last executing test programs: 9.817942942s ago: executing program 4 (id=1866): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="f78d9ca38fdc00f3be52163448412ba8d5d72c63e8de51f666efc53ce67f4fcb38b1d0c379047b25e55632d02f1f66d5987eff1d406d", 0x36}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000170100000300000001"], 0x18}], 0x1, 0x0) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000006400), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000680)="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", 0x151, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r4}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) recvmmsg(r1, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/13, 0xd}, {&(0x7f0000000280)=""/38, 0x26}], 0x2}, 0x3ff}], 0x1, 0x40002020, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x94, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x2}}, [@TCA_STAB={0x70, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x4, 0x1, 0x3, 0x0, 0x2ca9, 0x7, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x7, 0xb, 0x3ff, 0x7, 0x1, 0xa, 0x8, 0x2}}, {0x8, 0x2, [0xffff, 0x9d3]}}, {{0x1c, 0x1, {0x0, 0x1, 0xff7f, 0x0, 0x1, 0xa, 0x2, 0x1}}, {0x6, 0x2, [0x7]}}]}]}, 0x94}}, 0x0) r9 = socket(0x10, 0x803, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x0, 0xffffff00, 0x3, 0x0, {@empty, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 'veth0_to_bridge\x00', 'veth1_macvtap\x00', {}, {}, 0x0, 0x17c}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="17588d79fe8f", @rand_addr=0x64010100, @multicast1, 0x2, 0xffffffff}}}, {{@arp={@rand_addr=0x64010101, @rand_addr, 0x0, 0x0, 0xc, 0x3, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x8a8cfb792f7af7f0]}}, 0x0, 0xfffc, 0x0, 0xa51, 0x0, 0x1000, 'team_slave_0\x00', 'sit0\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4}}}, {{@arp={@local, @remote, 0xffffffff, 0x0, 0x0, 0x9, {@mac}, {@mac=@random="7c3a86e2977f", {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffff, 'veth0_to_bond\x00', 'geneve1\x00', {0xff}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @local, @empty, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x440) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0xee0e}]}}]}, 0x3c}}, 0x20040054) 9.617754827s ago: executing program 4 (id=1867): fsopen(0x0, 0x1) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000280)={0x48, 0x5, r5}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r6, 0x0, 0x0, 0xff, 0x0, 0x0) r7 = socket$kcm(0x2, 0x5, 0x84) r8 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8, 0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f0000000140)={0x2, 0x388b}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r8, 0x4020565b, &(0x7f0000000000)={0x0, 0x1, 0x3}) setsockopt$sock_attach_bpf(r7, 0x84, 0x11, &(0x7f0000000000), 0x8) r9 = landlock_create_ruleset(&(0x7f0000000000)={0x6084}, 0x10, 0x0) landlock_restrict_self(r9, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 8.526710331s ago: executing program 3 (id=1869): r0 = fanotify_init(0x200, 0x40000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x1, 0x0, 0xb49, 0xc, 0x8, 0x0, 0x3}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0x7c81, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) unshare(0x2a020400) r5 = openat(0xffffffffffffff9c, 0x0, 0xa000, 0x1da) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, 0x0, 0x310) ioctl$FITHAW(r0, 0xc0045878) read$FUSE(r5, &(0x7f0000002080)={0x2020}, 0x2020) close(r5) fsopen(0x0, 0x1) setsockopt$sock_attach_bpf(r4, 0x84, 0x17, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x51, 0x0, 0x5, {0x80, 0x1}, {0x4c, 0x2}, @const={0x5, {0x0, 0xd, 0x100, 0x4}}}) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r7, &(0x7f0000000040)="e2", 0x12d8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000740)=""/14, 0xfef9) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x101, 0x48001051, r8, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r9, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/125, 0x7d}], 0x1, 0x3, 0x1) 7.947922275s ago: executing program 4 (id=1870): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @mcast1, 0x200}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x2, @remote, 0x4}, 0x1c) syz_usb_connect(0x3, 0x24, &(0x7f0000000e40)={{0x12, 0x1, 0x300, 0x94, 0xd5, 0xe1, 0x20, 0x9710, 0x7840, 0x6b91, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x8, 0xd0, 0x9, [{{0x9, 0x4, 0x97, 0x0, 0x0, 0xf5, 0xf, 0xae, 0x6}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x5, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000082505a1a440000102030109025c00010109c0000904008b06020600ee0824060000f84a00052410bf3a0d240f010400000004000f00021524120080a317a88b045e4f01a607c0ffcb7e392a09058103100000078c090582020800986901090503024000099009"], &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x2, 0x76, 0x2, 0xff, 0xe}, 0x16, &(0x7f00000000c0)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x4, 0x9, 0x6f}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x9, 0x39}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x440a}}, {0xeb, &(0x7f0000000480)=@string={0xeb, 0x3, "265f462b7e839415c0a424ae6d90327c83dfc22818c1bba1a11598d59d192ada863acee61f8654709826bfabacadf3d5e9c3b3947cb4b1b1034830e46e466f9beb7dd718c02001eaeab0f6a0daa75a853715836fba0213125fa1859ffefbe7a2509360490e717ff8a83ec8baab3db5cd872e18e32c176a01c5b7a8810a1963fb2c0134b318e93e0fbdbfab8475963cae18a46b4ee7662ab4b3a2bb078a0600000070d7702c1f4f28330d0be93df52c69a8309e1628e36b2205c809b4c6786bf20974161de4e7d3a57688880f82d32cb9f26106219f25082a390c15e815158a9453a21261ef14dc3c7b"}}, {0xe9, &(0x7f0000000240)=@string={0xe9, 0x3, "727cfc2b7dd4011d85e67c86962eb58351f0605a345d8e2f18b2d50a12daa8450304839ee8d5d8b1c8e9f9dc724c2a91d319598727225358753a24e9614cd60d40813c8f7bc91ad4b5169e2cb38e958536255dbba125a55ae04d01f1b4ea7258e8e337bcfc13aa80ceae1e3b1eca9e12fcab415f200f754d39c125aa33268534d48fca6d544cc45a935a65a0f0a6956304a2e9695c1fa4176ace0688f82b28abf89a2f33fcb122e94bf1425872eaa2d93e4598c1c28256037a66d0cc745c4b9284204c07ebc266ca45bc3aab583ebe388e1cf2029020a48576a4fc25a7348aa3faaf365c67725d"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x82c}}, {0x4d, &(0x7f0000000140)=@string={0x4d, 0x3, "81bd64bd8722d1eca49b01916d1572e8d940e945b67b77f266bba2d7403ee306dd3b9643eeb5d968c44c88c73528f430a6103806d61042f8ab1dfeb705bd1e838e4c7289b95e537b29368a"}}, {0x3f, &(0x7f00000003c0)=@string={0x3f, 0x3, "02e850c2286eb879ecdad3df84f7ee551264bbf1293968815069aa71ef16a39f986f639c7297d3f70312030fe733fce0ad9c1cb4de2389c71cf856e3e9"}}]}) 6.593909525s ago: executing program 0 (id=1876): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000020450c2b7600000000000109022400010000000009040000010300b400092102000001220500090581030000000000"], 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000b00)=0x7) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000b00)=0x6) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r4 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r4, 0xc0044dff, &(0x7f0000000100)=0x9) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = epoll_create1(0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000180)={0x5}) poll(&(0x7f0000000300)=[{r6, 0xb409}], 0x1, 0x99) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x87c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xffff, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x44c, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x8, 0x8, 0x7fff, 0x2, {0x3, 0x0, 0x2, 0x5, 0x3, 0x78}, {0x2, 0x2, 0x9, 0x3, 0x8000, 0x9}, 0xc1c8, 0xef, 0xffff}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xfd, 0x1, 0x1, 0x7, 0x24, 0xf4e1, 0xf, 0x40, 0x8, 0x3, 0xacc7, 0x6, 0x6, 0x0, 0x83d, 0x0, 0x10, 0xfffffff7, 0x0, 0x1, 0x81, 0x0, 0xae83, 0x2, 0x6, 0xe19, 0x1, 0x7, 0x3, 0x9, 0x8, 0x3, 0x80000001, 0xc3, 0xdde, 0x2, 0x8, 0xf, 0x6, 0x3, 0x436, 0x1, 0x0, 0x8, 0x2b9, 0x10000, 0x7, 0x10001, 0x7, 0xfffffff7, 0x9, 0x7, 0x0, 0x9, 0x6, 0x3, 0x6236, 0x4, 0xfffffffb, 0x7, 0x81, 0x800, 0x9, 0x1, 0x2, 0x8, 0x1, 0x10000, 0x6, 0xc, 0xec3f, 0x4, 0x1, 0x24a, 0x6, 0xc52a, 0xfb, 0x7f, 0x7e, 0xe00a06e, 0xa, 0x7, 0x9, 0x3, 0x36, 0xc, 0xffffff7f, 0xff, 0x80, 0x7, 0x3, 0xed9, 0xe50, 0x8, 0x10, 0x209, 0x8, 0x2, 0x8, 0x5, 0x80, 0x7, 0x5, 0x400000, 0x6, 0x5, 0x9, 0x9, 0x8, 0x7fffffff, 0x4, 0x8, 0x6, 0x94c, 0x7, 0x4, 0x4, 0x7, 0x7ff, 0xffffffff, 0x53d5da67, 0x0, 0xfffffffc, 0x5, 0x1, 0x0, 0x2, 0x6, 0x6, 0x1ea4, 0xb, 0x1, 0x100, 0x6, 0x5, 0x8, 0xfff, 0x3, 0x5, 0x3, 0x8001, 0x4, 0xfffff4a6, 0xfffffffc, 0x7, 0x7, 0x8, 0x7, 0xa, 0xa5, 0x7, 0x9, 0x3, 0x1ff, 0x1, 0x2c, 0xb, 0x8, 0x3, 0x9, 0x3, 0x40, 0x2a, 0x5, 0x80, 0x4, 0x2, 0x8, 0x9, 0x9, 0x93, 0x10, 0x0, 0x6, 0x1, 0x7, 0x6, 0x4, 0x2, 0x6, 0x1, 0x6, 0x10001, 0x7, 0xc, 0x4, 0x4, 0xffff0fc8, 0xd, 0x6, 0x3ff, 0x272b, 0x80000001, 0x10000, 0xa07a, 0x5, 0x40, 0x10000, 0x7fffffff, 0x200, 0x5, 0x5b6462c3, 0x101, 0x1, 0x1, 0x439, 0x2, 0x8, 0x3, 0x6, 0xeb1f, 0xe, 0x2, 0x81, 0xfff, 0x8, 0x3, 0x83, 0x40, 0x3f, 0x1, 0x2, 0x0, 0x3, 0x8, 0xe77f, 0x3, 0xfffffff9, 0x7f, 0x9, 0xa, 0x10000, 0x6, 0x9, 0x1, 0x3, 0x4, 0xe668, 0x2, 0x2, 0xa, 0x2, 0x9, 0x8, 0x9, 0x505, 0x404000, 0x0, 0x8, 0x3, 0x800, 0x80000001, 0x2, 0x6, 0x5]}]}, @TCA_BASIC_ACT={0xe8, 0x3, [@m_tunnel_key={0xe4, 0x7, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x34}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x2, 0x4, 0x7, 0xfffff2a3}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @rand_addr=' \x01\x00'}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x69, 0x6, "bc4be437e695691a986347a5aec4c20a34a459ee32636cbe15ddc9a2d726efeda45c6d10f106c4d02112899e33facc9307c7e01e99192b47abd564da4687e0f212f1dcde9917e537abcaabcda9d2af762dd5c3413b7239ac7cf1c32d727f3b164dcee74906"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BASIC_ACT={0x310, 0x3, [@m_skbedit={0xbc, 0x1a, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa, 0xb}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}]}, {0x6f, 0x6, "4478fe0c2590bd895d450d5d771f30202fa3c8e688c9816eb69864cef0e79bdbdb2492ca08ccb97e7cb6b7ee257d2c319602ac5578ff0558ced376d5e68227fff6c47ddcda97702bbbf64e862098ed71bd34115f0a65bcbb3fe4f30353f65557198b744dc473710158fe55"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0xe8, 0x3, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xffffff53}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}]}, {0xa2, 0x6, "9a4b72a7c40aa49e7e9bdac105acbdd08bd37ae177208a530e21ff257412e9559ded7405114102c219a92fa9ef2ef2eb7d313516edf0f6a1f4d0e37097cd113e07d595418342327cbad73a60591827f440c4fcda8e883b1d16b4b9cdf20d8496a0846133c8f4cc80cb6bb199803ac279054539a56ebaee5115796260b37306f4d902cfe94c6a63d61525748ccddab2d1a0d29ba97fe52541fef477374a59"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0x168, 0xa, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xf13b}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8001}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x2, 0x5, 0x3, 0x3}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}]}, {0x103, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BASIC_EMATCHES={0x4}]}}]}, 0x87c}}, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STARTDAEMON(r11, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth0_macvtap\x00', 0x2}, 0x18) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x7, 0x2, 0x6}) 6.355994079s ago: executing program 4 (id=1877): bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) socket$xdp(0x2c, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7f, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd606410a600490000", @ANYRESHEX=r0], 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) 6.046494323s ago: executing program 3 (id=1878): socket(0x1e, 0x4, 0x0) r0 = syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x10000000, 0x13a}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) io_uring_enter(r0, 0x38c5, 0x2000000, 0x3000000, 0x0, 0x0) 5.746122502s ago: executing program 3 (id=1879): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000004200)=0x0) r3 = socket(0x1d, 0x2, 0x6) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r4, &(0x7f0000008180)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000d40)=""/4096, 0x1000}], 0x1}, 0x1ff}], 0x1, 0x40000003, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r5, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 5.355763316s ago: executing program 0 (id=1880): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000580)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x84, 0x2, 0x5332, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d4a14, 0x8, 0xfffffb9a, 0xffffffff, 0x4, 0xfffffff7, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x1, 0xba55, 0x8da8, 0x2, 0x200, 0x0, 0x8, 0xe, 0x4, 0x2, 0xf0, 0x8, 0xb2, 0x1, 0x199f, 0x8, 0x3, 0x9, 0x1, 0x4, 0x6, 0xffe, 0x5, 0x40, 0x39, 0x7, 0x1], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x1, 0xc32, 0x1, 0xe, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x295, 0x1, 0xffffffff, 0x981, 0x2, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000002, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff8, 0x101, 0xfffffffe, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x8, 0x1, 0x1, 0x8, 0x800007, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x4, 0xe8b, 0x5, 0x80000001, 0x7, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0xd, 0x80000000, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x100, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2, 0x7, 0x4, 0x9, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x4d, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x9, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0xc57f, 0x3b, 0x6, 0x5, 0xffff0001, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x28a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x4, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edb, 0xfffffffd, 0x7, 0xe, 0x2, 0x8, 0x80000001, 0x2000133, 0x6]}, 0x45c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r6, r5, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "1cb315f3c5e23d27d29a00dd397b5c11d4cf201c1a0619fc314514ab71788e4079fdbe4f2a0d60b83a7d04c1d709981110401e5e10685abbad9b6f18e303e902c77244658a099a36fa486760c4941ea7df64250af29a4935de5d244f0549d93679b3d4fb358c2076bc6b1c9735ff8243f088e67455ba14975d12e5903ceeb7a23d62ecb5253ad444ef726b58a00f13f22ccc84cc06c9912b621c3ddc5f3229dc84c0880b5c6faefe33413b34a146e592fc15ae234dac030f05bb99eab08dfd2cb5659c6fc21fb7da6c380165ddde4659e75538dc864a53f691e1d785d6e6f73a03abf2120bce67e2d50075fd811b3e03a1cc2d66335bdee19738a0c1fb79b77d"}]}}]}, 