last executing test programs: 9.465043107s ago: executing program 2 (id=1490): socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) mlock2(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000440)}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x20005e, 0x0, 0x7, 0x4}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, 0x0) r5 = dup(r2) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$vim2m(0x0, 0x7, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_triestat\x00') r7 = msgget$private(0x0, 0x42) socketpair$unix(0x1, 0x1, 0x0, 0x0) msgsnd(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000000000005e7a5f2e0cea97ca84bd2954e755e8d6d548be77854b4ba670ef63025e72f088ab64ba4a6f45a27548c1306054c95b21ab13814ccf0b375ebfba651199de984bf7f5c52ab7ebbdd95583d98dfb2f6b410c2cddef2a"], 0xb9, 0x800) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) msgrcv(r7, &(0x7f0000000f40)={0x0, ""/4096}, 0x1008, 0x3, 0x1000) read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) syz_emit_ethernet(0x52, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb88a8"], 0x0) 9.158030255s ago: executing program 0 (id=1491): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x3, 0x2]}, 0x8, 0x0) r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x2, 0x4, 0x0, r0}, &(0x7f0000000180), &(0x7f0000000200)) io_uring_enter(r1, 0x2def, 0x9566, 0x0, 0x0, 0x0) syz_io_uring_setup(0x8d2, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/105, 0x69) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000180)}, {&(0x7f00000002c0)=""/7, 0x7}], 0x2) r7 = socket$nl_rdma(0x10, 0x3, 0x14) fcntl$setstatus(r6, 0x4, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x18, 0x1411, 0x1, 0x4, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) write$uinput_user_dev(r6, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x519, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0xffffffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0xfffffff1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x40], [0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x9, 0xfffffffd, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x200, 0x0, 0x0, 0x2, 0x0, 0x0, 0x31c, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc8a], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffff, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7], [0x0, 0xfffffffe, 0xff, 0x0, 0x0, 0x0, 0x200, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x10, 0x200000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r6, 0x8040552c, &(0x7f0000006480)) 7.130194205s ago: executing program 2 (id=1493): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) (async, rerun: 64) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r1, &(0x7f0000000280)="32780f", 0x3, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) (async) shutdown(r1, 0x1) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000000b0601020000000000000000000000000900020073797a310000000005000100073400001c0007800c0001800800"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) (async, rerun: 32) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async, rerun: 32) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) (async, rerun: 64) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) (async, rerun: 64) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b707000a0000e8c9951848333e77c30007000010000000029500fe00000000000039ef9620926d5fdb59564b4004f2a395f0dd6c80d1d9a6818d179686277e31b3d8b8e4bf587083e13b3fd77fbee45fc24aab637af6ec639a65bcefd843d7ce1dc08723e971899a886bba652c9932ec8663a2b035a8155a21d4f8b84f532662c8ddb96500405bb4014e798814f78393f0e49111b4174411c9205e61e70296d2eec751f27376351cb024ecf0509351cc772b21c87031612d5add371d0141ca2fbd05dd8b6ef5b1e43c1261cba7643d6608362b1111cd093e9fef480868b2018b"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000140)) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, 0x0, 0x13) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r8, &(0x7f00000009c0)=[{&(0x7f0000000140)='08', 0x2}], 0x1) (async) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0x3, 0x5, 0x1c, 0x8, 0x2, 0x4, 0x2, 0xfa, 0x2, 0x81, 0xc, 0x8000000000002000}, {0x6, 0x80, 0x8, 0xc0, 0x2, 0x6, 0x6, 0x4, 0x4, 0xff, 0x0, 0x7d}, {0x7, 0x7, 0x4, 0x8, 0x2, 0x6, 0x8, 0xb, 0xfd, 0x0, 0x56, 0x3, 0x100}]}) 6.641495708s ago: executing program 1 (id=1495): r0 = socket$inet6(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x54, r4, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = gettid() sched_getattr(r6, &(0x7f00000001c0)={0x38}, 0x29, 0x0) prctl$PR_MCE_KILL_GET(0x22) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, 0x3a, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r8 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) sched_getattr(r6, &(0x7f00000000c0)={0x38}, 0x38, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, 0x0, &(0x7f00000004c0)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x2, 0x4, 0x2, 0x6, 0x9}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg$alg(r10, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) 6.547922893s ago: executing program 0 (id=1496): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000044c0)="f0197d9c84bb4c25c3ee868248af670fa3c116300a1123e841c57451334ff24b77ac5c85c7370858e10413623b3f38077c554ab3d22d9cb97b3a60bb169d69a304c5184ff5666cc26aa06e7c80eb7789baee9bcd952abb67817ffe1eb69950d2cf07c97f71ad54e74b288c476dcecff93d149a6f5bfcb85c8d5ac93ff4b1ef3c1c3507b580573695fd576614d5d022eccf33637df374f9d318e5276fcfe8d3084cd54738695f9d244d0220d3cda3467fd1ce7d1c174364044959265ac88efa4676ee9dbb3c291e900b0894a0da2b8681f16354fe34636e896a31640caa22dd9b6cd5e752b703276cbf073e5b8144c8c0c96d820943f322decf2a4019f6e25b0c6a7a073d41f08149174018ded9d2f585cd2ad1085f866fc16186a88298ed57066d502ac1d1766c3df9e2baa1ddb65d6ba0772dfedabcd7afa7590645eecc56da92ae5335dc308923e3fe5083c37488395d035fe55bffc72c745dba7bfe731a62c9436b9d58642d0672a2e1f750bebf6f16f02e5b9d01ec99b8964d9846c54d0b556f76677fcfdf7694cccbb08ebf1212524e9da0ac2b2553fe1869d833464247b27d1bed3689cf881a83f880f7560d466f06e332153066e5607fb2969cca7627c2f13e9849734bebc3fd7ad4f2400407bd73cb0b197ddba767765ddf1e97a682d3775e24c3d22c52eb24516c7625f3b7a03d142932b854456730c1d271c627d4eb3ad04c6ec4576670d550367666a3ee96a0b31134bd990cd50273042c3563b2e31b5f8e93f1bb75abad90b773c8d7ec46a665b77e21dc9933f770d81a98e8e2f0511008545eea7e5d7f570f7f79ec115064be98ea08dfd998b0d799a67fe97853dba0e3a1a8258a1bfae0032b6583bd23df7475ae7b4c6ecbe6f414474309371c7276f692a65acd9dcbf988d77fcdc960a02249941b895bb1f587e14ef76317d76b9e920619ed90f46c94e9c4aacffc354d4ab118f2f1510818a1af194829dd4d398654df6a18b10eecc71f656cc3b43b5d619a9402d0d8468c3d6f86e17c203cc5294b634f12d9ffcd8b32af408476b636f55199bda5453812932055492d408ce7757d89cfdda14888038f76b746f9a26957e790d2c8a0c0972f18c471ad1add345bf03b524da51469a24d30b2b65515381994f2027a26a70fba3ad9516344c12df91dbba68d9ba07252f21ce259b14f725b53fb763dbaa89e994ef1db85568b57a200886c51f61ab08eb16c9b05b6a324e3ff6a11698711c37d78f0836cf00e4ea045eb1bb846508687d2cba5aeaaaf497150b36a550126a411e7542e5a5f78b3d5ff791e3f6d5a01784a56d631c01a3650f992cd4562edaee8925dde0d9940a0eba31545f863f3e910f26dd9b73fcd7c942356cc03d0485b840de5b2771823b1c4e06a747964a4113dcb2f99f3cf6fd965d57788a310f169a6be78f28837f4d2242bdb6845bfc830928a76628f9d47701a8baef0b53d21fa1ea05aeddf09eae101a05bdbbe8c9e3a6c2159c8786b8ea83f756d17fab51b7249c1e5d73589cc735ddd661e55654af87c305fcd080482d6572bd60febf5cc6245c4b944b745ec20bfc91852ddad8ff9d410b595ca1cf63f68d6bd227926f88db5bae6d04ee8d102b377f025861535a27bf140c870b39774061f66c7b4ec3dc15fa26ab3879efbbf52c5af9ee8b3817eb391614140aac4364bc00759f8d71d319b1fc93f4f849cba1af1a1b858615dcdb214f8e09c3078b415991e61b4c44ae8fe57357710d3b2437327cab099a09c41e35c8db37cd7b946fa59fcf3d02a592cf28bc392b0cb3a0d6c6bee6518977d85536a6948efbd853f833c1dccb94dd86adfabd29f40ddd6cdc5f9f5c6a2c32ae81a840d1da11a664c7b96a32cb40418dba9f203d5e9b530b7f4a2c580f0f982a7a5f901694eebc0c2c5f69a0c638d77de18d1798d0e95ecf754e0fab3b1337dd0f2bb7cff3e59ae4308509be1f39d45bf12998162b0a750522fa3280bc78e909bdae66c9c256321eb97a5796a4b2e25efdc5442a40d32e19192c1c5f463555e90b37b84c465d71156134d3cec5891521acda56ce798cc016637d42d594f1287abe207bbcef5f2a87fb984020b3f6a25da46a39864d1aa7f19fa01b5d6a8044ad2bac9fde421bf1d249426911fb2c044ae29388be712f48b8e4674783b602a2cd2764962f453cb028a07ff3934c706466618b04977e12f5d70e298821630ad36e85c4c848adf0e5a6bf11cc5f897eb1eaef5ff368436c5cc2b2ce50b1c90591656a7d88cf7a4588f958c6c2b6891e26228661deb89a143bee4eda05edfcc2cbd0a698f34092a5506068302d1b0f1d22e9c704ca85b09293ab0e4632b5a6d92d8b1e16b62facd3e5090c79dbb22c0e300d95cc0bda226f2d77ec8fec3cecf9627a11f3c214ba88f0838bc68d0b1e930b8a3546cc03b0952f7d11f2ca0199ae88a262a823b37038f0b693df5f6a68047a03d66c9d80ab7c7f55bf6a9aa8920740ca0cb876b0818691f853961c96ac3e5c6a974257d84821d7f6fe943c47ad3343ef83f8a7acb91d72ad74f4dcd70137e5bc7f24088b179ef851c7ca9b7929524d4f97a1091e5a85ae4730a00fa36da7a95354092c3955d9252cd93bbcd5f99342c020b82b2b25bef0cc78429d8db46ea8509e16a6a3cc2df66fc017bd143000e68b693d066da47268341210b6c172da4969db63c2f74e60123cbff78c973731bba48207d6a4a767075b547878fdf5f866e81a4e4414baffdf545338c1dab1c428aa5d25d2a0c8ee6b49c74630a265b4774407399c92fe194875d18b71c82e46600aa5fd16cfe95b896ff21bb0d94b6dfa79cc0ace5ebde54e23b0d6500be3410e27b23d365fd6ed9b38c017013f6b84563e8f40e2b793af9fab147fe562dc021767925f9e9e35c947493bc252f1d0b254f0c9dac711297923e62ab7da71d839b293ecfae0f7ea3216e3fa17fb4f7fcbaff1a9c137562902773df74bfd7a23b244c50ff3d76e5547ab6e7f425db7f1fdee2563a966ac5a6e77e523cfc64390572bcfb52435fbe08c5696dfb3baf984947758066dc47470aa49666daa3219cc4648df3e93bc60f83406c14e7c571605e92cab0485602a010429ba19b52a4203975dc155a30dbe6a43e9382b15ef5ae8e7e6bf0c3bde7cb504ccaa23dd343d7521952decfa7a2f484e79a0a60e9670d54130370f7082c7627d0687b634c167b268e90890722a6b2292ee4a9d8c988c0a235ea3e3be1758bf046577c8bc43ee38cdfe78325155ad4084331b61917b0405d78c5cbe6e535f335536594bf5d3eca05954c7a8ed8e375a2a3fc7b57a224286423d89008a7b8c746997d65e84b09d46b085acba1071b8dccafadad403d299b8801cec0757cc2f902d4eaa02ab99faeb35ed621e0b562fb9cd1becea00a6d78b7613aaf3cdaf4d8ad8ee1e617b3cd45bd1e40ef90f7c1efa1ee18a166d5dafc175a99ce86add024a1d50e00d0b4250b948b94d533fa095e901d0a1fca742deb0abe7ebe80c56d9ec50a3a95fe82a1f6bdf634fec029982ef1d38debaeaaeb707ce9b6081afe1c89f6a8b39a83295ddb280e5b23ee6152a2e69c86af03f32c75019410346d496d55b01f741736f674a4032cdabc9c65ed0372a4e2ccdf96ea9a2b011f5a1def453b698fa14a6e369a95a75d23249c53e4caabcb538750ccf1f5a9ad320c2673c4c1c984de0ae057605938479efb636da526a0f9267fd6fc41c11acff14edacd815686c661f4ac976aeabcff7bf4b95f5f1e8d7767a7c55ad6aad3036a74cd51c8fa8dda33694b4827f113e1a0095d4b5998fa1ccd8365cbabc9ffbc38dc03055a521615ce8c603e78162063aa980cfc93259e58bc0225ac3444e976e1cf6c9dc0af450e6f461c2fad325dc7bad101df8375632f7836d0ae1beb3d32769bda0870a2d38839688ed047b0d509dca043e10ea0ca63bd9a60f489bb6ef3bfa379f00163e5813e2102a71466eadea96b65492f129343a225762ba502236f1d9d7a84303d4f3c4720a0236d3db47ddfee02c0e4ca2304990134d643eea8aace1a2cc8c90b9a1446b7d4664717833a373a2ecc26eef0ae2eb7d36818028e2386d9dcd9f9956cf875b14315e0cea00153166434a2899ab87d7b0b5cd7c76281ca62daef529572f30b26040424dc40207df84db0c66a9d89558b0c6f708c14ec72a8b115129f327882b6cf6fa016d15a88dae41e932602c3c20eca8ad90018ef241f15cef596f989f8e7bbc55ae8a3c098c284ce985d8103dd105089a865939876f7abf6b8300345158fea9df3d80a7e2207939cf71291ec2aa03d69cc5e0a6ed8624e1405af75d8638d4f86ff1e4703c8f29e834e9280efa009952f921e24699c2a30d2e8f41cced8a0a7182162f9586edec713b32210dd27f5ca8b93e9266a85faed1e49da72d69e1c2a91b26cfd03cdbd7b7f6bafa821c34aaa00db49ab946ea5839c22d60d64c564ad480d1c2f68df233fcadd6c3a4fc455472eaf0bcfc05b7005aa700b183b02ebb1a6f17e2585a667b5beb9fd61c67a5bf3f6f9ce8a732ca36c127190ef7c9436e36cc9a9d3b3e7d516573cb39858f758b31130bae6c2a962a865751aed63b76ea63574960093e3de7f75ed830d6030be42926f2eeb0d3565134dc82638b46d2858777abb4734a2d342058fb24cd1c97b5b9566f395425a250ceeef0d275f798adfb57fedc1b507e45fe139a40832db893984cae99528d2348f5f3294a0f035bc394362f0e6df3a9e0ab4484c239504a94ec2045f956ff349e637b587ab4a45b6c5113b68f3030bc9dbfbbe133d2f71ff11b44d205fbca747ad7de25030e642c6f1be66c62855ffd4eeb2aeb61ab0893c90524a308c4d065aa86f082ca8826f6478b56c6388afaf5d30e974930fb23c37c2f5949928f3a0d2307eca5411a87d4ec13a0d7d08c1ad5a709200623e1d33679ffb6f57cc5a8dc4af10eda9ab0e093a6d93dfd1bb39d90e974aef0fd26adfc3ca7dfdd718caf6becdd10a6076188734c2676eb04e68068315dab766b08d3f7998c8048fa7b9dc54e955a4c12acf8798eafbac384d1d1d3f44a014f1d1e96e4315b9b697dce5d41cb35477332d0119974e946d6eaa2deb570328bcb3977e008646e1a9f6885cd6e694c2e54b913925ee46429b0eddb77687e5de494774d5ea821f926f46d7cb6659dde0ab34eca1bdc18511d3942328af45cafc0f633fd1f0d7f583dd8b30c48030a6d7a7cb84f3513154b2b54388fa2ccd6d5b92180ad07739f00c9e92ce0ea99c7c79c4e66aaecf67c97461929cf6b01b519b2e7275d5f2284f9d84b912776630f792690ec60481e1afac189fc0ac7dcc8e8c7c27f96f6351691c9faf9217a9deb80756084ad5569069bbfb225cbe31ab7c87cf6c27f0747a2abc35f8237b0c7295876aa6e344c422e66272d7428f8ff2ab26083d1922273aa91bb592fbf680c5a5b9ba0255895814798a4fb62bc0c35492a1d884945dbf5c29bec3587bdf92fea4cc4ef46805a758fec09df02a2a3019eb2475321c5ab48084ad35315038dd8375d4eb71a7ed60c9389f7f31fbdfafc53b1784b466c72af74550fa68bdf65d3ea4fd90b053758e291b5774c36b6b628ae5ee23cb60899ca0f458114ab37c43130523e33d634f863d4b2c759196d9d784983b8d0216dbaee01c1694c14f433d5e9934ec5e59b89be3e6b664ac0f114b55e3a54883be50401233fadda5edc706253c96b924a969d4db06d580275e4174dac82c9b66ba860d1885fe542416fd91622a46dbe114a43f36b5383a3db9d1d67c0595eaa9c417ac641e56b93e31d0543e0298d0b34b235d94ce88ed71cbd405171094c88c6c344d229276616881217e91259d024e9d1b9282c3976e12c18262a8d95c33fe82a87e4021025044aa067e1a6e90e5a001a4f39f7b30e5834f6e7721238ac6bd5a16317582ee375c16d0fc631ab24ab1b5805e788bb3bea495a84d606761b1282e53fcd40ac44dfc204151f74dca3ab5048678e2e29066ee022a0329f14f6a57124dd2a6d0ba724c5dfd33b565446f79a3d39c33f2efabb8e9fe89085ba9972c3049909167c44295718f42f22c8b71cd760f8194c4e93e659f19957381ceafc3f421a2c5e7a5684f3608ddf0538d13061489eed68ce791f11ac718e3fd58b951b606cd8ed33af24cb51f02cd0f6ea3b0ad46f85b1137f67aeaaf9ce3ca7ec0c923ae74c6b16d377f8875b3bd1f669c1262c2c4b6de8d98be27b3cdfb18f509293f1195bd3ff88f928dcdf5f8304403164347cb65a293da92d439f82a4177cdffc228de9cba31c2e17acf331cdbdd8c1b47b22baaffd2a4631cda248e04f237df0f75dd87364f0b3a8428a7f22db5551a2dd6acfa94a7b57827505a3d1bc2fd560fb906fc9018c1b727dfad78feddc0124472170a464feb6e2b0cc36ecce9f8d640cecbe284ec5769ae463d2d05eb59eba1be72abe8db87ad00d41927e04f57d15612af76ecd533f1e2e32c9a96640b13137b5feef15c37fe290e8d762ce18f2ae1c36a0aec21a8e0355725b217e9b7120952eab34538e6015e0075e57358f26201ed582c56eedce341f1d5d87a83a26a33f8897b9c329596c0fd4f7ceabbcd57996fda4ab533b1aebbb815f841f3d61dce7e474bf679364963634afa8d1aedc72defabeabb5bd20c632978fac2122b19221fbdac25a7a28eb57fe744b1a36af84f94d5bd20613b25849b6b4a2b0641d5faa2f8a01fa561cdbce7d0814e60b4d7c2ab16cdfce5ec5f7ea66bc9ce0162fefa0358812d759b10259e01d102c49a1a2876e89af87dab023e2770dd21179bae579f4657954391ed12fca7a48eb614883e9e927d7036d8a8ee52cc66f21b045b57cef5920652c4361be50d1de901bc1e60e6222fa864a994fb5dc3f2bb9b5a32fe7ef75cf998d992debe5f815baf15e75c99e3517887ce5890a0f2a171e425697183811c1594547cfcd66556a72a47978bd6bd71200481cb9e9eeda309fdc1e2e0874567324624cc76d49c1250fb458d249b0c1b85e8c5eb696530596931ca9b0d254abd22b1d6bdbbff0c427883dc4fc796e66e195d272a03693c06ab4db6cdbb144bb44bb82062d952968340352f80e7905f3799af37ee9ab1df01c65277f71e8e11b861d677c19976d0ad409c002527d99f12b2ef5715e059bbdcae8fdfe1cd5420e86d9de0c7dd63b674d058f6aa2334267da6a17d1616baeed55ae4d0415eeb98272525ae00f94890e729ef7114145ecb85aac809eb15c95e0bfaa914019178f0687e94d2d5a1bfcb90dcb3729b00c9617b49510287d91cec656cb59ab7a5cf45cc2d0034ce2caac8d3f1c8b67c7c21f96ef2488637602971fcbbb23d5a12ebc4aece5703abd92c151a849827a2a54b913288db275a239b87b3fc080e4fdf0e4f51546ce923ecde4ba4b15c93cc886552a0abff9517ae90d886c61bed0f47511182a1aff3e72753e526c178a44f3c955f00e7fd67db1bee4ad8771652fdfe2edb55b1cff89b51e5ac6d1bb419a5e6ca78cd1333e3daea117193bf6cb52244e486c5ba547e0d94c79d6c8019872f75a3114049a8c3656349aee27a112ef14c1bd54623076e3afde63c3d360ebc93ed74b8950c11852da664125ee98bee6c186cdff8fb45d82f8a179a61cf95c43d777912e9e52a9611fc119ceca87762ca3a4720f7bedb3f148381c07b1b813ed855374cb50305a82221f811baeef6240e4a71b300c0b77ea11c6d475bfd77d19e40341a6c1277ebff089c1ed0b5dfcb25219ca88bcb616d0618831ce26212f06ae9c260c7d922c479c4df80bd88d6c5054f0a826735007b92ee13e67fb00db279e505c23286237a928615f6ee24825a85d682fc91470cc9ddb0b7019bd3bda377980b4a603e76bb6200823e169ee64f26cb31879b7eeaf09edaf654ea169bbb7cb92b53a022e17f8176d1cd49b936e64243c0575df9690b9cb8f9ccee17aa921581ac536ef55bf509ebdce7028fad06db21fe2d1a6c84d21fa3771153fae9b11546b77f92e8525bb88845f449f0ae77929197627f87c6f27374b3856d459e2286fe61c4c6993bf155cf72561a5fecc29dc4ee5f71dbb106a16bb1e03aaa600b396c16f75dc8caa3946b7b78420412786216319c9900e54c8dbed42dfa84287acbef8318f2ddcde9472204e88998fdca95392e8f8dc70df1f1238cb272853e524126487875b0bb37dcbb5f0fa232ee68c564a9b4908989ce53bf9b2f7b874c2500d168b5856c6e66ed79376bfda4e10c8385e75d9ecc279aa7414c26ef7232b2d78c1dd2339a14019f2fb37d1a0604aa03cdcbadf44f16c9a7d55cf78fc15e8523d8a2c13e5a6145278a02d1440469a790445d02043eeef647ee984903b6a952eca59acb414d4f5fbd30150bd1bfaf0bf5f9cc7c3ae76660f07f26b2746278dded35a3d7ac284a2b55bd2295007f73906ea1d3a7e8cd0875ef3c0bb08c291b7faf127c836b8361deac067d0fc9c698cd23a64b0ef2a3a1f92dac05dd47d7c94fefdc281b82c497f6499e5bc0d572e6f2b5130f7ad6cd1ce26cc8e27f040ad6d520cd86e49293702f12ea3547a168aa4c9db3d949392c2e5d544903bb0d19048ca9f97f16c7087588d7f0dd6be55a5272479d79f480e6da757e70961ace10944bf546e5af36c191a15f87c109aec6383701e20f84073315a6f0b316332e28b97d8f0990fd3417c9a950bdcb4b1c121ce35ca5d534094b243ef5de8c9ea401a8e0409c8ebd407bf950f7c92daee8e906cf1e1e2d354a2b3eed39b385ff226c7b2cc5214d6c9f1c66e8d6c14d6f6cab49ba21ad8d00d11633e7e44e8911acaa1188111bf5419d43c31161cc240e403a2ff7a1ae3f97efef5681822418d009b377ad13db25def745fe5a8273a04fcdf64f5ce1863ea8a248b60b6afc24c80673946cf017d8d51312bf72b2df1efddff0cd74990e2cf8c04499119bc3ca6ff10174e3b8b4ab371203cfc3c8d0c245c0209166a2db961916ac540247ab1dd8ef0dd51e61cab56bd14ecf2297835820b2cbda298524d5737743b282c5ec39338fed197a5d4a5a8434c26bf26250c3b8661c917ee139bd2187bee61d68ebed47d268381db5c55a5aa178b111b82d4a8942850e2b6628f92d8a6715a19143f01d211a9bde5c3bf060cf5e2ddd1cec319f0626167ffa90ce41bbb5e50ebd33b9dc31ca316c93c46fcc5b325b5a72e620ce161652a2cc6e1df97f8b390a00fa1627c5e98c1c9d3c7a80e53e4e13b2982fe990b9bf6da7df585fc55da5eedaa82515b246d43c92845eead0ed740bc88d9224487a03030ec4bfc0a31b88afaebd90ab27fb707d861691987b2223461819d2943689ce978904c39ddab3fdfd70cead0a1d896f8142cbf619ddaea29da1a26bf24bd6ff8b3170458b39ee303cea7a025d2b89a1faf70c096706e773c46cfa33da9c3939b72e379393b1631fbf3b650bd0d16aa93a78614f8429fd47bd0d4657d2a125da7fba2ebadb407ced2f814f47189ad6d104714cd830ee1b097528534c9fe45a519dc06bc0f794e5041d9032205fc8bfa3a6888a8e0259855e36cb897ed5ef4eae8e1268f878177f715139fe85c4d0bef7923f5b2c5d7479db30d42ea9fe10cbb9aa3aca72c4ab232c88c7379851550ce5848ef44cf77b2b467cb0271891c0fb01f6ea1f84300004d4585a529f3ece5902151e03065c03662dea7bd3ccd0e556f2122bc5ae8187d1a3a56a30eadc47ad37e273afe2bae3d80d8070111d7b006ce650088073986293ba0d9ac56a7266df42f0a20946599ef860e21c0977e24df8fd3b082404c9aba0f80e87376a25dc111cf26bd96ea5978127e890feaacbf163d04b160e7a66307eff8e682b1f47e077433b4a6f9a8b29109e84b3da6ff9e37400572847bf4f74a09dce616287dc8cfdd5afe71af0f4ba00d7666e53ea867c593d85df46ac15c03fa2c621b8d0513d276b63536dc299f1c8902a7e8487c84adeea5dbb3988b7c58a1a6d74c44bcb19aca915e62a2b4123d8014975f8d79e776c8bdf155d3608ad613a03af69044a5bf26794ba59ebe0625c5e463f7a21b55421fccf843bfd86e83c702ee491fa91b972728f4ea54693c0d6e4553e991a7a96071bdec2cc0ea71889c7e7299526d0c1d5a878d5676b4485d79f829b2ceab2ec6ae250b562c9e97426a80fa0acb49eddbd7583529abc80eccfe611285acba0aeaba9a6f72f774859947e97b73d08c85561e413170c275714d31ca130d41e6a1de00374ab8ffbd37a594d88feb5379a82846ff76331aec636e7650ac8943d2415c6b503e67bada158dac013cc7924bcf02594b5e72ecad61208fcb00d798b727617a726920d480315def81279c59c219e1ce25ca9936977d2cf0043c0c16330256a496981a622c02728f6927c95589f5d1b12146aa35f8f8d0b97058d2d3ff3980a8079fcb3d2035fd4ad9844c53ff1744bb43b2bb19972ffc46d455d8d900b5c731cac59c069f2b6ed5eab8cd6eb6f877b8ba9d30ec38ad35e06770f4127e7cbc2cb92985a976b48592ffad53a6bb90cef800154bbbfcc4fa21023e36c7c99f5cfcfa149001b44518f7451411237134de68d1c55d9e95a216614eea8d4b808343bb2ed948aa489ebcee0b6679b4685495fd0a57ef1e899ccdb3c69927698859380bf771b67fb5a662ff6ed4132b9193531b821dc5421442380c250117745161fc171aac46194fb54129665dc2cc06beab952f1962c997113b463abede8bf80969f730ba369e3dd17709d61a5489df02efb193183729bdcc0ff8f64e5671cd5f99ba1f15a16b920ce30d2b9be5d7e7c1b046ed4e6bf4dc3cbf0fe2c1ccc8d89d05fa96f74b4685ffd1a31e109a858a9b7068803d685028dcbb837d4a4637462dc125ba106091671ec0d61b5e1148b83d9335686ec833afac7a7a06f74f6efbfda09bf043d5142a709c0d1f4b5ddfd360c675f1e469093dc1a36e5b3ea5b8dcd1a68c44fe8648101e4e94e3e84cfa57adeddb38754ffcf2a608b517be3514d33ef2cb0860848da5dc074ebdc154715754309041112d8e7e7294d401e470cd368c4ded8b050539c7ad9a118798d1a3f9a7704d588b7ecb9a9ce71b4c63afa96dd4ced2efe8191ff14cb603d6161258342040597d63c522f19c57d7a66f5e26cb2b6e3fe00ac3114f4b780135bdd0a240dfa8e50882025edcb28cbe1df324ad0f594c22b00e22fc262a2c30377f2b9ee2ca6b3bb5303de2b3b2efd5ef2a26dd97e14016f0aa9f9452ab5c14ab369fc03d27eee27c5446698a47c8313efe32008248d5aad5339bf8699ce753fe435b3e8630b8e44eab5d7c4426b76052e8245e95aa92914b9deb0824ac979e27189d5cb1449a612975dacee545fea605e7fabb7703ca96f4ce1ec6b1784908526b54e0b5a226f2e0541c7142a00d098ce4992e10a4513aa4e112e1c39769e9f82317f20204e52fa2d893aaebee1ee90c14e462273d629f16a135c76a578af271b61807fe03d1c93acf0692bccef08cacfd8f9ab17c2c47db23e38ad9649bc6abc99affca1e46f05db54ce7637747ad125d2232043ce6c3915eab420", 0x2000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000004340)=ANY=[@ANYBLOB="18982e12000016426ab68df677d9e92a58fc98dcc0352712b3756d5e7753ca2f9c341774de8f8b41c14f9a4fc4bbd29cd745dfc0471905a0781f88395a5ca8190a22ab128fa998408237ee4a39a531cfb185dc28a00a441cf3204c24034fb12de8500dd56e36780e78d0029b6babada350ae37733b88e9edaa2d14f02bc54bfbedde875787abcc4e66777c7decffc56d7e8cd67ba764a36e9a2a28a34c25499964d55613b991c04d66e6fc9cdf16432f7a4dde65cf47e562fc3c22a7832caa12d4564ad110f64c19199046b876de9e425ec0220556505e9e2ff67c28b7f3d32104d74592da2f9b8f227a97ff1da860f50477", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000183000000400000000000000000000005d51e0fff0ffffff18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000000addf0fffcffffff"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x58, &(0x7f0000000140)=""/88, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x1, 0x9, 0x7, 0x7f}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000042c0)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="2200000002000000", @ANYRES32, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="ff8742e1968a66153bf6b6f43dc1c276b42a0cab419908", @ANYRES64=0x0], 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)=ANY=[]) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000340)={{0x0, 