last executing test programs: 8.499381207s ago: executing program 0 (id=2021): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r0, 0x4068aea3, &(0x7f00000000c0)={0xc9, 0x0, 0xc}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x100) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002382, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r5 = syz_open_dev$amidi(&(0x7f0000000300), 0x2, 0x680080) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000540)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003800)=@delchain={0x13e4, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0xd}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x6}}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_u32={{0x8}, {0x138c, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x1, 0x5}}, @TCA_U32_SEL={0x784, 0x5, {0xb, 0x6, 0x4, 0x3, 0x7fff, 0x80, 0x2, 0x3, [{0x5, 0x7fff, 0x709, 0x9}, {0x3, 0x8, 0x6c4b, 0x9dd9}, {0xfffffff9, 0xfffffffa, 0x7, 0x80}, {0x2, 0x7, 0xcc, 0x7fff}, {0xa7, 0xd, 0x72fcaf19, 0x1}, {0x9, 0x5, 0x941, 0x3}, {0x2, 0xe2, 0xfffffffd, 0xfffffffe}, {0xb, 0x4, 0x9, 0x3e42c516}, {0x2, 0x2, 0xe9c, 0x2}, {0x8, 0x9, 0x10, 0xc2c597be}, {0x8, 0x0, 0x1000, 0x8}, {0x0, 0x8, 0x2, 0xffffffff}, {0x9, 0x401, 0x2, 0xc}, {0x200, 0x0, 0xc6, 0xd73}, {0x7, 0x5, 0x4, 0x5}, {0x80000000, 0x1ff, 0x3, 0x7}, {0x5a, 0x83}, {0x5, 0x40, 0x9, 0x5}, {0x3, 0x3, 0x2906, 0x2}, {0x8, 0x60, 0xf2, 0x2}, {0x100, 0x6, 0x2, 0x7}, {0x18c, 0x1, 0xfff, 0x4}, {0x1ff, 0x5, 0x8, 0x80}, {0x200, 0x81, 0x1dc, 0x3}, {0x0, 0x6, 0x32, 0xb15}, {0xff, 0x42a, 0x5, 0xb}, {0x4, 0x6, 0x9, 0x6}, {0x9, 0x6372, 0x463, 0x4e}, {0x7ff, 0x2, 0x9, 0x8}, {0xcf, 0x0, 0xa07, 0x61}, {0x3, 0x8, 0x46622a1b, 0x9}, {0x6, 0xfffffff8, 0x10, 0xeee5}, {0x8, 0x0, 0x1, 0x7b}, {0x9, 0x5, 0x0, 0x2}, {0x0, 0x9, 0x2, 0x7f}, {0x4, 0x7, 0x40, 0x1bd4}, {0xfffffff8, 0x3ff, 0x6, 0x3}, {0x0, 0x0, 0x0, 0xc}, {0xc8ad, 0x10000, 0x8, 0x8}, {0xb, 0xffffffff, 0x9, 0x4}, {0x5, 0x1, 0x6, 0x9a}, {0x8, 0xffffffcc, 0x4, 0x5}, {0x3, 0x0, 0xfffffa12, 0x12}, {0x0, 0x8, 0x48, 0x5}, {0x401, 0x1, 0x1, 0x7}, {0x6, 0x1, 0x80000001, 0x3}, {0x4, 0x28000000, 0x0, 0x7}, {0x10200, 0x3, 0x40, 0x7}, {0x7, 0x8, 0x9, 0x8}, {0x0, 0x8, 0x401, 0xcd61}, {0x100, 0x5, 0x8, 0xfff}, {0xb2, 0x10001, 0x0, 0x5}, {0x0, 0x2, 0xbf, 0x8}, {0x5, 0x1000, 0xfffffff7, 0x9}, {0x2, 0x1, 0x74, 0x3}, {0x5, 0x6, 0x1, 0xc4}, {0x0, 0x0, 0x4, 0x4}, {0x1, 0xf300, 0x6, 0x10000}, {0x1000, 0x3, 0x0, 0xb}, {0xe, 0xffffffff, 0x9, 0x1}, {0x6, 0xf, 0x334, 0xd73}, {0x8, 0x6a2, 0xfd, 0x7}, {0x4, 0x9, 0x5, 0x1ff}, {0x6, 0x700, 0xfffffa46, 0x10}, {0x8, 0x2, 0x1, 0x3}, {0x3, 0x2, 0x47, 0x9}, {0x1a7, 0x2, 0x9051, 0x7}, {0x312, 0x4, 0x8, 0x9}, {0x5, 0x5e, 0x8001, 0x2d725db8}, {0x9, 0x1, 0x7187, 0x1}, {0x9, 0x1ff, 0x7, 0xd1}, {0xb22, 0xfffffffb, 0x1, 0x7f}, {0x2, 0x2, 0x7f, 0x10000}, {0xffffcc75, 0x0, 0x0, 0xa5}, {0x4, 0x0, 0x7419c20e, 0x5}, {0x5, 0x4, 0x5}, {0x40, 0xfffffff7, 0x6, 0x6}, {0x3, 0xb5, 0x1, 0x7}, {0xffffffff, 0x9, 0x401, 0x1}, {0x7, 0x9, 0x2, 0x4}, {0x5c9, 0x8001, 0x2c, 0x7}, {0x57, 0x9, 0xfffffffc}, {0x1000, 0x10, 0x3, 0xbb9}, {0x10, 0xc, 0x8, 0x5}, {0x9, 0x5, 0x4, 0xffffffff}, {0x0, 0x9421, 0xd8, 0x8}, {0x8, 0x100, 0x10, 0xff}, {0x4, 0x1, 0x3, 0x9}, {0xfffffff5, 0x4, 0x7, 0x2}, {0x4, 0x7, 0x7ff, 0x6}, {0x4, 0x6, 0x5, 0x800}, {0xd, 0x0, 0xe5, 0x6}, {0xffffff80, 0xcc5c, 0x101, 0x8a}, {0x3, 0x1ff, 0x5, 0x9}, {0x4, 0x2, 0xaf, 0x8}, {0x7fffffff, 0x4c6, 0x7, 0x763}, {0xa1c, 0x3, 0x4}, {0x0, 0x3d0dc06f, 0x2, 0x2}, {0x7, 0x3, 0xb5, 0x6}, {0x1d5, 0x7f, 0x6c62, 0x2}, {0x0, 0x1, 0x4, 0x7fffffff}, {0xe604, 0x1, 0x5, 0x95a5}, {0x6, 0x8, 0x7fffffff, 0xffffffff}, {0x3, 0x5371, 0x6, 0x4}, {0x100, 0x7ff, 0xfffffffd, 0x7b8}, {0x612a, 0x4dfc, 0x3, 0x3}, {0x5, 0x4, 0x10, 0xfffffffc}, {0x2, 0x4, 0xfffffff7, 0x4}, {0x0, 0x5, 0x0, 0x8}, {0x0, 0xf, 0xdf58, 0x4}, {0x9, 0xe7a, 0x9, 0x80000000}, {0x4, 0x8, 0x0, 0x2}, {0x6, 0xad, 0x9, 0x59}, {0xff, 0xffffffa4, 0x6, 0x89}, {0x4, 0x3, 0x4, 0x8}, {0x6, 0x1, 0x7f, 0xfffffffd}, {0x7fff, 0x9, 0xae30, 0x4}, {0x2, 0x7f, 0x26059204, 0x9}, {0x233, 0x7d, 0x8, 0x66b34432}]}}, @TCA_U32_HASH={0x8, 0x2, 0x8}, @TCA_U32_LINK={0x8, 0x3, 0x81}, @TCA_U32_LINK={0x8, 0x3, 0x80000000}, @TCA_U32_LINK={0x8, 0x3, 0x7ff}, @TCA_U32_HASH={0x8, 0x2, 0x8}, @TCA_U32_SEL={0x684, 0x5, {0xe, 0xc, 0x2, 0x4, 0x5, 0x7, 0x9, 0xa39, [{0x8, 0x24000}, {0x1, 0x80000000, 0x4, 0x7}, {0x6647, 0x0, 0x6, 0x1}, {0x8, 0x200, 0x7, 0x1}, {0x1, 0x0, 0x7, 0x9}, {0x709, 0x9, 0xb, 0x2}, {0x0, 0x7, 0x6, 0x5}, {0x4, 0x6, 0xe, 0x3}, {0x8, 0x1, 0x0, 0x5cc}, {0x3, 0x2, 0xc78, 0x9}, {0xe80, 0x6, 0x3, 0x7}, {0xcc0, 0x8, 0x7, 0x3}, {0x5, 0x4, 0x2, 0x8}, {0x8001, 0x4, 0x8, 0x5}, {0x0, 0x3, 0x0, 0x2}, {0xa, 0x3d7, 0x7, 0x7}, {0x2, 0xbdbb, 0x3, 0x4}, {0x2, 0x4, 0x81, 0xffffffff}, {0x2, 0x81, 0x6, 0x5}, {0x5, 0x6be, 0x1ff, 0xa}, {0x4, 0xffff, 0x14, 0x79}, {0xffff, 0x3, 0x10, 0x3}, {0x7f, 0x80000000, 0x9, 0x8001}, {0xad1, 0x6, 0x1, 0x1}, {0x2, 0x401, 0x768, 0x4}, {0x6, 0x8000}, {0x2, 0x4, 0x4, 0x4}, {0x1, 0x3, 0x1ff, 0x9}, {0x6, 0x7, 0x6, 0x400}, {0x3, 0x41, 0x28d, 0x40}, {0x0, 0x18, 0x3, 0x9}, {0x8, 0x7f, 0x5, 0x7}, {0xc658, 0x7, 0x10}, {0x2, 0x7c3, 0x1ff, 0x78}, {0x5, 0x6, 0x3, 0x1}, {0x2, 0x5, 0x6, 0x1}, {0x8, 0x7, 0x9, 0x8}, {0x3, 0x6, 0x7, 0x101}, {0x8000, 0x3121, 0x1, 0x9}, {0x9, 0x0, 0x3, 0x1bd5}, {0x3, 0x40000000, 0x10}, {0xd335, 0x3, 0x45, 0x6}, {0x9, 0x7, 0x7, 0x5}, {0x3, 0xc, 0x1, 0x45}, {0xb, 0xfffffbff, 0x6, 0x36}, {0x4, 0x4, 0x4, 0x8}, {0x2, 0x4, 0x10000, 0x4}, {0x7, 0x1, 0x3da, 0x2}, {0xfffffff9, 0x1, 0x0, 0x3}, {0x26a5, 0xb149, 0x5a, 0x1}, {0x9, 0x5, 0x4, 0x1ff}, {0x5, 0x200, 0x5, 0x4}, {0x7, 0x9, 0x80, 0x10000}, {0x7fff, 0x9, 0xb52, 0x5}, {0xfffffd08, 0x537, 0x6, 0x3}, {0x9, 0x1ff, 0x80000000, 0x8}, {0x80000001, 0x10000, 0x6, 0xf}, {0x2, 0x4, 0x4, 0x9}, {0xb, 0x80000001, 0x0, 0x6}, {0x4, 0x30, 0x8, 0x1}, {0x6a20, 0x0, 0x2, 0x9}, {0x4, 0x2, 0x1, 0x4}, {0x0, 0x2, 0x40, 0x3}, {0x3, 0x1, 0xfff}, {0x200, 0xffff0001, 0x4, 0xfffffff7}, {0x3, 0x7, 0x40, 0x4}, {0x6, 0x6, 0x5cc4c2f1}, {0x8, 0x5, 0x400, 0x101}, {0x4, 0xffffff86, 0xcace, 0x40}, {0x3, 0x4, 0x5, 0x8}, {0x8, 0x3, 0x5, 0x80}, {0x4, 0x3ff, 0x6, 0x84}, {0xb4, 0x4, 0x2}, {0x2f9d4527, 0xd, 0x4, 0x39}, {0x0, 0x1, 0x2, 0x1}, {0xe, 0x8a1e, 0x4, 0xfffffff8}, {0x9, 0x4, 0x4, 0x1}, {0x9e0, 0x6, 0x1ff, 0xfffffffc}, {0x6, 0x9, 0x7fffffff, 0x7}, {0x0, 0x4, 0x5, 0x8000}, {0x5, 0xd, 0x4}, {0x81, 0x0, 0x9, 0x7}, {0x7ff, 0x1, 0x9, 0xad1a}, {0x6, 0x2, 0x0, 0x6ea2}, {0x0, 0x3, 0x9, 0x40}, {0x400, 0x8, 0x4, 0x4}, {0xa, 0x5fa, 0xc1, 0x80000000}, {0x3, 0x9c2, 0xffff783d, 0xb}, {0x3, 0x5f205e76, 0x7, 0xfffffffc}, {0x1, 0xff, 0x2, 0x9}, {0x1, 0x2, 0xeaf}, {0x7, 0x2, 0xa, 0x81}, {0x7, 0x1ff, 0x0, 0x3}, {0x0, 0x8, 0x6, 0x5}, {0xffff, 0x0, 0xa902, 0x40}, {0x4, 0x7, 0x1, 0x9}, {0x8ac1, 0x1, 0x5, 0x1}, {0x7, 0x80000001, 0x400, 0x7}, {0x3, 0x9, 0x2, 0xa}, {0x4, 0x2e7, 0xfffffff8, 0x8000}, {0x4c1, 0x1000, 0x6, 0x7fffffff}, {0x4, 0x7ff, 0x8}, {0x9, 0x2, 0x5, 0x6}]}}, @TCA_U32_LINK={0x8, 0x3, 0x2}, @TCA_U32_ACT={0x548, 0x7, [@m_bpf={0x180, 0x8, 0x0, 0x0, {{0x8}, {0x98, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x3, 0x8, 0x4, 0x2}}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x1, 0x5, 0xfb, 0x7}, {0x10, 0xb6, 0x6, 0x7}, {0x400, 0x6, 0x17, 0x8001}]}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0xf800, 0x1, 0x8, 0x5}, {0x8, 0xb, 0x31, 0x100}, {0x2, 0x8, 0x7, 0x4}, {0x8, 0x5, 0x6, 0x267b}, {0x8001, 0xa, 0xf, 0x70000}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xc4, 0x6, "60a4114180aacad96e6f6b5f4c3fae7de2615efed596ff79434c75c3f44b1bfa531ccfdd05c7248e588cb3abe7ddae01930b7d0c577a9021b569c8782e755032a79602dce4b9026aec3c4e9f7387df08bfef5744b968aeec439a86a47ca3ba616eadabe92500d6e2d537eeea30e665c1b22baa2b845da33eaace62ac59644569f3fb5d8fe58fe3aeab78d1f6854f633a7766bc77c400d4c4982550e0c5594b0b5beb9fdb44b31fd82ba2abe23c471d23a57e808ff3dc5e9df09ac2516f81ec48"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0x98, 0x0, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x7fff, 0x8, 0x4, 0xfffffffe}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1203, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0xc, 0x5, 0x40, 0xfffffffe}}]}, {0x30, 0x6, "1b1b958dfbf365d7c06788cfe52d8a4157d33bcd7988a4db022b767bc234646935122605e200c2315b1f8ee3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x118, 0x1f, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x30}, @TCA_CT_PARMS={0x18, 0x1, {0x5, 0x40, 0x5, 0x5, 0x7}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}]}, {0xbe, 0x6, "06d293ad9da8e6df9d46cd257d604354f4d9b71b46fab3986dbf51111fa8b7baa477f5b5c2eb19f83bd85ae3a68029e1034aefebdfc61155bcf032f4dc510e11e6a8e1360721859bd25e7cbf9b1e1d70e44e56de2227d775c878bdce6214acd4c6c467cbe3f798e6eb710f49bc6c2d7f76568355eea005a6586b31623e5499e98d9782b8b0dbe7a2b0982aefbe0faa285e802e2059ffcf9f3723431d3c9bab8739d9808150d69e7947634f5ee61fe900f08b6f1f45febb4e77f0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x1e8, 0x16, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xa191, 0x7, 0x7}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x1, 0x1, 0x9, 0x5}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x6, 0x0, 0x3, 0xffffff31}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x20000000, 0x4, 0x4}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x0, 0xffffffffffffffff, 0x4cc, 0x3}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x800, 0x1, 0x9, 0x5}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x7, 0xffffffffffffffff, 0xff, 0x8eb}, 0x4}}]}, {0xdc, 0x6, "073abf0ebd9efd34a78928027dd7cce994448a487f6b8063cca93d0c1d94c8610073768f07b25ea0baa5bb7fc18fb537039d45dda869eb3a20ea2a7b4fc41432c844591e6874c7603190b1d5f181f409f6634fcb2cace4e7ab7d37b775546fbb4b1fbfc626a2b41f5b227caf15dbebc8ded49ad1a585e95eb808396b9367ca7f959f4c74b117d7347b9f067a8e2c9188b72eb9226932e66a9d9a42543fc6f57bea418a0561d183cf65e96967e947005296696e439afd25a0ea3a51b04621ee5c1468e9c5b2d5aafd1657bb9954c0d3d35a4c221e6f242ec2"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0x2c, 0x19, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x13e4}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000580)=""/89, 0x59}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x40045731, &(0x7f0000000000)) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) r8 = socket$tipc(0x1e, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) socket$tipc(0x1e, 0x2, 0x0) 8.498512409s ago: executing program 4 (id=2023): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = dup(r2) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) ioctl$PPPIOCCONNECT(r3, 0x40047435, &(0x7f00000002c0)=0x2) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f0000009140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) 8.391198261s ago: executing program 2 (id=2024): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) r1 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0xee00, 0x0, 0x80, 0xf7a1}, 0x9, 0x5, 0x0, 0x3, 0x0, 0x0, 0x2}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000280)={0x0, 0x3ff, 0xad}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000)=0x6, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000000280)=[{&(0x7f00000049c0)="a1ff7625c4a67c2ce177313091a4b00b3e712ed555f1048b5219c2cf3306a92b065bd032d8ac11ffc8b06e59114d18ae01df4ffb2d197eb38378b6dea654ab4f49181c289b9846e43d76c21a32e1b925b3d6dce97e6fe37e155ded5b0c6ced05822f60d0ec94122d9ab4a96570cd4c9ca110eebc05c2793c72a4e313982e5dad1aab78fd1eb8cd40542de760a28d3974ece27845393e6a4578f982c56ff1796ec3ce866cb177006cf4b89fe039b364ed7633ca797a48bebdaf7ea8a0595b148a640e8d403f73b26375914be9e51bcb5bf835657d64c45cfb952f9db296db04bcd4e30b095e4a970d7a5fb8e9f9a92f3b7c267aeac1244c6ae7ebdad9d465339204762dfaf3fdd484f48054998e18b8a5ad8331c7420279f2ee42dee0713c3a5abbf03bdf9683f7f87f9707f45f223056b1e77026106d31d4085f7dd6738f41d1d46569f829f110ea1064e79c917e5d938c4b3707a48bca817fdf4d1b0330d33e2855bc2c14cdc7e2285147e7023d00e5123dd23327ad39f4b9f534a2be6c5cbec27b993778131365058f5e6f578748edadd0e284e70d13c55a19ea550ab7e187f8655e504efb3e40388540f3038373f670aef1de1b9e2e48ffd5e9f853be143c2f88c5115d0d434e90b7028f069f8e049e3329b98891e1f71b46fbe47dac2b420ff8bdbd02318b103b54c85359030f570b5557a1f910256e98e05946818fb8bf1cfac965e4f5a8adc637f39c7a0e0d93c0e64fb085ec050f2021d5405f5483518b1f07195776eb1c8682a7d471f384db9199207fe5324c1fe211efff753582b833e9fa5f04608306444a57018ffd7e893002e81b24d09cbb321b8632582bbfff920370fbad20b7acf9b10fdfc0b43c12b0562b111d18591afbeb207aeeac690641e370abdf39ad01a4274e45f0d61a5d9e1177c651f6c697ddbb6e04c403d79106c9f87d1d2ef1503b1c341c36c4dd955ed54fdcc03279539d26e04c60f088f526d07fde722eccc9fca83b59c6a05bb64c1d44cad4d749b5f373cb9bbd644da9b01630487156d2352502a79e71b6201724883ef6fb6c77040abe193845d371d32592c20918f97d1a2637c192f9e57d2ff2e77344aea3b2582b6fd74cf78e9971a14d268e2438507ba16b0aba5b2baf7b87f09d6bddb471804b23343eaf75af58be9ca27eca7d40c77e9afae9a8a471fedeadd3bb8350ca6bf11f242b67c38f82005efcdb19f955903b87b4144b11d06c82c3cbb2fe2713a6efd892801bfa0ff702eb36c1941511d9b102df7f9d1f021beeb1098118100eb56022fdc2d531a8eec3080aa0b861e1d6fcc558ff83229663dd3dd19c08e8af71308938384d0a0306eb1a0164aa8714a2a5e40ee38a60d69b33f804a68cab2385be314bf9c5235f1d32e555bddee83c4f4451e323220652fb79929b1755851b2c4e0f58b255533d187d83d88cf23aacb0894bb21cbbb8c9e2811770dea847417cf0103014500d21acb7b8f9d051f1f243102efeddec869237a4cb07af2005306bc19c4f8866876dbf7344ae9f9d68c4add414778e41bfcdbbae163d9c8ef0ebd9a7d8e07b7861648ef9a813b8b12cfe91a2e4bb9e3a74565069500f82c71f0876b111c71369ce625b8c89dd2329e943992896ac0374a0d5a091226b1bf4e135f3eaa10254b520d73604e9100de19b175200b7248dc053bbd8f0ab232e71541d14f182f7b12a422128674e397ebdc094a9224068f8ec8a1cb35d162c1f7c03a2108dc65ffc8ff467177ea3a4e4e039acc8ad0d763bd0e081fd2fa9aca6b4a47f190bb256a827fa9858c5710fb84647d65749822c8f7633e89beecd5f99bf6c8e49d66a97120d44adf0b300f5e30d74103e242b69f7b4abc46ecafb82cda79aa7e5b6dccabc41392f424dd4137906f23a556e693ac13e879e9247b23baa0b146ccf6cee4cbc61b393f24d711f56950b0b1210696bda60f69057756cecc15b64852a007931b22cd3e6f89e90df33ba179aaae2bccb223e1849e94c29f5bad79b6a8fbc5dd55c7923f8943c33a0369835a8b38ee48aabf9261fb5e4d7a5935eab07087124e38b5050d6bb37ed863c27c7e5599ba69642c2fbaea3ec320137a6d0668481b4c184f3fb811f9e93d7c1348ddd54126c45fd1c920f56c88824bcf4eeee0deaaacf4c6c78ce4405394a6407957b7bdf63b2dacabd5e7695960e18a1f5b806e082ba7a997939d3b5ef310a21d30e332ee44e2273e3dfe0e9b7a7818e30f9cf6f70252f1a13c9f6531fb860b5e4eaec3799ffecc29335a9d4e9ec68fe221f8965c71b90147ca01c15203f2de4b8c4f61a1e0b07742b95150abe4fc79dd788fb22417dbbe782a3480f6e3d3eb34da79559fe571e38bf0a8ac3a53fff38ea835b47324532aaacd8bd2dfac892239c483fa334eb161c46dea7aa7acf2f26830e508b6f60030c5db5185ef78f56bf5d3ca9ed2dc31d00a7a03f0c466f4e5c303d976a62baff1025573b2dc9562a20e9698f1a2db83524c99c12410aafcba26981c7f615c1fb1df3c9143fd89606580c41efc50e37909f2851bff02968bcb925aa6dfdd614dc1cebe6c5c4ce15cbd9369fda46497ba704b62c97e9e10fad0dc3e39cf98de1dd17dafa5e848d9b88bb3bf8a7dce6abf50f9b11f8a000c56d0535fef59f8d4126e65bebfa1be4a232afd479690b915692c3fc178ee975b9fe9972019a61b231184c221b4816ffa15c3bad15ad278b383267abf06d43913ce5d95a325d7123ba99586801585fd71e46f2733ff2c581f384ba483f206f69a5d4a6906cb52deff04dcaaf392c18cad0653a32951eb9f649c0fa9db42a844ab9ebba44873c231fe0f0f1e6a03ecfeb792966f6da20533685f818590ea36422842dc58a7926ecef8a31581d5ed846e24047004a1d0fac81c0bb213ca9adebe56bf4b15f14b313a89a88e075e488ac776690839e7e45149418d7d8cb8fd2f8c505bb9b3fba208e07ce6ea386d5cb2ac0a2443beb17f6083f8afd702630c2e6a84a9076a949e351ac32186ddee01731ea65cd0381b0dd5851670ce445d1819029fd432868da5aebc60bef0bfdcfcd7e1a7fdad1a8a62f7fafd5a4fc2b030400bd81308d357c851d4cbb534631a2448dfcf2f2c9c34669f771107d2c8d12d6414b401c6812fca5b9e11207005a655540ae96898c6b8786d339f765785fc443ea68916d3cc32eb75f37b230439ee5c399c1896c3861dae13b7b3d19affb7163e30febb214ea52215299692fa5f0173c9e2cb5a8c90eca1c5ad806a67837c40853161267cb0e9ba97e0c85cc18d65407a47b3b2b51ed0901e0d7c69b2f80b5f0ce1bc6c2c0c135e8a8ce9429fc3006bc9c4eef26a505cfd44d473cf2383f9917d5d98c45aebdb30e0cca3ba8f0393a709a7caea39cb8990ef1893cd240bf9dd04099a61ef2adefaeb36c2e84f7ca0a9550a5f5d679c74220a3676e0fa53894b9af8dc88d9eb544a0bd608dec7ef78987919c463c6c85dc586bc942cbee57294244526af827c7b8e5f73998f7d818872ebbe37ef0f0e17c08360f73d60418e94ecafaac30fc8e06e8390452438894a8db438cc4cd1b5270554398691adc330c2955d5a762c66bbf4c04f6149582b154d03b0255dd2554dc17a3451d2378e51086a543015c3835c3f70c4a25d056b264ddd3237c4c99612d54a0c7cd7f69cd01d8525d66f670d92a2d20c0c7b782cfbf84db47452cb89be1891f2ec7ad830bd36bdf217cb5b11e2bbbc4d878950f9617dffa15218d90cbcc5f8fcc855de49ae6265506716003b16cadb78c111c4824474a48a7292abc70f30443cc430650869d035a5561901633e7d12871d511967b03bf7a52d10478b6ac4de0485efd13aeb9702fdc2dbde6b5682e059de1b0a9cf6e5a2caa206d7ad8a410365f457d3ca99a1858b826a758ca3b68cf42ff7fd3d4e567694ad57ed8a3bd85970fa94e6f8b98a998c4bc510397d78da2ffebaf4c7f77992648c870250dd5b6be157441239487951c7b1ebdf022f996f8b64d1d7ddd3a51343ccd8dc7bfbc973003b09e301bf64f456591b80fc7188d8b53f8101e4f919b9adbca9f584abb66a85eda76b3f333a394c6fa59160abd3322885e6d9e9a47729795c946c37b3a8593cb7ff1cdd49f6bf60c7cec9c2b754b6c14989e3439a28ba29031c34e0cb34c847d27419dfd1415650e6aeaebf1599cd2d8f5403657433a524a7c0695e508351865640d502f92d99807977fc12bc4b8171bf04f374e1e54ecde7fca757fc35ab74170226f47a0aff4d3c8121a6a86587d64e33c48463eeabe4d8f9f6e9aebdfcf3d52a5b8678d95f531d773341d447be624fb2745f9122a46df0128d7e0f04256e4cada0675c1bcec9041ef38def2ccef570c4c5aaac342799b6b0f9f6d2a30a66c8c5235672c054ce16dca1bcda7f69c82473832d9f63adb0a32ac0a7f1c5c25f56ed5442a78e771413e910a1796c05dbcf45c2807c46ea5e9a41fadf32261793facd752af20edb699f1017c867346d0b99bd5a432b2728f7359164dc98015133a94026c3512f4e90887a29c7939d30d4b35a9105c82f05dab3a2286cc7a79ca9a85794b0ac2235bce002e25c1a1cc0e91fb74a4680e8defb994284b8e8b53849d78d5e91e75745b5d3f827be12c7be7c95eb846b691e8571efd85830d6eca24c16b33c3e64a99401fdea5d3566c1451a54ee820bc2608e7c7365029e16a24c344220fd6ff694206739ce7de400ef5e0379574a975d0ee660cfdbcc7ddef292b35d448f6f4c31bfba042c3dadbd5f972a5eb5f261bce954f2160466ed9533f0545d1b6c3ca838ffe985c3644e20dbf5c10a4ba54bcc39e2f39b2649edfce55d5d1fe17f0af9de1eac4a79541a78a1b17c75d2ab48c00552a8426b9c1391ea44a8157ccf19a82f7d7202b69dd66560c680b4bb252fdd0acd0b3a7dfec58dfe132e7c2e89d440016b65704512d44009d0228072313937d5ab82415c3a9604635988d83c94943d305996ca63054c0d9f8671d3cac0e8baa17048d208d8f2e2eb1f80e0afbb55bccf7f7c109e976dda941a21a01a28a07209ce4bc26748bdb8c847ab5b39e17b395bf0f7f47f77ced9a823fb4935a5df5545621863e1166a29bc637505a04bc4925c4c22f1e17264e356c8e0f711c8f34de81698a40b05ec6baa437c44ba3c7b4b1c4c726949463b2543964016c17b0d6f5c96e00c13416342563a426eaab2f1679af2e7028ea4291abbeace11d58c2b4f2167c55d347026cd73087a4199391e1914c37974e41876930ba2791b989a6e8d45d020acd36e9fac37c01d7e18fdccae442ee0f44b2f783183d9e2643eaf062b2a5005b77b24550a579dcae0059d2348133f3aa26914a1da717ee346327fcfbb56378f282f3fad4d6ec32fb20a8e2208093208c2fbd06c9023cfc2db81a58384c29a231e48fb6f15674db27934dad4d2a7c6ae4ea4c352ca89a16752a570726408579a4a7928508411f1fb8897c78d269afb46009baf3931d82909509a1bb4d327de3c0b4a22595185a2efa433503d9ce1ea0472f1307cada0c4a85ad6b5feebc988bfd77be75ced6187d871143161918fc3c0ae79f74252a059b399b9421ff05e0bc2b2df0c831bbd7f3802a134c85d0edb7be19ad22d76549d672043faf5f76e06e97ddbc1bdaa936ff2cb9cd8be9076d97084f9df8487d542977d3f65e401219f6b91f8ca691364ca069147ba173e391c5d8ed0e9c3e349a8d449d69a8f0b859cf6bbd413ad8b5e6d38aabb81963e8cb68c1f198460055c27ef38c84a45b6059", 0x1000}], 0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x1, 0x2, 0x0, "8c5418d4ac3daae9b22b2f766036e21cb179215e3caecff103ddb7184b1b67bf", 0x2036315a}) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="120110038121e940e604915539b5010203010902240001000000000904000002e515bb000905eade807a00000009058802"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) 8.109779846s ago: executing program 4 (id=2025): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) clock_getres(0x3, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001600)=@newtfilter={0x1664, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x1634, 0x2, [@TCA_BASIC_ACT={0x1630, 0x3, [@m_bpf={0xf0, 0x1, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x64a, 0x10000000, 0x18, 0x74}}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x88, 0x6, "7d82e7c4d228c902c7639a4d7f83858b3446f667bc171e57d630b3ee7528188d4e60ee2bea6a949718e1497e0760bb68a0b98050f087faca106b570358f677255a6050197635c1bd3f7333e15105fbe87e3dff80994f20c1d73d510b2f58a669ed78ede83dc82d71994ae85f11a984c5d6bb49011b22acbd4d86aed004683c320a6398c7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0x80, 0x18, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x43}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x79dd}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x8001, 0x6, 0x7, 0x2}}]}, {0xc, 0x6, "6f02966184b29c84"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_connmark={0x1e8, 0x7, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x7ff, 0xc, 0x200, 0x3}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffff, 0xff, 0x0, 0x4, 0x9}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3b6, 0x7ff, 0x6, 0xc1b, 0x3}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2, 0x9, 0x4}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xffff, 0x3, 0x1}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x6, 0x8, 0x7, 0xff}, 0x800}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x1, 0x0, 0x3}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x0, 0x7, 0x101, 0xdb08}, 0x7}}]}, {0xd8, 0x6, "d3c4b7bd6625f320322924b73f703da7821008fcb44c39bb64f4a790ded4e50ed83014249a125ac10d7bad3b9472d0de0ba0e31629730f96f3408bcb0693e262970767543665ab8acd1c60eeac7d01a2d105c0319dae33751e742e666293fb6d3a345c045601ac7de3bc55e4d4f43928f98b0121ceab1308840334503decf149512c970641fcf6fa284664ff6293ca84f73764962e120214af6939e05f8dfaaac8db83f52e74341dd3ce93539defb62bebb4cc8d7e8fdffdccc1865fa5b5ecc3413df6689d46be81f3e29afe035604fef1703c6a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0xc4, 0x15, 0x0, 0x0, {{0xf}, {0x40, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7}]}, {0x56, 0x6, "de47c944b1d37dcf5fbb5890f5de09b239f1c4e86eb4588ae203576eb3f67755a6da2ecacdeaa2948307b7befc0c093f037ad9d306755f10c5cf545d02c94c8c13da7da3c23f2d277d3af87b6c60b6b9885a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_simple={0x98, 0x1a, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x11, 0x3, '/dev/net/tun\x00'}, @TCA_DEF_DATA={0x10, 0x3, '/dev/nullb0\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'multiq\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x9, 0x7, 0xf76, 0x10001}}, @TCA_DEF_DATA={0x7, 0x3, '\xdd)\x00'}]}, {0x1b, 0x6, "7e67919e3ce8698de3e8556cbc612974eca4f7fb2846ee"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_vlan={0x118, 0x19, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x2, 0x7, 0x1, 0x46}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xc5, 0x6, "a7cd36a9946774d75a303a6b4f3f41cff883fa2a181a942cd7fc883e663265a0b87b03c0de0189527e64c68055d00aa15b1f5e2ae8e78186344d9f5c549f8f2e2b45446bea680d96805108bdb55922cb17ac804e027ce1816d27dbe7b0de829520e4adf49bdb102825ef3c6413193e48c97437bc474f7436aa9e15dafcd0453c48929a1be65d3ce98480d7e76de3e8e747dcf9cb1b9761d7e6fc919318aa8eead7ca7605525f6579f880043a4f64bd9ad9b87a0a8a9f54e22d9b9352f361a36b70"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x1060, 0x14, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x1664}, 0x1, 0x0, 0x0, 0x14004880}, 0x2000d8d0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000064000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000208000140000000000900010073797a300000000008000a40000000021c0008800c00024000000000000000000c0001"], 0xac}}, 0x0) (async) syz_emit_ethernet(0x86, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa1a18ccacd4b98100000086dd60100000004c2f0000000000002000000000ffff7f000001ff02000000000000000000000000000100000800fcff"], 