last executing test programs: 13m19.99626608s ago: executing program 2 (id=2314): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc82b00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 13m19.725727763s ago: executing program 2 (id=2316): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) syz_open_dev$tty1(0xc, 0x4, 0x1) memfd_secret(0x80000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x1e, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfd5d}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x9, @dev}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "72b2af", 0x4, 0x2f, 0x0, @dev, @mcast2, {[], {0x0, 0x883e, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r3], 0x1000f) 13m19.026295124s ago: executing program 2 (id=2319): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) syz_io_uring_setup(0x1714, 0x0, 0x0, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000001000)=ANY=[], 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x2, 0x18, 0x3, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x6c, 0x0, 0x0, @in6={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x11}, 0x431b}}, @sadb_x_policy={0x8, 0x12, 0xfffe, 0x0, 0x0, 0x1, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@private1}}, @sadb_address={0x5, 0x6, 0x0, 0x80, 0x0, @in6={0xa, 0x4e21, 0x5, @mcast2, 0x3}}]}, 0xa0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x80000001}, &(0x7f0000000140)=0x8) 13m15.254278433s ago: executing program 2 (id=2329): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="b1eb5cae4595a55da85ba4b43b98c28c507d82d2c83ebdd0c81f4a38bebb6a12a0f31e9e267db3a55641c1d301fef2cab0ee47f2614535cb9d10d578cb3fcdeb5ac679a6cbd58c417785c182040b845435f8382c54931feb45860e8eaed16846071bb857c80c21c6b73fbebddfedbfdf53", 0x71}], 0x1}, 0xff0f000020004080) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000400)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10, 0x0, 0x2, 0x0, 0x93}, 0xe) syz_io_uring_setup(0x43d4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x184, 0x0, r2}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1, 0x1}) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) io_uring_enter(r2, 0x48e9, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) close_range(r1, r0, 0x2) shutdown(r1, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000480)={0x800400, 0x1, 0x8000009, 0x7, 0x1, 0x15a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x4, 0x10001, 0x6}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2012, &(0x7f00000003c0)=ANY=[]) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x20000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, &(0x7f0000000500)) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) 13m14.382054595s ago: executing program 2 (id=2333): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x400000000000084, 0x20000800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r5, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)}}], 0x1, 0x24000004) shutdown(r4, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200), 0xfffffd9d) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 13m13.666231448s ago: executing program 2 (id=2337): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'geneve1\x00'}]}, 0x50}, 0x1, 0x0, 0x3000000, 0x58840}, 0x0) 13m12.900825525s ago: executing program 32 (id=2337): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'geneve1\x00'}]}, 0x50}, 0x1, 0x0, 0x3000000, 0x58840}, 0x0) 2m20.748342002s ago: executing program 1 (id=5422): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7fdce0140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m20.42230666s ago: executing program 1 (id=5424): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec00", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 2m20.38166153s ago: executing program 1 (id=5425): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) ioctl$int_in(r0, 0xa8d7, &(0x7f0000000080)=0x3) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') io_uring_setup(0x410f, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m18.573314443s ago: executing program 1 (id=5433): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYRES64=r2], 0x3c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYRES64=r2], 0x3c}}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) (async) 2m17.854252948s ago: executing program 1 (id=5434): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) 2m17.422411596s ago: executing program 1 (id=5436): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0002000080e7000008000a00", @ANYRES32=r3, @ANYBLOB="140012800b00010067656e6576650000040002"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffff", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0) 2m16.731643217s ago: executing program 33 (id=5436): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0002000080e7000008000a00", @ANYRES32=r3, @ANYBLOB="140012800b00010067656e6576650000040002"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffff", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0) 11.662428764s ago: executing program 5 (id=5905): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x20) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0}) socket(0x1, 0x1, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000140), 0x1) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0xa}, 0x1c) syz_emit_ethernet(0x19, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaa586818f5aaaaaa3908a833008100260008410000007502b9c7b3e31fe4abdc70c5f1c2594870960ced767ae525550f395d1e00"/81], 0x0) 10.693770719s ago: executing program 4 (id=5908): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x2042, 0x20}}}, 0x10, 0x0}, 0x4000880) 10.285619441s ago: executing program 4 (id=5911): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x0, 0x3, 0x6}]}, {0xd}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}}, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 10.004483442s ago: executing program 4 (id=5912): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffe7b, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x4bedc1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000200)) r5 = socket(0x10, 0x3, 0x2) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f0000bd9000/0x3000)=nil, 0x3000, 0x2000000000001}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, r7}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) write(r5, &(0x7f0000000980)="a9", 0x1) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delqdisc={0x24, 0x25, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x8}, {0x3, 0xd}, {0x8, 0x2}}}, 0x24}}, 0x40004) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 8.091312586s ago: executing program 5 (id=5918): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/92, 0x5c}], 0x1}}], 0x1, 0xa0, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000001240)=[{0x0, 0x0, &(0x7f0000000780)=[{0x0}], 0x1}], 0x1, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 7.021189637s ago: executing program 5 (id=5920): timer_create(0x3, 0x0, &(0x7f0000bbdffc)=0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}}, &(0x7f00000000c0)) (fail_nth: 4) 6.072081947s ago: executing program 5 (id=5921): r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000003cc0)=@overlay={0x7, 0x8, 0x4, 0x0, 0x3, {0x0, 0x2710}, {0x3, 0x2, 0x80, 0x2, 0x18, 0xff, "41c4f9e0"}, 0x3, 0x3, {}, 0x7}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc000000020201020000000000000000010000030800094000000004aeff03"], 0xcc}, 0x1, 0x0, 0x0, 0x81}, 0x800) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6906bb2b0eb2fe32d2f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a4", 0x7b}, {&(0x7f0000000180)="0c1928a7397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfdbf169e77257f308b400000000227094d569a4456954e58ea1850000000000000000355c5f42d9f2aa5f1ba0a5c6553e", 0x48}, {&(0x7f0000000b80)="b97edc68d716252c8449bee174f6e06d864889b733fe11a2cd1b83edf4ee89f557882a6e115f6f313802bf3c797417d7b969c918598823448ed396000e44f8cc6a7a99db9bc97830b2df7971360f878a6cb35677e337e3ea1f6828196b30e485f2213ad567c62cc1bb174800513c5f9c8df2d028d2545768e3883524e866353a61ccfc0de4d4afadc9c31c23565915074b6680d902c662f768443bbe764577569ba8cd8ff4b63dc9e0aa67139b4b8120da451c19db9b86e9f7647857d646893d7774ec70d5d6c3783b04ad92cf39e91a45833c96aa1006aa133f9e5e", 0xdc}], 0x3}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a", 0xe0}, {&(0x7f0000000d80)="bd2f6aa36cea0e4bccda9ad762e998d923018ec9f30d63c7059c3c786069915581888508ff589f82857ff546b23b88d6bd61f1efc982005bf6c9abc4fe2caf32ef3ff105b69346a4d09afd7b0b8bd5f8c25f0eab84d8ad1b6576552ee2acbdd9f261b7349aeede1c42e31b1082eec37b959d16afb96240a5d057cab448c3c069f6a67c6ffee04bb1106c7e99752f50c7efdfa8afc8bd11acfc7a82e59dc5ffc88775bf6c9794b3ca2f475d25203ec0e0dd996b25d908e16539ac6e6086da296964d83ba527dcb6e7de403ef2a089ba3a5e094333", 0xd4}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000580)="1713d50800000024ec24681aa099852c4bfae5a0bbdc62896430c2821b43171cca8728132db611681bb875ce88d2f192d5d5e70a6447b32c8bbd6ca61e1888ccee8a9a05c07cdab36ab953eb5d4845932c98", 0x52, 0x10008095, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000001780)={0x8, {"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", 0x1000}}, 0x1006) 5.835336225s ago: executing program 4 (id=5922): r0 = syz_open_dev$video4linux(&(0x7f0000000240), 0x800000005, 0x0) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f00000000c0)={0x0, 0xb, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000440)=0x200000000) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000003c0)=0x200000000) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009f09a00871041103d581010203010902120001000000000904000000eaf51f002a07513b175b9577ccf52fb2dcb61417c75dd280222b4a6474e181048daeb8c18a"], 0x0) 5.605857901s ago: executing program 5 (id=5924): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}}}}]}}]}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x0, 0x2000000}, 0x20) r3 = syz_io_uring_setup(0x1e1, &(0x7f0000000440)={0x0, 0x0, 0x1}, &(0x7f0000001340)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000140)={[0x20000000007, 0x80, 0x2, 0x800002, 0xfffffffffffffffd, 0x7, 0x0, 0x0, 0x0, 0x40000, 0x7, 0x7f, 0x9, 0x1000000000400001, 0xfffffffffffffffd, 0x1002], 0x1, 0x3e0602}) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f0000000080)=@arm64={0x7, 0x6, 0xe}) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="c0010000100033060000000000000000ffffffff00"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/384], 0x1c0}}, 0x0) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000005580)='/sys/kernel/vmcoreinfo', 0x0, 0x0) sendfile(r7, r12, 0x0, 0x1335f0a6) write$binfmt_script(r12, &(0x7f0000000300)={'#! ', './file0', [{0x20, '\xe2.{'}], 0xa, "3390a7cc65a4ea59673aed88b64a927f421cd365b10f3f48c143c5ac6726691f4c6bd2809bcb5cd326bfc32085ffd01372a77744b674ba71a2d9d3b6b1bd84fdfaeeb2280ffb23e482fcec463b5f"}, 0x5d) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x30, 0x0, r6, 0x0, 0x0, r6}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0xfffffffffffffd74) 4.506318092s ago: executing program 3 (id=5927): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000050024001200140001006272696467655f736c617665800000000c0005"], 0x3}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0x2000000) 4.465406165s ago: executing program 0 (id=5928): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r2, &(0x7f0000000e80)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x6}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[{0xc, 0x1, 0x7}], 0xc}}], 0x2, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = syz_io_uring_setup(0x34b3, &(0x7f0000000180)={0x0, 0x0, 0x30c0, 0x1}, &(0x7f0000000100), &(0x7f0000000140)) r4 = epoll_create(0xaf2) epoll_pwait2(r4, 0x0, 0x0, 0x0, 0x0, 0xaf184c52544a6951) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0xe000200f}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6906bb2b0eb2fe32d2f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a4", 0x7b}, {&(0x7f0000000180)="0c1928a7397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfdbf169e77257f308b400000000227094d569a4456954e58ea1850000000000000000355c5f42d9f2aa5f1ba0a5c6553e", 0x48}, {&(0x7f0000000b80)="b97edc68d716252c8449bee174f6e06d864889b733fe11a2cd1b83edf4ee89f557882a6e115f6f313802bf3c797417d7b969c918598823448ed396000e44f8cc6a7a99db9bc97830b2df7971360f878a6cb35677e337e3ea1f6828196b30e485f2213ad567c62cc1bb174800513c5f9c8df2d028d2545768e3883524e866353a61ccfc0de4d4afadc9c31c23565915074b6680d902c662f768443bbe764577569ba8cd8ff4b63dc9e0aa67139b4b8120da451c19db9b86e9f7647857d646893d7774ec70d5d6c3783b04ad92cf39e91a45833c96aa1006aa133f9e5e4c", 0xdd}], 0x3}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a", 0xe0}, {&(0x7f0000000740)="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", 0x1fa}, {&(0x7f0000000d80)="bd2f6aa36cea0e4bccda9ad762e998d923018ec9f30d63c7059c3c786069915581888508ff589f82857ff546b23b88d6bd61f1efc982005bf6c9abc4fe2caf32ef3ff105b69346a4d09afd7b0b8bd5f8c25f0eab84d8ad1b6576552ee2acbdd9f261b7349aeede1c42e31b1082eec37b959d16afb96240a5d057cab448c3c069f6a67c6ffee04bb1106c7e99752f50c7efdfa8afc8bd11acfc7a82e59dc5ffc88775bf6c9794b3ca2f47", 0xaa}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000600)=0x7fffffff, 0x4) sendto$inet(r0, &(0x7f0000000580)="1713d50800000024ec24681aa099852c4bfae5a0bbdc62896430c2821b43171cca8728132db611681bb875ce88d2f192d5d5e70a6447b32c8bbd6ca61e1888ccee8a9a05c07cdab36ab953eb5d4845932c98", 0x52, 0x10008095, 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000001780)={0x8, {"d99abce8bf878fbdc1e2880574c996d188c2098e5cd05e141c84a9fa7715eaa6f4eb2274c962d9ab4a63f1c49c2493e66dc32e20513f2c1d6d8d575a48c1610c82623e557e8f2a788d1ede446cfdbcc06278f39988a71f47b2dde0274c59f9064d17574698774426e4f21ccd86d54c8f74b5937b16909dbfd9511beca3a86e76c002e5565c7d3f07e09cdb11a223543e8b95420ca562dfa1bdb92220db81fa8110fe02f7abd4bb7d33c69209b665544bd28d73b04a7da2318a89deab7ac6dd0f3d3789e6a39db065b2b8bcbcb6ab2efa2a0da04a43382bd3c748694b27efa32ea1b7c9e90a0a93bf215345df252ecb7a6bd497f75e700fd95810eacaea6ee9948cf1495b431933c8d3ff43e1dd94993b42a2b6628864b50dbec583c5a383ab3cc88130e6fe5985585a9fd04b2257b91a89f259bdd4d8fdb27ea43333eca9af87f98f47cc97ae87bc1fb75a764ac48edbc7149a12262f5ba1dc5f4ce2679d9c379f853e68465e6d6390cc3d22e37595d97cccd7ddce3af698a076c762e668179d08c2cefb42b39c5017d6bd4801c8e5f55704eaf870d1a45bdaea16a97ce1060535b5d2579e2db23b76531094daac5be119be79e72462d28b035787b84de9e8777e064e45bdc762f3a4d7fc1df9aa1252a210fbd01448558101598a5f387caea3a6e99fe62275d92831e2cd1d1a4114b76ff47e76b5c1127e24de76dedcf338439048e9bba05765fa85d7cd58e321438bd3e663c11c0605a83b57e15e41df8b8e52759194edaf1f7df5f1873efe01970a8265e487672812ec4856e19f4a84e19a472d78c7cebc7c4cf2a571c01d3680bfcfe1782c686df27fb81041a545ac82687683fc599ab5ec1d846465c1abfe6e24f9a9149b39a4738ae839c7b437cd1c8ac59f41a03fa7e640fc913b64877a4f856137e31f3a6fd109de6e30060a63d56858955a68889a49317ab82e82a738a2697e294f5afebd746519567a5cedd4b3a8f87105115e6989b67d1f250e8d9a795d2d118265d65b863b45c0c39fc56721d3558767584e544f351edd6b2c828cba3939e9f64449011696e25302a89e15c224b671eb294a713f4644b6e82c44303e0bd104f833384388ef836382481ec13080c35dcc075fcd6cb760f713980a70d9b69bf2c0d5cd1883e7c55f3dae2da23038c14b4fef91fbe7333f8d3507cd15fe4c6edf24d637dd96d45ddc705c2f07ca0cb1193dbb469c35c57efcf11f3adfe8c50b2de685be50c3abe3072a0944573a37a5298f12f4bffccd2ab884e90cf0e8a57d1f5c16793d5a65e42fc5270e36024815a8047bcdc12bf0c138e47aca993f9c7cf3a88198e43c2691c69b9620436f41eebc9295b96c21043157785ed183ae2f75cf4ed44c5502292d45820b76a5388220fb0cc51972ac9d120308c568ab5d79d73f80d829f2af2a203486e70e8992efee0b409572fb3d8ceaf2e7dc55faf6dbe32f59108c1cfd429dcc6f35162da8bc11204ab5fb9b362dc77f817bf33014d391bf2ee04fb44e6d11ea574c14b81380a03ad9e24aa741b4ca937c58ef4259a02c40c205b0a4790c11b66c11fa05598f94589ac52d9dd81cac2a34547d73939ef315da5ac14c44701d5f5b33fec66d3a3b9cc1d334decdb99d6a46280bdc61bd9d8ab1f73b07ac45240b57cf6ded8b2fd2f6e72bd2f5894c0b56f0e35d8ef5d1298dd56ce8bf41e30002de29274d01b620794d42368401c08af68847948f6869ea0258cc3a2cf7093ef90bb02ced0e73ceb6708e7b3395febb68aa0986c52b99ba031a4634ea7c8a0c420913293d13b60e32a8087273242ae34eb72d20b0f210193d653f52e66057e3644fd5b108a2ee4ce941b87a15d37b62c2dafcd08f8ad5cd9485201181d67bed8a1f47e31403695af9177c349fe96c4b7d17dad9cef14c69977f22e4613e2307cc3c1b6db1671012186a0d77f0eabec3f9e2b14238102a938c8bd208b68d5b802f735316aef456fbbf1c39272e03a56831f765a3d77d082dfb718febb8c69319da1874cb3b142309ec7943f3233bebd3591224e46c39fa0ef7cc1e0969cae6297bb320eb289ba7eb66481c081d85bfe0f221190810130ce306ff0b92fa30e4c8b400cd9ecfc60e937a154c8b37fa21c2c3e318a114938c922bcde9cbd5987a2e8090b83f880d4042be7ee8085fda3dc3f0bdd4ac68da90a9b7b340ecaf99b6f17ee4d77190f1e1cdabd31eac74eb92ae5cc321595f3718be9bbd8e0d7c3e00c1e4ce51a20811abd1da599e93bd1fe87ff65087f2418ddba9dbd1416fe4c909a0d16425636bbee058aa2cf11e21ee2816efa99115648d4b3f6b28f6297432888b322ff9deebf5224add42866e3ee454db01ab66832a81851529a06bed759b1590bf7e0b1db7581d4306debc372c6c9026953207b624db4163cbf12ae76c2f4da23f6b0d293dfbcd52a8bcfabce18577115ed030947ec68fbcc5c00a684d8ea31f3b2620df754b4fa9a5d934e960b4cd4e0edd0ba9008c639844725054377c1e2d1a9250052d44658279579fdf5522a3d11e64ee47355a36cd182a67a84943db40a11ae521ad1ffa09f6f9eac5ee7024ad79c57966d9f9dce425770d4ba37d2a8cba0df00e67d206cf2e2939c1a37afa696bed5416cda2cbaeeb218d8810472c2b880979c506f89c0d51e344b4940eac5857ff85d5567cd71ebde97fd87e79d18d66c45b99b853da358123a20cfdf0954a662fff8869c1c3b6d0fe530845bad1defa488f7b8794dc7f2da6d50ad7e2e692a79a57da0f04c2b5c229c21d7650735d62b0a0b91e34ed59cdd8681ad22bf34784f1ae453a688f5add7bc4b1493d06a684b2e6df88d5c24ed8fee8396cf3f7d416a0caf85d7e784b1b35c5ecb0f3cda86783a847be239650128765738f234f78403e77bd3e27525c4f986009aa3b4c1f843f4f16e3dc459d163433852d0923ce62ba23f534ba020109028ce5f6d238d9ad4664482ce78d57fa72034446c540ed6fd2af04a2f465329c18f50f5a1da87bfa242ddd230de4892dd32aed634e0a1de95cb5e29f96a153c192d0f34d4b002a3c2e7015c7384a83f1dc96f3c411272d51871dbad1d01175f20f311e4bfeb17919b7d1079a14929d106f9110282e39c82f823bd008623db7506e16bad3e082b8f7cdfdc398f05c6ce1b447e40b9e676207f3c5054769745982c402dd4d5ab625767ed0993b5cb26d9c64e903959d180752eb3511610eebebef44ec5ed48283b75222be82507ac17f29d76cf258401a62db6f39cd22008661413c6fd2a3dcc58fe34d68b5b80c79fa194a54428f214dabefb5d3cedd72990a5e219d8113d1285ef4829a99418363a7da3deced99c42147b6b9f064d59080d1c94ac63ac164f35a80c0d7dc480776df893cf74a32feeec7dfe86b63385adbfdb4947b74303f8eac37ce7e63019aa0984dab57be6372f879f0b5954a0fa41c6ffaff283a71ee9de23a4196858dd89f409f2cd1d49845671d676ecd9faa66c37dbe9ef7a2585459c2d1a94741c8a5708f9b9423abc88039dab77da3543f700e1a56608cc65ddc2ccd27628d7e59219ef67c25d100cde2a51d5576063a5afe12826bf06d2ebd677c1350e166bda53e8d1992c44ec340bb142b51aafdce86123084a9ebf4e242cc9d7c137b2857021059543aaa5741fd96234a819193a21d48675776ddfb9d7f95c8d25dd5945ba49fc17109465a09740ba53fffbe7bf717bace7edc9f299ce0676c88ca5f00ae876be093592fbe555d11dc3399f77d16039b64c677ea45a2867e1d72062fff4f407df7f132e819a97d540df1675bc4b21e049ba99ada904d919c4ba6c054fec2329cfb16e2fd436e00b1dc0db4e9463879f20a3c58943b2cf141c06241954bf1ac8feff051e88b5bf06371421f878be6d86af932216c8771f6c9ab750928926a8c8af300f7ec5351d8850a7d54441c5e4e6a979105ae431cfe7f5bbed4277ea04eec9b22f1fd01955cf72fab958cb26f20e3f5dd87a87e22a3c3740cf84e6d95bee37f1138f0d00081aa2fa570d98070c17769dc193d87a49cb4bc9ac8512bcefecfb503bc60e0913b989d1bbd93e7f66a908bb0b5f5a42f8bf7c2f861bd40cb72d93af856499282dcfac947f7042c23ae0ecd22cfc902623223a0c08101ac36237d967d10cc2cd5c3d32a0c27d9fedcc1d9885613cf692d7aa5b3027401f5053681ab75e686c72a11b2e40160b0b8d352b26ec561a83805d2f30c5ccd8cc68f3ff0d194784fde6d2ae008a04aadf8844b878ca485cd5cbc9b7f0fa9119dea8d80780247dd782aebe3ef429b2b9e73a10fa8faedff1f27c440766845beeacaaa36eeab36bdd782dc62669cc32da1c62807126a5ac0e99f59eab6b90055ddcd7b1490729171aa5347a3dc9e2c899ba2ad06cdfed671c5b72eddad775607fd57da925f6de601ea3d558641d11210ce8b85cd115221f4298e9ef8b7abedfc24508c34f7a91d7404b8e5eba02213a25f8bc7dea25de3e34a2cd54e7a77ddc3205c2f33086208cc270a00f8566d225214a4c97e8ad40c5b0b6aab6a8ca688e2bc35a27c824b929d6dd8de3820e5b2c0eff80dc0050088151022a8917e3baf61605f3f3f3345c7f51ffe9616af27a5534aa3c92aa4b7497ebef265ec47530ecf49fc39014379be8d9f77d910a8707605d55008911b229d216ec6bb882e9502ef2a60a53d0bbfdceb438e27761c831d2f0423449c412a03cbf803741e23c8dd58799272b7f603bc424c4590bc5cf9d988e1c3a6e60ec393fdf91c4a104e52a7551c062e37f9cef5c3c5168fb4e72bcc9b245ca64529f1739445063bd4e200a6398e6fda726834441ff5bfeb9527634179af93707029d531c6f2275ca85fad1b6210f54aab5eb395d3b44aae7f7e1fe8b644911ea69ce57b4554cba6b5b5f036737de3a399348e906c3c9da54407a8631cc9b29f3207320187429d64d6fb19477001bb6be6fafd56d2a792ffa35bc632b48e830d4e0c551591f78131b9b770a8a70080c746c022c715ab93b63816547ae8cd26be138a998c8df7ccf17fc4aae478fadb868a3d910824e999d86e6c30f6b3a7feb357abd020852449611a827850aaf59363356ed6a353aa662d5526c3138b51fddefa449b888a9f08e00fcc050a77736e441ee955a10c28e4ff3952e97e46c8bd15d731e7cd15ea8a56051c2de9b766ce9394f060ae4a162268a171a52d48ffb776eddcc2f42ebe4fa9a24f28b81e472ba801e3bb46dc1a3aca39478c36b604bdfb17a934255a8be2275bf7d527e50e1e237d1482e66582aa52e886c70105ff02b0b4ec5583b9fbdb955deff5a5876c56e697dc24a70540278804f90ebca6fbc99a0d43dde1a1fe7ce17a1a38895310bdb616b114223d9bf77a8727d9c2bd4bc9ff521bcd7ed37f57fe42df9f37371d70a2405e1c36fa66d5051264766bd471079b8c8bc6a71946912a57a91c915612e73de79d73c64084ba5f104227cc9b4dbfbe07ecb75461450f5275a834935c878bff2173022827017819897f420ae0c77c00604186770fd3e46c2ecf55d9a8a76dfb20960dd311a311017388395ceedaaa6bd4bff42ca74d8b408c6a4ffda6db726f6df0990541734f0c059b29b199e2ee11b6c576b940f8644a188ceee152bd33f4f4e59ff8eb711a970f87c4714c42b4634c6e87172b6cbe7e34e82d018f74da7519e830747879e771bdc1316f541bddc7106c0dea992d9dd0e8b11470cc9b4674f9c1d9b195ecacfc5f9902efcde42f6453fb2c5a760842ac30775d4d3fa1ee6334e0ab", 0x1000}}, 0x1006) 4.166073905s ago: executing program 3 (id=5930): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/92, 0x5c}], 0x1}}], 0x1, 0xa0, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000001240)=[{0x0, 0x0, &(0x7f0000000780)=[{0x0}], 0x1}], 0x1, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 4.12171256s ago: executing program 0 (id=5931): r0 = socket$inet_smc(0x2b, 0x1, 0x0) vmsplice(r0, &(0x7f0000000440)=[{&(0x7f0000000240)="a4c5a056e28ab2898d93902fc6b8ca462b75cb7e49c1ef9092831bbce9f76f9d3c9d50954da77b39963316a973b541a15e0a72892de311f8067340ec18a8957a86c9dc191ff84797ee6fe8b161298e8bfc0c0cd0be6d9c89288f021d07320c2290ce", 0x62}, {&(0x7f0000000840)="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", 0xc00}, {&(0x7f0000000140)}, {&(0x7f00000002c0)="71f2de2edef60ead9931ac9000cdb50e151a74276264e909307e931b8bcb5f45c9da0a7528f80abbac5d6f6568d35322c4340a40fdd17146cb2adfd77afed851a325eefa61b2ea783976274ec14f5dffcb095408b97c36857de8075f5f061fda4418a4f2f4fb685984ec283cb51a681b12f5aee04234213040648ad49ab8b4095fcf2d25433abc597ecc13b5d4087c361b26ea1ab0c34f7f32428ff3411e91f2fd367560f3316fb960d6cc483e0328698db53959db4f61c70412e00a6848eddb913a6c69b26c875517f3eb7b2ed880af0a5d11282811a55cd7", 