0x0, 0x80, {0x8080000, 0x3000}}, "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", "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"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000041c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x8000137, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv2(r6, 0x0, 0x0, 0x6, 0x1, 0x2) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r7, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x2, 0xa, 0xf4c4}, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, &(0x7f0000004240)={0x10, &(0x7f0000004200)=ANY=[@ANYBLOB="00000100100001", @ANYRES32=r8, @ANYRES16], 0x0, 0x0}) r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r9, 0x707, &(0x7f0000000280)={&(0x7f0000000600)=[{0x7, 0x211, 0x0, 0x0}, {0x208, 0x4000, 0x0, 0x0}], 0x2}) ioctl$I2C_SLAVE_FORCE(r9, 0x706, 0x3dd) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r10, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x100000008, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) write$FUSE_INIT(r11, &(0x7f0000000180)={0x50, 0x24, 0x0, {0x7, 0x29, 0x0, 0xffffffff85000214, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) 5.617527792s ago: executing program 2 (id=1501): r0 = openat$mice(0xffffff9c, &(0x7f00000001c0), 0x0) r1 = syz_io_uring_setup(0xd90, &(0x7f0000005b80)={0x0, 0xe873, 0x100, 0x1, 0x2d4, 0x0, r0}, &(0x7f0000000140), &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xc}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x22, &(0x7f0000000240)={&(0x7f0000002000)={[{0x0}, {&(0x7f00000002c0)="ca25db17c98c7b8f171327bd7f860018f4dc74b4413b6344f5de5f6eeb6c62b4eda01a514bf510ab00000000610b6b236f1b088e456dfd661e120b000000dce10bb29ab7a380d3a5f306316ad3f42ac87f", 0x51, 0x2}]}, 0x2, 0xff}, 0x1) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000002900000037000000b18f"], 0x18}}], 0x1, 0x44080) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) setsockopt$sock_int(r7, 0x1, 0x5, &(0x7f0000001100)=0x7004, 0x4) r8 = dup(r7) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0xfff9, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0}, 0x4080) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f0000000500)={&(0x7f0000004000)={[{&(0x7f0000000340)="b5119ba6e545233a0b142da546d2de13d91ed650969599066afa51a6385c055b35d999817d716b9116962fbcd6c41c951eee0bb0ebeace033c27d59ffb98c62598d9c5237d6a045b8160a05cf2f57370ae46d2c2a19a3fc9625570caeb45883b2c1f7284f0c9addd2a8dbbb1740b903173a4409bff43c10c83b7ab155aecde4ecddabf77dc26ad7db9be70b499c11302db20aa8c0b52b4dd1c279f0141cb7666509dea7716e7d23539ee54", 0xab, 0x3}, {&(0x7f00000005c0)="e6b8861c46bb8d4194c2c8f5f5e022a6a4ab508cd9512639886560e53677c05016ad66dbb5108cde5eeb874f65ba829f55ba1d3b726b9daf14d203778f02b85257c75aa563087eca489c2d41aaa556823a1fb35e3214d071651844", 0x5b}, {&(0x7f0000000640)="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", 0xffe}, {&(0x7f0000001640)="e323e4cbb6d4bf2c75f9a16d05b91142fce0e38f67bc564c6ff9535151f775f66c8c1de3a030ce0fbf5f0f67dbc7f25585068f639447726eb65355be320bff81397fb9dedb12c94dafc57a98ae44f2de36ca575047275f4e736d05711f3bfaac5c85c91dc600e13213fa4ea58ed25db56528ea75bb9cdf01740e1ef56f96e66cd775ff7c3d3275f9", 0x88, 0x2}, {&(0x7f0000001700)="289ba53810c42523c110216e8e31a1ec5bfa5557c95b8eb0b19f28555c37f5b865e79cca37833a195c60218811ad5359cadbcb0d0f82e0a88a66393981b2bf4d640b0243236b66ad2ce1bd5e1a55d1de8385f785cfcdb389fbfaad8b74227b8e2527510bc36a1ccaf705b779d89ff9bc68c3f38d5634b3332edffcf591b9d2f70a373f9f085c98c72c665c644a571ab9430db568152d1bf98c8a02d699a40558e784cc11a8f6b67411e45000a86977b76d41342f73b92f9d533b5c", 0xbb, 0x1}, {&(0x7f0000003000)="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", 0x1000, 0x1}]}, 0x6, 0x2}, 0x1) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000040)={r9}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f00000017c0)={r9, 0xffffffff, 0x1ff, 0x7, 0x3, [], [0xc0, 0x4, 0x7, 0x2], [0x8, 0x81, 0x53cc, 0x35], [0x5, 0x8, 0x7, 0x7fff]}) dup3(r4, r3, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r10 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r11 = syz_open_dev$vim2m(&(0x7f0000000200), 0xfffffffffffffffc, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r11, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r11, 0x40045612, &(0x7f0000000040)=0x1) r12 = syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r12, 0xc0405602, &(0x7f0000000480)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "023d2134"}, 0x0, 0x100c, {0x0}}) ioctl$I2C_RDWR(r10, 0x707, &(0x7f0000000440)={&(0x7f0000000400)=[{0x7, 0x6200, 0x0, 0x0}, {0xeabb, 0x4000, 0x0, 0x0}], 0x2}) 5.389502442s ago: executing program 1 (id=1503): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x4, 0x0, 0x0, r2}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x612a, 0x17e, 0x0, 0x0, 0x0) r6 = fanotify_init(0x200, 0x101000) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/136, 0x88}], 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400c040}], 0x1, 0x40000) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)=""/117, 0x75}, {&(0x7f0000000400)=""/87, 0x57}, {&(0x7f0000000600)=""/157, 0x9d}, {&(0x7f0000000540)=""/106, 0x6a}, {&(0x7f0000000180)=""/8, 0x8}], 0x5}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) syz_clone(0x80280, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r9, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0xe, &(0x7f00000001c0)) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r10, &(0x7f0000847fff)='X', 0x1, 0x34008935, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x9, 0x8, 0x6, 0x3}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.10190168s ago: executing program 4 (id=1504): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x4f003) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xfffffffe) writev(r1, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000001c0)="4888", 0x2}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x80000, 0x26) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) shutdown(r4, 0x1) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f00000000c0)) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000000)={0x60, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x6, 0x0, 0x0, r7}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xc0001, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r10, 0x0) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000000c0)={[0x5, 0x1ffffff, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x6, 0x200, 0x7], 0xf000, 0x8340}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 3.814102891s ago: executing program 1 (id=1505): syz_emit_ethernet(0x28e, &(0x7f00000000c0)=ANY=[@ANYBLOB="e727dc07001f00000000000086dd609907a602582c03cb697a653e336f000000500000000000ff0200000000000000000000000000010102002e"], 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)={0x28, r3, 0x1, 0x70bd26, 0x25dfdb7c, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1ff}]}]}, 0x28}}, 0x4004) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe02}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf3}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES64=0x0], 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000884}, 0x4040000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r5, 0x40049421, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/address_bits', 0x327480, 0x0) unshare(0x2040400) listen(r6, 0x5) r7 = syz_open_dev$video(&(0x7f0000000080), 0x8, 0x40200) r8 = fcntl$dupfd(r7, 0x406, r5) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0)={0x0, r8}, 0x10) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x2, {0x8000, 0x1000, 0x4, 0x870}}) socket$kcm(0x10, 0x2, 0x4) r9 = socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0x36, &(0x7f0000000080)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x1010000}}}}}, 0x0) sendmsg$key(r9, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="020f00001e000000000000000000000005000500000000000a000004000000000000000000000000000000000000000000000000000000000800120000000200000000000000000006007e00000000000000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000005000600000000000a00000000000000ff02000000000000000000000000000100000000000000000a001800023f4600146a16b9b9f9844ee33fa52272bc4984915b0845c5bdca62273eef816ac4531d0021f944fde88c162c9ffc277a3d60d3e9db1d32297a8f526c0000"], 0xf0}}, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1040020, &(0x7f0000002140)=ANY=[], 0x2, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) 3.59768208s ago: executing program 1 (id=1506): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = fsopen(&(0x7f0000000180)='ceph\x00', 0x1) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x21041, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xe) ioctl$VT_SETMODE(r5, 0x5602, 0x0) r6 = fsmount(r4, 0x0, 0x1) openat$cgroup_ro(r6, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x3) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003100000002200000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x20040040) 3.233439122s ago: executing program 0 (id=1507): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x3, 0x2]}, 0x8, 0x0) r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x2, 0x4, 0x0, r0}, &(0x7f0000000180), &(0x7f0000000200)) io_uring_enter(r1, 0x2def, 0x9566, 0x0, 0x0, 0x0) syz_io_uring_setup(0x8d2, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/105, 0x69) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000180)}, {&(0x7f00000002c0)=""/7, 0x7}], 0x2) r7 = socket$nl_rdma(0x10, 0x3, 0x14) fcntl$setstatus(r6, 0x4, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x18, 0x1411, 0x1, 0x4, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) write$uinput_user_dev(r6, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x519, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0xffffffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0xfffffff1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x40], [0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x9, 0xfffffffd, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x200, 0x0, 0x0, 0x2, 0x0, 0x0, 0x31c, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc8a], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffff, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7], [0x0, 0xfffffffe, 0xff, 0x0, 0x0, 0x0, 0x200, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x10, 0x200000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r6, 0x8040552c, &(0x7f0000006480)) 3.19061261s ago: executing program 4 (id=1508): r0 = getpid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r0}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_clone(0x8901, 0x0, 0x0, 0x0, 0x0, 0x0) 3.100875592s ago: executing program 2 (id=1509): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000)=0x5b, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0xd01, 0x70bd2a, 0x0, {0x7, 0x0, 0x0, 0x0, 0xa001, 0x47003}}, 0x20}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x19, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=@newlink={0xb0, 0x10, 0x503, 0x12000000, 0x4, {0x0, 0x0, 0x0, 0x0, 0x188c0}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x70, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x64, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}, {0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, {0xa, 0x4, @random="f366752a3247"}, {0xa}, {0xa, 0x4, @remote}, {0xa, 0x4, @remote}, {0xa, 0x4, @multicast}, {0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_PHYS_SWITCH_ID={0xd, 0x24, "f5a07864a45b831b4b"}]}, 0xb0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r7, &(0x7f0000000040), 0x0, 0x73a, 0x1) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x2d, 0x9, 0x70bd27, 0x0, {0x5}, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@loopback={0xb00000000000000}}]}, 0x28}}, 0x84) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x0, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newsa={0x1b4, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@loopback, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, {0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x2, 0x1, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x7d, 0x14, {{'sha224-asm\x00'}, 0x188, 0x0, "e863654b40a7ad42118bc1dd69d07e3b05cf0dbc9a9aac6130f0d060cb0c958c133115ff9cbb79de1007f5583249a62fe4"}}]}, 0x1b4}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)={'#! ', './file0', [{0x20, '\x00\x00\x00\xf5\x91\x0f8\xe0/\xa2\a\xd7\xba\x91DeZo\xac!/\xae$XZAA#\x18\xa9\n\x92\xfc\x00\x00'}], 0xa, "3390a7cc65a4ea59673aed88b64a927f421cd365b10f3f48c143c5ac6726691f4c6bd2809bcb5cd326bfc32085ffd01372a77744b674ba71a2d9d3b6b1bd84fdfaeeb2280ffb23e482fc"}, 0x79) 2.537818731s ago: executing program 3 (id=1510): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000080)={0x40000011}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x2000000}) 2.265131597s ago: executing program 4 (id=1511): syz_emit_ethernet(0x2a, &(0x7f0000001940)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x43, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x35, 0x0, 0xe000, 0xff, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x21, 0x0, @gue={{0x1, 0x0, 0x0, 0x2, 0x0, @void}, "04969839ac3fae7f6361aaf36a42ffdf6ec22f7a9b"}}}}}}, 0x0) 2.219387154s ago: executing program 4 (id=1512): syz_emit_ethernet(0x2a, &(0x7f0000001940)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x43, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x35, 0x0, 0xe000, 0xff, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x21, 0x0, @gue={{0x1, 0x0, 0x0, 0x2, 0x0, @void}, "04969839ac3fae7f6361aaf36a42ffdf6ec22f7a9b"}}}}}}, 0x0) (fail_nth: 1) 1.801787362s ago: executing program 3 (id=1513): unshare(0x20040400) r0 = socket$rxrpc(0x21, 0x2, 0xa) fcntl$getownex(r0, 0x5, 0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000001940)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000003f040000000000002d400300000000006504000001ed00007b130000000000006c440000000000007b0a00fe000000007b13000000000000b5000000000000009500000000000000023bc865b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a621a464a3778433e6e393002e7f3be361957adef6ee1c8a2a4f8ef1e50bec919bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec5dd6fcd82e4fee5bef7af9aa0d7d600c095090000100000000031eaebbdbd732c9cc00eec363e4a8f645679c294392cf538b07ce2646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75d80000000eda88c658d42ecbf28bf7005005b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fc152b7b9da074e1320060d0b11008e59a5923906f88b53987ad1714e72ba7a5b74f0c33290933896a59ff61622cfd9aa58fe8d485f062ae2c0cc65c2a36aaec2477584b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed415561c459565b1cd17572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f98928d5e9b94ff9ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cff538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6f8c3a13596c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7c00007502c7596566d674e425da5e87e59602a9f6590521d31d381eb3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c95300000000010000003baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2e454da0c052427d14c37960242b104e20dc2d9b0c3567aea26454a47b0f0797a7308d402ccdd9069bd50b994fda7a9de54022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c03987d198899b212c53c18294270a1ad10c80fef7c24b78b4ad83238273f4fc87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca57138000b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae037f27feeb744ddcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0602a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844cea001ddeb6dc5f6a9037d2283c42efc54fa84323a3c3e6e4fd2e078b796a825b3dad9ce7b37507e0b83c3ecd01549bca6a016b3e18a00c748894dc3bfe5efda8b0a477d6a6562fdee45eb16e276dee992094ba9830f6c164179e7d532d86060bea930118d3cae1bb5916b9671b7000000000040f4bee5ad2dea2d070095265504c05bba38b095e1679f96ddef65ba5de9c8cfb6465ae4165c0689a314a6eb6b36aa705b957edef3035e14b879c8e7dc00624726042e00bf9a7f7ae5f308744770759558e4fcb99c0dc957521ef255362bf2f3966f3754e81fb9bdef22c19f5a49147b25393f7536bcda9f64b7c5640bf89d4a74d51dc233dee628c1dfbb55669f84784174b34eb234481547e484c6af101396b6977dd668b401391c1d2e242edccf1cabe6be9868d383ebf1db5aee9b73e92bb82c164ab14bb25189817742e054886ed6d7abbacf6319f3c050e7d53df64633eafcb64291b81188fab69b5a06fe029ce46c5cac1bb1ea8ea98aee207fa4c9618a9ce80bd8b530f4b9ba8860bf1e887ec670312ef0502e3d0a0e30dbaf38c042b7fd207c61e6b73d3b61d194acb4bf4d3e0187d62ee27cbee175eb2312209f68747eeeea30c1634d54799f42753df8e7462c6f5331ea8e56b5c4a373dfe9f111d0206f4e90f71c03bc24960dd84345e59e1289d47a929158babfb331f27370928198d2cd367e928e98c54c67b6382cb958fec947d2ece3695755bc71d55a84bb0a0da43cb9f526a20566e9d00cf9fe6be3adf3e0a05771d66664239d199ce84aa7f684c0ce4c342a85d654624736a3b9b067e2bd298ae8a2527ce59fba9448b13655281431335496da08ac626fe0b57ebb4ad0b9495a183587108b4308bc68eeca9062873703ed0ee726a7867436e01dcd6edf1583e7e17043afda8f46fdd688d461125d724404a310"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb, 0x0, 0xffffffffffffffff, 0xffb9}, 0x48) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r1}, 0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000001f00)='\t', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) ftruncate(r2, 0xc17a) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x7, 0x40, 0x7ff, 0x4, {{0x6, 0x4, 0x2, 0x1e, 0x18, 0x67, 0x0, 0x9, 0x0, 0x0, @broadcast, @broadcast, {[@ra={0x94, 0x4}]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_delroute={0x38, 0x19, 0x100, 0x70bd26, 0x25dfdbff, {0xa, 0x80, 0x98, 0x2, 0xfd, 0x2, 0xff, 0x8, 0x2000}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x4, r3}}, @RTA_PREF={0x5, 0x14, 0xf6}, @RTA_MARK={0x8, 0x10, 0xfffffffa}]}, 0x38}, 0x1, 0x0, 0x0, 0x10008081}, 0x0) syz_emit_ethernet(0x43, &(0x7f0000000000)=ANY=[@ANYBLOB="aaafaaaaaaaa0180c20000020800450000350000e000ff119078000000000000000000006e220021907801020000009601000080ae7f6361aaf36a42ffdf6ec22f7a9b"], 0x0) 1.801350353s ago: executing program 4 (id=1514): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000e00)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)=""/144, 0x90}], 0x5}}], 0x1, 0x20, 0x0) sendmmsg$unix(r5, &(0x7f0000000680), 0x4924924924925c6, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}}, [0x4, 0x10001, 0x0, 0x5, 0x10, 0x4, 0x5, 0x68, 0xd28, 0x4, 0x4, 0xffffffffffff8001, 0x29, 0x9, 0x6]}, &(0x7f0000000100)=0xfc) setsockopt$inet_sctp_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000540)={r6, 0x2, 0xc2, "94a70d52057dcca0d7b32c592d512dd8ed0e7550e052d4adf1df3d28c30a59012625571b0c8bac66573da42f7e38152f6e8b10fc50631950e3dc4a4c126118dad184c3489db9da3e98d187dd95edb7ca1fc65608fbb79e5ea724052cc376110f57fa2837f31d67b9bc3e40b2098bc3f6d90ad1dfc24f66a52dfaca4bae211d11cc580aa7951a03970fd96135584c8c3546bb0ffed24b7b2f81e7a8d0b8c5b7722e17528d18b1906dbd04e06d812a835671049de7dc34ca3e5ec363ad370f5d10624c"}, 0xca) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@multiplanar_fd={0x593, 0x0, 0x4, 0x4, 0x1, {}, {0x5, 0x0, 0x6, 0xb7, 0xe, 0xf8, "48b3dafa"}, 0xe0ed, 0x4, {&(0x7f0000000240)=[{0x81, 0x5e4a, {}, 0x6}, {0x81, 0x9, {}, 0x1ff}]}, 0x30d}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) close_range(r2, 0xffffffffffffffff, 0x0) 1.655709743s ago: executing program 2 (id=1515): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x109842, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x10000000}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000003640)=ANY=[@ANYBLOB="12010002f638d408f01002204ddc010203010902"], 0x0) syz_open_dev$vcsn(&(0x7f00000000c0), 0xa532, 0x42101) r3 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0xf, 0x3, 0x20, 0x0, 0xbd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) read$dsp(r1, &(0x7f0000003700)=""/73, 0x49) 1.43750918s ago: executing program 1 (id=1516): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) (fail_nth: 19) 1.412810774s ago: executing program 3 (id=1517): r0 = socket(0x2a, 0x2, 0x0) socket$packet(0x11, 0xa, 0x300) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket(0x1d, 0x2, 0x6) prctl$PR_GET_FPEXC(0xb, 0x0) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) remap_file_pages(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3000009, 0x1, 0x100000) r4 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000040)=0x5, 0x4) io_uring_enter(r1, 0x47ba, 0xa25d, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r5, 0x107, 0x6, 0x0, &(0x7f0000000080)) unshare(0x58000c00) r6 = semget$private(0x0, 0x4000, 0x0) semctl$IPC_STAT(r6, 0x0, 0x2, &(0x7f0000000000)=""/51) semctl$GETNCNT(r6, 0x4, 0xe, &(0x7f0000000240)=""/191) syz_emit_ethernet(0x52, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb88a8"], 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 1.20599818s ago: executing program 3 (id=1518): r0 = socket$isdn(0x22, 0x3, 0x11) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000000)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x3d, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000000100001002abd6e1700000000ff070000", @ANYRES64=0x0, @ANYBLOB="c12900000000000014000300776c616e30"], 0x70}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 1.137503506s ago: executing program 1 (id=1519): r0 = openat$mice(0xffffff9c, &(0x7f00000001c0), 0x0) r1 = syz_io_uring_setup(0xd90, &(0x7f0000005b80)={0x0, 0xe873, 0x100, 0x1, 0x2d4, 0x0, r0}, &(0x7f0000000140), &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xc}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x22, &(0x7f0000000240)={&(0x7f0000002000)={[{0x0}, {&(0x7f00000002c0)="ca25db17c98c7b8f171327bd7f860018f4dc74b4413b6344f5de5f6eeb6c62b4eda01a514bf510ab00000000610b6b236f1b088e456dfd661e120b000000dce10bb29ab7a380d3a5f306316ad3f42ac87f", 0x51, 0x2}]}, 0x2, 0xff}, 0x1) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000002900000037000000b18f"], 0x18}}], 0x1, 0x44080) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) setsockopt$sock_int(r7, 0x1, 0x5, &(0x7f0000001100)=0x7004, 0x4) r8 = dup(r7) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0xfff9, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0}, 0x4080) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f0000000500)={&(0x7f0000004000)={[{&(0x7f0000000340)="b5119ba6e545233a0b142da546d2de13d91ed650969599066afa51a6385c055b35d999817d716b9116962fbcd6c41c951eee0bb0ebeace033c27d59ffb98c62598d9c5237d6a045b8160a05cf2f57370ae46d2c2a19a3fc9625570caeb45883b2c1f7284f0c9addd2a8dbbb1740b903173a4409bff43c10c83b7ab155aecde4ecddabf77dc26ad7db9be70b499c11302db20aa8c0b52b4dd1c279f0141cb7666509dea7716e7d23539ee54", 0xab, 0x3}, {&(0x7f00000005c0)="e6b8861c46bb8d4194c2c8f5f5e022a6a4ab508cd9512639886560e53677c05016ad66dbb5108cde5eeb874f65ba829f55ba1d3b726b9daf14d203778f02b85257c75aa563087eca489c2d41aaa556823a1fb35e3214d071651844", 0x5b}, {&(0x7f0000000640)="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", 