0x0) (async) sendto$inet(r0, &(0x7f00000002c0), 0x0, 0x2000c005, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) process_madvise(r7, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000001000)="7fe370", 0x3}, {&(0x7f0000001280)="0454c96113b0", 0x6}], 0x3, 0x10, 0x0) (async) io_setup(0x3, &(0x7f00000004c0)) r8 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r8) (async) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r9, 0x82, 0x0, 0x0) (async) read$char_usb(r10, 0x0, 0x0) (async) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r11, 0xffffffffffffffff, 0x0) 7.382910587s ago: executing program 4 (id=2030): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x300}, @NFTA_NG_DREG={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xffffffd9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x300}, @NFTA_NG_DREG={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xffffffd9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xae41684d857697dc, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xae41684d857697dc, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0x1000, 0xeeef0000, 0xdddd0000, 0xb000], 0xdb, 0xc}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0xa, 0xffffffffffffffff, 0x1}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0x10000000}) (async) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0x10000000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x2, 0x0, &(0x7f0000000100)=0x0) timer_delete(r4) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x37, 0x8000000000000006, 0x0, 0x40, 0x2000001, 0xffffffffffffffff, 0x2004cb, 0xfffffffffffffffc, 0xffffffffffffffff, 0x4, 0x2000000003, 0x0, 0x3, 0x0, 0x0, 0x2], 0xffff1000, 0x202}) r6 = openat$autofs(0xffffff9c, &(0x7f0000000140), 0xa000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b19a3640d219751284070102030109022b0002070000ac18563dd8399550bba2ef9521593300090400010079319c0009040000000202ff"], 0x0) (async) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b19a3640d219751284070102030109022b0002070000ac18563dd8399550bba2ef9521593300090400010079319c0009040000000202ff"], 0x0) 7.310836881s ago: executing program 0 (id=2031): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x187031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x80) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000080)=[{&(0x7f00000004c0)='|', 0x1}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc041}, 0x40000) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f00000001c0)="931879000d93da5821184e18d51b7df196a0ce6335af80a6fbaee96e7f783d222859eed6510662d63599a974a4bc61b428b4ebe953cb3da77f09ced2b57c58038fef82ab37659eccdd55884ca67767431b0a0f73b0371273940435737a62179e6287915780ea60dd359091a293a23ecea8f3329881110314c3b461e27ea3947260166dca9179a21ac847ace31e10eba7245b448b27764d27dd5c4d6492a791276902b9db63826855933d", 0xaa) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f00000020c0)=""/4103) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10, 0x0}, 0x20008000) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) futex(&(0x7f0000000000)=0x2, 0x3, 0x2, &(0x7f0000000040), &(0x7f00000000c0), 0x0) 7.014514393s ago: executing program 1 (id=2032): unshare(0x66000080) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9a, 0x47, 0xad, 0x20, 0x4b8, 0x202, 0x3046, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0xdb, 0xfc, 0x0, 0xc9, 0x4a, 0x1, 0xb}}]}}]}}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@setneightbl={0x24, 0x43, 0x1, 0x0, 0x0, {}, [@NDTA_NAME={0x10, 0x1, '$#*$//-:/}\x85\x00'}]}, 0x24}}, 0x0) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00') lseek(r1, 0x7, 0x0) 7.013701642s ago: executing program 3 (id=2033): socket$inet6(0xa, 0x200000000003, 0x87) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000040), 0x88041, 0x0) close(r0) syz_emit_ethernet(0x4e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa1586dd6003136c00188700fc0200000000000000000000000000fdff020000000000000000000000000001", @ANYRES64], 0x0) 6.836654952s ago: executing program 3 (id=2034): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000800)="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", 0x2de}, {0x0}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf188", 0x14}, {&(0x7f0000001740)="d85b30ac", 0x4}], 0x5, 0x0, 0x0, 0x900}}], 0x2, 0x0) 6.777206092s ago: executing program 4 (id=2035): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000000)=0xc) syz_clone(0xc0000, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x281c2, 0x120) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000180)={0x80, 0xffffffffffffffff, 0x1}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200001304000000000000000080f1000000", @ANYRES32=0x1, @ANYBLOB="04ffe109eea7e13506d74d65626446a424ff826c2b70827c58b611e5fd39402acd1b46c5d70214f99687a215c38c53abeb91008f1719969f34b89ec73938f54f8485b20c347da03611f81eac6b59e8d7a30adf", @ANYRES32=r3, @ANYRES32=r0], 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x44008) futex(&(0x7f0000000140)=0xfffffffc, 0x5, 0x0, 0x0, &(0x7f00000001c0), 0xfffcffff) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB="680000001200000328bd7000fedbdf25ac1414bb000000000000000000000000000004d602002b0014000d00e000000200000000000000000000000005001900ff00000024000900050000000000000009000000000000000c0000000000000003000000000000009e735d8da47408612e6cd542ea34a1320e19f1f169b7e82502b74327b8bb6c"], 0x68}, 0x1, 0x0, 0x0, 0x4000805}, 0x800) syz_usbip_server_init(0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'wg0\x00', &(0x7f0000000580)=@ethtool_flash={0x33, 0x1, './file0\x00'}}) fcntl$setlease(r1, 0x400, 0x1) fcntl$getown(r1, 0x9) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x14) 6.412489189s ago: executing program 3 (id=2036): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') statx(r1, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000540)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_VAPIC_ADDR(r4, 0xc008aec1, 0x0) r5 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000440)={0x10, &(0x7f0000000280)={0x40, 0x14, 0x4, "abefc7e5"}, 0x0, 0x0}) sigaltstack(&(0x7f0000000040)={0x0, 0x80000001, 0xffffffffffffff76}, 0x0) sigaltstack(0x0, &(0x7f0000000100)={0x0}) syz_usb_control_io(r5, 0x0, 0x0) 6.367977642s ago: executing program 2 (id=2037): set_mempolicy(0x2, &(0x7f00000000c0)=0x8, 0xf5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000069020000000000000000000000f6"]) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x22, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) 6.137981299s ago: executing program 0 (id=2038): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xf) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)={0x0, r1}) dup2(r1, r0) r2 = socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x2, 0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594ef"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="1055473f5b8201375148f99904cf39a77c4c5e0040ef6ae9bb0f645b40ff71d44e420fc3bae13d383009af1db85ca5214a0c4611580272c7817127fd88f7d8deecc9f70f4103c81810ad1cc85a7a98c815488cb18aecac8dc499ebefb56abcf1445cac692a6cbc224aa2071d0f9796a59c35198f5f84abb1f4319c9e9f17d21c90598f77f3aa2a41cea2a29548f7705a36f8a5fe040c77be49d26e17acc0608915f5b6f614aad8a8b9ad939b5efa18e09b0a461c4b1d56045bcda75988bcd97607154a0be6941023ff4d0bbb69bc06d07db7b354b2c38770c09054b4c9d6c1139e5005d62b1e06d8f3b39ff2502b6a", 0xef}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000006c0)="66e68d1d7a4bd11d2a9928654fe2ee5c3f8942161850c570dc189180dfa1408861b0a0cb05214d3c77f5ec4368be20d244e51ea207cef179dbb967443427d0718d7692e2ff9c17e81531e83ae40af5eb5d4956bad1131eafcdc789f880ff04af2d16d3885ee342f2ccca843f0bad05f9bece87d9bb6a63d9b60f7335a138a98c4f06db2798d160e810cc9b4572761ed72b162e7f476e80d921e1f257da05b7fe7706330d51d36f002df6002dc78c38cd1bf8a27fdb968ebb8c271266b563ab058a62c8bd5d95931fe7cc3f1c8dd599609ac6ca050354a5157514e165c43432e4ac372a75297e2450a6c175b4600a1493ab21e823d71edd0aa83cb60f5730bd64cced5bf5d67c8e2fc85fef35e3b43ac2a7e9a964a91495596c9db9cffd97d63fa10c63f26934d197f442945d9f36ffbd829e33a5e120ca923801c0c4bcaf91ac63108e4ebcc6468f93280d2822b956e98e48189a812dfd4996d5b45d400b3ba1624f3b84f6df705a21a1cec36806eb3a9f1c84be064afdebece1a12a1682c07e05db3353d1454f09e405f9f20fe7a1464d381f4ce41a030f8a3f34aa5f57d42d93acdf7e41d4b3ab5ae2d343057638c0f4353612b44d84c8c90446f56e8a02a69ba8b0fa58bbd691f3779dde7e04cd350a62456a46cf4965ab8b4c63be7e8d67c44d2dd635b38195aa74b5b57d5de654a8196e5a4ec1a57ba31bc4e003a77ca55b689fa5865f0227bcd200d0aef2f38bd0260d2174fdd7222f2df935af9a90f100c1fbe3f8a9f958ad67d99c0c16185eb30ba055ca93521fd1d737a401d694bc5ece142616ebf303bf01dcdc8f73262503d15314dc99c6fa2a21d985d3e8dabdcf1b6592e5524b28e3be3a03402e687b2ba56654d4bc504d72b221ae65a98e4dea3fe88adf538674e0d8250ae837540564247e3b22c3bf2ac24b492e1adf592ebde01b1fe9fb031940727a18b455433176e966b19160838073e3da54430a2566d7c7be95f6f73f51934e4451a27483c07422816b64bc948da167ad3f1627901d3ce58ade3ca7b85a3246d0bfd9dc55b97ef2cc7544b68ca3769ccb8fbb345b5d5bdb26c02ebec2d371a3488c6d3c74979dfde77b3b151b8e4ecf38b5335af77dee98e36bb7081cbfef6f49870a48fa2bb7cbc6fe379ebf6e6c8fcc9dd13ffac595de80cad4eee3f8e0478c97af166a3fdd46f2eb44f4f59c3f7510330c4cd8f2135fc62a916bc88f591957bd390eaa81a6797f0ea77bacb8c69d8e389b166d0a878f97cf88a653458f0610c1e5646610ec1de5c9aaa9e6be76a09de2b979e3b715f2733a0168525253d0736ce870c9e776d67a9c4de74599eef4d0ba24f0f7a681b26e5d9101baa42242a7425a2f44c5825b85c4dff3e22b3335785ad363f3899ba87652b1b4c578939b59bd27b76ede555c326ff840b6429a67f03017ae0ae9655e710e49f862e7854ae0d105f3f54f9392eddb0db3878bd8b799b7166fe20f404ef7403612a70e06ecadb7ba019002e033032a3a016dc74a3bd2080597b0bf78e5a1fcb2b93369e3224449fab794a2de0438cf8b7a698713a5278f3f2bbbc5a77dec794b461bb26e3f45bf2500d8a81921803b27688df8bc534e0657c9ffab43a15d78b8a0d4591f9f399b4eb475211628e46263dbc5251cc6ab11987920c5df0044fbb49eaca6c0537d2c55df9fe78969074fd4c7627c742c564754c22d9902dc6860ef980f295828f810e98d6b224be8074319e14f2d5744f00cece87c2e046ae665186668c204583f6191286957ad19e3981571de87c4dcc9739c80e62bbe717b1c6bfb59f7b51580a5855adf81d2cb0f026fcd79d5cb609e23db2b59cd175228e4d24c041bd91c093b2b9a305732c2ba5cfccba04875b32cc4de4a1ecce86b113fd2f25ba00e1bfbace45b512eb2455ae6b23f5caa06afb1007e5515f07e05c4668d4e4eda2a5c3195ccb4c359c28ff9278f66d56a81a7f5791a1d7ec641fc8c384344287c6706da594e52f5b6760aa09516780f41e8ec3c0ada48790bff97f3b95046d4a66ca95e5a2802b8fe0bd2ec88efaa3aec1cd18789792dd2b2474f9498ba9d57bc96cbe98f55fe44d41282eb0fdb9c50d6c6e66194275797f3b1e3b88fe96d26de346705d57053f9684cea34900eff25df63a23af9db75e07f4a2054e40168c332583748b1e466685c01390ec803b09447ec86d0a4957c0161334128a1042a719c1872a3f9521ff0dc299c1708d7b47837505276dc9f1f23cbffa8146c10c24333e4cf70537c4c2974281bda0a7f8935f607fe4b125aee44b68d2353a4df1426e2f5e780b7f374a5a9826be0d11915d92692c4144804aec304a8bacf303a3675db572f5eaf7aaa205ffa4427c639b00c72b83a0ee0f1ff116d9b1806534e4ae2f3632d3637c26eeb581037667f33bacee84b94389d86e4c8607cf84b37cf0b5ca92c6290ad8a51d6ebd3c88abb014895130fe5d1415954a9877670faa3b0b0f670750081af489d78ad1b96451b6bae9343a5df789d4f9118d96990e6e92ebba6e532e1cf90d97a5d69e9516f29ac63e4375eae7f9d7411ff6a386a99fd6113daec70e496b931019f4c4a3a8442825457c8e0087e8fe2cf4ef5470f01306e40777c9090b308050876d1e5e2412addef4a070fad420dd46278e8e5a4374505d880eb0b87a4d16c3a6f17829d26c27159eaf143940a5ce34d41bcfbaa4fb31d1e30b2429bff40e33406f6c66217ccfbda7feb8f83f33dfa997608ca0c83f9b995511a8eb3e7f33c422ec3b2f6feb992abf4e8a2152db48cd85e695dd49ef4cd8195f9447d2905514a3d8bf0761fda9da475de5022dbabcb081817e85f00cd0029c4fd1aea3e20934e0b20911705111bc0f1df5cb20a5bf8c2a877440f4f96623f54ffec043aa1a0089023ab5519d69369a8c2b6b96b48beab2da4b87dea2ac603207b03483ed49bb8e611ed237a759ab2e9a0d2d178be10c9f4513002ca6db0a8328b2fe6deefe2db389be07c9f102f931fdb1fcb898e7de587c0f13ac74293a021a23f585e27733cbf7a21f36c3af69a1f6d71db2c394e6d9ca358ab3e2bede3f50264e68d5d7cd42a6a5913b2276795558104b9789f5f0600059fdbcf278e3f0d63ba00d76f8a230d9f23a4160383ef8b5819d9c541e281f8bbe7069addceb98eeacf23cd21283281e1d53ea6b709a6a727bd58c62eb3154ee646bfa659111280cd0daed15655eb67135c10263a7e0c9c7c3729cb3020a5bca638986a545bfeb3550c92e9cdcae41ab9afab8e83513027a09425a1c08568680c1cf68de8e1f012d5244767f59a9596006d4338eb725b173061d48a982945405c82e7c72a2590225fa05481c15b897710e8761e351c43ecd86ba8842d80fab4a22bc665ceccd57952bcee5b6209da4e7012616373a677d88051bff6d33972a7f8e4bbf1ce4ed087905208955e3bedbae6dedcedc07f44abd60be3756f2dcaca71795a432167df12e611b8c17da7d6d7e6e8e006ac17d9471d11fd0dabd2020bf3435aea1cdb03db97e0bdaa327c52987b580dc90b37b8abd17eda7fb06f6aee7d8c25f1c4d63959eac2bc99a963b90c14495d8ca23491fd105001eccbefccf3321fe009e0cfcf272a2f1e1c07724e686f9c3751fdff50e6556a3a4776a5294d788d4da05c04e7296c1dbe2af30ac3f358823bd12a8d57cf62f7fff232feb3ac7f606d1138153758311ba0f51de63466d17387f9e3ea176f7f12abaf7a830400bc1f380d80757143d8dca64a2436101e60f7449cf8377598300c27371a0e367f07edfc8c2977c6f3dbc98f94918b1f84941b5e318b8037705961cbc6a6282f3febe9a84a9d69b2d0dbbcead2584b6565aaee196b73b587bb31b19b463e622e96c920af23994d387b8775702481e7917c2ce7b095e0b6fb704c730df7f89f18f5f1269738b6ef2cbb0fb80b38fc8499d547903e4d59592bba5ea33a5bf8af63bfabef18851be141f5b810277076eefd6c17d735e38ccf5a284004f560fe896b094f7537151fb68e3ab679385c70a8270b23b73405aa03ac0ee6c5e3ecde0959a93a182995e33d0e24dc11c955481d66c6098f87a78f45b2b4905ae6d015c3a3db9e69dedc55e19d6c7c12fb797a5e9ebdaf68aebb5fb19c11d7fe7e66cf8d9f1d3a57842d7de9494bbc78731dd1afa537ec4a26e8fe858ef755b05327bdd7cb7c067ce389571ca39711ade38c222f9f40276107de67e1558a3c8441175352ff07917053e838492ed977200dfe4f18b09fa92a8423c91126b9cd466b435df48f8a60e8d87fe3b03d8bc354086b32e65affd4ce1458b7fb9b03c6f22d7a65c74e0b4fa2d460b4396c12cc1664b703ce8749a78bf5c59cf4285e06b51ed34378f9f0af71c152be90aaf208feaf27dc5021e6625d3f434cd86160b991f9e8cbda97a59748a8f8dbe45c96d1a35e8d4f98156df297a5cbc9743b1e75ddfd9445151198e5e99967775f6cdde3af77ee43632b1278d6badbdca6c8f3d7b759711ea4ac164bfc080bc046da082f962872719281f89f7629afbad5b8ac42bc6ba51b845c24975a5b5ffe36ddc012f5a5710ef23e9df08e75c6746e8b22a9bc5d5d10262f5b5f606f8854d8242e67e2ce654e637060ffd60c4c1faee15fe59f57270c8697b88da6b6ad9b900401825cdafdce7d7823a5bf1964ff1b2197ed8e1bae93622645e87c18b2c169cb76bfb1c485c5cb2df9f9680e47153bf49ec3685da21a3265506a57af8f12d570b0d476d99fbbd5f426d76007a208ba01f76516f5a7c6f546120dfa95f53278937118c4c9f56d65b0df36d6950252069fbb390cff563cb357c15d0a1cc0ac0b69f32e9c4e73834281286f1bcc2636d187ade1d80f7578ae6d7b88afebda926ae07e6c0f13ca1a46afcfcd7f01b20e6c54c1ce1382077bca3bbb10c80b0cecc8f995bd0b11b3c3814a65b41e02eba5b1ea6e1bf9c5bb34b2cedd07ce6bcba812db0834a535d8bcaee4dfc30e1bce39f0eafb2ce5499ef2ed81abb784038a3569f99dd758bc29d7b2bd8402b48eb5322a8759b2d58498d59af97f9f89487081a2b33345d11a3dde33a24ea7f05b809317f407fb01c918d8c5d3be694c51479044146bbed066adbbcbd10e7bee7b78a0388e3df640b937934a5f550eb0dfea534645c44c6e81288e21f51ae121524df0cd7b5a64453f2fbcbc71ff820a364a3bbe186bd29ec40225c4fdff4d53cfb9b5d56970a94d7092ec7c333199316d8ab7e1c490ab9100ecc69995d0d8c7f337b2f4ca991065f8dfa5b1ec46187677dc976a0326642ca0d29f91382e52b694d58128e76e72bba057c8d41a304f4d86794a118ece1d93e8081e60c446b3c2aa47717005b2bf8e17547c68c42fdccc19db1414f91a915558ba3073e52121e033be5fee153c5942fed8ae33d655de5e138deb10eb9a4f5747938a1337e90e1550bcdf0dc45cefa32e2a640e8f01ae1678af58b7465be9ca66177c4926d394769970f572a3fa0b16f7733353835fb4319b1609a53a109ad13d88b40c6d05152715df0674de3353671d158ab467dd97f9d314b6bc433b0b29cb04fae9b56b6790524b862f5ddcd42f40de358a146756fce2e28e26853de683ec2b67e1a30b91a1d37644b8d829a6a039c7e20daca2ca6ebd25b04565e25ed95b66455591221cae79c9e336263d326482dd86f75296386f7740e0ea1c150bc12f23994afc8a4b1b73bd4ad2be70a62d0860b78cdc4df69e9c3cb152ef72c2d358319b2b3892aede7f284869d5c72d145cd4856c2ef6ea", 0x1000}, {&(0x7f00000003c0)="865983d3486bf6c15af9998a74e04ab83ed67e069314137b4558f13eb879e0f8", 0x20}], 0x2, &(0x7f00000020c0)=[{0x9c, 0x10b, 0x94, "43b3734133685804fdf4dd579800cedaef107b52c83fce25f0d7861343e7ce4090feece61f691323ad8c0d8e5d989781b9a723046da5fb482c020ecec3cea81fb7b8d8e38f9b9b1bac3bddfca9a0ba8076c737b1bb718b26bd8a7d249728c8c7e8d7278dc31cbbadf22ca0ca289d081722b654130400f9b488fca2f8dbf667a7a183f69fea08292f160000000000"}, {0x68, 0x115, 0x5, "6483d4b7be0c5c0992ff75034bb7a467893d4bc9a2dcd5beb85896439d9f72a358472fa9df4a15238d3026a89e52ee619b628b5a256d7305fae00844acabddb940c474d6b411fbe69b87ba962ee00fa95d32be6357a9f84c18"}, {0x48, 0x109, 0xe6e, "80898603ecbd9ab2d55540bd9f90c731373a730fc8c14a692102c0de7317aee0ce0ac8d9d8f98c842cf5dcf4e8cf6c38105f75d148dc98a1627d"}, {0x7c, 0x9e, 0x9, "8de3cc4cd9d150929b9bbed08cb53e527c4fb5bf87973172693668abf3f4a10301d821bca47f9e7fe4e5d876281cd49c32b6eb4d9bccebb7529b87414850a7bbfc43d70d378f30ebe37738090a3a6efcdca7ee2723d20e8794975f4ad93321f85274aa8e0082ef9f4db98ac19e76ac"}, {0x88, 0x10d, 0x8, "96bbb9a62a9e0f626901a71acffa4c5cb515e9d64e317cebffd8bbb3fde38772510926bb16924c8f3af3cee7fc65be9a81ac7e036e486dc8f68fe8c2bf957429e8d8fa5994cacda49b997b1d31dc0a9fa40062c15169d46dd587197af8549d77ca1f2aa5f8c69a5d45c899ed98cce91e16be8b5660bdf02b6abe50"}, {0x50, 0x10b, 0x1ff, "1f7151f72a3e7b09f94316d2e547e071fcf0bae2cef9d5951f03bd65aee76f7173d40226b37991a9c0290e2742141db6cf4c1c19f15baa7269d24b43bfc33e31b087"}, {0xb0, 0x10e, 0xe, "8034986cd1a9f7d9757c622d1a7f0185b106187ea3cb46411f104f06d4b61705e203d01d8234f5937ec3b5ed76619cd032d30256d30434b244de8001b3346188e7e14b44afa688d7e1f937779befb166b7061e4ef1e9583fdb1a50d42eb42ae6500bdaac288428ba2faa7656b3c9f23ff2e372d6211b6d6d801aebd0ef8f581fea5cdd2e9d96de394c64b5e53bf1d6565a4121d3329f7c8c86471af44a8136535c9874a7"}, {0xb4, 0x10c, 0x3, "b4b41439c4ea0d1962db85f6d73bba5fad3083ca56d41dcf23db7f476cf1865c73e78c2a9e4ab760b0263329601768ab0a190833088e775c02b465c10c725e014f80cf65cf5651893431288571267fa689c4bc4a7551ea371be0547c89e54c1cd1632c567f791b5d7466da828ca25005dc36f40bc7d2a370b6f67236f8c7d7f0009160495f955acdecd3fd7a60df4f7d1042913f8fa180674ed931530c552fa34725debc3b0302"}, {0x38, 0xff, 0x3ee, "4e442db2f3275a979a23de1a77a4461697c633980909d82eb12547a3d21e7206ad09a3ebbdedf0a13d95"}, {0x84, 0x84, 0x8, "63adc8021b23223888f224ba9684aae9f4de793bce9ea14b55329659b3f52174af3f46678453255430540bb93e95f27c5695b7b6618b2b4d75f65531596872cce3cddbb59e6d516bbb5822accf0289585573d455cd8f84785e07634b8bfb0c368562b7f0e9172797f0ec7bd0a6041207616bf7250d2f94"}, {0x128, 0x108, 0x2, "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"}, {0xc8, 0x10f, 0x2, "fc5d3c186f0efcc1aac770951d534af8ea6dd639587586510e1013582baef61d3b5a7c35d8d21659a48a101ff7ec9ed1c4061e93c27414c87b8f33c823d4ec85316b88a63e0891bca38a86622377c6ecb44e3119bd3676d1a1401008a66360620badfb22adf7acb0c77f2386421d2333132becdb1d6323f5b55f680eb9c548afb0b22766ce1307e767ea70d61340631c60899844debd11dcf4e0b85e793799cd0bcff0669fef21f2c6444f4d929d1ab24a235f63debfa67f569110cd"}, {0x84, 0x1, 0x8, "dd0b44b6f7c8811be61e375dec786f9cfb62498f2e57cf2fc27430f6a66940afe0828111002e34e5a96f0d700b4a016457a59a8bdc2de301fe13ccf86df3b40bd0edb2a3e67462d337f9f0cef451a339861e4b2daec8221158535d24371517f18a794f2095292a7193913c72214fb5020991c27135f8c6"}, {0x9c, 0x108, 0xfffffffb, "16905084e53daa86c29a5fa73526135ff069e937291ff0dc9545284ed3065568127fad5cb2284a124fb72c2dbb41ba0f37cd24434647f7985a07d1320c2fa0b9171a3f4ad2cdcb8766fe456db838a2651dfc938e470804fd382bd9988de97716b794a8a520dfdd5fbb473a19585fac68338683db46b1eb7b99acff3cd3b572fe0dfaee35d9180686ef1a84d1963f"}, {0x64, 0x117, 0x1, "ec26a58168c8ef2aea205dc2bf72c0b5a038c2210592d9be235689f49f42296b0131e9034eb8b48df9ebea70000daa0d014ade5559cca55ba2ac8360c53814248b3246ec4e00759f8e592a6f73e981ed71b16f300084c7"}, {0x190, 0xff, 0x0, "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"}], 0x9c4}}], 0x2, 0x8810) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0cc5605, &(0x7f0000000200)={0xa, @win={{0x0, 0x0, 0x31324d4e, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c00028005"], 0x84}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000150012800b0001006970766c616e00000400028708000500", @ANYRES32=r6], 0x44}}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r9, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 5.704513272s ago: executing program 1 (id=2039): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000014c0)=@newtfilter={0x40, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r3, {0x10}, {0xffff}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8003, 0xd}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x40) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) (fail_nth: 4) 5.231085915s ago: executing program 1 (id=2040): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000480)='\n', 0x1, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000440)={r0, r1, r0}, &(0x7f0000002380)=""/4102, 0x1060, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfd, 0x0, 0x7ffc0003}]}) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$unlink(0x9, r0, r2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0x0, @val=@tracing={0x0, 0x3}}, 0x1c) 4.239883725s ago: executing program 2 (id=2041): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'L'}]}]}}}, {0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xfdd4}]}}}]}]}], {0x14}}, 0xf8}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e"], 0x22) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x20) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x6, @loopback, 0x7}], 0x1c) socket$l2tp6(0xa, 0x2, 0x73) r6 = gettid() r7 = syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x800) ioctl$BLKCLOSEZONE(r7, 0x40101287, &(0x7f0000000340)={0x75e, 0x2}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) sendmsg$nl_netfilter(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)={0x2338, 0x9, 0xb, 0x101, 0x70bd27, 0x25dfdbfd, {0x1, 0x0, 0x6}, [@nested={0x1099, 0x10c, 0x0, 0x1, [@typed={0x14, 0xf0, 0x0, 0x0, @ipv6=@remote}, @typed={0x14, 0x94, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @nested={0x4, 0x19}, @generic="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", @generic="a51c444d4bf55af1c026d4d9885207bb18b51c183b4a45213a6e28214fa0aadfea05068da50bddf488873dca6e497f9ac5b1f92cedf2ccb02095c87dd764e0bf031dba55103aded09674afc39b19c20647757c000f4688b17a36d28fe3a7c4d07651367542d296ca07"]}, @nested={0x8, 0xa6, 0x0, 0x1, [@nested={0x4, 0x5d}]}, @nested={0x88, 0xa1, 0x0, 0x1, [@typed={0x84, 0xe8, 0x0, 0x0, @binary="8d90dd292f54f93c1916591002faa43d3f19269eae10abe498229cbb1d19ca4fbbb5689c98cb2179b5d06f27930a7607a9fdcbb46e5fd10e4236cff5c282bd86d1abf775d708f36e385da6f81d4982574f2e5d9e124cb6b80c6815d07a2f9f22516395dcab555eb43266d494ababab5eaf7b1d26fb4a124efeb4bac9bc2e72d1"}]}, @generic="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", @generic, @nested={0x1f6, 0x16, 0x0, 0x1, [@generic="ef3d023ec9a34f8e1db7494655c0ea55cd0f701b74668dcd38b800f4ed7a7f1158010870007e46184ba9cdc79e53a1641a118e8a836ffae5241d3594c4336084f2ba6a50a88b2d0745649658b0e9ed2b0ac30e3cf52d26b3004d0bb754b1bb7f8970f5604af45906865bff2ad48014eab0715de1f762acacf3b5a20fab1b5ff724f773e38434a497ebaf1fe53fab0e6c2b921a7d73ba2994282267570080b1cc2f9b54", @typed={0x8, 0xd4, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x87}, @typed={0xf4, 0x42, 0x0, 0x0, @binary="55eab12574ef71075e7552d24b52b0e337bcee41cb09fccc475a99b0ad0b4627a32cce37b98935640fc5e1e2c6a9db26759b544d0b752d9ac6b3c7a6914af3afa374c9502ba788fe1209df758ff94b7b16cde087d7d4a7d367a31712967395e8cd716f0b69ee5dfec6f448db0b9f537c4212b113a2bccd2a29b3bf4fa4e96c2c4766ae2b62f3f542ba4a25c16de783783d0545bc6b62d4b0f39289787749c554dc29c24c5e1720d7899eb03997f0cf66a64d11bc371c4b2627f48e3074c56d803afc97a5edca84eba17a2184d37831ef854239d4310bccc9ec3fde07a6cd90d913ba661c6effeb601268e69449e375b8"}, @typed={0x8, 0xdf, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x34}, @generic="261cf63a65b5cc0447b22ff005c8bfdbc9870f42dfa49278165c5c0a7f7f324352a7789cc0611b8bc791ee3b1e4337dd441188d0c0e4b6243596f721d1eeab19629da9"]}]}, 