0xd9}, {&(0x7f0000001840)="fc6d3861a602f6bce3ece8f11b5b290957aeec08cb25784953bd7fe0e8c99ae95980cc1e05b730cc5de6339b81816c2355047846701a422dbcd88dcbed3925d9482262758099e7a2e8b71e35b0791656754c5e6e9c36f735d4a9a424e97f963360f6c0a2e17cde64d62ace04b161f1ae243b7c90ed8c46869692b6133848fc07fdc465d4fd438d687b0fe809bbd5c320e2d93be327b6c954d3f8ea5f309ec4a1beb67273a88a8c312a413a2ab5d61945724ff9895215ce658d6b91f51ddeb382a134554866bafadf0599e34f10accb4cacfcf02d9960f6a6dc16b2fe3767800066049eda4a5695688b2c1423d5fd7d250e45bea54a3bddd8b48691096419d192dbf12d244e670a054faa51f75172debb2f9e3925e6766ecdd982a8145dc347153e61b7673cf145625c8a4fc75bd6aa171a82c356e436350b0e67a7f0c9b1a47ab0fd3220adb0e94997f55a4310f2cc18afaa1dc5575a30064f07dc9d518498f29e75e323ddeaa65c9e436584c59668794c7607879ead62e33578223255b4ced7d73715ee82ccba257ca53f5045e4d8fdd5b3d37bee716aefcd641819884ef04fec421f04be322cf24cdeb396bc9f042c7512d937a8b2ca89029b87055495ad94444aa09cae40102f1778e3cb6b442c75d2ff342152bac3b45b3b1e6037170b2b52cbd735453e52eba2457036ea5fa4361acf1fb0d0f937d89cad5c54885fd118dec24e1e747760211271df0fd677cea59a5728484a3982bbc89f2a833ae16620d9c091365b5cd661ff493b08eb290c861866cb451c754b21b1be5253da3be01360085e5490519fe87896bdbfe4b42cd25331ac3d7ebed8115a3d5232293adac886e70cc4c84e1713f338f9f8f87a8eefa08a7eaf485634fa191d244d4d5f80c1fa19950d3ece79c0c96914a4b4c2d724db4f7e8508c4f976fe0a702c896bbe212037285314d61453a7ec9ac8929ea5669b4bb0bb3bb568009cf0029c1652d3652235b4bab48616a1b4d0a039664643d1cfc0db8d29f5c6a7c1ce8b1b14684c293938d33264df233fc34344da36fa37ed048eaefeeb0f9226e38da4a0d5ae0163ed8d42c83b5c2a6119d6d7122ba2a54367d84ba13343ddee8ca367fced8afa70daf0a08e0345198854acee3a2f052e121ccaed2b975202b377b147736f6c2a728bb641169bb2ddd64ec6e227505761ef581fada88f6e29546e0aa021d8b54607c48055fba588c428bcab34a4a408f50a67bf0df23a361bf1959b4d56bb4090cc5157f1baa08eb9908468e58023f8769a44bd70794474da8827715add55583d88210d702b36f10d916b584d811f56846dcc3dfd80ae45dd645a8489eb4d2a9043dc7e6e8ea6e11206440174c7337ecc1fdb2abd526817694c1ad703f6ed351e1a09e4ae5e59e31a424c011ed100ed6621dd0cb4c2a4cfcff1a3dc5ccc282749243024926d311802de049723613fdadb7675c6c5ea7a05e62dfda0dc2ca7d936e98e0875fae14473f566706fd2411affcd6f0e11f249c7f974c3730d25513a3081def3ff3369e93da5f8e8e732d314a34542aa67110fd38a7a83ab1b6a87226f40b1a73d2220f0903bc54e197799a75be15fecc89f3427438dc7e62f6e850a28cfcaf8f5684e10971a3ad1a3387fc7c7a8331c9d0e30ebb06b4fd7bcbfbc040bd7a2a31101cbe45c531fe5303e92822b90b9ce4beee90e0368cebe8b77bcfa1e0a55d801c5cec558d09c537c8166db1a30ce5a2eb7e4dadc2b24684fc227b340c6397038fc21e1d733b62e7bb8b9c459f96a876ab7225359184dbd2ea73cbe0e86590660c898b82276dd3da5ef6bce8de56fe0dfce2399189ece063339b4133ffeac29817a7191a79afe9eda4273eaaa06a96a969eefa8eb35c3f28b833b8e433905434076d16d06bcb8084d44208928350f8df2eb43fb1021329d88bde0d47790d28472a26d3a35a3515bbd460d2c66d618fd487166fdde1ddf2c4b0701941735d2ff7acce44daf9839b5215f73b41d4599b8238cbb51c40fcc814513a5a93a525f743238c00dc2fe3131ff0d171ef364f6504ba070f438cb5dbf0708f4d98aef110fc9f077ae37bf1403622f80b10486ca62ca3bfbeab6ee6beaaa37c1f6a76c88c014ce459d6b619409e872bb9d4e8483aaea7c70fb6afea4100cd111f64d7a07dbb3a1a830e5c5719a3e4dfdc12cdac456860e0d751d7dfa6629f21afb126963dd6f86af359f5da043ce67b780321b28697be991dbdec1710295c7779105b4eb58c8f08109eb3736e1c48b70a1b02146b905e446a15ea99915d4766b6aad5959a2fa230345da14b856fec897bc4aec57986feda8536832442d87651f4315f4de8df72ab5d9f3458d4fff8d2100618743e3f2c493dec2730b47db7299a335fc3899ec8d76f9f7bcf7b3b3182748ee7cfdc786420c4a8846aa4d9c862f865ea40b33726c910030fe1a7636a0af4fbae9dcdaaefe18ba3bfea64372e83aa881cf7ebfcb194c9305f1c00e2329ff899fdb8825ce45baf609ba3850c9a477c675f12895abb561cd4e89e4d44f9e533c87064852c99cb0ac99b483fc12fa481ccb82b2c61c55d46646bad176e88fcd352ce0c3929554618b61c3c5ef06f51af7476c8b61659ccb680e94efedba4e8cd18a703c550feb43da2238f46589004a7e280927a6829e9d69173ce73e053f44f84f1d3a38701dbd1ce4a91aec8fb2dbd6baf615d913e07f4fee67d11e70fa50ca4abf5e752be6d2a00eb63819d33b1b653966ca845ac431999b7b7b588bfbfbc2d945892b842f89861a295a807194ec9ed9c1017069f37d41eed9a16794a9b2955d76a254a4d86a701e0f2b667e3834c7848ce957a6934cc75375b4c7a2e59c58ed1b88a24c866a11a3d1720521c8d339dbff4fbb5e8e527df53aeb375ee0c36a2b6b4173351ca99999ab48ebdd4377de2c98161243414be76badb7e52c92ac4da295e57d02173f8a55b1a47baeaa8675a1b4a0d861daf2ccedf5cdae62c193687cca1775ddd6983567b3a5fcbecc44d94b924beff7b81b28a094d333b287c17759ed60aeb49014bae612a310301f3b5662b3fba9bf20525d7984ece95347330ef1e35f91c3a4bb5d10606966e6e88c567f35172665acf0bdd84598fca443ddcb877f20d068a0659043349050cff765a91b32e7844f8775639bd38058490851378b305a705d1247e574320729ccb3edc78a3c04997e5ab25db5ab5f2bf39f38964ec870db1b3a710f3b5ebc8f393c89d15426b47430c37f61ce9b85261e4911c1b6d8c6d6fe6ad9dac39f8887bd8d66210f369fb3e0c61dd998b3227f8b8c9332c70973c4115bfc86e511f129cd673b2e1c2155b0964eab447b15bfc7a5ad3325502ada6f1d1bd1fb8725469653d9880859a45fc32b3ea3e7be4b87f59a1209cce094e5158ca764b4dd2391e52dfba38df90bb37c0488f65a75b8898ba0fe546737264590fd20acb4203e74f3de6d3f7a7b7d44c52e8e0dcaf2004d24b472b916c6bb8b2712a88712f6cdaa22fdefc206d5ae26a26e06097dcc2b72958f13f0b4c6556b58a10ca3590cb5bf0f0a25df0b2da1096d51dd61354c455177241c7e3786e9b12f7f51fac014eec432660f0572fd194ccaa04dd40c8ab6b7488b35ff6217de5238a3b94a9a8b281bf6bb0ae8ea83b74930c97bacc8b465061c317023c498b18b448c4a363be9c319a1b7c05417beb0601a585d234ffb9ad9940f6abf2949a4c4a237015f4e16ee1be19078e60f24a0e539fd7098c636735da4771643b3749b1895dfd4d83c930736643911f03665f6a72856d78ed0629409be77da484623de89b59443134c0b193437362673f61cd7ffa66befed99a9eeedd6b572d6bc4592f3229bc6c3747d98fc0cf0f94c05a812aa82e02dd127a7c9005da9bf661bf3355dda3283c0f08f6f3ca3b5cb6a5267c1ff2a78f4691cdef99f12573e33d1ef8d33cc120c3a7296b6ac375fb072fd6c9e1016dc700fd306adeb697544db8cf21de9b46b06dd17411b06863ff1de1b95ff62a1c0181ce56d0b8065fe0c42731add27a742116020fbbb8ed3d01e37ad009c4b0a9e3ea8ece749ee0d41f057a3df2f8c7b54ca6c5eadb82912d1993c144ffd19f465b7632eea9b15392ba13a9de8ea76e3a4d74b5c65befb1b32de3853ea144ef95cfcae70f0b586c2f1cc44b83fd8bbb883525d73e254bed725b3086567788e20043f888f61cbe0dae4694cc420f7461dc23cea74bef08540af3d7b3060a5551e613fae82c0058d971ff9c52c9a8d28372945e2ae4b38ae2e594d4d5f27a6b2616329dd35a918fbdda10a32a278ad52fc4a25a88a5b52ed7e8096b8af4e3453615b1fd72c73e3da60aa18c739b9f8c622bf648305a0b1cfe859384ab03b18bf58ba7583aa43b3b1969a30a6a571005704ae6372299b2d1b8b8ade186f15244b7884a447ad664c33b3f04e55be97b2cccb5b99ffbcdbac7b551c466354bc2bfa2dc928d7f7146400b548d0fc53f2a236bcadb051ef560592d144138bbe54311b405f509f00c16cda2c8b56a2d0047658db439338983409573e8345e402699ff21416a6a2590dbbe8ce41e5dc520a2b1bc621648e9e7e7cad7052cb7871650530448d5a0220e81c95fc57f3f1efcb793a35f33a7b4189f76ac7a9102f2a2341b57f0eb715454355f72608a193703db05c46a57775e94fde50310415004f797853bdec38be52794928a2f05752fd414257ee281f9455c570f0cb5af61e704c647aa64f908c2acfa00e79a8bf543ee699f3f2db7b6613197f57666104820e67702ad0f9188050233a4072c9bdaf08fd48f15d85be17dd6312849263634cc25da7c8a93b6a6c0569c615f19af7d35671a5e06633a64018121bea40a727ec91525543f6d5ca95bffad66a91de8687a69b7cd85d51bf709abb4f40ab4bc304a36d4f80f619eb801fe12316982fdae8c432f61b47de82044f1137ceb9687df92c502320807d8592783994b6d8128d68605cdbe9d41cd9b768dfe437c7da8f46dc041a729732a1ab6bf710b95b93edc86f03dff939d26c2bf899022c1cd91107fbe9ccd060862d07d7b430b8359a50da2046c09515fad6ad7d43fe89d8e06b88b3a29760b82dd6a1545a52070fc52023b8fe759ba4eb323fd7637ecf67c6f51f7be599fb571cb8b1102c145cf97194a6fbbbb96d75f6a2a3dca210b8c109816dfe3c50aa4c7c5deb8ac03e732eab2a9d06ba23c9870dbe700cb639ae6f2ae4a80e6e31fe9bdbb65083ccc4b284704dcc5d92aa59f25a47f331ec1661f46ff7f69dcae7f55c02996dd7e7ee0230f9a0829b553a1adb9019a85bcc5d7833de922ea5f02c23e470b57a19b412ed168a65d0ecce86e0cd30ce74e87ecb65fbec9d4bbd91771c4824bcd978d5ba10c21e7d604b525cf5b62a6a3adf754e4f3da178f0320ef6f310df74c539b381d16e02b66411270492f2c414cb855462a10a0113c23f2676052370fdf79599d8fbe1cbd15b542dddcc53f3a9182b4cc41ab11ff54b46f9b3f4aa5b0177832d5aa4d8095a655d2b41dfa0ce92a100ee7c46600e72e420730f7759aeb4f41c25cbb2a9185b7fae40933fd36b11b2b0fab009cd24c99ae96a35ca191899e83fadc5b2562e7e228ea86224d91742c96a03232a1489f35b34cebc7b530adb97176b2c882bb21efff3e5bb447b1b1976d0e96b8166944663df421de35646fc1e1121e24e122ab1e9a04bd093568bb0cd8d349e53943d76f72341117cb597c68e6fbee95c44817343e7396ad56e08955695c815655c852220cd9ad2", 0x1000}], 0x5, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600200001300290500", @ANYRES32, @ANYBLOB="000000000000000010"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x90, 0x0, &(0x7f0000000780)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000005c0)={@flat=@weak_handle={0x77682a85, 0x100b}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/201, 0xc9, 0x2, 0x3}}, &(0x7f0000000680)={0x0, 0x18, 0x30}}, 0x40}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x700000000000000, 0x0}) 3.781842011s ago: executing program 4 (id=5933): mkdir(&(0x7f00000022c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getresuid(0x0, &(0x7f0000000300), 0x0) quotactl$Q_SETINFO(0xffffffff80000601, 0x0, 0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f0000000000)={0x1, 0x1}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a0000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x9, &(0x7f0000000080)=ANY=[@ANYBLOB="18060000000000000000000000000000181200e4", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000000000008500000005000000b70000000000000085000000c100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904"], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040800}, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x882c, &(0x7f0000000180)=ANY=[], 0x6, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 3.684425991s ago: executing program 0 (id=5934): listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)=""/6, 0x0) unshare(0x64050200) socket$can_raw(0x1d, 0x3, 0x1) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x5}], 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x40}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0}}) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) 3.209993623s ago: executing program 3 (id=5936): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000400)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100001f, 0x38011, r2, 0x0) syz_io_uring_setup(0x2fad, &(0x7f0000001fc0)={0x0, 0x820e06d, 0x1000, 0x2, 0x113}, &(0x7f0000002040), &(0x7f0000002080)) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000900)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="c21504239e1d0700", 0x8}], 0x2, &(0x7f0000001a00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)="e4c882c9bbf7db69e33fe19002ec62d04e943f2945546fb50b605ae5ddd6c7a32a1aa8b2c211dcf518ca963f22847cb529ed80d2c17d953959f5750d173403e6c826f221f985e18d9a616a0757f05645db6e91a5662b5e569033e3616dd98506b923994f2dbf9e4f83b85a2b468d520f0c2480ceafddbdb59d16a11ed29b8e5e6f2be02a5faff7766cf40cd72d25ef231ed351448ba2149faf4796b761b266bd42a429e4a7577ff711f0d177321b9ae6592d2bb4016f9d347a196400e3b3c07c60e6ee9c4b69ec6d599d21", 0xcb}, {&(0x7f0000000280)}, {&(0x7f0000000540)="6f70490d1c52af464bc93fca3116393a69a543f135946b43433c92ff86e6570c4a32d413cb8f62e207651664d1ebb36e5ca7db3cec662672c81979987a99472766a50b56913155a6495f90fdde1ad7a40e4a8ce8772dba5223c7eff865225e3ca33020dc04f1887dbd375c90ccc4662334de1d8e353bd17e5f23f68d713b998baeddc638dfcf0178f43a32ba7f46983b96e0d85ca4bffbab5ff437808d5043529563e45a4eece8b505eb2d5077137bb11c42e8c3c438c38385b3e4ced3435afecc86a7389486cd83a1d9a4d940033d6994dbb7e4bbed", 0xd6}, {&(0x7f0000000340)="8986682a733b35641579206b7db848a6ae848772ff67c0431f1880aa1c01816451084276741ac8f4ac0a75f5136af9fe891e0a50dacf6fff38d8e93bc8fa8468ee7527aefa9802f66081add47575fb45309f634e1a2581529fa2891f2ce948c0dd2cba8eeb9466306e84d154b7fd65944c952fc1671a1ae9e43a44b086a762bd7d6377c5040cf99e932c1a", 0x8b}, {&(0x7f00000006c0)="c1aa131e35d3d3b404a2ce8e766d37d5eaea97bc624af05eb551f37c6c11ed96fdc5ec75069a96bb673a8b9a7cd6f5701f4b90c89129ab26c29b45d84ec999ccd3d884e35a9e61a287dd3778840a9682a016b752ea921b3c605974c1e0d4b4093bb6a04dca28006e0fff3c23dbb2aeeacd665599203a27f2d9b5fec7243d580f6a84d42176c3df547da5192baade657a479a9a", 0x93}], 0x5, &(0x7f0000000800)=[@assoc={0x18, 0x117, 0x4, 0x244}, @iv={0xd0, 0x117, 0x2, 0xb8, "98b75997c2a83d378505823dd256b641ccfb97401aadcc4a02d35e6f76273ab257739522a2f1975e81fd507e25bcf4e4676f4043808f6987721c76a3ad4be662f3f7cdb2dd00f69be91ff86e5067b80e9342cb692e3e8a8b33f1569660cdf22cfd47958eff3f769fe28462aeee1cdbfe3d13a41b2ae0fe3676e25906cf19dd4f01fb8e4dfe5eba5d2d3069d3385f5e163f85efa0e1be220c46e22bad2b9bba7fdc8da7ab004f340d272d4f7c83ebef9bc87d487cfd9d45b7"}], 0xe8, 0x20000800}], 0x2, 0x0) r4 = syz_io_uring_setup(0x9f, &(0x7f0000000980)={0x0, 0x4000ec25, 0x0, 0x1, 0x25d}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r7, 0x11, 0x0, &(0x7f0000000280), 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.886751998s ago: executing program 3 (id=5938): socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="c0e2c3", 0x259584305129a66}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x40}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x400000000000084, 0x20000800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc}) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r4 = socket$inet_smc(0x2b, 0x1, 0x0) shutdown(r4, 0x0) 2.6236346s ago: executing program 0 (id=5939): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x90, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf33}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb2}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x52b9b017}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xbf, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80e, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa842, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000300)) r6 = dup(r4) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) write$P9_RSTATu(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="931c00007d00000005f0000000000000000000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) 1.986097433s ago: executing program 6 (id=5940): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) unshare(0x24020400) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @multicast1}, {0x20000010304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0xde, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4}, {0xac}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r3, 0x12e, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000036c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.063434726s ago: executing program 6 (id=5941): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000004080)=""/4104, 0x1008}], 0x1}, 0x400}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)}, 0xfffffff8}], 0x2, 0x832b, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) (async) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) sendto$inet6(r1, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) (async) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r4, 0x30d, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) (async) getrlimit(0x1, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x10, "4b8684e103e67581a7ef1bffbbb82506"}, &(0x7f0000000180)=0x18) 826.570472ms ago: executing program 0 (id=5942): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0) ftruncate(r2, 0x51a9497) clock_gettime(0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x26, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) 725.943124ms ago: executing program 6 (id=5943): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@delchain={0xe0, 0x65, 0x2, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x28}}, @filter_kind_options=@f_flower={{0xb}, {0x6c, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x5}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x1}, @TCA_FLOWER_ACT={0x34, 0x3, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x2}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x2c, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xffe0}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xd}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 505.536399ms ago: executing program 6 (id=5944): r0 = socket$inet_smc(0x2b, 0x1, 0x0) vmsplice(r0, &(0x7f0000000440)=[{&(0x7f0000000240)="a4c5a056e28ab2898d93902fc6b8ca462b75cb7e49c1ef9092831bbce9f76f9d3c9d50954da77b39963316a973b541a15e0a72892de311f8067340ec18a8957a86c9dc191ff84797ee6fe8b161298e8bfc0c0cd0be6d9c89288f021d07320c2290ce", 0x62}, {&(0x7f0000000840)="7074c812755064df45dd3eee1b1cb6626b700e733309714dac95c567e4c3af168f5dc3c950cb16ea3331b98aa066e749dc2d9817a9ab3b78dbf527031cdf52d6716259cead0ce47b4a98badf46f5dae7b1acef434baf2d530c7fc532921dfb847ed9c83adb04df4e326e74656f1ce0689efc327049fd8760b597bc8e75e75b6ea73aa578703441f9391c8330cff3c05227dcc748f773dfeca6e65958bd7672c7daf0f7a597b49d7f02555e147cfd3d546011810d5cae3f636a4c7025b80b52920e9701e2ab0a00ca3f9e67dda6bc78feb6d73f0d0bd0a42cb7ffc57cae86e31289655f7b38e0e8654098224a4dc243c06a48e9eda86192d4a2ec8117e4f8fbca19790c1b518426428dbdb040fa2fc173508455c7a3b0c74c72636e0bf98e9f2e8f7c0edf5db9a06066994c1c1e6df2e7108ccb6c7560981f95d1e00e0cb12fe9cfaf35dc03e4af0119e6deb56110632182f95a88c7045d565936484173a49a633be2896840dc3bed9a289952ac97ba4452b93c4214b61f14e28bbc613bd1e2656caaed854852d10a68e41f50e9216277a8fd50ceafe5251e0d041c29c44d05daee6866174dce6bf9c29089a356e8b570ad9b1037c0029a9c11b6206847df6cdcc84852040077d76fe5aabe10abf7e3399a63ef00f5291bed3877fc4383ea75e6be45d8e344d38c8ffdcb0b02cb3ec8e77afb9508ce54f97848a33ce7eba4a5ce72f4d67d7dd7284a9ee917f6e26242bcbaa90b90360e6e1db22bf94d91907d68ef891a88dd4c247d8e14c1797d83bc823f8882812049d248f6e02015f8378cea2fa87b3b5527c2c2ad20cded1bdc6f9c8559d7c4df20ebe20e3c76ac8c1926d4964b0cd0d82ce4a2349825645e2a0705d34955bc71b22ae8825f907d165cae49a115838c0e2aa153469c165cc8221abf9205c2973084cbadff90e73c2f3cf8d4da02ccfeda936070b6c8e4621f9f34b686deabb1c67b22777887c21bc0516c334976d5ec3ba050cc0b861b8f8427470bd9fbb89b0187d88d06a13834f806658a7340db5f3437225409bba8cc36433c9dc2858ecf5724bf33765624c9783d06a3d771a12cbd6cd3fccda7b8b9e528f805e0f401322bbc3b92960f0fd00234f55054bb8cb69b37d8aebb1908a0090a8e33402f9726598179dc7c54907000619646e89f04bb6208af13e0182b6ed83bf8f7331895239de8fb65af2e37b2e616a78815927529490562799fbe7c71db4e8d7658eb12af81a0785705a3a31ff3fe589782e229b37612139081cf7baeeb0844bed56d82f9eda749362426aa220df70cea6ec8e2c57be085e493dd46494c935e7acd348b940237eabaa7ff0a5707ba026f980f46ec8e0168bca012da6fb37a95bfed85b9eaa35bb53358c7e75660678cb4b5c68001eed392417226f122565a7d0e88c40e8b455a55305925e56c193b1e2b05299ddb9ec21d81c4fff97ab12eaeb43ee8a9622e5708e5b2ed0fff985105c14e32f801aa032c203d5520bac7e56e8fb443bc81dfb7241026b85c8b8a7ff14d791812dbf9e61176a888565cafc84810427da8d30f5b81f7b61dff16127d0a6aeb099513fbc6329a4ec6251a1428d362322123ac37b82215a4990b0e0258b77d007374effba51d076bc71c20a2b080981f05634afd495a0a71a2e473e677f3736751a9d720af69f657f214c6ff7c939243458dc1e667c293200a89d3637367f4c5d90463c0e7da1f52cc6468810ebfd5b9eeccb89eb8e9eb1b3090f0cc62c337d57012c71444affbcf6e23af797b261fb9785eb185b98091d15962215e4e2e571154c2e81fa6cb0cf83d88040b4df1a409b1da6356c0399609871bbacc1d62f72a13d5e5027f24136bce7d9427df5cdebc07cef989829032c2758a18c12d6fe2d090a3f0b8020c2eccce8493cfc61cb3d307e869ffb91987cdcc51cf99b56b2081e3aa653fe3574f9f6ed6e43e0b83ea5fed3bc0cf3659c9a95d97274f0a79271ebfd7bfe31067dd2ead391518918cf8ad979acd7175829a5bfc371c8138f6683724c0c552ac5c3b229c10bcafdf6f278bfd7447bf1c1418258fa4fbdda705a924b86ed6c648e062519d7c6521f1e9c0e0d8898503393ee0c2f5eb5767daa642b7e3a243cab2496bba97df7bf9102099a55769ff6e5d7bd3227a9130a7856694e89b3dd9920b9e146f18a3afb4bcc9fc8c9ce8c5200a60720c039590be0ebd8ab44f9d6965bf7dd9a9e3f6cf3462dd4f7de3fd7841b7b27dda5325defcb49312a53d08bdcc1cc30259b497e1733f3cf8a7de1be84b0e336554b23b9eceedf122dd71e3862b1d3bde87c64702fd4869a9082b45d9bd48c90a3daf6e6e3644ccd11d57efe5c4fc56961fca175e0cbe9a2d6bda41b77608218d958b38c4950adf0510c07394b482ec2a22b258e7e4ca4939e6dff7d021d4a4125822b2233ab9495a312110700df2b662df4ba9b923b00937cb4865a68fe95e85fc5dac7ebed86fea3454c7852b2140aaa7df168e07e772c6471b2d9f8c25bcba0e9f0ac6f3ec8488ea4e2e8aaed854d2c6364091ac3b18aada755c2441549ebe1ff9ec07221bb18fd690ffa8adfa29b23f706c179e7ee3777981083c214fab990939d4c331f899b2bf8fab12bdf0b282ebfe039f5a22d34d8a03ef8e764dad955cbcd5f62fa2964d4c69c73b8e161b2ca3dcb646ebc092fbd3b7d4394765b34565a38014205f3f94bddd104758e25c34d9ba43954d932289d8ec517967542f190caae2d88c7ca16abe0ecbfaba8237ed5b1a1e088ab2beb20cf929734dce0ab9f77381f29c50eacb1c904536b3792344802e07f12fbda4a9486ce2e0a666bc60bf7672f9c39dd827f7a30748b6f6c78c323573c50f4ad01c81ce2239faadbb9ca7dffb98c7fe50a9ea08e1804ce861de561f5cb9a5621410855f95eea6c2f17a616a311e38b2e53c62484c236d22b6f05c9b5e0df90cdc91675f1603e2ecdbeba72ac8d3f145c19b5a1bc4d3ee6aba6630e9b5cdd452923e09298f196f38c4d4fc7d2eaa25c0b7bce9c8dc819914611dad006b89b3f99f23e9342fe745ee89272f396c7554a94a474a712039f9c53e5c285c73b576fdaebd78bb5651ff0b5f3688fe993f49e1a5c7c7e1a91d952b5688cda48b5617c8744848d9f71608ede88ba096b8edf57cd49b23ef80559089ac927f3e757f3a06f9f3f66269027e7d8360f3ee9c3d35fc8ec2003752a6dcfdfddb2ad7d57fb75dcb4302385a7d51d7835d186bf908cfee4fe1dcf563d6bce6d8dd4f00c6e06210373688e1d80254f0faba0108439673efbd453195cfa3e15c25d0c50b2355ce42e9b084c7efdb0ccba7b24d08191ce668f610e62fe44124239682cbbeb9cfba630b08b687ba50f9aa24c9053bb0a8ba58da7d8d38b33ef1c40a8a0b3d0edbe53d6a913145ec1ed638d3801699078ea5658875b4e9dddce26ea1c8979b500bf43820c4c853ad4288a55f4896fd1fa4ae10b06e4c23cd1341b18e4a358b9ef3621d2f30cbb6701f6b43c0b344a29abbf9ae15c1b20f14852d23198b6856dda4ad8877a852f829c8ba44ce1135005395df7a9ab6d006aac2e4dab25d1a3784ead0578567ae51b0bafa0b1609850db061fc58c78952cd32150088c5df77377384ba8da15bdb0668b0a4c69fcf51d1f363304ddb54c7cd188c7b77347be808fa7253179805b2137576099dbde4473805e6f3a769e1538c10a5d2d357d9e8c0cd2866b78578df0868deefe0c03e62c65680ce0b0df510980706395a897be862f5550bce685fdd23275901e23e6cf43d5c468dcb7acdda7d6959408c28301c75a7009a81f6efd5caedbfc8bd5a49f35f6e4151b5d47bdf8d269bad430b90314bcaf3f7404fb997dc3d3c4b05868bc76336c3b41ad918f8a8380934cd606eb3b02b4eb498d2fff6e1f75974b64b48c5d4cc324ef8cfc21a7332238ef9a1f76ea8b6c9938e3713712758a9cd43113a5bb477cdcc761f4d48576f46e55194e3ae1163c72971a10f6349e43b02e8136575302569018f28c54b5c5cf93a51581f0ec7502e6a2a40d1b630d09709ffd7286a85462f6ee2d9993d04ba52730779e7bb1db8bc44beea6b19ae0a627c56307045e2c99c17b699626d42df24c5c7be0f3e28a7b890064295d7e99a5bf734158a832bf86845c8139af5adc608b626b3037818932a88777bfe95c9597524e73f753835928e699092dc1eb90c12e25f402507ac2f29a55cbd8b029add2046d10c11cbe2f4844cd2bddcf24b1a2f00569091c9d63f1b001fac0a5ee5c60e42084e7707bb3ed1b33d0e86e9d3bed9c8157fe3e415e0c16b6ebc9816c7b5bbc8ed4137f48d4d64da43fd84", 0xc00}, {&(0x7f0000000140)}, {&(0x7f00000002c0)="71f2de2edef60ead9931ac9000cdb50e151a74276264e909307e931b8bcb5f45c9da0a7528f80abbac5d6f6568d35322c4340a40fdd17146cb2adfd77afed851a325eefa61b2ea783976274ec14f5dffcb095408b97c36857de8075f5f061fda4418a4f2f4fb685984ec283cb51a681b12f5aee04234213040648ad49ab8b4095fcf2d25433abc597ecc13b5d4087c361b26ea1ab0c34f7f32428ff3411e91f2fd367560f3316fb960d6cc483e0328698db53959db4f61c70412e00a6848eddb913a6c69b26c875517f3eb7b2ed880af0a5d11282811a55cd7", 0xd9}, {&(0x7f0000001840)="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", 0x1000}], 0x5, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600200001300290500", @ANYRES32, @ANYBLOB="000000000000000010"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x90, 0x0, &(0x7f0000000780)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000005c0)={@flat=@weak_handle={0x77682a85, 0x100b}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/201, 0xc9, 0x2, 0x3}}, &(0x7f0000000680)={0x0, 0x18, 0x30}}, 0x40}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x700000000000000, 0x0}) 477.37519ms ago: executing program 5 (id=5945): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="25021850ffbe3ad3a0e9b5b276b0bc303f9cc78c81e7d0d5158a3469c946877f", @ANYRES32=r7, @ANYBLOB="08000800120600001400030064766d72703100"/28], 0x34}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) r8 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r8, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r10}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f00000021c0)=@deltfilter={0x38f0, 0x2d, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xfff2, 0x7}, {0xffe0, 0xe}, {0x10, 0x6}}, [@f_rsvp={{0x9}, {0xc, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2c}}]}}, @f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}]}}, @f_rsvp={{0x9}, {0x1e10, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xc, 0x1}}, @TCA_RSVP_DST={0x8, 0x2, @rand_addr=0x64010102}, @TCA_RSVP_POLICE={0xc48, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe3c}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x4, 0x2, 0x9, 0xc, 0x3800, 0xc0000, 0xfb, 0x3, 0xf, 0x2, 0x2, 0x1, 0xc0000, 0x8, 0x9, 0x0, 0x6, 0x2, 0x1, 0x8, 0x7ff8, 0x6, 0x401, 0x10, 0x200, 0x8, 0x4, 0xa28f, 0x75b, 0x80000000, 0x2, 0xffff, 0x7f, 0x8, 0xfffffff0, 0x2, 0x5, 0x0, 0x2, 0x5, 0x9, 0x6, 0x9, 0x8, 0x9, 0xffffffff, 0xff, 0x7fff, 0x0, 0x1, 0x1, 0x4, 0x3, 0x1, 0xd3, 0x9, 0x7, 0x9, 0x1000, 0x5, 0xb3c, 0x9, 0x401, 0x8, 0x9, 0x400, 0x6, 0x0, 0xbd0f, 0x0, 0x6, 0x401, 0x6d3a0ea5, 0x7, 0x5, 0x5, 0x3, 0xea, 0xe2, 0xe6, 0x4, 0x400, 0x4, 0x3, 0x8, 0x6, 0x10001, 0x3, 0x8, 0x3ff, 0x5, 0x9, 0x8000, 0x9, 0x4, 0x0, 0x3, 0x68, 0x5, 0x4, 0x4, 0x1, 0x8, 0x8, 0xe, 0x4, 0x81, 0x80000001, 0x3, 0x0, 0x7, 0x40, 0x6, 0x10000, 0x1, 0x4, 0x1a6c0, 0x8, 0x6, 0xb379, 0xd0000, 0x2, 0x45, 0x7, 0x72, 0x0, 0x5, 0x4, 0x0, 0x81, 0xe, 0x1, 0x2e2e3032, 0x8, 0x101, 0x1, 0x9, 0x3, 0x1, 0x200000, 0x80000000, 0x82, 0x10000, 0x4f, 0x80, 0x8, 0x7f, 0x10000, 0x6, 0x5, 0x401, 0x2, 0x9, 0x4, 0x6, 0x7, 0xd0e7, 0xfffffff4, 0x7cdf, 0x4, 0x3, 0x1, 0x1, 0x10000, 0x86a2, 0x1, 0x0, 0x1000, 0x5, 0x0, 0x0, 0x1000, 0x8, 0x4, 0x8, 0x1, 0x17, 0x7, 0x5, 0x6, 0x8, 0x8, 0xf12, 0xfffffffc, 0x0, 0x80000001, 0x0, 0x5, 0x9, 0x101, 0x0, 0x3, 0x0, 0x6, 0x7fff, 0x0, 0xffffffff, 0x1, 0x6, 0x223, 0xf9, 0x824, 0xfffffe00, 0x5, 0x5, 0x968b, 