0xffe}, {&(0x7f0000001640)="e323e4cbb6d4bf2c75f9a16d05b91142fce0e38f67bc564c6ff9535151f775f66c8c1de3a030ce0fbf5f0f67dbc7f25585068f639447726eb65355be320bff81397fb9dedb12c94dafc57a98ae44f2de36ca575047275f4e736d05711f3bfaac5c85c91dc600e13213fa4ea58ed25db56528ea75bb9cdf01740e1ef56f96e66cd775ff7c3d3275f9", 0x88, 0x2}, {&(0x7f0000001700)="289ba53810c42523c110216e8e31a1ec5bfa5557c95b8eb0b19f28555c37f5b865e79cca37833a195c60218811ad5359cadbcb0d0f82e0a88a66393981b2bf4d640b0243236b66ad2ce1bd5e1a55d1de8385f785cfcdb389fbfaad8b74227b8e2527510bc36a1ccaf705b779d89ff9bc68c3f38d5634b3332edffcf591b9d2f70a373f9f085c98c72c665c644a571ab9430db568152d1bf98c8a02d699a40558e784cc11a8f6b67411e45000a86977b76d41342f73b92f9d533b5c", 0xbb, 0x1}, {&(0x7f0000003000)="82e05777c931cb2e0643af09dcd2ab9cd0751fd7f13b5464c8d57f3e417210252c7e32291096f057b81ccef6c9703409378f6a8585d3a5aec7901cfed8148eeb8a59b5a52327f8fb71d7c3cc10b278ebb3c14c4304174d3ee4f0bc7b08cdddcf9f9b27c56ae769d2885985dc0bce2bf438ae8c5fd76610d176aa0380d3d01aa7a8707849fc92ec8e2d67adc134ce93a0506bb348eb79241a6f397bd86a52cc363c15d6e85a506ecc60a79d523bd8dc914eb971988acf9cd3ce90fe176216d952f64e292601009921b7edb2369ca5f96f062f13ac50d29f825f46354b54d3bac11f4331afab937487ef6a00c630b5f870713a51abdb31c20c8971acb62c27af0e364e2412da6e34e4c1b4d7560681d7c9527b82c57d82420d2ae6273f709928f70bcac97029e9b04bd154f362de72411fe48c8e9a04d88945dcbeab318b10e2a3c08be528b791d327e8474afbdaebdddb9b4fd44d54681ad7313c2f14143812c75f21c7bd624012f99a69b9d94109ae0fe29aeacc543d441f37b143fb98a7ad2d6947cc82ce6d4c7ca8eba980be0546134169749d80bc829eb7ce22d55cda06a364758f74580de7b34c1125d6d3bfaa9592cac6878882a5ca03565f0339d7a3131589d2cef9ac58ad8021e9c9f22e23e8d5d7f7b38d3b391ad4763a17429ee91cda6ddd3f8d0e31bad73125b9d04b58898ed2cd2ca9591fe8aa6bf826ee82c0bcda8e0549b092aa9bab822d15791fb50543ea8152f1d763c59e94abe28d4520df26eb43ae2bdae78d6545a06a4d26023e2427c455fb2bbf4aefd7addae7aa84e9169b009f7e54d832af54761973bf3f555cef293863136f641b7297f61376c860bbf2c79d7f2096201be1460be6bfd4e23d7ef9b8f9b7a4dacf19a7fb4b512edb8e15c3fa634594fc3b06a70c6bccb1e5bdd3cc5255741c140dc5ea82954cf1d06cf60f98c479b8f4757b9b3388d5c5b964b1b9938ca64bcba3088c2da4b08f4a31b990316ef2542d2389336bd165ccdbc1a1e8aa34097dce5883a2bc990dd5cc594d21f44679c9668181376fe5d53e3a878eb5c9b9b229a1f3530a8f0b9d82959f64bb277d17257f9048bd33feca130f754c278f194c66792baa9a902b5371ac546c1083538bf81ab350cb478886b5270f39989481cb5c46d39b90f53d08e7218156d66fe970b3afb5f09ddd90e01bf6246846dbd0416162a35c0aa24122cd76a4810204a698f73119f2c89d77eb401bdb3eb84520c12ec1064221b6a50eb6e0ad06ef22a2a902762fc27c866e8d7113681cafc7d2ed8b71bbe738331d4e6f7171a2fb83e3299b045b57c0c46d73278c2040446400de51e931a48fb06b9a9c24db2b6f1bd49e9fe5345de1ce3753c072e41b86e56eb3118cdf6784cb127f9236228d24b717818526b9010460c2e0201735cdeba2b0c8178135a457944aeb78a3af16020ed6a06575b3192add4fb632146066ec43aa22e229d6f04bf60ba1dd2998481a203b71fae69b15738dbf4e3c47844c209ebe8ca5cc91ee680de671a28f94ec7925a2b2853378f8546041969275f44f8380c908595d1aad168c60519cf58529b1f76e7bdc0de5d17184c1f728106025d4f4db0a5d96c6c4d556e398cb66071fece41f074f9406a7ad6edca74ddb07715ceb4e62f4f24ddc9d6430f37787ae68bc2d1bab1f3ac53101abf25da4cc609bda5f97528db677f24dd33b36d3e37fe7dec38497fe6ccb77b0756f407ddaa3d4e468d279796fffdc592c20652e4e87a716ea2b03b04d928774f098c4654f09eedf792b349592eba38499acb3b08d0e4565af1c69bd8cfcd1d8df6a0fa5dd5469aa8fb4226b097d3f46ce8ede0064cdf1975b36fe5005b2095b1d5cd87d9fcb80f24f29b940526a3dd10d9a951a9594a540661787f3274ec95d4de325ab291d49b532d7cb547887828760fdc32b32daaf770098ef88e9a6d8e1155773601142acb8cb44d5f408b77f629cd733a37d7d71a8277fd42410e7910c5ddc98bfdaa09fb36daf7c4d222f969ceb77c4c8ce31dee1465b0112aae3ebba2d444be99beff5448d6f7d0dc397d0d342cdc0d3484d629f81f78f84a6a94090c5be7b51af21372dfe85b25805afec2e558426212ae093f78712d5efa8327c62c8ba9178976b376ee9d7b6746c35caba913e0835d7f20572c3a2c738f1eaac68f10cd43fd0ce52a9668e6d52ee318c81447a07348109c4847f2d5408a0675e0e7e214f50e48054d6050e488b2f6d36d56e9cee0ea02def370ad0afe0f9546e9d94edbaac50627f47f12f2f0829cca55ea8395bc95b4020588cd23d400791b160d61630d78b98c6f321227a185fd9f1cfedb7349df85a5dccf43c3ebb8f1d2a0c22eb147a27c99d0f67b325a0b6fe4f9ff3ce7f2853c719c4552034b0c61a84f7dd81093abc1eb45faa4eb45f2d58fa771a7fe1416ec4a1ecb3084b8af29508549539f5d1346e21567b8b55254a6b7e96745d89e159ce0e1b4d05d4465eac5c5b0afcd101299c3d7e45e907c83d84cfe193bb311926ff28648a95f7f13a9e3675adeee3d49672cd650915307db0e43880a328e0b8bfb8ac152dfd8dda1d65e102f185f8e1d855ee2c57f8a6c3087dc08b2ee3509dd88b963e0209bf951eb7e1266d32023e188e0c69623e6642cb9dd8074a479e48ba95c82f635aecbc05faa485c8b8de391ec4eaaf0caf3e46be47d87fefb51695a57c2f2129207380ca68350e2bc534d368794dacf6ae7c9025ccef38a6b706a90fcd090426eea74cee7f5c9d82197aa9469d7d4c9c2175ad3748a2e5f4a1ad3c146c95b4f79ad79e0505390fce8edff2831b7d6c3088fd534172f8a42cc8dd724fa51748d64fb0660cdb78dc730c1d6481f9817ccbc953f676f54947d2cfc5a032087d83d947fbb1ab283ffd26dfa5cc091c44b6d307a3ba880a7279436dc22b21f9124e5d989ad727f074fd3e1e798fdaf6e5aa9be05692890a93368617a623c26b4d753e2de84ef584df8845c05ce7090ffa8016b87d2bcbe87172657567d9301e01d00c2a77572c7805ca141f876e160d3e2ebed1acdaed917ce900cfec5f43e24969dd60b7dfae1c5556a13e06fa15f953353071aba3ed013ea3ab1ad3d40057b0577da58e76e4946a83256164560c8e15fa3356f7d01994dd04d6dee2d5e967f5091fd9617c3fe8a979fb257839d4da60b6d772b23677f7d526c6032bd84de1e772a96f448c716c7e1a904042053bedb47efcfbf067645b7b6babf234702b9bbdd79c00791911faec26c9dc0982bee76728d28ea62809a59f5a7c07201391aa08f7bf1f929650915f07b3393ff69a434f8ddab3bde442a687e85bc800d35de81232b06f26b53fe6659e335718cfbfffe9925e45f525d3c566734477d983e7317485150eaab8c9015e1e61484afd4bfe840be63ca7273b64f8a8f2f4d74726c3236c2c4cabca40ce936d6ef8b0c4b5310ea0628424bf5c6ea8843af2dbde86ac38563eef07ca5ace28acd5ae59eb630dc01396e3e85914bd9cb5cbc3aa1eecd4be79541f12fdcbbe19a6bcb518009ad41602b95e201fc41868982e12bb1db604fc89d74af37d9fac0600ebfbd794519a8dde2026ff695960a425d196ea51d245f1db6ca348dfe7c1f8fe85259b7b0ea9e75af812adb162b3dfe1c777181def549c5fc2aa2cac2e42b56ee85bfaa42f0e173980bc73d30848358cd090ab8e9cb18c26dd8b19cac0bb82faf5782d81ccdf64defb03669daa882d386df9f84bd73c83c3d95af6a04e13c28c52e943e39f2ce7488db8c932c33b7aa28c23746cf75e4ce2a38014cf17b06237c76c83b13e0c6ebe4c83df35d5d3051a84141b722f03a64dcd4bd31a443cf7ee4496dae5ee802c4f0ebc1bd2b3cb418d213d878a0a65ddcd3d0d3b15d21a87b0d45332c02b2a037d4a01fa008e47a71976a9145be3e33ef463703dce3c196e09d6350dd0170a392cfb83ede17edd50b21bbfcfd8ec02f20a83ae9ce4fec4e3ca8635edf6e0e840253164736173c4c5cedc67fb84e204b307335a8eed990b2ddb0740b0edf84f0b73d275e0a4a303697b71143447861680c0a8c449e43f8762c6cc1296e77b502f8821cdf27d253b272dec2ae9581d8ab601de751d789796aff714767cb7333f6456518083ff46ed6d3e9373fdd48da824a6671f4e19c323432edbcb1a0eaf47eb2795616457759e99beffc73fe19a503e1e2d73381e1b3a7239729de4da7219950592c271a6dfabaf3b651e19c1166206415db975e4d411eaa2d66c3bd3888e70c309e5347779cac379a5ab9a59844f9730c9f6cc3ace22b51512266eca8cf184a07888309a3de49ea9fcb213947d5060781b034d47b0a689256074ab33e6ac1588ed6c08b1a19a79ae8e3054d9cb9f61954443613e1f8d6b8284f4689558f9066c655479520502a45bedc25e67f1f4d9e2bec5f38051aa04547649a885e113f4a1e7a82ea244e4ac345cb764682d6d2b9c2b69acd93f1e39ac5287a5f80205e4ae138c267f2b7778776e2d946b0bcf9f27007e2db242fb5c559a8d182ce3a5e1a462dbf25761f9af13be8759b6bf3b6dc8b3ae2b2512f7988f372c490cc0ff2e3a229410e2a74973e0336ae9bc16f6dc6f608963bfbaa2370224a802b8eefeab93fa26eb38204fb476c64ad83231d57014441db44b28dc018ae5295dd865f20de3b3a82ba20ed43d3a2a2d999ecd333e51ec4ba275d635d3e33fd6970214a99f6f3536d60013f134ab63e7feb598c47953952981dacb294b4d02c0f18003cf1cab963e43f086c7a7e12c99504b7997ed6adda223b66c740b7b90fb9375712b20d465aba7725da15c201446219487d31e784f838d2c6628ae336949ae45506d925d009fca209e05ec16144e0c88fcb50c1808a279c08b58527fb71e1a8cba1643719de123d1b6ab76ce6aced49e4264668a69abbf32dec4c07c26546ed507eec48e96a62c5160392485b92085669676010db03f0ca87956408757af221dfb7b4c2ef0e489a9ad27e1ca75217d8f6112a413b2493faf5c647d8f41e15988791cfc0675a8742aeac19b0152250af729a4103b57ecc747dd800eafd70f070cb76339d1145df28220867138025997ae651bebfc28aa1baa12fd940a179eba864309888339c9a0fba48ea2f0f99c1a75cf9b00e6a2637812133bddb9089b63dc3dfd3765f20d3c609b0a1d072ea48f10c5d1a43cd8b3f35719e7c7bc94bf7a08419d5c0ce457352fc7dfd73c64be227ae5b202d6a162deeaad0a88710b7de465810321716c82f57ec22fb4404115850b8093f901379061747bba00ed171354b6b137054d33974e04168af81c338abd9c42328bf0f843806c6f9ae6770d5f19876b7b251599d7bf381ff1cdaeb5eb1a2dec9aa34dac1d96cca4097d7c588d4e603543b607eea5a0a1a90b773c169b9818c4e6e5b0b5a1cd87218351d22d9b31cbf658df32cf67cf6e905061411ac1cb1e0293d39a5a771cac25578895e1041185ac10aee62314e33cfac6735a55efd0ec5bb41dcca1ee15c8d8a619881956748067dc7eb38fcd0687e7507607e6a13931107c4f24b0958313966eed5dddc6a7a4ba6541d973aeb306484d932aa4927413ccbbf1f13566320058122dd9fd553e2649025d9915e55265b154ebb40a5bc85dfc6e6eff148f3962f3ceab453cd48bf737a1685fadde02be16d8da153439a8dc8ad0b054d0c0c4b42cc4bd6266e2d00e09d48f8b90c2631f715cb1fac51ae7163d78942eb712974b91727084cdcf78d5442f0c402ecfee4c781bd7e74b2c2c90c4", 0x1000, 0x1}]}, 0x6, 0x2}, 0x1) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000040)={r9}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f00000017c0)={r9, 0xffffffff, 0x1ff, 0x7, 0x3, [], [0xc0, 0x4, 0x7, 0x2], [0x8, 0x81, 0x53cc, 0x35], [0x5, 0x8, 0x7, 0x7fff]}) dup3(r4, r3, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r10 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r11 = syz_open_dev$vim2m(&(0x7f0000000200), 0xfffffffffffffffc, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r11, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r11, 0x40045612, &(0x7f0000000040)=0x1) r12 = syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r12, 0xc0405602, &(0x7f0000000480)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "023d2134"}, 0x0, 0x100c, {0x0}}) ioctl$I2C_RDWR(r10, 0x707, &(0x7f0000000440)={&(0x7f0000000400)=[{0x7, 0x6200, 0x0, 0x0}, {0xeabb, 0x4000, 0x0, 0x0}], 0x2}) 1.070179263s ago: executing program 0 (id=1520): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0) r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x2000, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000100)={0x0, {{0x2, 0x4e24, @multicast2}}}, 0x84) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x6) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000001480)={0x0, 0x0, 0x400000000d240, 0x3ff}) fcntl$lock(r6, 0x24, &(0x7f0000000140)={0x2, 0x1, 0xd63e, 0x2}) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000, 0x2b}, 0x0, @in6=@mcast1, 0x1, 0x0, 0x0, 0x7, 0x7, 0x0, 0x2}}, 0xe4) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0xffe0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001340)={0x44, &(0x7f0000001400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TIOCL_SETVESABLANK(r6, 0x541c, &(0x7f0000000000)) 979.977442ms ago: executing program 3 (id=1521): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 806.930505ms ago: executing program 4 (id=1522): prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r1) r2 = syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0xc260, 0x20000) ioctl$MON_IOCX_MFETCH(r5, 0xc00c9207, &(0x7f0000000100)={0x0, 0x0, 0xbc}) recvmmsg(r0, &(0x7f00000081c0)=[{{0x0, 0x0, &(0x7f0000000680)}, 0xfffffffc}, {{&(0x7f0000000900)=@hci, 0x80, &(0x7f0000000b40)=[{&(0x7f00000009c0)=""/173, 0xad}], 0x1, &(0x7f0000000b80)=""/38, 0x26}, 0xcb}, {{&(0x7f0000000280)=@nfc, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/10, 0xa}, 0x1}, {{0x0, 0x0, 0x0}, 0x1}], 0x4, 0x2, &(0x7f00000001c0)={0x77359400}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000000080), 0x0, 0x8f3f, &(0x7f0000fff000/0x1000)=nil, 0x4) unshare(0x2a020400) unshare(0x60600) syz_io_uring_setup(0x131, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x2, 0xffffbffd}, 0x0, 0x0) 245.624216ms ago: executing program 0 (id=1523): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x4000885) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setattr(r4, &(0x7f00000000c0)={0x38, 0x6, 0x10000023, 0x3b2, 0x8, 0x1000, 0x8000000000000, 0x3, 0x10000, 0xfff}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) 52.924993ms ago: executing program 2 (id=1524): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x28, 0x1, 0x0) r3 = syz_io_uring_setup(0x112, &(0x7f0000000280)={0x0, 0x408c, 0x100, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x2121, 0x0, {0x3}}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xfce) io_uring_enter(r3, 0x47f6, 0xb277, 0x0, 0x0, 0x0) 46.413753ms ago: executing program 0 (id=1525): connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x0, 0x0, 0x7, 0x7, 0x0, 0x2}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffe0) (fail_nth: 3) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001340)={0x44, &(0x7f0000001400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 0s ago: executing program 3 (id=1526): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x2, 0x80000001, 0x58, @remote, @rand_addr=' \x01\x00', 0x8000, 0x86b0, 0xc36d}}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0x4, 0x5fa, 0x9, 0x1ff, 0x0, [{0x6d, 0xef, 0x9, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0x1, 0x7f, 0x9, '\x00', 0x5}, {0x85, 0x1, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x5c}, {0x0, 0x0, 0x2, '\x00', 0x8}, {0x6, 0x7, 0x3, '\x00', 0xa}, {0xc, 0x7, 0x4, '\x00', 0x45}, {0xa, 0x9, 0x0, '\x00', 0xfb}, {0x7, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x44, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0x9}, {0x3, 0x86, 0xc, '\x00', 0xf9}, {0x5, 0x4f}, {0x3, 0x4, 0x96, '\x00', 0x7}, {0xb, 0xff, 0x4, '\x00', 0x7f}, {0x3, 0x7, 0xd1, '\x00', 0x4}, {0x8, 0x3, 0x2, '\x00', 0x3}, {0x1, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x4c, 0xa, '\x00', 0x3}, {0x7, 0x1, 0x22, '\x00', 0x1}, {0x3, 0xfe, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0xf5, 0xdf, '\x00', 0x47}]}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x25, 0x0, "a386bcb957f6ee650a88e8065cb3b0852da5b6b12cf6fffdffffff0f392be7124f3883ab73ec229f5fab90b052c3572cb8ed729eed0700000000000000de12709700"}, 0xd8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000740)={"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"}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x0, 0x3, 0x93, 0x0, 0x0, 0x1, 0xbb, 0x2, 0xc0, 0x4d, 0x9, 0x61, 0x7, 0x90, 0xd}}) r4 = syz_open_dev$loop(&(0x7f0000000000), 0xfffffff7, 0x480000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x4, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, 0x3d, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x14, 0x37, 0x0, 0x1, [@typed={0xd, 0x3, 0x0, 0x0, @str='ctr(sm4)\x00'}]}]}, 0x28}}, 0xc000) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) kernel console output (not intermixed with test programs): pped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 338.595256][ C1] vkms_vblank_simulate: vblank timer overrun [ 338.613429][ T9449] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 338.665537][ T9449] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 338.675506][ T9449] Node 0 DMA32 free:1427632kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:53364kB inactive_anon:0kB active_file:85636kB inactive_file:13784kB unevictable:1536kB writepending:404kB present:3129332kB managed:2557440kB mlocked:0kB bounce:0kB free_pcp:40060kB local_pcp:18396kB free_cma:0kB [ 338.743941][ T9449] lowmem_reserve[]: 0 0 1 1 1 [ 338.753836][ T9449] Node 0 Normal free:8kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:224kB inactive_anon:0kB active_file:176kB inactive_file:1196kB unevictable:0kB writepending:8kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:40kB local_pcp:28kB free_cma:0kB [ 338.791031][ T9449] lowmem_reserve[]: 0 0 0 0 0 [ 338.796336][ T9449] Node 1 Normal free:3880620kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:25784kB local_pcp:12996kB free_cma:0kB [ 338.804970][ T24] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 338.828329][ C1] vkms_vblank_simulate: vblank timer overrun [ 338.831734][ T9449] lowmem_reserve[]: 0 0 0 0 0 [ 338.850373][ T9449] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 338.863673][ T9449] Node 0 DMA32: 538*4kB (U) 180*8kB (UME) 779*16kB (UME) 455*32kB (UME) 196*64kB (UME) 90*128kB (UME) 40*256kB (UME) 31*512kB (UME) 5*1024kB (UM) 3*2048kB (U) 326*4096kB (M) = 1427352kB [ 338.883563][ T9449] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 338.900696][ T9449] Node 1 Normal: 73*4kB (UM) 38*8kB (UM) 38*16kB (UME) 145*32kB (UME) 43*64kB (UME) 7*128kB (UME) 6*256kB (UME) 2*512kB (UE) 4*1024kB (UE) 1*2048kB (U) 943*4096kB (M) = 3880724kB [ 338.935331][ T9449] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 338.994207][ T9449] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 339.007566][ T24] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 339.015413][ T9449] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 339.018122][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 339.027753][ T9449] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 339.055418][ T9449] 35791 total pagecache pages [ 339.060347][ T9449] 0 pages in swap cache [ 339.064509][ T9449] Free swap = 124996kB [ 339.068927][ T9449] Total swap = 124996kB [ 339.073284][ T9449] 2097051 pages RAM [ 339.073354][ T24] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 339.078209][ T9449] 0 pages HighMem/MovableOnly [ 339.091721][ T9449] 425665 pages reserved [ 339.098568][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.120462][ T24] usb 3-1: config 0 descriptor?? [ 339.142472][ T9449] 0 pages cma reserved [ 339.249895][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 339.257126][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 339.267997][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 339.278683][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 339.286578][ T24] usb 3-1: media controller created [ 339.354495][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 339.560085][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 339.574250][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 339.655250][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input62 [ 339.670691][ T9451] dvb-usb: bulk message failed: -22 (2/0) [ 339.701507][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 339.717580][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 339.779753][ T5925] usb 2-1: USB disconnect, device number 26 [ 339.881211][ T9464] netlink: 'syz.4.997': attribute type 10 has an invalid length. [ 339.937807][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 339.953845][ T24] dvb-usb: error while querying for an remote control event. [ 340.034618][ T5998] usb 3-1: USB disconnect, device number 32 [ 340.123784][ T5998] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 340.312887][ T9470] KVM: debugfs: duplicate directory 9470-5 [ 340.797310][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 340.842120][ T9465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.185118][ T9478] tipc: Enabled bearer , priority 0 [ 341.200214][ T9478] syzkaller0: entered promiscuous mode [ 341.210001][ T9478] syzkaller0: entered allmulticast mode [ 341.263497][ T9478] tipc: Resetting bearer [ 341.290434][ T9477] tipc: Resetting bearer [ 341.339771][ T9477] tipc: Disabling bearer [ 341.551841][ T9486] FAULT_INJECTION: forcing a failure. [ 341.551841][ T9486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.575407][ T5925] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 341.608367][ T9486] CPU: 1 UID: 0 PID: 9486 Comm: syz.2.1007 Not tainted syzkaller #0 PREEMPT(full) [ 341.608391][ T9486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 341.608401][ T9486] Call Trace: [ 341.608408][ T9486] [ 341.608415][ T9486] dump_stack_lvl+0x189/0x250 [ 341.608439][ T9486] ? __pfx____ratelimit+0x10/0x10 [ 341.608462][ T9486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.608480][ T9486] ? __pfx__printk+0x10/0x10 [ 341.608502][ T9486] ? __might_fault+0xb0/0x130 [ 341.608532][ T9486] should_fail_ex+0x414/0x560 [ 341.608558][ T9486] _copy_from_user+0x2d/0xb0 [ 341.608578][ T9486] __se_sys_mount+0x18a/0x410 [ 341.608607][ T9486] ? __pfx___se_sys_mount+0x10/0x10 [ 341.608637][ T9486] ? __secure_computing+0xe2/0x2a0 [ 341.608655][ T9486] ? __ia32_sys_mount+0x20/0xc0 [ 341.608676][ T9486] __do_fast_syscall_32+0xb6/0x2b0 [ 341.608690][ T9486] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.608710][ T9486] do_fast_syscall_32+0x34/0x80 [ 341.608723][ T9486] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 341.608738][ T9486] RIP: 0023:0xf7fb7539 [ 341.608750][ T9486] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 341.608761][ T9486] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000015 [ 341.608776][ T9486] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800020c0 [ 341.608785][ T9486] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000080000040 [ 341.608794][ T9486] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 341.608801][ T9486] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 341.608809][ T9486] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 341.608828][ T9486] [ 341.789997][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.898919][ T5925] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 341.912239][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.984611][ T5925] usb 5-1: config 0 descriptor?? [ 341.994370][ T9495] KVM: debugfs: duplicate directory 9495-5 [ 342.034498][ T5925] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 342.272938][ T5925] gp8psk: usb in 128 operation failed. [ 342.287738][ T5925] gp8psk: usb in 137 operation failed. [ 342.298272][ T5925] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 342.358872][ T5925] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 342.383213][ T5925] usb 5-1: USB disconnect, device number 41 [ 342.574935][ T10] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 342.786570][ T10] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 342.802113][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 342.811104][ T10] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 342.861553][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.973481][ T10] usb 2-1: config 0 descriptor?? [ 343.003456][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 343.028463][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 343.047907][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 343.090436][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 343.110246][ T10] usb 2-1: media controller created [ 343.142598][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 343.159695][ T9510] overlayfs: missing 'lowerdir' [ 343.254146][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 343.303318][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 343.352218][ T9518] dvb-usb: bulk message failed: -22 (2/0) [ 343.355838][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.385350][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input63 [ 343.446203][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 343.459591][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 343.544219][ T9523] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1017'. [ 343.572820][ T9523] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1017'. [ 343.575765][ T10] usb 2-1: USB disconnect, device number 27 [ 343.666398][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 343.729028][ T9523] FAULT_INJECTION: forcing a failure. [ 343.729028][ T9523] name failslab, interval 1, probability 0, space 0, times 0 [ 343.742062][ T9523] CPU: 1 UID: 0 PID: 9523 Comm: syz.4.1017 Not tainted syzkaller #0 PREEMPT(full) [ 343.742085][ T9523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 343.742096][ T9523] Call Trace: [ 343.742105][ T9523] [ 343.742113][ T9523] dump_stack_lvl+0x189/0x250 [ 343.742146][ T9523] ? __pfx____ratelimit+0x10/0x10 [ 343.742170][ T9523] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.742189][ T9523] ? __pfx__printk+0x10/0x10 [ 343.742216][ T9523] ? __pfx___might_resched+0x10/0x10 [ 343.742232][ T9523] ? fs_reclaim_acquire+0x7d/0x100 [ 343.742260][ T9523] should_fail_ex+0x414/0x560 [ 343.742286][ T9523] should_failslab+0xa8/0x100 [ 343.742310][ T9523] kmem_cache_alloc_noprof+0x73/0x3c0 [ 343.742330][ T9523] ? io_submit_one+0x11f/0x1310 [ 343.742352][ T9523] io_submit_one+0x11f/0x1310 [ 343.742382][ T9523] ? __pfx_io_submit_one+0x10/0x10 [ 343.742400][ T9523] ? __might_fault+0xb0/0x130 [ 343.742432][ T9523] ? __might_fault+0xb0/0x130 [ 343.742456][ T9523] __ia32_compat_sys_io_submit+0x1c7/0x330 [ 343.742483][ T9523] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 343.742504][ T9523] ? ksys_write+0x22a/0x250 [ 343.742533][ T9523] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.742558][ T9523] __do_fast_syscall_32+0xb6/0x2b0 [ 343.742576][ T9523] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.742601][ T9523] do_fast_syscall_32+0x34/0x80 [ 343.742618][ T9523] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 343.742636][ T9523] RIP: 0023:0xf7f96539 [ 343.742649][ T9523] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 343.742663][ T9523] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 00000000000000f8 [ 343.742681][ T9523] RAX: ffffffffffffffda RBX: 00000000f545d000 RCX: 0000000000000002 [ 343.742693][ T9523] RDX: 0000000080000780 RSI: 0000000000000000 RDI: 0000000000000000 [ 343.742704][ T9523] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 343.742714][ T9523] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 343.742724][ T9523] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 343.742751][ T9523] [ 343.744632][ T9523] input: syz0 as /devices/virtual/input/input64 [ 344.264478][ T9519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.704618][ T9535] input: syz0 as /devices/virtual/input/input65 [ 346.099973][ T10] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 346.320092][ T9557] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1025'. [ 346.335166][ T9557] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1025'. [ 346.560737][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 346.884982][ T10] usb 4-1: device descriptor read/64, error -71 [ 346.930370][ T30] audit: type=1326 audit(1756990346.046:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.0.1025" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7fc00000 [ 346.952260][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.984957][ T980] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 347.156677][ T980] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 347.167853][ T10] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 347.185227][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.214951][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.245893][ T980] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 347.326788][ T9563] input: syz0 as /devices/virtual/input/input66 [ 347.334201][ T10] usb 4-1: device descriptor read/64, error -71 [ 347.416296][ T980] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 347.431570][ T980] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 347.485573][ T980] usb 5-1: Manufacturer: syz [ 347.500469][ T980] usb 5-1: config 0 descriptor?? [ 347.516863][ T10] usb usb4-port1: attempt power cycle [ 347.922238][ T9572] input: syz0 as /devices/virtual/input/input67 [ 347.966673][ T10] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 348.005178][ T10] usb 4-1: device descriptor read/8, error -71 [ 348.072828][ T980] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 348.158323][ T980] appleir 0003:05AC:8243.000C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 348.601486][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 348.648096][ T9] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 348.855595][ T5998] usb 5-1: USB disconnect, device number 42 [ 348.868613][ T9] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 348.886135][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 348.937072][ T9] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 348.969606][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.007430][ T9] usb 3-1: config 0 descriptor?? [ 349.041346][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 349.062653][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 349.094616][ T9582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1033'. [ 349.116708][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 349.135694][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 349.142800][ T9] usb 3-1: media controller created [ 349.152855][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 349.199577][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 349.224466][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 349.481775][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input68 [ 349.546604][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 349.553579][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 349.592509][ T9589] dvb-usb: bulk message failed: -22 (2/0) [ 349.715309][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 349.721206][ T10] dvb-usb: error while querying for an remote control event. [ 349.889204][ T10] usb 3-1: USB disconnect, device number 33 [ 349.940495][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 350.196132][ T9] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 350.370386][ T9] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 350.395241][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.423296][ T9] usb 1-1: config 0 descriptor?? [ 350.458046][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 350.905815][ T9608] input input69: cannot allocate more than FF_MAX_EFFECTS effects [ 352.235287][ T980] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 352.316601][ T1148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 352.405054][ T980] usb 3-1: Using ep0 maxpacket: 32 [ 352.413936][ T980] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 352.430791][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.520240][ T980] usb 3-1: Product: syz [ 352.570623][ T9] gp8psk: usb in 128 operation failed. [ 352.617506][ T980] usb 3-1: Manufacturer: syz [ 352.624977][ T9] gp8psk: usb in 137 operation failed. [ 352.642250][ T980] usb 3-1: SerialNumber: syz [ 352.677534][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 352.775979][ T980] usb 3-1: config 0 descriptor?? [ 352.786587][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 352.810904][ T980] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 353.123761][ T5925] usb 1-1: USB disconnect, device number 39 [ 353.503831][ T9628] input: syz0 as /devices/virtual/input/input70 [ 353.755185][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 354.767258][ T5925] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 354.910908][ T980] gspca_ov534_9: sccb_read failed 1 [ 354.935292][ T10] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 354.974994][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 354.988094][ T5925] usb 4-1: unable to get BOS descriptor or descriptor too short [ 355.014049][ T5925] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 355.014089][ T5925] usb 4-1: can't read configurations, error -71 [ 355.095018][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 355.109930][ T10] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 355.125841][ T10] usb 1-1: config 0 has no interface number 0 [ 355.147566][ T10] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 355.165968][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.179303][ T30] audit: type=1326 audit(1756990354.366:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9648 comm="syz.4.1051" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 355.183764][ T10] usb 1-1: Product: syz [ 355.201216][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.215813][ T5954] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 355.221445][ T30] audit: type=1326 audit(1756990354.366:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9648 comm="syz.4.1051" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 355.227533][ T10] usb 1-1: Manufacturer: syz [ 355.252654][ T10] usb 1-1: SerialNumber: syz [ 355.258312][ T30] audit: type=1326 audit(1756990354.366:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9648 comm="syz.4.1051" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 355.261129][ T10] usb 1-1: config 0 descriptor?? [ 355.282777][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.295535][ T30] audit: type=1326 audit(1756990354.366:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9648 comm="syz.4.1051" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 355.326985][ T30] audit: type=1326 audit(1756990354.366:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9648 comm="syz.4.1051" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 355.327683][ T980] gspca_ov534_9: reg_r err -32 [ 355.348924][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.361788][ T10] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 355.364578][ T30] audit: type=1326 audit(1756990354.366:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9648 comm="syz.4.1051" exe="/root/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 355.393250][ T30] audit: type=1326 audit(1756990354.366:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9648 comm="syz.4.1051" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 355.417769][ T30] audit: type=1326 audit(1756990354.366:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9648 comm="syz.4.1051" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 355.444613][ T30] audit: type=1326 audit(1756990354.366:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9648 comm="syz.4.1051" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 355.470943][ T30] audit: type=1326 audit(1756990354.366:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9648 comm="syz.4.1051" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 355.471994][ T5954] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 355.505045][ T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 355.515280][ T5954] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 355.529508][ T10] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 355.561906][ T10] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 355.572049][ T5954] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 355.589397][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.598746][ T980] gspca_ov534_9: Unknown sensor 0000 [ 355.598869][ T980] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 355.621196][ T980] usb 3-1: USB disconnect, device number 34 [ 355.628805][ T5954] usb 2-1: config 0 descriptor?? [ 355.654016][ T5954] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 355.666931][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 355.683720][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 355.694275][ T5954] dvb-usb: bulk message failed: -22 (3/0) [ 355.706496][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 355.723998][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 355.736173][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 355.767900][ T5954] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 355.785065][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.793880][ T5954] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 355.811490][ T5954] usb 2-1: media controller created [ 355.826156][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 355.866135][ T9] usb 5-1: config 0 descriptor?? [ 355.912973][ T5954] dvb-usb: bulk message failed: -22 (6/0) [ 355.939580][ T5954] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 355.959192][ T9653] dvb-usb: bulk message failed: -22 (2/0) [ 355.968626][ T5954] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input71 [ 356.005511][ T5954] dvb-usb: schedule remote query interval to 150 msecs. [ 356.013157][ T5954] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 356.036850][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 356.037950][ T92] usb 1-1: USB disconnect, device number 40 [ 356.088855][ T92] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 356.105006][ T9] hdpvr 5-1:0.0: firmware version 0x12 dated [ 356.155700][ T92] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 356.177949][ T5954] dvb-usb: bulk message failed: -22 (1/0) [ 356.188022][ T5954] dvb-usb: error while querying for an remote control event. [ 356.193884][ T92] quatech2 1-1:0.51: device disconnected [ 356.231153][ T5954] usb 2-1: USB disconnect, device number 28 [ 356.286336][ T5954] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 356.376036][ T9649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.386107][ T9649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.403354][ T9649] netlink: 'syz.4.1051': attribute type 30 has an invalid length. [ 357.288117][ T9672] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1057'. [ 357.364757][ T9672] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1057'. [ 357.441698][ T9672] erspan0: entered promiscuous mode [ 357.589974][ T9672] erspan0: left promiscuous mode [ 357.756556][ T9682] input: syz0 as /devices/virtual/input/input72 [ 358.066852][ T9684] program syz.1.1060 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 358.080733][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 358.844995][ T24] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 359.005103][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 359.020635][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 359.061909][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 359.116432][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 359.177554][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 359.222240][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 359.356765][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 359.392321][ T24] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 359.413288][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.427110][ T9709] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1065'. [ 359.465034][ T24] usb 2-1: Product: syz [ 359.479465][ T24] usb 2-1: Manufacturer: syz [ 359.494348][ T24] usb 2-1: SerialNumber: syz [ 359.519325][ T24] usb 2-1: config 0 descriptor?? [ 359.596559][ T24] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input73 [ 359.704969][ T5954] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 359.923299][ T5954] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 359.980857][ T5954] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 360.013218][ T5954] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 360.023210][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.042742][ T5954] usb 4-1: config 0 descriptor?? [ 360.063217][ T5954] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 360.090871][ T5954] dvb-usb: bulk message failed: -22 (3/0) [ 360.116881][ T5954] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 360.141885][ T5954] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 360.208667][ T5954] usb 4-1: media controller created [ 360.231525][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 360.313679][ T5954] dvb-usb: bulk message failed: -22 (6/0) [ 360.385357][ T5954] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 360.405276][ T9725] dvb-usb: bulk message failed: -22 (2/0) [ 360.414570][ T5954] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input75 [ 360.480527][ T5954] dvb-usb: schedule remote query interval to 150 msecs. [ 360.491755][ T5954] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 360.601680][ T9702] veth1_to_bond: entered allmulticast mode [ 360.645292][ T5954] dvb-usb: bulk message failed: -22 (1/0) [ 360.651180][ T5954] dvb-usb: error while querying for an remote control event. [ 360.815126][ T5954] dvb-usb: bulk message failed: -22 (1/0) [ 360.820973][ T5954] dvb-usb: error while querying for an remote control event. [ 360.840851][ T5925] usb 4-1: USB disconnect, device number 59 [ 361.101714][ T5925] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 361.430268][ T5998] usb 2-1: USB disconnect, device number 29 [ 361.460272][ T30] kauditd_printk_skb: 95 callbacks suppressed [ 361.460288][ T30] audit: type=1800 audit(1756990360.646:252): pid=9731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1073" name="nullb0" dev="devtmpfs" ino=3310 res=0 errno=0 [ 361.517230][ T5954] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 361.709630][ T5954] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 361.709671][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.709684][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.709695][ T5954] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 361.710620][ T5954] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 361.710636][ T5954] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 361.710646][ T5954] usb 1-1: Manufacturer: syz [ 361.712643][ T5954] usb 1-1: config 0 descriptor?? [ 362.221226][ T5954] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 362.254174][ T5954] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 362.436132][ T9753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1079'. [ 362.713536][ T9758] FAULT_INJECTION: forcing a failure. [ 362.713536][ T9758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.806172][ T9758] CPU: 1 UID: 0 PID: 9758 Comm: syz.3.1080 Not tainted syzkaller #0 PREEMPT(full) [ 362.806202][ T9758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 362.806211][ T9758] Call Trace: [ 362.806218][ T9758] [ 362.806226][ T9758] dump_stack_lvl+0x189/0x250 [ 362.806251][ T9758] ? __pfx____ratelimit+0x10/0x10 [ 362.806275][ T9758] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.806294][ T9758] ? __pfx__printk+0x10/0x10 [ 362.806316][ T9758] should_fail_ex+0x414/0x560 [ 362.806332][ T9758] _copy_to_user+0x31/0xb0 [ 362.806345][ T9758] simple_read_from_buffer+0xe1/0x170 [ 362.806368][ T9758] proc_fail_nth_read+0x1b3/0x220 [ 362.806392][ T9758] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 362.806414][ T9758] ? rw_verify_area+0x2a6/0x4d0 [ 362.806433][ T9758] ? __lock_acquire+0xab9/0xd20 [ 362.806451][ T9758] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 362.806463][ T9758] vfs_read+0x1fd/0xa30 [ 362.806475][ T9758] ? fdget_pos+0x247/0x320 [ 362.806486][ T9758] ? __pfx___mutex_lock+0x10/0x10 [ 362.806495][ T9758] ? __pfx_vfs_read+0x10/0x10 [ 362.806512][ T9758] ? __fget_files+0x2a/0x420 [ 362.806532][ T9758] ? __fget_files+0x3a0/0x420 [ 362.806546][ T9758] ? __fget_files+0x2a/0x420 [ 362.806570][ T9758] ksys_read+0x145/0x250 [ 362.806592][ T9758] ? __pfx_ksys_read+0x10/0x10 [ 362.806609][ T9758] ? lockdep_hardirqs_on+0x9c/0x150 [ 362.806625][ T9758] __do_fast_syscall_32+0xb6/0x2b0 [ 362.806634][ T9758] ? lockdep_hardirqs_on+0x9c/0x150 [ 362.806651][ T9758] do_fast_syscall_32+0x34/0x80 [ 362.806665][ T9758] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 362.806685][ T9758] RIP: 0023:0xf707e539 [ 362.806699][ T9758] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 362.806714][ T9758] RSP: 002b:00000000f546e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 362.806731][ T9758] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f546e620 [ 362.806742][ T9758] RDX: 000000000000000f RSI: 00000000f73f4ff4 RDI: 0000000000000000 [ 362.806750][ T9758] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 362.806755][ T9758] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 362.806761][ T9758] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 362.806775][ T9758] [ 363.042231][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.863838][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 364.277080][ T5954] usb 1-1: USB disconnect, device number 41 [ 364.430053][ T9789] netlink: 'syz.2.1089': attribute type 1 has an invalid length. [ 364.438231][ T9789] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1089'. [ 364.475014][ T5998] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 364.665084][ T5998] usb 4-1: Using ep0 maxpacket: 8 [ 364.679393][ T5998] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 364.898149][ T5998] usb 4-1: config 0 has no interface number 0 [ 364.956345][ T5998] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 364.971180][ T5998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.025048][ T5998] usb 4-1: Product: syz [ 365.029355][ T5998] usb 4-1: Manufacturer: syz [ 365.054446][ T5998] usb 4-1: SerialNumber: syz [ 365.068550][ T5998] usb 4-1: config 0 descriptor?? [ 365.115253][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 365.229355][ T9795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1092'. [ 365.239626][ T9795] bond0: left allmulticast mode [ 365.244516][ T9795] bond_slave_0: left allmulticast mode [ 365.255803][ T9795] bond_slave_1: left allmulticast mode [ 365.261730][ T9795] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 365.310277][ T5998] peak_usb 4-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 365.515296][ T5998] peak_usb 4-1:0.56 can0: sending command failure: -22 [ 365.525604][ T5998] peak_usb 4-1:0.56 can0: sending command failure: -22 [ 365.542806][ T5998] peak_usb 4-1:0.56 can0: sending command failure: -22 [ 365.625862][ T5998] peak_usb 4-1:0.56: probe with driver peak_usb failed with error -22 [ 365.966150][ T9786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.985387][ T9786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.245749][ T9811] input: syz0 as /devices/virtual/input/input77 [ 366.429668][ T9] hdpvr 5-1:0.0: device init failed [ 366.540333][ T9] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 366.611441][ T92] usb 4-1: USB disconnect, device number 60 [ 368.115318][ T5998] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 368.287178][ T5998] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 368.304704][ T5998] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.335098][ T5998] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.354935][ T5998] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 368.508910][ T5998] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 368.524936][ T5998] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 368.563567][ T5998] usb 2-1: Manufacturer: syz [ 368.586255][ T5998] usb 2-1: config 0 descriptor?? [ 369.039711][ T5998] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 369.054473][ T9845] FAULT_INJECTION: forcing a failure. [ 369.054473][ T9845] name failslab, interval 1, probability 0, space 0, times 0 [ 369.070525][ T9845] CPU: 1 UID: 0 PID: 9845 Comm: syz.3.1109 Not tainted syzkaller #0 PREEMPT(full) [ 369.070548][ T9845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 369.070558][ T9845] Call Trace: [ 369.070564][ T9845] [ 369.070571][ T9845] dump_stack_lvl+0x189/0x250 [ 369.070595][ T9845] ? __pfx____ratelimit+0x10/0x10 [ 369.070617][ T9845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.070635][ T9845] ? __pfx__printk+0x10/0x10 [ 369.070651][ T9845] ? filemap_get_entry+0x28f/0x2f0 [ 369.070678][ T9845] should_fail_ex+0x414/0x560 [ 369.070702][ T9845] should_failslab+0xa8/0x100 [ 369.070726][ T9845] __kmalloc_cache_noprof+0x70/0x3d0 [ 369.070747][ T9845] ? nd_alloc_stack+0x7d/0xf0 [ 369.070767][ T9845] nd_alloc_stack+0x7d/0xf0 [ 369.070786][ T9845] pick_link+0xc88/0xe80 [ 369.070811][ T9845] step_into+0xc5d/0xf30 [ 369.070840][ T9845] ? __pfx_step_into+0x10/0x10 [ 369.070856][ T9845] ? lookup_fast+0x168/0x5b0 [ 369.070874][ T9845] ? inode_permission+0x149/0x470 [ 369.070896][ T9845] link_path_walk+0x77b/0xea0 [ 369.070931][ T9845] path_lookupat+0x97/0x430 [ 369.070956][ T9845] filename_lookup+0x212/0x570 [ 369.070972][ T9845] ? __lock_acquire+0xab9/0xd20 [ 369.070999][ T9845] ? __pfx_filename_lookup+0x10/0x10 [ 369.071028][ T9845] ? __pfx_shmem_put_link+0x10/0x10 [ 369.071048][ T9845] ? __pfx_shmem_put_link+0x10/0x10 [ 369.071072][ T9845] ? strncpy_from_user+0x150/0x290 [ 369.071104][ T9845] path_removexattrat+0x196/0x690 [ 369.071126][ T9845] ? __pfx_path_removexattrat+0x10/0x10 [ 369.071143][ T9845] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 369.071160][ T9845] ? __pfx_vfs_write+0x10/0x10 [ 369.071213][ T9845] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 369.071241][ T9845] __ia32_sys_removexattr+0x61/0x70 [ 369.071260][ T9845] __do_fast_syscall_32+0xb6/0x2b0 [ 369.071277][ T9845] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.071302][ T9845] do_fast_syscall_32+0x34/0x80 [ 369.071319][ T9845] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 369.071338][ T9845] RIP: 0023:0xf707e539 [ 369.071352][ T9845] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 369.071367][ T9845] RSP: 002b:00000000f546e55c EFLAGS: 00000206 ORIG_RAX: 00000000000000eb [ 369.071386][ T9845] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000080000080 [ 369.071397][ T9845] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 369.071406][ T9845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 369.071414][ T9845] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 369.071424][ T9845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 369.071451][ T9845] [ 369.072344][ T5998] appleir 0003:05AC:8243.000E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 369.480822][ T9850] input: syz0 as /devices/virtual/input/input79 [ 369.662167][ T9857] input: syz0 as /devices/virtual/input/input80 [ 369.735929][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 370.875725][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 370.968899][ T30] audit: type=1326 audit(1756990370.156:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9868 comm="syz.4.1115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7fc00000 [ 371.308439][ T5954] usb 2-1: USB disconnect, device number 30 [ 371.695151][ T9] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 372.246453][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 372.279816][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.339302][ T9] usb 3-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 372.348885][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.376808][ T9] usb 3-1: config 0 descriptor?? [ 372.574936][ T5932] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 372.598662][ T9] chicony 0003:04F2:0418.000F: reserved main item tag 0xe [ 372.694062][ T9] chicony 0003:04F2:0418.000F: hidraw0: USB HID v0.01 Device [HID 04f2:0418] on usb-dummy_hcd.2-1/input0 [ 372.777383][ T5932] usb 4-1: Using ep0 maxpacket: 8 [ 372.794604][ T5932] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 372.834723][ T92] usb 3-1: USB disconnect, device number 35 [ 372.875260][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.940762][ T5932] pvrusb2: Hardware description: Terratec Grabster AV400 [ 372.991851][ T5932] pvrusb2: ********** [ 372.999222][ T5932] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 373.022043][ T5932] pvrusb2: Important functionality might not be entirely working. [ 373.034928][ T5932] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 373.084628][ T5932] pvrusb2: ********** [ 373.153688][ T2347] pvrusb2: Invalid write control endpoint [ 373.241026][ T2347] pvrusb2: Invalid write control endpoint [ 373.319925][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 373.354942][ T9] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 373.530789][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 373.547479][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 373.579622][ T2347] pvrusb2: Device being rendered inoperable [ 373.605835][ T2347] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 373.635423][ T2347] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 373.664419][ T2347] pvrusb2: Attached sub-driver cx25840 [ 373.683130][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 373.701140][ T9] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 373.723676][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.740879][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 373.787631][ T9] usb 1-1: config 0 descriptor?? [ 373.812938][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 373.836078][ T9903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.355584][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 375.845288][ T9] gp8psk: usb in 128 operation failed. [ 375.857591][ T9] gp8psk: usb in 137 operation failed. [ 375.878000][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 375.898422][ T92] usb 4-1: USB disconnect, device number 61 [ 375.969610][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 375.984182][ T9937] FAULT_INJECTION: forcing a failure. [ 375.984182][ T9937] name failslab, interval 1, probability 0, space 0, times 0 [ 376.070745][ T9941] netlink: 'syz.2.1131': attribute type 10 has an invalid length. [ 376.079021][ T9937] CPU: 0 UID: 0 PID: 9937 Comm: syz.3.1133 Not tainted syzkaller #0 PREEMPT(full) [ 376.079045][ T9937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 376.079054][ T9937] Call Trace: [ 376.079062][ T9937] [ 376.079068][ T9937] dump_stack_lvl+0x189/0x250 [ 376.079099][ T9937] ? __pfx____ratelimit+0x10/0x10 [ 376.079122][ T9937] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.079138][ T9937] ? __pfx__printk+0x10/0x10 [ 376.079156][ T9937] ? netlink_unicast+0x82c/0x9e0 [ 376.079176][ T9937] ? ___sys_sendmsg+0x21f/0x2a0 [ 376.079193][ T9937] ? __do_fast_syscall_32+0xb6/0x2b0 [ 376.079221][ T9937] should_fail_ex+0x414/0x560 [ 376.079243][ T9937] should_failslab+0xa8/0x100 [ 376.079259][ T9937] kmem_cache_alloc_noprof+0x73/0x3c0 [ 376.079273][ T9937] ? skb_clone+0x212/0x3a0 [ 376.079286][ T9937] skb_clone+0x212/0x3a0 [ 376.079299][ T9937] __netlink_deliver_tap+0x404/0x850 [ 376.079321][ T9937] ? netlink_deliver_tap+0x2e/0x1b0 [ 376.079336][ T9937] netlink_deliver_tap+0x19c/0x1b0 [ 376.079352][ T9937] netlink_sendskb+0x68/0x140 [ 376.079366][ T9937] netlink_unicast+0x397/0x9e0 [ 376.079378][ T9937] ? __asan_memcpy+0x40/0x70 [ 376.079393][ T9937] ? __pfx_netlink_unicast+0x10/0x10 [ 376.079412][ T9937] netlink_rcv_skb+0x28c/0x470 [ 376.079427][ T9937] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 376.079443][ T9937] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 376.079463][ T9937] ? netlink_deliver_tap+0x2e/0x1b0 [ 376.079482][ T9937] netlink_unicast+0x82c/0x9e0 [ 376.079500][ T9937] ? __pfx_netlink_unicast+0x10/0x10 [ 376.079514][ T9937] ? netlink_sendmsg+0x642/0xb30 [ 376.079522][ T9937] ? skb_put+0x11b/0x210 [ 376.079533][ T9937] netlink_sendmsg+0x805/0xb30 [ 376.079547][ T9937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.079557][ T9937] ? __import_iovec+0x5d4/0x7f0 [ 376.079568][ T9937] ? aa_sock_msg_perm+0xf1/0x1d0 [ 376.079578][ T9937] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 376.079589][ T9937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.079598][ T9937] __sock_sendmsg+0x219/0x270 [ 376.079613][ T9937] ____sys_sendmsg+0x505/0x830 [ 376.079627][ T9937] ? __pfx_____sys_sendmsg+0x10/0x10 [ 376.079646][ T9937] ___sys_sendmsg+0x21f/0x2a0 [ 376.079658][ T9937] ? __pfx____sys_sendmsg+0x10/0x10 [ 376.079687][ T9937] ? __fget_files+0x2a/0x420 [ 376.079695][ T9937] ? __fget_files+0x3a0/0x420 [ 376.079709][ T9937] __sys_sendmsg+0x164/0x220 [ 376.079721][ T9937] ? __pfx___sys_sendmsg+0x10/0x10 [ 376.079740][ T9937] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.079757][ T9937] __do_fast_syscall_32+0xb6/0x2b0 [ 376.079767][ T9937] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.079783][ T9937] do_fast_syscall_32+0x34/0x80 [ 376.079792][ T9937] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 376.079803][ T9937] RIP: 0023:0xf707e539 [ 376.079813][ T9937] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 376.079821][ T9937] RSP: 002b:00000000f546e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 376.079836][ T9937] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 376.079843][ T9937] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 376.079848][ T9937] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 376.079854][ T9937] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 376.079859][ T9937] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 376.079873][ T9937] [ 376.418390][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.635120][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 376.699541][ T9] usb 1-1: USB disconnect, device number 42 [ 376.718551][ T9940] VFS: Mount too revealing [ 376.736104][ T9940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1132'. [ 376.937425][ T9948] netlink: 'syz.0.1136': attribute type 4 has an invalid length. [ 376.977862][ T9948] netlink: 'syz.0.1136': attribute type 4 has an invalid length. [ 377.150413][ T9951] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1137'. [ 377.405354][ T9958] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1138'. [ 378.571846][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.578434][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.478989][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 380.670988][T10001] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1152'. [ 380.894394][T10012] netlink: 'syz.2.1154': attribute type 10 has an invalid length. [ 380.964907][ T92] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 381.021638][T10014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.062839][T10014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.086188][T10014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.098441][T10014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.120011][T10014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.131757][T10014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.166972][ T92] usb 1-1: too many configurations: 19, using maximum allowed: 8 [ 381.202240][ T92] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 381.210519][ T92] usb 1-1: can't read configurations, error -61 [ 381.219049][T10014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.229212][T10014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.374897][ T92] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 381.543701][ T92] usb 1-1: too many configurations: 19, using maximum allowed: 8 [ 381.605222][ T92] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 381.737319][ T92] usb 1-1: can't read configurations, error -61 [ 381.752650][ T92] usb usb1-port1: attempt power cycle [ 382.191797][ T92] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 382.286024][T10024] input: syz0 as /devices/virtual/input/input81 [ 382.314654][ T92] usb 1-1: too many configurations: 19, using maximum allowed: 8 [ 382.335277][ T92] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 382.355101][ T92] usb 1-1: can't read configurations, error -61 [ 382.397360][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 382.535724][ T92] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 382.575953][ T92] usb 1-1: too many configurations: 19, using maximum allowed: 8 [ 382.594031][ T92] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 382.602625][ T92] usb 1-1: can't read configurations, error -61 [ 382.618023][ T92] usb usb1-port1: unable to enumerate USB device [ 383.571534][T10038] input: syz0 as /devices/virtual/input/input82 [ 383.636734][T10040] fuse: Unknown parameter 'fd-0x000000000000000600000000000000000000' [ 383.763269][T10041] input: syz1 as /devices/virtual/input/input83 [ 383.799373][T10043] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1166'. [ 384.069805][T10046] netlink: 'syz.0.1168': attribute type 8 has an invalid length. [ 385.264942][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 385.425211][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 385.434415][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 385.446491][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 385.684969][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 385.701486][T10078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1177'. [ 385.735358][T10078] bridge_slave_1: left allmulticast mode [ 385.745695][T10078] bridge_slave_1: left promiscuous mode [ 385.761886][T10078] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.809305][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 385.822114][ T9] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 385.841666][ T9] usb 3-1: Product: syz [ 385.853920][ T9] usb 3-1: Manufacturer: syz [ 386.028326][T10078] bridge_slave_0: left allmulticast mode [ 386.034088][T10078] bridge_slave_0: left promiscuous mode [ 386.040550][T10078] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.054897][ T9] usb 3-1: SerialNumber: syz [ 386.094735][ T9] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input84 [ 386.236115][ T1148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 386.449882][ T24] usb 3-1: USB disconnect, device number 36 [ 386.510298][ T24] appletouch 3-1:1.0: input: appletouch disconnected [ 386.930270][T10087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.945488][T10087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.501582][T10097] input: syz0 as /devices/virtual/input/input85 [ 387.761306][T10103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.833245][T10107] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1185'. [ 387.843126][T10107] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1185'. [ 388.198586][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 388.530078][T10118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1189'. [ 388.544255][T10118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1189'. [ 389.424171][T10127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.436589][T10127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.825199][ T24] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 389.987292][ T24] usb 2-1: config 0 has an invalid interface number: 166 but max is 0 [ 390.031078][ T24] usb 2-1: config 0 has no interface number 0 [ 390.037745][ T24] usb 2-1: config 0 interface 166 has no altsetting 0 [ 390.091758][ T24] usb 2-1: New USB device found, idVendor=0675, idProduct=1688, bcdDevice=59.4c [ 390.111274][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.122472][ T24] usb 2-1: Product: syz [ 390.132033][ T24] usb 2-1: Manufacturer: syz [ 390.142533][ T24] usb 2-1: SerialNumber: syz [ 390.165406][ T24] usb 2-1: config 0 descriptor?? [ 390.257547][T10140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1195'. [ 390.290248][ T24] HFC-S_USB 2-1:0.166: probe with driver HFC-S_USB failed with error -5 [ 391.558382][ T24] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 391.596665][ T30] audit: type=1800 audit(1756990390.786:254): pid=10161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1201" name="nullb0" dev="devtmpfs" ino=3310 res=0 errno=0 [ 391.783415][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.864894][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.925099][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 391.972160][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 391.995317][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 392.030804][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.078119][ T24] usb 1-1: config 0 descriptor?? [ 392.336539][ T5932] usb 2-1: USB disconnect, device number 31 [ 392.494919][ T9] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 392.662378][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 392.676681][ T9] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.700861][ T24] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 392.713369][ T9] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.719785][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 392.764915][ T5954] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 392.780364][ T9] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 392.807194][ T9] usb 4-1: Product: syz [ 392.811383][ T9] usb 4-1: Manufacturer: syz [ 392.925391][ T9] hub 4-1:4.0: USB hub found [ 392.992679][ T5954] usb 3-1: unable to get BOS descriptor or descriptor too short [ 393.016639][ T5954] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.027239][ T5954] usb 3-1: config 1 interface 0 altsetting 155 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 393.041640][ T5954] usb 3-1: config 1 interface 0 has no altsetting 0 [ 393.108495][ T5954] usb 3-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice=20.40 [ 393.117976][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.135354][ T9] hub 4-1:4.0: 2 ports detected [ 393.145163][ T5954] usb 3-1: Product: syz [ 393.152687][ T5954] usb 3-1: Manufacturer: syz [ 393.181493][ T5954] usb 3-1: SerialNumber: syz [ 393.543081][ T9] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 393.561795][ T9] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 393.715164][ T9] usb 4-1: USB disconnect, device number 62 [ 393.935006][ T5998] usb 1-1: reset high-speed USB device number 47 using dummy_hcd [ 393.956438][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 394.323394][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 394.475392][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 394.485006][ T9] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 394.501780][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.552438][ T9] usb 2-1: config 0 descriptor?? [ 395.177023][ T5954] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 395.209213][ T5954] usb 3-1: USB disconnect, device number 37 [ 395.280207][ T24] usb 1-1: USB disconnect, device number 47 [ 395.318214][ T30] audit: type=1800 audit(1756990394.506:255): pid=10205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1214" name="nullb0" dev="devtmpfs" ino=3310 res=0 errno=0 [ 395.725094][ T5954] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 395.954491][ T5954] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 395.974807][ T5954] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 396.001484][ T5954] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 396.034259][T10216] input: syz0 as /devices/virtual/input/input86 [ 396.096929][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.133034][ T5954] usb 3-1: config 0 descriptor?? [ 396.755597][ T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 396.793468][ T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 397.155881][ T5954] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 397.166690][ T9] asix 2-1:0.0: probe with driver asix failed with error -71 [ 397.189653][ T5954] dvb-usb: bulk message failed: -22 (3/0) [ 397.204743][ T9] usb 2-1: USB disconnect, device number 32 [ 397.256648][ T5954] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 397.294230][ T5954] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 397.306820][ T5954] usb 3-1: media controller created [ 397.314599][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 397.331029][ T5954] dvb-usb: bulk message failed: -22 (6/0) [ 397.365453][ T5954] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 397.408642][ T5954] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input87 [ 397.457837][ T5954] dvb-usb: schedule remote query interval to 150 msecs. [ 397.485617][ T5954] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 397.546427][ T9] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 397.720137][ T5954] dvb-usb: bulk message failed: -22 (1/0) [ 397.726159][ T5954] dvb-usb: error while querying for an remote control event. [ 397.735181][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 397.746753][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 397.760308][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 397.771515][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 397.788190][ T5998] usb 3-1: USB disconnect, device number 38 [ 397.826137][ T9] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 397.837273][T10244] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 397.863692][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.904325][ T5998] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 397.913295][ T9] usb 2-1: Product: syz [ 397.913317][ T9] usb 2-1: Manufacturer: syz [ 397.913332][ T9] usb 2-1: SerialNumber: syz [ 397.925988][ T9] usb 2-1: config 0 descriptor?? [ 397.963928][T10233] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 397.973805][T10233] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 397.989820][ T9] usb 2-1: ucan: probing device on interface #0 [ 398.762581][ T9] ucan 2-1:0.0: probe with driver ucan failed with error -71 [ 