0x14c}}, 0x0) r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r10, 0x5016, 0x0) 5.034069805s ago: executing program 1 (id=1881): socket$kcm(0x29, 0x7, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x3) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x40050200, &(0x7f00000000c0)="367655a2c47a6a19824b5c46b5558dbde0a65ddd822ca334f3f4cf26d18a503d3cd19c6a9184ea4f12698ed77ba6eddbb650cd7460abc7526b023a6ad5d1490cb2c2c7548badb1b3db4df103ee73267e0fed6a8999210fa53af1a73ccab68e9b344848b7763aa92d75e2fc75add4baae19796f8098766cca4d", 0x79, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="eb830a608c513ac3c2d2c4b2eb08452a1a18251361763d8b6dd6e21757c178be3fb83151460a9e07216202c056aa253211478a7529b90cb1d13d048221c2d829987e213d190ef6802e01225606f24628d834e709c26f8bbd0aff29edd8f636adec6b81083d9a3901b05fd6d1eade3dbee9ba092e71486e484224a5bb9a2ef22059") socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x202, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f00000003c0)={0xffff, 0x3, &(0x7f00000002c0)=[0x6, 0xf5fc, 0x7afb], &(0x7f0000000300)=[0x3], &(0x7f0000000340)=[0x4, 0x3, 0x7, 0xfff8], &(0x7f0000000380)=[0x80]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x4) move_mount(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', r2, &(0x7f0000000480)='./file0\x00', 0x100) time(&(0x7f0000000500)) r3 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, r3) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) time(&(0x7f0000000680)) ioctl$SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f00000006c0)) r5 = getuid() quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000700)=@nullb, r5, 0x0) 4.987302283s ago: executing program 4 (id=1882): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() socket$key(0xf, 0x3, 0x2) sched_setscheduler(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ptrace(0x10, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket(0xb, 0x3, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x400) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080), 0x4) bind$alg(r5, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) socket(0x22, 0x800, 0x80000000) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f00000062c0)=[{&(0x7f0000000380)="49b7cba24ba2055bae4743deebb0ea0a6d2668ad6d90fa19a62e0bd96d0a0d78a646a899e244850b93eedf84b5d8d3429d3f0d216b151da999f4899cfafb7cb54d757a09ff8e28dba8e74f0d14ce5b0774387b988f1d7fdfb8b16d575ee56294fa8bac6436857072915a921d1989a6c913dc38c9a668ffcd91f3f5fa2764b210d94959c8a18cd8eddad2d8e34dc609f891ac7fc1de00ac97429a3a1f3d9a7a4ba71b577875111f9d844e86e81f0a5fa321020b9a8d5c38146a985c68cb3de57a3e8dfee01ac9473ddb6998c1d38f04831b6c1d421523ba1061abb6805514f5d254021924ba9e7c0762e17b4809b5ab048fd4763fa00085d8bb20064bb8985a4b7a734233e0495459044583fefb27e8d5b3fd4ac7b51424cf8307bc199c7fab3e8a7eee9071efb3765d46421b225bf727219f8b3cd8bf8db1128096082c40db87a03d5be4bdbdae43be1bca306369021c27b81ad0f5ea15bcca5326f7f42d8faa8c14f7de0bd3c374da09f3e384ff30e94444b0fbd79396c910559bde230ede3e1e2d9668925ab42af9297a771394676f71335febc1997db7dd65e097a9cc5a72d912d894cd625b73b904bfea3bee02790efe5410d4634e2d0146dd708f9685d010e4e6078575b23e962579b6c3b7a4afc7ca15e6c3d637ce4ffba6b6d283d4685e002c26a2f0cda33858af1ee1a5f31c8aee058b051fcf74de9d4d434275f291ea5850dca37f51e33f2e23f7596c2e437c26bf1919a6ac90db80d2707964334847248a5ef338e4a2871f53f16638117eeff7310a0b17da76a9145b641ecd0c38c0febe6a5ff14fccc7262a2a4a98671576457272c8577826d9a0e134d309c34bd3f25b6573fb46c4030e3111a8de38fdd0f4c2656e05ed69a3e5e260ee9277d62feddd92405d9f29b8f0d950b6f6517b7e2b4e017db0034e1f83c67572904ab5e5ec3d5e79e975269e2d72f46504d3ceaa54ab68b14d411325275c1dd09d83fc05ba638b9544d5e0889364f7f9355f99ad48ad8d70844343318c20a01a75c87ef82193b7739bc312a127dff47cdb7c6615ddc10a264e870f3d7377ecb85cf09b37e1677a9c24bd53c365856d4ea1191393f6f2de39db94bb7c9b96ee343ee66cd07b07d9e260e388f97341a5007de84eb565669f81ae48454e3ea0a8055c0b6681091ceca9871f3d57255c641ac9d29b0d373d5e6ae5ca0beccd71e2c3a5e4e289b97852bb1cb07d6b5c9fdd5cbcde77491eba", 0x373}, {&(0x7f00000041c0)="1269da71e0cc9189ddd4d5bc965c", 0xe}], 0x2, 0x0, 0x0, 0x4}}], 0x1, 0x1) r7 = fsopen(&(0x7f0000000040)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x1) shmat(0x0, &(0x7f0000000000/0x2000)=nil, 0x5000) syz_clone3(&(0x7f0000000140)={0x4000000, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x3e, 0x0, 0x0, 0x0, {r8}}, 0x58) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r9, 0x5608, 0x3) 4.650926331s ago: executing program 1 (id=1883): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x202, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f00000003c0)={0xffff, 0x3, &(0x7f00000002c0)=[0x6, 0xf5fc, 0x7afb], 0x0, 0x0, &(0x7f0000000380)}) 4.344733121s ago: executing program 1 (id=1884): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3b1625bd7000fddbdf255100000008000300", @ANYRES32=r2, @ANYBLOB="05008a00040000000a0006"], 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x50) (fail_nth: 9) 3.578773815s ago: executing program 1 (id=1885): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000740)={0x0, 0x9362}, &(0x7f0000000780)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000007c0)={r1, 0x4}, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x30, r0, 0xffffe000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0xe886c5ffc5249171, 0x4, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @broadcast, 'geneve1\x00'}}, 0x1e) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'veth0_virt_wifi\x00'}}, 0x1e) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001581c2908570b2085396d0102030109021b00010001000b0904c80201030102030905fbff"], 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000019000100000000000008000000000000000000000000ffff00000000be14144416000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x4000000) lseek(r6, 0x4, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x37, 0x9, 0x5, 0x2, 0x0, r0, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x50) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$yama_ptrace_scope(r10, &(0x7f0000000040)='2\x00', 0x2) vmsplice(r10, &(0x7f00000013c0)=[{&(0x7f0000000100)='}', 0xffffffd5}], 0x1, 0x0) r11 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r9, 0x0, r11, 0x0, 0x10, 0x0) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14e15, 0x1ef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x48}}, 0x0) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0x0, 0x4, 0xc}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x13, &(0x7f00000002c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @alu={0x4, 0x0, 0x7, 0x6, 0x9, 0xfffffffffffffff0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x4}, @map_val={0x18, 0x8, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000380)='GPL\x00', 0x7, 0x7a, &(0x7f00000003c0)=""/122, 0x41100, 0x4, '\x00', r13, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0x7, 0xda1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000540)=[r15], &(0x7f0000000580)=[{0x2, 0x5, 0x5, 0x4}], 0x10, 0x80000000}, 0x94) 3.355198755s ago: executing program 2 (id=1886): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000100)) sendmmsg(r0, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001180)="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", 0x545}, {&(0x7f00000001c0)="82816bf5e64186c0c391e094b8764e0e8fa233c8708da88cc98db18f62a624c97ea5995355554f943fe65f6fbc2229b434fbf599be53eb133be3c34719dbe3835443412ff98023dc54a5fb175dfeeb1e", 0x50}], 0x2}}], 0x1, 0x0) 3.228583184s ago: executing program 3 (id=1887): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() socket$key(0xf, 0x3, 0x2) sched_setscheduler(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ptrace(0x10, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket(0xb, 0x3, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x400) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080), 0x4) bind$alg(r5, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) socket(0x22, 0x800, 0x80000000) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f00000062c0)=[{&(0x7f0000000380)="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", 0x3b2}, {&(0x7f00000041c0)="1269da71e0cc9189ddd4d5bc965c", 0xe}], 0x2, 0x0, 0x0, 0x4}}], 0x1, 0x1) r7 = fsopen(&(0x7f0000000040)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x1) shmat(0x0, &(0x7f0000000000/0x2000)=nil, 0x5000) syz_clone3(&(0x7f0000000140)={0x4000000, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x3e, 0x0, 0x0, 0x0, {r8}}, 0x58) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r9, 0x5608, 0x3) 3.152533261s ago: executing program 2 (id=1888): socket$inet6(0xa, 0x5, 0x0) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x88000) socket$pppoe(0x18, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r2, 0xc048aeca, &(0x7f0000000200)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010014"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="40020000", @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32, @ANYBLOB="10005a800c000180050006000000000014025a802400018005000700020000000500070002000000050004000200000005000400010000009000"], 0x240}}, 0x0) 2.868175109s ago: executing program 1 (id=1889): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a"], 0x58}}, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x3f, 0x3202, @vifc_lcl_addr=@private=0xa010101, @private=0xa010101}, 0x10) 2.752026752s ago: executing program 2 (id=1890): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000020450c2b7600000000000109022400010000000009040000010300b400092102000001220500090581030000000000"], 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000b00)=0x7) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000b00)=0x6) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r4 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r4, 0xc0044dff, &(0x7f0000000100)=0x9) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = epoll_create1(0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000180)={0x5}) poll(&(0x7f0000000300)=[{r6, 0xb409}], 0x1, 0x99) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x87c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xffff, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x44c, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x8, 0x8, 0x7fff, 0x2, {0x3, 0x0, 0x2, 0x5, 0x3, 0x78}, {0x2, 0x2, 0x9, 0x3, 0x8000, 0x9}, 0xc1c8, 0xef, 0xffff}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xfd, 0x1, 0x1, 0x7, 0x24, 0xf4e1, 0xf, 0x40, 0x8, 0x3, 0xacc7, 0x6, 0x6, 0x0, 0x83d, 0x0, 0x10, 0xfffffff7, 0x0, 0x1, 0x81, 0x0, 0xae83, 0x2, 0x6, 0xe19, 0x1, 0x7, 0x3, 0x9, 0x8, 0x3, 0x80000001, 0xc3, 0xdde, 0x2, 0x8, 0xf, 0x6, 0x3, 0x436, 0x1, 0x0, 0x8, 0x2b9, 0x10000, 0x7, 0x10001, 0x7, 0xfffffff7, 0x9, 0x7, 0x0, 0x9, 0x6, 0x3, 0x6236, 0x4, 0xfffffffb, 0x7, 0x81, 0x800, 0x9, 0x1, 0x2, 0x8, 0x1, 0x10000, 0x6, 0xc, 0xec3f, 0x4, 0x1, 0x24a, 0x6, 0xc52a, 0xfb, 0x7f, 0x7e, 0xe00a06e, 0xa, 0x7, 0x9, 0x3, 0x36, 0xc, 0xffffff7f, 0xff, 0x80, 0x7, 0x3, 0xed9, 0xe50, 0x8, 0x10, 0x209, 0x8, 0x2, 0x8, 0x5, 0x80, 0x7, 0x5, 0x400000, 0x6, 0x5, 0x9, 0x9, 0x8, 0x7fffffff, 0x4, 0x8, 0x6, 0x94c, 0x7, 0x4, 0x4, 0x7, 0x7ff, 0xffffffff, 0x53d5da67, 0x0, 0xfffffffc, 0x5, 0x1, 0x0, 0x2, 0x6, 0x6, 0x1ea4, 0xb, 0x1, 0x100, 0x6, 0x5, 0x8, 0xfff, 0x3, 0x5, 0x3, 0x8001, 0x4, 0xfffff4a6, 0xfffffffc, 0x7, 0x7, 0x8, 0x7, 0xa, 0xa5, 0x7, 0x9, 0x3, 0x1ff, 0x1, 0x2c, 0xb, 0x8, 0x3, 0x9, 0x3, 0x40, 0x2a, 0x5, 0x80, 0x4, 0x2, 0x8, 0x9, 0x9, 0x93, 0x10, 0x0, 0x6, 0x1, 0x7, 0x6, 0x4, 0x2, 0x6, 0x1, 0x6, 0x10001, 0x7, 0xc, 0x4, 0x4, 0xffff0fc8, 0xd, 0x6, 0x3ff, 0x272b, 0x80000001, 0x10000, 0xa07a, 0x5, 0x40, 0x10000, 0x7fffffff, 0x200, 0x5, 0x5b6462c3, 0x101, 0x1, 0x1, 0x439, 0x2, 0x8, 0x3, 0x6, 0xeb1f, 0xe, 0x2, 0x81, 0xfff, 0x8, 0x3, 0x83, 0x40, 0x3f, 0x1, 0x2, 0x0, 0x3, 0x8, 0xe77f, 0x3, 0xfffffff9, 0x7f, 0x9, 0xa, 0x10000, 0x6, 0x9, 0x1, 0x3, 0x4, 0xe668, 0x2, 0x2, 0xa, 0x2, 0x9, 0x8, 0x9, 0x505, 0x404000, 0x0, 0x8, 0x3, 0x800, 0x80000001, 0x2, 0x6, 0x5]}]}, @TCA_BASIC_ACT={0xe8, 0x3, [@m_tunnel_key={0xe4, 0x7, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x34}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x2, 0x4, 0x7, 0xfffff2a3}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @rand_addr=' \x01\x00'}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x69, 0x6, "bc4be437e695691a986347a5aec4c20a34a459ee32636cbe15ddc9a2d726efeda45c6d10f106c4d02112899e33facc9307c7e01e99192b47abd564da4687e0f212f1dcde9917e537abcaabcda9d2af762dd5c3413b7239ac7cf1c32d727f3b164dcee74906"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BASIC_ACT={0x310, 0x3, [@m_skbedit={0xbc, 0x1a, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa, 0xb}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}]}, {0x6f, 0x6, "4478fe0c2590bd895d450d5d771f30202fa3c8e688c9816eb69864cef0e79bdbdb2492ca08ccb97e7cb6b7ee257d2c319602ac5578ff0558ced376d5e68227fff6c47ddcda97702bbbf64e862098ed71bd34115f0a65bcbb3fe4f30353f65557198b744dc473710158fe55"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0xe8, 0x3, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xffffff53}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}]}, {0xa2, 0x6, "9a4b72a7c40aa49e7e9bdac105acbdd08bd37ae177208a530e21ff257412e9559ded7405114102c219a92fa9ef2ef2eb7d313516edf0f6a1f4d0e37097cd113e07d595418342327cbad73a60591827f440c4fcda8e883b1d16b4b9cdf20d8496a0846133c8f4cc80cb6bb199803ac279054539a56ebaee5115796260b37306f4d902cfe94c6a63d61525748ccddab2d1a0d29ba97fe52541fef477374a59"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0x168, 0xa, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xf13b}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8001}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x2, 0x5, 0x3, 0x3}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}]}, {0x103, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BASIC_EMATCHES={0x4}]}}]}, 