0x2338}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b607003772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) 4.091693024s ago: executing program 2 (id=2042): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = dup(r2) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000003c0)=0x10000) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x1, 0x0, 0x0, 0xffff, 0x8000}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') unshare(0x2c020400) syz_io_uring_setup(0xf04, &(0x7f00000002c0)={0x0, 0xdb0d, 0x3f, 0xfffffffe, 0x24000, 0x0, r4}, 0x0, 0x0) preadv(r4, 0x0, 0x0, 0x8, 0x200) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'wlan0\x00', &(0x7f0000000400)=@ethtool_test={0x1a, 0x100, 0x6, 0x5, [0x0, 0x1, 0x3, 0x10000, 0x7ff]}}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, r6, 0x0, 0x30001, 0x0, 0x80405, 0x27bbff, 0x2c8240}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x10000000000000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000140)=0x8) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 3.739196291s ago: executing program 0 (id=2043): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val={0x88a8, 0x5, 0x1, 0x1}, {0x8100, 0x6, 0x1, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) 3.690023368s ago: executing program 1 (id=2044): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002200)={&(0x7f00000021c0)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x7effe0fee0b28fb4}, 0x4000050) (fail_nth: 4) 3.45243929s ago: executing program 0 (id=2045): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000014c0)=@newtfilter={0x40, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r3, {0x10}, {0xffff}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8003, 0xd}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x40) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x8000000) 3.393270797s ago: executing program 4 (id=2046): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000800)="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", 0x2de}, {0x0}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf188", 0x14}, {&(0x7f0000001740)="d85b30ac", 0x4}], 0x5, 0x0, 0x0, 0x900}}], 0x2, 0x0) 3.012816252s ago: executing program 3 (id=2047): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0xd3, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000600)="e6", 0x1}], 0x1, &(0x7f0000000200)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0xa, 0x3, 0x3a) (async) getsockopt$inet6_buf(r1, 0x29, 0xd3, 0x0, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) accept4(r2, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r3, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000600)="e6", 0x1}], 0x1, &(0x7f0000000200)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async) 2.980392873s ago: executing program 3 (id=2048): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x2, 0x193000) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000040)={{0x2, 0x4e24, @broadcast}, {0x306, @local}, 0x22, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3c}}, 'vlan1\x00'}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000000c0)={0x2010}) getsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000100)=""/62, &(0x7f0000000140)=0x3e) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000180)='wg1\x00', 0x4) setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, &(0x7f00000001c0)=0xffffffff, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x15, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x24040850) process_madvise(r0, &(0x7f0000000600)=[{&(0x7f0000000340)="483b56b58824cdb9cf5ec01443b821aec10d", 0x12}, {&(0x7f0000000380)="8642f41aa256c30fd4cf1fd804925ce2eb7bb7da29bbfd4d4e6b020af94d1f862a0f069a234c4b50ef82528894ab12e1457b8e16267ae713a1356c04d0ff0e19e2f97ed8305d7fe99a745c307a8b977a702e44d5c53e6935ea844b98bb19ea0af3777aeea4dad26fbc42786d6544cd868f2ae810fe35140789d856ed214c413e4fb825bf19c52f7ddd1d4097bb0ba30aa75073e76306256921757e6b5a15306a68587bb0d5e138657cfa691cdba2051da7d3b6b7b1b086808f86ebb9d3c0243d17b7c601814caac635e8c40c7debb126f5c27bdb1fd7d670c886477086244ccfed606df5ef0af564ab119aa2e7ba2d78014c", 0xf2}, {&(0x7f0000000480)="db41743335df4961dd65a38c352da8444873ac55ac8f3691b20dd915c1114ee14aa1df18780839ed0b0ec71cc480a7b8d5d6bc75fb17db9798117d7bc45c47ae23a9bd0225a9417f6e84df8ab05c", 0x4e}, {&(0x7f0000000500)="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", 0xfc}], 0x4, 0x18, 0x0) r2 = openat$cuse(0xffffff9c, &(0x7f0000000640), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000680)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f00000026c0)={0x10, 0x0, r3}, 0x10) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r4 = accept4$packet(r0, &(0x7f0000002700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002740)=0x14, 0x800) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000002780)={0x4, [0x0, 0x0, 0x0, 0x0]}) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002800), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000002940)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002900)={&(0x7f0000002840)={0xa4, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3ff}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x20048840) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000002980)='cifs.spnego\x00', &(0x7f00000029c0)=@secondary) r6 = accept4(r1, 0x0, &(0x7f0000002a00), 0x800) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000002a40)={{0x2, 0x4e24, @local}, {0x6, @random="6c1e5c73c197"}, 0x20, {0x2, 0x4e21, @empty}, 'veth1_macvtap\x00'}) r7 = signalfd4(r4, &(0x7f0000002ac0)={[0x81, 0x1]}, 0x8, 0x100000) accept4$vsock_stream(r7, &(0x7f0000002b00)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) r8 = openat$loop_ctrl(0xffffff9c, &(0x7f0000002b40), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x2) r9 = fcntl$dupfd(r7, 0x0, r8) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x100010, r9, 0x5a6a000) writev(r7, &(0x7f0000002f40)=[{&(0x7f0000002b80)="f3ffe8365cb15bca576644d2eefd130633e22479e6b2a9f59cde1fd1173da275eeeee9be5ce9ab868d92329e2af6503f6b7df8fc792389fe80d5fad17a8975571ed4fdb3b76e0ed0de19d8ce36344401fd4a051882f127781f312ea307b5d8b18ae1419e738b50a7af2b72bf1679835c72d19549bf53c1fdef0b1123cd9d00723c808c5ad17ec58ca5adb9d3bb52d0a04f61bec76b09d35ade5d7036fdc87066f046c0aad5a87f27c228a341f07e6ee344d34bf9c2faa55da238858474857f6f5638b2c4", 0xc4}, {&(0x7f0000002c80)="9362fd510ff3a1e758f93e07e55e17836d2b6c43aa13f7119208d1606c44ee29e9b5919256f28799b66e018d67757a138cce03a74f5e1dc1bee6a20bfed15b26b599efc722edfeadc3036b57e93a13e1f7e05de1cfdec589b51c21fa0447a99f593669ef0e98bf0fa7554cf7a2d5a9fc77869f203eb8ca7d256fd4672c0af5cc77e827ea4be048b240e80d7ca41bae3f680f84bbfa9bd8b90cddcd1d921c207f331656e8a7bc3920dbff9873bf5f87edaad9c9cc3741e7d5c84d", 0xba}, {&(0x7f0000002d40)="0b1cf033c7cfaaa1dda0c990e4f8c32686bed0a7d67118ff44b042479ed6322be5c77d94f1f7f766c49e759ef942bce45ebf2b18959e99faf224ee4d220d8e4df00c13e4e6503ffa95252bc1792589fd7af69b41656de7b23d67e822a5d3135b456c27755764b37d85d0b162b97f3b1b2af7157db0c703bb76e65f4e31c4afdb41beb6a15cd90d6cf765f8c3db0919fd7bd775edf048e47342b9842d9e741d751083e07f798e99540196e19512a46453325aca1720fadc30f1cea308cc28462c4b229a912ba7f3e842e53a362a1b934edce0124c8565b335e81c0ca540", 0xdd}, {&(0x7f0000002e40)="55767997cf5457aaf8aedeecee02460444c5161c123528ffe55faf0fcae956d0a80b0e7b3c0c67f62d9127404546b9e601951b7109c1a0252a52f7e865e1ab7b94948eaec0ae3f4e3488b24092a4eeb41c0d409cc51f9afe1c9c4fff803ae13070ae66da43085eaf737581601fb8564ea1b10903eff8730d979598674106805a7b3f8240ee1e41a3050d073784649b7e6518c606d3c79ab046f636a1a97a2a11c3aa1ed7a55308f439e4c9a3227cbd72d6e71c59d9e25e82f177d44ffc8dcd8587356ad7eb4258d81529117e6ba5597b8d93f10cebbd38ad4c", 0xd9}], 0x4) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, &(0x7f0000002f80)={'filter\x00', 0x4}, 0x64) setsockopt$RDS_RECVERR(r7, 0x114, 0x5, &(0x7f0000003000), 0x4) ioctl$USBDEVFS_RELEASE_PORT(r9, 0x80045519, &(0x7f0000003040)=0x4) 2.670076172s ago: executing program 1 (id=2049): r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) recvmsg(r0, &(0x7f0000000040)={0x0, 0x218, &(0x7f0000000440)=[{&(0x7f0000000140)=""/110, 0x6e}], 0x1}, 0x1802) 2.548413267s ago: executing program 0 (id=2050): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x8864}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x2, 0x0, 0x0, 0x18}}}}}, 0x36) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[]) r3 = openat$vimc2(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMINPUT(r3, 0xc04c561a, &(0x7f0000000040)={0xc60, "74bde51b5b1463010897d03dc6cc3dcf16d1b2f793e342c141e34ca35613b9f6", 0x1, 0x40, 0x1, 0x10000, 0x20000, 0x4}) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x8864}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x2, 0x0, 0x0, 0x18}}}}}, 0x36) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[]) (async) openat$vimc2(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_ENUMINPUT(r3, 0xc04c561a, &(0x7f0000000040)={0xc60, "74bde51b5b1463010897d03dc6cc3dcf16d1b2f793e342c141e34ca35613b9f6", 0x1, 0x40, 0x1, 0x10000, 0x20000, 0x4}) (async) 2.546123581s ago: executing program 4 (id=2051): set_mempolicy(0x2, &(0x7f00000000c0)=0x8, 0xf5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000069020000000000000000000000f6"]) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x22, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) 2.532283845s ago: executing program 3 (id=2052): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) socket$qrtr(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r3 = socket(0x1d, 0x2, 0x6) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000300)=0x8) sendmmsg$sock(r3, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') writev(r4, &(0x7f00000009c0)=[{&(0x7f0000000140)=':', 0x1}, {0x0, 0x500}], 0x2) socket(0x400000000010, 0x3, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8", 0x49, 0x0, 0x0, 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) 2.47570943s ago: executing program 1 (id=2053): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xf) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)={0x0, r1}) dup2(r1, r0) r2 = socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x2, 0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594ef"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="1055473f5b8201375148f99904cf39a77c4c5e0040ef6ae9bb0f645b40ff71d44e420fc3bae13d383009af1db85ca5214a0c4611580272c7817127fd88f7d8deecc9f70f4103c81810ad1cc85a7a98c815488cb18aecac8dc499ebefb56abcf1445cac692a6cbc224aa2071d0f9796a59c35198f5f84abb1f4319c9e9f17d21c90598f77f3aa2a41cea2a29548f7705a36f8a5fe040c77be49d26e17acc0608915f5b6f614aad8a8b9ad939b5efa18e09b0a461c4b1d56045bcda75988bcd97607154a0be6941023ff4d0bbb69bc06d07db7b354b2c38770c09054b4c9d6c1139e5005d62b1e06d8f3b39ff2502b6a", 0xef}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000003c0)="865983d3486bf6c15af9998a74e04ab83ed67e069314137b4558f13eb879e0f8", 0x20}], 0x2, &(0x7f00000020c0)=[{0x9c, 0x10b, 0x94, "43b3734133685804fdf4dd579800cedaef107b52c83fce25f0d7861343e7ce4090feece61f691323ad8c0d8e5d989781b9a723046da5fb482c020ecec3cea81fb7b8d8e38f9b9b1bac3bddfca9a0ba8076c737b1bb718b26bd8a7d249728c8c7e8d7278dc31cbbadf22ca0ca289d081722b654130400f9b488fca2f8dbf667a7a183f69fea08292f160000000000"}, {0x68, 0x115, 0x5, "6483d4b7be0c5c0992ff75034bb7a467893d4bc9a2dcd5beb85896439d9f72a358472fa9df4a15238d3026a89e52ee619b628b5a256d7305fae00844acabddb940c474d6b411fbe69b87ba962ee00fa95d32be6357a9f84c18"}, {0x48, 0x109, 0xe6e, "80898603ecbd9ab2d55540bd9f90c731373a730fc8c14a692102c0de7317aee0ce0ac8d9d8f98c842cf5dcf4e8cf6c38105f75d148dc98a1627d"}, {0x7c, 0x9e, 0x9, "8de3cc4cd9d150929b9bbed08cb53e527c4fb5bf87973172693668abf3f4a10301d821bca47f9e7fe4e5d876281cd49c32b6eb4d9bccebb7529b87414850a7bbfc43d70d378f30ebe37738090a3a6efcdca7ee2723d20e8794975f4ad93321f85274aa8e0082ef9f4db98ac19e76ac"}, {0x88, 0x10d, 0x8, "96bbb9a62a9e0f626901a71acffa4c5cb515e9d64e317cebffd8bbb3fde38772510926bb16924c8f3af3cee7fc65be9a81ac7e036e486dc8f68fe8c2bf957429e8d8fa5994cacda49b997b1d31dc0a9fa40062c15169d46dd587197af8549d77ca1f2aa5f8c69a5d45c899ed98cce91e16be8b5660bdf02b6abe50"}, {0x50, 0x10b, 0x1ff, "1f7151f72a3e7b09f94316d2e547e071fcf0bae2cef9d5951f03bd65aee76f7173d40226b37991a9c0290e2742141db6cf4c1c19f15baa7269d24b43bfc33e31b087"}, {0xb0, 0x10e, 0xe, "8034986cd1a9f7d9757c622d1a7f0185b106187ea3cb46411f104f06d4b61705e203d01d8234f5937ec3b5ed76619cd032d30256d30434b244de8001b3346188e7e14b44afa688d7e1f937779befb166b7061e4ef1e9583fdb1a50d42eb42ae6500bdaac288428ba2faa7656b3c9f23ff2e372d6211b6d6d801aebd0ef8f581fea5cdd2e9d96de394c64b5e53bf1d6565a4121d3329f7c8c86471af44a8136535c9874a7"}, {0xb4, 0x10c, 0x3, "b4b41439c4ea0d1962db85f6d73bba5fad3083ca56d41dcf23db7f476cf1865c73e78c2a9e4ab760b0263329601768ab0a190833088e775c02b465c10c725e014f80cf65cf5651893431288571267fa689c4bc4a7551ea371be0547c89e54c1cd1632c567f791b5d7466da828ca25005dc36f40bc7d2a370b6f67236f8c7d7f0009160495f955acdecd3fd7a60df4f7d1042913f8fa180674ed931530c552fa34725debc3b0302"}, {0x38, 0xff, 0x3ee, "4e442db2f3275a979a23de1a77a4461697c633980909d82eb12547a3d21e7206ad09a3ebbdedf0a13d95"}, {0x84, 0x84, 0x8, "63adc8021b23223888f224ba9684aae9f4de793bce9ea14b55329659b3f52174af3f46678453255430540bb93e95f27c5695b7b6618b2b4d75f65531596872cce3cddbb59e6d516bbb5822accf0289585573d455cd8f84785e07634b8bfb0c368562b7f0e9172797f0ec7bd0a6041207616bf7250d2f94"}, {0x128, 0x108, 0x2, "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"}, {0xc8, 0x10f, 0x2, "fc5d3c186f0efcc1aac770951d534af8ea6dd639587586510e1013582baef61d3b5a7c35d8d21659a48a101ff7ec9ed1c4061e93c27414c87b8f33c823d4ec85316b88a63e0891bca38a86622377c6ecb44e3119bd3676d1a1401008a66360620badfb22adf7acb0c77f2386421d2333132becdb1d6323f5b55f680eb9c548afb0b22766ce1307e767ea70d61340631c60899844debd11dcf4e0b85e793799cd0bcff0669fef21f2c6444f4d929d1ab24a235f63debfa67f569110cd"}, {0x84, 0x1, 0x8, "dd0b44b6f7c8811be61e375dec786f9cfb62498f2e57cf2fc27430f6a66940afe0828111002e34e5a96f0d700b4a016457a59a8bdc2de301fe13ccf86df3b40bd0edb2a3e67462d337f9f0cef451a339861e4b2daec8221158535d24371517f18a794f2095292a7193913c72214fb5020991c27135f8c6"}, {0x9c, 0x108, 0xfffffffb, "16905084e53daa86c29a5fa73526135ff069e937291ff0dc9545284ed3065568127fad5cb2284a124fb72c2dbb41ba0f37cd24434647f7985a07d1320c2fa0b9171a3f4ad2cdcb8766fe456db838a2651dfc938e470804fd382bd9988de97716b794a8a520dfdd5fbb473a19585fac68338683db46b1eb7b99acff3cd3b572fe0dfaee35d9180686ef1a84d1963f"}, {0x64, 0x117, 0x1, "ec26a58168c8ef2aea205dc2bf72c0b5a038c2210592d9be235689f49f42296b0131e9034eb8b48df9ebea70000daa0d014ade5559cca55ba2ac8360c53814248b3246ec4e00759f8e592a6f73e981ed71b16f300084c7"}, {0x190, 0xff, 0x0, "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"}], 0x9c4}}], 0x2, 0x8810) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0cc5605, &(0x7f0000000200)={0xa, @win={{0x0, 0x0, 0x31324d4e, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c00028005"], 0x84}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000150012800b0001006970766c616e00000400028708000500", @ANYRES32=r6], 0x44}}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r9, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 502.927966ms ago: executing program 2 (id=2054): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0, 0x6}, {0xd, 0xffe0}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000ffdbdf25300000000c00018008000100", @ANYRES32=r6, @ANYBLOB="14000280"], 0x34}, 0x1, 0x0, 0x0, 0x802}, 0x8080) 0s ago: executing program 2 (id=2055): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$inet(0x2, 0xa, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) (rerun: 32) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r3, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="400a060000006ef1989edd0839acaee8700f84faddacbacfad8643b9302e3061b527e829f60104000000000000e3e678f1f649e9b3eacb3ef7e84ceecf77745f7ff947b14721c64df25bb90e43faf925d070103d19072e7040da2503f027c6d867ea800b697a94394af49e3bcfefd18c3ab117811b0c4b18c24eb9513142e62cba7da6b3cb6cfe6a11dc045f4855ab5955fc27ef8a138ed06aaa74cfe19617ab7128a82628337df07ab53ae734"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000a00)={0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="000304000000e9fed9ae157eac9eb0df68c5537f3f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x50, 0x24, 0x300, 0x1e, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {0x10, 0xffff}, {0xc, 0x3}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x20, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x80000001, 0xfff, 0x80000000, 0x20, 0x7, 0xa, 0x3}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0x82, 0x6, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x8000, 0x7800, 0x5, 0x1}}) (async, rerun: 32) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) (async) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r6, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="50010000000000000000000000000000060000000000000002000000000000000600000000000000060000000000000005000000ffffffff090000000000000003000000000000000e010000000000000400000000000000000000000000000008000000000000000001000003000000040000000020000005000000", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0300000007000000000000000400000000000000000003000000000008"], 0x0, 0x0, 0x0}) (async, rerun: 32) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)=@delpolicy={0x37c, 0x14, 0x200, 0x70bd25, 0x25dfdbfe, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, 0x4e21, 0x5, 0x4e24, 0x0, 0xa, 0xa0, 0x0, 0x89, r4, 0xee00}, 0x6e6bbc}, [@policy={0xa8, 0x7, {{@in=@rand_addr=0x64010102, @in=@local, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0x20, 0x20, 0x32, r5, 0xffffffffffffffff}, {0x90, 0x8, 0xfffffffffffffffc, 0x8000000000000000, 0x6, 0xd, 0x0, 0x7}, {0x3, 0x0, 0x3, 0x4}, 0x7, 0x0, 0x1, 0x1, 0x2, 0x2}}, @policy={0xa8, 0x7, {{@in6=@empty, @in6=@private1, 0x4e21, 0x4d, 0x4e22, 0x0, 0xe, 0x20, 0xa0, 0x62, 0x0, r8}, {0x7fffffffffffffff, 0xc56, 0x3b, 0x94d, 0x5, 0x4583, 0xfffffffffffffffa, 0x227}, {0x9, 0x2, 0x7747bdc4, 0x200}, 0xe, 0x6e6bb7, 0x1, 0x0, 0x0, 0x1}}, @proto={0x5, 0x19, 0xd8}, @replay_thresh={0x8, 0xb, 0x4}, @migrate={0x1cc, 0x11, [{@in=@loopback, @in6=@private0, @in=@loopback, @in=@loopback, 0x0, 0x2, 0x0, 0x0, 0x2, 0xa}, {@in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@loopback, @in6=@local, 0x3c, 0x3, 0x0, 0x3500, 0x2, 0xa}, {@in6=@remote, @in=@remote, @in=@multicast1, @in=@local, 0x2b, 0x1, 0x0, 0x0, 0x2, 0x2}, {@in6=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x24}, @in=@dev={0xac, 0x14, 0x14, 0x39}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2b, 0x3, 0x0, 0x3502, 0xa, 0xa}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@empty, @in=@remote, @in6=@mcast1, 0x33, 0x3, 0x0, 0x3506, 0xa, 0x2}, {@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, @in=@multicast2, 0x2b, 0x2, 0x0, 0x3505, 0x2, 0x2}]}]}, 0x37c}, 0x1, 0x0, 0x0, 0x800}, 0xc8d0) (rerun: 32) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[], 0x114}, 0x1, 0x0, 0x0, 0x24040855}, 0x10000015) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r11 = socket$key(0xf, 0x3, 0x2) (async) unshare(0x22020600) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r12, 0x1, 0x2f, &(0x7f0000000400), 0xa5e) (async) sendmsg$key(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x17, 0x0, 0x20, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2d, 0x3501}, @sadb_address={0x3, 0x6, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) (async, rerun: 64) r13 = dup(r10) (rerun: 64) ioctl$PTP_EXTTS_REQUEST2(r13, 0x40043d14, &(0x7f0000000040)) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}, 0x1, 0x0, 0x0, 0xd0}, 0x4) kernel console output (not intermixed with test programs): endpoint 0x5 has invalid maxpacket 1024 [ 527.419863][T10371] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 527.470807][T10371] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 527.535931][T10371] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 527.575355][T10371] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.862203][T10371] usb 4-1: GET_CAPABILITIES returned 0 [ 527.875910][T10371] usbtmc 4-1:16.0: can't read capabilities [ 528.046867][T11994] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 528.130830][T11994] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 528.265790][T11994] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 529.185329][T10371] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 529.335266][T10371] usb 3-1: Using ep0 maxpacket: 8 [ 529.350863][T10371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 529.362613][T10371] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 529.389709][T10371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 529.428694][T10371] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 529.440862][T10371] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.491369][T10371] usb 3-1: Product: syz [ 529.526866][T10371] usb 3-1: Manufacturer: syz [ 529.560213][T10371] usb 3-1: SerialNumber: syz [ 529.592021][T10371] usb 3-1: config 0 descriptor?? [ 529.615585][T10371] radioshark2 3-1:0.0: Invalid radioSHARK2 device [ 529.622679][T10371] radioshark2 3-1:0.0: probe with driver radioshark2 failed with error -22 [ 529.643564][T10371] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 529.655790][T10391] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 529.781177][ T5842] usb 4-1: USB disconnect, device number 78 [ 529.823316][T10391] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.860944][T10391] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.877777][T10391] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 529.894437][T10391] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 529.907759][T10391] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.929710][T10391] usb 2-1: config 0 descriptor?? [ 530.020658][ T30] kauditd_printk_skb: 91 callbacks suppressed [ 530.020677][ T30] audit: type=1326 audit(1753392162.091:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12011 comm="syz.3.1856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 530.056956][ T5854] Bluetooth: hci0: command 0x0405 tx timeout [ 530.079294][T12012] netlink: 'syz.3.1856': attribute type 10 has an invalid length. [ 530.088003][ T30] audit: type=1326 audit(1753392162.121:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12011 comm="syz.3.1856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 530.110692][ T30] audit: type=1326 audit(1753392162.141:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12011 comm="syz.3.1856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 530.133361][ T30] audit: type=1326 audit(1753392162.141:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12011 comm="syz.3.1856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 530.156612][ T30] audit: type=1326 audit(1753392162.141:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12011 comm="syz.3.1856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 530.171940][T12012] netlink: 'syz.3.1856': attribute type 10 has an invalid length. [ 530.179397][ T30] audit: type=1326 audit(1753392162.141:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12011 comm="syz.3.1856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 530.284511][ T30] audit: type=1326 audit(1753392162.141:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12011 comm="syz.3.1856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 530.325365][ T30] audit: type=1326 audit(1753392162.141:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12011 comm="syz.3.1856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 