398.815275][ T9] usb 2-1: USB disconnect, device number 33 [ 399.685383][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 400.176975][T10276] KVM: debugfs: duplicate directory 10276-5 [ 401.798025][T10306] input: syz0 as /devices/virtual/input/input89 [ 401.870570][ T43] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 402.074291][ T30] audit: type=1800 audit(1756990401.256:256): pid=10311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1243" name="nullb0" dev="devtmpfs" ino=3310 res=0 errno=0 [ 402.116611][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 402.143556][ T43] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.178473][ T43] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.195915][ T43] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 402.239525][ T43] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 402.264522][ T43] usb 2-1: Product: syz [ 402.276612][ T43] usb 2-1: Manufacturer: syz [ 402.302396][ T43] hub 2-1:4.0: USB hub found [ 402.500250][ T43] hub 2-1:4.0: 2 ports detected [ 402.767795][ T43] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 402.814704][ T43] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 402.885704][ T43] usb 2-1: USB disconnect, device number 34 [ 403.516375][ T1148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 403.534602][ T30] audit: type=1800 audit(1756990402.716:257): pid=10335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1248" name="nullb0" dev="devtmpfs" ino=3310 res=0 errno=0 [ 403.739009][T10341] KVM: debugfs: duplicate directory 10341-5 [ 404.287058][T10357] loop6: detected capacity change from 0 to 7 [ 404.340470][ T5917] loop6: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 404.346788][ T5917] loop6: p1 start 1534358292 is beyond EOD, truncated [ 404.354419][ T5917] loop6: p2 start 2584562621 is beyond EOD, truncated [ 404.404682][ T5917] loop6: p3 start 1014184556 is beyond EOD, truncated [ 404.420408][ T5917] loop6: p4 start 414169957 is beyond EOD, truncated [ 404.429842][ T5917] loop6: p5 start 4259793539 is beyond EOD, truncated [ 404.474292][ T5917] loop6: p6 start 627625572 is beyond EOD, truncated [ 404.491104][ T5917] loop6: p7 start 2661023744 is beyond EOD, truncated [ 404.942297][T10357] loop6: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 404.984687][T10357] loop6: p1 start 1534358292 is beyond EOD, truncated [ 405.001931][T10357] loop6: p2 start 2584562621 is beyond EOD, truncated [ 405.043428][T10357] loop6: p3 start 1014184556 is beyond EOD, truncated [ 405.174637][ T30] audit: type=1326 audit(1756990404.356:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.4.1257" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 405.181651][T10357] loop6: p4 start 414169957 is beyond EOD, [ 405.217415][ T30] audit: type=1326 audit(1756990404.356:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.4.1257" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 405.253201][ T30] audit: type=1326 audit(1756990404.356:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.4.1257" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 405.276129][ T30] audit: type=1326 audit(1756990404.356:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.4.1257" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 405.294495][T10357] truncated [ 405.298440][ T30] audit: type=1326 audit(1756990404.386:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.4.1257" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 405.323737][ T30] audit: type=1326 audit(1756990404.386:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.4.1257" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 405.346108][ T30] audit: type=1326 audit(1756990404.386:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.4.1257" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 405.373685][ T30] audit: type=1326 audit(1756990404.386:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.4.1257" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f96539 code=0x7ffc0000 [ 405.385852][T10357] loop6: p5 start 4259793539 is beyond EOD, [ 405.440182][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 405.450660][T10357] truncated [ 405.472428][T10357] loop6: p6 start 627625572 is beyond EOD, truncated [ 405.479802][T10357] loop6: p7 start 2661023744 is beyond EOD, truncated [ 407.289216][T10413] netlink: 'syz.4.1268': attribute type 10 has an invalid length. [ 407.459060][T10417] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 407.765420][ T980] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 407.944953][ T980] usb 2-1: Using ep0 maxpacket: 32 [ 407.955698][T10428] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1273'. [ 408.216081][ T980] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 408.234037][ T980] usb 2-1: config 0 has no interface number 0 [ 408.244276][ T980] usb 2-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 408.345282][ T980] usb 2-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 408.665427][ T980] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 408.695706][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.709965][ T980] usb 2-1: Product: syz [ 408.714192][ T980] usb 2-1: Manufacturer: syz [ 408.725940][ T980] usb 2-1: SerialNumber: syz [ 408.793268][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 408.793284][ T30] audit: type=1800 audit(1756990407.976:269): pid=10444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1276" name="nullb0" dev="devtmpfs" ino=3310 res=0 errno=0 [ 408.871241][ T980] usb 2-1: config 0 descriptor?? [ 408.911375][T10417] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 408.931244][T10417] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 408.940136][ T980] ums-sddr09 2-1:0.20: USB Mass Storage device detected [ 409.087932][ T980] ums-sddr09 2-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 409.288411][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 409.549357][T10457] FAULT_INJECTION: forcing a failure. [ 409.549357][T10457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.562720][T10457] CPU: 1 UID: 0 PID: 10457 Comm: syz.3.1281 Not tainted syzkaller #0 PREEMPT(full) [ 409.562735][T10457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 409.562741][T10457] Call Trace: [ 409.562746][T10457] [ 409.562751][T10457] dump_stack_lvl+0x189/0x250 [ 409.562768][T10457] ? __pfx____ratelimit+0x10/0x10 [ 409.562784][T10457] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.562796][T10457] ? __pfx__printk+0x10/0x10 [ 409.562810][T10457] ? __might_fault+0xb0/0x130 [ 409.562829][T10457] should_fail_ex+0x414/0x560 [ 409.562845][T10457] _copy_from_user+0x2d/0xb0 [ 409.562857][T10457] get_compat_msghdr+0xad/0x4a0 [ 409.562872][T10457] ? __pfx_get_compat_msghdr+0x10/0x10 [ 409.562888][T10457] ___sys_sendmsg+0x193/0x2a0 [ 409.562900][T10457] ? __pfx____sys_sendmsg+0x10/0x10 [ 409.562928][T10457] ? __fget_files+0x2a/0x420 [ 409.562936][T10457] ? __fget_files+0x3a0/0x420 [ 409.562949][T10457] __sys_sendmsg+0x164/0x220 [ 409.562961][T10457] ? __pfx___sys_sendmsg+0x10/0x10 [ 409.562983][T10457] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.562999][T10457] __do_fast_syscall_32+0xb6/0x2b0 [ 409.563009][T10457] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.563025][T10457] do_fast_syscall_32+0x34/0x80 [ 409.563034][T10457] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 409.563046][T10457] RIP: 0023:0xf707e539 [ 409.563055][T10457] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 409.563063][T10457] RSP: 002b:00000000f546e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 409.563074][T10457] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0 [ 409.563081][T10457] RDX: 0000000004048010 RSI: 0000000000000000 RDI: 0000000000000000 [ 409.563087][T10457] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 409.563092][T10457] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 409.563098][T10457] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 409.563111][T10457] [ 409.764114][ C1] vkms_vblank_simulate: vblank timer overrun [ 410.059848][T10460] fuse: Invalid uid '0x0000000000000003' [ 410.092977][T10462] FAULT_INJECTION: forcing a failure. [ 410.092977][T10462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.117214][T10462] CPU: 1 UID: 0 PID: 10462 Comm: syz.3.1283 Not tainted syzkaller #0 PREEMPT(full) [ 410.117239][T10462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 410.117249][T10462] Call Trace: [ 410.117257][T10462] [ 410.117265][T10462] dump_stack_lvl+0x189/0x250 [ 410.117289][T10462] ? __pfx____ratelimit+0x10/0x10 [ 410.117313][T10462] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.117331][T10462] ? __pfx__printk+0x10/0x10 [ 410.117353][T10462] ? __might_fault+0xb0/0x130 [ 410.117384][T10462] should_fail_ex+0x414/0x560 [ 410.117411][T10462] _copy_from_user+0x2d/0xb0 [ 410.117431][T10462] get_v4l2_format32+0x2f4/0x4f0 [ 410.117455][T10462] ? __pfx_get_v4l2_format32+0x10/0x10 [ 410.117491][T10462] v4l2_compat_get_user+0xaee/0x1380 [ 410.117516][T10462] ? __pfx_v4l2_compat_get_user+0x10/0x10 [ 410.117558][T10462] ? rcu_is_watching+0x15/0xb0 [ 410.117583][T10462] ? trace_kmalloc+0x1f/0xd0 [ 410.117609][T10462] video_usercopy+0x414/0x14f0 [ 410.117637][T10462] ? __pfx___video_do_ioctl+0x10/0x10 [ 410.117654][T10462] ? __pfx_video_usercopy+0x10/0x10 [ 410.117689][T10462] ? __fget_files+0x2a/0x420 [ 410.117708][T10462] v4l2_ioctl+0x18a/0x1e0 [ 410.117729][T10462] v4l2_compat_ioctl32+0x1d7/0x260 [ 410.117754][T10462] __ia32_compat_sys_ioctl+0x543/0x840 [ 410.117778][T10462] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 410.117798][T10462] ? __fget_files+0x3a0/0x420 [ 410.117820][T10462] ? fput+0xa0/0xd0 [ 410.117838][T10462] ? ksys_write+0x22a/0x250 [ 410.117868][T10462] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.117894][T10462] __do_fast_syscall_32+0xb6/0x2b0 [ 410.117910][T10462] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.117935][T10462] do_fast_syscall_32+0x34/0x80 [ 410.117952][T10462] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 410.117971][T10462] RIP: 0023:0xf707e539 [ 410.117987][T10462] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 410.118002][T10462] RSP: 002b:00000000f546e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 410.118020][T10462] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0f8565c [ 410.118032][T10462] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 410.118043][T10462] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 410.118053][T10462] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 410.118064][T10462] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 410.118090][T10462] [ 410.369296][ C1] vkms_vblank_simulate: vblank timer overrun [ 410.888829][T10480] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 410.896266][T10480] IPv6: NLM_F_CREATE should be set when creating new route [ 410.904799][T10480] IPv6: NLM_F_CREATE should be set when creating new route [ 410.912292][T10480] IPv6: NLM_F_CREATE should be set when creating new route [ 411.205645][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 411.231853][ T5956] usb 2-1: USB disconnect, device number 35 [ 412.483432][T10482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.361844][T10504] netlink: 'syz.4.1293': attribute type 10 has an invalid length. [ 415.036604][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 415.298443][T10535] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1303'. [ 415.502668][T10538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1304'. [ 415.818550][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1305'. [ 416.245466][T10548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1308'. [ 416.333038][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 417.098108][T10562] netlink: 'syz.2.1310': attribute type 10 has an invalid length. [ 417.669282][T10548] team0 (unregistering): Port device team_slave_0 removed [ 417.720142][T10548] team0 (unregistering): Port device team_slave_1 removed [ 418.934958][ T24] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 419.163900][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 419.195988][ T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 419.234929][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 419.264606][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.316220][T10577] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 419.334999][T10582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.343828][T10582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.355851][ T5998] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 419.366999][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 419.558723][ T5998] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 419.558742][ T5998] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 419.558752][ T5998] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 419.558776][ T5998] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 419.558789][ T5998] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 419.560404][ T5998] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 419.560421][ T5998] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 419.560432][ T5998] usb 2-1: Product: syz [ 419.560440][ T5998] usb 2-1: Manufacturer: syz [ 419.574303][ T5998] cdc_wdm 2-1:1.0: skipping garbage [ 419.574324][ T5998] cdc_wdm 2-1:1.0: skipping garbage [ 419.585671][ T5998] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 419.585699][ T5998] cdc_wdm 2-1:1.0: Unknown control protocol [ 419.871783][T10589] input: syz0 as /devices/virtual/input/input90 [ 419.947294][T10591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.019162][T10591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.066117][T10591] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 420.505541][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 420.505628][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 420.507025][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 420.507040][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 420.507211][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 420.507221][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 420.507274][ T24] usb 2-1: USB disconnect, device number 36 [ 420.507389][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 420.507398][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 420.507405][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 420.720701][T10579] sock: sock_timestamping_bind_phc: sock not bind to device [ 420.797031][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 421.626819][ T30] audit: type=1800 audit(1756990420.806:270): pid=10611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1322" name="nullb0" dev="devtmpfs" ino=3310 res=0 errno=0 [ 422.075258][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 422.106027][ T30] audit: type=1800 audit(1756990421.286:271): pid=10620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1323" name="nullb0" dev="devtmpfs" ino=3310 res=0 errno=0 [ 422.328118][ T5998] usb 3-1: USB disconnect, device number 39 [ 423.084236][T10645] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1333'. [ 424.340205][T10630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.681607][T10658] KVM: debugfs: duplicate directory 10658-5 [ 425.087586][T10667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1338'. [ 425.604853][ T5954] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 425.961798][T10681] input: syz0 as /devices/virtual/input/input91 [ 425.981693][ T5954] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 425.993994][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.063003][ T5954] usb 3-1: Product: syz [ 426.069662][ T5954] usb 3-1: Manufacturer: syz [ 426.099612][ T5954] usb 3-1: SerialNumber: syz [ 426.403160][ T5954] rtl8150 3-1:1.0: couldn't reset the device [ 426.422457][ T5954] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 426.455243][ T5954] usb 3-1: USB disconnect, device number 40 [ 426.525047][T10693] input: syz1 as /devices/virtual/input/input92 [ 426.555565][ T1148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 426.926471][T10698] KVM: debugfs: duplicate directory 10698-5 [ 427.017024][T10703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.028376][T10703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.421937][T10717] syzkaller1: tun_chr_ioctl cmd 35108 [ 427.726250][T10725] block nbd0: Attempted send on invalid socket [ 427.732650][T10725] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 427.835428][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 427.899779][T10730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1359'. [ 427.932291][T10730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1359'. [ 428.580588][T10744] KVM: debugfs: duplicate directory 10744-5 [ 429.035088][ T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 429.203895][T10753] binder: 10752:10753 ioctl c0306201 80000640 returned -22 [ 429.309964][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 429.373519][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.404893][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.434515][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 429.455473][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.473951][ T9] usb 3-1: config 0 descriptor?? [ 429.907561][ T9] savu 0003:1E7D:2D5A.0011: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 429.994880][ T24] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 430.369961][ T24] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 430.380442][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 430.392318][ T24] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 430.401943][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.420218][ T24] usb 4-1: config 0 descriptor?? [ 430.429126][T10747] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1365'. [ 430.441088][ T5998] usb 3-1: USB disconnect, device number 41 [ 430.583481][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 430.600942][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 430.624433][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 430.656635][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 430.663736][ T24] usb 4-1: media controller created [ 430.677303][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 430.739551][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 430.772399][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 430.870068][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input93 [ 430.904530][T10780] dvb-usb: bulk message failed: -22 (2/0) [ 430.932981][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 431.069170][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 431.225795][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 431.241458][ T980] usb 4-1: USB disconnect, device number 63 [ 431.254449][ T24] dvb-usb: error while querying for an remote control event. [ 431.323795][ T980] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 431.482919][T10788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1378'. [ 431.563236][T10791] tipc: Enabled bearer , priority 0 [ 431.571106][T10791] syzkaller0: entered promiscuous mode [ 431.595286][T10791] syzkaller0: entered allmulticast mode [ 431.660608][T10791] tipc: Resetting bearer [ 431.680695][T10790] tipc: Resetting bearer [ 431.698647][T10790] tipc: Disabling bearer [ 431.896745][ T24] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 432.087683][ T24] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 432.108661][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.148260][ T24] usb 2-1: config 0 descriptor?? [ 432.175678][ T24] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 432.242152][T10807] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1385'. [ 432.315865][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 432.461796][T10808] veth1_to_bond: entered allmulticast mode [ 433.125785][T10821] FAULT_INJECTION: forcing a failure. [ 433.125785][T10821] name failslab, interval 1, probability 0, space 0, times 0 [ 433.139025][T10821] CPU: 0 UID: 0 PID: 10821 Comm: syz.2.1387 Not tainted syzkaller #0 PREEMPT(full) [ 433.139050][T10821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 433.139060][T10821] Call Trace: [ 433.139068][T10821] [ 433.139077][T10821] dump_stack_lvl+0x189/0x250 [ 433.139099][T10821] ? __pfx____ratelimit+0x10/0x10 [ 433.139115][T10821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.139126][T10821] ? __pfx__printk+0x10/0x10 [ 433.139141][T10821] ? __lock_acquire+0xab9/0xd20 [ 433.139165][T10821] should_fail_ex+0x414/0x560 [ 433.139192][T10821] should_failslab+0xa8/0x100 [ 433.139216][T10821] kmem_cache_alloc_noprof+0x73/0x3c0 [ 433.139236][T10821] ? skb_clone+0x212/0x3a0 [ 433.139255][T10821] skb_clone+0x212/0x3a0 [ 433.139269][T10821] __netlink_deliver_tap+0x404/0x850 [ 433.139291][T10821] ? netlink_deliver_tap+0x2e/0x1b0 [ 433.139307][T10821] netlink_deliver_tap+0x19c/0x1b0 [ 433.139330][T10821] netlink_unicast+0x7fa/0x9e0 [ 433.139360][T10821] ? __pfx_netlink_unicast+0x10/0x10 [ 433.139384][T10821] ? netlink_sendmsg+0x642/0xb30 [ 433.139397][T10821] ? skb_put+0x11b/0x210 [ 433.139409][T10821] netlink_sendmsg+0x805/0xb30 [ 433.139423][T10821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.139433][T10821] ? __import_iovec+0x5d4/0x7f0 [ 433.139443][T10821] ? aa_sock_msg_perm+0xf1/0x1d0 [ 433.139454][T10821] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 433.139470][T10821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.139487][T10821] __sock_sendmsg+0x219/0x270 [ 433.139512][T10821] ____sys_sendmsg+0x505/0x830 [ 433.139540][T10821] ? __pfx_____sys_sendmsg+0x10/0x10 [ 433.139561][T10821] ___sys_sendmsg+0x21f/0x2a0 [ 433.139573][T10821] ? __pfx____sys_sendmsg+0x10/0x10 [ 433.139602][T10821] ? __fget_files+0x2a/0x420 [ 433.139615][T10821] ? __fget_files+0x3a0/0x420 [ 433.139640][T10821] __sys_sendmsg+0x164/0x220 [ 433.139661][T10821] ? __pfx___sys_sendmsg+0x10/0x10 [ 433.139694][T10821] ? lockdep_hardirqs_on+0x9c/0x150 [ 433.139711][T10821] __do_fast_syscall_32+0xb6/0x2b0 [ 433.139720][T10821] ? lockdep_hardirqs_on+0x9c/0x150 [ 433.139736][T10821] do_fast_syscall_32+0x34/0x80 [ 433.139745][T10821] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 433.139760][T10821] RIP: 0023:0xf7fb7539 [ 433.139775][T10821] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 433.139789][T10821] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 433.139807][T10821] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 433.139819][T10821] RDX: 0000000010000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 433.139829][T10821] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 433.139839][T10821] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 