.309467][ T5873] ? __pfx_hub_event+0x10/0x10 [ 552.309497][ T5873] ? process_scheduled_works+0xa25/0x1830 [ 552.309521][ T5873] ? process_scheduled_works+0xa25/0x1830 [ 552.309547][ T5873] process_scheduled_works+0xb02/0x1830 [ 552.309585][ T5873] ? __pfx_process_scheduled_works+0x10/0x10 [ 552.309613][ T5873] ? assign_work+0x3d5/0x5e0 [ 552.309639][ T5873] worker_thread+0xa50/0xfc0 [ 552.309677][ T5873] kthread+0x388/0x470 [ 552.309696][ T5873] ? __pfx_worker_thread+0x10/0x10 [ 552.309720][ T5873] ? __pfx_kthread+0x10/0x10 [ 552.309740][ T5873] ret_from_fork+0x51e/0xb90 [ 552.309768][ T5873] ? __pfx_ret_from_fork+0x10/0x10 [ 552.309792][ T5873] ? __switch_to+0xc7d/0x1450 [ 552.309817][ T5873] ? __pfx_kthread+0x10/0x10 [ 552.309837][ T5873] ret_from_fork_asm+0x1a/0x30 [ 552.309863][ T5873] [ 552.309871][ T5873] [ 552.309877][ T5873] The buggy address belongs to a vmalloc virtual mapping [ 552.309920][ T5873] Memory state around the buggy address: [ 552.309964][ T5873] ffffc9000e300f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 552.309978][ T5873] ffffc9000e300f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 552.309991][ T5873] >ffffc9000e301000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 552.310001][ T5873] ^ [ 552.310012][ T5873] ffffc9000e301080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 552.310025][ T5873] ffffc9000e301100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 552.310035][ T5873] ================================================================== [ 552.310055][ T5873] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 552.310072][ T5873] CPU: 0 UID: 0 PID: 5873 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 552.310099][ T5873] Tainted: [L]=SOFTLOCKUP [ 552.310106][ T5873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 552.310120][ T5873] Workqueue: usb_hub_wq hub_event [ 552.310152][ T5873] Call Trace: [ 552.310159][ T5873] [ 552.310168][ T5873] vpanic+0x56c/0xa60 [ 552.310197][ T5873] ? __pfx_vpanic+0x10/0x10 [ 552.310228][ T5873] panic+0xc5/0xd0 [ 552.310254][ T5873] ? __pfx_panic+0x10/0x10 [ 552.310281][ T5873] ? __list_add_valid_or_report+0x4e/0x130 [ 552.310308][ T5873] ? rcu_is_watching+0x15/0xb0 [ 552.310333][ T5873] ? __list_add_valid_or_report+0x4e/0x130 [ 552.310360][ T5873] check_panic_on_warn+0x89/0xb0 [ 552.310382][ T5873] ? __list_add_valid_or_report+0x4e/0x130 [ 552.310409][ T5873] end_report+0x73/0x180 [ 552.310436][ T5873] ? __list_add_valid_or_report+0x4e/0x130 [ 552.310463][ T5873] kasan_report+0x128/0x150 [ 552.310492][ T5873] ? __list_add_valid_or_report+0x4e/0x130 [ 552.310522][ T5873] __list_add_valid_or_report+0x4e/0x130 [ 552.310551][ T5873] kcov_remote_stop+0x457/0x680 [ 552.310575][ T5873] hub_event+0x49d8/0x4f60 [ 552.310624][ T5873] ? __pfx_hub_event+0x10/0x10 [ 552.310653][ T5873] ? process_scheduled_works+0xa25/0x1830 [ 552.310678][ T5873] ? process_scheduled_works+0xa25/0x1830 [ 552.310703][ T5873] process_scheduled_works+0xb02/0x1830 [ 552.310741][ T5873] ? __pfx_process_scheduled_works+0x10/0x10 [ 552.310769][ T5873] ? assign_work+0x3d5/0x5e0 [ 552.310795][ T5873] worker_thread+0xa50/0xfc0 [ 552.310834][ T5873] kthread+0x388/0x470 [ 552.310853][ T5873] ? __pfx_worker_thread+0x10/0x10 [ 552.310879][ T5873] ? __pfx_kthread+0x10/0x10 [ 552.310899][ T5873] ret_from_fork+0x51e/0xb90 [ 552.310926][ T5873] ? __pfx_ret_from_fork+0x10/0x10 [ 552.310951][ T5873] ? __switch_to+0xc7d/0x1450 [ 552.310975][ T5873] ? __pfx_kthread+0x10/0x10 [ 552.310996][ T5873] ret_from_fork_asm+0x1a/0x30 [ 552.311022][ T5873] [ 552.311285][ T5873] Kernel Offset: disabled