0xce8, 0x0, 0x0, 0x1, 0x8, 0x10000, 0x1, 0x1, 0xd1, 0x22, 0x7fffffff, 0x7, 0x4, 0x0, 0x9, 0x3be77f6f, 0x3, 0x4d68, 0x101, 0xe, 0x4, 0x8, 0x9, 0x5, 0x8001, 0x6, 0x3, 0xfff, 0x1, 0x3, 0x40, 0x4, 0x2, 0x40, 0x7f, 0x1ff, 0x5b, 0x9, 0x7, 0xa, 0xe, 0x0, 0x8, 0x8, 0x401, 0x7, 0x70ba, 0x1, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffb}, @TCA_POLICE_RATE={0x404, 0x2, [0xfa, 0x7, 0x6, 0x4, 0xe, 0x3, 0xe, 0xa9, 0xff, 0x5, 0x8, 0xfffff000, 0x10, 0x5, 0x8, 0x2e4, 0x9, 0x3, 0xfffffff9, 0x6, 0x8, 0x6, 0x10000, 0x3, 0x2484, 0x8, 0x7, 0x3ff, 0x17dc, 0x4, 0x7, 0x9, 0x3, 0xffffffff, 0x383a, 0xfffff7d1, 0x10, 0x2, 0x5, 0x6, 0x9, 0x6, 0xe259, 0x7, 0x1, 0xab, 0x1, 0xe, 0x3e, 0xa, 0x5, 0x1, 0xfffffffe, 0xc, 0xc, 0x5, 0x4, 0x2f500000, 0x7fff, 0x8, 0x5, 0x3f8, 0xa, 0x80, 0x76f6, 0x5, 0x9, 0x3, 0x6, 0xc, 0x8000, 0x6, 0x79834b2c, 0x7, 0x3b, 0x9, 0x1, 0x3f, 0x2, 0xd38, 0x1, 0x7, 0x3, 0x2, 0xdc87, 0xf5c, 0x5, 0x3, 0xffff, 0x10, 0xf, 0x3, 0x8f8f, 0xfff, 0x4, 0x80000000, 0x5, 0x6, 0x80000001, 0x55, 0x3e, 0x31, 0x100, 0x0, 0x5, 0x5, 0x69, 0x3, 0x6, 0x10000, 0x8, 0x1, 0xba2, 0x2, 0x8ca8, 0xfff, 0x36bee2a1, 0x9, 0x7, 0x9, 0x81, 0x0, 0x1d, 0x3, 0x1800, 0x2ba, 0xd, 0xc, 0x9, 0x400, 0x3, 0x7, 0xffffffc0, 0xfed, 0x4, 0x6, 0x0, 0xcb5, 0xe21, 0x5, 0xffff, 0x9, 0x10000, 0xffff, 0x5, 0x4, 0x3, 0x1000, 0x287, 0x5, 0x0, 0xffff, 0xfffff000, 0x6, 0x7, 0x4, 0x0, 0x8, 0x8, 0x0, 0xf, 0x11a, 0xfff, 0x0, 0x8e, 0x6, 0x2, 0x2, 0x6, 0x2, 0x40, 0x7e7, 0x1, 0xfffffff5, 0x4, 0x10, 0x9, 0x3, 0x78000, 0xffff, 0xfff, 0xd090, 0x9, 0x8, 0x7ff, 0x3, 0xfffeffff, 0xfffffff7, 0x7fff, 0x80, 0x6ef1, 0x6, 0x10000, 0x1caa, 0x0, 0x8, 0xb, 0x4, 0x1, 0x6, 0x487, 0x8, 0x1, 0x7, 0x7fff, 0xd1, 0x9, 0x8001, 0x7, 0x3, 0x4, 0x9, 0x852, 0x7, 0x4, 0x9, 0x7ff, 0x9a2, 0x8, 0xffff, 0xd2, 0x24d81348, 0x77b, 0x10, 0x2, 0x8ba, 0x602, 0x6, 0x4, 0x9, 0x0, 0x7, 0x893, 0x0, 0xfffff187, 0x2, 0xd, 0x5, 0x4, 0x6, 0x6, 0xfffffc26, 0x3, 0x8, 0x660b, 0xba, 0x8, 0x2, 0x4, 0x0, 0x5, 0x100, 0x3, 0x1000, 0x7, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x17a}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x80000000, 0xf1, 0x7fff, 0x6, 0x1, 0x0, 0x76, 0x7fffffff, 0x1000, 0x4, 0xd2, 0x81, 0x4, 0x7, 0x0, 0x6, 0x2, 0x9, 0x4, 0x1, 0x1, 0x9, 0x9, 0x7ff, 0x4, 0x4, 0x7d05, 0xb8, 0x2, 0xf3, 0x8, 0x9, 0x3, 0xfffffff7, 0x9, 0xfffffff9, 0x2, 0x8b, 0x7, 0x2, 0x9, 0xffffffff, 0x6, 0x1ff, 0xfffffffb, 0x8, 0x8, 0x8, 0x7, 0x10, 0x8, 0x3, 0xc0f, 0xfffffffd, 0x0, 0xf55, 0x1, 0x6, 0xffffff21, 0x7, 0x1, 0xd, 0xa0, 0x7f, 0xfffffffb, 0x5, 0x6, 0xaf9, 0x48, 0x6, 0x6, 0x63d, 0x4, 0x5e5d, 0x6, 0x5, 0x7f, 0x6, 0xd, 0xe13d, 0x10001, 0x7, 0xfffffe01, 0x2, 0x2, 0xfffffeff, 0xf, 0x9, 0x1, 0x4, 0x2, 0x9, 0x0, 0x5, 0x3f, 0x4, 0x688, 0x5, 0xc7ca, 0x1, 0x0, 0x4, 0x5, 0x1, 0x6, 0x7f, 0xfffffffc, 0x4, 0x6, 0x6, 0x29b, 0x78, 0xdf4, 0x0, 0xc, 0xc, 0xfffffff8, 0x401, 0xb5, 0xb, 0xffffff00, 0x9c5, 0x6, 0xa, 0x5, 0x3, 0x4, 0x6, 0x6, 0x1000, 0x3, 0x3, 0x8, 0xffff, 0x7, 0x2, 0x0, 0x2c, 0xdf, 0x1, 0x5, 0x2, 0x5ad, 0x8, 0x2, 0x1c0, 0x2, 0x9, 0x2, 0x5, 0x7ff, 0xd, 0x2, 0x4, 0x57f, 0x7f, 0x7, 0x7660, 0x5, 0x7, 0x7, 0xf, 0x400, 0x8000, 0x7, 0xfb6, 0x5, 0x8, 0x2, 0x0, 0x9, 0x2, 0xe, 0xffff, 0x6, 0x0, 0xfce, 0x0, 0x2, 0x5d, 0xb, 0x1e9e, 0x4, 0x0, 0x8, 0x1, 0x5, 0x7, 0x1, 0x94, 0xb, 0x3, 0xab, 0x1, 0x40, 0x1000, 0x6, 0xe, 0x8, 0x80000001, 0x2, 0x8, 0x2, 0x8, 0xe079, 0x5, 0x80000001, 0x4, 0x6, 0xf44f, 0xffffffff, 0x9, 0x1f8, 0x6, 0x3, 0x6, 0x9, 0x3ff, 0x7, 0x7a77, 0x2, 0x2, 0x9, 0xfffffffc, 0x4, 0x80000001, 0x3, 0x9, 0x0, 0x1, 0x8, 0x2, 0x5, 0x3, 0x9, 0x1563, 0xfffffffb, 0x401, 0x3, 0xf36, 0x1, 0x3, 0x2, 0x2, 0x9, 0x4, 0x800, 0x7, 0x101, 0xff, 0xd, 0xffcb, 0x9, 0x7ff, 0x6]}]}, @TCA_RSVP_SRC={0x8, 0x3, @remote}, @TCA_RSVP_ACT={0x117c, 0x6, [@m_tunnel_key={0x1094, 0x11, 0x0, 0x0, {{0xf}, {0x64, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0x40, 0x4, 0x0, 0x4a}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x9, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xe4, 0x16, 0x0, 0x0, {{0xf}, {0x40, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffff8, 0xd, 0x4, 0xfffffffb}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}]}, {0x75, 0x6, "7c73ecf6ede839ce16b1ac9b370351ff2510034bd876af918bccabe0d10b58214d44e062f75fb8d818098f977d4057a5e892ac80824399a1a8c68f3b39b5bf0a17fb4a6807ec9113079fe7b0ff9d483d1328eb5ef03fb8f6306f6c7f54ba81b1b7d5d5982392cb5b27a70d36b623c4c5b9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xfff, 0x0, 0x51ea934}, {0x0, 0x0, 0x2}, 0x6, 0x6, 0x81}}, @TCA_RSVP_DST={0x8, 0x2, @broadcast}, @TCA_RSVP_DST={0x8, 0x2, @local}]}}, @f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x5687}]}}, @f_rsvp6={{0xa}, {0x11b8, 0x2, [@TCA_RSVP_POLICE={0x818, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1ff, 0x81b3, 0x3, 0x8, 0x4bb6, 0x3, 0x2, 0xffffff00, 0x7ff, 0x5, 0x8000, 0x0, 0x0, 0xd, 0x100, 0x9, 0x80, 0x8001, 0x1, 0x6, 0x3, 0x10001, 0x5, 0xfffffff7, 0x2, 0x3, 0x3, 0x7, 0x8, 0xe, 0x6, 0x8, 0x7fffffff, 0x8, 0xd, 0x2878, 0xf2, 0x7fff, 0x7fff, 0xd21, 0x7, 0x1, 0x1000000, 0x10000, 0x27, 0x4, 0x4, 0x8, 0x7, 0x5, 0x9, 0xde0c, 0x1ff, 0x5, 0x9, 0xfffff001, 0x83, 0x5, 0x8, 0x8, 0x7, 0xe68, 0x101, 0x1, 0xe186, 0x8, 0x57, 0x80000000, 0xf00, 0x7, 0x0, 0x5, 0x8, 0x7, 0x7ff, 0x0, 0x6d, 0xaa, 0x8000, 0x2, 0x100, 0xe, 0x3, 0x4, 0x3, 0x3, 0x10000, 0x2, 0x7, 0xfc, 0x401, 0x9a4, 0xe, 0x1, 0x3, 0x2b35, 0xc, 0x0, 0x9, 0xde7c, 0x8, 0x9, 0x7fff, 0xffffffff, 0x5, 0x9b70, 0x4, 0x1000, 0xe, 0x62, 0xfff, 0x8, 0x9, 0x7fffffff, 0x5cc446e6, 0x7, 0x7, 0x8001, 0x2, 0x22, 0x6, 0x1, 0x5, 0x19, 0x5, 0x7fffffff, 0x4, 0xfffffffe, 0x7, 0x853, 0x7, 0x81, 0xefe, 0x800, 0x7, 0x8, 0x7, 0x68b, 0x9, 0x9, 0x4, 0x6, 0x1, 0x3, 0x4, 0x631a, 0x7ff, 0x2, 0x401, 0x2, 0x1, 0x0, 0x7, 0x1e5, 0xaa1, 0xfffffff5, 0xf2f, 0x7f, 0xd, 0x5, 0x1, 0x8, 0x133, 0x9, 0x101, 0x7, 0x5, 0x4, 0xeacc, 0x8, 0xaf72, 0xd20d9045, 0x2, 0x6, 0x9, 0x7, 0x6, 0x515, 0x9, 0x4, 0x7, 0x5, 0x7, 0x3, 0x8e4, 0x6, 0x724, 0xffffff00, 0xfffffe01, 0x6, 0x80000000, 0x7, 0xffffffff, 0xfffffffa, 0xa, 0x5, 0x5, 0x1, 0x5, 0x7, 0xf, 0x0, 0xbd5, 0x6, 0x8, 0x4, 0x0, 0x79e, 0x5, 0x4, 0x5, 0xd6, 0x1000, 0x7ff, 0x401, 0x1, 0x4, 0x0, 0x1, 0x2, 0x101, 0x7, 0xe, 0x8, 0x8001, 0xfffff7bf, 0xde, 0x6, 0x8ba3, 0x1, 0x2, 0x7, 0x61df, 0xc, 0x8, 0x2, 0x71f2d2af, 0x5, 0x540, 0x1, 0x1000, 0x5, 0xf6, 0xb, 0x4, 0x9, 0x7, 0x1, 0xfffffffb, 0x8, 0x0, 0x6, 0xfb, 0x0, 0x90, 0x81]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x52b}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x5, 0x0, 0x9, 0x898, 0x2, 0xe, 0x3, 0x8000, 0x5, 0x1a42600e, 0x8, 0xb634, 0xfffffff9, 0x1, 0x22, 0x4, 0x0, 0x4, 0xffff, 0x9, 0x400, 0x2c44, 0x40, 0x6, 0x9, 0x1, 0x2f4117f3, 0x7, 0xfffffffb, 0xfffffc00, 0x9, 0x2, 0xfffffff2, 0xff, 0x1, 0xfb5, 0x2cb4, 0x101, 0x7f, 0xf, 0xecbd, 0x2, 0xffffffff, 0x5, 0x1000, 0xb4, 0x7, 0x1, 0x9, 0xfffffffb, 0x7, 0xffffffff, 0xbce, 0x0, 0x8, 0x1ff, 0x0, 0x10000, 0x0, 0x2, 0x7, 0x9, 0x7, 0x3ff, 0x9, 0x200, 0x0, 0x328d, 0x6, 0x8e, 0x62a0, 0x3, 0xffffff00, 0x81, 0x1, 0x253, 0xb, 0x5, 0x9, 0x1, 0x7fff, 0x80000000, 0x3, 0x3, 0x7, 0xc, 0x8, 0x1, 0xffffffff, 0x3, 0x9, 0x1, 0x9, 0x8, 0x5, 0x1, 0x1, 0x2, 0x7, 0x6, 0x100, 0x6, 0x7, 0x4, 0xfff, 0x0, 0x14000000, 0x6, 0x7, 0x10, 0x0, 0x8, 0x200, 0x1000, 0x400, 0x7, 0x74, 0x2, 0x6, 0x4, 0x9, 0x2def, 0x6, 0x638, 0x101, 0x0, 0x9, 0x6, 0x0, 0x2, 0x8, 0x5, 0x7, 0x5, 0xffffffff, 0x7fff, 0xffff, 0x200, 0x4, 0x3, 0x5, 0x100, 0x5, 0x9, 0x6, 0xffff, 0x0, 0x80000001, 0xc8c, 0x5, 0xf, 0x4, 0xd, 0x3, 0x6, 0xd94d, 0x1b4117a0, 0xfffffff3, 0x1606, 0x1000, 0x8, 0x28, 0x85, 0x400, 0x3, 0x0, 0xfe0, 0x437, 0x3, 0x0, 0x4, 0x9, 0x800, 0x800, 0x0, 0x8, 0x10c, 0x4, 0x5, 0x5, 0x800, 0x40, 0xd8b, 0x1, 0x1ff, 0x90d, 0x7, 0x7, 0x1, 0x8, 0x2, 0x5, 0x9, 0xfffffffe, 0x2, 0x28, 0x20, 0x6, 0xfffffe01, 0x7, 0x93, 0x7, 0x3, 0x101, 0x1000, 0x5, 0x7, 0x4b2cdfe, 0x8, 0x80000001, 0x7, 0xc2fe, 0x0, 0x3, 0x0, 0x1, 0x9, 0x80000001, 0x9, 0x3, 0x5, 0xffff, 0x2, 0x0, 0xffffffff, 0x5, 0xffff, 0x800, 0x1, 0x7, 0x9816, 0x0, 0x7f, 0x5, 0x7, 0x2, 0x8, 0x2, 0x4, 0x8, 0x4, 0x3, 0x1, 0xfffffffd, 0x6, 0x9, 0x9ac934a, 0x5, 0x7f, 0x9, 0x3, 0x8, 0x719, 0x0, 0xff]}]}, @TCA_RSVP_POLICE={0x414, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x401, 0x8, 0x10, 0xa52, 0x8, 0x1e, 0x10, 0x61b8, 0x8, 0x8001, 0x0, 0x6, 0xbb, 0x9fe8, 0x8, 0x9, 0x3, 0x3, 0x488000, 0x5, 0x2, 0x8, 0xffff, 0x27, 0x7, 0x0, 0x4, 0x9, 0x5, 0xffffffff, 0x1, 0xa, 0x4c6, 0xd6f, 0x30000000, 0x9, 0x4, 0x7, 0x1, 0x3c, 0x3, 0x80, 0x8, 0xfffffffa, 0x1, 0xb31c, 0x1, 0xffffc3bd, 0xfffffffd, 0x8, 0x80000, 0x10, 0x1200000, 0x6, 0x6, 0x1, 0x3, 0x6, 0x14e, 0xf812, 0x2, 0x7, 0x30, 0x5, 0x100000, 0x400, 0x0, 0x1, 0xc9a, 0x2, 0x6, 0x5, 0x51, 0x8, 0x2, 0x4, 0xd, 0x6, 0xf, 0x10, 0xabd, 0xa5, 0x3, 0x12, 0x1, 0x0, 0x7fffffff, 0x0, 0x6983b2ed, 0x0, 0xd, 0x80000000, 0x1, 0xe4, 0x5, 0x9, 0xc, 0x4, 0xfffffffc, 0x7, 0x1, 0x0, 0x9, 0x1ab, 0xffffffff, 0x5, 0xb113, 0x8, 0x6, 0x7, 0x1, 0x7fff, 0x7, 0x4, 0xff, 0x6, 0x2, 0x0, 0x7ff, 0x401, 0x48a, 0x103, 0x9bc, 0x10001, 0x400, 0x1000, 0x1, 0xbf, 0x6, 0x7, 0x2, 0xff, 0x397, 0x6, 0x0, 0xe, 0x80000001, 0x2, 0x7, 0x0, 0xfffffff7, 0x2, 0x81, 0x8, 0x8, 0x7, 0x5, 0xcbf1, 0x8000, 0x2, 0x2, 0x9863, 0xffffffff, 0x7, 0xf1fb, 0x3, 0x2, 0x9, 0x8d2, 0x9, 0xe0000000, 0x0, 0x5, 0x40, 0xfffff001, 0x1, 0x4, 0xa, 0x6, 0x1, 0x7, 0x8, 0x7fff, 0x5, 0xe9a, 0x3, 0x6, 0x1, 0xffff8001, 0x4, 0x140000, 0x9, 0x2, 0x6, 0x7fff, 0x7, 0x9, 0x80000001, 0x0, 0x6, 0x0, 0xc4, 0x8, 0xa44, 0xfffffff6, 0xe2d8, 0x3, 0xe, 0x4, 0x5, 0x3, 0x8001, 0x2, 0x7, 0x1, 0x5, 0x7, 0x7, 0x3, 0x85a, 0x0, 0x1000, 0x2, 0x8, 0x3, 0x7f, 0x0, 0x5a, 0xc, 0x5, 0x6, 0x6ae4, 0x1ff, 0x4, 0x0, 0x9, 0x8, 0x0, 0x0, 0x7, 0xcee, 0x80000000, 0x1000, 0x5, 0x7, 0x6, 0x5b6, 0xffffffff, 0xa, 0x9, 0x9, 0x7, 0x0, 0x3, 0x7, 0x4, 0x6, 0xc2, 0x7d8, 0x5, 0x7, 0x880b, 0xb9, 0x80000000, 0x4, 0x2]}]}, @TCA_RSVP_ACT={0x554, 0x6, [@m_simple={0x124, 0xb, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, 'lo\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xfff, 0x7ff, 0x10000000, 0x5, 0x9}}, @TCA_DEF_DATA={0x16, 0x3, '/dev/snd/midiC#D#\x00'}, @TCA_DEF_DATA={0xf, 0x3, '<-+-:-:*@%\x00'}]}, {0xa8, 0x6, "85dc8d5cfe9f8a75025b6a749709b8e65723c796f6374c5e7a2eec77701d58f156fbd8835b6390018e77615c36c03ca41f712ee43ed2665cd99c62bf19cfd8b3e22b7cc9935c4f028bb7921ab8e3681f339b54dc4ee46b82bc4ff1d6a07582530e8ff861bce06d4b8b52abd16b7197e558150fed328e5beb5e083ec08f3443ebb4cfc985b5727b2fc71dbfcc794c64cfc9e4f62d9fdd3669e4b2b3274d02f03c2612069b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0x200, 0xd, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1000, 0x4, 0xf, 0x38, 0x7}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x3, 0xe407, 0x6146}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x3, 0x6, 0x0, 0x400}, 0x4, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x104ba0, 0x1, 0x3, 0xffff7fff, 0x1}, 0x4, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x8001, 0x3, 0x0, 0xf}, 0x4, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x6, 0x0, 0x10, 0x8c2}, 0x4, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xc0, 0x80000001, 0x8, 0x5, 0x8001}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x8, 0x1, 0x6, 0x9}, 0x4, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xff, 0x6, 0x7, 0x85074b5, 0x80000000}, 0x1, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x1d, 0x3, 0xfffffff4, 0xa}, 0x4, r7}}]}, {0x92, 0x6, "394abbd276080ee9ba03af407fdea363b60ba9b3c844c35785c922c46b64dcc1d3c39a1a117ca663d632cbc621b8faa9ddfcb751d469105cc5642aae731e752db93b7d013a35e0df9f367d9d37e746d93132b7f90ca489aae23d9ec8b93387fd285196bc7a933f8f09c9c87367d386e397eb78e8da2c2de2e8a910d7bb55e27c2a2ec994b580232b97cc8458c8cf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_xt={0x22c, 0xb, 0x0, 0x0, {{0x7}, {0x1c8, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x2d, 0x6, {0x71b7, 'nat\x00', 0xee, 0x9, "0f650a"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x52, 0x6, {0x800, 'raw\x00', 0xf1, 0xb9f1, "997578e7604e3063ab466b922ea65e77f33def2be0926224de91304261993df59e89153175c97854"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TARG={0x95, 0x6, {0x62, 'security\x00', 0x0, 0x6, "cc4bab8ededb4719cc4fe5719480fff4865411a8d4b72c1bdff3e7355adb524fb778eba30c22edc4194f77e6e246ec4e550244272fe1e109a3c00939de9bde753b8735ff0099fbb8c30252ad1780f2661e3af257cb205713808bb97a4bbd567918a6b4efcc112d849db7ea"}}, @TCA_IPT_INDEX={0x8}]}, {0x40, 0x6, "11cce74fbc4d28af5c93a3b7b8e8545c7b5152a3e71c6654d581e318e16ef93c6b66db8ba25ff9f65103da91e02b1778550e53c8cd48fb1fd574b9eb"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_RSVP_DST={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x41}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x9, 0x6, 0x9}, {0x8001, 0x5, 0xfff}, 0x2, 0x6, 0x3}}]}}, @f_rsvp={{0x9}, {0x898, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @private=0xa010100}, @TCA_RSVP_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_RSVP_POLICE={0x85c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x1f, 0x347, 0x2, 0x4, 0x9, 0x4, 0xffffffc0, 0x8, 0xfc48, 0x1, 0x800, 0x10, 0x4, 0x7, 0xd6a, 0x3, 0x4, 0xffffff34, 0x0, 0x80, 0x3, 0xf3, 0x3, 0x7, 0x6, 0x5, 0x80000000, 0x9, 0x1, 0x457830e5, 0x3, 0x4, 0x0, 0x8, 0xc7, 0x0, 0xffff, 0x10001, 0x3, 0x0, 0x9, 0x7, 0xff, 0x1, 0x8, 0x490, 0x2, 0x44, 0x525a585, 0x0, 0xfffffffb, 0x6482, 0x3, 0xfffffffb, 0x4, 0xffffff7f, 0xa02, 0x13e8, 0x1, 0x12, 0x6, 0x90, 0x0, 0x1, 0x0, 0x100, 0x7, 0x4, 0x3036, 0x200, 0x1, 0xffffffff, 0x1b, 0x8, 0x800, 0x400, 0x43f, 0x5, 0x0, 0x1, 0x6, 0x1, 0x7, 0x9, 0xfffffffa, 0x3, 0x8, 0x7, 0x1, 0x7, 0xbc8a, 0x7fff, 0xa8, 0x6, 0xd9d9, 0x8, 0x0, 0x5, 0x0, 0x7, 0xf, 0x5, 0xfa49, 0x2, 0xb1, 0xf346, 0x12c, 0x2, 0x2, 0x1, 0x8, 0x10000, 0x7, 0x1, 0x1, 0x1, 0x0, 0xc, 0x3, 0x600000, 0x1, 0x4, 0xffff0, 0x7, 0x5, 0xffffffff, 0x0, 0x8, 0x8, 0x400, 0xc, 0x1, 0x2, 0x4, 0x5, 0x8000, 0x8, 0x9, 0x6, 0xfffffff2, 0x2, 0x3, 0x3ff, 0x3, 0xc6e, 0x0, 0x2030, 0x2, 0x1, 0x61d5, 0x4, 0xc, 0xd, 0x7, 0x7e, 0x2, 0x6, 0x80000001, 0x2, 0x3, 0x2, 0x30000, 0x7, 0x6, 0x9, 0x40, 0x1, 0x8, 0x8000, 0xa, 0x100, 0x8, 0x8000, 0x7fff, 0x9, 0x6, 0x8, 0x64, 0xfffffff3, 0x8, 0xe66, 0x6, 0xc8, 0x9, 0x6, 0x4, 0xb, 0x450, 0x8, 0x3, 0x2, 0x3, 0x3800, 0x5, 0x3, 0x9, 0xdffa, 0x8, 0x7, 0x401, 0x800, 0xa27, 0xfffffff9, 0x8000, 0x9, 0x2, 0x400, 0xb8a6, 0x8, 0x820, 0x401, 0x451, 0x1, 0x1, 0x2, 0x2, 0x1, 0x3, 0x5, 0x7, 0xe81f, 0x9, 0x1c, 0x7fff, 0xbc2, 0x7, 0x1, 0xf64b, 0x80, 0x3, 0xba17, 0x1b, 0x0, 0x1, 0x7, 0xffff4de8, 0xd58c, 0x8, 0x6, 0xb0, 0xcd, 0x6, 0x6, 0x6, 0x5, 0x7ff, 0x9, 0x1, 0xe, 0xc, 0x6, 0x5c, 0x0, 0x4, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x8, 0x500, 0x6, 0xfffffff6, 0x65cc, 0x5, 0x2, 0x6, 0x8000, 0x8000, 0x7, 0x6, 0x1, 0xa6, 0x5, 0x0, 0x1000, 0x4, 0x0, 0x1, 0x40, 0x81, 0x9, 0x4, 0xc3, 0x9, 0xc, 0x9, 0x3, 0x40, 0x7fffffff, 0x8, 0x1, 0x745a, 0x9, 0x10001, 0x777, 0x6, 0x7, 0xb0b, 0x8, 0x101, 0x4, 0x1, 0x6, 0x100, 0xba8, 0x8, 0xe, 0x200, 0x8, 0x8, 0x5, 0x1, 0x7, 0xfffffe22, 0x5, 0x3, 0x4, 0xaa3, 0x7, 0x6, 0x9, 0x9, 0x48000, 0x5, 0xad0f, 0x5, 0x0, 0x3, 0x6, 0xc7d, 0x5, 0x4, 0x8, 0x42eb71c2, 0xfffffffc, 0x5d, 0x2, 0x3, 0x8, 0x8, 0x5, 0x7fffffff, 0x4, 0xb, 0xae45, 0x2, 0x800, 0x8, 0x1, 0x3, 0xa4c, 0x1b8e, 0x1ff, 0x1, 0x6, 0xff, 0x7, 0x7, 0x6, 0x1, 0x8, 0x3, 0x8, 0x200, 0x0, 0x3, 0x1, 0x80, 0x461, 0x8, 0xc00000, 0x5bf289, 0x5, 0x5cf, 0x7, 0x22b, 0x7, 0x8, 0x6, 0xf3, 0x9, 0x1000, 0x9, 0x10001, 0x4, 0x37b457e5, 0x3e80, 0x4, 0x6, 0x4, 0x4, 0x7, 0x7fffffff, 0x1, 0x300000, 0x4917, 0x0, 0x7, 0x9, 0x80, 0x100, 0x400, 0x8001, 0x80000000, 0x3, 0x71a20dbd, 0x5, 0x3, 0x5, 0x0, 0x1000, 0x6, 0x8, 0x3, 0x1, 0x7, 0x9, 0x9db, 0x2, 0x1, 0x10000, 0x1, 0xa8, 0x9, 0x4, 0x6, 0x4, 0x4, 0x6, 0xa16a, 0x8, 0x1000, 0x9, 0x9, 0x7, 0xffffffff, 0x7ff, 0x7, 0x800, 0x9, 0xb, 0x6, 0x7fffffff, 0xfb, 0x9, 0x6, 0xa, 0x9, 0xf, 0x15, 0x2, 0x1, 0x5, 0xd7, 0x100, 0x7, 0x8, 0x32d8, 0x3fdf608c, 0xfffffffd, 0x0, 0x6, 0x8, 0x4, 0x2, 0x13, 0x9f71, 0xa, 0xb, 0x0, 0x101, 0x1, 0x8, 0xa0, 0x80000000, 0x8, 0x8, 0x3, 0x80, 0xe, 0xff, 0x643c, 0x4, 0x80, 0xfffffff9, 0x10, 0x2a, 0x8, 0xc38, 0xfffffffe, 0x0, 0xef4, 0x5, 0x80000000, 0x40, 0x65b8, 0x8000, 0x7, 0x5, 0x8, 0x3, 0xee, 0x2, 0xb9, 0xb, 0x4, 0x4, 0xd93f, 0x5, 0x3, 0x2, 0x2, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6e0c, 0x2, 0x6, 0x0, 0x4, {0x29, 0x0, 0xb2a5, 0x5, 0xccd, 0xffff}, {0x6, 0x2, 0xfffd, 0x7, 0xfff9, 0x8}, 0x3, 0x3, 0x1}}]}, @TCA_RSVP_SRC={0x8, 0x3, @local}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x400, 0x6, 0x9}, {0xdd2, 0x1, 0x6}, 0x5e, 0x7, 0x6}}]}}]}, 0x38f0}, 0x1, 0x0, 0x0, 0x4010}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r11 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r12 = dup(r11) write$6lowpan_enable(r12, &(0x7f0000000000)='0', 0xfffffd2c) r13 = syz_io_uring_setup(0x6883, &(0x7f0000000740)={0x0, 0x101828, 0x10100, 0x3, 0x0, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r14, r15, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r13, 0x2deb, 0x5f8b, 0x6, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r16 = userfaultfd(0x1) ioctl$UFFDIO_API(r16, 0xc018aa3f, &(0x7f00000000c0)) readv(r16, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 423.775388ms ago: executing program 3 (id=5946): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000400)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100001f, 0x38011, r2, 0x0) syz_io_uring_setup(0x2fad, &(0x7f0000001fc0)={0x0, 0x820e06d, 0x1000, 0x2, 0x113}, &(0x7f0000002040), &(0x7f0000002080)) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000900)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="c21504239e1d0700", 0x8}], 0x2, &(0x7f0000001a00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)="e4c882c9bbf7db69e33fe19002ec62d04e943f2945546fb50b605ae5ddd6c7a32a1aa8b2c211dcf518ca963f22847cb529ed80d2c17d953959f5750d173403e6c826f221f985e18d9a616a0757f05645db6e91a5662b5e569033e3616dd98506b923994f2dbf9e4f83b85a2b468d520f0c2480ceafddbdb59d16a11ed29b8e5e6f2be02a5faff7766cf40cd72d25ef231ed351448ba2149faf4796b761b266bd42a429e4a7577ff711f0d177321b9ae6592d2bb4016f9d347a196400e3b3c07c60e6ee9c4b69ec6d599d21", 0xcb}, {&(0x7f0000000280)}, {&(0x7f0000000540)="6f70490d1c52af464bc93fca3116393a69a543f135946b43433c92ff86e6570c4a32d413cb8f62e207651664d1ebb36e5ca7db3cec662672c81979987a99472766a50b56913155a6495f90fdde1ad7a40e4a8ce8772dba5223c7eff865225e3ca33020dc04f1887dbd375c90ccc4662334de1d8e353bd17e5f23f68d713b998baeddc638dfcf0178f43a32ba7f46983b96e0d85ca4bffbab5ff437808d5043529563e45a4eece8b505eb2d5077137bb11c42e8c3c438c38385b3e4ced3435afecc86a7389486cd83a1d9a4d940033d6994dbb7e4bbed", 0xd6}, {&(0x7f0000000340)="8986682a733b35641579206b7db848a6ae848772ff67c0431f1880aa1c01816451084276741ac8f4ac0a75f5136af9fe891e0a50dacf6fff38d8e93bc8fa8468ee7527aefa9802f66081add47575fb45309f634e1a2581529fa2891f2ce948c0dd2cba8eeb9466306e84d154b7fd65944c952fc1671a1ae9e43a44b086a762bd7d6377c5040cf99e932c1a", 0x8b}, {&(0x7f00000006c0)="c1aa131e35d3d3b404a2ce8e766d37d5eaea97bc624af05eb551f37c6c11ed96fdc5ec75069a96bb673a8b9a7cd6f5701f4b90c89129ab26c29b45d84ec999ccd3d884e35a9e61a287dd3778840a9682a016b752ea921b3c605974c1e0d4b4093bb6a04dca28006e0fff3c23dbb2aeeacd665599203a27f2d9b5fec7243d580f6a84d42176c3df547da5192baade657a479a9a", 0x93}], 0x5, &(0x7f0000000800)=[@assoc={0x18, 0x117, 0x4, 0x244}, @iv={0xd0, 0x117, 0x2, 0xb8, "98b75997c2a83d378505823dd256b641ccfb97401aadcc4a02d35e6f76273ab257739522a2f1975e81fd507e25bcf4e4676f4043808f6987721c76a3ad4be662f3f7cdb2dd00f69be91ff86e5067b80e9342cb692e3e8a8b33f1569660cdf22cfd47958eff3f769fe28462aeee1cdbfe3d13a41b2ae0fe3676e25906cf19dd4f01fb8e4dfe5eba5d2d3069d3385f5e163f85efa0e1be220c46e22bad2b9bba7fdc8da7ab004f340d272d4f7c83ebef9bc87d487cfd9d45b7"}], 0xe8, 0x20000800}], 0x2, 0x0) r4 = syz_io_uring_setup(0x9f, &(0x7f0000000980)={0x0, 0x4000ec25, 0x0, 0x1, 0x25d}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r6, 0x11, 0x0, &(0x7f0000000280), 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 322.85365ms ago: executing program 3 (id=5947): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x40000) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1000, 0x4, &(0x7f0000006680)) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7fdce0140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$getownex(r4, 0x10, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r6 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x3c, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x7f}}, @TCA_INGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x756}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000300000000000000000000000c400c0e0ffff070095"], &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r6) 213.995667ms ago: executing program 6 (id=5948): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) readv(r2, &(0x7f0000000000), 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES16=r3, @ANYRES8=r3, @ANYRES64=r2, @ANYRESDEC, @ANYRES32=r1, @ANYRES64=r1, @ANYRES8=r4, @ANYRES32, @ANYRES16=r2, @ANYRES64=r3]) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) 211.661793ms ago: executing program 4 (id=5949): listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)=""/6, 0x0) unshare(0x64050200) r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x7ff, 0x2) ppoll(&(0x7f0000000040)=[{r0, 0x5}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x40}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, 0x0, 0x0, 0x0}}) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) 37.028407ms ago: executing program 6 (id=5950): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x10182a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2deb, 0x5f8b, 0x6, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'ip6tnl0\x00', 0x1120}) socket(0x400000000010, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000740)="565a92bd2ad96a4bc82a5362d1118459ca31", 0x12, 0x2000c0c0, &(0x7f0000000000)={0x11, 0x17, r8, 0x1, 0x1, 0x6, @random="265d9f2aae87"}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) r10 = syz_open_dev$vbi(0x0, 0x2, 0x2) ioctl$VIDIOC_G_STD(r10, 0x80085617, &(0x7f0000000080)) listen(0xffffffffffffffff, 0xfffffffc) socket$pppl2tp(0x18, 0x1, 0x1) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d0009058a"], 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x10, 0x6, 0x1568, 0xd0, 0x13c8, 0x11d0, 0x11d0, 0x12a0, 0x1498, 0x1498, 0x1498, 0x1498, 0x1498, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffffff], 'pim6reg\x00', 'sit0\x00', {}, {0xff}}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x1, './cgroup.cpu/syz0\x00', 0x40, {0x9faf}}}]}, @HL={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x7f8000ff, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffff00, 0xff000000, 0xffff00], 'wlan1\x00', 'macvtap0\x00', {}, {0xff}, 0x88, 0xb, 0x1, 0x4}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff000000, 0xffffff00], 'veth1_to_batadv\x00', 'geneve0\x00', {}, {}, 0x73, 0xe, 0x6, 0x58}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x3b, 0xe, 0x0, 0xb5, 0x8, 0x280d}}, @common=@ipv6header={{0x28}, {0x30, 0x33}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x15c8) 0s ago: executing program 0 (id=5951): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008f"]) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/sysvipc/msg\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000009c0)=0x80000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029b970000400000007000000000001000400000008000300", @ANYRES32=r6, @ANYBLOB="0505000000004000"], 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) r14 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r14, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_udp_int(r14, 0x11, 0x68, &(0x7f0000000080)=0x1, 0x4) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000a00)='wg1\x00', 0x4) ioctl$KVM_RUN(r13, 0xae80, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="84000000", @ANYRES16=r9, @ANYBLOB="050025bd7000fedbdf250600000008000300", @ANYRES32=r10, @ANYBLOB="080005000600000010001780040006000400010004000500280017800400050004000500040005000400060004000200040015000400020004000200040004000a00e80008021100000100001c00e7"], 0x84}, 0x1, 0x0, 0x0, 0x40048}, 0x24004800) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="00000080", @ANYRES16=r7, @ANYBLOB="200227bd7000fedbdf255e00000008000300", @ANYRES32=r10, @ANYBLOB="08009f0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000045) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r16, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYRES64=r15, @ANYRES16=r17, @ANYBLOB="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", @ANYRES32, @ANYBLOB="140002006272696467655f736c617665", @ANYRES32=r17], 