433.139844][T10821] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 433.139858][T10821] [ 433.422988][ C0] vkms_vblank_simulate: vblank timer overrun [ 433.608986][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 433.780865][T10827] PM: Enabling pm_trace changes system date and time during resume. [ 433.780865][T10827] PM: Correct system time has to be restored manually after resume. [ 434.248891][ T24] gp8psk: usb in 128 operation failed. [ 434.262196][ T24] gp8psk: usb in 137 operation failed. [ 434.279310][ T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 434.293889][ T24] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 434.432698][T10841] input: syz0 as /devices/virtual/input/input94 [ 434.756363][T10844] input: syz0 as /devices/virtual/input/input95 [ 435.024391][ T9] usb 2-1: USB disconnect, device number 37 [ 437.100183][T10886] veth1_to_bond: entered allmulticast mode [ 437.164963][ T980] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 437.196697][ T9] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 437.277498][T10888] Failed to get privilege flags for destination (handle=0x0:0x0) [ 437.326313][ T980] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 437.356533][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.385133][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 7 [ 437.404864][ T9] usb 1-1: config 1 interface 1 has no altsetting 0 [ 437.468109][ T980] usb 4-1: config 0 descriptor?? [ 437.484572][ T980] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 437.510314][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 437.519689][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.543525][ T9] usb 1-1: Product: ဉ [ 437.552335][ T9] usb 1-1: Manufacturer: ﵟ㙤這鱡ﳢ鱒졺珈ⴟ┊ខ겆ෞ퉺逊姳캇◐ꈶ⿠憳☭䒩ꖳ⑄䰗뷫鴶흢㠜핓씚㛺焾퇅蛚쌚砇慢蛂ɦ鑓䕀㽄؇♯嵼ﾑນ윴ꑕ鐊膽‘剖म昝딝㮷埶뫤颫姄쐞灬嚷휰譀咊⓼杝箴㻝ﭦ뱟ꚡ쇀鄎験긢챸ᓲ사恜売嫮蚁㾤۾햷굎颩♲眞뢛ꖙ䕉寷凿飘됴櫍㔰 [ 437.586283][ C0] vkms_vblank_simulate: vblank timer overrun [ 437.767973][T10894] input: syz0 as /devices/virtual/input/input96 [ 437.865512][ T9] usb 1-1: SerialNumber: 췈뱋䗤漪ᴔ⑌㎯◇ᢉ鄠＂℥З晶瀳폩櫬岛颓瀖뱷瓀즗变㴋蔂⁽綀㍒ᙂ䃤ⳋ丝ℏ潳겑ꦖ홄썴쌣唽 [ 438.075655][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 438.508245][T10898] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1411'. [ 438.586245][T10898] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1411'. [ 438.706946][ T9] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 438.962257][T10900] FAULT_INJECTION: forcing a failure. [ 438.962257][T10900] name failslab, interval 1, probability 0, space 0, times 0 [ 438.983922][T10900] CPU: 0 UID: 0 PID: 10900 Comm: syz.2.1412 Not tainted syzkaller #0 PREEMPT(full) [ 438.983948][T10900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 438.983961][T10900] Call Trace: [ 438.983969][T10900] [ 438.983977][T10900] dump_stack_lvl+0x189/0x250 [ 438.984001][T10900] ? __pfx____ratelimit+0x10/0x10 [ 438.984025][T10900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.984045][T10900] ? __pfx__printk+0x10/0x10 [ 438.984069][T10900] ? __lock_acquire+0xab9/0xd20 [ 438.984100][T10900] should_fail_ex+0x414/0x560 [ 438.984128][T10900] should_failslab+0xa8/0x100 [ 438.984152][T10900] kmem_cache_alloc_noprof+0x73/0x3c0 [ 438.984173][T10900] ? skb_clone+0x212/0x3a0 [ 438.984197][T10900] skb_clone+0x212/0x3a0 [ 438.984219][T10900] __netlink_deliver_tap+0x404/0x850 [ 438.984255][T10900] ? netlink_deliver_tap+0x2e/0x1b0 [ 438.984280][T10900] netlink_deliver_tap+0x19c/0x1b0 [ 438.984305][T10900] netlink_unicast+0x7fa/0x9e0 [ 438.984334][T10900] ? __pfx_netlink_unicast+0x10/0x10 [ 438.984358][T10900] ? netlink_sendmsg+0x642/0xb30 [ 438.984372][T10900] ? skb_put+0x11b/0x210 [ 438.984393][T10900] netlink_sendmsg+0x805/0xb30 [ 438.984420][T10900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.984439][T10900] ? __import_iovec+0x5d4/0x7f0 [ 438.984456][T10900] ? aa_sock_msg_perm+0xf1/0x1d0 [ 438.984475][T10900] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 438.984494][T10900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.984511][T10900] __sock_sendmsg+0x219/0x270 [ 438.984536][T10900] ____sys_sendmsg+0x505/0x830 [ 438.984561][T10900] ? __pfx_____sys_sendmsg+0x10/0x10 [ 438.984602][T10900] ___sys_sendmsg+0x21f/0x2a0 [ 438.984624][T10900] ? __pfx____sys_sendmsg+0x10/0x10 [ 438.984681][T10900] ? __fget_files+0x2a/0x420 [ 438.984695][T10900] ? __fget_files+0x3a0/0x420 [ 438.984722][T10900] __sys_sendmsg+0x164/0x220 [ 438.984742][T10900] ? __pfx___sys_sendmsg+0x10/0x10 [ 438.984772][T10900] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.984796][T10900] __do_fast_syscall_32+0xb6/0x2b0 [ 438.984812][T10900] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.984838][T10900] do_fast_syscall_32+0x34/0x80 [ 438.984855][T10900] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 438.984875][T10900] RIP: 0023:0xf7fb7539 [ 438.984889][T10900] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 438.984902][T10900] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 438.984920][T10900] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000b40 [ 438.984933][T10900] RDX: 000000000004c084 RSI: 0000000000000000 RDI: 0000000000000000 [ 438.984943][T10900] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 438.984953][T10900] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 438.984964][T10900] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 438.984991][T10900] [ 439.267792][ C0] vkms_vblank_simulate: vblank timer overrun [ 439.356170][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 439.520010][ T980] gp8psk: usb in 128 operation failed. [ 439.525990][ T980] gp8psk: usb in 137 operation failed. [ 439.531453][ T980] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 439.541825][ T980] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 439.859734][T10917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.875777][T10917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.979009][ T5954] usb 1-1: USB disconnect, device number 48 [ 440.000930][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.007980][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.526286][ T5954] usb 4-1: USB disconnect, device number 64 [ 440.760375][ T30] audit: type=1326 audit(1756990439.946:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 440.900206][ T30] audit: type=1326 audit(1756990439.976:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 441.019008][ T30] audit: type=1326 audit(1756990439.976:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 441.043736][ C0] vkms_vblank_simulate: vblank timer overrun [ 441.150485][ T30] audit: type=1326 audit(1756990439.946:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 441.172563][ C0] vkms_vblank_simulate: vblank timer overrun [ 441.319244][ T30] audit: type=1326 audit(1756990439.976:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=320 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 441.341315][ C0] vkms_vblank_simulate: vblank timer overrun [ 441.447647][ T30] audit: type=1326 audit(1756990439.976:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 441.488565][ T30] audit: type=1326 audit(1756990439.976:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 441.510528][ C0] vkms_vblank_simulate: vblank timer overrun [ 441.561979][ T30] audit: type=1326 audit(1756990439.976:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 441.592785][ T30] audit: type=1326 audit(1756990439.976:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 441.632101][ T30] audit: type=1326 audit(1756990439.976:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10932 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 442.449041][T10957] netlink: 'syz.0.1429': attribute type 10 has an invalid length. [ 443.835702][ T1148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 443.897927][T10977] netlink: 'syz.1.1433': attribute type 11 has an invalid length. [ 443.930693][T10983] FAULT_INJECTION: forcing a failure. [ 443.930693][T10983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.013663][T10983] CPU: 0 UID: 0 PID: 10983 Comm: syz.4.1435 Not tainted syzkaller #0 PREEMPT(full) [ 444.013688][T10983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 444.013699][T10983] Call Trace: [ 444.013706][T10983] [ 444.013714][T10983] dump_stack_lvl+0x189/0x250 [ 444.013738][T10983] ? __pfx____ratelimit+0x10/0x10 [ 444.013761][T10983] ? __pfx_dump_stack_lvl+0x10/0x10 [ 444.013781][T10983] ? __pfx__printk+0x10/0x10 [ 444.013813][T10983] should_fail_ex+0x414/0x560 [ 444.013840][T10983] _copy_to_user+0x31/0xb0 [ 444.013862][T10983] simple_read_from_buffer+0xe1/0x170 [ 444.013889][T10983] proc_fail_nth_read+0x1b3/0x220 [ 444.013911][T10983] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 444.013933][T10983] ? rw_verify_area+0x2a6/0x4d0 [ 444.013953][T10983] ? __lock_acquire+0xab9/0xd20 [ 444.013972][T10983] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 444.013993][T10983] vfs_read+0x1fd/0xa30 [ 444.014012][T10983] ? fdget_pos+0x247/0x320 [ 444.014031][T10983] ? __pfx___mutex_lock+0x10/0x10 [ 444.014049][T10983] ? __pfx_vfs_read+0x10/0x10 [ 444.014077][T10983] ? __fget_files+0x2a/0x420 [ 444.014096][T10983] ? __fget_files+0x3a0/0x420 [ 444.014110][T10983] ? __fget_files+0x2a/0x420 [ 444.014134][T10983] ksys_read+0x145/0x250 [ 444.014157][T10983] ? __pfx_ksys_read+0x10/0x10 [ 444.014181][T10983] ? lockdep_hardirqs_on+0x9c/0x150 [ 444.014209][T10983] __do_fast_syscall_32+0xb6/0x2b0 [ 444.014226][T10983] ? lockdep_hardirqs_on+0x9c/0x150 [ 444.014252][T10983] do_fast_syscall_32+0x34/0x80 [ 444.014269][T10983] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 444.014288][T10983] RIP: 0023:0xf7f96539 [ 444.014302][T10983] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 444.014316][T10983] RSP: 002b:00000000f54a6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 444.014334][T10983] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54a6620 [ 444.014346][T10983] RDX: 000000000000000f RSI: 00000000f7424ff4 RDI: 0000000000000000 [ 444.014356][T10983] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 444.014366][T10983] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 444.014377][T10983] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 444.014404][T10983] [ 444.241722][ C0] vkms_vblank_simulate: vblank timer overrun [ 444.401641][T10989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.438691][T10976] delete_channel: no stack [ 444.469433][T10989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.740214][T10989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.875339][T10989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.985211][ T24] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 445.146990][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.157460][ T24] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 445.167377][ T24] usb 1-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 1.31 [ 445.184525][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.224673][ T24] usb 1-1: config 0 descriptor?? [ 445.593418][ T24] usb 1-1: string descriptor 0 read error: -71 [ 445.618620][ T24] usb 1-1: USB disconnect, device number 49 [ 446.678130][T11012] netlink: 'syz.1.1445': attribute type 10 has an invalid length. [ 446.749021][T11013] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1444'. [ 447.223100][T11017] netlink: 'syz.3.1442': attribute type 2 has an invalid length. [ 447.246977][T11017] @: renamed from vlan0 (while UP) [ 447.615540][T11024] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1449'. [ 447.637652][T11024] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1449'. [ 447.875780][T11029] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1450'. [ 449.364779][T11031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.380526][T11052] netlink: 21 bytes leftover after parsing attributes in process `syz.4.1455'. [ 450.104919][ T24] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 450.266804][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 450.278062][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 450.298925][ T24] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 450.339874][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.371131][ T24] usb 2-1: config 0 descriptor?? [ 450.505810][T11069] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1460'. [ 450.635482][ T24] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 451.043010][ T980] usb 2-1: USB disconnect, device number 38 [ 451.443674][T11056] ptrace attach of "./syz-executor exec"[5877] was attempted by "./syz-executor exec"[11056] [ 452.466013][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 452.466025][ T30] audit: type=1400 audit(1756990451.656:355): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A043AFA3D98F4CEB15D7D9D76F5145C571CE5 pid=11092 comm="syz.1.1466" [ 452.585023][T11096] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1467'. [ 452.594008][T11096] netlink: 'syz.0.1467': attribute type 5 has an invalid length. [ 452.698432][T11096] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1467'. [ 453.040864][T11086] veth1_to_bond: entered allmulticast mode [ 453.188450][T11114] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1473'. [ 453.435728][ T1159] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 453.460622][T11120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1475'. [ 453.513267][T11122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.523122][T11122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.639211][T11120] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1475'. [ 453.741389][T11120] netlink: 'syz.4.1475': attribute type 8 has an invalid length. [ 454.572657][T11132] sctp: [Deprecated]: syz.4.1478 (pid 11132) Use of int in max_burst socket option deprecated. [ 454.572657][T11132] Use struct sctp_assoc_value instead [ 454.630292][ T43] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 454.799671][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 454.845336][ T43] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 454.894859][ T43] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 454.904592][ T43] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 454.967319][ T43] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 455.003300][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.029450][ T43] usb 4-1: Product: syz [ 455.033639][ T43] usb 4-1: Manufacturer: syz [ 455.045015][T11141] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1482'. [ 455.065366][ T43] usb 4-1: SerialNumber: syz [ 455.085119][T11141] netlink: 'syz.0.1482': attribute type 5 has an invalid length. [ 455.104958][T11141] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1482'. [ 455.144899][T11142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1480'. [ 455.163548][T11142] netlink: 'syz.2.1480': attribute type 10 has an invalid length. [ 455.276175][T11142] bond0: (slave dummy0): Releasing backup interface [ 455.276358][T11145] netlink: 'syz.2.1480': attribute type 10 has an invalid length. [ 455.345565][ T43] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 455.399702][ T43] usb 4-1: USB disconnect, device number 65 [ 455.424149][T11142] team0: Failed to send options change via netlink (err -105) [ 455.431950][T11142] team0: Port device dummy0 added [ 455.459089][ T5917] udevd[5917]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 455.519990][T11145] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 455.570109][T11145] team0: Failed to send options change via netlink (err -105) [ 455.618295][T11145] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 455.808719][T11145] team0: Port device dummy0 removed [ 455.865278][ T13] bond0: (slave dummy0): interface is now down [ 455.883172][T11145] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 455.892109][ T59] bond0: (slave dummy0): interface is now down [ 455.915591][ T59] bond0: (slave dummy0): interface is now down [ 455.935877][ T59] bond0: (slave dummy0): interface is now down [ 456.015306][ T12] bond0: (slave dummy0): interface is now down [ 456.049677][ T12] bond0: now running without any active interface! [ 456.586035][T11164] autofs4:pid:11164:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 456.635500][T11165] tipc: Enabled bearer , priority 0 [ 456.694277][T11165] syzkaller0: entered promiscuous mode [ 456.699879][T11165] syzkaller0: entered allmulticast mode [ 456.706118][ T30] audit: type=1800 audit(1756990455.826:356): pid=11166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1486" name="nullb0" dev="devtmpfs" ino=3310 res=0 errno=0 [ 457.022662][T11161] tipc: Resetting bearer [ 457.101502][T11158] tipc: Resetting bearer [ 457.385746][T11158] tipc: Disabling bearer [ 457.391720][ T5954] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 457.646478][ T5954] usb 4-1: Using ep0 maxpacket: 16 [ 457.659202][ T5954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.670952][ T5954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.683024][ T5954] usb 4-1: New USB device found, idVendor=0dac, idProduct=024b, bcdDevice= 0.04 [ 457.798602][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.867245][ T5954] usb 4-1: config 0 descriptor?? [ 458.592568][ T1159] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 458.614353][T11191] input: syz0 as /devices/virtual/input/input98 [ 459.171598][ T5954] hid-generic 0003:0DAC:024B.0012: item fetching failed at offset 2/69 [ 459.200976][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.225607][ T5954] hid-generic 0003:0DAC:024B.0012: probe with driver hid-generic failed with error -22 [ 459.556678][ T5954] usb 4-1: USB disconnect, device number 66 [ 460.774995][ T980] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 460.965197][ T980] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 460.973360][ T980] usb 1-1: config 0 has no interface number 0 [ 460.988921][ T980] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 461.008399][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.060025][ T980] usb 1-1: Product: syz [ 461.064232][ T980] usb 1-1: Manufacturer: syz [ 461.087741][ T980] usb 1-1: SerialNumber: syz [ 461.109416][ T980] usb 1-1: config 0 descriptor?? [ 461.116436][T11224] : renamed from batadv_slave_1 (while UP) [ 461.330465][ T980] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 461.340903][ T980] usb 1-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 461.351338][ T980] usb 1-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 461.385197][ T24] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 461.534982][ T9] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 461.553312][ T24] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 461.576563][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 461.623773][ T24] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 461.683252][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.695136][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 461.702351][ T9] usb 4-1: config 4 has an invalid interface number: 51 but max is 0 [ 461.710660][ T9] usb 4-1: config 4 has no interface number 0 [ 461.723992][ T9] usb 4-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 461.725868][ T24] usb 3-1: config 0 descriptor?? [ 461.754007][ T9] usb 4-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 461.863792][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 461.905152][ T9] usb 4-1: config 4 interface 51 has no altsetting 0 [ 461.920008][ T9] usb 4-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 461.955646][T11239] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 461.965775][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.980241][ T9] usb 4-1: Product: syz [ 461.984667][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 462.014451][ T9] usb 4-1: Manufacturer: syz [ 462.025632][ T9] usb 4-1: SerialNumber: syz [ 462.039259][T11228] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 462.046940][T11228] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 462.057666][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 462.177815][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 462.206223][ T24] usb 3-1: media controller created [ 462.271669][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 462.395731][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 462.556289][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 462.568167][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input99 [ 462.580938][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 462.735244][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 462.818883][ T24] usb 3-1: USB disconnect, device number 42 [ 462.906884][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 463.066478][ T9] cdc_eem 4-1:4.51: probe with driver cdc_eem failed with error -71 [ 463.098126][ T9] usb 4-1: USB disconnect, device number 67 [ 463.301476][T11250] netlink: 'syz.1.1506': attribute type 10 has an invalid length. [ 463.314691][T11250] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 463.326230][T11250] hsr0: mtu greater than device maximum [ 463.331873][T11250] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 463.759828][T11257] input: syz0 as /devices/virtual/input/input100 [ 464.373338][T11260] netlink: 'syz.2.1509': attribute type 10 has an invalid length. [ 464.449089][T11265] FAULT_INJECTION: forcing a failure. [ 464.449089][T11265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.472572][T11265] CPU: 0 UID: 0 PID: 11265 Comm: syz.4.1512 Not tainted syzkaller #0 PREEMPT(full) [ 464.472594][T11265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 464.472605][T11265] Call Trace: [ 464.472612][T11265] [ 464.472619][T11265] dump_stack_lvl+0x189/0x250 [ 464.472643][T11265] ? __pfx____ratelimit+0x10/0x10 [ 464.472665][T11265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.472683][T11265] ? __pfx__printk+0x10/0x10 [ 464.472703][T11265] ? __might_fault+0xb0/0x130 [ 464.472731][T11265] should_fail_ex+0x414/0x560 [ 464.472755][T11265] _copy_from_iter+0x1de/0x1790 [ 464.472782][T11265] ? __lock_acquire+0xab9/0xd20 [ 464.472802][T11265] ? __pfx__copy_from_iter+0x10/0x10 [ 464.472826][T11265] ? page_copy_sane+0x4e/0x280 [ 464.472844][T11265] copy_page_from_iter+0xdd/0x170 [ 464.472862][T11265] tun_get_user+0x1d7b/0x3e20 [ 464.472886][T11265] ? tun_get_user+0x6f6/0x3e20 [ 464.472908][T11265] ? aa_file_perm+0x44d/0x1550 [ 464.472925][T11265] ? __pfx_tun_get_user+0x10/0x10 [ 464.472941][T11265] ? _parse_integer_limit+0x1ae/0x1f0 [ 464.472969][T11265] ? __lock_acquire+0xab9/0xd20 [ 464.472992][T11265] ? ref_tracker_alloc+0x318/0x460 [ 464.473010][T11265] ? __lock_acquire+0xab9/0xd20 [ 464.473042][T11265] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 464.473067][T11265] ? tun_get+0x1c/0x2f0 [ 464.473090][T11265] ? tun_get+0x1c/0x2f0 [ 