530.386213][ T30] audit: type=1326 audit(1753392162.141:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12011 comm="syz.3.1856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 530.409767][ T30] audit: type=1326 audit(1753392162.141:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12011 comm="syz.3.1856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 530.678144][ T5842] usb 3-1: USB disconnect, device number 91 [ 530.693708][T10391] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 531.077309][T12025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1857'. [ 531.088526][T12025] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.1857'. [ 531.142600][ T24] usb 1-1: USB disconnect, device number 21 [ 531.204758][ T5999] udevd[5999]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 531.327059][T12030] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1854'. [ 531.625249][ T5951] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 531.734236][T12041] xt_CT: No such helper "snmp" [ 531.805990][ T5951] usb 3-1: Using ep0 maxpacket: 8 [ 531.813855][ T5951] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 531.822705][ T5951] usb 3-1: config 0 has no interface number 0 [ 531.829688][ T5951] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 531.841252][ T5951] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 531.966397][T10371] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 531.974512][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.028260][ T5951] usb 3-1: config 0 descriptor?? [ 532.039800][ T5951] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 532.127424][T10371] usb 4-1: config 0 has no interfaces? [ 532.135318][ T24] usb 2-1: reset high-speed USB device number 90 using dummy_hcd [ 532.147441][ T5854] Bluetooth: hci0: command 0x0405 tx timeout [ 532.155962][T10371] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 532.193405][T12053] netlink: 'syz.0.1868': attribute type 10 has an invalid length. [ 532.210849][T10371] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.348750][T12056] netlink: 'syz.0.1868': attribute type 10 has an invalid length. [ 532.375520][T12053] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.384127][T12053] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.416837][T12053] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.424040][T12053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.431457][T12053] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.438584][T12053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.447150][T10371] usb 4-1: Product: syz [ 532.451365][T10371] usb 4-1: Manufacturer: syz [ 532.477211][T12053] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 532.640717][T10371] usb 4-1: SerialNumber: syz [ 532.680967][T10371] usb 4-1: config 0 descriptor?? [ 533.216103][ T5951] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 533.375213][ T5951] usb 1-1: Using ep0 maxpacket: 8 [ 533.412053][ T5951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 533.472374][ T5951] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 533.497011][T10371] usb 4-1: USB disconnect, device number 79 [ 533.534830][ T5951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 533.560988][ T5951] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 533.581693][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.602863][ T5951] usb 1-1: Product: syz [ 533.612983][ T5951] usb 1-1: Manufacturer: syz [ 533.621003][ T5951] usb 1-1: SerialNumber: syz [ 533.645477][ T5951] usb 1-1: config 0 descriptor?? [ 533.655119][ T5951] radioshark2 1-1:0.0: Invalid radioSHARK2 device [ 533.661764][ T5951] radioshark2 1-1:0.0: probe with driver radioshark2 failed with error -22 [ 533.670926][ T5951] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 533.865482][T10391] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 533.904327][T12060] @: renamed from vlan0 (while UP) [ 533.998886][ T5842] IPVS: starting estimator thread 0... [ 534.028513][T10391] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.063015][T10391] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.089839][T12079] IPVS: using max 26 ests per chain, 62400 per kthread [ 534.107734][T10391] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 534.140585][T10391] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 534.182121][T10391] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.207063][T10391] usb 5-1: config 0 descriptor?? [ 534.226314][ T5854] Bluetooth: hci0: command 0x0405 tx timeout [ 534.317656][ T5927] usb 2-1: USB disconnect, device number 90 [ 534.331125][ T5951] usb 3-1: USB disconnect, device number 92 [ 534.542503][T12083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1875'. [ 534.559529][ T5842] usb 1-1: USB disconnect, device number 23 [ 534.624975][T12085] FAULT_INJECTION: forcing a failure. [ 534.624975][T12085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.665248][T12085] CPU: 0 UID: 0 PID: 12085 Comm: syz.2.1876 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 534.665276][T12085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 534.665288][T12085] Call Trace: [ 534.665297][T12085] [ 534.665305][T12085] dump_stack_lvl+0x189/0x250 [ 534.665334][T12085] ? __pfx____ratelimit+0x10/0x10 [ 534.665357][T12085] ? __pfx_dump_stack_lvl+0x10/0x10 [ 534.665386][T12085] ? __pfx__printk+0x10/0x10 [ 534.665412][T12085] ? __might_fault+0xb0/0x130 [ 534.665449][T12085] should_fail_ex+0x414/0x560 [ 534.665474][T12085] _copy_from_iter+0x1db/0x16f0 [ 534.665503][T12085] ? rcu_is_watching+0x15/0xb0 [ 534.665527][T12085] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 534.665556][T12085] ? __pfx__copy_from_iter+0x10/0x10 [ 534.665582][T12085] ? __build_skb_around+0x257/0x3e0 [ 534.665612][T12085] ? netlink_sendmsg+0x642/0xb30 [ 534.665638][T12085] ? skb_put+0x11b/0x210 [ 534.665669][T12085] netlink_sendmsg+0x6b2/0xb30 [ 534.665706][T12085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.665735][T12085] ? __import_iovec+0x5d4/0x7f0 [ 534.665760][T12085] ? aa_sock_msg_perm+0x94/0x160 [ 534.665783][T12085] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 534.665804][T12085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.665832][T12085] __sock_sendmsg+0x21c/0x270 [ 534.665858][T12085] ____sys_sendmsg+0x505/0x830 [ 534.665881][T12085] ? __pfx_____sys_sendmsg+0x10/0x10 [ 534.665914][T12085] ___sys_sendmsg+0x21f/0x2a0 [ 534.665934][T12085] ? __pfx____sys_sendmsg+0x10/0x10 [ 534.665986][T12085] ? __fget_files+0x2a/0x420 [ 534.666003][T12085] ? __fget_files+0x3a0/0x420 [ 534.666030][T12085] __sys_sendmsg+0x164/0x220 [ 534.666050][T12085] ? __pfx___sys_sendmsg+0x10/0x10 [ 534.666082][T12085] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 534.666124][T12085] ? lockdep_hardirqs_on+0x9c/0x150 [ 534.666149][T12085] __do_fast_syscall_32+0xb6/0x2b0 [ 534.666174][T12085] ? lockdep_hardirqs_on+0x9c/0x150 [ 534.666212][T12085] do_fast_syscall_32+0x34/0x80 [ 534.666234][T12085] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 534.666276][T12085] RIP: 0023:0xf7fa2539 [ 534.666294][T12085] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 534.666311][T12085] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 534.666332][T12085] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 534.666346][T12085] RDX: 0000000000000880 RSI: 0000000000000000 RDI: 0000000000000000 [ 534.666359][T12085] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 534.666378][T12085] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 534.666391][T12085] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 534.666420][T12085] [ 535.260744][T10391] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 535.635394][ T5951] usb 4-1: new low-speed USB device number 80 using dummy_hcd [ 535.806900][ T5951] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 535.815693][ T5951] usb 4-1: config 0 has no interface number 0 [ 535.843696][ T5951] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 535.855908][T12087] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1872'. [ 535.870184][ T5951] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 535.899959][ T5951] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 535.920905][ T5951] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 535.973430][ T5951] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 536.015440][ T5951] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 536.194683][ T5951] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 536.228989][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.261241][ T5951] usb 4-1: config 0 descriptor?? [ 536.284800][T12093] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 536.298123][T12093] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 536.317720][T12104] --map-set only usable from mangle table [ 536.400426][ T5951] ldusb 4-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 536.601052][T12093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.616650][T12093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.665611][ T5951] usb 5-1: reset high-speed USB device number 90 using dummy_hcd [ 537.136964][T12103] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1880'. [ 537.154977][T12103] netlink: 'syz.1.1880': attribute type 1 has an invalid length. [ 537.195479][T12110] ptrace attach of "./syz-executor exec"[5864] was attempted by "./syz-executor exec"[12110] [ 537.230485][T12110] FAULT_INJECTION: forcing a failure. [ 537.230485][T12110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.247338][T12110] CPU: 1 UID: 0 PID: 12110 Comm: syz.2.1881 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 537.247366][T12110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 537.247379][T12110] Call Trace: [ 537.247387][T12110] [ 537.247396][T12110] dump_stack_lvl+0x189/0x250 [ 537.247425][T12110] ? __pfx____ratelimit+0x10/0x10 [ 537.247448][T12110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.247472][T12110] ? __pfx__printk+0x10/0x10 [ 537.247499][T12110] ? __might_fault+0xb0/0x130 [ 537.247537][T12110] should_fail_ex+0x414/0x560 [ 537.247563][T12110] _copy_from_iter+0x1db/0x16f0 [ 537.247592][T12110] ? rcu_is_watching+0x15/0xb0 [ 537.247613][T12110] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 537.247638][T12110] ? __pfx__copy_from_iter+0x10/0x10 [ 537.247662][T12110] ? __build_skb_around+0x257/0x3e0 [ 537.247687][T12110] ? netlink_sendmsg+0x642/0xb30 [ 537.247708][T12110] ? skb_put+0x11b/0x210 [ 537.247733][T12110] netlink_sendmsg+0x6b2/0xb30 [ 537.247761][T12110] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.247789][T12110] ? __import_iovec+0x5d4/0x7f0 [ 537.247810][T12110] ? aa_sock_msg_perm+0x94/0x160 [ 537.247828][T12110] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 537.247845][T12110] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.247867][T12110] __sock_sendmsg+0x21c/0x270 [ 537.247888][T12110] ____sys_sendmsg+0x505/0x830 [ 537.247907][T12110] ? __pfx_____sys_sendmsg+0x10/0x10 [ 537.247938][T12110] ___sys_sendmsg+0x21f/0x2a0 [ 537.247961][T12110] ? __pfx____sys_sendmsg+0x10/0x10 [ 537.248001][T12110] ? __fget_files+0x2a/0x420 [ 537.248015][T12110] ? __fget_files+0x3a0/0x420 [ 537.248036][T12110] __sys_sendmsg+0x164/0x220 [ 537.248053][T12110] ? __pfx___sys_sendmsg+0x10/0x10 [ 537.248081][T12110] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 537.248101][T12110] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.248119][T12110] __do_fast_syscall_32+0xb6/0x2b0 [ 537.248138][T12110] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.248157][T12110] do_fast_syscall_32+0x34/0x80 [ 537.248176][T12110] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 537.248197][T12110] RIP: 0023:0xf7fa2539 [ 537.248213][T12110] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 537.248226][T12110] RSP: 002b:00000000f508455c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 537.248243][T12110] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000200 [ 537.248254][T12110] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 537.248262][T12110] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 537.248271][T12110] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 537.248280][T12110] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 537.248301][T12110] [ 537.530437][ C1] vkms_vblank_simulate: vblank timer overrun [ 537.987876][T10371] usb 5-1: USB disconnect, device number 90 [ 538.166729][T10371] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 538.434182][ T5951] usb 4-1: USB disconnect, device number 80 [ 538.443326][T12125] ptrace attach of "./syz-executor exec"[5864] was attempted by "./syz-executor exec"[12125] [ 538.459427][T12125] fuse: Bad value for 'fd' [ 538.465408][T10371] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 538.496334][ T5951] ldusb 4-1:0.55: LD USB Device #1 now disconnected [ 538.507545][T10371] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 538.555185][T10371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 538.669891][T10371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 538.681884][T10371] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 538.717675][T10371] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 538.727870][T10371] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.736635][T10371] usb 5-1: Product: syz [ 538.741101][T10371] usb 5-1: Manufacturer: syz [ 538.746667][T10371] usb 5-1: SerialNumber: syz [ 538.757472][T10371] usb 5-1: config 0 descriptor?? [ 538.778503][T10371] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input76 [ 538.945856][T10373] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 538.978155][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 538.978172][ T30] audit: type=1326 audit(1753392171.051:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.3.1888" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 539.036216][ T30] audit: type=1326 audit(1753392171.091:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.3.1888" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 539.039400][T12132] netlink: 'syz.3.1888': attribute type 10 has an invalid length. [ 539.182162][T10373] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 539.210010][T10373] usb 1-1: config 0 has no interface number 0 [ 539.216965][T10373] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 539.228679][ T30] audit: type=1326 audit(1753392171.101:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.3.1888" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 539.253679][T10373] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 539.266508][T10373] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 539.281438][ T30] audit: type=1326 audit(1753392171.101:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.3.1888" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 539.305484][T10373] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 539.316910][T12132] netlink: 'syz.3.1888': attribute type 10 has an invalid length. [ 539.325572][T10373] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 539.327308][T12112] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1882'. [ 539.392430][ T30] audit: type=1326 audit(1753392171.101:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.3.1888" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 539.423251][T10373] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 539.443096][T10373] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 539.464254][ T30] audit: type=1326 audit(1753392171.101:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.3.1888" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 539.467439][ T24] usb 5-1: USB disconnect, device number 91 [ 539.522606][T10373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.563797][T10373] usb 1-1: config 0 descriptor?? [ 539.576890][ T30] audit: type=1326 audit(1753392171.101:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.3.1888" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 539.599788][ T30] audit: type=1326 audit(1753392171.101:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.3.1888" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 539.624460][T12128] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 539.641462][T12128] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 539.662687][T10373] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 539.686605][ T30] audit: type=1326 audit(1753392171.101:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.3.1888" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 539.711359][ T30] audit: type=1326 audit(1753392171.101:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.3.1888" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 539.869429][T12128] ldusb 1-1:0.55: Write buffer overflow, 1 bytes dropped [ 539.878643][T12128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.900149][T12128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.961518][ T24] usb 1-1: USB disconnect, device number 24 [ 539.973878][ T24] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 540.218886][T12148] FAULT_INJECTION: forcing a failure. [ 540.218886][T12148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.225905][T10373] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 540.309724][T12148] CPU: 1 UID: 0 PID: 12148 Comm: syz.1.1894 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 540.309757][T12148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 540.309771][T12148] Call Trace: [ 540.309781][T12148] [ 540.309790][T12148] dump_stack_lvl+0x189/0x250 [ 540.309822][T12148] ? __pfx____ratelimit+0x10/0x10 [ 540.309847][T12148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 540.309872][T12148] ? __pfx__printk+0x10/0x10 [ 540.309910][T12148] ? __might_fault+0xb0/0x130 [ 540.309952][T12148] should_fail_ex+0x414/0x560 [ 540.309980][T12148] _copy_from_iter+0x1db/0x16f0 [ 540.310012][T12148] ? rcu_is_watching+0x15/0xb0 [ 540.310038][T12148] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 540.310069][T12148] ? __pfx__copy_from_iter+0x10/0x10 [ 540.310098][T12148] ? __build_skb_around+0x257/0x3e0 [ 540.310133][T12148] ? netlink_sendmsg+0x642/0xb30 [ 540.310162][T12148] ? skb_put+0x11b/0x210 [ 540.310196][T12148] netlink_sendmsg+0x6b2/0xb30 [ 540.310237][T12148] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.310270][T12148] ? __import_iovec+0x5d4/0x7f0 [ 540.310297][T12148] ? aa_sock_msg_perm+0x94/0x160 [ 540.310335][T12148] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 540.310357][T12148] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.310387][T12148] __sock_sendmsg+0x21c/0x270 [ 540.310416][T12148] ____sys_sendmsg+0x505/0x830 [ 540.310440][T12148] ? __pfx_____sys_sendmsg+0x10/0x10 [ 540.310475][T12148] ___sys_sendmsg+0x21f/0x2a0 [ 540.310497][T12148] ? __pfx____sys_sendmsg+0x10/0x10 [ 540.310553][T12148] ? __fget_files+0x2a/0x420 [ 540.310572][T12148] ? __fget_files+0x3a0/0x420 [ 540.310601][T12148] __sys_sendmsg+0x164/0x220 [ 540.310624][T12148] ? __pfx___sys_sendmsg+0x10/0x10 [ 540.310658][T12148] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 540.310694][T12148] ? lockdep_hardirqs_on+0x9c/0x150 [ 540.310719][T12148] __do_fast_syscall_32+0xb6/0x2b0 [ 540.310744][T12148] ? lockdep_hardirqs_on+0x9c/0x150 [ 540.310770][T12148] do_fast_syscall_32+0x34/0x80 [ 540.310794][T12148] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 540.310818][T12148] RIP: 0023:0xf7f04539 [ 540.310835][T12148] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 540.310851][T12148] RSP: 002b:00000000f502655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 540.310872][T12148] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000540 [ 540.310887][T12148] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 540.310899][T12148] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 540.310911][T12148] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 540.310923][T12148] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 540.310952][T12148] [ 540.590842][ C1] vkms_vblank_simulate: vblank timer overrun [ 540.631956][T10373] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.648825][T10373] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.692069][T10373] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 540.799461][T10373] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 540.831575][T10373] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.912013][T12153] FAULT_INJECTION: forcing a failure. [ 540.912013][T12153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.954593][T10373] usb 3-1: config 0 descriptor?? [ 541.047717][T12153] CPU: 0 UID: 0 PID: 12153 Comm: syz.0.1895 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 541.047741][T12153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 541.047751][T12153] Call Trace: [ 541.047757][T12153] [ 541.047764][T12153] dump_stack_lvl+0x189/0x250 [ 541.047791][T12153] ? __pfx____ratelimit+0x10/0x10 [ 541.047809][T12153] ? __pfx_dump_stack_lvl+0x10/0x10 [ 541.047827][T12153] ? __pfx__printk+0x10/0x10 [ 541.047848][T12153] ? __might_fault+0xb0/0x130 [ 541.047885][T12153] should_fail_ex+0x414/0x560 [ 541.047905][T12153] _copy_from_user+0x2d/0xb0 [ 541.047928][T12153] kstrtouint_from_user+0xc4/0x170 [ 541.047948][T12153] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 541.047979][T12153] proc_fail_nth_write+0x88/0x240 [ 541.047995][T12153] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 541.048014][T12153] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 541.048031][T12153] vfs_write+0x27e/0xa90 [ 541.048058][T12153] ? __pfx_vfs_write+0x10/0x10 [ 541.048079][T12153] ? __fget_files+0x2a/0x420 [ 541.048095][T12153] ? __fget_files+0x3a0/0x420 [ 541.048108][T12153] ? __fget_files+0x2a/0x420 [ 541.048128][T12153] ksys_write+0x145/0x250 [ 541.048150][T12153] ? __pfx_ksys_write+0x10/0x10 [ 541.048171][T12153] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 541.048190][T12153] ? lockdep_hardirqs_on+0x9c/0x150 [ 541.048208][T12153] __do_fast_syscall_32+0xb6/0x2b0 [ 541.048227][T12153] ? lockdep_hardirqs_on+0x9c/0x150 [ 541.048246][T12153] do_fast_syscall_32+0x34/0x80 [ 541.048263][T12153] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 541.048283][T12153] RIP: 0023:0xf705e539 [ 541.048295][T12153] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 541.048310][T12153] RSP: 002b:00000000f500c590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 541.048334][T12153] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f500c620 [ 541.048348][T12153] RDX: 0000000000000001 RSI: 00000000f73c4ff4 RDI: 0000000000000000 [ 541.048362][T12153] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 541.048374][T12153] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 541.048386][T12153] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 541.048419][T12153] [ 541.774096][T10373] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 541.891886][T12161] FAULT_INJECTION: forcing a failure. [ 541.891886][T12161] name failslab, interval 1, probability 0, space 0, times 0 [ 541.907675][T12161] CPU: 1 UID: 0 PID: 12161 Comm: syz.1.1898 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 541.907703][T12161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 541.907716][T12161] Call Trace: [ 541.907724][T12161] [ 541.907733][T12161] dump_stack_lvl+0x189/0x250 [ 541.907762][T12161] ? __pfx____ratelimit+0x10/0x10 [ 541.907785][T12161] ? __pfx_dump_stack_lvl+0x10/0x10 [ 541.907809][T12161] ? __pfx__printk+0x10/0x10 [ 541.907833][T12161] ? __lock_acquire+0xab9/0xd20 [ 541.907868][T12161] should_fail_ex+0x414/0x560 [ 