0x80c}, 0x1, 0x0, 0x0, 0x20044044}, 0x20000000) kernel console output (not intermixed with test programs): 755][T11686] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1419.066489][T11686] usb 7-1: Using ep0 maxpacket: 32 [ 1419.075356][T26330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1419.200043][T11686] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1419.411680][T11686] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1419.539382][T11686] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.561965][T11686] usb 7-1: Product: syz [ 1419.568252][T11686] usb 7-1: Manufacturer: syz [ 1419.580327][T11686] usb 7-1: SerialNumber: syz [ 1419.623022][T11686] usb 7-1: config 0 descriptor?? [ 1419.766473][T11682] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1419.980902][T26348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5584'. [ 1420.016429][T11682] usb 4-1: Using ep0 maxpacket: 16 [ 1420.052215][T26348] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5584'. [ 1420.692122][T26371] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5590'. [ 1420.706664][T11686] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1420.730801][T26368] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5590'. [ 1420.879381][T11686] usb 1-1: config 0 has no interfaces? [ 1420.890202][T11686] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1420.912422][T11686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.945049][T11686] usb 1-1: Product: syz [ 1420.962471][T11686] usb 1-1: Manufacturer: syz [ 1420.987406][T11686] usb 1-1: SerialNumber: syz [ 1421.063008][T11686] usb 1-1: config 0 descriptor?? [ 1421.325595][T11695] usb 7-1: USB disconnect, device number 5 [ 1421.900863][T26397] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5602'. [ 1421.953711][T26397] tun0: tun_chr_ioctl cmd 1074025675 [ 1421.959503][T26397] tun0: persist enabled [ 1421.964526][T26397] tun0: tun_chr_ioctl cmd 1074025675 [ 1421.973664][T26397] tun0: persist enabled [ 1422.644828][T11682] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1422.656141][T11686] usb 6-1: new full-speed USB device number 90 using dummy_hcd [ 1422.690069][T11682] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1422.714343][T11682] usb 4-1: can't read configurations, error -71 [ 1422.789597][T26419] bridge_slave_0: left allmulticast mode [ 1422.812253][T26419] bridge_slave_0: left promiscuous mode [ 1422.830534][T26419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.848597][T11686] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1422.853447][T26419] bridge_slave_1: left allmulticast mode [ 1422.864732][T11686] usb 6-1: config 0 has no interface number 0 [ 1422.872219][T11686] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1422.882433][T11686] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.882458][T26419] bridge_slave_1: left promiscuous mode [ 1422.903519][T11686] usb 6-1: config 0 descriptor?? [ 1422.924355][T26419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.933842][T11686] usb 6-1: selecting invalid altsetting 1 [ 1422.950650][T11686] dvb_ttusb_budget: ttusb_init_controller: error [ 1422.957881][T11686] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1422.998709][T26419] bond0: (slave bond_slave_0): Releasing backup interface [ 1423.062620][T26419] bond0: (slave bond_slave_1): Releasing backup interface [ 1423.094544][T26419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1423.111030][T26419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1423.111293][T11686] DVB: Unable to find symbol cx22700_attach() [ 1423.142027][T26419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1423.152041][T26419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1423.170833][T26419] bond1: (slave gretap1): Releasing backup interface [ 1423.189044][T26419] bond3: (slave geneve2): Releasing backup interface [ 1423.300213][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.307059][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.333979][T11686] DVB: Unable to find symbol tda10046_attach() [ 1423.366058][T11686] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1423.401196][T11686] usb 6-1: USB disconnect, device number 90 [ 1423.401254][ T48] usb 1-1: USB disconnect, device number 82 [ 1423.450353][T26428] usb usb8: usbfs: process 26428 (syz.6.5609) did not claim interface 0 before use [ 1423.737044][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1423.796390][T11682] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1423.918009][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1423.966508][T11682] usb 4-1: Using ep0 maxpacket: 16 [ 1424.054316][T11682] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1424.085226][T26445] usb usb8: usbfs: process 26445 (syz.4.5615) did not claim interface 0 before use [ 1424.133309][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1424.175557][T11682] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1424.205083][ T10] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1424.234243][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.263695][T11682] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1424.298054][ T10] usb 7-1: Product: syz [ 1424.317277][ T10] usb 7-1: Manufacturer: syz [ 1424.323344][T11682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.356451][T11701] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1424.367508][ T10] usb 7-1: SerialNumber: syz [ 1424.403673][ T10] usb 7-1: config 0 descriptor?? [ 1424.444825][T11682] usb 4-1: config 0 descriptor?? [ 1424.516439][T11701] usb 5-1: Using ep0 maxpacket: 32 [ 1424.539167][T11701] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1424.541224][T11682] pxrc 4-1:0.0: Could not find endpoint [ 1424.570296][T11701] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1424.580541][T11701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.612206][T26450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5618'. [ 1424.624564][T11701] usb 5-1: Product: syz [ 1424.630772][T11682] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1424.654407][T11701] usb 5-1: Manufacturer: syz [ 1424.686078][T11701] usb 5-1: SerialNumber: syz [ 1424.727948][T26450] tun1: tun_chr_ioctl cmd 1074025675 [ 1424.731070][T11701] usb 5-1: config 0 descriptor?? [ 1424.804133][T26450] tun1: persist enabled [ 1424.823889][T26450] tun1: tun_chr_ioctl cmd 1074025675 [ 1424.852171][T26450] tun1: persist enabled [ 1424.993032][T26458] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5619'. [ 1425.093630][T26458] tun2: tun_chr_ioctl cmd 1074025675 [ 1425.143895][T26458] tun2: persist enabled [ 1425.182241][T26458] tun2: tun_chr_ioctl cmd 1074025675 [ 1425.211599][T26458] tun2: persist enabled [ 1425.815249][T11701] usb 4-1: USB disconnect, device number 91 [ 1426.115449][T11682] usb 7-1: USB disconnect, device number 6 [ 1426.381118][ T10] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1426.583664][ T10] usb 1-1: config 0 has no interfaces? [ 1426.605007][ T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1426.629045][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.653155][ T10] usb 1-1: Product: syz [ 1426.666731][ T10] usb 1-1: Manufacturer: syz [ 1426.681800][ T10] usb 1-1: SerialNumber: syz [ 1426.708117][ T10] usb 1-1: config 0 descriptor?? [ 1426.885535][T26497] FAULT_INJECTION: forcing a failure. [ 1426.885535][T26497] name failslab, interval 1, probability 0, space 0, times 0 [ 1426.910226][T11701] usb 5-1: USB disconnect, device number 50 [ 1427.032040][T26497] CPU: 1 UID: 0 PID: 26497 Comm: syz.3.5627 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 1427.032070][T26497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1427.032082][T26497] Call Trace: [ 1427.032091][T26497] [ 1427.032100][T26497] dump_stack_lvl+0x189/0x250 [ 1427.032139][T26497] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1427.032166][T26497] ? __pfx__printk+0x10/0x10 [ 1427.032194][T26497] ? __pfx___might_resched+0x10/0x10 [ 1427.032212][T26497] ? fs_reclaim_acquire+0x7d/0x100 [ 1427.032246][T26497] should_fail_ex+0x414/0x560 [ 1427.032274][T26497] should_failslab+0xa8/0x100 [ 1427.032303][T26497] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1427.032326][T26497] ? vm_area_alloc+0x24/0x140 [ 1427.032360][T26497] vm_area_alloc+0x24/0x140 [ 1427.032390][T26497] mmap_region+0xcf4/0x1e50 [ 1427.032429][T26497] ? __pfx_mmap_region+0x10/0x10 [ 1427.032524][T26497] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 1427.032563][T26497] ? cap_mmap_addr+0xb0/0x100 [ 1427.032584][T26497] ? bpf_lsm_mmap_addr+0x9/0x20 [ 1427.032607][T26497] ? security_mmap_addr+0x71/0x270 [ 1427.032629][T26497] ? shmem_mapping+0xd/0x50 [ 1427.032647][T26497] ? memfd_check_seals_mmap+0xc5/0x200 [ 1427.032670][T26497] do_mmap+0xc68/0x1100 [ 1427.032709][T26497] ? __pfx_do_mmap+0x10/0x10 [ 1427.032730][T26497] ? down_write_killable+0x178/0x230 [ 1427.032759][T26497] ? end_current_label_crit_section+0x152/0x180 [ 1427.032785][T26497] ? __pfx_down_write_killable+0x10/0x10 [ 1427.032823][T26497] vm_mmap_pgoff+0x31b/0x4c0 [ 1427.032856][T26497] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1427.032889][T26497] ? __fget_files+0x2a/0x420 [ 1427.032919][T26497] ? __fget_files+0x2a/0x420 [ 1427.032944][T26497] ? __fget_files+0x2a/0x420 [ 1427.032975][T26497] ksys_mmap_pgoff+0x51f/0x760 [ 1427.033010][T26497] do_syscall_64+0xf6/0x210 [ 1427.033035][T26497] ? clear_bhb_loop+0x60/0xb0 [ 1427.033060][T26497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.033078][T26497] RIP: 0033:0x7f2df178e969 [ 1427.033096][T26497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1427.033112][T26497] RSP: 002b:00007f2df2697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1427.033134][T26497] RAX: ffffffffffffffda RBX: 00007f2df19b6080 RCX: 00007f2df178e969 [ 1427.033149][T26497] RDX: 000000000280000b RSI: 0000000000003000 RDI: 0000200000ffa000 [ 1427.033163][T26497] RBP: 00007f2df2697090 R08: 0000000000000005 R09: 0000000000000000 [ 1427.033176][T26497] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 1427.033189][T26497] R13: 0000000000000001 R14: 00007f2df19b6080 R15: 00007f2df1adfa28 [ 1427.033222][T26497] [ 1427.776474][ T10] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1427.951545][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1427.994521][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1428.016342][ T10] usb 4-1: config 0 has no interfaces? [ 1428.079411][ T10] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1428.110619][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.140663][ T10] usb 4-1: Product: syz [ 1428.153707][ T10] usb 4-1: Manufacturer: syz [ 1428.162661][ T10] usb 4-1: SerialNumber: syz [ 1428.197576][ T10] usb 4-1: config 0 descriptor?? [ 1428.409097][T26527] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5634'. [ 1428.558149][T26527] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.566083][T26527] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.085648][T11686] usb 1-1: USB disconnect, device number 83 [ 1429.526528][T11686] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1429.657846][T11695] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1429.728231][T11686] usb 1-1: Using ep0 maxpacket: 16 [ 1429.787291][T11686] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1429.797254][T11686] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1429.827872][T11686] usb 1-1: Product: syz [ 1429.856502][T11695] usb 6-1: Using ep0 maxpacket: 16 [ 1429.862801][T11686] usb 1-1: Manufacturer: syz [ 1429.880958][T11695] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1429.906060][T11695] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1429.926621][T11686] usb 1-1: SerialNumber: syz [ 1429.965891][T11686] usb 1-1: config 0 descriptor?? [ 1430.006393][T11695] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.034331][T11695] usb 6-1: config 0 descriptor?? [ 1430.052490][T11695] pxrc 6-1:0.0: Could not find endpoint [ 1430.120319][T11695] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1430.466759][T22882] Bluetooth: hci3: command 0x0406 tx timeout [ 1431.270895][T11695] usb 4-1: USB disconnect, device number 92 [ 1431.750985][T26574] FAULT_INJECTION: forcing a failure. [ 1431.750985][T26574] name failslab, interval 1, probability 0, space 0, times 0 [ 1431.765301][T11701] usb 6-1: USB disconnect, device number 91 [ 1431.836500][T11695] usb 1-1: USB disconnect, device number 84 [ 1431.874561][T26574] CPU: 0 UID: 0 PID: 26574 Comm: syz.6.5641 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 1431.874591][T26574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1431.874603][T26574] Call Trace: [ 1431.874612][T26574] [ 1431.874620][T26574] dump_stack_lvl+0x189/0x250 [ 1431.874666][T26574] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1431.874694][T26574] ? __pfx__printk+0x10/0x10 [ 1431.874721][T26574] ? __pfx___might_resched+0x10/0x10 [ 1431.874740][T26574] ? fs_reclaim_acquire+0x7d/0x100 [ 1431.874774][T26574] should_fail_ex+0x414/0x560 [ 1431.874802][T26574] should_failslab+0xa8/0x100 [ 1431.874831][T26574] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1431.874857][T26574] ? __alloc_skb+0x112/0x2d0 [ 1431.874887][T26574] __alloc_skb+0x112/0x2d0 [ 1431.874916][T26574] netlink_ack+0x146/0xa50 [ 1431.874937][T26574] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1431.874965][T26574] ? ref_tracker_free+0x63a/0x7d0 [ 1431.874985][T26574] ? __copy_skb_header+0xa7/0x550 [ 1431.875023][T26574] netlink_rcv_skb+0x2a0/0x490 [ 1431.875048][T26574] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1431.875073][T26574] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1431.875117][T26574] ? netlink_deliver_tap+0x2e/0x1b0 [ 1431.875138][T26574] ? netlink_deliver_tap+0x2e/0x1b0 [ 1431.875167][T26574] netlink_unicast+0x75b/0x8d0 [ 1431.875198][T26574] netlink_sendmsg+0x805/0xb30 [ 1431.875230][T26574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1431.875257][T26574] ? aa_sock_msg_perm+0x94/0x160 [ 1431.875282][T26574] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1431.875303][T26574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1431.875327][T26574] __sock_sendmsg+0x21c/0x270 [ 1431.875352][T26574] ____sys_sendmsg+0x505/0x830 [ 1431.875384][T26574] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1431.875421][T26574] ? import_iovec+0x74/0xa0 [ 1431.875451][T26574] ___sys_sendmsg+0x21f/0x2a0 [ 1431.875477][T26574] ? __pfx____sys_sendmsg+0x10/0x10 [ 1431.875547][T26574] ? __fget_files+0x2a/0x420 [ 1431.875571][T26574] ? __fget_files+0x3a0/0x420 [ 1431.875605][T26574] __x64_sys_sendmsg+0x19b/0x260 [ 1431.875636][T26574] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1431.875695][T26574] ? do_syscall_64+0xba/0x210 [ 1431.875726][T26574] do_syscall_64+0xf6/0x210 [ 1431.875753][T26574] ? clear_bhb_loop+0x60/0xb0 [ 1431.875778][T26574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1431.875797][T26574] RIP: 0033:0x7f251938e969 [ 1431.875816][T26574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1431.875834][T26574] RSP: 002b:00007f25171f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1431.875857][T26574] RAX: ffffffffffffffda RBX: 00007f25195b5fa0 RCX: 00007f251938e969 [ 1431.875872][T26574] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1431.875885][T26574] RBP: 00007f25171f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1431.875898][T26574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1431.875909][T26574] R13: 0000000000000000 R14: 00007f25195b5fa0 R15: 00007f25196dfa28 [ 1431.875942][T26574] [ 1432.370438][T22882] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1432.384801][T22882] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1432.395818][T22882] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1432.448193][T22882] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1432.459698][T22882] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1433.010179][ T1142] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1433.042259][ T1142] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.325721][ T1142] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1433.372701][ T1142] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.524534][T26595] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1433.805472][ T1142] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1433.839067][ T1142] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.871226][ T6201] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1433.895730][ T6201] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1433.905213][T11695] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1434.510353][ T30] audit: type=1800 audit(1748291571.410:1597): pid=26622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5648" name="SYSV00000000" dev="tmpfs" ino=6 res=0 errno=0 [ 1434.617524][ T48] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1434.625603][T13095] Bluetooth: hci4: command tx timeout [ 1434.647542][ T1142] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1434.661520][ T1142] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.811694][ T48] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1435.246523][T11695] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1435.646109][T11695] usb 7-1: config 0 has no interfaces? [ 1435.878953][T11695] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1435.911325][T11695] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.955983][T11695] usb 7-1: Product: syz [ 1435.998911][T11695] usb 7-1: Manufacturer: syz [ 1436.026419][T11695] usb 7-1: SerialNumber: syz [ 1436.058889][T11695] usb 7-1: config 0 descriptor?? [ 1436.696771][T13095] Bluetooth: hci4: command tx timeout [ 1437.276391][T11695] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1437.460903][T11695] usb 1-1: Using ep0 maxpacket: 16 [ 1437.476002][T11695] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1437.528994][T11695] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1437.542133][T11695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.563629][T11695] usb 1-1: config 0 descriptor?? [ 1437.589051][T11695] pxrc 1-1:0.0: Could not find endpoint [ 1437.599828][T11695] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1437.958784][T11695] usb 7-1: USB disconnect, device number 7 [ 1437.976523][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1438.249774][T11695] usb 1-1: USB disconnect, device number 85 [ 1438.322123][ T1142] bond0 (unregistering): Released all slaves [ 1438.505139][ T1142] bond1 (unregistering): Released all slaves [ 1438.749065][ T1142] bond2 (unregistering): Released all slaves [ 1438.782701][T13095] Bluetooth: hci4: command tx timeout [ 1439.167502][ T1142] bond3 (unregistering): Released all slaves [ 1439.306215][T26677] FAULT_INJECTION: forcing a failure. [ 1439.306215][T26677] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1439.322259][T26677] CPU: 0 UID: 0 PID: 26677 Comm: syz.0.5662 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 1439.322285][T26677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1439.322296][T26677] Call Trace: [ 1439.322303][T26677] [ 1439.322312][T26677] dump_stack_lvl+0x189/0x250 [ 1439.322346][T26677] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1439.322370][T26677] ? __pfx__printk+0x10/0x10 [ 1439.322389][T26677] ? fs_reclaim_acquire+0x7d/0x100 [ 1439.322423][T26677] should_fail_ex+0x414/0x560 [ 1439.322448][T26677] prepare_alloc_pages+0x213/0x610 [ 1439.322482][T26677] __alloc_frozen_pages_noprof+0x123/0x370 [ 1439.322504][T26677] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1439.322562][T26677] alloc_pages_mpol+0x232/0x4a0 [ 1439.322591][T26677] alloc_pages_noprof+0xa9/0x190 [ 1439.322616][T26677] pte_alloc_one+0x1e/0x160 [ 1439.322639][T26677] __pte_alloc+0x25/0x160 [ 1439.322669][T26677] __handle_mm_fault+0x49e9/0x5380 [ 1439.322690][T26677] ? mt_find+0x15c/0x5f0 [ 1439.322731][T26677] ? __pfx___handle_mm_fault+0x10/0x10 [ 1439.322771][T26677] ? find_vma+0xe7/0x160 [ 1439.322799][T26677] ? __pfx_find_vma+0x10/0x10 [ 1439.322824][T26677] handle_mm_fault+0x3f6/0x8c0 [ 1439.322857][T26677] do_user_addr_fault+0x764/0x1390 [ 1439.322894][T26677] exc_page_fault+0x68/0x110 [ 1439.322918][T26677] asm_exc_page_fault+0x26/0x30 [ 1439.322934][T26677] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 1439.322953][T26677] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 1439.322967][T26677] RSP: 0018:ffffc9000b64fcc8 EFLAGS: 00050216 [ 1439.322985][T26677] RAX: 0000000000000006 RBX: 0000000000000030 RCX: 0000000000000030 [ 1439.322997][T26677] RDX: 0000000000000000 RSI: ffffc9000b64fe40 RDI: 00002000000000c0 [ 1439.323010][T26677] RBP: ffffc9000b64fef0 R08: ffffc9000b64fe6f R09: 1ffff920016c9fcd [ 1439.323022][T26677] R10: dffffc0000000000 R11: fffff520016c9fce R12: 00002000000000f0 [ 1439.323035][T26677] R13: 00007ffffffff000 R14: ffffc9000b64fe40 R15: 00002000000000c0 [ 1439.323068][T26677] _copy_to_user+0x8a/0xb0 [ 1439.323096][T26677] __se_sys_shmctl+0x320/0x3e0 [ 1439.323121][T26677] ? __pfx___se_sys_shmctl+0x10/0x10 [ 1439.323169][T26677] ? __fget_files+0x3a0/0x420 [ 1439.323200][T26677] ? fput+0xa0/0xd0 [ 1439.323217][T26677] ? ksys_write+0x1f0/0x250 [ 1439.323249][T26677] ? do_syscall_64+0xba/0x210 [ 1439.323275][T26677] do_syscall_64+0xf6/0x210 [ 1439.323297][T26677] ? clear_bhb_loop+0x60/0xb0 [ 1439.323319][T26677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.323335][T26677] RIP: 0033:0x7f9fc0b8e969 [ 1439.323353][T26677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1439.323367][T26677] RSP: 002b:00007f9fbe9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000001f [ 1439.323384][T26677] RAX: ffffffffffffffda RBX: 00007f9fc0db5fa0 RCX: 00007f9fc0b8e969 [ 1439.323397][T26677] RDX: 00002000000000c0 RSI: 000000000000000e RDI: 0000000000000000 [ 1439.323408][T26677] RBP: 00007f9fbe9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1439.323425][T26677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1439.323436][T26677] R13: 0000000000000001 R14: 00007f9fc0db5fa0 R15: 00007f9fc0edfa28 [ 1439.323467][T26677] [ 1439.758516][ T1142] bond4 (unregistering): Released all slaves [ 1439.942233][ T1142] bond5 (unregistering): Released all slaves [ 1440.113642][ T1142] bond6 (unregistering): Released all slaves [ 1440.249405][T26685] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1440.313809][T26685] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1440.395054][T26688] FAULT_INJECTION: forcing a failure. [ 1440.395054][T26688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1440.412657][T26586] chnl_net:caif_netlink_parms(): no params data found [ 1440.431452][T26688] CPU: 1 UID: 0 PID: 26688 Comm: syz.0.5665 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 1440.431483][T26688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1440.431495][T26688] Call Trace: [ 1440.431504][T26688] [ 1440.431513][T26688] dump_stack_lvl+0x189/0x250 [ 1440.431551][T26688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1440.431578][T26688] ? __pfx__printk+0x10/0x10 [ 1440.431614][T26688] should_fail_ex+0x414/0x560 [ 1440.431641][T26688] _copy_to_user+0x31/0xb0 [ 1440.431671][T26688] __se_sys_msgctl+0x1c5/0x350 [ 1440.431698][T26688] ? __pfx___se_sys_msgctl+0x10/0x10 [ 1440.431736][T26688] ? ksys_write+0x1f0/0x250 [ 1440.431758][T26688] ? rcu_is_watching+0x15/0xb0 [ 1440.431796][T26688] ? do_syscall_64+0xba/0x210 [ 1440.431827][T26688] do_syscall_64+0xf6/0x210 [ 1440.431853][T26688] ? clear_bhb_loop+0x60/0xb0 [ 1440.431879][T26688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.431898][T26688] RIP: 0033:0x7f9fc0b8e969 [ 1440.431917][T26688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1440.431932][T26688] RSP: 002b:00007f9fbe9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 1440.431953][T26688] RAX: ffffffffffffffda RBX: 00007f9fc0db5fa0 RCX: 00007f9fc0b8e969 [ 1440.431967][T26688] RDX: 0000200000000240 RSI: 0000000000000002 RDI: 0000000000000000 [ 1440.431980][T26688] RBP: 00007f9fbe9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1440.431992][T26688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1440.432003][T26688] R13: 0000000000000000 R14: 00007f9fc0db5fa0 R15: 00007f9fc0edfa28 [ 1440.432033][T26688] [ 1440.721138][ T1142] tipc: Left network mode [ 1440.866738][T13095] Bluetooth: hci4: command