0x87c}}, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STARTDAEMON(r11, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth0_macvtap\x00', 0x2}, 0x18) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) 2.585943477s ago: executing program 1 (id=1891): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_mr_vif\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000001c0)={0x3, 0x0, 0x3}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) close(0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000300)={{0x0, 0x6}, 'port1\x00', 0x8, 0x8100d, 0x2, 0x6, 0x1, 0x401, 0x5, 0x0, 0x5, 0xd}) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x0, {0x132e712c, 0x2fd, 0x3ff, 0x3d45}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x6}}]}}]}, 0x48}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {0xf, 0xa}, {0xffe0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x84002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB="bd1b5c7809"], 0x3c}}, 0x0) pread64(r0, &(0x7f000001a240)=""/102387, 0x18ff3, 0x100008) r8 = epoll_create1(0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x200080, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r8, 0xf502, 0x0) 1.939707057s ago: executing program 0 (id=1892): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, 0x0, 0x30004001) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b040000945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (fail_nth: 9) 1.869372443s ago: executing program 4 (id=1893): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0x400005}, 0x1c) getsockname$packet(r0, &(0x7f0000001580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000015c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001840)={'syztnl0\x00', &(0x7f00000017c0)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0xd, 0xbbe, 0x10, @private2, @remote, 0x40, 0x1, 0x7, 0x4}}) r3 = socket(0x10, 0x3, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) sched_setattr(r4, &(0x7f0000006dc0)={0x38, 0x5, 0x10000005, 0x70, 0x6, 0xe, 0x140, 0x5, 0x10001, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r6) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r6, 0x81, 0x1, &(0x7f0000000040)='P') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}}, 0x24}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0xec0, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0xffe0, 0xfff1}, {0x6}, {0x4, 0xfff3}}}, 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000004240)={'tunl0\x00', &(0x7f0000004180)={'syztnl1\x00', 0x0, 0x1, 0x1, 0x400, 0x7f35b472, {{0x1b, 0x4, 0x2, 0x1, 0x6c, 0x67, 0x0, 0x80, 0x0, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @timestamp={0x44, 0x2c, 0xae, 0x0, 0x7, [0x80000000, 0x6f, 0x7, 0xe92d, 0xbb87, 0x2, 0x6, 0x8, 0x80, 0x7]}, @timestamp={0x44, 0x28, 0xfe, 0x0, 0xc, [0x9, 0x0, 0x4, 0x6, 0x9, 0x2, 0x1, 0x1, 0x2]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000006a80)={'syztnl2\x00', &(0x7f0000006a00)={'syztnl2\x00', 0x0, 0x7800, 0x7, 0x8, 0x1ff, {{0x10, 0x4, 0x0, 0x36, 0x40, 0x67, 0x0, 0x81, 0x2f, 0x0, @loopback, @broadcast, {[@generic={0x82, 0x3, 'N'}, @timestamp={0x44, 0x1c, 0xc9, 0x0, 0x0, [0x0, 0x8, 0x6, 0x4, 0xa968, 0x1ff]}, @ssrr={0x89, 0xb, 0x4a, [@empty, @dev={0xac, 0x14, 0x14, 0x32}]}]}}}}}) sendmmsg$inet6(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000000000)="b2559d10e835ad56cbb22fdb94d9f629c53c", 0x12}, {&(0x7f0000000040)="68a87e5bc7103ff321c02fb97170884674a1e62ddfb53b22f2721a60d4e519086cb0354bbc5831a34f294abc186113ed5a954c28bbc14932640d56df563323ed734d71df84b65bd07b3aa798420559fe6bb16a475a93c54770004cab55aa9d6d6b958898f71cab28023e7aba9093bfc78a37bf3ad17f474eb41adff0bf96c3097fd938a52a92afc88618065d57070542e53975ad97883417ae0a368de5451b869e99e7dbd5f2575618fee3a6398b9c3793fb1c93b5912d76f9f2dc0424a676e60f8f411ada6eafb3f21b1e86b964b9699feb4c91695ef0ec21683547d42948afde92f9508c611b9d69b79277a74aceccbb8e49793e315f6efc901e4754", 0xfd}, {&(0x7f0000000140)="49db0d2ede7eac5f556ad9fabd298872c1e1afc43c9568b4bac28491bf68288e20495526d89c040e65992ed74e0b95cd9ade506f398226d41b43284f9f0ce46e4c9846dbb3920bbf12fc376870ef6e75814921a2ebf71d96cfef62c696d1caa8dc490d1cc063b07034775c1dab46bd", 0x6f}, {&(0x7f0000000200)="71ce64fd0475d115fe326c29c02c679438b6134b7e012c1cb22eabfbcee35a3a1407b9821a15ff006166583fc92e295de42966f3af96ef19d6f04debd367088a31b024f028b664b7444ac64c380ad63923e8821ebaa25062ea8e4adfc9fa8e209fb1885aa0b592b60bca9d8d9b1cc64d1a822f37487caf9a108ea7e512643f10c5f77c8107a8cb46ab4e1076763247f7fa080304eac30524ea85d9b5a959b73ef227822cf25821b283d2442ed76414e8a742049fba373194cc036b401a0cc7db92cb71e861d26101db7e57d7c344639d1876d5578b4b5f2ef57eecb0f5191ca264f90b8e26e4b63bc2747245edd61d00a5e8b32bea", 0xf5}, {&(0x7f0000000300)="a9d3371f183e49c277ecd2fb86a3e24fd73102c54e2a43ea402e2795a1549f1cd1169380161bc1b3bdf3785d7de20e82fc0961cfe84231cc1a99be1552954fa799a46bb23d35e093a53ebd2b3a20973cc52c9aeb583ffd912329cdd0192bf4df71d5dd8513c3429673f568ca6d6ebc3053aa240ee848d3c6c6c943382326ce991362d2a2cf81563cfbb10b634ff687e527f6d4c26bb1fd27eb9aead4d820a7aeece4d9adae092e638baf9a307ae4b6e2280e2b4f9cb8e9f859cd9531dfe47440393c36fd987750607910a1f48cdba067dba02cb3f0f89ec12c1e2d8d86ca89f47883c825a47fd2ac1657a735c688dc7e7649001b203ff52ad14277b7ee7b", 0xfe}, {&(0x7f0000000400)="7f9dfab8aeb8cdc4e17d1be0a500db8f693b5fad39889fe95089d609ec3c1127253c9892e90893597ab14e6abd97c76b712378ee62b3", 0x36}], 0x6, &(0x7f00000004c0)}}, {{&(0x7f0000000500)={0xa, 0xf, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa7c0}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000000540)="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", 0x1000}], 0x1, &(0x7f0000001600)=[@hoplimit={{0x14, 0x29, 0x34, 0x180000}}, @pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}, r1}}}], 0x40}}, {{&(0x7f0000001640)={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x9}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000001680)="e1155ae9498a57dd561acf1671b024fcc28b9adc86d7915a3bb815884c2da9553de9abdb5090bc88dc07c410f3876fbedbd1cecbf998fac868129971ac878376f71b7f2e7617ccaef2a16a25172962726946707d97369820fba4d52eadcc409a90596a84db3746dda8050cb5d628ebeb3c1e26a53a94c27b1ef29cfcad868020aabb45e378f344d1d0bde84ecaeb1f797f1b00654a5f6be831f4da7cf7df8840e5c2bf8f47350817505515e0cd8900e0238e8f1fa08eb3d15ff6abc54b124518075e5984c4c5c603acdbd2", 0xcb}], 0x1, &(0x7f0000001880)=[@dstopts_2292={{0x48, 0x29, 0x4, {0x3b, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x90}, @generic={0x5, 0x21, "148c38c19e2dafb0db4cb230f65ea1ac569449da63f1f325c5be70867f47aa6bed"}, @ra={0x5, 0x2, 0xfe00}, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r2}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffbff}}, @dontfrag={{0x14, 0x29, 0x3e, 0xffc00000}}, @flowinfo={{0x14, 0x29, 0xb, 0x10000}}, @dstopts={{0x88, 0x29, 0x37, {0x0, 0xd, '\x00', [@ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x20, {0x1, 0x6, 0x3, 0x3, [0x1, 0x8, 0xff]}}, @calipso={0x7, 0x40, {0x2, 0xe, 0x4, 0x40, [0x0, 0x0, 0x9, 0x7, 0x7f, 0x96, 0x80000000]}}, @enc_lim={0x4, 0x1, 0xe}, @padn={0x1, 0x1, [0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x400}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @private=0xa010101}, r8}}}], 0x198}}, {{&(0x7f0000001a40)={0xa, 0x4e23, 0x800, @loopback, 0x1}, 0x1c, &(0x7f0000002f00)=[{&(0x7f0000001a80)="d14ecea5f85b5a5111ea17f6199fbc351c5a96ba151b75490ebc5087618541f2469f3ba0b86b4a26eae2042f9898c35575f2c756ab5932b19ebffe7d235c6c13a90e10a4fac215a16ea5ac865dd050de2e34d833ccde7ac8ccb684a7f7f0b2bc55ebcb9d9216f4d43c09a00c132392a648dd4d0e740acb01b2183567c4dbe7487ea47e75609f70a49978a8f4222604cd96d4d4f469e743ceb05af573f66c0282437467", 0xa3}, {&(0x7f0000001b40)="eb35b86918a9fae2be8e6372f1796843ad49f76183ee28e4c56bba62cf2fec9103901ca22803994493e8b30bd050d1ca3eeb10f72a9a2c5918341612e50b210ad5d77a55bf52381800bb1645d98db8623f438f7e6f0d8b030b476fec21c56af68fc567df0d46bdd96b9197f72d21b42dbcc719cfda8530b059fd1e2ab11960224338530b46e9485c49b2dd35cdd4fc7fdf8364d39a6d7a267fdd5606ca6edd94ee05df1a99dbb5c3bced034eb7b9318e6383ff63174b1623a2ffbbb31567fc626642f0dd740ca808b7c4f4be94c3af3a08a64332098b80fd9a1a601472ca8da3df6fdfda14408ef5d8bcdaf3", 0xec}, {&(0x7f0000001c40)="f64fd16a669e4eb72573e7bea5e03706913479cbb53c999866b1fab02a975f20cb5a8beb2ddb9a8a3bc1bcc5fc20fc43a4230b34dca37dc49a8948d1a41fcaa31abd9deebd1df28459dd19d2dd4d7309e5deb42a7166b42962fed6553e1e002053cfbd8d5c4be501718e12c05fbd4b13c2d457e1fc6b90f81a92e6e8eb69a392ec4fee8b44bfee169998371bf80919cb451d573b3859abb56ba6679100bd27002f", 0xa1}, {&(0x7f0000001d00)="ffd1f9a405866501101b741c33484efafbafb4800959e1233e960fff38ed20e27020d59f13678e3bd1f4b0158ce0756e175930ebd259be5a516d2a8271ab74ff4065d592eafafd632f5e4d2ef961f3894862a12443530f0d286b1d24bf547d2fdd57379cfa0982caea98f452b698be7616edfb1e0804a11b97d9ad158159012f4f5c338a4a2206e67cc8297614a097958b39eebe1ce10999130a94060fa5d52469446859ace307ec5019806a14be571596b14019882674eda7d2b65a4db38f0f20e45c212be4414abc0c4aed0b888827a50646c8bf00f284b2d9258ec00ccbb865eb9375bd864c49b81b5534967d6c90b3485832aa824b43", 0xf8}, {&(0x7f0000001e00)="e409302d4e66d28505cd9fbd79770bde32d50685bab8510912a4c19daadb9dd4d75c76d8cc6a093bb88c51c9cd440300058efd54ffefb6ddae0aa4fe8569f3a8ded154f944489d8ae145d078e90b6ace4dc6a9ff804629ad32db9cd73331045acd0e7dc6c623b5ddc7a420aa16d79749b213c43497c8b90dfb59e70cd182a4ca83b53997218e62031fc008c05531fed50f7bc44adea35c053b410e17c57b3f77647fbbe3c99e16baec5837421e0bdd9737e57e85af38aad25d3268bdfbe7e0ba76b9e528beb4e469668c6fe51acdded9478fc67e444cb97dc2d326", 0xdb}, {&(0x7f0000001f00)="1c2c15479773b5024090828a7cc6eea5ae1cc9b1cc40a85ce2b02efe0657f16883be6ff2336b29aea6ccb210c35429905f52c0c3be5b9fb41bfbe803a3f5fb98772b31019394e2069e537ba0b782fc6826b096abb357d438fb01554a723ab536e796ed557c8999beddcd774742bff78f83beeefc298f319df452f587ac6278a6336afe582ba2fe523fcdb3b8409ee84ea5218d155d77c276d736e7218543e8ace696819f33a7a5b89d582062e723ddc633b956632ba8af7abe4dd6787f6211c25c8146bbf0c38a4479eef0363f724724c86e71c672442b2c3f3bfd4068446a892902568c62ad63077047cd66b433a893dc33710e785c3fabb003726b2d8b7cf37bf35aa190f6cea17f44c7e5d90c11340b9241b5df2dffeff1ffad649316d9f839b42c6f87f0aaecc53c5c1206f2a80ae8edd32e4a4902daefbf55d985b1fbfb46baa07452ce7b84113c27cd44eeb207e26437ba8aba3ae84c67137b933c34d68db471a2776cbcc0cc70bfdb96bbf3d08c1c2c6ac10c3de2161077f99285ab406a68c81e2a77f60423f920944426d98485654005dde55b4f5b52727455eb7a86227c7d04ee29e2cbb18fc238ea5388ecadec247ff432965c954c63c4616d8dd16f118baa5c6ff14c049f93a7f1686e7c91a948f0bb7009b4f1abc98d0d72a34b7f967cee8c3968e10907df1eea7f1c01d2db151bc1fa751d146ba0b57286b54c5d5fe9aba699eaa1afd0c47a2b82bd7bc88a6f1eeb6f9a2ba7bb85d6fd9e8750ac6f11fc99a9cb15a9de57e5a6b121b790719aaaf5372854be226fc5cf01da89c55fa7b95708fde744554bc4be9f7fdad48e4966f3971a3501d40f4d62b0d0ce34f8accf2e3fbd7b78cef18f4182e1e3f257663ee21fc99f70fa6fc5338724778ffc0e5fd6eabae3aec8213b4ebb160a922b2b8679c92c11000bfdc48a40bf51afb667d499c0ebfaa2d6f32af65253a136b928315cc262ddcd07d934739f8a70829b42a1088df074290c93a58358fc11905d0db43a8e0de59efa27400a690ea1e78f017393b9c24882a4640a2bf5c1496c0cacd9664eaf3f17f0286561d22b0398547b48c266b2137535ce87d9504ce905b4c214535514a9ef854943dc3d4519fc0f465fe176b4131997f1c44844c34fbf1e358441c4d50b51a71ec029113b4ab9e6fefd58593f999b8b8923f87894b6bc366d1f1596b3aeeab6c179503a92facd2f30da5cc1399979c8b9e95a73e5db6175ae8cfc2d2fae7a263284a51a7b1b981fc7ee2e8d0b8edccd0c75b8dc920c65622b58a8d8c5a9a204a1a6ec4ab65dc4329f7d54f54d3d4e28d842b23c47a2b6e771f18ed3a83861b65286662b28e156a85b9f9d19832e4d8ce370f0666f168cae0604ad466f0785a106252b2e986779587b372b309231debf8f6b66e3ed93062794df59ee091e9af519b9f5a67be4c6ea119a03481a61cfd92912b8eabfd9efbdd36f7a59c34860d8f930f46622bbfa915e1f8444a21948822d3aac4ab9d7c345ff02cfeb2ba5bee325ff37ec8f42e53b0dc2bda9a6df1230c5083f46130d26cf02c0f8ce7654043c41fca9aec5f215a5e214b90038627eaf30ecfb0db55a853c4d1c4af6ede055fe9fb788e1c4924a72724735c743d88cd20bd936c7d10b8d32c9bd2557e2c9b14b92dc769265576b0c1b8261a6bf0affedc960466b248bec0e9992156e2a4f115e753bf3820a7c9a63b69f304c4f210752459308480e1b39bce63ebe67b9f328bc5116f814deff139b0ddcef68291ecfa7dd54e141392b92a4def5015842923ddc8319ab26359d4a6dfc2e9f45e8acf58d1f100c4947b29dee1b6e5d6526e769a90e9cb2425a4174325edcfd6bcdec55f37e7d89f177b218084598ad922941136fc237a3bbeca067c4b892bb9234ad4a22ee51f4f936fc4f911574116de9bdcf3a9527db6a49ab61a117c427aae1eb89d3c41a4df697caa7d8ba356acda927e8c7f20d294127b269cb9b2f93fe0a067846c3e8fb4b3183b180f7b40c0ad29480ab9235ea72128bf28b2f221664f07e553a6f8b550b48218ed92c31181454aac0c066199ad865f2ba1ce8f5544e08a318cb48d0aed85e6bf248efb2cc60fbc94739d7ebae8363a73a00aa15ccc9f595c1353209f28a2143613ef4b6b5b412cb22714ec99e979ffd5e312232ea4f9591ba161e3655f3c8ec84bb5e8b02487d4a624714863c342a9d5bf98db987e09473734c19fe032259e6f07a360c226d72538e5b19a9ac2258f10a934071c940c30800a2db291b914ef2c8fba41181c5b1cfa364dce3f770ddfce6602c18bd2bcfb897f94d4d119a4339683511921eeaf342c48204b9816fb1925b05f83e7a0ce7f1aa15019f58e319eaf769cd6b1abea4c8ea9d45fbd58b8d17bfbe43b45db2e9e4c445b3d17bfe7f395af44b27f08db8f5ba9637193a1afe5ec770eee5315077d259f1ad62275033ea2e073933ec412f5da2b782d1b1736ba9de659024790f39889b53130db2808ff0d904bdd06dae93a6e15311a89b58e28d507dc0555c75bf12b9ebd29435c3228b0bf7c438a1159ea7f0305111b96070624f3a5b8fd75169849ca8db1dcf4b50645a42384b2041d3bc30c5621113e2216c81fe5625754c8c42fa6bb0faebe54eea95e98941c90cd301e583bc8750502f9960c42a44566a72a65cc274e82d3e237bea01cf897ee3123861a596ff906bdbb86bc7120ffdecd7493542008eaaf822c99aa19ea5d0a44dfa616d4da55a448380afb0fc89fe4e6ceeebd8ee3af40b87dda9d43354224770b91f5a6c8f3cc5a9e1da72b972d2d27841c97eb0840fd1e4a53781a658b3da7860994cfed7a44e029db6ca37cc31f748a8a3669f7d1de3f71d29d5199d2f4ca4b9332d88fe80c50b817c0926d4345e2ce9e150df66b4e47a71677caed96ab11f7fd21f056c6d9ab5dda7f4ed1886a9b9b672380000ea17cc62ab3fec27f0d21ab1be739389a032f28b640457041515d694f262ce559c352583ab75b40bda8717afb449354f928ae3ac1cb81c74905f9d8e1703b9127b183db355bf4f2c8cd4b5d5ed7149b01d58db7e7577ba5669125786847ba49a22e952cc32a2d4357c703f65a54fecacb002ea2d5ddb1267e694ad4e9d3c976837a9374c7b54c27e4faf1d0f53c8bce6aad2076e3dd5edf07ff2ff07b26ca87e2980ff1217ec04d75cc6143dc4ce3732f4c06440aa2fc020659acb23759beb56babd38fa068436528bd6c03346e9617509aafab6db6d8a7750183168ffe7ff04fcfffe6675c7311761ed53e68018691980b24241e25562df2ae183797080822cbda085e4e4e128da5ab6075b6ef509b27355c0abc73c646637295ab605d181460a2f23cb8f22d5c4b2a9bcb7e8040b6aad7ec275006bcb11819999d09b86dd6a12b515efa4e0f0bd892f068dbe68147272eb7b8ceeb04f267df658517dc88e18fc6ebc36c1adc3db983dcf874be78db87c4356d3ca89c8498108b23ad1554ad792feed7f16e61ddc73b99592d259c4e7b966429710a69818e9c1567ad2c8b0e924ce4df26f0d5e6bd3922a61ad486c38ea05386bda29fb02c4330f4a80c55ce22b178affe249d591c5b3952d90c340459b3d3de8aa030e35a1f7c5ab0c352356809088a48a0ec1adbec0d250c36c763ccaa6e1d9d82f3a03eada2f1d65319c79ea655779c388ae15b9a2411dc56f57267bbf3e3cae1cad59d1a35faac20d7227956a73ea81e0d993b3dbe28de48dd0010c16b1a0d5b6f70923de929d08c76bbf4f28f029f2ae4535c2a0196cf0a0f24a05c892bde491f9776742e579c6bf68fe8a3f4d27ccdad83ff998a717c511522f4beef9203a18b1d8f06ed2c1ea1a3d29eda1c601497e95a3d098b7668306a5dd6176ab0938335aae3b1147ad958c6c3ffff619975760d224ed9e9743ec1c78ce41004dc2692a63c87e2a19afdd52e28e223cd16a0dae5f77730499b49a6c720ce51544e7daf4b0bb267201326a272c77eed289b93c6c815de5bf061873c81bce2888fec57978ff419fbec884bd6cea9fbcc9b9f9c5dc0797cafe18f3eb9d6391394fa602a984a913af85c5b7b8b0c611e3b3ba44c0e56e392f91d6a59324837bd190204e570c5729ace444e274e492cc010a7c276806ce59f777c513b571e1eb729269d27f548e6f1746198aec72cdafeb8aac779e0c6b542d6e9e536ed072dc544bea156330410f69534face847585d5f6fb989430fdd6482ac26bac5f685eba8af17c76d1490163c6a6952ec6170b89277654fea28f0e4dd419f0615a9ffde2b7b830748a687501b45ef140c7a34743cfe360e702c05fc054db265976a0a5ed279109bf4d5f7e080253e6a0ae444040bd2945bcef7d02474bc04d48c2e0ee5de316a9a5fd4856a1f3b3ad9e024b2409c767a6ed2d8e3d2d3ca2075cc2aa5d4a5f5349323c1dfcbcbd94998b8487f8ea8c34e884c7e156ec744b2567bf9f6614f219c6548ce1a1030f53de2dbb77a030c5a34ab5d19b916ea7e35084eea205c73e3e45456a20ab83326942b4452ebcc51ca0c2d5a2d6947125963dff94499486f29c75b944c663df78c196161e0f70846c7356cf53dc3f4eb4ce1333ab9486473100f8f3f3b190043154a2e8230b6d41398d90976b34a52b656d75af3dfac768025344ae0e49f5727c2ba65c67ea8891e78a250e220e680e9c25db5265faa8063361f71272205f66ad70f9c80d494f700997a5a1a8979c878388cc270afc2a57bb6dccc8e29a50c36bc699a60f86e0edcf7c9c1fb31f97209b67f26f559f3f441ea39e39936a061fced7afdc7afb9c710765f4142823952cf658ee4042a5464a3ecab287dfd393ce1c8771c7da771e534d9dad8d1c92c00cf370db1abf685a38b0b1fae235c5a59d4b202f374388adc262cdca9315e3ad4b74b1a80c8a7e3241bf8cdb5b2044119ccd8111c90bf557dfb2a6e8740028596cece32ad85e45cc99967168d784d676fd92f2e5617cd854a6ff03777950e9411780928ffa0631c28677d6b585e04226198d0e0c3ccc08f97012c9dd3564c38cdc6c5162836395afcd4098d068024304fd4386f45fc7fbc09f01dbf6281058687a39192d49305c03ca71860e86faa9fb633e28b7923e167551de005c6f57f0d824dd5c27f435fd7998a60ff1168828214b8f8cb8ba12ace30f278f8a9109f32a5afae521168d20e8b41211253173962b9780ecf98c9492f6037384879204e21aef8e59c034b8c8d4f169e743aad57344c3b0910edd55d3722190579f286072f2e23f427cf1d190d2fd15ac0ff6a112a06ad00e4d3c848358be869811933c872085d7f2f8c158621a59e988fb6565b12b58b0cb10d6400e76923ce1374a6316351ed0f377c40382af92d54448e1a9fc6c7370c346c528b306ef373abc586c74b35bafcafd9086608ffc1c887311fbc8a305adf2777092d41a1c40a75834443191b9cb56caafe45e4301900acff9e9b06ca9cedc0150549dad3d58122d69bb9fd550c0a3c7e59cf57e77a512ae6ab94d73445083b89fdece8f6122db0e2324f036bd715aef1eb4bab316611e920cc16959d7dbe4bd2e6fcca0e25bc7b2ddd9102dbf205d140488beeaa161305d7a2c65a586a617ffdfcb99b6947df606f6ca7ca3d02ba2f0546c952780c52e9122927692c1b9df1ef7fd6e11da6319c0282a464fa6b3ce4e9fe1dadd9789392fe166c0453d1d49bac33866b557e79706180835be2ed98bd5c04e9a37374437c37d1018b3703f002abb4cb1450250afd76ed55737d13528dfd1435b04b67c0285d", 0x1000}], 0x6, &(0x7f0000002f80)=[@flowinfo={{0x14, 0x29, 0xb, 0x2}}, @tclass={{0x14, 0x29, 0x43, 0x8}}], 0x30}}, {{&(0x7f0000003000)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x9}, 0x1c, &(0x7f0000004140)=[{&(0x7f0000003040)="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", 0x1000}, {&(0x7f0000004040)="eb8b1c98587498a73f1343e0e705f8a4120f0e1a8dd5a4cd1bfafa096e6d363e29b5fcf4e8b00b670ad01a2305a93e2092c7247830221e67ee4867e70a0f30b6a7d1ccf322", 0x45}, {&(0x7f00000040c0)="32d2b9fe8945b2737b29202cc83d208d6c25f14589ea84f911d2be7e404f58a40dc66939f509130b56e49e46f52e2f32acf09af48a0e4b787f6d9aed4cda4e007ba3aa7ac502e3d5dd4fe51bb932c575a92e74a53171c7d84d3e88e8331ec5d15fc8dc6716140bdcc16e", 0x6a}], 0x3, &(0x7f0000006e00)=ANY=[@ANYBLOB="140000000000000029000000080000000200000000000000240008000000000029fc0100"/56, @ANYRES32=r9, @ANYBLOB="000000001400000000000000290000003e00000000001800000000002000000000000000290000003700000001000000000000000401080401020000c00000000000000029000000360000006c14000000000000040100089fd3dd2259e4aa1430effd3788b871dc0a04e2c7173e664a51423e543dda8eaa286591199e04f81659fa75d7906de11adcb4e31f9d321332461bb41962269dcedf18f988bab39aa058b6bf0100f99c54bcd5ff05daaf758ba0965f1ec33b7730ca4a9cfe8b666767a227c3b3833a82c51d17bce6d4a9895baac7798f573fb18eb9c74f318906b9dd634555d993608225a61d3ea50a7e1798ce5e2c4f6e9924820000000020000000000000002900000004000000010000000000000001010000000000001400000000000000290000003e0000004f3300000000000048000000000000002900000039000000020601050000000000000000000000000000000000000000fc02000000000000000000000000000000000000000000000000ffff64010102300000000000000029000000370000005e02000000000000c910ff020000000000000000000000000001000000000000"], 0x1e8}}, {{&(0x7f00000043c0)={0xa, 0x4e20, 0x2, @local}, 0x1c, &(0x7f0000006940)=[{&(0x7f0000004400)="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", 0x1000}, {&(0x7f0000005400)="cd84d6d1c581545cc43b34101882836d6ee2f4b8133b8a2bbb81ddef02eef6dab8fe1c5440311ffed9119fa8135697a5183854fb476a7b402699801347176a250e814aef1608e4d9ae3347b1029e68393c2027de5cd071352f3d6f6188e688ab80d68e038622e18b506474de0718c2e2ca33c1d7b94cb55a5a586d0da7bd253d4f5684637648e4b56b7f6c373ebea9636019e13f68d16c60e6d651ce49e9d3b86c7dbcbf936f1814d98e91986842b55d5e77f938e8fc48274a23f06f6d30bfcd0f8298c2a17221c98c04f4b942283ed2f94adc8d834c169ea314dd1bf67dad5e3a9ce391dd12037134e8d14d79e673", 0xef}, {&(0x7f0000005500)="a5830be47dd5361c0f7f7c567aacc370a45d7c95c5b52a1c45c2f6e73430e14487d8abf6db730d3b07f283094d49922ca9c2b30bea780c27eb86bcd84ebadd9f3ddceaf5f830125a0d9b852c0d3e41a50f6afffecbf946c7fe8b67327b8875be02ba926e24c617b5c39586639d739dd332472c3e1a3e4c0de7da5f12ffe0a763dc673676bd17cf2ecbbe3512", 0x8c}, {&(0x7f00000055c0)="c8c5760b575feb4713bb61daec3aed944196c86c6088e848fd90428c95da35b627fc81692d89359afa65273f51df802a2e0019c198a594d344d01e6be435a7f77517a71701c0863556263ad537dc10aa41725eb48ac8f1b81f37663f80616225a021c23430c6acc6361ab9e830166687e27f72fe0addaa124298106d7066", 0x7e}, {&(0x7f0000005640)="e3f74e73184e98daebd6cb1298806e61a13e31d86fe3809183c1435df75260c56da9d40f2f30fb511f18798ba3d69b4438d724539527683c3a35024b0deb4a573e0f155c4e2dc7cbe02ec9b6800695c900ce49abf21640c7aa41690622490c4c8fc83be6cae8014cc5db1709d00b55928b4583b769d5c02afdeac856", 0x7c}, {&(0x7f00000056c0)="c3b71c98567496296ed6de15ccb76ef1d3c30de086988585c82602784511486fde31add1513a361b90af93e1f5cf1755de065851db62b9730a5bed0ec8fc6057b832863ca224f6f84723d8372dc600dab94dd0f3cd5c1bdfa363cdf8fa742b662ea5e9a69940347125567524e8e3c17b07df8a93a190ac82180464a3bce883e443a212e1171eb639a4db015223cdc42147b4cbf3979b6372894a59078adfa803072442b053a2fce7744bc6ea822ff09d3c53f0f6eaaed344d96d169627e9de727ed516ea28c4ca10398ab41c75594577efda49f39332854ad74a5d84436243773a267c630e611c33868aa1299e37048d94243abe165ad724093e49e565526237ff553f516e3075fdabb0bac31711c9561b9fa211908786f037095c0b220af813013dc20bab80df4c83538e35f4ce87067298c41bf51752ebde2535f67f686dea872533976c19afc75be4bbff0da8a3c3342068fcf9baf324c40658ea8de745c8a02f582852b9a32e9a043eb932e8096cfdf711492f8189320268e30bfe1d9ae9788949b71dd62ba6e74044b5823c13b1e45d63aa86abf1fb0ac346e588cbc53a39eecccdb41ed0ba98c31f90e39a89e97665d8cd79455b1b1fdb8a464be45590bfff8721bc9775095f925546ac8d70c1f1f0d320c8d3d70da849f8248220a7c25ae729bc0ce2ca6035ae15701dc4d1a518785855d2f1e2aeb748cdff20f197c9fb3df94aee4656284322b7d4893beea670d67993e79698b238e1b205d0025b21942ab5fe60be4f52d165d3128b28a0c213cf866efdc2c0a7f7c4bd95573edbd3953bd3aae5dd199eb1ba3d3fc68bbeff75cda9ea0042d9d9c445ad11ecc486667a51b8bf718fe362fba21b24a1fbd9188cad0fdfc1d73e6b559c7d83cb7b58e79eaac86383659d19e19549d8da167378efd0db241ad6493502d54e0cb1e294cce36b9906ce7da4391fe2fb74ac88a57e870ae19a29d0fd741d66bb1a040f01b88f5f0c710dadb7807195ff732a0d605d70499328b168198e0ec335112f2f71b46304d2eb3f7f0d7ce8a99c1cf24642ef7726dac1586f5453aa8eb69f4fc5c7d8c95a29abf8ced956f97d324f2e118ed41deb33e3f8c28b2f965ab8dfbe67ae6c7b86c1a257b2a6d23decfd285e167a4afbde1d4830e608279c2fe91675cf9fdae8903295d01af6463199ee5bcc5bcc6ff8d0faea05bd0122dcfaa0a29228c2bd54b51e171a763f85897e09c422b61ba2061d624947f8801b6c57ad3d2e9a0fda564eb9bb5fa024c1bfe3d172515281cb8062c5be7bd5517c3f178bc9414700fa9e2268483dc99ea519bed55bb455a6c9ec4c6792c0c2a1683f77cc885bf25045aee0323453cdfe98785b1fee030d7cfeafa0a83bf396dfb9e855a0fe91c4f6d8e6b901b0ffdc0f01ce5279b84e43e05611c7ae5996317b173f2f8f24e7b7807bdd44f38fdf2929ed17ca1e9a3ad8ae3e3da228a2f053eaf83183c47e3483a14dd3a40cef7a6dcbebc2eba0656c2f29a05d4fa789762fbf4f1b36117f4806d8d531259b292bfb463dd5b29f06db4675b75341e50587b2c8ad8eff980e4c6325c7acf11ae9315ce6454594cf29dd80ce3394ce4806adb32977663c84d9c77ed7b0ccbb1bc307964a52803f6a3966ce5c22a9ddbdb77d20471b867c7829b02c251706540dab9b947402367c565254004776c7470d688a17a362eac6cfc1203bbb211aa40bd922a4259d0b5b9b6e84350bdcf2bec0f30b91385434f6dfea695bf51aa878042ca190afc14e322e7a14043de6a9c2dd1b87491111d61d5e2a9be30fc4c1abce7dd63b6a9afa3aa33cac8d360885bfde1d5fdd9d4753d2e423a93b913e9d4a143550a8d35b8d31f7ee8b94e0129666cdbe5894fcd9aff8fdd094dee38ca42f3ae60983aba7f8b85303c68af550fb0ce6f399804ff0cc8b51efcba21e3e127cecded46009c22ac14fc61fdb3742b3e0d513abbd8b7ca0fd738d918cec4aba5671a0b8538567646364e2f042c8d38fea044ca90fbde6816956e00905a945b3db738dd1746778b474d744857d9c1de8013e12689db750fdd71fe87b17bd9b2be65e27dfca9c2de1f38bf2783cddc23e7ded52d1a2bf91f5b999ca09930f612bac791f942f53f7370668313deb26767c6e367f02f30cefd8dafb6fc215fedb09110a1be525ee2bcfab78127f42acfb10293e8e4078a4aa11c6c3ff2efdd2e4e8b8f332ea5e7516a373c1e831253a40df468607cb3061bcb12e3088b3826dc7cb9817cc9b6795ca2b28b14b137534f4545388d118849bebd788dc3bba4606d394ef9bc61cc36d66bbeb268cc87ae15ce03a1edd31be593a45ee3f834ac1280be7c0d0508176a84e674062e0bcbb2c4a9961e0e7cf77a2a19d75e3ade9c917faf82a143048f04d9398217031267ebdfc8699e0fa409a21f6784c8324a8aa45490f02ea706e4ee3fce5cc01fc684a4a526a73ec0cda0942036965cd537050edaa7e5a41f5e91bf43fd05ff2ff9966b6b83fe963f740db4bd973af30195d62022dca8a19d21376f5436b2f2d506f098bc623177a94338888d8f29f6d994e3b63c6a01c0260336515af06ad3547343adac5a2a8abffc322b2aa0c825d2a43273fe3b9e37327977bf1b0efdfa8448cf069178aa9b39f15ad796ce78a524c2f2239f5a022d05f0c821e95267ac489c8f04e8b93730cfba3b90bc139a00ecfc859b97ea7f46f6e85041ae76c3cddca182bd4bf72b47f28e47d5057476510f7bea047d079d348e96a7b1f9b59f179a937de191307df1daeb097e11a1fea113cd445bcd0787377b55b495c4cb7c713a300dfedf929e416952dfaca83f9595a9388559404a8db13a45f6070a666cd48bd9539247c9583a6ea04a60276a9273ffc0543ab6994b276346ba854ff4e4bf4b597fa80eb2e089c8270cbc7f31a8a18a8672da5b6ad813e5a5fd0b56acc7d92e6d62bfea2448e6fd302f2f60b699f773fdb439c05711cc8402f171ae9b175b39a156a9dbc51ef62751ba46aca8bea4f6b5a8bcb732894c599c503d84918609dd28edb1e4a1edeb110d7b12d2f5ce97af3869bd5374387a5f75a18d0ae34fa8840f4029a98c42dfc3b9fe6c1cb159cc4904d86f29f5789811a907a477c80f8b0236cf3959c2302a5606d0566f624352c34ef3db1ad03a3a53a721dfd9c054577d9b7b5a29d0a9750a873b584a23bf64b5d6428ebd4b9f934970cd54932c45c39174eb59f2e6588c3e21c02010e1c497b3187ac341da6aab3efdb523a9b981a59667ac23f320375adb6cf8d9ecc4cd2709c5fdc4390ed19790bd054c7acc01c8780f2b17f10299a8d1963a1d31fd09ad00336c3d67cfc858358eef732c76b5c9e11a592fcdbeed513091b7af18e99e18e11fd189867466bc276ec11e7d6fab83abf75e551ef8aa329f8224ddccae986faeb0ef2a2bf66203ee576ed6133dc9131ae2d606177e0ef86691a0cc2dc319224cc6734e5547b375594b79097b0abbee15180b69d7d490b2997c709e62f06d345df46a6e835bff461b1e38b9a8c71e8bff5243ec94521109e48f47dde363c14143f33703449927a06d6ad8d9cf0df19c1648839e85d89392219145c2d9097d453f8b796861901ae712d5d3c9e5aff96f3b210a0c03bfcc4586386bc6c5986a9572dac3792b8a57a2a08002cda56945f75707c4dd56c7403afa6069bd7c1051baf10d686b627eb3c3fed79d34739ed1958653c5a3f6bffa36f88fff16edcefab58a35450fc908e65097fb1707a40da8d96250b7e03c770e3ed3241b40402611261a2ec1a9bff70c8fd88c8d8b8a9487b6cd0160c94e64dd5f441d86df9cad254d10cf2c966d394a92fb68034f67451e52d393604f13743ddad7038215b229bfa293bdc4c29c6110fa4ee9ba053ff8fa3a5d4bb64f007137105396310bbf776ecdc4590fa760cccc607f861c42b1330c4540941cd08f8778eb5a5bd6e59b28da4a90eea7bd940e70b53b2935bd9ad8948f8c0eb4d32a91ca70edf33c433c2902ccae3f0c24ec3dea1ffcb818458729ffd830ee34ed49d50f6229ebd84ce154ddfbcda9967228f66a99bbb7c50ce9c1e3f32fdc676b41cb0ae1f5bf07ae26483684bdf127078e615b3924adb3a8c06f74811d2669483ff053b1cd90d503cc6124a2af6024e0ef1e0e9efbd860960c41fe89353536c2ac599fee260299bf78843197ea394ec89906bd12ee3390b3564267166769fefa555a8a7b24b3072c39055e0f62a52ce6c37a206549a8120f855dbd6b99f202e3bb3693b08c63c776b3c858a8eb4c65d23572852567b27c4449889a79a0aa6f27256fc532f210524a15ca55590bc3d27218330cc226c36541e04706ef52ac587f8224b10a21bbc7a8bdf80ce283e66d482f29e7d58f16bce51a4ab4f21ee21b9076fd47ceaf34860ba9486b43cb67f1798661756cccf2b5a74ad2e0f43451382c4abc888c2af18aae166717137ea944c90b6ca22dc7d988ed5e2fa761b5b80d3ab74ab6e171807489312b04e75bd09f94c287930441c05e7a7d02587bba643d8bb82f58f8ff6595ecb66dfcef969da09941602d8ec5c3471d5e4a19c7fbbfed3588833db5a2ed4a7e7240f7f15bbc79b7f33bab22764bbaab29d1eec0602a85596dc1b8f39964e852359673c78a6b9bc2dac7c66c3d19ef421b4b7f25aa5c15a43712c1c932ee8208e17ed5ab48dd30dc506ff2c09b056fc98f241d28fc7c12e5e6561de3c5b8e9177baff9aaad177ee4d0a32f0fe3dbc0f791b8226a2e3a356dc9563a3b7bb0226c5c7908795b2e998c6d436db754cb87473eb59dbbd7e8488100ff5cdfc893e850c0252d81d2dc1ecc2abb61c3b560af1576aae69312337c7f6ac5dd8011041cb51660fc4590b1ece978a16aa39989c5fba330f335d590cde969d1e9bce02a0d4fdf4b0e261550e6567212c904b0c4627fae9a512ccbfe08f2544c52134ddd717d6584dec7b922c76ba6e3cc626356860aedf6c21517b4f4a9a856fd78c34b4f871c4e848e20951b74676c50b4dc09fae4a4242fa8fcb12e481c6ab5ec7ed6c967c65cd3696ee924aebaf435bffcd391d84b58853d0537c78626eadb2773a22198cedd338fce1962d66016cb678be7b87e75290b939cbffb3a1b7453ab73bb5274bffa511db6941c7ad04e8b91fde8046bf4e6f2b913ca55befc22765fd7b7059d11940ea98fba5a60b41db183a32de5c897d704702e2b5ba0f0ebc5938f7d096d1d839d7a898f7bab9942ab6c96cdf9370fcb631b37bc5263e6b07019e82f957f441e74ceadc70a445aef3eb6bfa5c15822c03f32874d7d21130aaef3f64b6288d6b5bddfd610b7046ef66a29fcc6cacf9d1cf6847fb65d8eb66dc53de2d7dfc725e2de2de5b759c7313b5b3f3911b5cc9964ba3ef26e10d3a3c065502a71e6b152a113c646ad5a7fb839f98bafb5f427b1d014df195c2ead31f8a9e89d374214293349d0f98eefcac1d21d51633e4d4b7aad9d93ba5372c098291a54cc6449ee04e8e085ff3872d601e1e090b562fd6db02f200b69cc38539da217be808fe0e5daca924b965496b61efee30165478094c12ebd0b25929040c6d1f1873c9c4551788171b197ad103c441ffbb96f4064ab154ffdbba4cefd4501c37e172cb93a45b00844ce39c138bfa74477d4d56f66d424d1da4ca6e6481b33a7cf074a97f6917d4042121e9609a7ec84de5454a560e923cd58d003528011ca4c868b3e197bd130895297466cafc62011016eb7b8c382f82928a3beb390c3991af83b5946619507979acf9fd8c492e66", 