541.907895][T12161] should_failslab+0xa8/0x100 [ 541.907939][T12161] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 541.907966][T12161] ? __alloc_skb+0x112/0x2d0 [ 541.907998][T12161] __alloc_skb+0x112/0x2d0 [ 541.908028][T12161] __ipv6_ifa_notify+0x1e8/0xac0 [ 541.908055][T12161] ? work_grab_pending+0x18c/0x990 [ 541.908084][T12161] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 541.908111][T12161] ? __pfx_work_grab_pending+0x10/0x10 [ 541.908136][T12161] ? __lock_acquire+0xab9/0xd20 [ 541.908155][T12161] ? __cancel_work+0x1e6/0x2e0 [ 541.908179][T12161] ? lockdep_hardirqs_on+0x9c/0x150 [ 541.908201][T12161] ? __cancel_work+0x254/0x2e0 [ 541.908227][T12161] ? __pfx___cancel_work+0x10/0x10 [ 541.908252][T12161] ? ipv6_del_addr+0x60c/0x8f0 [ 541.908283][T12161] ipv6_del_addr+0x6b1/0x8f0 [ 541.908315][T12161] inet6_addr_del+0x473/0x600 [ 541.908351][T12161] addrconf_del_ifaddr+0x113/0x160 [ 541.908374][T12161] ? __pfx_addrconf_del_ifaddr+0x10/0x10 [ 541.908401][T12161] ? kasan_quarantine_put+0xdd/0x220 [ 541.908432][T12161] inet6_ioctl+0x10f/0x280 [ 541.908458][T12161] ? __pfx_inet6_ioctl+0x10/0x10 [ 541.908481][T12161] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 541.908501][T12161] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 541.908518][T12161] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 541.908537][T12161] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 541.908573][T12161] sock_do_ioctl+0xd9/0x300 [ 541.908598][T12161] ? __pfx_sock_do_ioctl+0x10/0x10 [ 541.908621][T12161] ? __lock_acquire+0xab9/0xd20 [ 541.908652][T12161] compat_sock_ioctl+0xb8d/0xc80 [ 541.908679][T12161] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 541.908704][T12161] ? __fget_files+0x3a0/0x420 [ 541.908720][T12161] ? __fget_files+0x2a/0x420 [ 541.908741][T12161] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 541.908768][T12161] __ia32_compat_sys_ioctl+0x540/0x840 [ 541.908796][T12161] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 541.908821][T12161] ? __fget_files+0x3a0/0x420 [ 541.908844][T12161] ? fput+0xa0/0xd0 [ 541.908864][T12161] ? ksys_write+0x22a/0x250 [ 541.908897][T12161] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 541.908921][T12161] ? lockdep_hardirqs_on+0x9c/0x150 [ 541.908943][T12161] __do_fast_syscall_32+0xb6/0x2b0 [ 541.908967][T12161] ? lockdep_hardirqs_on+0x9c/0x150 [ 541.908992][T12161] do_fast_syscall_32+0x34/0x80 [ 541.909015][T12161] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 541.909038][T12161] RIP: 0023:0xf7f04539 [ 541.909054][T12161] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 541.909070][T12161] RSP: 002b:00000000f502655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 541.909090][T12161] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008936 [ 541.909103][T12161] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 541.909114][T12161] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 541.909124][T12161] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 541.909135][T12161] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 541.909162][T12161] [ 542.273396][ C1] vkms_vblank_simulate: vblank timer overrun [ 542.799500][T12164] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1892'. [ 542.844093][T12166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1899'. [ 542.882379][T12166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1899'. [ 542.955504][T12166] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1899'. [ 542.964948][T12166] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1899'. [ 543.535274][T10371] usb 3-1: reset high-speed USB device number 93 using dummy_hcd [ 545.642650][T12183] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1905'. [ 545.709494][T12183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1905'. [ 545.727430][T12187] FAULT_INJECTION: forcing a failure. [ 545.727430][T12187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.753517][T12187] CPU: 0 UID: 0 PID: 12187 Comm: syz.4.1906 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 545.753545][T12187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 545.753557][T12187] Call Trace: [ 545.753566][T12187] [ 545.753575][T12187] dump_stack_lvl+0x189/0x250 [ 545.753605][T12187] ? __pfx____ratelimit+0x10/0x10 [ 545.753630][T12187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 545.753654][T12187] ? __pfx__printk+0x10/0x10 [ 545.753682][T12187] ? __might_fault+0xb0/0x130 [ 545.753721][T12187] should_fail_ex+0x414/0x560 [ 545.753749][T12187] _copy_from_iter+0x1db/0x16f0 [ 545.753779][T12187] ? rcu_is_watching+0x15/0xb0 [ 545.753805][T12187] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 545.753836][T12187] ? __pfx__copy_from_iter+0x10/0x10 [ 545.753864][T12187] ? __build_skb_around+0x257/0x3e0 [ 545.753897][T12187] ? netlink_sendmsg+0x642/0xb30 [ 545.753925][T12187] ? skb_put+0x11b/0x210 [ 545.753958][T12187] netlink_sendmsg+0x6b2/0xb30 [ 545.753997][T12187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 545.754030][T12187] ? __import_iovec+0x5d4/0x7f0 [ 545.754056][T12187] ? aa_sock_msg_perm+0x94/0x160 [ 545.754080][T12187] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 545.754102][T12187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 545.754133][T12187] __sock_sendmsg+0x21c/0x270 [ 545.754161][T12187] ____sys_sendmsg+0x505/0x830 [ 545.754187][T12187] ? __pfx_____sys_sendmsg+0x10/0x10 [ 545.754223][T12187] ___sys_sendmsg+0x21f/0x2a0 [ 545.754246][T12187] ? __pfx____sys_sendmsg+0x10/0x10 [ 545.754302][T12187] ? __fget_files+0x2a/0x420 [ 545.754321][T12187] ? __fget_files+0x3a0/0x420 [ 545.754350][T12187] __sys_sendmsg+0x164/0x220 [ 545.754378][T12187] ? __pfx___sys_sendmsg+0x10/0x10 [ 545.754422][T12187] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 545.754446][T12187] ? lockdep_hardirqs_on+0x9c/0x150 [ 545.754470][T12187] __do_fast_syscall_32+0xb6/0x2b0 [ 545.754493][T12187] ? lockdep_hardirqs_on+0x9c/0x150 [ 545.754529][T12187] do_fast_syscall_32+0x34/0x80 [ 545.754550][T12187] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 545.754572][T12187] RIP: 0023:0xf7f35539 [ 545.754587][T12187] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 545.754603][T12187] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 545.754621][T12187] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 545.754634][T12187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 545.754645][T12187] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 545.754655][T12187] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 545.754666][T12187] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 545.754692][T12187] [ 545.816103][T10391] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 545.849550][T10370] usb 3-1: USB disconnect, device number 93 [ 546.122737][T10391] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.134436][T10391] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 546.145418][T10391] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.155945][T10391] usb 2-1: config 0 descriptor?? [ 546.175749][T10371] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 546.320812][ T5951] usb 5-1: new low-speed USB device number 92 using dummy_hcd [ 546.347692][T10371] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 546.370126][T10371] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 546.398357][T10371] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 546.422001][T10371] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 546.433010][T10371] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 546.460198][T10371] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 546.470215][T10371] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.478772][T10371] usb 1-1: Product: syz [ 546.483763][T10371] usb 1-1: Manufacturer: syz [ 546.490385][T10371] usb 1-1: SerialNumber: syz [ 546.495267][ T5951] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 546.503958][ T5951] usb 5-1: config 0 has no interface number 0 [ 546.513276][T10371] usb 1-1: config 0 descriptor?? [ 546.520689][ T5951] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 546.537510][T10371] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input77 [ 546.547853][ T5951] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 546.560988][ T5951] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 546.590423][ T5951] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 546.637042][ T5951] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 546.658546][T10391] lenovo 0003:17EF:60A3.001C: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.1-1/input0 [ 546.676433][ T5951] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 546.698519][ T5951] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 546.714467][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.790885][T12184] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1904'. [ 546.801551][ T5951] usb 5-1: config 0 descriptor?? [ 546.810512][T10391] usb 2-1: USB disconnect, device number 91 [ 546.822552][T10371] usb 1-1: USB disconnect, device number 25 [ 546.911318][T12190] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 546.945614][T12190] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 547.056180][ T5951] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 547.173885][T12190] ldusb 5-1:0.55: Write buffer overflow, 1 bytes dropped [ 547.422896][T12204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.432648][T12197] fido_id[12197]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 547.450818][ T30] kauditd_printk_skb: 760 callbacks suppressed [ 547.450900][ T30] audit: type=1326 audit(1753392179.521:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12191 comm="syz.3.1908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 547.456781][T12204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.457648][ T30] audit: type=1326 audit(1753392179.521:3335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12191 comm="syz.3.1908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee558 code=0x7ffc0000 [ 547.530771][ T30] audit: type=1326 audit(1753392179.521:3336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12191 comm="syz.3.1908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee558 code=0x7ffc0000 [ 547.552888][ C1] vkms_vblank_simulate: vblank timer overrun [ 547.761943][ T30] audit: type=1326 audit(1753392179.521:3337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12191 comm="syz.3.1908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee558 code=0x7ffc0000 [ 547.784162][ C1] vkms_vblank_simulate: vblank timer overrun [ 547.803769][ T30] audit: type=1326 audit(1753392179.521:3338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12191 comm="syz.3.1908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee558 code=0x7ffc0000 [ 547.840608][ T30] audit: type=1326 audit(1753392179.521:3339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12191 comm="syz.3.1908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee558 code=0x7ffc0000 [ 547.871907][ T30] audit: type=1326 audit(1753392179.521:3340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12191 comm="syz.3.1908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee558 code=0x7ffc0000 [ 547.911134][ T24] usb 5-1: USB disconnect, device number 92 [ 547.934979][ T24] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 547.953398][ T30] audit: type=1326 audit(1753392179.521:3341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12191 comm="syz.3.1908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee558 code=0x7ffc0000 [ 548.065844][ T30] audit: type=1326 audit(1753392179.521:3342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12191 comm="syz.3.1908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee558 code=0x7ffc0000 [ 548.088008][ C1] vkms_vblank_simulate: vblank timer overrun [ 548.153018][ T30] audit: type=1326 audit(1753392179.521:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12191 comm="syz.3.1908" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 548.495546][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1913'. [ 548.521378][T12212] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.1913'. [ 548.585795][T12218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1914'. [ 548.731265][T12221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1916'. [ 548.751078][T12222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1915'. [ 548.754627][T12221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1916'. [ 548.783383][T12221] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1916'. [ 548.982021][T12225] netlink: 'syz.1.1917': attribute type 10 has an invalid length. [ 548.995987][T12221] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1916'. [ 549.034979][T12229] netlink: 'syz.1.1917': attribute type 10 has an invalid length. [ 549.599388][T12233] tipc: Enabled bearer , priority 0 [ 549.626447][T12233] syzkaller0: entered promiscuous mode [ 549.655452][T12233] syzkaller0: entered allmulticast mode [ 549.729691][T12232] tipc: Resetting bearer [ 549.767660][T12232] tipc: Disabling bearer [ 549.814982][T12238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1919'. [ 549.905354][T10373] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 550.030423][T12240] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 550.057191][T12240] syzkaller0: linktype set to 768 [ 550.093931][T10373] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 550.126675][T10373] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 550.177297][T10373] usb 3-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.00 [ 550.212251][T10373] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.260153][T10373] usb 3-1: config 0 descriptor?? [ 550.455695][T10391] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 550.545526][T10373] usbhid 3-1:0.0: can't add hid device: -71 [ 550.563704][T10373] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 550.602653][T10373] usb 3-1: USB disconnect, device number 94 [ 550.620036][T10391] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 550.655384][T10391] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 550.685193][T10391] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 550.697560][T10391] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 550.725453][T10391] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 550.741094][T10391] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 550.751385][T10391] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.760758][T10391] usb 5-1: Product: syz [ 550.764961][T10391] usb 5-1: Manufacturer: syz [ 550.770686][T10391] usb 5-1: SerialNumber: syz [ 550.781770][T10391] usb 5-1: config 0 descriptor?? [ 550.803765][T10391] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input79 [ 550.825649][ T24] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 550.894546][T12256] FAULT_INJECTION: forcing a failure. [ 550.894546][T12256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.914911][T12256] CPU: 0 UID: 0 PID: 12256 Comm: syz.3.1926 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 550.914939][T12256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 550.914951][T12256] Call Trace: [ 550.914959][T12256] [ 550.914968][T12256] dump_stack_lvl+0x189/0x250 [ 550.914997][T12256] ? __pfx____ratelimit+0x10/0x10 [ 550.915021][T12256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 550.915046][T12256] ? __pfx__printk+0x10/0x10 [ 550.915074][T12256] ? __might_fault+0xb0/0x130 [ 550.915117][T12256] should_fail_ex+0x414/0x560 [ 550.915144][T12256] _copy_from_iter+0x1db/0x16f0 [ 550.915174][T12256] ? rcu_is_watching+0x15/0xb0 [ 550.915200][T12256] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 550.915250][T12256] ? __pfx__copy_from_iter+0x10/0x10 [ 550.915276][T12256] ? __build_skb_around+0x257/0x3e0 [ 550.915308][T12256] ? skb_put+0x11b/0x210 [ 550.915339][T12256] pfkey_sendmsg+0x230/0x1090 [ 550.915370][T12256] ? __pfx___might_resched+0x10/0x10 [ 550.915398][T12256] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 550.915427][T12256] ? aa_sk_perm+0x81e/0x950 [ 550.915452][T12256] ? __pfx_aa_sk_perm+0x10/0x10 [ 550.915468][T12256] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 550.915494][T12256] ? __asan_memset+0x22/0x50 [ 550.915535][T12256] ? __import_iovec+0x5d4/0x7f0 [ 550.915561][T12256] ? aa_sock_msg_perm+0x94/0x160 [ 550.915585][T12256] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 550.915606][T12256] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 550.915633][T12256] __sock_sendmsg+0x21c/0x270 [ 550.915661][T12256] ____sys_sendmsg+0x505/0x830 [ 550.915687][T12256] ? __pfx_____sys_sendmsg+0x10/0x10 [ 550.915724][T12256] ___sys_sendmsg+0x21f/0x2a0 [ 550.915746][T12256] ? __pfx____sys_sendmsg+0x10/0x10 [ 550.915801][T12256] ? __fget_files+0x2a/0x420 [ 550.915819][T12256] ? __fget_files+0x3a0/0x420 [ 550.915847][T12256] __sys_sendmsg+0x164/0x220 [ 550.915869][T12256] ? __pfx___sys_sendmsg+0x10/0x10 [ 550.915903][T12256] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 550.915928][T12256] ? lockdep_hardirqs_on+0x9c/0x150 [ 550.915953][T12256] __do_fast_syscall_32+0xb6/0x2b0 [ 550.915979][T12256] ? lockdep_hardirqs_on+0x9c/0x150 [ 550.916004][T12256] do_fast_syscall_32+0x34/0x80 [ 550.916029][T12256] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 550.916053][T12256] RIP: 0023:0xf70ee539 [ 550.916070][T12256] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 550.916087][T12256] RSP: 002b:00000000f50de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 550.916109][T12256] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000680 [ 550.916125][T12256] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 550.916137][T12256] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 550.916149][T12256] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 550.916161][T12256] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 550.916191][T12256] [ 550.985296][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 551.125226][T10373] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 551.194716][ T24] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 551.212004][T12258] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1922'. [ 551.216917][ T24] usb 2-1: config 0 has no interface number 0 [ 551.258630][ T24] usb 2-1: config 0 interface 119 has no altsetting 0 [ 551.273896][T10371] usb 5-1: USB disconnect, device number 93 [ 551.289076][ T24] usb 2-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=26.35 [ 551.304649][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.319211][ T24] usb 2-1: Product: syz [ 551.324486][ T24] usb 2-1: Manufacturer: syz [ 551.333987][ T24] usb 2-1: SerialNumber: syz [ 551.367847][ T24] usb 2-1: config 0 descriptor?? [ 551.409205][T12265] FAULT_INJECTION: forcing a failure. [ 551.409205][T12265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.427671][T12265] CPU: 0 UID: 0 PID: 12265 Comm: syz.2.1928 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 551.427705][T12265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 551.427718][T12265] Call Trace: [ 551.427727][T12265] [ 551.427736][T12265] dump_stack_lvl+0x189/0x250 [ 551.427766][T12265] ? __pfx____ratelimit+0x10/0x10 [ 551.427791][T12265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 551.427816][T12265] ? __pfx__printk+0x10/0x10 [ 551.427845][T12265] ? __might_fault+0xb0/0x130 [ 551.427884][T12265] should_fail_ex+0x414/0x560 [ 551.427914][T12265] _copy_from_user+0x2d/0xb0 [ 551.427954][T12265] kstrtouint_from_user+0xc4/0x170 [ 551.427983][T12265] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 551.428027][T12265] proc_fail_nth_write+0x88/0x240 [ 551.428048][T12265] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 551.428076][T12265] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 551.428117][T12265] vfs_write+0x27e/0xa90 [ 551.428158][T12265] ? __pfx_vfs_write+0x10/0x10 [ 551.428189][T12265] ? __fget_files+0x2a/0x420 [ 551.428214][T12265] ? __fget_files+0x3a0/0x420 [ 551.428231][T12265] ? __fget_files+0x2a/0x420 [ 551.428260][T12265] ksys_write+0x145/0x250 [ 551.428292][T12265] ? __pfx_ksys_write+0x10/0x10 [ 551.428323][T12265] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 551.428350][T12265] ? lockdep_hardirqs_on+0x9c/0x150 [ 551.428376][T12265] __do_fast_syscall_32+0xb6/0x2b0 [ 551.428403][T12265] ? lockdep_hardirqs_on+0x9c/0x150 [ 551.428431][T12265] do_fast_syscall_32+0x34/0x80 [ 551.428458][T12265] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 551.428484][T12265] RIP: 0023:0xf7fa2539 [ 551.428502][T12265] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 551.428521][T12265] RSP: 002b:00000000f50c6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 551.428542][T12265] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f50c6620 [ 551.428557][T12265] RDX: 0000000000000001 RSI: 00000000f7434ff4 RDI: 0000000000000000 [ 551.428570][T12265] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 551.428583][T12265] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 551.428596][T12265] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 551.428627][T12265] [ 551.430567][T10373] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.771776][T12271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.789534][T12270] tipc: Started in network mode [ 551.790054][T12271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.802316][T10373] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 551.827296][T10373] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.842802][T12270] tipc: Node identity 26b1706a27e7, cluster identity 4711 [ 551.858571][T10373] usb 1-1: config 1 interface 0 has no altsetting 1 [ 551.870535][ T24] usb 2-1: USB disconnect, device number 92 [ 551.891404][T10373] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 551.915203][T10373] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.915462][T12270] tipc: Enabled bearer , priority 0 [ 551.923220][T10373] usb 1-1: Product: syz [ 551.923240][T10373] usb 1-1: Manufacturer: syz [ 551.923256][T10373] usb 1-1: SerialNumber: syz [ 551.986947][T12273] syzkaller0: entered promiscuous mode [ 551.992469][T12273] syzkaller0: entered allmulticast mode [ 552.007446][T10373] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 552.018057][T10373] cdc_ncm 1-1:1.0: bind() failure [ 552.062804][T12275] tipc: Resetting bearer [ 552.087112][T12275] tipc: Disabling bearer [ 552.197080][T10373] usb 1-1: USB disconnect, device number 26 [ 552.275300][ T5927] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 552.426050][ T5927] usb 5-1: Using ep0 maxpacket: 8 [ 552.433425][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 552.444439][ T5927] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 552.457476][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 552.479254][ T5927] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 552.489313][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.498211][ T5927] usb 5-1: Product: syz [ 552.502620][ T5927] usb 5-1: Manufacturer: syz [ 552.515252][ T5927] usb 5-1: SerialNumber: syz [ 552.531297][ T5927] usb 5-1: config 0 descriptor?? [ 552.543471][ T5927] radioshark2 5-1:0.0: Invalid radioSHARK2 device [ 552.552372][ T5927] radioshark2 5-1:0.0: probe with driver radioshark2 failed with error -22 [ 552.562671][ T5927] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 552.632806][T12287] FAULT_INJECTION: forcing a failure. [ 552.632806][T12287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.649011][T12287] CPU: 0 UID: 0 PID: 12287 Comm: syz.1.1934 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 