464.473105][T11265] ? tun_get+0x1c/0x2f0 [ 464.473125][T11265] tun_chr_write_iter+0x113/0x200 [ 464.473145][T11265] vfs_write+0x5c6/0xb30 [ 464.473169][T11265] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 464.473187][T11265] ? __pfx_vfs_write+0x10/0x10 [ 464.473215][T11265] ? __fget_files+0x2a/0x420 [ 464.473237][T11265] ksys_write+0x145/0x250 [ 464.473258][T11265] ? __pfx_ksys_write+0x10/0x10 [ 464.473282][T11265] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.473304][T11265] __do_fast_syscall_32+0xb6/0x2b0 [ 464.473321][T11265] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.473345][T11265] do_fast_syscall_32+0x34/0x80 [ 464.473361][T11265] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 464.473380][T11265] RIP: 0023:0xf7f96539 [ 464.473395][T11265] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 464.473409][T11265] RSP: 002b:00000000f54a6520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 464.473426][T11265] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000000 [ 464.473436][T11265] RDX: 0000000000000043 RSI: 00000000f7424ff4 RDI: 0000000000000000 [ 464.473446][T11265] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 464.473455][T11265] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 464.473464][T11265] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 464.473487][T11265] [ 464.955211][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 464.966457][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 465.304829][ T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 465.526969][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 465.583111][ T9] usb 3-1: config 0 has no interfaces? [ 465.643492][ T9] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 465.672090][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.698638][ T9] usb 3-1: Product: syz [ 465.702835][ T9] usb 3-1: Manufacturer: syz [ 465.744446][ T9] usb 3-1: SerialNumber: syz [ 465.752825][ T9] usb 3-1: config 0 descriptor?? [ 465.845188][ T5956] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 465.979959][T11275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.989561][T11275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.001983][ T24] usb 3-1: USB disconnect, device number 43 [ 466.023529][ T5956] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 466.033786][ T5956] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 466.042753][ T5956] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 466.054369][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.081060][ T5956] usb 2-1: config 0 descriptor?? [ 466.098808][ T5956] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 466.105971][ T5956] dvb-usb: bulk message failed: -22 (3/0) [ 466.115959][ T5956] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 466.134685][ T5956] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 466.142161][ T5956] usb 2-1: media controller created [ 466.156217][ T5956] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 466.181230][ T5956] dvb-usb: bulk message failed: -22 (6/0) [ 466.189156][ T5956] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 466.208478][ T5956] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input101 [ 466.225537][ T5956] dvb-usb: schedule remote query interval to 150 msecs. [ 466.232547][ T5956] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 466.385794][ T5956] dvb-usb: bulk message failed: -22 (1/0) [ 466.391590][ T5956] dvb-usb: error while querying for an remote control event. [ 466.412575][T11282] dvb-usb: bulk message failed: -22 (2/0) [ 466.562240][ T9] usb 2-1: USB disconnect, device number 39 [ 466.564953][ T5956] dvb-usb: bulk message failed: -22 (1/0) [ 466.595831][ T5956] dvb-usb: error while querying for an remote control event. [ 466.695448][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 466.729468][T11300] FAULT_INJECTION: forcing a failure. [ 466.729468][T11300] name failslab, interval 1, probability 0, space 0, times 0 [ 466.751644][T11300] CPU: 0 UID: 0 PID: 11300 Comm: syz.0.1525 Not tainted syzkaller #0 PREEMPT(full) [ 466.751672][T11300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 466.751683][T11300] Call Trace: [ 466.751691][T11300] [ 466.751699][T11300] dump_stack_lvl+0x189/0x250 [ 466.751725][T11300] ? __pfx____ratelimit+0x10/0x10 [ 466.751747][T11300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.751766][T11300] ? __pfx__printk+0x10/0x10 [ 466.751799][T11300] ? __lock_acquire+0xab9/0xd20 [ 466.751826][T11300] should_fail_ex+0x414/0x560 [ 466.751850][T11300] should_failslab+0xa8/0x100 [ 466.751874][T11300] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 466.751895][T11300] ? __alloc_skb+0x112/0x2d0 [ 466.751914][T11300] __alloc_skb+0x112/0x2d0 [ 466.751934][T11300] xfrm_send_acquire+0x154/0xee0 [ 466.751964][T11300] ? __pfx_xfrm_send_acquire+0x10/0x10 [ 466.751985][T11300] ? xfrm_init_tempstate+0x9d6/0x1290 [ 466.752004][T11300] ? km_query+0x2e/0x210 [ 466.752023][T11300] km_query+0x11c/0x210 [ 466.752038][T11300] ? km_query+0x2e/0x210 [ 466.752057][T11300] xfrm_state_find+0x3bca/0x5400 [ 466.752084][T11300] ? __pfx___find_rr_leaf+0x10/0x10 [ 466.752108][T11300] ? __pfx_fib6_node_lookup+0x10/0x10 [ 466.752135][T11300] ? xfrm_state_find+0x1da/0x5400 [ 466.752155][T11300] ? __pfx_xfrm_state_find+0x10/0x10 [ 466.752169][T11300] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 466.752198][T11300] ? __pfx___rt6_find_exception_rcu+0x10/0x10 [ 466.752231][T11300] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 466.752266][T11300] ? ip6_pol_route+0x162/0x1180 [ 466.752293][T11300] ? __pfx_ip6_pol_route+0x10/0x10 [ 466.752315][T11300] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 466.752335][T11300] ? __lock_acquire+0xab9/0xd20 [ 466.752378][T11300] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 466.752410][T11300] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 466.752437][T11300] ? xfrm_expand_policies+0x41f/0x6a0 [ 466.752463][T11300] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 466.752487][T11300] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 466.752512][T11300] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 466.752533][T11300] ? txopt_get+0x335/0x3f0 [ 466.752548][T11300] ? aa_label_sk_perm+0x4cd/0x630 [ 466.752570][T11300] ? __pfx_txopt_get+0x10/0x10 [ 466.752591][T11300] xfrm_lookup_route+0x3c/0x1c0 [ 466.752614][T11300] rawv6_sendmsg+0xdab/0x1820 [ 466.752653][T11300] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 466.752703][T11300] ? __pfx_aa_sk_perm+0x10/0x10 [ 466.752729][T11300] ? sock_rps_record_flow+0x19/0x410 [ 466.752752][T11300] ? inet_sendmsg+0x2f4/0x370 [ 466.752771][T11300] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 466.752798][T11300] __sock_sendmsg+0x19c/0x270 [ 466.752823][T11300] ____sys_sendmsg+0x52d/0x830 [ 466.752847][T11300] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.752883][T11300] ___sys_sendmsg+0x21f/0x2a0 [ 466.752904][T11300] ? __pfx____sys_sendmsg+0x10/0x10 [ 466.752960][T11300] ? __fget_files+0x2a/0x420 [ 466.752975][T11300] ? __fget_files+0x3a0/0x420 [ 466.753001][T11300] __sys_sendmmsg+0x28e/0x430 [ 466.753025][T11300] ? __pfx___sys_sendmmsg+0x10/0x10 [ 466.753054][T11300] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 466.753089][T11300] ? ksys_write+0x22a/0x250 [ 466.753122][T11300] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 466.753144][T11300] __do_fast_syscall_32+0xb6/0x2b0 [ 466.753162][T11300] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.753189][T11300] do_fast_syscall_32+0x34/0x80 [ 466.753206][T11300] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 466.753226][T11300] RIP: 0023:0xf710e539 [ 466.753241][T11300] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 466.753256][T11300] RSP: 002b:00000000f54fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 466.753275][T11300] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000480 [ 466.753287][T11300] RDX: 00000000000002e9 RSI: 000000000000ffe0 RDI: 0000000000000000 [ 466.753298][T11300] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 466.753307][T11300] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 466.753317][T11300] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 466.753346][T11300] [ 466.753771][T11300] ================================================================== [ 467.166024][T11300] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x44cd/0x5400 [ 467.173918][T11300] Read of size 1 at addr ffff88805796dcb0 by task syz.0.1525/11300 [ 467.181803][T11300] [ 467.184119][T11300] CPU: 0 UID: 0 PID: 11300 Comm: syz.0.1525 Not tainted syzkaller #0 PREEMPT(full) [ 467.184136][T11300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 467.184144][T11300] Call Trace: [ 467.184151][T11300] [ 467.184158][T11300] dump_stack_lvl+0x189/0x250 [ 467.184175][T11300] ? __kasan_check_byte+0x12/0x40 [ 467.184193][T11300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 467.184207][T11300] ? lock_release+0x4b/0x3e0 [ 467.184225][T11300] ? __virt_addr_valid+0x4a5/0x5c0 [ 467.184242][T11300] print_report+0xca/0x240 [ 467.184254][T11300] ? xfrm_state_find+0x44cd/0x5400 [ 467.184266][T11300] kasan_report+0x118/0x150 [ 467.184283][T11300] ? xfrm_state_find+0x44cd/0x5400 [ 467.184297][T11300] xfrm_state_find+0x44cd/0x5400 [ 467.184313][T11300] ? __pfx___find_rr_leaf+0x10/0x10 [ 467.184330][T11300] ? __pfx_fib6_node_lookup+0x10/0x10 [ 467.184347][T11300] ? xfrm_state_find+0x1da/0x5400 [ 467.184361][T11300] ? __pfx_xfrm_state_find+0x10/0x10 [ 467.184372][T11300] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 467.184389][T11300] ? do_fast_syscall_32+0x34/0x80 [ 467.184403][T11300] ? __pfx___rt6_find_exception_rcu+0x10/0x10 [ 467.184424][T11300] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 467.184444][T11300] ? ip6_pol_route+0x162/0x1180 [ 467.184460][T11300] ? __pfx_ip6_pol_route+0x10/0x10 [ 467.184473][T11300] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 467.184490][T11300] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 467.184505][T11300] ? __lock_acquire+0xab9/0xd20 [ 467.184528][T11300] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 467.184551][T11300] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 467.184567][T11300] ? xfrm_expand_policies+0x41f/0x6a0 [ 467.184583][T11300] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 467.184599][T11300] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 467.184617][T11300] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 467.184632][T11300] ? txopt_get+0x335/0x3f0 [ 467.184643][T11300] ? aa_label_sk_perm+0x4cd/0x630 [ 467.184659][T11300] ? __pfx_txopt_get+0x10/0x10 [ 467.184672][T11300] xfrm_lookup_route+0x3c/0x1c0 [ 467.184687][T11300] rawv6_sendmsg+0xdab/0x1820 [ 467.184709][T11300] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 467.184735][T11300] ? __pfx_aa_sk_perm+0x10/0x10 [ 467.184754][T11300] ? sock_rps_record_flow+0x19/0x410 [ 467.184772][T11300] ? inet_sendmsg+0x2f4/0x370 [ 467.184788][T11300] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 467.184804][T11300] __sock_sendmsg+0x19c/0x270 [ 467.184821][T11300] ____sys_sendmsg+0x52d/0x830 [ 467.184837][T11300] ? __pfx_____sys_sendmsg+0x10/0x10 [ 467.184851][T11300] ? rcu_is_watching+0x15/0xb0 [ 467.184863][T11300] ? ___sys_sendmsg+0x22f/0x2a0 [ 467.184878][T11300] ___sys_sendmsg+0x21f/0x2a0 [ 467.184891][T11300] ? __pfx____sys_sendmsg+0x10/0x10 [ 467.184915][T11300] ? __fget_files+0x2a/0x420 [ 467.184925][T11300] ? __fget_files+0x3a0/0x420 [ 467.184939][T11300] __sys_sendmmsg+0x28e/0x430 [ 467.184953][T11300] ? __pfx___sys_sendmmsg+0x10/0x10 [ 467.184969][T11300] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 467.184987][T11300] ? ksys_write+0x22a/0x250 [ 467.185005][T11300] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 467.185021][T11300] __do_fast_syscall_32+0xb6/0x2b0 [ 467.185033][T11300] ? lockdep_hardirqs_on+0x9c/0x150 [ 467.185051][T11300] do_fast_syscall_32+0x34/0x80 [ 467.185063][T11300] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 467.185078][T11300] RIP: 0023:0xf710e539 [ 467.185091][T11300] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 467.185102][T11300] RSP: 002b:00000000f54fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 467.185116][T11300] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000480 [ 467.185126][T11300] RDX: 00000000000002e9 RSI: 000000000000ffe0 RDI: 0000000000000000 [ 467.185134][T11300] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 467.185142][T11300] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 467.185150][T11300] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 467.185162][T11300] [ 467.185167][T11300] [ 467.579732][T11300] Allocated by task 10957: [ 467.584132][T11300] kasan_save_track+0x3e/0x80 [ 467.588803][T11300] __kasan_slab_alloc+0x6c/0x80 [ 467.593642][T11300] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 467.599095][T11300] xfrm_state_alloc+0x24/0x2f0 [ 467.603848][T11300] xfrm_add_sa+0x17d1/0x4070 [ 467.608463][T11300] xfrm_user_rcv_msg+0x7a3/0xab0 [ 467.613392][T11300] netlink_rcv_skb+0x208/0x470 [ 467.618149][T11300] xfrm_netlink_rcv+0x79/0x90 [ 467.622811][T11300] netlink_unicast+0x82c/0x9e0 [ 467.627563][T11300] netlink_sendmsg+0x805/0xb30 [ 467.632311][T11300] __sock_sendmsg+0x219/0x270 [ 467.636973][T11300] ____sys_sendmsg+0x505/0x830 [ 467.641766][T11300] ___sys_sendmsg+0x21f/0x2a0 [ 467.646432][T11300] __sys_sendmsg+0x164/0x220 [ 467.651011][T11300] __do_fast_syscall_32+0xb6/0x2b0 [ 467.656109][T11300] do_fast_syscall_32+0x34/0x80 [ 467.660943][T11300] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 467.667257][T11300] [ 467.669573][T11300] Freed by task 5998: [ 467.673536][T11300] kasan_save_track+0x3e/0x80 [ 467.678205][T11300] kasan_save_free_info+0x46/0x50 [ 467.683214][T11300] __kasan_slab_free+0x5b/0x80 [ 467.687970][T11300] kmem_cache_free+0x18f/0x400 [ 467.692721][T11300] xfrm_state_gc_task+0x52d/0x6b0 [ 467.697771][T11300] process_scheduled_works+0xae1/0x17b0 [ 467.703304][T11300] worker_thread+0x8a0/0xda0 [ 467.707878][T11300] kthread+0x70e/0x8a0 [ 467.711933][T11300] ret_from_fork+0x3fc/0x770 [ 467.716513][T11300] ret_from_fork_asm+0x1a/0x30 [ 467.721272][T11300] [ 467.723581][T11300] The buggy address belongs to the object at ffff88805796d980 [ 467.723581][T11300] which belongs to the cache xfrm_state of size 928 [ 467.737532][T11300] The buggy address is located 816 bytes inside of [ 467.737532][T11300] freed 928-byte region [ffff88805796d980, ffff88805796dd20) [ 467.751313][T11300] [ 467.753626][T11300] The buggy address belongs to the physical page: [ 467.760021][T11300] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805796e640 pfn:0x5796c [ 467.770079][T11300] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 467.778562][T11300] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 467.786091][T11300] page_type: f5(slab) [ 467.790058][T11300] raw: 00fff00000000040 ffff8880206eec80 dead000000000122 0000000000000000 [ 467.798627][T11300] raw: ffff88805796e640 00000000800f0003 00000000f5000000 0000000000000000 [ 467.807198][T11300] head: 00fff00000000040 ffff8880206eec80 dead000000000122 0000000000000000 [ 467.815855][T11300] head: ffff88805796e640 00000000800f0003 00000000f5000000 0000000000000000 [ 467.824510][T11300] head: 00fff00000000002 ffffea00015e5b01 00000000ffffffff 00000000ffffffff [ 467.833164][T11300] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 467.841818][T11300] page dumped because: kasan: bad access detected [ 467.848224][T11300] page_owner tracks the page as allocated [ 467.853923][T11300] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6824, tgid 6819 (syz.4.232), ts 147040995698, free_ts 146987955545 [ 467.873105][T11300] post_alloc_hook+0x240/0x2a0 [ 467.877862][T11300] get_page_from_freelist+0x21e4/0x22c0 [ 467.883394][T11300] __alloc_frozen_pages_noprof+0x181/0x370 [ 467.889184][T11300] alloc_pages_mpol+0x232/0x4a0 [ 467.894023][T11300] allocate_slab+0x8a/0x370 [ 467.898508][T11300] ___slab_alloc+0xbeb/0x1410 [ 467.903176][T11300] kmem_cache_alloc_noprof+0x283/0x3c0 [ 467.908619][T11300] xfrm_state_alloc+0x24/0x2f0 [ 467.913371][T11300] xfrm_state_find+0x37d4/0x5400 [ 467.918292][T11300] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 467.924431][T11300] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 467.930396][T11300] xfrm_lookup_route+0x3c/0x1c0 [ 467.935236][T11300] rawv6_sendmsg+0xdab/0x1820 [ 467.939928][T11300] __sock_sendmsg+0x19c/0x270 [ 467.944592][T11300] ____sys_sendmsg+0x52d/0x830 [ 467.949343][T11300] ___sys_sendmsg+0x21f/0x2a0 [ 467.954090][T11300] page last free pid 6814 tgid 6812 stack trace: [ 467.960917][T11300] __free_frozen_pages+0xbc4/0xd30 [ 467.966016][T11300] stack_depot_save_flags+0x436/0x860 [ 467.971376][T11300] ref_tracker_free+0xfe/0x7d0 [ 467.976124][T11300] neigh_destroy+0x34f/0x5c0 [ 467.980702][T11300] __neigh_ifdown+0x1e8/0x8b0 [ 467.985366][T11300] neigh_ifdown+0x1f/0x30 [ 467.989680][T11300] fib_netdev_event+0x318/0x490 [ 467.994514][T11300] notifier_call_chain+0x1b3/0x3e0 [ 467.999606][T11300] netif_close_many+0x29c/0x410 [ 468.004447][T11300] unregister_netdevice_many_notify+0x7b9/0x1ff0 [ 468.010758][T11300] rtnl_dellink+0x488/0x710 [ 468.015246][T11300] rtnetlink_rcv_msg+0x7cc/0xb70 [ 468.020173][T11300] netlink_rcv_skb+0x208/0x470 [ 468.024934][T11300] netlink_unicast+0x82c/0x9e0 [ 468.029682][T11300] netlink_sendmsg+0x805/0xb30 [ 468.034427][T11300] __sock_sendmsg+0x219/0x270 [ 468.039096][T11300] [ 468.041404][T11300] Memory state around the buggy address: [ 468.047011][T11300] ffff88805796db80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 468.055056][T11300] ffff88805796dc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 468.063102][T11300] >ffff88805796dc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 468.071143][T11300] ^ [ 468.076756][T11300] ffff88805796dd00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 468.084797][T11300] ffff88805796dd80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 468.092834][T11300] ================================================================== [ 468.101114][T11300] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 468.108314][T11300] CPU: 0 UID: 0 PID: 11300 Comm: syz.0.1525 Not tainted syzkaller #0 PREEMPT(full) [ 468.117680][T11300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 468.127736][T11300] Call Trace: [ 468.131006][T11300] [ 468.133923][T11300] dump_stack_lvl+0x99/0x250 [ 468.138507][T11300] ? __asan_memcpy+0x40/0x70 [ 468.143088][T11300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 468.148275][T11300] ? __pfx__printk+0x10/0x10 [ 468.152860][T11300] vpanic+0x281/0x750 [ 468.156827][T11300] ? __pfx_vpanic+0x10/0x10 [ 468.161321][T11300] ? irqentry_exit+0x74/0x90 [ 468.165903][T11300] panic+0xb9/0xc0 [ 468.169611][T11300] ? __pfx_panic+0x10/0x10 [ 468.174013][T11300] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 468.179898][T11300] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 468.185939][T11300] ? xfrm_state_find+0x44cd/0x5400 [ 468.191062][T11300] check_panic_on_warn+0x89/0xb0 [ 468.196014][T11300] ? xfrm_state_find+0x44cd/0x5400 [ 468.201121][T11300] end_report+0x78/0x160 [ 468.205366][T11300] kasan_report+0x129/0x150 [ 468.209888][T11300] ? xfrm_state_find+0x44cd/0x5400 [ 468.215026][T11300] xfrm_state_find+0x44cd/0x5400 [ 468.219968][T11300] ? __pfx___find_rr_leaf+0x10/0x10 [ 468.225157][T11300] ? __pfx_fib6_node_lookup+0x10/0x10 [ 468.230525][T11300] ? xfrm_state_find+0x1da/0x5400 [ 468.235552][T11300] ? __pfx_xfrm_state_find+0x10/0x10 [ 468.240848][T11300] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 468.246585][T11300] ? do_fast_syscall_32+0x34/0x80 [ 468.251614][T11300] ? __pfx___rt6_find_exception_rcu+0x10/0x10 [ 468.257685][T11300] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 468.263855][T11300] ? ip6_pol_route+0x162/0x1180 [ 468.268722][T11300] ? __pfx_ip6_pol_route+0x10/0x10 [ 468.273916][T11300] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 468.280103][T11300] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 468.286696][T11300] ? __lock_acquire+0xab9/0xd20 [ 468.291551][T11300] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 468.296928][T11300] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 468.302305][T11300] ? xfrm_expand_policies+0x41f/0x6a0 [ 468.307680][T11300] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 468.313075][T11300] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 468.318705][T11300] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 468.324519][T11300] ? txopt_get+0x335/0x3f0 [ 468.328929][T11300] ? aa_label_sk_perm+0x4cd/0x630 [ 468.333948][T11300] ? __pfx_txopt_get+0x10/0x10 [ 468.338700][T11300] xfrm_lookup_route+0x3c/0x1c0 [ 468.343557][T11300] rawv6_sendmsg+0xdab/0x1820 [ 468.348245][T11300] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 468.353791][T11300] ? __pfx_aa_sk_perm+0x10/0x10 [ 468.358634][T11300] ? sock_rps_record_flow+0x19/0x410 [ 468.363949][T11300] ? inet_sendmsg+0x2f4/0x370 [ 468.368631][T11300] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 468.373908][T11300] __sock_sendmsg+0x19c/0x270 [ 468.378586][T11300] ____sys_sendmsg+0x52d/0x830 [ 468.383350][T11300] ? __pfx_____sys_sendmsg+0x10/0x10 [ 468.388635][T11300] ? rcu_is_watching+0x15/0xb0 [ 468.393396][T11300] ? ___sys_sendmsg+0x22f/0x2a0 [ 468.398238][T11300] ___sys_sendmsg+0x21f/0x2a0 [ 468.402902][T11300] ? __pfx____sys_sendmsg+0x10/0x10 [ 468.408094][T11300] ? __fget_files+0x2a/0x420 [ 468.412697][T11300] ? __fget_files+0x3a0/0x420 [ 468.417373][T11300] __sys_sendmmsg+0x28e/0x430 [ 468.422042][T11300] ? __pfx___sys_sendmmsg+0x10/0x10 [ 468.427241][T11300] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 468.433217][T11300] ? ksys_write+0x22a/0x250 [ 468.437716][T11300] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 468.443258][T11300] __do_fast_syscall_32+0xb6/0x2b0 [ 468.448459][T11300] ? lockdep_hardirqs_on+0x9c/0x150 [ 468.453682][T11300] do_fast_syscall_32+0x34/0x80 [ 468.458524][T11300] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 468.464844][T11300] RIP: 0023:0xf710e539 [ 468.468897][T11300] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 468.488495][T11300] RSP: 002b:00000000f54fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 468.496923][T11300] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000480 [ 468.504890][T11300] RDX: 00000000000002e9 RSI: 000000000000ffe0 RDI: 0000000000000000 [ 468.512857][T11300] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 468.520816][T11300] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 468.528773][T11300] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 468.536732][T11300] [ 468.539983][T11300] Kernel Offset: disabled [ 468.544285][T11300] Rebooting in 86400 seconds..