tx timeout [ 1440.879247][T26586] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.912313][T26586] bridge0: port 1(bridge_slave_0) entered disabled state [ 1440.962580][T26586] bridge_slave_0: entered allmulticast mode [ 1441.017643][T26586] bridge_slave_0: entered promiscuous mode [ 1441.209749][T26586] bridge0: port 2(bridge_slave_1) entered blocking state [ 1441.233172][T26586] bridge0: port 2(bridge_slave_1) entered disabled state [ 1441.262690][T26586] bridge_slave_1: entered allmulticast mode [ 1441.271465][T26586] bridge_slave_1: entered promiscuous mode [ 1441.366369][T11701] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1441.421389][T26708] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5667'. [ 1441.546888][T11701] usb 1-1: Using ep0 maxpacket: 16 [ 1441.579376][T11701] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1441.595701][T11701] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1441.817461][T11701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.834695][T11701] usb 1-1: config 0 descriptor?? [ 1441.844156][T11701] pxrc 1-1:0.0: Could not find endpoint [ 1441.867338][T11701] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1441.972779][T26586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1442.417713][T26586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1442.633913][T11682] usb 1-1: USB disconnect, device number 86 [ 1442.791865][T26586] team0: Port device team_slave_0 added [ 1442.996212][T26586] team0: Port device team_slave_1 added [ 1443.183624][ T1142] hsr_slave_0: left promiscuous mode [ 1443.215407][ T1142] hsr_slave_1: left promiscuous mode [ 1443.281225][ T1142] veth1_vlan: left promiscuous mode [ 1443.304599][ T1142] veth0_vlan: left promiscuous mode [ 1443.414314][T26757] fuse: Unknown parameter '.' [ 1443.457485][T26757] netlink: 'syz.3.5679': attribute type 11 has an invalid length. [ 1445.245675][T26586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1445.286861][T26586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1445.313197][ C1] vkms_vblank_simulate: vblank timer overrun [ 1445.356366][T26586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1445.441493][T26586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1445.448643][T26586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1445.479462][T26586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1445.606576][T26789] fuse: Bad value for 'group_id' [ 1445.621617][T26789] fuse: Bad value for 'group_id' [ 1445.721300][T26586] hsr_slave_0: entered promiscuous mode [ 1445.739651][T26586] hsr_slave_1: entered promiscuous mode [ 1445.756721][T11695] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1445.813778][T26586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1445.848333][T26586] Cannot create hsr debugfs directory [ 1445.915710][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1446.128925][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1446.145794][ T10] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1446.155409][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.174792][ T10] usb 7-1: Product: syz [ 1446.201272][ T10] usb 7-1: Manufacturer: syz [ 1446.204351][T11695] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1446.223198][T11695] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1446.239692][ T10] usb 7-1: SerialNumber: syz [ 1446.296545][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1446.297732][ T10] usb 7-1: config 0 descriptor?? [ 1446.388395][T11695] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1446.521533][T11695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.547895][T26789] fuse: Bad value for 'fd' [ 1446.553250][T26789] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5685'. [ 1446.809133][T11695] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1446.816782][ T48] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1446.819346][ T10] usb 7-1: USB disconnect, device number 8 [ 1446.850211][T26791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1446.860428][T26791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1446.881592][T11701] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1447.039283][ T48] usb 6-1: Using ep0 maxpacket: 16 [ 1447.063813][ T48] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1447.074503][T11701] usb 4-1: Using ep0 maxpacket: 32 [ 1447.080220][ T48] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1447.099274][T11701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1447.115204][T11701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1447.131468][T11695] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1447.172357][ T48] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1447.210084][T11701] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1447.241614][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.264647][T11701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.307611][ T48] usb 6-1: config 0 descriptor?? [ 1447.338295][ T48] pxrc 6-1:0.0: Could not find endpoint [ 1447.347332][T11701] usb 4-1: config 0 descriptor?? [ 1447.367503][T11701] hub 4-1:0.0: USB hub found [ 1447.383495][ T48] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1447.565161][T11701] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1447.757489][T26586] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1447.801579][T26586] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1447.852281][T11701] usbhid 4-1:0.0: can't add hid device: -71 [ 1447.870731][T11701] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1447.887236][T26586] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1447.949565][T11701] usb 4-1: USB disconnect, device number 93 [ 1447.959239][T26586] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1448.484546][T26586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1448.506880][ T10] usb 1-1: USB disconnect, device number 87 [ 1448.609907][T26586] 8021q: adding VLAN 0 to HW filter on device team0 [ 1448.667930][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1448.675148][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1448.845183][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1448.852610][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1448.906132][ T3076] usb 6-1: USB disconnect, device number 92 [ 1449.056886][T11695] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1449.236418][T11695] usb 1-1: Using ep0 maxpacket: 16 [ 1449.274834][T26586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1449.381251][T26836] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1449.405143][T26836] netlink: 208 bytes leftover after parsing attributes in process `syz.0.5691'. [ 1449.428287][T26849] netlink: 'syz.6.5695': attribute type 10 has an invalid length. [ 1449.491148][T26849] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1450.060160][T26586] veth0_vlan: entered promiscuous mode [ 1450.159906][T26586] veth1_vlan: entered promiscuous mode [ 1450.178453][T26858] fuse: Unknown parameter '.' [ 1450.297213][T26859] netlink: 'syz.3.5696': attribute type 11 has an invalid length. [ 1450.778383][T26586] veth0_macvtap: entered promiscuous mode [ 1450.830740][T26586] veth1_macvtap: entered promiscuous mode [ 1450.895164][T26586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1450.968339][T26586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1451.021164][T26586] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.051030][T26586] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.078670][T26586] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.149647][T26586] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.762307][ T8201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1451.821497][ T8201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1452.094856][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1452.234397][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1452.256744][T11686] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1452.461770][T11686] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1452.501610][T11686] usb 6-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1452.543990][T26891] netlink: 146840 bytes leftover after parsing attributes in process `syz.3.5702'. [ 1452.678386][T11686] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1452.734100][T11686] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.768442][T26891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5702'. [ 1452.852388][T11686] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1452.890837][T26895] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5702'. [ 1453.028964][T11686] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1453.056830][T26887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1453.066908][T26887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1453.107648][T26897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5638'. [ 1453.227784][T19179] udevd[19179]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1453.246681][ T10] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 1453.336047][T11695] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1453.367599][T11695] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1453.412572][T11695] usb 1-1: can't read configurations, error -71 [ 1453.464154][ T10] usb 4-1: config 1 has an invalid interface number: 128 but max is 1 [ 1453.475920][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1453.512689][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1453.657108][ T10] usb 4-1: config 1 has no interface number 0 [ 1453.670524][ T10] usb 4-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1453.701670][ T10] usb 4-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1453.746474][ T3076] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1453.769240][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1453.974429][ T3076] usb 5-1: Using ep0 maxpacket: 16 [ 1453.991208][ T3076] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1454.003749][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.004258][ T3076] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1454.038673][ T10] usb 4-1: Product: syz [ 1454.047414][T11695] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1454.076905][ T10] usb 4-1: Manufacturer: syz [ 1454.083349][ T3076] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1454.103231][ T10] usb 4-1: SerialNumber: syz [ 1454.108369][ T3076] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.126539][T11686] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1454.141450][ T10] cdc_wdm 4-1:1.128: skipping garbage [ 1454.149222][ T3076] usb 5-1: config 0 descriptor?? [ 1454.157971][ T10] cdc_wdm 4-1:1.128: cdc-wdm0: USB WDM device [ 1454.168704][ T3076] pxrc 5-1:0.0: Could not find endpoint [ 1454.190488][ T3076] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1454.209050][ T10] cdc_wdm 4-1:1.128: Unknown control protocol [ 1454.216986][T11695] usb 1-1: Using ep0 maxpacket: 16 [ 1454.370798][T26910] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1454.387942][T26910] netlink: 208 bytes leftover after parsing attributes in process `syz.0.5705'. [ 1454.510380][T11682] usb 4-1: USB disconnect, device number 94 [ 1454.528715][T11686] usb 7-1: config 0 has no interfaces? [ 1454.551819][T11686] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1454.562432][T11686] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.570844][T11686] usb 7-1: Product: syz [ 1454.575300][T11686] usb 7-1: Manufacturer: syz [ 1454.604082][T11686] usb 7-1: SerialNumber: syz [ 1454.623287][T11686] usb 7-1: config 0 descriptor?? [ 1454.986280][ T48] usb 6-1: USB disconnect, device number 93 [ 1455.306867][T26915] fuse: Unknown parameter '.' [ 1455.325486][T26915] netlink: 'syz.5.5708': attribute type 11 has an invalid length. [ 1456.162639][ T48] usb 5-1: USB disconnect, device number 51 [ 1456.896598][T11701] usb 7-1: USB disconnect, device number 9 [ 1457.600254][T26940] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.5715'. [ 1457.664456][T26938] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5714'. [ 1457.925498][T11695] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1457.937538][T11695] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1457.955517][T11695] usb 1-1: can't read configurations, error -71 [ 1457.988460][T11695] usb usb1-port1: attempt power cycle [ 1458.069306][T26950] openvswitch: netlink: Actions may not be safe on all matching packets [ 1458.511027][T26962] fuse: Unknown parameter '.' [ 1458.529935][T26962] netlink: 'syz.5.5720': attribute type 11 has an invalid length. [ 1458.676430][T11695] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1458.769233][T11695] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1458.786888][T11695] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1458.806556][T11686] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1458.824560][T11695] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1458.887153][T11695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.928501][T11695] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1459.016601][T11686] usb 5-1: Using ep0 maxpacket: 16 [ 1459.074117][T11695] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1459.130653][T26956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1459.197179][T26964] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1459.216902][T26956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1459.413741][T26970] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5722'. [ 1460.886356][T11682] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1461.036377][T11682] usb 6-1: Using ep0 maxpacket: 8 [ 1461.045987][T11682] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1461.074476][T11682] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.211670][T11682] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1461.223353][T26988] netlink: 452 bytes leftover after parsing attributes in process `syz.3.5728'. [ 1461.309070][T11682] pvrusb2: ********** [ 1461.326058][T11682] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1461.349990][T11682] pvrusb2: Important functionality might not be entirely working. [ 1461.359051][T11682] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1461.372126][T11682] pvrusb2: ********** [ 1461.456793][ T2340] pvrusb2: Invalid write control endpoint [ 1461.611168][T26985] pvrusb2: Invalid write control endpoint [ 1461.655185][T11701] usb 6-1: USB disconnect, device number 94 [ 1461.745731][ T2340] pvrusb2: Invalid write control endpoint [ 1461.775588][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1461.796584][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1461.806302][T27000] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1461.806302][T27000] The task syz.6.5730 (27000) triggered the difference, watch for misbehavior. [ 1461.819807][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1461.903989][T11695] usb 1-1: USB disconnect, device number 90 [ 1461.917893][ T2340] pvrusb2: Device being rendered inoperable [ 1461.953332][ T30] audit: type=1326 audit(1748291598.870:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26994 comm="syz.6.5730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251938e969 code=0x7ffc0000 [ 1461.981250][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1462.000014][T27000] Cannot find add_set index 3 as target [ 1462.012865][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1462.053000][ T2340] pvrusb2: Attached sub-driver cx25840 [ 1462.066676][ T30] audit: type=1326 audit(1748291598.870:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26994 comm="syz.6.5730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251938e969 code=0x7ffc0000 [ 1462.072884][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1462.110921][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1462.251744][ T30] audit: type=1326 audit(1748291598.870:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26994 comm="syz.6.5730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f251938e969 code=0x7ffc0000 [ 1462.258240][T27004] fuse: Unknown parameter '.' [ 1462.309801][ T30] audit: type=1326 audit(1748291598.870:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26994 comm="syz.6.5730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251938e969 code=0x7ffc0000 [ 1462.349378][T27007] sctp: [Deprecated]: syz.3.5734 (pid 27007) Use of int in max_burst socket option. [ 1462.349378][T27007] Use struct sctp_assoc_value instead [ 1462.372714][ T30] audit: type=1326 audit(1748291598.870:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26994 comm="syz.6.5730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251938e969 code=0x7ffc0000 [ 1462.396804][ T30] audit: type=1326 audit(1748291598.870:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26994 comm="syz.6.5730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f251938e969 code=0x7ffc0000 [ 1462.420151][ T30] audit: type=1326 audit(1748291598.870:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26994 comm="syz.6.5730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251938e969 code=0x7ffc0000 [ 1462.425966][T27004] netlink: 'syz.0.5733': attribute type 11 has an invalid length. [ 1462.445025][ T30] audit: type=1326 audit(1748291598.870:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26994 comm="syz.6.5730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251938e969 code=0x7ffc0000 [ 1462.476364][ T30] audit: type=1326 audit(1748291598.870:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26994 comm="syz.6.5730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f251938e56b code=0x7ffc0000 [ 1462.499032][ T30] audit: type=1326 audit(1748291598.870:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26994 comm="syz.6.5730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251938e969 code=0x7ffc0000 [ 1462.710987][T11686] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1462.732258][T11686] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1462.763686][T11686] usb 5-1: can't read configurations, error -71 [ 1462.937408][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1463.496696][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1463.694805][ T10] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 1463.717118][ T10] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1463.726057][ T10] usb 7-1: can't read configurations, error -61 [ 1463.792771][T27028] netlink: 452 bytes leftover after parsing attributes in process `syz.4.5741'. [ 1463.866409][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1464.064956][ T10] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 1464.093804][ T10] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1464.116382][ T10] usb 7-1: can't read configurations, error -61 [ 1464.130143][ T10] usb usb7-port1: attempt power cycle [ 1464.502765][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1464.562131][ T10] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 1464.566523][T11701] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1464.591226][ T10] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1464.599033][ T10] usb 7-1: can't read configurations, error -61 [ 1464.726594][T11701] usb 5-1: Using ep0 maxpacket: 8 [ 1464.760027][ T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1464.768227][T11701] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1464.787908][T11701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.797750][T11701] usb 5-1: Product: syz [ 1464.801992][T11701] usb 5-1: Manufacturer: syz [ 1464.806836][T11701] usb 5-1: SerialNumber: syz [ 1464.818437][ T10] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 1464.839669][ T10] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1464.844009][T11701] usb 5-1: config 0 descriptor?? [ 1464.847669][ T10] usb 7-1: can't read configurations, error -61 [ 1464.861886][ T10] usb usb7-port1: unable to enumerate USB device [ 1465.077736][T11701] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1465.300720][T11701] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1466.593468][T27030] batadv_slave_1: entered promiscuous mode [ 1466.935723][T27055] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.5749'. [ 1466.967299][T27054] fuse: Unknown parameter '.' [ 1466.973878][T27054] netlink: 'syz.3.5748': attribute type 11 has an invalid length. [ 1467.106464][T11686] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1467.276602][T11686] usb 6-1: Using ep0 maxpacket: 16 [ 1467.353858][T27051] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1467.471368][T27067] netlink: 452 bytes leftover after parsing attributes in process `syz.6.5752'. [ 1467.842654][T11701] usb 5-1: USB disconnect, device number 54 [ 1467.873581][T27034] batadv_slave_1: left promiscuous mode [ 1468.312931][T27079] netlink: 'syz.3.5756': attribute type 1 has an invalid length. [ 1468.327794][T27079] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5756'. [ 1468.872762][T11682] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1469.042190][T27090] fuse: Unknown parameter '.' [ 1469.063034][T27090] netlink: 'syz.3.5760': attribute type 11 has an invalid length. [ 1469.106349][T11682] usb 1-1: Using ep0 maxpacket: 8 [ 1469.124019][T11682] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1469.169555][T11682] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1469.226361][T11682] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 1469.279936][T11682] usb 1-1: string descriptor 0 read error: -71 [ 1469.297038][T11682] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1469.332903][T11682] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.442758][T11682] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 1469.530072][T11682] usb 1-1: no configuration chosen from 1 choice [ 1469.628164][T11682] usb 1-1: USB disconnect, device number 91 [ 1470.062635][T27110] FAULT_INJECTION: forcing a failure. [ 1470.062635][T27110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1470.236440][T27110] CPU: 1 UID: 0 PID: 27110 Comm: syz.0.5766 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 1470.236470][T27110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1470.236483][T27110] Call Trace: [ 1470.236491][T27110] [ 1470.236500][T27110] dump_stack_lvl+0x189/0x250 [ 1470.236532][T27110] ? __lock_acquire+0xaac/0xd20 [ 1470.236563][T27110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1470.236591][T27110] ? __pfx__printk+0x10/0x10 [ 1470.236610][T27110] ? __might_fault+0xb0/0x130 [ 1470.236648][T27110] should_fail_ex+0x414/0x560 [ 1470.236676][T27110] _copy_from_iter+0x1db/0x15a0 [ 1470.236718][T27110] ? __pfx__copy_from_iter+0x10/0x10 [ 1470.236743][T27110] ? alloc_pages_noprof+0xbe/0x190 [ 1470.236771][T27110] ? skb_page_frag_refill+0x199/0x320 [ 1470.236801][T27110] kcm_sendmsg+0xe3e/0x29f0 [ 1470.236871][T27110] ? __pfx_kcm_sendmsg+0x10/0x10 [ 1470.236897][T27110] ? aa_sock_msg_perm+0x94/0x160 [ 1470.236922][T27110] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1470.236945][T27110] ? __pfx_kcm_sendmsg+0x10/0x10 [ 1470.236968][T27110] __sock_sendmsg+0x21c/0x270 [ 1470.236994][T27110] ____sys_sendmsg+0x505/0x830 [ 1470.237029][T27110] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1470.237065][T27110] ? import_iovec+0x74/0xa0 [ 1470.237097][T27110] ___sys_sendmsg+0x21f/0x2a0 [ 1470.237127][T27110] ? __pfx____sys_sendmsg+0x10/0x10 [ 1470.237197][T27110] ? __fget_files+0x2a/0x420 [ 1470.237222][T27110] ? __fget_files+0x3a0/0x420 [ 1470.237269][T27110] __x64_sys_sendmsg+0x19b/0x260 [ 1470.237301][T27110] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1470.237346][T27110] ? do_syscall_64+0xba/0x210 [ 1470.237377][T27110] do_syscall_64+0xf6/0x210 [ 1470.237402][T27110] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1470.237422][T27110] ? clear_bhb_loop+0x60/0xb0 [ 1470.237446][T27110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1470.237465][T27110] RIP: 0033:0x7f9fc0b8e969 [ 1470.237483][T27110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1470.237497][T27110] RSP: 002b:00007f9fbe9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1470.237519][T27110] RAX: ffffffffffffffda RBX: 00007f9fc0db5fa0 RCX: 00007f9fc0b8e969 [ 1470.237534][T27110] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000003 [ 1470.237547][T27110] RBP: 