552.649036][T12287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 552.649049][T12287] Call Trace: [ 552.649057][T12287] [ 552.649065][T12287] dump_stack_lvl+0x189/0x250 [ 552.649092][T12287] ? __pfx____ratelimit+0x10/0x10 [ 552.649113][T12287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 552.649154][T12287] ? __pfx__printk+0x10/0x10 [ 552.649181][T12287] ? __might_fault+0xb0/0x130 [ 552.649218][T12287] should_fail_ex+0x414/0x560 [ 552.649246][T12287] _copy_from_user+0x2d/0xb0 [ 552.649275][T12287] io_register_rsrc+0xc2/0x260 [ 552.649302][T12287] ? __fget_files+0x2a/0x420 [ 552.649321][T12287] ? __pfx_io_register_rsrc+0x10/0x10 [ 552.649350][T12287] ? __fget_files+0x2a/0x420 [ 552.649370][T12287] ? io_is_uring_fops+0xd/0x50 [ 552.649392][T12287] __se_sys_io_uring_register+0xabb/0x11b0 [ 552.649424][T12287] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 552.649448][T12287] ? ksys_write+0x22a/0x250 [ 552.649484][T12287] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 552.649509][T12287] ? lockdep_hardirqs_on+0x9c/0x150 [ 552.649533][T12287] __do_fast_syscall_32+0xb6/0x2b0 [ 552.649558][T12287] ? lockdep_hardirqs_on+0x9c/0x150 [ 552.649583][T12287] do_fast_syscall_32+0x34/0x80 [ 552.649608][T12287] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 552.649633][T12287] RIP: 0023:0xf7f04539 [ 552.649650][T12287] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 552.649667][T12287] RSP: 002b:00000000f502655c EFLAGS: 00000206 ORIG_RAX: 00000000000001ab [ 552.649687][T12287] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000000f [ 552.649700][T12287] RDX: 0000000080001580 RSI: 0000000000000020 RDI: 0000000000000000 [ 552.649712][T12287] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 552.649723][T12287] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 552.649736][T12287] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 552.649776][T12287] [ 552.912530][T12287] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 553.566739][ T5951] usb 5-1: USB disconnect, device number 94 [ 553.735400][T10371] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 553.838582][T12314] tipc: Started in network mode [ 553.848549][T12314] tipc: Node identity 824fff06289c, cluster identity 4711 [ 553.894616][T12314] tipc: Enabled bearer , priority 0 [ 553.912303][T10371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.924761][T10371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.976199][T12315] syzkaller0: entered promiscuous mode [ 553.976616][T10371] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 553.981719][T12315] syzkaller0: entered allmulticast mode [ 554.025279][T10371] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 554.045291][ T5951] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 554.069065][T10371] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.095779][T12315] FAULT_INJECTION: forcing a failure. [ 554.095779][T12315] name failslab, interval 1, probability 0, space 0, times 0 [ 554.096004][T10371] usb 3-1: config 0 descriptor?? [ 554.137270][T12315] CPU: 1 UID: 0 PID: 12315 Comm: syz.4.1942 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 554.137298][T12315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 554.137311][T12315] Call Trace: [ 554.137332][T12315] [ 554.137341][T12315] dump_stack_lvl+0x189/0x250 [ 554.137368][T12315] ? __pfx____ratelimit+0x10/0x10 [ 554.137390][T12315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 554.137413][T12315] ? __pfx__printk+0x10/0x10 [ 554.137445][T12315] ? __pfx___might_resched+0x10/0x10 [ 554.137466][T12315] ? fs_reclaim_acquire+0x7d/0x100 [ 554.137489][T12315] should_fail_ex+0x414/0x560 [ 554.137533][T12315] should_failslab+0xa8/0x100 [ 554.137565][T12315] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 554.137592][T12315] ? rtnl_prop_list_size+0x1ba/0x1e0 [ 554.137614][T12315] ? __alloc_skb+0x112/0x2d0 [ 554.137679][T12315] __alloc_skb+0x112/0x2d0 [ 554.137711][T12315] rtmsg_ifinfo_build_skb+0x84/0x260 [ 554.137747][T12315] rtnetlink_event+0x1b7/0x270 [ 554.137778][T12315] notifier_call_chain+0x1b3/0x3e0 [ 554.137809][T12315] netif_set_mtu_ext+0x438/0x620 [ 554.137854][T12315] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 554.137881][T12315] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 554.137903][T12315] ? lockdep_hardirqs_on+0x9c/0x150 [ 554.137932][T12315] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 554.137958][T12315] ? rcu_is_watching+0x15/0xb0 [ 554.137987][T12315] netif_set_mtu+0xa4/0x150 [ 554.138015][T12315] ? __pfx_netif_set_mtu+0x10/0x10 [ 554.138056][T12315] ? netdev_name_node_lookup+0xdf/0x120 [ 554.138087][T12315] dev_set_mtu+0x126/0x260 [ 554.138117][T12315] dev_ioctl+0x7b4/0x1150 [ 554.138146][T12315] sock_do_ioctl+0x22c/0x300 [ 554.138171][T12315] ? __pfx_sock_do_ioctl+0x10/0x10 [ 554.138192][T12315] ? unix_ioctl+0x27c/0x830 [ 554.138220][T12315] ? __pfx_unix_ioctl+0x10/0x10 [ 554.138256][T12315] compat_sock_ioctl+0xb8d/0xc80 [ 554.138285][T12315] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 554.138314][T12315] ? __fget_files+0x3a0/0x420 [ 554.138349][T12315] ? __fget_files+0x2a/0x420 [ 554.138371][T12315] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 554.138402][T12315] __ia32_compat_sys_ioctl+0x540/0x840 [ 554.138432][T12315] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 554.138459][T12315] ? __fget_files+0x3a0/0x420 [ 554.138484][T12315] ? fput+0xa0/0xd0 [ 554.138520][T12315] ? ksys_write+0x22a/0x250 [ 554.138555][T12315] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 554.138579][T12315] ? lockdep_hardirqs_on+0x9c/0x150 [ 554.138604][T12315] __do_fast_syscall_32+0xb6/0x2b0 [ 554.138634][T12315] ? lockdep_hardirqs_on+0x9c/0x150 [ 554.138659][T12315] do_fast_syscall_32+0x34/0x80 [ 554.138683][T12315] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 554.138707][T12315] RIP: 0023:0xf7f35539 [ 554.138725][T12315] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 554.138743][T12315] RSP: 002b:00000000f503555c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 554.138781][T12315] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008922 [ 554.138794][T12315] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 554.138806][T12315] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 554.138817][T12315] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 554.138827][T12315] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 554.138854][T12315] [ 554.140807][T12315] tipc: Resetting bearer [ 554.228794][ T5951] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 554.519203][T12313] tipc: Resetting bearer [ 554.551477][T12313] tipc: Disabling bearer [ 554.699288][ T5951] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 554.724121][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 554.744416][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 554.880240][ T5951] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 554.903338][ T5951] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 554.914709][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.922849][ T5951] usb 4-1: Product: syz [ 554.930973][ T5951] usb 4-1: Manufacturer: syz [ 554.935775][ T5951] usb 4-1: SerialNumber: syz [ 554.960154][ T5951] usb 4-1: config 0 descriptor?? [ 555.009500][T10371] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 555.132338][ T5951] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input80 [ 555.382138][T12311] __nla_validate_parse: 6 callbacks suppressed [ 555.382156][T12311] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1941'. [ 555.505847][ T5951] usb 4-1: USB disconnect, device number 81 [ 556.083031][ T30] kauditd_printk_skb: 253 callbacks suppressed [ 556.083061][ T30] audit: type=1326 audit(1753392188.151:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12331 comm="syz.0.1946" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 556.174137][ T30] audit: type=1326 audit(1753392188.151:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12331 comm="syz.0.1946" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 556.241487][ T30] audit: type=1326 audit(1753392188.231:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12331 comm="syz.0.1946" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 556.280187][T12332] netlink: 'syz.0.1946': attribute type 10 has an invalid length. [ 556.288905][T12332] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.296368][T12332] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.317256][ T30] audit: type=1326 audit(1753392188.231:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12331 comm="syz.0.1946" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 556.386741][ T30] audit: type=1326 audit(1753392188.231:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12331 comm="syz.0.1946" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 556.416061][T12342] netlink: 'syz.0.1946': attribute type 10 has an invalid length. [ 556.486754][ T30] audit: type=1326 audit(1753392188.281:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12331 comm="syz.0.1946" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 556.515231][ T5951] usb 3-1: reset high-speed USB device number 95 using dummy_hcd [ 556.584296][ T30] audit: type=1326 audit(1753392188.281:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12331 comm="syz.0.1946" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 556.632720][ T30] audit: type=1326 audit(1753392188.281:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12331 comm="syz.0.1946" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 556.658868][ T30] audit: type=1326 audit(1753392188.281:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12331 comm="syz.0.1946" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 556.717300][T12340] vcan0: tx drop: invalid da for name 0x00000000000000f5 [ 557.057744][ T30] audit: type=1326 audit(1753392188.281:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12331 comm="syz.0.1946" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 557.087131][T12351] loop5: detected capacity change from 0 to 3359 [ 557.153589][T12352] loop5: detected capacity change from 3359 to 3495 [ 557.474754][ T6002] buffer_io_error: 11 callbacks suppressed [ 557.474768][ T6002] Buffer I/O error on dev loop5, logical block 436, async page read [ 557.575685][T12354] FAULT_INJECTION: forcing a failure. [ 557.575685][T12354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.625989][T12354] CPU: 0 UID: 0 PID: 12354 Comm: syz.1.1950 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 557.626016][T12354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 557.626028][T12354] Call Trace: [ 557.626036][T12354] [ 557.626044][T12354] dump_stack_lvl+0x189/0x250 [ 557.626074][T12354] ? __pfx____ratelimit+0x10/0x10 [ 557.626096][T12354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 557.626118][T12354] ? __pfx__printk+0x10/0x10 [ 557.626144][T12354] ? __might_fault+0xb0/0x130 [ 557.626180][T12354] should_fail_ex+0x414/0x560 [ 557.626205][T12354] _copy_from_iter+0x1db/0x16f0 [ 557.626233][T12354] ? rcu_is_watching+0x15/0xb0 [ 557.626257][T12354] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 557.626284][T12354] ? __pfx__copy_from_iter+0x10/0x10 [ 557.626310][T12354] ? __build_skb_around+0x257/0x3e0 [ 557.626340][T12354] ? netlink_sendmsg+0x642/0xb30 [ 557.626366][T12354] ? skb_put+0x11b/0x210 [ 557.626396][T12354] netlink_sendmsg+0x6b2/0xb30 [ 557.626432][T12354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.626463][T12354] ? __import_iovec+0x5d4/0x7f0 [ 557.626486][T12354] ? aa_sock_msg_perm+0x94/0x160 [ 557.626508][T12354] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 557.626528][T12354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.626556][T12354] __sock_sendmsg+0x21c/0x270 [ 557.626582][T12354] ____sys_sendmsg+0x505/0x830 [ 557.626605][T12354] ? __pfx_____sys_sendmsg+0x10/0x10 [ 557.626639][T12354] ___sys_sendmsg+0x21f/0x2a0 [ 557.626665][T12354] ? __pfx____sys_sendmsg+0x10/0x10 [ 557.626718][T12354] ? __fget_files+0x2a/0x420 [ 557.626735][T12354] ? __fget_files+0x3a0/0x420 [ 557.626762][T12354] __sys_sendmsg+0x164/0x220 [ 557.626800][T12354] ? __pfx___sys_sendmsg+0x10/0x10 [ 557.626834][T12354] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 557.626872][T12354] ? lockdep_hardirqs_on+0x9c/0x150 [ 557.626895][T12354] __do_fast_syscall_32+0xb6/0x2b0 [ 557.626918][T12354] ? lockdep_hardirqs_on+0x9c/0x150 [ 557.626942][T12354] do_fast_syscall_32+0x34/0x80 [ 557.626964][T12354] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 557.626987][T12354] RIP: 0023:0xf7f04539 [ 557.627003][T12354] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 557.627019][T12354] RSP: 002b:00000000f502655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 557.627038][T12354] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800035c0 [ 557.627050][T12354] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 557.627061][T12354] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 557.627072][T12354] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 557.627083][T12354] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 557.627110][T12354] [ 558.579485][T12361] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1951' sets config #-3 [ 558.601666][T12360] program syz.1.1953 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 558.635623][T12360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1953'. [ 558.664543][T12360] macvtap0: entered promiscuous mode [ 558.664566][T12360] team0: entered promiscuous mode [ 558.664582][T12360] team_slave_0: entered promiscuous mode [ 558.664816][T12360] team_slave_1: entered promiscuous mode [ 558.665092][T12360] macvlan2: entered promiscuous mode [ 558.665372][T12360] vxlan0: entered promiscuous mode [ 558.665715][T12360] macvtap0: entered allmulticast mode [ 558.665736][T12360] team0: entered allmulticast mode [ 558.665752][T12360] team_slave_0: entered allmulticast mode [ 558.665779][T12360] team_slave_1: entered allmulticast mode [ 558.665794][T12360] vxlan0: entered allmulticast mode [ 558.666945][T12360] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 558.707165][T12368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1955'. [ 558.714377][T12368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1955'. [ 558.728672][T12360] team0: left allmulticast mode [ 558.769824][T12368] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1955'. [ 558.801901][T12360] team_slave_0: left allmulticast mode [ 558.801925][T12360] team_slave_1: left allmulticast mode [ 558.801943][T12360] vxlan0: left allmulticast mode [ 558.801974][T12360] team0: left promiscuous mode [ 558.801990][T12360] team_slave_0: left promiscuous mode [ 558.802865][T12360] team_slave_1: left promiscuous mode [ 558.905460][T12360] macvlan2: left promiscuous mode [ 558.925754][T12360] vxlan0: left promiscuous mode [ 558.926409][T12368] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1955'. [ 559.586139][T10371] usb 3-1: USB disconnect, device number 95 [ 559.796277][T10371] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 560.067712][T10371] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 560.115322][T10371] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 560.169236][T10371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 560.274841][T10371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 560.301381][T10371] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 560.376540][T10371] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 560.398815][T10371] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.445207][T10371] usb 3-1: Product: syz [ 560.463947][T10371] usb 3-1: Manufacturer: syz [ 560.477451][T10371] usb 3-1: SerialNumber: syz [ 560.518301][T10371] usb 3-1: config 0 descriptor?? [ 560.586540][T10371] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input81 [ 560.737675][T12374] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1957'. [ 560.751385][T10371] usb 3-1: USB disconnect, device number 96 [ 561.175591][ T24] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 561.475583][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 561.551894][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 561.570721][ T24] usb 5-1: config 0 has no interface number 0 [ 561.583653][ T24] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 561.596153][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.597866][T12404] input: syz1 as /devices/virtual/input/input82 [ 561.610551][ T24] usb 5-1: Product: syz [ 561.610571][ T24] usb 5-1: Manufacturer: syz [ 561.625668][ T24] usb 5-1: SerialNumber: syz [ 561.683049][ T24] usb 5-1: config 0 descriptor?? [ 561.725249][ T5842] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 561.745994][ T24] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 561.837805][ T24] usb 5-1: selecting invalid altsetting 1 [ 561.843688][ T24] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 561.879741][ T5842] usb 4-1: device descriptor read/64, error -71 [ 561.900745][ T24] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 561.913017][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 561.922118][ T24] usb 5-1: media controller created [ 561.993611][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 562.048664][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 562.048677][ T30] audit: type=1326 audit(1753392194.121:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12407 comm="syz.1.1965" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 562.135635][ T5842] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 562.154611][ T30] audit: type=1326 audit(1753392194.151:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12407 comm="syz.1.1965" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 562.266162][ T5842] usb 4-1: device descriptor read/64, error -71 [ 562.288194][ T30] audit: type=1326 audit(1753392194.151:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12407 comm="syz.1.1965" exe="/root/syz-executor" sig=0 arch=40000003 syscall=184 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 562.323783][ T24] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 562.375751][ T5842] usb usb4-port1: attempt power cycle [ 562.415470][ T5927] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 562.475324][ T24] usb 5-1: USB disconnect, device number 95 [ 562.511773][ T30] audit: type=1326 audit(1753392194.151:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12407 comm="syz.1.1965" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 562.571334][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.590805][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.601105][ T5927] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 562.605354][ T30] audit: type=1326 audit(1753392194.151:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12407 comm="syz.1.1965" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 562.621845][ T5927] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 562.645855][T10392] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 562.661430][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.686581][ T5927] usb 1-1: config 0 descriptor?? [ 562.712016][ T30] audit: type=1326 audit(1753392194.151:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12407 comm="syz.1.1965" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 562.725788][ T5842] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 562.755919][ T5842] usb 4-1: device descriptor read/8, error -71 [ 562.802959][ T30] audit: type=1326 audit(1753392194.151:3634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12407 comm="syz.1.1965" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x7ffc0000 [ 562.805360][T10392] usb 2-1: Using ep0 maxpacket: 8 [ 562.837594][T10392] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 562.859292][T10392] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 562.872054][T10392] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.919728][T10392] usb 2-1: config 0 descriptor?? [ 563.010212][ T5842] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 563.769569][ T5842] usb 4-1: device descriptor read/8, error -71 [ 563.779651][ T5854] Bluetooth: hci0: unexpected event for opcode 0x201c [ 563.913289][ T5842] usb usb4-port1: unable to enumerate USB device [ 563.936686][ T5927] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 564.060448][T10392] corsair 0003:1B1C:1B09.001F: unbalanced delimiter at end of report description [ 564.148114][T10392] corsair 0003:1B1C:1B09.001F: parse failed [ 564.154587][T10392] corsair 0003:1B1C:1B09.001F: probe with driver corsair failed with error -22 [ 564.274182][T12417] tipc: Enabled bearer , priority 0 [ 564.335986][T12417] syzkaller0: entered promiscuous mode [ 564.341616][T12417] syzkaller0: entered allmulticast mode [ 564.439307][T12438] tipc: Resetting bearer [ 564.460442][T10370] usb 2-1: USB disconnect, device number 93 [ 564.512864][T12416] tipc: Resetting bearer [ 564.551464][T12416] tipc: Disabling bearer [ 564.655577][T10392] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 564.870438][ T30] audit: type=1326 audit(1753392196.801:3635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.3.1974" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 565.105323][ T30] audit: type=1326 audit(1753392197.161:3636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.3.1974" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 565.120202][T10392] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 565.181021][T12441] netlink: 'syz.3.1974': attribute type 10 has an invalid length. [ 565.184708][T10392] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 565.270250][T10392] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 565.346535][ T5927] usb 1-1: reset high-speed USB device number 27 using dummy_hcd [ 565.393709][ T30] audit: type=1326 audit(1753392197.161:3637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.3.1974" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 565.440482][T10392] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 565.479355][T10392] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 565.522475][T10392] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 565.534128][T10392] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.565006][T10392] usb 5-1: Product: syz [ 565.573990][T10392] usb 5-1: Manufacturer: syz [ 565.581790][T10392] usb 5-1: SerialNumber: syz [ 565.614198][T10392] usb 5-1: config 0 descriptor?? [ 565.643686][T10392] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input83 [ 565.886846][T12435] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1973'. [ 565.903671][T10370] usb 5-1: USB disconnect, device number 96 [ 565.918242][T12450] FAULT_INJECTION: forcing a failure. [ 565.918242][T12450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.951478][T12450] CPU: 1 UID: 0 PID: 12450 Comm: syz.1.1976 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 565.951511][T12450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 565.951525][T12450] Call Trace: [ 565.951533][T12450] [ 565.951541][T12450] dump_stack_lvl+0x189/0x250 [ 565.951570][T12450] ? __pfx____ratelimit+0x10/0x10 [ 565.951592][T12450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 565.951615][T12450] ? __pfx__printk+0x10/0x10 [ 565.951651][T12450] should_fail_ex+0x414/0x560 [ 565.951676][T12450] _copy_from_user+0x2d/0xb0 [ 565.951703][T12450] get_compat_sigset+0x22/0x50 [ 565.951727][T12450] set_compat_user_sigmask+0x9c/0x1b0 [ 565.951751][T12450] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 