0x1000}, {&(0x7f00000066c0)="48cf1954bb3ddefb45f9fbecc1a5d3759213359bc8097ddf1d0b7d580fe5b0d3f1342200aeb486195ee289811bf5ad09cb2b56989ff3bce38d5d7ea3cf8edf65ec758ee123491ed472d809f30b7ce5f778edab3ba93988ef48e7af347c36214821", 0x61}, {&(0x7f0000006740)="e600797836deacd90fa1666a396e04f71f4be8b148869005782398d6ef50aba7a74151e6182d73ba0a7bb7f64b1c52495665db44fc139cd938d657c0f21252f3ca2c158889f7034e21da44f8beafc7868338b59f6f1570c28f52b622520608e6881c0704d6a370a93a2186dd15e027e6cc137e25f8efe196465b92d4927407b9c93949a4398c09686903af98e5d2807916ce7c67ac907ebb2d7d1a7d12a9e845546da121d0cf9e7ad9550bb617715c85b0993a3f07b540eb526344a0e13e0c066a315179", 0xc4}, {&(0x7f0000006840)="e33562c4de51eda6812d9193e18ffa569c37cfe83e2527f4ece443e2e3c49a97baaa25908684578bb9f25fae89a919d38d93a337e156ba68c93df62a1db233bacebe1ac0f5bd426816f8830f1266328ac9fae4b8994f0d25afd1f9878ee8759013971d6f5e1a8e31fa36afa1446e458d91d814860d2521f8553b561c7708814c77fab3be5fbe016ffe9ceee67bd2f458f23d51f19970c7fcda7253ea0fc97421dee2a7c680e7a81d91fda43581d6da68b1a8f5b77be45f917be6a8ceca14cd3ffecd28cd5d6737cf083e151de6b8c4867dafe650058f5215ce97ba98ebcc2e44b9371df1c4fc7bc1bd4a768e8b826b4e66c7bf9b550c25", 0xf7}], 0x9, &(0x7f0000006ac0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x3e21e3b3dc03b7ae, 0xe, 0x1, 0x7, 0x0, [@mcast1, @private1, @remote, @mcast2, @empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @remote]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x1d, 0x0, '\x00', [@pad1]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x5c, 0x2, 0x1, 0x2, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}}}, @dstopts={{0x30, 0x29, 0x37, {0x2, 0x2, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast1}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r10}}}, @hopopts={{0x28, 0x29, 0x36, {0x8, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x180}}], 0x6, 0x8000) setsockopt$inet6_group_source_req(r0, 0x29, 0x9b79b58ae53038d7, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f00000004c0), 0x30000, 0x0) 1.685874574s ago: executing program 0 (id=1894): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x48240, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x1, 0x0, 0x3, 0x8, 0x1, 0x7}, 0x20) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x40000) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0xc0844123, &(0x7f0000000000)=0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05"], 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000300)=0x3) mmap$dsp(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000001, 0x20010, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r4, &(0x7f0000000340)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r6 = dup(r5) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x80000) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r6, 0x17b2, 0xf5bb, 0xd5e30415e01fde9e, &(0x7f0000000100)={[0x45a6]}, 0x8) 1.013769295s ago: executing program 3 (id=1895): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x134, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0xf8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xd0, 0x1, [@m_simple={0x30, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_nat={0x9c, 0xa, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xfffffff8, 0x2, 0x100, 0x1}, @broadcast, @multicast2, 0xff000000}}]}, {0x4a, 0x6, "455c01c35a2bca70225b757b65e5e4a3d41b6fb981e9f5ab2f14ad001cda09785441b43636124ee3000e13fa20bea090aab2bdd9895404add20f4fcf1a162cef77fa8839a022"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_FD={0x8}]}}]}, 0x134}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 885.123631ms ago: executing program 3 (id=1896): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b00000018000180140002"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) preadv(r4, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902120001000010000904d9a96438fe31b8070096d1ca00"], 0x0) read$FUSE(r4, &(0x7f0000005b80)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r3, 0xff08, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getitimer(0x0, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000041100010027bd7000fddbdf2500000000", @ANYRES32=r8, @ANYBLOB="8014000004210000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r10 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r10, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0, 0x85}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000240)="2294a696"}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) 785.834414ms ago: executing program 2 (id=1897): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1, @ANYBLOB="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"], 0x23c}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) r3 = socket(0x1d, 0x2, 0x6) r4 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6}, 0x50) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0xc0080, 0x0) syz_fuse_handle_req(r5, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r7, 0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f00000067c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006bbf4751a8dc2590000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, [{0x0, 0xb88, 0x8, 0x0, '/,\x00\x04\x00\x000\xbc'}]}, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x9, 0x800}, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r8, 0x2, {0x1, 0x0, 0x3}, 0xfd}, 0x18) pselect6(0x12, &(0x7f0000000080)={0x1000000000000e, 0x9, 0x9, 0x10000000, 0x6, 0x8, 0xc2db, 0x7ff}, 0x0, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2}) 377.332832ms ago: executing program 0 (id=1898): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000100)) sendmmsg(r0, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001180)="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", 0x545}, {&(0x7f00000001c0)="82816bf5e64186c0c391e094b8764e0e8fa233c8708da88cc98db18f62a624c97ea5995355554f943fe65f6fbc2229b434fbf599be53eb133be3c34719dbe3835443412ff98023dc54a5fb175dfeeb1e", 0x50}], 0x2}}], 0x1, 0x0) 227.06479ms ago: executing program 0 (id=1899): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r3, 0x0, 0x0, 0x20004000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$evdev(0x0, 0x8, 0x800) fsetxattr$security_evm(r4, &(0x7f0000000200), &(0x7f0000000240)=@sha1={0x1, "6bcfc674bf8cfd83adbb89a036d38b508c770dc1"}, 0x15, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$security_capability(r2, &(0x7f0000000040), 0x0, 0x0, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) semget$private(0x0, 0x4000000009, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000140), 0x100000b2, 0xa6040) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000180)={0x2, 0x100000, 0x80000, {r5}}, 0x20) r6 = socket(0x26, 0x5, 0xc) ppoll(&(0x7f00000001c0)=[{r5, 0x421e}, {r6, 0x1}, {r0, 0x40}], 0x3, &(0x7f0000000340), &(0x7f0000000380)={[0x3]}, 0x8) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r10, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="5000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000380000280012800b00010069703667726500001800028014000700fe8000000000000000000000000000aa08000a00", @ANYRES32=r10], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 193.272051ms ago: executing program 2 (id=1900): socket$inet6(0xa, 0x5, 0x0) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x88000) socket$pppoe(0x18, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r2, 0xc048aeca, &(0x7f0000000200)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010014"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="40020000", @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32, @ANYBLOB="10005a800c000180050006000000000014025a802400018005000700020000000500070002000000050004000200000005000400010000009000"], 0x240}}, 0x0) 0s ago: executing program 2 (id=1901): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x14, 0x1, 0x4, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0xe05e39709130f3de}, 0x4000000) kernel console output (not intermixed with test programs): .3/usb4/4-1/4-1:0.145/input/input54 [ 393.316368][T10705] pimreg3: entered allmulticast mode [ 393.672636][ T5965] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 393.700104][ T5965] usb 3-1: USB disconnect, device number 56 [ 393.884636][ T5949] usb 4-1: USB disconnect, device number 45 [ 394.543787][ T5949] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 394.681598][T10735] ALSA: mixer_oss: invalid index 40000 [ 394.757931][ T5949] usb 3-1: config 0 has no interfaces? [ 394.766422][ T5949] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 394.775725][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.785883][ T5949] usb 3-1: Product: syz [ 394.791541][ T5949] usb 3-1: Manufacturer: syz [ 394.797419][ T5949] usb 3-1: SerialNumber: syz [ 394.915021][ T5949] usb 3-1: config 0 descriptor?? [ 394.959037][T10737] IPv6: sit1: Disabled Multicast RS [ 394.978433][T10737] sit1: entered allmulticast mode [ 395.139271][T10740] IPv6: sit1: Disabled Multicast RS [ 395.145479][T10740] sit1: entered allmulticast mode [ 395.194323][T10741] pimreg: entered allmulticast mode [ 395.942273][T10747] netlink: 'syz.1.1445': attribute type 1 has an invalid length. [ 395.994744][T10747] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 396.002239][T10747] IPv6: NLM_F_CREATE should be set when creating new route [ 396.288065][T10757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.296936][T10757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.551199][T10757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.565310][T10757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.272582][ T3569] usb 3-1: USB disconnect, device number 57 [ 397.545467][T10766] fuse: Bad value for 'fd' [ 397.565251][T10766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1451'. [ 397.901677][T10775] sctp: [Deprecated]: syz.4.1450 (pid 10775) Use of int in maxseg socket option. [ 397.901677][T10775] Use struct sctp_assoc_value instead [ 398.592518][T10792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.605369][T10792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.631463][T10792] macsec1: entered promiscuous mode [ 398.637689][T10792] ip6gretap0: entered promiscuous mode [ 398.643761][T10792] macsec1: entered allmulticast mode [ 398.649839][T10792] ip6gretap0: entered allmulticast mode [ 398.659947][T10792] ip6gretap0: left allmulticast mode [ 398.665536][T10792] ip6gretap0: left promiscuous mode [ 398.975916][ T30] audit: type=1326 audit(1751204546.950:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10791 comm="syz.0.1458" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ed938e929 code=0x0 [ 399.014709][ T5949] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 399.173673][ T5949] usb 4-1: device descriptor read/64, error -71 [ 399.413462][ T5949] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 399.544048][ T5949] usb 4-1: device descriptor read/64, error -71 [ 399.596875][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880336a4800: rx timeout, send abort [ 399.607317][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880336a4800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 399.653712][ T5949] usb usb4-port1: attempt power cycle [ 400.003454][ T5949] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 400.034728][ T5949] usb 4-1: device descriptor read/8, error -71 [ 400.733762][ T5949] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 400.764387][ T5949] usb 4-1: device descriptor read/8, error -71 [ 400.819804][T10807] fuse: Bad value for 'fd' [ 400.830024][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1462'. [ 400.867307][T10808] PKCS7: Unknown OID: [5] (bad) [ 400.874312][ T5949] usb usb4-port1: unable to enumerate USB device [ 400.892574][T10808] PKCS7: Only support pkcs7_signedData type [ 401.159059][T10814] loop6: detected capacity change from 0 to 524287999 [ 401.203605][ T5829] usb 3-1: new low-speed USB device number 58 using dummy_hcd [ 401.333449][ T5829] usb 3-1: device descriptor read/64, error -71 [ 401.577610][ T5949] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 401.604063][ T5829] usb 3-1: new low-speed USB device number 59 using dummy_hcd [ 401.642486][ T5949] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 401.906467][ T5829] usb 3-1: device descriptor read/64, error -71 [ 402.066100][ T5829] usb usb3-port1: attempt power cycle [ 402.445099][ T5829] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 402.503810][ T5829] usb 3-1: device descriptor read/8, error -71 [ 402.763670][ T5829] usb 3-1: new low-speed USB device number 61 using dummy_hcd [ 402.813618][T10835] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 402.833951][ T5829] usb 3-1: device descriptor read/8, error -71 [ 402.946738][ T5829] usb usb3-port1: unable to enumerate USB device [ 403.165051][T10851] fuse: Bad value for 'fd' [ 403.227727][T10851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1473'. [ 403.464310][T10860] netlink: 'syz.0.1475': attribute type 10 has an invalid length. [ 403.494070][ T5949] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 403.507240][T10860] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 403.584889][T10862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.599277][T10862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.615529][ T5829] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 403.665947][ T5949] usb 4-1: config 0 has an invalid interface number: 173 but max is 0 [ 403.674328][ T5949] usb 4-1: config 0 has no interface number 0 [ 403.680703][ T5949] usb 4-1: too many endpoints for config 0 interface 173 altsetting 244: 255, using maximum allowed: 30 [ 403.700184][ T5949] usb 4-1: config 0 interface 173 altsetting 244 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 403.720141][ T5949] usb 4-1: config 0 interface 173 has no altsetting 0 [ 403.738621][ T5949] usb 4-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=ff.4d [ 403.747805][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.755994][ T5949] usb 4-1: Product: syz [ 403.760170][ T5949] usb 4-1: Manufacturer: syz [ 403.767754][ T5949] usb 4-1: SerialNumber: syz [ 403.785456][ T5829] usb 3-1: config 0 has an invalid interface number: 173 but max is 0 [ 403.793684][ T5949] usb 4-1: config 0 descriptor?? [ 403.813263][ T5829] usb 3-1: config 0 has no interface number 0 [ 403.828615][ T5829] usb 3-1: too many endpoints for config 0 interface 173 altsetting 244: 255, using maximum allowed: 30 [ 403.852663][ T5829] usb 3-1: config 0 interface 173 altsetting 244 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 403.872887][ T5829] usb 3-1: config 0 interface 173 has no altsetting 0 [ 403.883440][ T5829] usb 3-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=ff.4d [ 403.893319][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.929999][ T5829] usb 3-1: Product: syz [ 403.947182][ T5829] usb 3-1: Manufacturer: syz [ 403.953649][ T5829] usb 3-1: SerialNumber: syz [ 403.967069][ T5829] usb 3-1: config 0 descriptor?? [ 404.019142][ T5949] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 404.032912][ T5949] gspca_sunplus: reg_r err -71 [ 404.038018][ T5949] sunplus 4-1:0.173: probe with driver sunplus failed with error -71 [ 404.063149][ T5949] usb 4-1: USB disconnect, device number 50 [ 404.198187][ T5829] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 404.216404][ T5829] gspca_sunplus: reg_r err -71 [ 404.233843][ T5829] sunplus 3-1:0.173: probe with driver sunplus failed with error -71 [ 404.282952][ T5829] usb 3-1: USB disconnect, device number 62 [ 405.330443][T10889] fuse: Bad value for 'fd' [ 405.339023][T10889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1485'. [ 406.189795][T10908] netlink: 'syz.3.1490': attribute type 27 has an invalid length. [ 406.200898][T10908] netlink: 'syz.3.1490': attribute type 3 has an invalid length. [ 406.211555][T10908] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1490'. [ 406.643540][ T44] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 406.753508][ T5829] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 406.794995][ T44] usb 3-1: no configurations [ 406.802732][ T44] usb 3-1: can't read configurations, error -22 [ 406.926845][ T5829] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.939383][ T5829] usb 4-1: config 0 has no interfaces? [ 406.946480][ T5829] usb 4-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 406.958603][ T44] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 406.970690][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.983260][ T5829] usb 4-1: config 0 descriptor?? [ 407.134393][ T44] usb 3-1: no configurations [ 407.139023][ T44] usb 3-1: can't read configurations, error -22 [ 407.153654][ T44] usb usb3-port1: attempt power cycle [ 407.513679][ T44] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 407.545021][ T44] usb 3-1: no configurations [ 407.554807][ T44] usb 3-1: can't read configurations, error -22 [ 407.705250][ T44] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 407.775933][ T44] usb 3-1: no configurations [ 407.786292][ T44] usb 3-1: can't read configurations, error -22 [ 407.828555][ T44] usb usb3-port1: unable to enumerate USB device [ 408.012043][T10939] fuse: Bad value for 'fd' [ 408.020401][T10939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1497'. [ 408.260242][T10945] fuse: Unknown parameter 'fd0x000000000000000800000000000000000000' [ 408.309690][T10945] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 409.264728][T10953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.282503][T10953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.328557][T10960] sctp: [Deprecated]: syz.0.1502 (pid 10960) Use of int in maxseg socket option. [ 409.328557][T10960] Use struct sctp_assoc_value instead [ 409.348605][T10960] netlink: 'syz.0.1502': attribute type 10 has an invalid length. [ 409.356709][T10960] veth0_vlan: left promiscuous mode [ 409.364091][T10960] veth0_vlan: entered promiscuous mode [ 409.375257][T10960] team0: Device veth0_vlan failed to register rx_handler [ 409.662501][ T44] usb 4-1: USB disconnect, device number 51 [ 410.192807][T10975] fuse: Bad value for 'fd' [ 410.199756][T10975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1508'. [ 410.353438][ T5965] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 410.543557][ T5965] usb 3-1: device descriptor read/64, error -71 [ 410.793449][ T5965] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 410.950941][ T5965] usb 3-1: device descriptor read/64, error -71 [ 411.064046][ T5965] usb usb3-port1: attempt power cycle [ 411.283716][ T44] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 411.433768][ T5965] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 411.461874][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 411.478866][ T44] usb 4-1: config 0 has no interfaces? [ 411.485650][ T44] usb 4-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 411.508394][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.524512][ T5965] usb 3-1: device descriptor read/8, error -71 [ 411.535464][ T44] usb 4-1: config 0 descriptor?? [ 411.570738][T10994] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1514'. [ 411.746160][T10987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.756517][T10987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.774441][ T5965] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 411.794130][ T5965] usb 3-1: device descriptor read/8, error -71 [ 411.873628][ T5949] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 411.904041][ T5965] usb usb3-port1: unable to enumerate USB device [ 411.948378][ T5965] usb 4-1: USB disconnect, device number 52 [ 412.033450][ T5949] usb 5-1: Using ep0 maxpacket: 16 [ 412.046477][ T5949] usb 5-1: config 0 has an invalid interface number: 115 but max is 0 [ 412.059386][ T5949] usb 5-1: config 0 has no interface number 0 [ 412.066706][ T5949] usb 5-1: config 0 interface 115 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 412.078609][ T5949] usb 5-1: config 0 interface 115 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 412.108749][ T5949] usb 5-1: New USB device found, idVendor=eb1a, idProduct=2875, bcdDevice=6f.3f [ 412.127316][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.138966][ T5949] usb 5-1: Product: syz [ 412.143227][ T5949] usb 5-1: Manufacturer: syz [ 412.150597][ T5949] usb 5-1: SerialNumber: syz [ 412.160019][ T5949] usb 5-1: config 0 descriptor?? [ 412.371656][T11000] ptrace attach of "./syz-executor exec"[5836] was attempted by "./syz-executor exec"[11000] [ 412.382701][ T5949] usb 5-1: USB disconnect, device number 63 [ 413.253939][ T5965] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 413.314419][T11012] fuse: Bad value for 'fd' [ 413.324776][T11012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1519'. [ 413.414410][ T5965] usb 4-1: device descriptor read/64, error -71 [ 413.475954][ T5949] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 413.646100][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.657356][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.674182][ T5965] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 413.770697][ T5949] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 413.879872][ T5965] usb 4-1: device descriptor read/64, error -71 [ 413.920799][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.953591][ T5895] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 413.972449][ T5949] usb 3-1: config 0 descriptor?? [ 413.993671][ T5965] usb usb4-port1: attempt power cycle [ 414.138527][ T5895] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 414.148437][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.163546][ T5895] usb 5-1: Product: syz [ 414.169416][ T5895] usb 5-1: Manufacturer: syz [ 414.178045][ T5895] usb 5-1: SerialNumber: syz [ 414.191947][ T5895] usb 5-1: config 0 descriptor?? [ 414.212396][ T5895] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 414.333732][ T5965] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 414.389687][T11010] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1518'. [ 414.404365][T11010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1518'. [ 414.414490][T11018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.448262][ T5965] usb 4-1: device descriptor read/8, error -71 [ 414.456429][T11018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.510900][T11010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1518'. [ 414.521669][T11010] netlink: 'syz.2.1518': attribute type 29 has an invalid length. [ 414.532746][ T5949] usbhid 3-1:0.0: can't add hid device: -71 [ 414.539970][ T5949] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 414.568860][T11030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.588963][T11030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.610226][ T5949] usb 3-1: USB disconnect, device number 71 [ 414.716052][ T5895] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 414.733611][ T5965] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 414.751519][ T5895] sq905c 5-1:0.0: Reading version command failed [ 414.761587][ T5895] sq905c 5-1:0.0: probe with driver sq905c failed with error -71 [ 414.776311][ T5965] usb 4-1: device descriptor read/8, error -71 [ 414.783581][ T5895] usb 5-1: USB disconnect, device number 64 [ 414.885034][ T5965] usb usb4-port1: unable to enumerate USB device [ 414.920821][T11037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.929492][T11037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.569466][T11049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1531'. [ 415.615279][T11048] ptrace attach of "./syz-executor exec"[5840] was attempted by "./syz-executor exec"[11048] [ 415.662619][T11050] usb 1-1: USB disconnect, device number 57 [ 415.732523][T11053] fuse: Bad value for 'fd' [ 415.777689][T11053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1532'. [ 416.373615][ T44] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 416.481263][T11065] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 416.481263][T11065] program syz.0.1537 not setting count and/or reply_len properly [ 416.552760][ T44] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 416.572954][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.593874][ T44] usb 4-1: Product: syz [ 416.598033][ T44] usb 4-1: Manufacturer: syz [ 416.614087][ T44] usb 4-1: SerialNumber: syz [ 416.628398][ T44] usb 4-1: config 0 descriptor?? [ 416.664269][ T44] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 416.868144][T11059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.883948][T11059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.893647][ T5965] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 416.905577][T11059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.915747][T11059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.045287][ T5965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 417.056506][ T5965] usb 3-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 417.065967][ T5965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.080521][ T5965] usb 3-1: config 0 descriptor?? [ 417.147221][T11059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1535'. [ 417.198730][T11081] PKCS7: Unknown OID: [5] (bad) [ 417.204344][T11081] PKCS7: Only support pkcs7_signedData type [ 417.294249][T11084] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1543'. [ 417.342637][ T44] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 417.381223][ T44] sq905c 4-1:0.0: Reading version command failed [ 417.392894][T11081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.406697][T11081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.415609][ T44] sq905c 4-1:0.0: probe with driver sq905c failed with error -71 [ 417.444596][ T44] usb 4-1: USB disconnect, device number 57 [ 417.513976][ T5965] aquacomputer_d5next 0003:0C70:F011.0009: hidraw0: USB HID v0.00 Device [HID 0c70:f011] on usb-dummy_hcd.2-1/input0 [ 417.865930][ T3569] usb 3-1: USB disconnect, device number 72 [ 417.885450][T11098] fuse: Unknown parameter 'fd0x000000000000000800000000000000000000' [ 417.941590][T11098] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 418.746543][T11114] ptrace attach of "./syz-executor exec"[5836] was attempted by "./syz-executor exec"[11114] [ 420.476889][T11140] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 420.653765][T11145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.700951][T11145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.758037][T11145] ip6gretap0: entered promiscuous mode [ 420.774789][T11145] macsec1: entered promiscuous mode [ 420.782411][T11145] macsec1: entered allmulticast mode [ 420.788372][ T5965] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 420.809134][T11145] ip6gretap0: entered allmulticast mode [ 420.822016][ T30] audit: type=1326 audit(1751204568.790:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11144 comm="syz.1.1559" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f588578e929 code=0x0 [ 420.953632][ T5965] usb 5-1: Using ep0 maxpacket: 16 [ 421.199364][T11145] ip6gretap0: left allmulticast mode [ 421.216080][T11145] ip6gretap0: left promiscuous mode [ 421.603598][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 421.883643][ T5949] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 421.973319][T11162] ptrace attach of "./syz-executor exec"[5845] was attempted by "./syz-executor exec"[11162] [ 422.053465][ T5949] usb 3-1: device descriptor read/64, error -71 [ 422.293511][ T5949] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 422.433746][ T5949] usb 3-1: device descriptor read/64, error -71 [ 422.545352][ T5949] usb usb3-port1: attempt power cycle [ 