00007f9fbe9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1470.237559][T27110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1470.237571][T27110] R13: 0000000000000000 R14: 00007f9fc0db5fa0 R15: 00007f9fc0edfa28 [ 1470.237605][T27110] [ 1470.242947][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1470.242962][ T30] audit: type=1800 audit(1748291607.120:1642): pid=27112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5764" name="SYSV00000000" dev="tmpfs" ino=7 res=0 errno=0 [ 1470.813880][T11686] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1470.832948][T11686] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1470.849127][T11686] usb 6-1: can't read configurations, error -71 [ 1470.966380][T11701] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1471.439002][T11701] usb 5-1: Using ep0 maxpacket: 32 [ 1471.487890][T11701] usb 5-1: config 4 has an invalid interface number: 8 but max is 0 [ 1471.496540][T11701] usb 5-1: config 4 has no interface number 0 [ 1471.506514][T11686] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1471.843717][T11686] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1471.871333][T11686] usb 6-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1471.914449][T11686] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1471.949592][T11686] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.249105][T11686] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1472.273468][T11701] usb 5-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1472.315046][T11701] usb 5-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 1472.337092][T11686] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1472.442940][T11701] usb 5-1: config 4 interface 8 has no altsetting 0 [ 1472.468075][T27127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1472.478387][T27127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1472.554413][T11701] usb 5-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 1472.564102][T11701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.586367][T11701] usb 5-1: Product: syz [ 1472.590818][T11701] usb 5-1: Manufacturer: syz [ 1472.595436][T11701] usb 5-1: SerialNumber: syz [ 1472.933178][T27146] bridge1: entered promiscuous mode [ 1472.968154][T11701] opticon 5-1:4.8: opticon converter detected [ 1473.051184][T11701] usb 5-1: opticon converter now attached to ttyUSB0 [ 1473.102248][T27143] fuse: Unknown parameter '.' [ 1473.113098][T27143] netlink: 'syz.0.5773': attribute type 11 has an invalid length. [ 1473.219448][T11701] usb 5-1: USB disconnect, device number 55 [ 1473.387379][T11701] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 1473.404259][T11701] opticon 5-1:4.8: device disconnected [ 1474.177302][T27152] FAULT_INJECTION: forcing a failure. [ 1474.177302][T27152] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1474.224629][T27152] CPU: 1 UID: 0 PID: 27152 Comm: syz.4.5775 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 1474.224661][T27152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1474.224673][T27152] Call Trace: [ 1474.224682][T27152] [ 1474.224691][T27152] dump_stack_lvl+0x189/0x250 [ 1474.224729][T27152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1474.224757][T27152] ? __pfx__printk+0x10/0x10 [ 1474.224780][T27152] ? fs_reclaim_acquire+0x7d/0x100 [ 1474.224819][T27152] should_fail_ex+0x414/0x560 [ 1474.224848][T27152] prepare_alloc_pages+0x213/0x610 [ 1474.224886][T27152] __alloc_frozen_pages_noprof+0x123/0x370 [ 1474.224911][T27152] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1474.224943][T27152] ? policy_nodemask+0x27c/0x720 [ 1474.224976][T27152] alloc_pages_mpol+0x232/0x4a0 [ 1474.225009][T27152] vma_alloc_folio_noprof+0xe4/0x200 [ 1474.225039][T27152] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1474.225081][T27152] folio_prealloc+0x30/0x180 [ 1474.225110][T27152] do_wp_page+0x123a/0x5790 [ 1474.225159][T27152] ? __pfx_do_wp_page+0x10/0x10 [ 1474.225178][T27152] ? do_raw_spin_lock+0x121/0x290 [ 1474.225203][T27152] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1474.225237][T27152] __handle_mm_fault+0x1028/0x5380 [ 1474.225295][T27152] ? __pfx___handle_mm_fault+0x10/0x10 [ 1474.225332][T27152] ? follow_page_pte+0xdee/0x13c0 [ 1474.225368][T27152] handle_mm_fault+0x3f6/0x8c0 [ 1474.225405][T27152] __get_user_pages+0x16f0/0x2a40 [ 1474.225466][T27152] ? __pfx___get_user_pages+0x10/0x10 [ 1474.225489][T27152] ? __gup_longterm_locked+0xbf7/0x15b0 [ 1474.225513][T27152] ? down_read_killable+0x1d1/0x350 [ 1474.225546][T27152] __gup_longterm_locked+0xd66/0x15b0 [ 1474.225582][T27152] ? try_grab_folio_fast+0x337/0x4d0 [ 1474.225614][T27152] ? sanity_check_pinned_pages+0x119b/0x1290 [ 1474.225648][T27152] gup_fast_fallback+0x1843/0x1d60 [ 1474.225672][T27152] ? is_bpf_text_address+0x292/0x2b0 [ 1474.225737][T27152] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1474.225763][T27152] ? stack_depot_save_flags+0x40/0x910 [ 1474.225793][T27152] ? pin_user_pages_fast+0x4d/0xb0 [ 1474.225821][T27152] iov_iter_extract_pages+0x35a/0x5e0 [ 1474.225851][T27152] ? ___sys_recvmsg+0x1b5/0x510 [ 1474.225884][T27152] extract_iter_to_sg+0xdeb/0x2480 [ 1474.225928][T27152] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 1474.225973][T27152] ? __asan_memset+0x22/0x50 [ 1474.225997][T27152] af_alg_get_rsgl+0x436/0x810 [ 1474.226041][T27152] skcipher_recvmsg+0x3c0/0x11c0 [ 1474.226068][T27152] ? aa_sk_perm+0x81e/0x950 [ 1474.226101][T27152] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1474.226128][T27152] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1474.226152][T27152] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1474.226170][T27152] sock_recvmsg_nosec+0x183/0x1c0 [ 1474.226193][T27152] ____sys_recvmsg+0x3aa/0x460 [ 1474.226230][T27152] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1474.226280][T27152] ? import_iovec+0x74/0xa0 [ 1474.226311][T27152] ___sys_recvmsg+0x1b5/0x510 [ 1474.226345][T27152] ? __pfx____sys_recvmsg+0x10/0x10 [ 1474.226413][T27152] ? __might_fault+0xb0/0x130 [ 1474.226443][T27152] do_recvmmsg+0x307/0x760 [ 1474.226481][T27152] ? __pfx_do_recvmmsg+0x10/0x10 [ 1474.226522][T27152] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1474.226570][T27152] __x64_sys_recvmmsg+0x190/0x240 [ 1474.226597][T27152] ? rcu_is_watching+0x15/0xb0 [ 1474.226618][T27152] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1474.226652][T27152] ? do_syscall_64+0xba/0x210 [ 1474.226683][T27152] do_syscall_64+0xf6/0x210 [ 1474.226709][T27152] ? clear_bhb_loop+0x60/0xb0 [ 1474.226735][T27152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.226754][T27152] RIP: 0033:0x7f287878e969 [ 1474.226773][T27152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1474.226791][T27152] RSP: 002b:00007f287960d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1474.226814][T27152] RAX: ffffffffffffffda RBX: 00007f28789b5fa0 RCX: 00007f287878e969 [ 1474.226828][T27152] RDX: 000000000000001e RSI: 0000200000000240 RDI: 0000000000000004 [ 1474.226841][T27152] RBP: 00007f287960d090 R08: 0000000000000000 R09: 0000000000000000 [ 1474.226854][T27152] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 1474.226867][T27152] R13: 0000000000000000 R14: 00007f28789b5fa0 R15: 00007f2878adfa28 [ 1474.226901][T27152] [ 1475.215465][T27158] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 1475.373686][T11686] usb 6-1: USB disconnect, device number 96 [ 1475.776386][T26431] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 1476.022003][T26431] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 1476.053906][T27168] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5778'. [ 1476.149686][T26431] usb 1-1: config 0 has no interface number 0 [ 1476.191486][T26431] usb 1-1: config 0 interface 29 has no altsetting 0 [ 1476.270178][T26431] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1476.320799][T26431] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.423855][T26431] usb 1-1: Product: syz [ 1476.430985][T26431] usb 1-1: Manufacturer: syz [ 1476.460000][T26431] usb 1-1: SerialNumber: syz [ 1476.477985][T26431] usb 1-1: config 0 descriptor?? [ 1476.688590][T26431] peak_usb 1-1:0.29: PEAK-System PCAN-USB X6 v17 fw v81.0.0 (2 channels) [ 1476.893063][T26431] peak_usb 1-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 1476.921220][T26431] peak_usb 1-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 1477.017957][T26431] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -71 [ 1477.061957][T26431] usb 1-1: USB disconnect, device number 92 [ 1477.522506][T27176] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5781'. [ 1477.732407][T27183] FAULT_INJECTION: forcing a failure. [ 1477.732407][T27183] name failslab, interval 1, probability 0, space 0, times 0 [ 1477.925927][T27183] CPU: 1 UID: 0 PID: 27183 Comm: syz.0.5783 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 1477.925947][T27183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1477.925954][T27183] Call Trace: [ 1477.925959][T27183] [ 1477.925965][T27183] dump_stack_lvl+0x189/0x250 [ 1477.925988][T27183] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1477.926005][T27183] ? __pfx__printk+0x10/0x10 [ 1477.926021][T27183] ? __pfx___might_resched+0x10/0x10 [ 1477.926035][T27183] should_fail_ex+0x414/0x560 [ 1477.926051][T27183] should_failslab+0xa8/0x100 [ 1477.926068][T27183] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1477.926084][T27183] ? __alloc_skb+0x112/0x2d0 [ 1477.926098][T27183] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1477.926117][T27183] __alloc_skb+0x112/0x2d0 [ 1477.926134][T27183] __ip6_append_data+0x2b5a/0x3dc0 [ 1477.926162][T27183] ? __pfx_raw6_getfrag+0x10/0x10 [ 1477.926190][T27183] ? __pfx___ip6_append_data+0x10/0x10 [ 1477.926212][T27183] ip6_append_data+0x1c4/0x380 [ 1477.926240][T27183] ? __pfx_raw6_getfrag+0x10/0x10 [ 1477.926276][T27183] rawv6_sendmsg+0x1245/0x17f0 [ 1477.926310][T27183] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1477.926342][T27183] ? __pfx_aa_sk_perm+0x10/0x10 [ 1477.926357][T27183] ? sock_rps_record_flow+0x19/0x400 [ 1477.926376][T27183] ? inet_sendmsg+0x2f4/0x370 [ 1477.926392][T27183] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1477.926409][T27183] __sock_sendmsg+0x19c/0x270 [ 1477.926424][T27183] ____sys_sendmsg+0x505/0x830 [ 1477.926444][T27183] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1477.926467][T27183] ? import_iovec+0x74/0xa0 [ 1477.926485][T27183] ___sys_sendmsg+0x21f/0x2a0 [ 1477.926506][T27183] ? __pfx____sys_sendmsg+0x10/0x10 [ 1477.926545][T27183] ? __fget_files+0x2a/0x420 [ 1477.926560][T27183] ? __fget_files+0x3a0/0x420 [ 1477.926582][T27183] __x64_sys_sendmsg+0x19b/0x260 [ 1477.926600][T27183] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1477.926627][T27183] ? do_syscall_64+0xba/0x210 [ 1477.926646][T27183] do_syscall_64+0xf6/0x210 [ 1477.926661][T27183] ? clear_bhb_loop+0x60/0xb0 [ 1477.926676][T27183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.926687][T27183] RIP: 0033:0x7f9fc0b8e969 [ 1477.926699][T27183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1477.926709][T27183] RSP: 002b:00007f9fbe9d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1477.926724][T27183] RAX: ffffffffffffffda RBX: 00007f9fc0db6080 RCX: 00007f9fc0b8e969 [ 1477.926733][T27183] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1477.926741][T27183] RBP: 00007f9fbe9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1477.926749][T27183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1477.926756][T27183] R13: 0000000000000001 R14: 00007f9fc0db6080 R15: 00007f9fc0edfa28 [ 1477.926774][T27183] [ 1478.938413][T27198] fuse: Unknown parameter '.' [ 1478.948193][T27198] netlink: 'syz.0.5787': attribute type 11 has an invalid length. [ 1479.172537][T27173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1479.601638][ T30] audit: type=1800 audit(1748291616.490:1643): pid=27196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5786" name="SYSV00000000" dev="tmpfs" ino=8 res=0 errno=0 [ 1479.656557][T27203] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5788'. [ 1482.026580][T26431] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1482.410326][T26431] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.422522][T26431] usb 7-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1482.436018][T26431] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1482.482469][T26431] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.528083][T27220] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 1482.544664][T26431] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1482.596000][T26431] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1482.717167][T11686] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1482.724364][T19179] udevd[19179]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1482.759125][T27212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1482.769628][T27212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1482.876492][T11686] usb 6-1: Using ep0 maxpacket: 16 [ 1482.884919][T11686] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1482.929959][T27231] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5794'. [ 1483.012372][T11686] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1483.121473][T11686] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1483.208082][T11686] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1483.281800][T11686] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.317995][T11686] usb 6-1: config 0 descriptor?? [ 1483.348987][T11686] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input78 [ 1483.410978][ T5185] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1483.462536][ T5185] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1483.696857][ T5185] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1484.713742][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.721844][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.815477][T11695] usb 6-1: USB disconnect, device number 97 [ 1484.923509][T26431] usb 7-1: USB disconnect, device number 14 [ 1485.249890][T27254] netlink: 452 bytes leftover after parsing attributes in process `syz.3.5800'. [ 1485.330755][T27253] fuse: Unknown parameter '.' [ 1485.367612][T27253] netlink: 'syz.6.5801': attribute type 11 has an invalid length. [ 1485.916392][T11682] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1485.959563][T27270] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5805'. [ 1485.994393][T27270] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5805'. [ 1486.006516][T11701] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1486.064813][T11682] usb 4-1: device descriptor read/64, error -71 [ 1486.122279][ T30] audit: type=1800 audit(1748291623.030:1644): pid=27262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5802" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1486.227358][T11701] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1486.239746][T11701] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1486.257691][T11701] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1486.313492][T11701] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1486.316373][T11682] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1486.336384][ T48] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1486.349365][T11701] usb 6-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 1486.358804][T11701] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.367348][T11701] usb 6-1: Product: syz [ 1486.372723][T11701] usb 6-1: Manufacturer: syz [ 1486.377547][T11701] usb 6-1: SerialNumber: syz [ 1486.399566][T11701] usb 6-1: config 0 descriptor?? [ 1486.415675][T11701] kvaser_usb 6-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 1486.443071][T11701] kvaser_usb 6-1:0.0: error -EMSGSIZE: Failed to initialize card [ 1486.456334][T11701] kvaser_usb 6-1:0.0: probe with driver kvaser_usb failed with error -90 [ 1486.476518][T11682] usb 4-1: device descriptor read/64, error -71 [ 1486.530642][ T48] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1486.544705][ T48] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.563513][ T48] usb 7-1: Product: syz [ 1486.575223][ T48] usb 7-1: Manufacturer: syz [ 1486.586843][T11682] usb usb4-port1: attempt power cycle [ 1486.593962][ T48] usb 7-1: SerialNumber: syz [ 1486.614927][ T48] usb 7-1: config 0 descriptor?? [ 1486.649805][ T48] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1486.712886][T11701] usb 6-1: USB disconnect, device number 98 [ 1486.936932][T11682] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1486.971840][T11682] usb 4-1: device descriptor read/8, error -71 [ 1487.216521][T11682] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1487.216884][ T48] gspca_sunplus: reg_r err -110 [ 1487.257949][T11682] usb 4-1: device descriptor read/8, error -71 [ 1487.382842][T27287] netlink: 452 bytes leftover after parsing attributes in process `syz.5.5813'. [ 1487.387071][T11682] usb usb4-port1: unable to enumerate USB device [ 1487.447890][ T3076] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1487.564919][T27292] fuse: Unknown parameter '.' [ 1487.572236][T27292] netlink: 'syz.5.5815': attribute type 11 has an invalid length. [ 1487.623842][ T3076] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1487.641462][ T3076] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.664507][ T3076] usb 5-1: Product: syz [ 1487.670271][ T3076] usb 5-1: Manufacturer: syz [ 1487.675288][ T3076] usb 5-1: SerialNumber: syz [ 1487.693817][ T3076] usb 5-1: config 0 descriptor?? [ 1487.780793][T27298] fuse: Bad value for 'fd' [ 1487.916377][ T3076] hso 5-1:0.0: Failed to find BULK IN ep [ 1487.936616][ T3076] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1488.861612][ T3076] usb 7-1: USB disconnect, device number 15 [ 1488.868343][T27312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5820'. [ 1488.956011][T27312] tun2: tun_chr_ioctl cmd 1074025675 [ 1488.961736][T27312] tun2: persist enabled [ 1488.973688][T27312] tun2: tun_chr_ioctl cmd 1074025675 [ 1488.988787][T27312] tun2: persist enabled [ 1489.185739][T11682] IPVS: starting estimator thread 0... [ 1489.270939][ T30] audit: type=1326 audit(1748291626.190:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27324 comm="syz.6.5825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251938e969 code=0x7ffc0000 [ 1489.296433][T27323] IPVS: using max 29 ests per chain, 69600 per kthread [ 1489.316091][ T30] audit: type=1326 audit(1748291626.210:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27324 comm="syz.6.5825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f251938e969 code=0x7ffc0000 [ 1489.370257][ T30] audit: type=1326 audit(1748291626.210:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27324 comm="syz.6.5825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251938e969 code=0x7ffc0000 [ 1489.423033][ T30] audit: type=1326 audit(1748291626.220:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27324 comm="syz.6.5825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f251938e969 code=0x7ffc0000 [ 1489.476599][T11686] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1489.522660][T27328] fuse: Unknown parameter '.' [ 1489.523881][T27331] FAULT_INJECTION: forcing a failure. [ 1489.523881][T27331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1489.545738][T27331] CPU: 1 UID: 0 PID: 27331 Comm: syz.0.5827 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 1489.545766][T27331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1489.545778][T27331] Call Trace: [ 1489.545787][T27331] [ 1489.545795][T27331] dump_stack_lvl+0x189/0x250 [ 1489.545833][T27331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1489.545859][T27331] ? __pfx__printk+0x10/0x10 [ 1489.545895][T27331] should_fail_ex+0x414/0x560 [ 1489.545922][T27331] _copy_to_user+0x31/0xb0 [ 1489.545952][T27331] simple_read_from_buffer+0xe1/0x170 [ 1489.545983][T27331] proc_fail_nth_read+0x1df/0x250 [ 1489.546014][T27331] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1489.546044][T27331] ? rw_verify_area+0x258/0x650 [ 1489.546065][T27331] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1489.546090][T27331] vfs_read+0x1fd/0x980 [ 1489.546128][T27331] ? __pfx___mutex_lock+0x10/0x10 [ 1489.546154][T27331] ? __pfx_vfs_read+0x10/0x10 [ 1489.546178][T27331] ? __fget_files+0x2a/0x420 [ 1489.546206][T27331] ? __fget_files+0x3a0/0x420 [ 1489.546233][T27331] ? __fget_files+0x2a/0x420 [ 1489.546266][T27331] ksys_read+0x145/0x250 [ 1489.546291][T27331] ? __pfx_ksys_read+0x10/0x10 [ 1489.546317][T27331] ? do_syscall_64+0xba/0x210 [ 1489.546346][T27331] do_syscall_64+0xf6/0x210 [ 1489.546369][T27331] ? clear_bhb_loop+0x60/0xb0 [ 1489.546394][T27331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.546413][T27331] RIP: 0033:0x7f9fc0b8d37c [ 1489.546433][T27331] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1489.546449][T27331] RSP: 002b:00007f9fbe9f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1489.546471][T27328] netlink: 'syz.6.5826': attribute type 11 has an invalid length. [ 1489.546472][T27331] RAX: ffffffffffffffda RBX: 00007f9fc0db5fa0 RCX: 00007f9fc0b8d37c [ 1489.546489][T27331] RDX: 000000000000000f RSI: 00007f9fbe9f60a0 RDI: 0000000000000005 [ 1489.546502][T27331] RBP: 00007f9fbe9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1489.546514][T27331] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 1489.546524][T27331] R13: 0000000000000000 R14: 00007f9fc0db5fa0 R15: 00007f9fc0edfa28 [ 1489.546553][T27331] [ 1489.663048][T27333] FAULT_INJECTION: forcing a failure. [ 1489.663048][T27333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1489.760644][T11686] usb 6-1: Using ep0 maxpacket: 32 [ 1489.762619][T11686] usb 6-1: config 2 has an invalid interface number: 117 but max is 0 [ 1489.795944][T27333] CPU: 1 UID: 0 PID: 27333 Comm: syz.0.5828 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 1489.795968][T27333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1489.795980][T27333] Call Trace: [ 1489.795987][T27333] [ 1489.795995][T27333] dump_stack_lvl+0x189/0x250 [ 1489.796028][T27333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1489.796052][T27333] ? __pfx__printk+0x10/0x10 [ 1489.796083][T27333] should_fail_ex+0x414/0x560 [ 1489.796108][T27333] _copy_to_user+0x31/0xb0 [ 1489.796142][T27333] simple_read_from_buffer+0xe1/0x170 [ 1489.796170][T27333] proc_fail_nth_read+0x1df/0x250 [ 1489.796198][T27333] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1489.796230][T27333] ? rw_verify_area+0x258/0x650 [ 1489.796250][T27333] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1489.796276][T27333] vfs_read+0x1fd/0x980 [ 1489.796301][T27333] ? __pfx___mutex_lock+0x10/0x10 [ 1489.796325][T27333] ? __pfx_vfs_read+0x10/0x10 [ 1489.796347][T27333] ? __fget_files+0x2a/0x420 [ 1489.796374][T27333] ? __fget_files+0x3a0/0x420 [ 1489.796395][T27333] ? __fget_files+0x2a/0x420 [ 1489.796426][T27333] ksys_read+0x145/0x250 [ 1489.796449][T27333] ? __pfx_ksys_read+0x10/0x10 [ 1489.796473][T27333] ? do_syscall_64+0xba/0x210 [ 1489.796499][T27333] do_syscall_64+0xf6/0x210 [ 1489.796522][T27333] ? clear_bhb_loop+0x60/0xb0 [ 1489.796544][T27333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.796562][T27333] RIP: 0033:0x7f9fc0b8d37c [ 1489.796578][T27333] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1489.796593][T27333] RSP: 002b:00007f9fbe9f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1489.796613][T27333] RAX: ffffffffffffffda RBX: 00007f9fc0db5fa0 RCX: 00007f9fc0b8d37c [ 1489.796627][T27333] RDX: 000000000000000f RSI: 00007f9fbe9f60a0 RDI: 0000000000000003 [ 1489.796638][T27333] RBP: 00007f9fbe9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1489.796649][T27333] R10: 0000000000000076 R11: 0000000000000246 R12: 0000000000000001 [ 1489.796660][T27333] R13: 0000000000000001 R14: 00007f9fc0db5fa0 R15: 00007f9fc0edfa28 [ 1489.796690][T27333] [ 1490.140929][T11686] usb 6-1: config 2 has no interface number 0 [ 1490.151020][T11686] usb 6-1: config 2 interface 117 has no altsetting 0 [ 1490.171642][T11686] usb 6-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 1490.183010][T11686] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.245489][T11686] usb 6-1: Product: syz [ 1490.257236][T11686] usb 6-1: Manufacturer: syz [ 1490.276155][T11686] usb 6-1: SerialNumber: syz [ 