565.951785][T12450] __ia32_compat_sys_ppoll_time32+0x269/0x300 [ 565.951833][T12450] ? fput+0xa0/0xd0 [ 565.951865][T12450] ? __pfx___ia32_compat_sys_ppoll_time32+0x10/0x10 [ 565.951904][T12450] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 565.951929][T12450] ? lockdep_hardirqs_on+0x9c/0x150 [ 565.951954][T12450] __do_fast_syscall_32+0xb6/0x2b0 [ 565.951980][T12450] ? lockdep_hardirqs_on+0x9c/0x150 [ 565.952006][T12450] do_fast_syscall_32+0x34/0x80 [ 565.952031][T12450] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 565.952055][T12450] RIP: 0023:0xf7f04539 [ 565.952073][T12450] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 565.952091][T12450] RSP: 002b:00000000f500555c EFLAGS: 00000206 ORIG_RAX: 0000000000000135 [ 565.952113][T12450] RAX: ffffffffffffffda RBX: 0000000080000100 RCX: 0000000000000001 [ 565.952128][T12450] RDX: 0000000000000000 RSI: 0000000080000080 RDI: 0000000000000008 [ 565.952141][T12450] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 565.952153][T12450] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 565.952164][T12450] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 565.952193][T12450] [ 566.936523][T12467] FAULT_INJECTION: forcing a failure. [ 566.936523][T12467] name failslab, interval 1, probability 0, space 0, times 0 [ 566.957073][T12467] CPU: 1 UID: 0 PID: 12467 Comm: syz.4.1981 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 566.957101][T12467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 566.957113][T12467] Call Trace: [ 566.957122][T12467] [ 566.957132][T12467] dump_stack_lvl+0x189/0x250 [ 566.957160][T12467] ? __pfx____ratelimit+0x10/0x10 [ 566.957183][T12467] ? __pfx_dump_stack_lvl+0x10/0x10 [ 566.957206][T12467] ? __pfx__printk+0x10/0x10 [ 566.957241][T12467] ? __pfx___might_resched+0x10/0x10 [ 566.957262][T12467] ? fs_reclaim_acquire+0x7d/0x100 [ 566.957289][T12467] should_fail_ex+0x414/0x560 [ 566.957316][T12467] should_failslab+0xa8/0x100 [ 566.957349][T12467] __kmalloc_noprof+0xcb/0x4f0 [ 566.957376][T12467] ? io_cache_alloc_new+0x40/0x100 [ 566.957408][T12467] io_cache_alloc_new+0x40/0x100 [ 566.957437][T12467] __io_prep_rw+0x23f/0xd80 [ 566.957468][T12467] ? __pfx___io_prep_rw+0x10/0x10 [ 566.957489][T12467] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 566.957542][T12467] io_prep_write+0x25/0xd0 [ 566.957564][T12467] io_submit_sqes+0x90f/0x1c50 [ 566.957615][T12467] __se_sys_io_uring_enter+0x2df/0x2b20 [ 566.957657][T12467] ? ksys_write+0x1cb/0x250 [ 566.957688][T12467] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 566.957708][T12467] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 566.957734][T12467] ? __pfx_vfs_write+0x10/0x10 [ 566.957769][T12467] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 566.957799][T12467] ? __fget_files+0x3a0/0x420 [ 566.957825][T12467] ? fput+0xa0/0xd0 [ 566.957847][T12467] ? ksys_write+0x22a/0x250 [ 566.957883][T12467] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 566.957907][T12467] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 566.957932][T12467] __do_fast_syscall_32+0xb6/0x2b0 [ 566.957959][T12467] ? lockdep_hardirqs_on+0x9c/0x150 [ 566.957987][T12467] do_fast_syscall_32+0x34/0x80 [ 566.958032][T12467] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 566.958056][T12467] RIP: 0023:0xf7f35539 [ 566.958073][T12467] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 566.958089][T12467] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 566.958110][T12467] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000000021ac [ 566.958123][T12467] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 566.958135][T12467] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 566.958147][T12467] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 566.958159][T12467] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 566.958189][T12467] [ 567.747432][ T5842] usb 1-1: USB disconnect, device number 27 [ 567.853423][T12473] tipc: Enabled bearer , priority 0 [ 567.873828][T12473] syzkaller0: entered promiscuous mode [ 567.910719][T12473] syzkaller0: entered allmulticast mode [ 567.914958][T12477] FAULT_INJECTION: forcing a failure. [ 567.914958][T12477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.939272][T12477] CPU: 0 UID: 0 PID: 12477 Comm: syz.3.1986 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 567.939301][T12477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 567.939315][T12477] Call Trace: [ 567.939324][T12477] [ 567.939333][T12477] dump_stack_lvl+0x189/0x250 [ 567.939363][T12477] ? __pfx____ratelimit+0x10/0x10 [ 567.939388][T12477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 567.939414][T12477] ? __pfx__printk+0x10/0x10 [ 567.939444][T12477] ? __might_fault+0xb0/0x130 [ 567.939485][T12477] should_fail_ex+0x414/0x560 [ 567.939515][T12477] _copy_from_user+0x2d/0xb0 [ 567.939547][T12477] kstrtouint_from_user+0xc4/0x170 [ 567.939576][T12477] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 567.939620][T12477] proc_fail_nth_write+0x88/0x240 [ 567.939643][T12477] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 567.939671][T12477] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 567.939695][T12477] vfs_write+0x27e/0xa90 [ 567.939732][T12477] ? __pfx_vfs_write+0x10/0x10 [ 567.939763][T12477] ? __fget_files+0x2a/0x420 [ 567.939787][T12477] ? __fget_files+0x3a0/0x420 [ 567.939804][T12477] ? __fget_files+0x2a/0x420 [ 567.939834][T12477] ksys_write+0x145/0x250 [ 567.939874][T12477] ? __pfx_ksys_write+0x10/0x10 [ 567.939906][T12477] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 567.939931][T12477] ? lockdep_hardirqs_on+0x9c/0x150 [ 567.939957][T12477] __do_fast_syscall_32+0xb6/0x2b0 [ 567.939984][T12477] ? lockdep_hardirqs_on+0x9c/0x150 [ 567.940012][T12477] do_fast_syscall_32+0x34/0x80 [ 567.940039][T12477] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 567.940064][T12477] RIP: 0023:0xf70ee539 [ 567.940094][T12477] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 567.940112][T12477] RSP: 002b:00000000f50de590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 567.940133][T12477] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50de620 [ 567.940147][T12477] RDX: 0000000000000001 RSI: 00000000f7454ff4 RDI: 0000000000000000 [ 567.940158][T12477] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 567.940169][T12477] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 567.940181][T12477] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 567.940211][T12477] [ 567.975244][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 567.975268][ T30] audit: type=1326 audit(1753392200.021:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12478 comm="syz.2.1985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 568.212525][T12482] tipc: Resetting bearer [ 568.218225][ T30] audit: type=1326 audit(1753392200.021:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12478 comm="syz.2.1985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 568.249266][ T30] audit: type=1326 audit(1753392200.021:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12478 comm="syz.2.1985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 568.275884][T12479] netlink: 'syz.2.1985': attribute type 10 has an invalid length. [ 568.315236][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.323802][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.332865][ T30] audit: type=1326 audit(1753392200.021:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12478 comm="syz.2.1985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 568.344933][T12472] tipc: Resetting bearer [ 568.355395][ T30] audit: type=1326 audit(1753392200.021:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12478 comm="syz.2.1985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 568.355453][ T30] audit: type=1326 audit(1753392200.021:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12478 comm="syz.2.1985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 568.355500][ T30] audit: type=1326 audit(1753392200.021:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12478 comm="syz.2.1985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 568.355547][ T30] audit: type=1326 audit(1753392200.021:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12478 comm="syz.2.1985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 568.355592][ T30] audit: type=1326 audit(1753392200.021:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12478 comm="syz.2.1985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 568.355639][ T30] audit: type=1326 audit(1753392200.021:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12478 comm="syz.2.1985" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 568.528921][T12472] tipc: Disabling bearer [ 568.575635][ T5842] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 568.767592][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.790440][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.819558][ T5842] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 568.885078][ T5842] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 568.945489][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.968863][ T5842] usb 4-1: config 0 descriptor?? [ 569.125347][T10371] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 569.285747][T10371] usb 3-1: Using ep0 maxpacket: 32 [ 569.390887][T10371] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 569.399399][T10371] usb 3-1: config 0 has no interface number 0 [ 569.552687][T10371] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 569.712361][T10371] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.755353][T10371] usb 3-1: Product: syz [ 569.759667][T10371] usb 3-1: Manufacturer: syz [ 569.773449][T10371] usb 3-1: SerialNumber: syz [ 570.206227][T10371] usb 3-1: config 0 descriptor?? [ 570.237233][T10371] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 570.246712][T10371] usb 3-1: selecting invalid altsetting 1 [ 570.252623][T10371] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 570.287610][T10371] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 570.308361][ T5842] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 570.322825][T10371] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 570.362092][T10371] usb 3-1: media controller created [ 570.504904][T10371] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 570.695011][T10371] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 570.704661][T12516] netlink: 'syz.1.1993': attribute type 27 has an invalid length. [ 570.722171][T10371] zl10353_read_register: readreg error (reg=127, ret==-71) [ 570.730941][T10371] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 570.776465][T10371] usb 3-1: USB disconnect, device number 97 [ 571.765479][ T5842] usb 4-1: reset high-speed USB device number 86 using dummy_hcd [ 572.609422][T12536] netlink: 'syz.1.1998': attribute type 1 has an invalid length. [ 572.707971][T12537] netlink: 'syz.4.2000': attribute type 10 has an invalid length. [ 572.897681][T12539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2001'. [ 572.943857][T12539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2001'. [ 573.012544][T12539] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2001'. [ 573.080665][T12539] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2001'. [ 574.783062][ T24] usb 4-1: USB disconnect, device number 86 [ 575.223097][T12571] FAULT_INJECTION: forcing a failure. [ 575.223097][T12571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.260478][T12571] CPU: 1 UID: 0 PID: 12571 Comm: syz.4.2011 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 575.260504][T12571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 575.260516][T12571] Call Trace: [ 575.260524][T12571] [ 575.260550][T12571] dump_stack_lvl+0x189/0x250 [ 575.260580][T12571] ? __pfx____ratelimit+0x10/0x10 [ 575.260603][T12571] ? __pfx_dump_stack_lvl+0x10/0x10 [ 575.260627][T12571] ? __pfx__printk+0x10/0x10 [ 575.260655][T12571] ? __might_fault+0xb0/0x130 [ 575.260694][T12571] should_fail_ex+0x414/0x560 [ 575.260721][T12571] _copy_from_iter+0x1db/0x16f0 [ 575.260751][T12571] ? rcu_is_watching+0x15/0xb0 [ 575.260777][T12571] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 575.260808][T12571] ? __pfx__copy_from_iter+0x10/0x10 [ 575.260836][T12571] ? __build_skb_around+0x257/0x3e0 [ 575.260870][T12571] ? netlink_sendmsg+0x642/0xb30 [ 575.260898][T12571] ? skb_put+0x11b/0x210 [ 575.260930][T12571] netlink_sendmsg+0x6b2/0xb30 [ 575.260969][T12571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.261001][T12571] ? __import_iovec+0x5d4/0x7f0 [ 575.261027][T12571] ? aa_sock_msg_perm+0x94/0x160 [ 575.261051][T12571] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 575.261073][T12571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.261103][T12571] __sock_sendmsg+0x21c/0x270 [ 575.261131][T12571] ____sys_sendmsg+0x505/0x830 [ 575.261156][T12571] ? __pfx_____sys_sendmsg+0x10/0x10 [ 575.261192][T12571] ___sys_sendmsg+0x21f/0x2a0 [ 575.261214][T12571] ? __pfx____sys_sendmsg+0x10/0x10 [ 575.261270][T12571] ? __fget_files+0x2a/0x420 [ 575.261287][T12571] ? __fget_files+0x3a0/0x420 [ 575.261316][T12571] __sys_sendmsg+0x164/0x220 [ 575.261345][T12571] ? __pfx___sys_sendmsg+0x10/0x10 [ 575.261379][T12571] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 575.261404][T12571] ? lockdep_hardirqs_on+0x9c/0x150 [ 575.261428][T12571] __do_fast_syscall_32+0xb6/0x2b0 [ 575.261454][T12571] ? lockdep_hardirqs_on+0x9c/0x150 [ 575.261480][T12571] do_fast_syscall_32+0x34/0x80 [ 575.261504][T12571] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 575.261538][T12571] RIP: 0023:0xf7f35539 [ 575.261555][T12571] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 575.261571][T12571] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 575.261590][T12571] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 575.261603][T12571] RDX: 0000000020004804 RSI: 0000000000000000 RDI: 0000000000000000 [ 575.261614][T12571] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 575.261624][T12571] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 575.261635][T12571] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 575.261662][T12571] [ 575.540055][ C1] vkms_vblank_simulate: vblank timer overrun [ 575.724339][T12578] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 576.068216][T12586] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4. [ 576.629250][T12601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2019'. [ 576.641188][T12601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2019'. [ 577.413430][T12612] program syz.2.2024 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 577.675427][T10371] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 577.720552][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 577.720568][ T30] audit: type=1326 audit(1753392209.791:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12614 comm="syz.4.2025" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35539 code=0x7ffc0000 [ 577.767405][ T30] audit: type=1326 audit(1753392209.821:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12614 comm="syz.4.2025" exe="/root/syz-executor" sig=0 arch=40000003 syscall=266 compat=1 ip=0xf7f35539 code=0x7ffc0000 [ 577.794182][ T30] audit: type=1326 audit(1753392209.821:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12614 comm="syz.4.2025" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35539 code=0x7ffc0000 [ 577.841793][T10371] usb 3-1: unable to get BOS descriptor or descriptor too short [ 577.855875][T10371] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 577.863413][T12621] FAULT_INJECTION: forcing a failure. [ 577.863413][T12621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.869208][ T30] audit: type=1326 audit(1753392209.821:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12614 comm="syz.4.2025" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35539 code=0x7ffc0000 [ 577.903154][T12621] CPU: 1 UID: 0 PID: 12621 Comm: syz.3.2026 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 577.903191][T12621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 577.903207][T12621] Call Trace: [ 577.903217][T12621] [ 577.903228][T12621] dump_stack_lvl+0x189/0x250 [ 577.903265][T12621] ? __pfx____ratelimit+0x10/0x10 [ 577.903293][T12621] ? __pfx_dump_stack_lvl+0x10/0x10 [ 577.903318][T12621] ? __pfx__printk+0x10/0x10 [ 577.903359][T12621] should_fail_ex+0x414/0x560 [ 577.903386][T12621] _copy_to_user+0x31/0xb0 [ 577.903418][T12621] simple_read_from_buffer+0xe1/0x170 [ 577.903455][T12621] proc_fail_nth_read+0x1df/0x250 [ 577.903480][T12621] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 577.903508][T12621] ? rw_verify_area+0x258/0x650 [ 577.903539][T12621] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 577.903567][T12621] vfs_read+0x200/0x980 [ 577.903605][T12621] ? __pfx___mutex_lock+0x10/0x10 [ 577.903635][T12621] ? __pfx_vfs_read+0x10/0x10 [ 577.903668][T12621] ? __fget_files+0x2a/0x420 [ 577.903695][T12621] ? __fget_files+0x3a0/0x420 [ 577.903715][T12621] ? __fget_files+0x2a/0x420 [ 577.903748][T12621] ksys_read+0x145/0x250 [ 577.903783][T12621] ? __pfx_ksys_read+0x10/0x10 [ 577.903817][T12621] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 577.903855][T12621] ? lockdep_hardirqs_on+0x9c/0x150 [ 577.903884][T12621] __do_fast_syscall_32+0xb6/0x2b0 [ 577.903913][T12621] ? lockdep_hardirqs_on+0x9c/0x150 [ 577.903945][T12621] do_fast_syscall_32+0x34/0x80 [ 577.903973][T12621] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 577.904002][T12621] RIP: 0023:0xf70ee539 [ 577.904023][T12621] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 577.904043][T12621] RSP: 002b:00000000f50de590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 577.904069][T12621] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50de620 [ 577.904084][T12621] RDX: 000000000000000f RSI: 00000000f7454ff4 RDI: 0000000000000000 [ 577.904105][T12621] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 577.904119][T12621] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 577.904132][T12621] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 577.904168][T12621] [ 578.133383][T10371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 31360, setting to 1024 [ 578.155169][T10371] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 578.165276][T10371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 578.175040][T10371] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 578.187143][ T30] audit: type=1326 audit(1753392209.831:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12614 comm="syz.4.2025" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f35539 code=0x7ffc0000 [ 578.211741][T10371] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 578.221456][T10371] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.229736][T10371] usb 3-1: Product: syz [ 578.234081][T10371] usb 3-1: Manufacturer: syz [ 578.261601][ T30] audit: type=1326 audit(1753392209.831:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12614 comm="syz.4.2025" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35539 code=0x7ffc0000 [ 578.289739][T10371] usb 3-1: SerialNumber: syz [ 578.307124][T10371] usb 3-1: config 0 descriptor?? [ 578.313018][T12612] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 578.318520][T12627] FAULT_INJECTION: forcing a failure. [ 578.318520][T12627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 578.356261][T12627] CPU: 1 UID: 0 PID: 12627 Comm: syz.3.2029 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 578.356287][T12627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 578.356300][T12627] Call Trace: [ 578.356307][T12627] [ 578.356316][T12627] dump_stack_lvl+0x189/0x250 [ 578.356344][T12627] ? __pfx____ratelimit+0x10/0x10 [ 578.356367][T12627] ? __pfx_dump_stack_lvl+0x10/0x10 [ 578.356389][T12627] ? __pfx__printk+0x10/0x10 [ 578.356415][T12627] ? __might_fault+0xb0/0x130 [ 578.356451][T12627] should_fail_ex+0x414/0x560 [ 578.356472][T10371] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 578.356477][T12627] _copy_from_iter+0x1db/0x16f0 [ 578.356506][T12627] ? rcu_is_watching+0x15/0xb0 [ 578.356530][T12627] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 578.356563][T12627] ? __pfx__copy_from_iter+0x10/0x10 [ 578.356593][T12627] ? __build_skb_around+0x257/0x3e0 [ 578.356631][T12627] ? netlink_sendmsg+0x642/0xb30 [ 578.356677][T12627] ? skb_put+0x11b/0x210 [ 578.356732][T12627] netlink_sendmsg+0x6b2/0xb30 [ 578.356776][T12627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.356810][T12627] ? __import_iovec+0x5d4/0x7f0 [ 578.356840][T12627] ? aa_sock_msg_perm+0x94/0x160 [ 578.356868][T12627] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 578.356893][T12627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.356928][T12627] __sock_sendmsg+0x21c/0x270 [ 578.356960][T12627] ____sys_sendmsg+0x505/0x830 [ 578.356989][T12627] ? __pfx_____sys_sendmsg+0x10/0x10 [ 578.357030][T12627] ___sys_sendmsg+0x21f/0x2a0 [ 578.357062][T12627] ? __pfx____sys_sendmsg+0x10/0x10 [ 578.357126][T12627] ? __fget_files+0x2a/0x420 [ 578.357146][T12627] ? __fget_files+0x3a0/0x420 [ 578.357179][T12627] __sys_sendmsg+0x164/0x220 [ 578.357202][T12627] ? __pfx___sys_sendmsg+0x10/0x10 [ 578.357242][T12627] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 578.357270][T12627] ? lockdep_hardirqs_on+0x9c/0x150 [ 578.357299][T12627] __do_fast_syscall_32+0xb6/0x2b0 [ 578.357328][T12627] ? lockdep_hardirqs_on+0x9c/0x150 [ 578.357357][T12627] do_fast_syscall_32+0x34/0x80 [ 578.357385][T12627] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 578.357414][T12627] RIP: 0023:0xf70ee539 [ 578.357433][T12627] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 578.357452][T12627] RSP: 002b:00000000f50de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 578.357476][T12627] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 578.357493][T12627] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 578.357505][T12627] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 578.357520][T12627] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 578.357533][T12627] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 578.357565][T12627] [ 578.481778][ T30] audit: type=1326 audit(1753392209.831:3780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12614 comm="syz.4.2025" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35539 code=0x7ffc0000 [ 578.668070][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.670024][T10371] usb 3-1: USB disconnect, device number 98 [ 578.843541][ T30] audit: type=1326 audit(1753392209.841:3781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12614 comm="syz.4.2025" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f35539 code=0x7ffc0000 [ 578.995313][T10370] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 579.437421][ T30] audit: type=1326 audit(1753392211.501:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12650 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 579.512213][ T30] audit: type=1326 audit(1753392211.501:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12650 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 579.755367][T10371] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 579.955270][T10376] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 579.987549][T12661] FAULT_INJECTION: forcing a failure. [ 579.987549][T12661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 580.002552][T12661] CPU: 0 UID: 0 PID: 12661 Comm: syz.1.2039 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 580.002581][T12661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 580.002593][T12661] Call Trace: [ 