422.643415][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 422.672165][T11166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1566'. [ 422.904539][ T5949] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 422.930295][T11179] PKCS7: Unknown OID: [5] (bad) [ 422.935335][T11179] PKCS7: Only support pkcs7_signedData type [ 422.981056][ T5949] usb 3-1: device descriptor read/8, error -71 [ 423.021791][T11179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.052833][T11179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.233536][ T5949] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 423.254279][ T5949] usb 3-1: device descriptor read/8, error -71 [ 423.365596][ T5949] usb usb3-port1: unable to enumerate USB device [ 423.410556][ T5965] usb 5-1: unable to get BOS descriptor or descriptor too short [ 423.453232][ T5965] usb 5-1: no configurations [ 423.464559][ T5965] usb 5-1: can't read configurations, error -22 [ 423.489104][ T3569] hid (null): invalid report_size 12391 [ 423.501953][ T3569] hid-generic 0000:007F:FFFFFFFE.000A: invalid report_size 12391 [ 423.513899][ T3569] hid-generic 0000:007F:FFFFFFFE.000A: item 0 4 1 7 parsing failed [ 423.522726][ T3569] hid-generic 0000:007F:FFFFFFFE.000A: probe with driver hid-generic failed with error -22 [ 423.762553][T11188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.783094][T11188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.879637][T11192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.907624][T11192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.969361][T11192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1572'. [ 423.988634][T11192] netlink: 'syz.1.1572': attribute type 7 has an invalid length. [ 424.014576][T11192] netlink: 'syz.1.1572': attribute type 8 has an invalid length. [ 424.028495][T11192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1572'. [ 424.122258][T11192] bridge0: entered promiscuous mode [ 424.129591][T11192] batadv_slave_1: entered promiscuous mode [ 424.138505][T11192] bridge0: left promiscuous mode [ 424.145305][T11192] batadv_slave_1: left promiscuous mode [ 424.325588][ T5965] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 424.540053][ T5965] usb 5-1: config 0 has no interfaces? [ 424.560581][ T5965] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 424.640918][T11149] delete_channel: no stack [ 424.666171][ T5965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.728531][ T5965] usb 5-1: Product: syz [ 424.759660][ T5965] usb 5-1: Manufacturer: syz [ 424.818947][ T5965] usb 5-1: SerialNumber: syz [ 424.897031][ T5965] usb 5-1: config 0 descriptor?? [ 425.186222][T11206] ptrace attach of "./syz-executor exec"[5845] was attempted by "./syz-executor exec"[11206] [ 425.703741][ T5881] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 425.737287][T11215] tipc: Enabling of bearer rejected, failed to enable media [ 425.907336][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 425.926139][ T5881] usb 3-1: config 0 has an invalid interface number: 145 but max is 0 [ 425.947822][ T5881] usb 3-1: config 0 has no interface number 0 [ 425.958358][ T5881] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 425.969459][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.978476][ T5881] usb 3-1: Product: syz [ 425.982805][ T5881] usb 3-1: Manufacturer: syz [ 425.991911][ T5881] usb 3-1: SerialNumber: syz [ 426.001402][ T5881] usb 3-1: config 0 descriptor?? [ 426.013114][ T5881] hub 3-1:0.145: bad descriptor, ignoring hub [ 426.020305][ T5881] hub 3-1:0.145: probe with driver hub failed with error -5 [ 426.057524][ T5881] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.145/input/input57 [ 426.857351][ T5881] usb 5-1: USB disconnect, device number 66 [ 427.027451][T11230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.091350][T11230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.141747][T11230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.151072][T11230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.543882][ T5881] usb 3-1: USB disconnect, device number 77 [ 428.800986][ T5949] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 428.947944][T11260] PKCS7: Unknown OID: [5] (bad) [ 428.952938][T11260] PKCS7: Only support pkcs7_signedData type [ 428.991980][T11259] ptrace attach of "./syz-executor exec"[5845] was attempted by "./syz-executor exec"[11259] [ 429.057293][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.078261][ T5949] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 429.139370][ T5949] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 429.176816][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.201824][ T5949] usb 5-1: config 0 descriptor?? [ 429.851218][T11252] ip6gretap0: entered promiscuous mode [ 429.945607][ T30] audit: type=1326 audit(1751204577.910:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11251 comm="syz.4.1591" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f226b18e929 code=0x0 [ 429.971383][T11252] macsec1: entered promiscuous mode [ 430.027669][T11252] macsec1: entered allmulticast mode [ 430.032979][T11252] ip6gretap0: entered allmulticast mode [ 430.274060][T11252] ip6gretap0: left allmulticast mode [ 430.297362][T11287] input: syz1 as /devices/virtual/input/input58 [ 430.429111][T11252] ip6gretap0: left promiscuous mode [ 431.190449][T11291] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 432.320591][T11303] syz.0.1605 (11303): drop_caches: 2 [ 432.332158][ T5949] usbhid 5-1:0.0: can't add hid device: -71 [ 432.340066][ T5949] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 432.348820][T11303] syz.0.1605 (11303): drop_caches: 2 [ 432.363455][ T5965] usb 4-1: new low-speed USB device number 58 using dummy_hcd [ 432.374442][ T5949] usb 5-1: USB disconnect, device number 67 [ 432.535361][ T5965] usb 4-1: config 65 has an invalid interface number: 71 but max is 0 [ 432.547909][ T5965] usb 4-1: config 65 has no interface number 0 [ 432.591644][ T5965] usb 4-1: language id specifier not provided by device, defaulting to English [ 432.631057][ T5965] usb 4-1: New USB device found, idVendor=1b3d, idProduct=014c, bcdDevice=ee.83 [ 432.642415][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.662339][ T5965] usb 4-1: Manufacturer:   [ 432.899216][ T5965] ftdi_sio 4-1:65.71: FTDI USB Serial Device converter detected [ 432.929676][ T5965] ftdi_sio ttyUSB0: unknown device type: 0xee83 [ 432.949815][ T5965] usb 4-1: USB disconnect, device number 58 [ 432.973191][ T5965] ftdi_sio 4-1:65.71: device disconnected [ 433.247685][T11337] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[11337] [ 433.448098][T11339] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 433.631017][T11347] fuse: Unknown parameter 'fd0x000000000000000800000000000000000000' [ 433.729788][T11347] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 434.338706][T11364] netlink: 'syz.1.1622': attribute type 10 has an invalid length. [ 434.386704][T11364] bridge_slave_1: entered promiscuous mode [ 434.447055][T11364] $Hÿ: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 435.512956][ T5949] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 435.790163][T11382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.800412][T11382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.812124][T11382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.822718][T11382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.111308][ T5949] usb 3-1: Using ep0 maxpacket: 32 [ 436.126341][ T5949] usb 3-1: config 0 has an invalid interface number: 37 but max is 0 [ 436.140563][ T5949] usb 3-1: config 0 has no interface number 0 [ 436.152580][ T5949] usb 3-1: config 0 interface 37 has no altsetting 0 [ 436.166342][ T5949] usb 3-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=10.8f [ 436.198722][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.213614][ T5949] usb 3-1: Product: syz [ 436.217969][ T5949] usb 3-1: Manufacturer: syz [ 436.234448][ T5949] usb 3-1: SerialNumber: syz [ 436.259822][ T5949] usb 3-1: config 0 descriptor?? [ 436.276018][ T5949] rtl8150 3-1:0.37: couldn't find required endpoints [ 436.291724][ T5949] rtl8150 3-1:0.37: probe with driver rtl8150 failed with error -5 [ 436.508989][T11387] trusted_key: encrypted_key: keyword 'updatedefault' not recognized [ 436.515838][T11372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.529251][T11372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.620208][ T5949] usb 3-1: USB disconnect, device number 78 [ 437.070540][T11401] sctp: [Deprecated]: syz.0.1628 (pid 11401) Use of int in maxseg socket option. [ 437.070540][T11401] Use struct sctp_assoc_value instead [ 437.088155][T11401] netlink: 'syz.0.1628': attribute type 10 has an invalid length. [ 437.096934][T11401] veth0_vlan: left promiscuous mode [ 437.106215][T11401] veth0_vlan: entered promiscuous mode [ 437.119841][T11401] team0: Device veth0_vlan failed to register rx_handler [ 437.671799][T11410] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1630'. [ 437.833556][ T3569] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 437.999602][ T3569] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 438.010833][ T3569] usb 5-1: config 0 has no interface number 0 [ 438.020272][ T3569] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 438.029543][ T3569] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.039148][ T3569] usb 5-1: Product: syz [ 438.045327][ T3569] usb 5-1: Manufacturer: syz [ 438.055218][ T3569] usb 5-1: SerialNumber: syz [ 438.077386][ T3569] usb 5-1: config 0 descriptor?? [ 438.301802][ T3569] usb 5-1: Found UVC 0.08 device syz (046d:0823) [ 438.308353][ T3569] usb 5-1: No valid video chain found. [ 438.336564][ T3569] usb 5-1: USB disconnect, device number 68 [ 439.293320][T11423] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1635'. [ 439.353480][ T5949] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 439.509172][T11424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.527949][ T5949] usb 5-1: Using ep0 maxpacket: 16 [ 439.613001][T11424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.627542][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.659651][ T5949] usb 5-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.00 [ 439.695232][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.697476][T11424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.714681][T11424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.787868][T11430] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[11430] [ 439.848518][ T5949] usb 5-1: config 0 descriptor?? [ 439.928501][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.935175][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.358459][ T5949] apple 0003:05AC:0254.000B: hidraw0: USB HID v0.03 Device [HID 05ac:0254] on usb-dummy_hcd.4-1/input0 [ 440.536177][ T5949] usb 5-1: USB disconnect, device number 69 [ 441.240796][T11460] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1646'. [ 441.266049][T11461] sctp: [Deprecated]: syz.0.1641 (pid 11461) Use of int in maxseg socket option. [ 441.266049][T11461] Use struct sctp_assoc_value instead [ 441.328326][T11461] netlink: 'syz.0.1641': attribute type 10 has an invalid length. [ 441.337003][T11461] veth0_vlan: left promiscuous mode [ 441.421247][T11461] veth0_vlan: entered promiscuous mode [ 441.429295][T11461] team0: Device veth0_vlan failed to register rx_handler [ 442.019040][T11474] sctp: [Deprecated]: syz.4.1644 (pid 11474) Use of int in maxseg socket option. [ 442.019040][T11474] Use struct sctp_assoc_value instead [ 442.043237][T11474] netlink: 'syz.4.1644': attribute type 10 has an invalid length. [ 442.070134][T11474] veth0_vlan: left promiscuous mode [ 442.080128][T11474] veth0_vlan: entered promiscuous mode [ 442.161344][T11474] team0: Device veth0_vlan failed to register rx_handler [ 442.908351][T11486] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[11486] [ 443.005683][T11488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.072797][T11488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.170491][T11490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.181826][T11490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.209780][T11490] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1650'. [ 443.230801][T11490] netlink: 'syz.1.1650': attribute type 7 has an invalid length. [ 443.269869][T11490] netlink: 'syz.1.1650': attribute type 8 has an invalid length. [ 443.306714][T11490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1650'. [ 443.404094][T11490] bridge0: entered promiscuous mode [ 443.410157][T11490] batadv_slave_1: entered promiscuous mode [ 443.419004][T11490] bridge0: left promiscuous mode [ 443.424744][T11490] batadv_slave_1: left promiscuous mode [ 444.429248][T11500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.438909][T11500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.507900][T11502] fuse: Bad value for 'fd' [ 444.557177][T11502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1654'. [ 444.737626][T11509] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1656'. [ 444.858859][T11512] FAULT_INJECTION: forcing a failure. [ 444.858859][T11512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.931942][T11512] CPU: 0 UID: 0 PID: 11512 Comm: syz.3.1657 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 444.931970][T11512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 444.931987][T11512] Call Trace: [ 444.931995][T11512] [ 444.932004][T11512] dump_stack_lvl+0x189/0x250 [ 444.932037][T11512] ? __pfx____ratelimit+0x10/0x10 [ 444.932061][T11512] ? __pfx_dump_stack_lvl+0x10/0x10 [ 444.932086][T11512] ? __pfx__printk+0x10/0x10 [ 444.932105][T11512] ? __might_fault+0xb0/0x130 [ 444.932134][T11512] should_fail_ex+0x414/0x560 [ 444.932161][T11512] _copy_from_iter+0x1db/0x16f0 [ 444.932190][T11512] ? rcu_is_watching+0x15/0xb0 [ 444.932217][T11512] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 444.932237][T11512] ? __pfx__copy_from_iter+0x10/0x10 [ 444.932263][T11512] ? __build_skb_around+0x257/0x3e0 [ 444.932286][T11512] ? netlink_sendmsg+0x642/0xb30 [ 444.932304][T11512] ? skb_put+0x11b/0x210 [ 