1490.292836][T11682] usb 5-1: USB disconnect, device number 56 [ 1490.309509][T11686] usb-storage 6-1:2.117: USB Mass Storage device detected [ 1490.334229][T11686] usb-storage 6-1:2.117: Quirks match for vid 0781 pid 0100: 1 [ 1490.723564][T27322] loop4: detected capacity change from 0 to 7 [ 1490.776567][T26816] Dev loop4: unable to read RDB block 7 [ 1490.963997][T27353] syzkaller1: entered promiscuous mode [ 1490.969733][T27353] syzkaller1: entered allmulticast mode [ 1491.219195][T26816] loop4: unable to read partition table [ 1491.245885][T26816] loop4: partition table beyond EOD, truncated [ 1491.274866][T27322] Dev loop4: unable to read RDB block 7 [ 1491.280713][T27322] loop4: unable to read partition table [ 1491.294556][T27322] loop4: partition table beyond EOD, truncated [ 1491.303396][T27322] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1491.345472][T11682] usb 6-1: USB disconnect, device number 99 [ 1492.401040][T27372] FAULT_INJECTION: forcing a failure. [ 1492.401040][T27372] name failslab, interval 1, probability 0, space 0, times 0 [ 1492.414274][T27372] CPU: 1 UID: 0 PID: 27372 Comm: syz.6.5839 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 1492.414301][T27372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1492.414313][T27372] Call Trace: [ 1492.414322][T27372] [ 1492.414331][T27372] dump_stack_lvl+0x189/0x250 [ 1492.414364][T27372] ? __lock_acquire+0xaac/0xd20 [ 1492.414393][T27372] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1492.414428][T27372] ? __pfx__printk+0x10/0x10 [ 1492.414452][T27372] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 1492.414490][T27372] should_fail_ex+0x414/0x560 [ 1492.414517][T27372] should_failslab+0xa8/0x100 [ 1492.414543][T27372] ? __pfx_ip6_dst_gc+0x10/0x10 [ 1492.414562][T27372] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1492.414587][T27372] ? dst_alloc+0x105/0x170 [ 1492.414615][T27372] ? __pfx_ip6_dst_gc+0x10/0x10 [ 1492.414635][T27372] dst_alloc+0x105/0x170 [ 1492.414667][T27372] ip6_pol_route+0xa21/0x1180 [ 1492.414686][T27372] ? ip6_pol_route+0x162/0x1180 [ 1492.414711][T27372] ? __pfx_ip6_pol_route+0x10/0x10 [ 1492.414739][T27372] ? inet6_ehashfn+0xb3/0x570 [ 1492.414761][T27372] ? ip6t_do_table+0x1376/0x1530 [ 1492.414789][T27372] fib6_rule_lookup+0x52f/0x6f0 [ 1492.414812][T27372] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 1492.414833][T27372] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1492.414864][T27372] ? __inet6_lookup_established+0xb95/0xc30 [ 1492.414902][T27372] ip6_route_input+0x6ce/0xa50 [ 1492.414932][T27372] ? __pfx_ip6_route_input+0x10/0x10 [ 1492.414988][T27372] ? ip6_rcv_finish_core+0x222/0x420 [ 1492.415018][T27372] ip6_rcv_finish+0x141/0x2d0 [ 1492.415048][T27372] NF_HOOK+0x30c/0x3a0 [ 1492.415071][T27372] ? skb_orphan+0x4f/0xd0 [ 1492.415098][T27372] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1492.415123][T27372] ? NF_HOOK+0x9a/0x3a0 [ 1492.415147][T27372] ? __pfx_NF_HOOK+0x10/0x10 [ 1492.415174][T27372] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1492.415212][T27372] __netif_receive_skb+0xd3/0x380 [ 1492.415242][T27372] ? netif_receive_skb+0x115/0x790 [ 1492.415262][T27372] netif_receive_skb+0x1cb/0x790 [ 1492.415282][T27372] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1492.415303][T27372] ? __pfx_netif_receive_skb+0x10/0x10 [ 1492.415331][T27372] ? tun_rx_batched+0x160/0x730 [ 1492.415363][T27372] tun_rx_batched+0x1b9/0x730 [ 1492.415408][T27372] ? __pfx_tun_rx_batched+0x10/0x10 [ 1492.415450][T27372] ? tun_get_user+0x2444/0x3c20 [ 1492.415489][T27372] ? tun_get_user+0x2444/0x3c20 [ 1492.415517][T27372] ? tun_get_user+0x2444/0x3c20 [ 1492.415545][T27372] tun_get_user+0x2879/0x3c20 [ 1492.415578][T27372] ? tun_get_user+0x687/0x3c20 [ 1492.415624][T27372] ? __pfx_tun_get_user+0x10/0x10 [ 1492.415653][T27372] ? aa_file_perm+0x3e7/0xed0 [ 1492.415694][T27372] ? ref_tracker_alloc+0x318/0x460 [ 1492.415720][T27372] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1492.415751][T27372] ? tun_get+0x1c/0x2f0 [ 1492.415783][T27372] ? tun_get+0x1c/0x2f0 [ 1492.415809][T27372] ? tun_get+0x1c/0x2f0 [ 1492.415841][T27372] tun_chr_write_iter+0x113/0x200 [ 1492.415874][T27372] vfs_write+0x548/0xa90 [ 1492.415903][T27372] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1492.415931][T27372] ? __pfx_vfs_write+0x10/0x10 [ 1492.415967][T27372] ? __fget_files+0x2a/0x420 [ 1492.416003][T27372] ksys_write+0x145/0x250 [ 1492.416024][T27372] ? rcu_is_watching+0x15/0xb0 [ 1492.416045][T27372] ? __pfx_ksys_write+0x10/0x10 [ 1492.416072][T27372] ? do_syscall_64+0xba/0x210 [ 1492.416103][T27372] do_syscall_64+0xf6/0x210 [ 1492.416129][T27372] ? clear_bhb_loop+0x60/0xb0 [ 1492.416153][T27372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1492.416171][T27372] RIP: 0033:0x7f251938d41f [ 1492.416190][T27372] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1492.416207][T27372] RSP: 002b:00007f25171f6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1492.416235][T27372] RAX: ffffffffffffffda RBX: 00007f25195b5fa0 RCX: 00007f251938d41f [ 1492.416250][T27372] RDX: 0000000000000052 RSI: 0000200000000080 RDI: 00000000000000c8 [ 1492.416262][T27372] RBP: 00007f25171f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1492.416274][T27372] R10: 0000000000000052 R11: 0000000000000293 R12: 0000000000000001 [ 1492.416286][T27372] R13: 0000000000000000 R14: 00007f25195b5fa0 R15: 00007f25196dfa28 [ 1492.416319][T27372] [ 1492.843406][T27373] FAULT_INJECTION: forcing a failure. [ 1492.843406][T27373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1492.858322][T27373] CPU: 1 UID: 0 PID: 27373 Comm: syz.4.5840 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 1492.858349][T27373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1492.858361][T27373] Call Trace: [ 1492.858370][T27373] [ 1492.858379][T27373] dump_stack_lvl+0x189/0x250 [ 1492.858410][T27373] ? __lock_acquire+0xaac/0xd20 [ 1492.858441][T27373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1492.858468][T27373] ? __pfx__printk+0x10/0x10 [ 1492.858489][T27373] ? __might_fault+0xb0/0x130 [ 1492.858527][T27373] should_fail_ex+0x414/0x560 [ 1492.858555][T27373] _copy_from_iter+0x1db/0x15a0 [ 1492.858589][T27373] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 1492.858612][T27373] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1492.858638][T27373] ? __pfx__copy_from_iter+0x10/0x10 [ 1492.858666][T27373] ? __build_skb_around+0x257/0x3e0 [ 1492.858697][T27373] ? netlink_sendmsg+0x642/0xb30 [ 1492.858719][T27373] ? skb_put+0x11b/0x210 [ 1492.858747][T27373] netlink_sendmsg+0x6b2/0xb30 [ 1492.858780][T27373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1492.858807][T27373] ? aa_sock_msg_perm+0x94/0x160 [ 1492.858832][T27373] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1492.858854][T27373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1492.858879][T27373] __sock_sendmsg+0x21c/0x270 [ 1492.858905][T27373] ____sys_sendmsg+0x505/0x830 [ 1492.858938][T27373] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1492.858975][T27373] ? import_iovec+0x74/0xa0 [ 1492.859006][T27373] ___sys_sendmsg+0x21f/0x2a0 [ 1492.859035][T27373] ? __pfx____sys_sendmsg+0x10/0x10 [ 1492.859101][T27373] ? __fget_files+0x2a/0x420 [ 1492.859126][T27373] ? __fget_files+0x3a0/0x420 [ 1492.859163][T27373] __x64_sys_sendmsg+0x19b/0x260 [ 1492.859193][T27373] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1492.859238][T27373] ? do_syscall_64+0xba/0x210 [ 1492.859268][T27373] do_syscall_64+0xf6/0x210 [ 1492.859302][T27373] ? clear_bhb_loop+0x60/0xb0 [ 1492.859327][T27373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1492.859345][T27373] RIP: 0033:0x7f287878e969 [ 1492.859363][T27373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1492.859380][T27373] RSP: 002b:00007f287960d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1492.859403][T27373] RAX: ffffffffffffffda RBX: 00007f28789b5fa0 RCX: 00007f287878e969 [ 1492.859417][T27373] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1492.859430][T27373] RBP: 00007f287960d090 R08: 0000000000000000 R09: 0000000000000000 [ 1492.859442][T27373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1492.859455][T27373] R13: 0000000000000000 R14: 00007f28789b5fa0 R15: 00007f2878adfa28 [ 1492.859487][T27373] [ 1493.283037][T27375] fuse: Unknown parameter '.' [ 1493.297794][T27382] FAULT_INJECTION: forcing a failure. [ 1493.297794][T27382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1493.311713][T27382] CPU: 1 UID: 0 PID: 27382 Comm: syz.5.5842 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 1493.311737][T27382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1493.311744][T27382] Call Trace: [ 1493.311750][T27382] [ 1493.311756][T27382] dump_stack_lvl+0x189/0x250 [ 1493.311779][T27382] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1493.311795][T27382] ? __pfx__printk+0x10/0x10 [ 1493.311815][T27382] should_fail_ex+0x414/0x560 [ 1493.311830][T27382] _copy_to_user+0x31/0xb0 [ 1493.311849][T27382] simple_read_from_buffer+0xe1/0x170 [ 1493.311867][T27382] proc_fail_nth_read+0x1df/0x250 [ 1493.311885][T27382] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1493.311903][T27382] ? rw_verify_area+0x258/0x650 [ 1493.311916][T27382] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1493.311933][T27382] vfs_read+0x1fd/0x980 [ 1493.311951][T27382] ? __pfx___mutex_lock+0x10/0x10 [ 1493.311966][T27382] ? __pfx_vfs_read+0x10/0x10 [ 1493.311981][T27382] ? __fget_files+0x2a/0x420 [ 1493.311998][T27382] ? __fget_files+0x3a0/0x420 [ 1493.312012][T27382] ? __fget_files+0x2a/0x420 [ 1493.312037][T27382] ksys_read+0x145/0x250 [ 1493.312050][T27382] ? rcu_is_watching+0x15/0xb0 [ 1493.312062][T27382] ? __pfx_ksys_read+0x10/0x10 [ 1493.312077][T27382] ? do_syscall_64+0xba/0x210 [ 1493.312095][T27382] do_syscall_64+0xf6/0x210 [ 1493.312110][T27382] ? clear_bhb_loop+0x60/0xb0 [ 1493.312124][T27382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.312135][T27382] RIP: 0033:0x7fd07b38d37c [ 1493.312147][T27382] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1493.312158][T27382] RSP: 002b:00007fd07c204030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1493.312172][T27382] RAX: ffffffffffffffda RBX: 00007fd07b5b6080 RCX: 00007fd07b38d37c [ 1493.312181][T27382] RDX: 000000000000000f RSI: 00007fd07c2040a0 RDI: 0000000000000004 [ 1493.312189][T27382] RBP: 00007fd07c204090 R08: 0000000000000000 R09: 0000000000000000 [ 1493.312196][T27382] R10: 000000000000006a R11: 0000000000000246 R12: 0000000000000001 [ 1493.312204][T27382] R13: 0000000000000000 R14: 00007fd07b5b6080 R15: 00007fd07b6dfa28 [ 1493.312222][T27382] [ 1493.756765][T27375] netlink: 'syz.0.5841': attribute type 11 has an invalid length. [ 1493.837739][T11682] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 1493.976674][T11682] usb 5-1: device descriptor read/64, error -71 [ 1494.216562][T11682] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 1494.218829][T27393] FAULT_INJECTION: forcing a failure. [ 1494.218829][T27393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1494.295413][T27393] CPU: 1 UID: 0 PID: 27393 Comm: syz.0.5848 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 1494.295433][T27393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1494.295440][T27393] Call Trace: [ 1494.295446][T27393] [ 1494.295451][T27393] dump_stack_lvl+0x189/0x250 [ 1494.295475][T27393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1494.295492][T27393] ? __pfx__printk+0x10/0x10 [ 1494.295511][T27393] should_fail_ex+0x414/0x560 [ 1494.295527][T27393] _copy_to_user+0x31/0xb0 [ 1494.295545][T27393] simple_read_from_buffer+0xe1/0x170 [ 1494.295563][T27393] proc_fail_nth_read+0x1df/0x250 [ 1494.295582][T27393] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1494.295600][T27393] ? rw_verify_area+0x258/0x650 [ 1494.295614][T27393] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1494.295631][T27393] vfs_read+0x1fd/0x980 [ 1494.295648][T27393] ? __pfx___mutex_lock+0x10/0x10 [ 1494.295669][T27393] ? __pfx_vfs_read+0x10/0x10 [ 1494.295683][T27393] ? __fget_files+0x2a/0x420 [ 1494.295701][T27393] ? __fget_files+0x3a0/0x420 [ 1494.295716][T27393] ? __fget_files+0x2a/0x420 [ 1494.295737][T27393] ksys_read+0x145/0x250 [ 1494.295752][T27393] ? __pfx_ksys_read+0x10/0x10 [ 1494.295768][T27393] ? do_syscall_64+0xba/0x210 [ 1494.295786][T27393] do_syscall_64+0xf6/0x210 [ 1494.295801][T27393] ? clear_bhb_loop+0x60/0xb0 [ 1494.295815][T27393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.295827][T27393] RIP: 0033:0x7f9fc0b8d37c [ 1494.295838][T27393] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1494.295848][T27393] RSP: 002b:00007f9fbe9f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1494.295862][T27393] RAX: ffffffffffffffda RBX: 00007f9fc0db5fa0 RCX: 00007f9fc0b8d37c [ 1494.295871][T27393] RDX: 000000000000000f RSI: 00007f9fbe9f60a0 RDI: 0000000000000004 [ 1494.295879][T27393] RBP: 00007f9fbe9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1494.295886][T27393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1494.295893][T27393] R13: 0000000000000000 R14: 00007f9fc0db5fa0 R15: 00007f9fc0edfa28 [ 1494.295912][T27393] [ 1494.515033][T11682] usb 5-1: device descriptor read/64, error -71 [ 1494.676767][T11682] usb usb5-port1: attempt power cycle [ 1494.869535][T27404] program syz.3.5853 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1494.879382][T27404] FAULT_INJECTION: forcing a failure. [ 1494.879382][T27404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1494.893983][T27404] CPU: 1 UID: 0 PID: 27404 Comm: syz.3.5853 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 1494.894010][T27404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1494.894022][T27404] Call Trace: [ 1494.894030][T27404] [ 1494.894038][T27404] dump_stack_lvl+0x189/0x250 [ 1494.894070][T27404] ? __lock_acquire+0xaac/0xd20 [ 1494.894106][T27404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1494.894131][T27404] ? __pfx__printk+0x10/0x10 [ 1494.894150][T27404] ? __might_fault+0xb0/0x130 [ 1494.894187][T27404] should_fail_ex+0x414/0x560 [ 1494.894212][T27404] _copy_from_user+0x2d/0xb0 [ 1494.894240][T27404] scsi_ioctl+0x1693/0x2000 [ 1494.894264][T27404] ? kasan_save_track+0x4f/0x80 [ 1494.894357][T27404] ? kasan_save_track+0x3e/0x80 [ 1494.894388][T27404] ? __pfx_scsi_ioctl+0x10/0x10 [ 1494.894453][T27404] ? kasan_quarantine_put+0xdd/0x220 [ 1494.894488][T27404] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1494.894509][T27404] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1494.894529][T27404] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 1494.894548][T27404] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1494.894570][T27404] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1494.894622][T27404] sg_ioctl+0x158e/0x2230 [ 1494.894657][T27404] ? __pfx_sg_ioctl+0x10/0x10 [ 1494.894680][T27404] ? __fget_files+0x2a/0x420 [ 1494.894712][T27404] ? __fget_files+0x3a0/0x420 [ 1494.894736][T27404] ? __fget_files+0x2a/0x420 [ 1494.894777][T27404] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1494.894803][T27404] ? __pfx_sg_ioctl+0x10/0x10 [ 1494.894823][T27404] __se_sys_ioctl+0xf9/0x170 [ 1494.894858][T27404] do_syscall_64+0xf6/0x210 [ 1494.894884][T27404] ? clear_bhb_loop+0x60/0xb0 [ 1494.894910][T27404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.894929][T27404] RIP: 0033:0x7f2df178e969 [ 1494.894948][T27404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1494.894976][T27404] RSP: 002b:00007f2df26b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1494.894999][T27404] RAX: ffffffffffffffda RBX: 00007f2df19b5fa0 RCX: 00007f2df178e969 [ 1494.895024][T27404] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000005 [ 1494.895037][T27404] RBP: 00007f2df26b8090 R08: 0000000000000000 R09: 0000000000000000 [ 1494.895049][T27404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1494.895061][T27404] R13: 0000000000000000 R14: 00007f2df19b5fa0 R15: 00007f2df1adfa28 [ 1494.895094][T27404] [ 1495.138105][T11682] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 1495.143775][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1495.153427][T11686] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1495.177215][T11682] usb 5-1: device descriptor read/8, error -71 [ 1495.221169][T27406] dvmrp1: entered allmulticast mode [ 1495.306439][T11686] usb 1-1: Using ep0 maxpacket: 8 [ 1495.313476][T11686] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 1495.334124][T11686] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1495.351022][T11686] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1495.374831][T11686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.388438][T11686] usb 1-1: Product: syz [ 1495.392657][T11686] usb 1-1: Manufacturer: syz [ 1495.416647][T26431] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 1495.425501][T11682] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 1495.439176][T11686] usb 1-1: SerialNumber: syz [ 1495.449295][T11686] usb 1-1: config 0 descriptor?? [ 1495.464922][T11682] usb 5-1: device descriptor read/8, error -71 [ 1495.583180][T11682] usb usb5-port1: unable to enumerate USB device [ 1495.593406][T26431] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1495.606076][T27415] fuse: Unknown parameter '.' [ 1495.613644][T26431] usb 7-1: not running at top speed; connect to a high speed hub [ 1495.623049][T26431] usb 7-1: config 12 has an invalid interface number: 184 but max is 0 [ 1495.623626][T27415] netlink: 'syz.3.5858': attribute type 11 has an invalid length. [ 1495.631903][T11686] rc_core: IR keymap rc-streamzap not found [ 1495.631920][T11686] Registered IR keymap rc-empty [ 1495.654493][T26431] usb 7-1: config 12 has no interface number 0 [ 1495.660904][T26431] usb 7-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1495.680911][T11686] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1495.700203][T26431] usb 7-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 1495.713193][T26431] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.725756][T26431] usb 7-1: Product: syz [ 1495.732457][T11686] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input79 [ 1495.743648][ T30] audit: type=1326 audit(1748291632.650:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27411 comm="syz.5.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07b38e969 code=0x7fc00000 [ 1495.781437][T26431] usb 7-1: Manufacturer: syz [ 1495.787437][T26431] usb 7-1: SerialNumber: syz [ 1495.826833][T11686] usb 1-1: USB disconnect, device number 93 [ 1495.986579][ T3076] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1496.058812][T27402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1496.082518][T27402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1496.116553][ T3076] usb 6-1: device descriptor read/64, error -71 [ 1496.135446][T26431] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1496.234975][T26431] usb 7-1: USB disconnect, device number 16 [ 1496.366397][ T3076] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1496.516367][ T3076] usb 6-1: device descriptor read/64, error -71 [ 1496.542075][T27434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5861'. [ 1496.552204][T27434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5861'. [ 1496.638455][ T3076] usb usb6-port1: attempt power cycle [ 1496.986711][ T3076] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1497.006542][T11701] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1497.017851][ T3076] usb 6-1: device descriptor read/8, error -71 [ 1497.274153][ T3076] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1497.300253][ T3076] usb 6-1: device descriptor read/8, error -71 [ 1497.448438][ T3076] usb usb6-port1: unable to enumerate USB device [ 1497.686884][T27444] syz.6.5866 (27444) used obsolete PPPIOCDETACH ioctl [ 1497.756577][ T3076] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1497.916323][ T3076] usb 4-1: Using ep0 maxpacket: 16 [ 1497.932887][ T3076] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1497.951893][ T3076] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1497.968087][ T3076] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1497.977372][ T3076] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.988270][ T3076] usb 4-1: config 0 descriptor?? [ 1498.136682][ T48] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1498.302017][T27450] fuse: Unknown parameter '.' [ 1498.314314][T27450] netlink: 'syz.0.5869': attribute type 11 has an invalid length. [ 1498.316349][ T48] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1498.355442][ T48] usb 7-1: config 13 has an invalid interface number: 50 but max is 3 [ 1498.389927][ T48] usb 7-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 1498.416771][ T30] audit: type=1326 audit(1748291635.320:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27411 comm="syz.5.5857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fd07b38e969 code=0x7fc00000 [ 1498.557605][ T48] usb 7-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 1498.598039][ T48] usb 7-1: config 13 has no interface number 0 [ 1498.646138][ T48] usb 7-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 1498.664064][ T48] usb 7-1: config 13 interface 50 has no altsetting 0 [ 1498.675031][ T48] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 1498.698691][ T48] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.709729][ T3076] hid (null): global environment stack underflow [ 1498.716210][ T3076] hid (null): global environment stack underflow [ 1498.732416][ T48] usb 7-1: Product: syz [ 1498.739790][ T48] usb 7-1: Manufacturer: syz [ 1498.746368][ T3076] hid (null): unknown global tag 0xe [ 1498.754931][ T48] usb 7-1: SerialNumber: syz [ 1498.760064][ T3076] hid (null): unknown global tag 0xc [ 1498.779219][ T3076] hid (null): unknown global tag 0xd [ 1498.790628][ T3076] hid (null): unknown global tag 0xd [ 1498.796201][ T3076] hid (null): bogus close delimiter [ 1498.824415][ T3076] cougar 0003:060B:500A.0023: unexpected long global item [ 1498.843855][ T3076] cougar 0003:060B:500A.0023: parse failed [ 1498.876620][ T3076] cougar 0003:060B:500A.0023: probe with driver cougar failed with error -22 [ 1498.992607][ T30] audit: type=1326 audit(1748291635.900:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27456 comm="syz.0.5871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc0b8e969 code=0x7ffc0000 [ 1499.042128][ T30] audit: type=1326 audit(1748291635.900:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27456 comm="syz.0.5871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f9fc0b8e969 code=0x7ffc0000 [ 1499.067330][ T30] audit: type=1326 audit(1748291635.900:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27456 comm="syz.0.5871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc0b8e969 code=0x7ffc0000 [ 1499.090902][ T30] audit: type=1326 audit(1748291635.900:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27456 comm="syz.0.5871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9fc0b8d2d0 code=0x7ffc0000 [ 1499.115402][ T30] audit: type=1326 audit(1748291635.900:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27456 comm="syz.0.5871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc0b8e969 code=0x7ffc0000 [ 1499.124157][ T48] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1499.139760][ T30] audit: type=1326 audit(1748291635.910:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27456 comm="syz.0.5871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f9fc0b8e969 code=0x7ffc0000 [ 1499.160167][ T1155] usb 7-1: Failed to submit usb control message: -71 [ 1499.171752][ T30] audit: type=1326 audit(1748291635.910:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27456 comm="syz.0.5871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc0b8e969 code=0x7ffc0000 [ 1499.202206][ T30] audit: type=1326 audit(1748291635.910:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27456 comm="syz.0.5871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9fc0b8e969 code=0x7ffc0000 [ 1499.225091][ T1155] usb 7-1: unable to send the bmi data to the device: -71 [ 1499.242853][ T1155] usb 7-1: unable to get target info from device [ 1499.250601][ T1155] usb 7-1: could not get target info (-71) [ 1499.251260][ T3076] usb 4-1: USB disconnect, device number 99 [ 1499.284891][ T1155] usb 7-1: could not probe fw (-71) [ 1499.328641][ T48] usb 7-1: USB disconnect, device number 17 [ 1499.811901][T27481] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5878'. [ 1499.897862][T27481] tun1: tun_chr_ioctl cmd 1074025675 [ 1499.903329][T27481] tun1: persist enabled [ 1499.929149][T27481] tun1: tun_chr_ioctl cmd 1074025675 [ 1499.934509][T27481] tun1: persist enabled [ 1500.010000][T27491] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5882'. [ 1500.110401][T27489] fuse: Unknown parameter '.' [ 1500.149933][T27489] netlink: 'syz.0.5881': attribute type 11 has an invalid length. [ 1500.179499][T27496] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5883'. [ 1500.211347][T27496] netlink: zone id is out of range [ 1500.258953][T27496] netlink: zone id is out of range [ 1500.297964][T27496] netlink: get zone limit has 8 unknown bytes [ 1500.726834][T26431] usb 6-1: new full-speed USB device number 104 using dummy_hcd [ 1500.966824][T26431] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1500.996458][T26431] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1501.036719][T26431] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1501.083366][T26431] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1501.103312][T26431] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.117932][T26431] usb 6-1: Product: syz [ 1501.122158][T26431] usb 6-1: Manufacturer: syz [ 1501.135597][T26431] usb 6-1: SerialNumber: syz [ 1501.206365][T11701] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1501.294135][T27520] openvswitch: netlink: VXLAN extension 149 out of range max 1 [ 1501.388295][T11701] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1501.409613][T27522] usb usb8: usbfs: process 27522 (syz.6.5892) did not claim interface 0 before use [ 1501.547003][T11701] usb 1-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 1501.559056][T11701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.591775][T11701] usb 1-1: Product: syz [ 1501.596093][T11701] usb 1-1: Manufacturer: syz [ 1501.617274][T11701] usb 1-1: SerialNumber: syz [ 1501.627291][T11701] usb 1-1: config 0 descriptor?? [ 1501.666850][T11701] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -32 [ 1502.077337][ T3076] usb 1-1: USB disconnect, device number 94 [ 1502.177285][T11681] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1502.426331][T11681] usb 5-1: Using ep0 maxpacket: 16 [ 1502.477947][T11681] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1502.500023][T27536] FAULT_INJECTION: forcing a failure. [ 1502.500023][T27536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1502.540874][T27536] CPU: 1 UID: 0 PID: 27536 Comm: syz.3.5895 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 1502.540903][T27536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1502.540915][T27536] Call Trace: [ 1502.540923][T27536] [ 1502.540932][T27536] dump_stack_lvl+0x189/0x250 [ 1502.540965][T27536] ? __lock_acquire+0xaac/0xd20 [ 1502.540986][T27536] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1502.541011][T27536] ? __pfx__printk+0x10/0x10 [ 1502.541032][T27536] ? __might_fault+0xb0/0x130 [ 1502.541113][T27536] should_fail_ex+0x414/0x560 [ 1502.541143][T27536] _copy_from_iter+0x1db/0x15a0 [ 1502.541174][T27536] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 1502.541205][T27536] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1502.541226][T27536] ? __pfx__copy_from_iter+0x10/0x10 [ 1502.541251][T27536] ? __build_skb_around+0x257/0x3e0 [ 1502.541280][T27536] ? netlink_sendmsg+0x642/0xb30 [ 1502.541301][T27536] ? skb_put+0x11b/0x210 [ 1502.541328][T27536] netlink_sendmsg+0x6b2/0xb30 [ 1502.541350][T27536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1502.541367][T27536] ? aa_sock_msg_perm+0x94/0x160 [ 1502.541384][T27536] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1502.541405][T27536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1502.541429][T27536] __sock_sendmsg+0x21c/0x270 [ 1502.541453][T27536] ____sys_sendmsg+0x505/0x830 [ 1502.541484][T27536] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1502.541507][T27536] ? import_iovec+0x74/0xa0 [ 1502.541526][T27536] ___sys_sendmsg+0x21f/0x2a0 [ 1502.541545][T27536] ? __pfx____sys_sendmsg+0x10/0x10 [ 1502.541609][T27536] ? __fget_files+0x2a/0x420 [ 1502.541673][T27536] ? __fget_files+0x3a0/0x420 [ 1502.541695][T27536] __x64_sys_sendmsg+0x19b/0x260 [ 1502.541722][T27536] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1502.541767][T27536] ? do_syscall_64+0xba/0x210 [ 1502.541796][T27536] do_syscall_64+0xf6/0x210 [ 1502.541827][T27536] ? clear_bhb_loop+0x60/0xb0 [ 1502.541849][T27536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.541862][T27536] RIP: 0033:0x7f2df178e969 [ 1502.541875][T27536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1502.541885][T27536] RSP: 002b:00007f2df26b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1502.541903][T27536] RAX: ffffffffffffffda RBX: 00007f2df19b5fa0 RCX: 00007f2df178e969 [ 1502.541918][T27536] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000012 [ 1502.541931][T27536] RBP: 00007f2df26b8090 R08: 0000000000000000 R09: 0000000000000000 [ 1502.541959][T27536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1502.541971][T27536] R13: 0000000000000000 R14: 00007f2df19b5fa0 R15: 00007f2df1adfa28 [ 1502.542009][T27536] [ 1502.936006][T11681] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1503.062519][T11681] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1503.151238][T11681] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1503.164611][T11681] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1503.192742][T11681] usb 5-1: config 0 descriptor?? [ 1503.650587][T11681] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input81 [ 1503.665373][ T5185] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1503.695563][ T5185] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1503.899747][ T3076] usb 5-1: USB disconnect, device number 62 [ 1504.193802][T27543] delete_channel: no stack [ 1504.529803][T27554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5899'. [ 1504.661573][T27554] tun3: tun_chr_ioctl cmd 1074025675 [ 1504.677425][T27554] tun3: persist enabled [ 1504.706593][T27554] tun3: tun_chr_ioctl cmd 1074025675 [ 1504.736412][T27554] tun3: persist enabled [ 1505.172710][T26431] usb 6-1: USB disconnect, device number 104 [ 1505.260963][T19179] udevd[19179]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1506.293507][T27582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5909'. [ 1506.417466][T26431] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1506.524320][T27589] FAULT_INJECTION: forcing a failure. [ 1506.524320][T27589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1506.586877][T27589] CPU: 0 UID: 0 PID: 27589 Comm: syz.0.5910 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 1506.586908][T27589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1506.586921][T27589] Call Trace: [ 1506.586930][T27589] [ 1506.586939][T27589] dump_stack_lvl+0x189/0x250 [ 1506.586976][T27589] ? __lock_acquire+0xaac/0xd20 [ 1506.587006][T27589] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1506.587033][T27589] ? __pfx__printk+0x10/0x10 [ 1506.587054][T27589] ? __might_fault+0xb0/0x130 [ 1506.587093][T27589] should_fail_ex+0x414/0x560 [ 1506.587120][T27589] _copy_from_iter+0x1db/0x15a0 [ 1506.587155][T27589] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 1506.587177][T27589] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1506.587204][T27589] ? __pfx__copy_from_iter+0x10/0x10 [ 1506.587232][T27589] ? __build_skb_around+0x257/0x3e0 [ 1506.587271][T27589] ? netlink_sendmsg+0x642/0xb30 [ 1506.587293][T27589] ? skb_put+0x11b/0x210 [ 1506.587322][T27589] netlink_sendmsg+0x6b2/0xb30 [ 1506.587355][T27589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1506.587381][T27589] ? aa_sock_msg_perm+0x94/0x160 [ 1506.587406][T27589] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1506.587429][T27589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1506.587454][T27589] __sock_sendmsg+0x21c/0x270 [ 1506.587480][T27589] ____sys_sendmsg+0x505/0x830 [ 1506.587515][T27589] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1506.587554][T27589] ? import_iovec+0x74/0xa0 [ 1506.587585][T27589] ___sys_sendmsg+0x21f/0x2a0 [ 1506.587617][T27589] ? __pfx____sys_sendmsg+0x10/0x10 [ 1506.587685][T27589] ? __fget_files+0x2a/0x420 [ 1506.587710][T27589] ? __fget_files+0x3a0/0x420 [ 1506.587748][T27589] __x64_sys_sendmsg+0x19b/0x260 [ 1506.587778][T27589] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1506.587825][T27589] ? do_syscall_64+0xba/0x210 [ 1506.587855][T27589] do_syscall_64+0xf6/0x210 [ 1506.587882][T27589] ? clear_bhb_loop+0x60/0xb0 [ 1506.587906][T27589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1506.587925][T27589] RIP: 0033:0x7f9fc0b8e969 [ 1506.587944][T27589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1506.587960][T27589] RSP: 002b:00007f9fbe9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1506.587982][T27589] RAX: ffffffffffffffda RBX: 00007f9fc0db5fa0 RCX: 00007f9fc0b8e969 [ 1506.587996][T27589] RDX: 0000000004000804 RSI: 0000200000000400 RDI: 0000000000000003 [ 1506.588009][T27589] RBP: 00007f9fbe9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1506.588021][T27589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1506.588033][T27589] R13: 0000000000000000 R14: 00007f9fc0db5fa0 R15: 00007f9fc0edfa28 [ 1506.588065][T27589] [ 1507.066736][T26431] usb 7-1: Using ep0 maxpacket: 8 [ 1507.073856][T26431] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1507.083991][T26431] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1507.093963][T26431] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1507.104109][T26431] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1507.117355][T26431] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1507.126481][T26431] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.280221][T27593] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 1507.325873][T27596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5913'. [ 1507.340410][T22882] Bluetooth: hci2: command 0x0406 tx timeout [ 1507.377719][T26431] usb 7-1: GET_CAPABILITIES returned 0 [ 1507.382863][T27596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5913'. [ 1507.383279][T26431] usbtmc 7-1:16.0: can't read capabilities [ 1507.434005][T27598] netlink: 452 bytes leftover after parsing attributes in process `syz.0.5914'. [ 1507.577369][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1507.586665][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1507.595741][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1507.604897][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1507.700122][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1507.709315][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1507.718376][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1507.727429][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1507.736695][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1507.800002][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1507.809161][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1507.818474][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1507.827677][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1507.836872][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1507.863090][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1507.872429][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1508.466326][T26431] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1508.646384][T26431] usb 4-1: Using ep0 maxpacket: 8 [ 1508.662010][T26431] usb 4-1: config 64 has an invalid interface number: 178 but max is 0 [ 1508.681411][T26431] usb 4-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 1508.768425][T26431] usb 4-1: config 64 has no interface number 0 [ 1508.775405][T26431] usb 4-1: too many endpoints for config 64 interface 178 altsetting 1: 227, using maximum allowed: 30 [ 1508.789721][T26431] usb 4-1: config 64 interface 178 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 227 [ 1508.806504][T26431] usb 4-1: config 64 interface 178 has no altsetting 0 [ 1508.898241][T26431] usb 4-1: New USB device found, idVendor=f755, idProduct=92f0, bcdDevice=ec.60 [ 1508.908242][T26431] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.917347][T26431] usb 4-1: Product: syz [ 1508.921863][T26431] usb 4-1: Manufacturer: syz [ 1508.928150][T26431] usb 4-1: SerialNumber: syz [ 1509.170726][T27602] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5915'. [ 1509.232523][T27616] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5917'. [ 1509.438587][T11686] usb 7-1: USB disconnect, device number 18 [ 1509.677917][T27621] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5919'. [ 1509.854424][T27626] FAULT_INJECTION: forcing a failure. [ 1509.854424][T27626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1509.872034][T27626] CPU: 1 UID: 0 PID: 27626 Comm: syz.5.5920 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 1509.872066][T27626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1509.872078][T27626] Call Trace: [ 1509.872088][T27626] [ 1509.872097][T27626] dump_stack_lvl+0x189/0x250 [ 1509.872132][T27626] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1509.872149][T27626] ? __pfx__printk+0x10/0x10 [ 1509.872168][T27626] should_fail_ex+0x414/0x560 [ 1509.872190][T27626] _copy_to_user+0x31/0xb0 [ 1509.872219][T27626] put_itimerspec64+0x168/0x1d0 [ 1509.872244][T27626] ? __pfx_put_itimerspec64+0x10/0x10 [ 1509.872275][T27626] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1509.872295][T27626] ? do_timer_settime+0x48d/0x4b0 [ 1509.872314][T27626] __x64_sys_timer_settime+0x1c9/0x240 [ 1509.872330][T27626] ? __pfx___x64_sys_timer_settime+0x10/0x10 [ 1509.872359][T27626] ? do_syscall_64+0xba/0x210 [ 1509.872388][T27626] do_syscall_64+0xf6/0x210 [ 1509.872412][T27626] ? clear_bhb_loop+0x60/0xb0 [ 1509.872435][T27626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.872451][T27626] RIP: 0033:0x7fd07b38e969 [ 1509.872462][T27626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1509.872473][T27626] RSP: 002b:00007fd07c204038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 1509.872487][T27626] RAX: ffffffffffffffda RBX: 00007fd07b5b6080 RCX: 00007fd07b38e969 [ 1509.872496][T27626] RDX: 0000200000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1509.872506][T27626] RBP: 00007fd07c204090 R08: 0000000000000000 R09: 0000000000000000 [ 1509.872517][T27626] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 1509.872529][T27626] R13: 0000000000000001 R14: 00007fd07b5b6080 R15: 00007fd07b6dfa28 [ 1509.872560][T27626] [ 1510.203286][T27621] tun2: tun_chr_ioctl cmd 1074025675 [ 1510.394034][T27621] tun2: persist enabled [ 1510.703454][T26431] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1510.732216][T26431] usb 4-1: MIDIStreaming interface descriptor not found [ 1510.813486][T27630] netlink: 'syz.5.5921': attribute type 9 has an invalid length. [ 1510.854981][T27630] netlink: 146708 bytes leftover after parsing attributes in process `syz.5.5921'. [ 1510.928012][T26431] usb 4-1: USB disconnect, device number 100 [ 1511.248900][T11682] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1511.536382][T11682] usb 5-1: Using ep0 maxpacket: 8 [ 1511.597737][T27645] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5925'. [ 1511.825236][T27645] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5925'. [ 1511.857874][T11682] usb 5-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 1511.874570][T11682] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.883132][T11682] usb 5-1: Product: syz [ 1511.899204][T11682] usb 5-1: Manufacturer: syz [ 1511.909196][T11682] usb 5-1: SerialNumber: syz [ 1511.934191][T11682] usb 5-1: config 0 descriptor?? [ 1511.962924][T11682] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 1512.088728][T26431] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1512.164240][T11682] pwc: Failed to set LED on/off time (-71) [ 1512.177291][T11682] pwc: send_video_command error -71 [ 1512.182534][T11682] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1512.218229][T11682] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1512.255272][T11682] usb 5-1: USB disconnect, device number 63 [ 1512.266941][T26431] usb 6-1: Using ep0 maxpacket: 16 [ 1512.382791][T27643] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1512.395385][T27643] netlink: 208 bytes leftover after parsing attributes in process `syz.5.5924'. [ 1512.543607][T27657] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1513.317771][T27674] usb usb8: usbfs: process 27674 (syz.4.5933) did not claim interface 0 before use [ 1513.656462][T11682] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1513.826882][T11682] usb 5-1: Using ep0 maxpacket: 32 [ 1513.859456][T11682] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1513.900884][T11682] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1513.910529][T11682] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.919324][T11682] usb 5-1: Product: syz [ 1513.944883][T11682] usb 5-1: Manufacturer: syz [ 1514.031215][T11682] usb 5-1: SerialNumber: syz [ 1514.059470][T11682] usb 5-1: config 0 descriptor?? [ 1516.190713][T26431] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1516.220561][T26431] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1516.250004][T26431] usb 6-1: can't read configurations, error -71 [ 1516.454929][T11701] usb 5-1: USB disconnect, device number 64 [ 1516.564646][T27709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5947'. [ 1516.682913][T27709] tun0: tun_chr_ioctl cmd 1074025675 [ 1516.726582][T27709] tun0: persist enabled [ 1516.742346][T27713] netlink: 2048 bytes leftover after parsing attributes in process `syz.5.5945'. [ 1516.751807][T27713] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5945'. [ 1516.795236][T27717] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5951'. [ 1516.804526][T27709] tun0: tun_chr_ioctl cmd 1074025675 [ 1516.830782][T27709] tun0: persist enabled [ 1516.840821][T27718] ================================================================== [ 1516.848932][T27718] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1516.857570][T27718] Write of size 32 at addr ffffc90004568000 by task vivid-000-vid-c/27718 [ 1516.866161][T27718] [ 1516.868530][T27718] CPU: 1 UID: 0 PID: 27718 Comm: vivid-000-vid-c Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 1516.868557][T27718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1516.868569][T27718] Call Trace: [ 1516.868578][T27718] [ 1516.868586][T27718] dump_stack_lvl+0x189/0x250 [ 1516.868621][T27718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1516.868648][T27718] ? __pfx__printk+0x10/0x10 [ 1516.868668][T27718] ? __pfx__printk+0x10/0x10 [ 1516.868685][T27718] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1516.868709][T27718] ? __virt_addr_valid+0xc3/0x540 [ 1516.868736][T27718] print_report+0xb4/0x290 [ 1516.868759][T27718] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1516.868783][T27718] kasan_report+0x118/0x150 [ 1516.868809][T27718] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1516.868836][T27718] kasan_check_range+0x29a/0x2b0 [ 1516.868860][T27718] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1516.868883][T27718] __asan_memcpy+0x40/0x70 [ 1516.868903][T27718] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1516.868956][T27718] vivid_thread_vid_cap_tick+0xfff/0x5fe0 [ 1516.868994][T27718] ? kvm_sched_clock_read+0x11/0x20 [ 1516.869019][T27718] ? __lock_acquire+0xaac/0xd20 [ 1516.869055][T27718] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1516.869087][T27718] ? cgroup_freezing+0x2ad/0x360 [ 1516.869113][T27718] vivid_thread_vid_cap+0x8d8/0x10d0 [ 1516.869157][T27718] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1516.869179][T27718] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1516.869201][T27718] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1516.869227][T27718] ? __kthread_parkme+0x7b/0x200 [ 1516.869248][T27718] ? __kthread_parkme+0x1a1/0x200 [ 1516.869270][T27718] kthread+0x70e/0x8a0 [ 1516.869294][T27718] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1516.869316][T27718] ? __pfx_kthread+0x10/0x10 [ 1516.869340][T27718] ? __pfx_kthread+0x10/0x10 [ 1516.869362][T27718] ? _raw_spin_unlock_irq+0x23/0x50 [ 1516.869383][T27718] ? lockdep_hardirqs_on+0x9c/0x150 [ 1516.869407][T27718] ? __pfx_kthread+0x10/0x10 [ 1516.869428][T27718] ret_from_fork+0x4b/0x80 [ 1516.869449][T27718] ? __pfx_kthread+0x10/0x10 [ 1516.869472][T27718] ret_from_fork_asm+0x1a/0x30 [ 1516.869497][T27718] [ 1516.869505][T27718] [ 1517.081019][T27718] The buggy address belongs to the virtual mapping at [ 1517.081019][T27718] [ffffc90004567000, ffffc90004569000) created by: [ 1517.081019][T27718] vb2_vmalloc_alloc+0xef/0x340 [ 1517.099080][T27718] [ 1517.101575][T27718] Memory state around the buggy address: [ 1517.107229][T27718] ffffc90004567f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1517.115293][T27718] ffffc90004567f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1517.123362][T27718] >ffffc90004568000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1517.131587][T27718] ^ [ 1517.135642][T27718] ffffc90004568080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1517.143696][T27718] ffffc90004568100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1517.151746][T27718] ================================================================== [ 1517.223505][T27718] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1517.230849][T27718] CPU: 1 UID: 0 PID: 27718 Comm: vivid-000-vid-c Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 1517.241313][T27718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1517.251413][T27718] Call Trace: [ 1517.254717][T27718] [ 1517.257664][T27718] dump_stack_lvl+0x99/0x250 [ 1517.262262][T27718] ? __asan_memcpy+0x40/0x70 [ 1517.266934][T27718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1517.272164][T27718] ? __pfx__printk+0x10/0x10 [ 1517.276834][T27718] panic+0x2db/0x790 [ 1517.280853][T27718] ? __pfx_panic+0x10/0x10 [ 1517.285300][T27718] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1517.291226][T27718] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1517.297657][T27718] ? print_memory_metadata+0x314/0x400 [ 1517.303135][T27718] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1517.308773][T27718] check_panic_on_warn+0x89/0xb0 [ 1517.314012][T27718] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1517.319850][T27718] end_report+0x78/0x160 [ 1517.324135][T27718] kasan_report+0x129/0x150 [ 1517.328740][T27718] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1517.334384][T27718] kasan_check_range+0x29a/0x2b0 [ 1517.339411][T27718] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1517.345047][T27718] __asan_memcpy+0x40/0x70 [ 1517.349567][T27718] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1517.355146][T27718] vivid_thread_vid_cap_tick+0xfff/0x5fe0 [ 1517.360904][T27718] ? kvm_sched_clock_read+0x11/0x20 [ 1517.366111][T27718] ? __lock_acquire+0xaac/0xd20 [ 1517.370980][T27718] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1517.377141][T27718] ? cgroup_freezing+0x2ad/0x360 [ 1517.382097][T27718] vivid_thread_vid_cap+0x8d8/0x10d0 [ 1517.387398][T27718] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1517.393115][T27718] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1517.399117][T27718] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1517.405454][T27718] ? __kthread_parkme+0x7b/0x200 [ 1517.410667][T27718] ? __kthread_parkme+0x1a1/0x200 [ 1517.415950][T27718] kthread+0x70e/0x8a0 [ 1517.420143][T27718] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1517.425961][T27718] ? __pfx_kthread+0x10/0x10 [ 1517.430559][T27718] ? __pfx_kthread+0x10/0x10 [ 1517.435164][T27718] ? _raw_spin_unlock_irq+0x23/0x50 [ 1517.440376][T27718] ? lockdep_hardirqs_on+0x9c/0x150 [ 1517.445586][T27718] ? __pfx_kthread+0x10/0x10 [ 1517.450276][T27718] ret_from_fork+0x4b/0x80 [ 1517.454690][T27718] ? __pfx_kthread+0x10/0x10 [ 1517.459280][T27718] ret_from_fork_asm+0x1a/0x30 [ 1517.464043][T27718] [ 1517.467399][T27718] Kernel Offset: disabled [ 1517.471723][T27718] Rebooting in 86400 seconds..