580.002601][T12661] [ 580.002610][T12661] dump_stack_lvl+0x189/0x250 [ 580.002637][T12661] ? __pfx____ratelimit+0x10/0x10 [ 580.002660][T12661] ? __pfx_dump_stack_lvl+0x10/0x10 [ 580.002689][T12661] ? __pfx__printk+0x10/0x10 [ 580.002715][T12661] ? __might_fault+0xb0/0x130 [ 580.002752][T12661] should_fail_ex+0x414/0x560 [ 580.002777][T12661] _copy_from_iter+0x1db/0x16f0 [ 580.002806][T12661] ? rcu_is_watching+0x15/0xb0 [ 580.002829][T12661] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 580.002857][T12661] ? __pfx__copy_from_iter+0x10/0x10 [ 580.002884][T12661] ? __build_skb_around+0x257/0x3e0 [ 580.002915][T12661] ? netlink_sendmsg+0x642/0xb30 [ 580.002941][T12661] ? skb_put+0x11b/0x210 [ 580.002972][T12661] netlink_sendmsg+0x6b2/0xb30 [ 580.003008][T12661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 580.003038][T12661] ? __import_iovec+0x5d4/0x7f0 [ 580.003063][T12661] ? aa_sock_msg_perm+0x94/0x160 [ 580.003086][T12661] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 580.003106][T12661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 580.003135][T12661] __sock_sendmsg+0x21c/0x270 [ 580.003161][T12661] ____sys_sendmsg+0x52d/0x830 [ 580.003185][T12661] ? __pfx_____sys_sendmsg+0x10/0x10 [ 580.003219][T12661] ___sys_sendmsg+0x21f/0x2a0 [ 580.003258][T12661] ? __pfx____sys_sendmsg+0x10/0x10 [ 580.003316][T12661] ? __fget_files+0x2a/0x420 [ 580.003335][T12661] ? __fget_files+0x3a0/0x420 [ 580.003365][T12661] __sys_sendmmsg+0x28e/0x430 [ 580.003391][T12661] ? __pfx___sys_sendmmsg+0x10/0x10 [ 580.003421][T12661] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 580.003466][T12661] ? ksys_write+0x22a/0x250 [ 580.003506][T12661] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 580.003529][T12661] __do_fast_syscall_32+0xb6/0x2b0 [ 580.003556][T12661] ? lockdep_hardirqs_on+0x9c/0x150 [ 580.003583][T12661] do_fast_syscall_32+0x34/0x80 [ 580.003609][T12661] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 580.003634][T12661] RIP: 0023:0xf7f04539 [ 580.003652][T12661] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 580.003677][T12661] RSP: 002b:00000000f502655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 580.003699][T12661] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000140 [ 580.003713][T12661] RDX: 0000000004924b68 RSI: 0000000000000000 RDI: 0000000000000000 [ 580.003726][T12661] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 580.003738][T12661] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 580.003750][T12661] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 580.003779][T12661] [ 580.442310][T10371] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.452758][T10371] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 580.464535][T10371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 580.475550][T10371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 580.517234][T10371] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 580.593414][T10376] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 580.626545][T10376] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 580.638135][T10376] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 580.649198][T10376] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 580.659055][T10376] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 580.683060][T10376] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 580.695248][T10376] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.703827][T10371] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 580.719975][T10371] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 580.728215][T10371] usb 4-1: Product: syz [ 580.740861][T10376] usb 1-1: Product: syz [ 580.745309][T10371] usb 4-1: Manufacturer: syz [ 580.749967][T10371] usb 4-1: SerialNumber: syz [ 580.755748][T10376] usb 1-1: Manufacturer: syz [ 580.773524][T10376] usb 1-1: SerialNumber: syz [ 580.820958][T10371] usb 4-1: config 0 descriptor?? [ 580.877760][T10376] usb 1-1: config 0 descriptor?? [ 580.964147][T10376] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input84 [ 581.155567][T12657] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2038'. [ 581.188270][T10371] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 581.212520][ T24] usb 1-1: USB disconnect, device number 28 [ 581.229600][T10371] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 581.289341][T12645] futex_wake_op: syz.4.2035 tries to shift op by -49; fix this program [ 581.350878][T12645] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 581.390971][T10371] radio-si470x 4-1:0.0: software version 239, hardware version 199 [ 581.433358][T10371] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 581.471210][T12666] netlink: 'syz.2.2041': attribute type 10 has an invalid length. [ 581.484267][T12666] netlink: 'syz.2.2041': attribute type 10 has an invalid length. [ 581.591260][T10371] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 581.826156][T10371] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 581.861536][T10371] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 581.885174][T10371] usb 4-1: USB disconnect, device number 87 [ 581.999307][ T5842] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 582.216907][ T5842] usb 3-1: config 0 has no interfaces? [ 582.225435][T12675] FAULT_INJECTION: forcing a failure. [ 582.225435][T12675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 582.233932][ T5842] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 582.250715][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.267015][ T5842] usb 3-1: Product: syz [ 582.279545][ T5842] usb 3-1: Manufacturer: syz [ 582.293032][ T5842] usb 3-1: SerialNumber: syz [ 582.321619][ T5842] usb 3-1: config 0 descriptor?? [ 582.335249][T12675] CPU: 0 UID: 0 PID: 12675 Comm: syz.1.2044 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 582.335276][T12675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 582.335289][T12675] Call Trace: [ 582.335297][T12675] [ 582.335305][T12675] dump_stack_lvl+0x189/0x250 [ 582.335334][T12675] ? __pfx____ratelimit+0x10/0x10 [ 582.335357][T12675] ? __pfx_dump_stack_lvl+0x10/0x10 [ 582.335380][T12675] ? __pfx__printk+0x10/0x10 [ 582.335406][T12675] ? __might_fault+0xb0/0x130 [ 582.335442][T12675] should_fail_ex+0x414/0x560 [ 582.335468][T12675] _copy_from_iter+0x1db/0x16f0 [ 582.335497][T12675] ? rcu_is_watching+0x15/0xb0 [ 582.335544][T12675] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 582.335573][T12675] ? __pfx__copy_from_iter+0x10/0x10 [ 582.335599][T12675] ? __build_skb_around+0x257/0x3e0 [ 582.335631][T12675] ? netlink_sendmsg+0x642/0xb30 [ 582.335657][T12675] ? skb_put+0x11b/0x210 [ 582.335688][T12675] netlink_sendmsg+0x6b2/0xb30 [ 582.335724][T12675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 582.335756][T12675] ? __import_iovec+0x5d4/0x7f0 [ 582.335780][T12675] ? aa_sock_msg_perm+0x94/0x160 [ 582.335803][T12675] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 582.335823][T12675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 582.335851][T12675] __sock_sendmsg+0x21c/0x270 [ 582.335878][T12675] ____sys_sendmsg+0x505/0x830 [ 582.335901][T12675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 582.335944][T12675] ___sys_sendmsg+0x21f/0x2a0 [ 582.335963][T12675] ? __pfx____sys_sendmsg+0x10/0x10 [ 582.336013][T12675] ? __fget_files+0x2a/0x420 [ 582.336029][T12675] ? __fget_files+0x3a0/0x420 [ 582.336055][T12675] __sys_sendmsg+0x164/0x220 [ 582.336074][T12675] ? __pfx___sys_sendmsg+0x10/0x10 [ 582.336103][T12675] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 582.336126][T12675] ? lockdep_hardirqs_on+0x9c/0x150 [ 582.336147][T12675] __do_fast_syscall_32+0xb6/0x2b0 [ 582.336169][T12675] ? lockdep_hardirqs_on+0x9c/0x150 [ 582.336211][T12675] do_fast_syscall_32+0x34/0x80 [ 582.336233][T12675] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 582.336256][T12675] RIP: 0023:0xf7f04539 [ 582.336273][T12675] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 582.336289][T12675] RSP: 002b:00000000f502655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 582.336312][T12675] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 582.336327][T12675] RDX: 0000000004000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 582.336339][T12675] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 582.336350][T12675] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 582.336373][T12675] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 582.336401][T12675] [ 583.335437][ T24] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 583.725245][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 583.765453][ T5842] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 584.004195][ T24] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 584.017512][ T24] usb 1-1: config 179 has no interface number 0 [ 584.038556][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 584.427926][ T5842] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 584.465272][ T5842] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 584.563274][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 584.574728][ T5842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 584.605241][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 584.625495][ T5842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 584.645591][ T5842] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 584.658671][ T24] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 584.677352][ T24] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 584.696015][ T5842] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 584.705934][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.713928][ T5842] usb 2-1: Product: syz [ 584.745288][ T24] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 584.754477][ T5842] usb 2-1: Manufacturer: syz [ 584.764672][ T5842] usb 2-1: SerialNumber: syz [ 584.785304][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.816843][ T5842] usb 2-1: config 0 descriptor?? [ 584.826032][T12691] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 584.872855][ T5842] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input85 [ 585.115471][T10370] usb 3-1: USB disconnect, device number 99 [ 585.135907][T12697] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 585.190396][T12709] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2053'. [ 585.284155][T10376] usb 2-1: USB disconnect, device number 95 [ 585.360719][T12691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.435524][T12713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2054'. [ 585.455902][T12691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.711852][T10376] usb 1-1: USB disconnect, device number 29 [ 585.711943][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 585.726332][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 585.735349][ C1] ================================================================== [ 585.743452][ C1] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23d/0x290 [ 585.751301][ C1] Read of size 4 at addr ffff8880634ac85c by task udevd/6002 [ 585.758677][ C1] [ 585.761006][ C1] CPU: 1 UID: 0 PID: 6002 Comm: udevd Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 585.761025][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 585.761035][ C1] Call Trace: [ 585.761041][ C1] [ 585.761048][ C1] dump_stack_lvl+0x189/0x250 [ 585.761069][ C1] ? __kasan_check_byte+0x12/0x40 [ 585.761092][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 585.761110][ C1] ? lock_release+0x4b/0x3e0 [ 585.761127][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 585.761147][ C1] print_report+0xca/0x230 [ 585.761160][ C1] ? do_raw_spin_lock+0x23d/0x290 [ 585.761180][ C1] kasan_report+0x118/0x150 [ 585.761202][ C1] ? do_raw_spin_lock+0x23d/0x290 [ 585.761225][ C1] do_raw_spin_lock+0x23d/0x290 [ 585.761246][ C1] ? __wake_up_common_lock+0x2f/0x1f0 [ 585.761268][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 585.761298][ C1] _raw_spin_lock_irqsave+0xb3/0xf0 [ 585.761313][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 585.761328][ C1] ? kcov_remote_stop+0x78/0x6d0 [ 585.761353][ C1] __wake_up_common_lock+0x2f/0x1f0 [ 585.761377][ C1] __usb_hcd_giveback_urb+0x4d7/0x690 [ 585.761401][ C1] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 585.761425][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 585.761451][ C1] ? usb_hcd_giveback_urb+0x10e/0x420 [ 585.761474][ C1] dummy_timer+0x862/0x4550 [ 585.761506][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 585.761537][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 585.761561][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 585.761583][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 585.761604][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 585.761628][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 585.761644][ C1] ? read_tsc+0x9/0x20 [ 585.761657][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 585.761677][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 585.761696][ C1] handle_softirqs+0x286/0x870 [ 585.761714][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 585.761732][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 585.761752][ C1] __irq_exit_rcu+0xca/0x1f0 [ 585.761768][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 585.761788][ C1] irq_exit_rcu+0x9/0x30 [ 585.761803][ C1] sysvec_apic_timer_interrupt+0x57/0xc0 [ 585.761818][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 585.761835][ C1] RIP: 0033:0x7f002aa36ad7 [ 585.761848][ C1] Code: 73 01 c3 48 8b 0d 21 f3 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 [ 585.761862][ C1] RSP: 002b:00007ffd28f87428 EFLAGS: 00000297 [ 585.761875][ C1] RAX: 0000000000000000 RBX: 0000560a48465c90 RCX: 00007f002aa36ad7 [ 585.761886][ C1] RDX: 00007f002ab14ea0 RSI: 00007ffd28f87430 RDI: 0000000000000008 [ 585.761896][ C1] RBP: 00007f002ab14ff0 R08: 0000000000000001 R09: 0000000000000000 [ 585.761906][ C1] R10: 0000000000000000 R11: 0000000000000297 R12: 000000000000000a [ 585.761915][ C1] R13: 0000000000003fff R14: 0000000000000000 R15: 0000560a48465c90 [ 585.761931][ C1] [ 585.761936][ C1] [ 586.058772][ C1] Allocated by task 24: [ 586.063015][ C1] kasan_save_track+0x3e/0x80 [ 586.067708][ C1] __kasan_kmalloc+0x93/0xb0 [ 586.072310][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 586.077702][ C1] xpad_probe+0x428/0x1fc0 [ 586.082123][ C1] usb_probe_interface+0x641/0xbc0 [ 586.087245][ C1] really_probe+0x26d/0x9a0 [ 586.091777][ C1] __driver_probe_device+0x18c/0x2f0 [ 586.097072][ C1] driver_probe_device+0x4f/0x430 [ 586.102101][ C1] __device_attach_driver+0x2ce/0x530 [ 586.107494][ C1] bus_for_each_drv+0x24e/0x2e0 [ 586.112381][ C1] __device_attach+0x2b8/0x400 [ 586.117180][ C1] bus_probe_device+0x185/0x260 [ 586.122070][ C1] device_add+0x7b6/0xb50 [ 586.126427][ C1] usb_set_configuration+0x1a87/0x20e0 [ 586.131900][ C1] usb_generic_driver_probe+0x8d/0x150 [ 586.137377][ C1] usb_probe_device+0x1c1/0x390 [ 586.142250][ C1] really_probe+0x26d/0x9a0 [ 586.146765][ C1] __driver_probe_device+0x18c/0x2f0 [ 586.152055][ C1] driver_probe_device+0x4f/0x430 [ 586.157085][ C1] __device_attach_driver+0x2ce/0x530 [ 586.162468][ C1] bus_for_each_drv+0x24e/0x2e0 [ 586.167343][ C1] __device_attach+0x2b8/0x400 [ 586.172107][ C1] bus_probe_device+0x185/0x260 [ 586.176960][ C1] device_add+0x7b6/0xb50 [ 586.181301][ C1] usb_new_device+0xa39/0x16c0 [ 586.186071][ C1] hub_event+0x2958/0x4a20 [ 586.190505][ C1] process_scheduled_works+0xae1/0x17b0 [ 586.196072][ C1] worker_thread+0x8a0/0xda0 [ 586.200670][ C1] kthread+0x70e/0x8a0 [ 586.204744][ C1] ret_from_fork+0x3fc/0x770 [ 586.209335][ C1] ret_from_fork_asm+0x1a/0x30 [ 586.214109][ C1] [ 586.216438][ C1] Freed by task 10376: [ 586.220518][ C1] kasan_save_track+0x3e/0x80 [ 586.225209][ C1] kasan_save_free_info+0x46/0x50 [ 586.230237][ C1] __kasan_slab_free+0x62/0x70 [ 586.235006][ C1] kfree+0x18e/0x440 [ 586.238921][ C1] xpad_disconnect+0x350/0x480 [ 586.243696][ C1] usb_unbind_interface+0x26b/0x8f0 [ 586.248903][ C1] device_release_driver_internal+0x4d9/0x7c0 [ 586.254978][ C1] bus_remove_device+0x34d/0x410 [ 586.259923][ C1] device_del+0x511/0x8e0 [ 586.264269][ C1] usb_disable_device+0x3e9/0x8a0 [ 586.269316][ C1] usb_disconnect+0x330/0x950 [ 586.273993][ C1] hub_event+0x1cf5/0x4a20 [ 586.278419][ C1] process_scheduled_works+0xae1/0x17b0 [ 586.283976][ C1] worker_thread+0x8a0/0xda0 [ 586.288592][ C1] kthread+0x70e/0x8a0 [ 586.292667][ C1] ret_from_fork+0x3fc/0x770 [ 586.297261][ C1] ret_from_fork_asm+0x1a/0x30 [ 586.302035][ C1] [ 586.304379][ C1] The buggy address belongs to the object at ffff8880634ac800 [ 586.304379][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 586.318438][ C1] The buggy address is located 92 bytes inside of [ 586.318438][ C1] freed 1024-byte region [ffff8880634ac800, ffff8880634acc00) [ 586.332586][ C1] [ 586.334913][ C1] The buggy address belongs to the physical page: [ 586.341339][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880634aa000 pfn:0x634a8 [ 586.351406][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 586.359923][ C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 586.368426][ C1] page_type: f5(slab) [ 586.372418][ C1] raw: 00fff00000000240 ffff88801a441dc0 ffffea0001949410 ffffea0001fcf610 [ 586.381007][ C1] raw: ffff8880634aa000 000000000010000f 00000000f5000000 0000000000000000 [ 586.389596][ C1] head: 00fff00000000240 ffff88801a441dc0 ffffea0001949410 ffffea0001fcf610 [ 586.398264][ C1] head: ffff8880634aa000 000000000010000f 00000000f5000000 0000000000000000 [ 586.406939][ C1] head: 00fff00000000003 ffffea00018d2a01 00000000ffffffff 00000000ffffffff [ 586.415613][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 586.424299][ C1] page dumped because: kasan: bad access detected [ 586.430712][ C1] page_owner tracks the page as allocated [ 586.436426][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7484, tgid 7484 (kworker/u8:11), ts 505958463087, free_ts 501743992372 [ 586.455981][ C1] post_alloc_hook+0x240/0x2a0 [ 586.460775][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 586.466325][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 586.472132][ C1] alloc_pages_mpol+0x232/0x4a0 [ 586.476994][ C1] allocate_slab+0x8a/0x3b0 [ 586.481509][ C1] ___slab_alloc+0xbfc/0x1480 [ 586.486189][ C1] __kmalloc_noprof+0x305/0x4f0 [ 586.491052][ C1] ieee802_11_parse_elems_full+0x152/0x2aa0 [ 586.496955][ C1] ieee80211_inform_bss+0x10c/0x10a0 [ 586.502250][ C1] cfg80211_inform_single_bss_data+0xd05/0x1ac0 [ 586.508502][ C1] cfg80211_inform_bss_data+0x1fb/0x3b20 [ 586.514143][ C1] cfg80211_inform_bss_frame_data+0x3d7/0x730 [ 586.520223][ C1] ieee80211_bss_info_update+0x746/0x9e0 [ 586.525885][ C1] ieee80211_ibss_rx_queued_mgmt+0xa36/0x2ae0 [ 586.531957][ C1] ieee80211_iface_work+0x806/0xfe0 [ 586.537164][ C1] cfg80211_wiphy_work+0x2df/0x460 [ 586.542298][ C1] page last free pid 10391 tgid 10391 stack trace: [ 586.548804][ C1] __free_frozen_pages+0xc71/0xe70 [ 586.553931][ C1] kasan_depopulate_vmalloc_pte+0x74/0xa0 [ 586.559663][ C1] __apply_to_page_range+0xb92/0x1380 [ 586.565051][ C1] kasan_release_vmalloc+0xa2/0xd0 [ 586.570171][ C1] purge_vmap_node+0x214/0x8f0 [ 586.574944][ C1] __purge_vmap_area_lazy+0x7a4/0xb40 [ 586.580320][ C1] drain_vmap_area_work+0x27/0x40 [ 586.585353][ C1] process_scheduled_works+0xae1/0x17b0 [ 586.590906][ C1] worker_thread+0x8a0/0xda0 [ 586.595505][ C1] kthread+0x70e/0x8a0 [ 586.599587][ C1] ret_from_fork+0x3fc/0x770 [ 586.604181][ C1] ret_from_fork_asm+0x1a/0x30 [ 586.608960][ C1] [ 586.611288][ C1] Memory state around the buggy address: [ 586.616920][ C1] ffff8880634ac700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 586.624984][ C1] ffff8880634ac780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 586.633134][ C1] >ffff8880634ac800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 586.641201][ C1] ^ [ 586.648143][ C1] ffff8880634ac880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 586.656215][ C1] ffff8880634ac900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 586.664286][ C1] ================================================================== [ 586.672364][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 586.679565][ C1] CPU: 1 UID: 0 PID: 6002 Comm: udevd Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 586.691109][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 586.701167][ C1] Call Trace: [ 586.704543][ C1] [ 586.707487][ C1] dump_stack_lvl+0x99/0x250 [ 586.712111][ C1] ? __asan_memcpy+0x40/0x70 [ 586.716716][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 586.721927][ C1] ? __pfx__printk+0x10/0x10 [ 586.726537][ C1] panic+0x2db/0x790 [ 586.730444][ C1] ? __pfx_panic+0x10/0x10 [ 586.734881][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 586.740783][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 586.747122][ C1] ? print_memory_metadata+0x314/0x400 [ 586.752589][ C1] ? do_raw_spin_lock+0x23d/0x290 [ 586.757633][ C1] check_panic_on_warn+0x89/0xb0 [ 586.762586][ C1] ? do_raw_spin_lock+0x23d/0x290 [ 586.767622][ C1] end_report+0x78/0x160 [ 586.771885][ C1] kasan_report+0x129/0x150 [ 586.776419][ C1] ? do_raw_spin_lock+0x23d/0x290 [ 586.781482][ C1] do_raw_spin_lock+0x23d/0x290 [ 586.786346][ C1] ? __wake_up_common_lock+0x2f/0x1f0 [ 586.791729][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 586.797121][ C1] _raw_spin_lock_irqsave+0xb3/0xf0 [ 586.802327][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 586.808244][ C1] ? kcov_remote_stop+0x78/0x6d0 [ 586.813224][ C1] __wake_up_common_lock+0x2f/0x1f0 [ 586.818452][ C1] __usb_hcd_giveback_urb+0x4d7/0x690 [ 586.823840][ C1] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 586.829666][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 586.835577][ C1] ? usb_hcd_giveback_urb+0x10e/0x420 [ 586.840962][ C1] dummy_timer+0x862/0x4550 [ 586.845510][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 586.850909][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 586.855870][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 586.860820][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 586.865769][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 586.870985][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 586.876710][ C1] ? read_tsc+0x9/0x20 [ 586.880783][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 586.886594][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 586.891716][ C1] handle_softirqs+0x286/0x870 [ 586.896484][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 586.901259][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 586.906557][ C1] __irq_exit_rcu+0xca/0x1f0 [ 586.911151][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 586.916367][ C1] irq_exit_rcu+0x9/0x30 [ 586.920619][ C1] sysvec_apic_timer_interrupt+0x57/0xc0 [ 586.926256][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 586.932242][ C1] RIP: 0033:0x7f002aa36ad7 [ 586.936665][ C1] Code: 73 01 c3 48 8b 0d 21 f3 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 [ 586.956283][ C1] RSP: 002b:00007ffd28f87428 EFLAGS: 00000297 [ 586.962359][ C1] RAX: 0000000000000000 RBX: 0000560a48465c90 RCX: 00007f002aa36ad7 [ 586.970338][ C1] RDX: 00007f002ab14ea0 RSI: 00007ffd28f87430 RDI: 0000000000000008 [ 586.978317][ C1] RBP: 00007f002ab14ff0 R08: 0000000000000001 R09: 0000000000000000 [ 586.986289][ C1] R10: 0000000000000000 R11: 0000000000000297 R12: 000000000000000a [ 586.994262][ C1] R13: 0000000000003fff R14: 0000000000000000 R15: 0000560a48465c90 [ 587.002246][ C1] [ 587.005616][ C1] Kernel Offset: disabled [ 587.009945][ C1] Rebooting in 86400 seconds..