444.932328][T11512] netlink_sendmsg+0x6b2/0xb30 [ 444.932357][T11512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 444.932380][T11512] ? aa_sock_msg_perm+0x94/0x160 [ 444.932403][T11512] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 444.932424][T11512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 444.932444][T11512] __sock_sendmsg+0x219/0x270 [ 444.932472][T11512] ____sys_sendmsg+0x505/0x830 [ 444.932498][T11512] ? __pfx_____sys_sendmsg+0x10/0x10 [ 444.932534][T11512] ? import_iovec+0x74/0xa0 [ 444.932555][T11512] ___sys_sendmsg+0x21f/0x2a0 [ 444.932579][T11512] ? __pfx____sys_sendmsg+0x10/0x10 [ 444.932635][T11512] ? __fget_files+0x2a/0x420 [ 444.932654][T11512] ? __fget_files+0x3a0/0x420 [ 444.932683][T11512] __x64_sys_sendmsg+0x19b/0x260 [ 444.932707][T11512] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 444.932736][T11512] ? __pfx_ksys_write+0x10/0x10 [ 444.932750][T11512] ? rcu_is_watching+0x15/0xb0 [ 444.932778][T11512] ? do_syscall_64+0xbe/0x3b0 [ 444.932806][T11512] do_syscall_64+0xfa/0x3b0 [ 444.932828][T11512] ? lockdep_hardirqs_on+0x9c/0x150 [ 444.932851][T11512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.932869][T11512] ? clear_bhb_loop+0x60/0xb0 [ 444.932891][T11512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.932913][T11512] RIP: 0033:0x7f95ea38e929 [ 444.932933][T11512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.932949][T11512] RSP: 002b:00007f95eb1e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 444.932969][T11512] RAX: ffffffffffffffda RBX: 00007f95ea5b5fa0 RCX: 00007f95ea38e929 [ 444.932983][T11512] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 444.932994][T11512] RBP: 00007f95eb1e3090 R08: 0000000000000000 R09: 0000000000000000 [ 444.933005][T11512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.933015][T11512] R13: 0000000000000000 R14: 00007f95ea5b5fa0 R15: 00007f95ea6dfa28 [ 444.933042][T11512] [ 445.549142][T11520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1661'. [ 445.559414][T11520] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1661'. [ 445.677574][ T5829] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 445.863424][ T5829] usb 5-1: Using ep0 maxpacket: 32 [ 445.877866][ T5829] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 445.902035][ T5829] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 445.935959][ T5829] usb 5-1: config 0 has no interface number 0 [ 445.954750][ T5829] usb 5-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 446.002793][ T5829] usb 5-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27 [ 446.022101][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.040577][ T5829] usb 5-1: Product: syz [ 446.045096][ T5829] usb 5-1: Manufacturer: syz [ 446.049945][ T5829] usb 5-1: SerialNumber: syz [ 446.064426][ T5829] usb 5-1: config 0 descriptor?? [ 446.158707][T11532] FAULT_INJECTION: forcing a failure. [ 446.158707][T11532] name failslab, interval 1, probability 0, space 0, times 0 [ 446.176717][T11532] CPU: 0 UID: 0 PID: 11532 Comm: syz.1.1665 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 446.176740][T11532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 446.176747][T11532] Call Trace: [ 446.176752][T11532] [ 446.176757][T11532] dump_stack_lvl+0x189/0x250 [ 446.176777][T11532] ? __pfx____ratelimit+0x10/0x10 [ 446.176793][T11532] ? __pfx_dump_stack_lvl+0x10/0x10 [ 446.176807][T11532] ? __pfx__printk+0x10/0x10 [ 446.176822][T11532] ? ref_tracker_alloc+0x318/0x460 [ 446.176837][T11532] should_fail_ex+0x414/0x560 [ 446.176851][T11532] should_failslab+0xa8/0x100 [ 446.176863][T11532] kmem_cache_alloc_noprof+0x73/0x3c0 [ 446.176878][T11532] ? skb_clone+0x212/0x3a0 [ 446.176893][T11532] skb_clone+0x212/0x3a0 [ 446.176906][T11532] __netlink_deliver_tap+0x404/0x850 [ 446.176924][T11532] ? netlink_deliver_tap+0x2e/0x1b0 [ 446.176935][T11532] netlink_deliver_tap+0x19c/0x1b0 [ 446.176946][T11532] netlink_unicast+0x72f/0x8d0 [ 446.176961][T11532] netlink_sendmsg+0x805/0xb30 [ 446.176977][T11532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.176989][T11532] ? aa_sock_msg_perm+0x94/0x160 [ 446.177003][T11532] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 446.177015][T11532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.177027][T11532] __sock_sendmsg+0x219/0x270 [ 446.177043][T11532] ____sys_sendmsg+0x505/0x830 [ 446.177057][T11532] ? __pfx_____sys_sendmsg+0x10/0x10 [ 446.177074][T11532] ? import_iovec+0x74/0xa0 [ 446.177085][T11532] ___sys_sendmsg+0x21f/0x2a0 [ 446.177098][T11532] ? __pfx____sys_sendmsg+0x10/0x10 [ 446.177129][T11532] ? __fget_files+0x2a/0x420 [ 446.177146][T11532] ? __fget_files+0x3a0/0x420 [ 446.177174][T11532] __x64_sys_sendmsg+0x19b/0x260 [ 446.177197][T11532] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 446.177227][T11532] ? __pfx_ksys_write+0x10/0x10 [ 446.177240][T11532] ? rcu_is_watching+0x15/0xb0 [ 446.177268][T11532] ? do_syscall_64+0xbe/0x3b0 [ 446.177294][T11532] do_syscall_64+0xfa/0x3b0 [ 446.177317][T11532] ? lockdep_hardirqs_on+0x9c/0x150 [ 446.177341][T11532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.177359][T11532] ? clear_bhb_loop+0x60/0xb0 [ 446.177381][T11532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.177398][T11532] RIP: 0033:0x7f588578e929 [ 446.177413][T11532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.177435][T11532] RSP: 002b:00007f588656d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.177456][T11532] RAX: ffffffffffffffda RBX: 00007f58859b5fa0 RCX: 00007f588578e929 [ 446.177470][T11532] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000009 [ 446.177483][T11532] RBP: 00007f588656d090 R08: 0000000000000000 R09: 0000000000000000 [ 446.177494][T11532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.177504][T11532] R13: 0000000000000000 R14: 00007f58859b5fa0 R15: 00007f5885adfa28 [ 446.177532][T11532] [ 446.472380][T11535] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[11535] [ 446.489232][ T44] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 446.495810][ T5965] usb 5-1: USB disconnect, device number 70 [ 446.708321][T11540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.719524][T11540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.751183][T11540] program syz.1.1666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 446.765112][T11540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.779780][T11540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.788023][ T44] usb 4-1: config index 0 descriptor too short (expected 29467, got 27) [ 446.799481][ T44] usb 4-1: config 1 has an invalid interface number: 4 but max is 0 [ 446.856804][ T44] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.856832][ T44] usb 4-1: config 1 has no interface number 0 [ 446.856878][ T44] usb 4-1: config 1 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 446.859069][ T44] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 446.859096][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.859115][ T44] usb 4-1: Product: syz [ 446.859130][ T44] usb 4-1: Manufacturer: syz [ 446.859146][ T44] usb 4-1: SerialNumber: syz [ 447.110307][ T44] usb 4-1: USB disconnect, device number 59 [ 447.690482][T11553] sctp: [Deprecated]: syz.2.1669 (pid 11553) Use of int in maxseg socket option. [ 447.690482][T11553] Use struct sctp_assoc_value instead [ 447.791292][T11553] netlink: 'syz.2.1669': attribute type 10 has an invalid length. [ 447.835663][T11553] batman_adv: batadv0: Interface deactivated: vlan1 [ 447.867160][T11553] veth0_vlan: left promiscuous mode [ 447.883033][T11553] veth0_vlan: entered promiscuous mode [ 447.911849][T11553] batman_adv: batadv0: Interface activated: vlan1 [ 447.920688][T11553] team0: Device veth0_vlan failed to register rx_handler [ 447.952522][T11553] batman_adv: batadv0: Interface deactivated: vlan1 [ 448.295312][T11568] FAULT_INJECTION: forcing a failure. [ 448.295312][T11568] name failslab, interval 1, probability 0, space 0, times 0 [ 448.324177][T11570] FAULT_INJECTION: forcing a failure. [ 448.324177][T11570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.338529][T11569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.352432][T11569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.363243][T11568] CPU: 0 UID: 0 PID: 11568 Comm: syz.4.1675 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 448.363258][T11568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 448.363264][T11568] Call Trace: [ 448.363269][T11568] [ 448.363274][T11568] dump_stack_lvl+0x189/0x250 [ 448.363293][T11568] ? __pfx____ratelimit+0x10/0x10 [ 448.363308][T11568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.363328][T11568] ? __pfx__printk+0x10/0x10 [ 448.363347][T11568] ? sctp_transport_traverse_process+0x3fa/0x470 [ 448.363370][T11568] ? ref_tracker_alloc+0x318/0x460 [ 448.363397][T11568] should_fail_ex+0x414/0x560 [ 448.363416][T11568] should_failslab+0xa8/0x100 [ 448.363428][T11568] kmem_cache_alloc_noprof+0x73/0x3c0 [ 448.363443][T11568] ? skb_clone+0x212/0x3a0 [ 448.363458][T11568] skb_clone+0x212/0x3a0 [ 448.363472][T11568] __netlink_deliver_tap+0x404/0x850 [ 448.363491][T11568] ? netlink_deliver_tap+0x2e/0x1b0 [ 448.363502][T11568] netlink_deliver_tap+0x19c/0x1b0 [ 448.363513][T11568] __netlink_sendskb+0x47/0x90 [ 448.363528][T11568] netlink_dump+0xa12/0xe20 [ 448.363545][T11568] ? __pfx_netlink_dump+0x10/0x10 [ 448.363562][T11568] ? __inet_diag_dump_start+0x89a/0xa10 [ 448.363578][T11568] ? netlink_lookup+0x30/0x200 [ 448.363591][T11568] __netlink_dump_start+0x5cb/0x7e0 [ 448.363605][T11568] inet_diag_handler_cmd+0x1bf/0x290 [ 448.363621][T11568] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 448.363635][T11568] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 448.363648][T11568] ? __pfx_inet_diag_dump+0x10/0x10 [ 448.363660][T11568] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 448.363675][T11568] ? sock_diag_lock_handler+0x19/0x290 [ 448.363690][T11568] ? sock_diag_lock_handler+0x19/0x290 [ 448.363707][T11568] sock_diag_rcv_msg+0x4c9/0x600 [ 448.363723][T11568] netlink_rcv_skb+0x208/0x470 [ 448.363734][T11568] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 448.363749][T11568] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 448.363767][T11568] ? netlink_deliver_tap+0x2e/0x1b0 [ 448.363777][T11568] ? netlink_deliver_tap+0x2e/0x1b0 [ 448.363790][T11568] netlink_unicast+0x75b/0x8d0 [ 448.363806][T11568] netlink_sendmsg+0x805/0xb30 [ 448.363822][T11568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.363835][T11568] ? aa_sock_msg_perm+0x94/0x160 [ 448.363848][T11568] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 448.363860][T11568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.363871][T11568] __sock_sendmsg+0x219/0x270 [ 448.363887][T11568] sock_write_iter+0x258/0x330 [ 448.363902][T11568] ? __pfx_sock_write_iter+0x10/0x10 [ 448.363921][T11568] ? __pfx_aa_file_perm+0x10/0x10 [ 448.363937][T11568] do_iter_readv_writev+0x56b/0x7f0 [ 448.363950][T11568] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 448.363963][T11568] ? bpf_lsm_file_permission+0x9/0x20 [ 448.363979][T11568] ? security_file_permission+0x75/0x290 [ 448.363990][T11568] ? rw_verify_area+0x258/0x650 [ 448.364006][T11568] vfs_writev+0x31a/0x960 [ 448.364020][T11568] ? __lock_acquire+0xab9/0xd20 [ 448.364035][T11568] ? __pfx_vfs_writev+0x10/0x10 [ 448.364054][T11568] ? __fget_files+0x2a/0x420 [ 448.364067][T11568] ? __fget_files+0x3a0/0x420 [ 448.364077][T11568] ? __fget_files+0x2a/0x420 [ 448.364094][T11568] do_writev+0x14d/0x2d0 [ 448.364107][T11568] ? __pfx_do_writev+0x10/0x10 [ 448.364116][T11568] ? rcu_is_watching+0x15/0xb0 [ 448.364133][T11568] ? do_syscall_64+0xbe/0x3b0 [ 448.364150][T11568] do_syscall_64+0xfa/0x3b0 [ 448.364162][T11568] ? lockdep_hardirqs_on+0x9c/0x150 [ 448.364175][T11568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.364185][T11568] ? clear_bhb_loop+0x60/0xb0 [ 448.364197][T11568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.364207][T11568] RIP: 0033:0x7f226b18e929 [ 448.364222][T11568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.364231][T11568] RSP: 002b:00007f226c02e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 448.364243][T11568] RAX: ffffffffffffffda RBX: 00007f226b3b5fa0 RCX: 00007f226b18e929 [ 448.364250][T11568] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000004 [ 448.364257][T11568] RBP: 00007f226c02e090 R08: 0000000000000000 R09: 0000000000000000 [ 448.364263][T11568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.364269][T11568] R13: 0000000000000000 R14: 00007f226b3b5fa0 R15: 00007f226b4dfa28 [ 448.364284][T11568] [ 448.784519][ C0] vkms_vblank_simulate: vblank timer overrun [ 448.815421][T11569] delete_channel: no stack [ 448.822224][T11570] CPU: 1 UID: 0 PID: 11570 Comm: syz.3.1676 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 448.822240][T11570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 448.822246][T11570] Call Trace: [ 448.822251][T11570] [ 448.822256][T11570] dump_stack_lvl+0x189/0x250 [ 448.822276][T11570] ? __pfx____ratelimit+0x10/0x10 [ 448.822290][T11570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.822305][T11570] ? __pfx__printk+0x10/0x10 [ 448.822316][T11570] ? __might_fault+0xb0/0x130 [ 448.822332][T11570] should_fail_ex+0x414/0x560 [ 448.822347][T11570] _copy_to_iter+0x1db/0x16f0 [ 448.822361][T11570] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 448.822377][T11570] ? __pfx__copy_to_iter+0x10/0x10 [ 448.822394][T11570] ? _raw_spin_unlock_irq+0x23/0x50 [ 448.822406][T11570] ? lockdep_hardirqs_on+0x9c/0x150 [ 448.822421][T11570] eventfd_read+0x45a/0x710 [ 448.822438][T11570] ? __pfx_eventfd_read+0x10/0x10 [ 448.822457][T11570] ? rw_verify_area+0x258/0x650 [ 448.822473][T11570] ? __pfx_eventfd_read+0x10/0x10 [ 448.822485][T11570] __io_read+0x6f9/0x14f0 [ 448.822506][T11570] ? __lock_acquire+0xab9/0xd20 [ 448.822520][T11570] ? __pfx___io_read+0x10/0x10 [ 448.822533][T11570] ? __mutex_trylock_common+0x153/0x260 [ 448.822545][T11570] io_read+0x1c/0x60 [ 448.822556][T11570] __io_issue_sqe+0x181/0x4b0 [ 448.822570][T11570] io_issue_sqe+0x165/0xfd0 [ 448.822584][T11570] io_req_task_submit+0x10b/0x1c0 [ 448.822595][T11570] io_poll_task_func+0xc08/0xff0 [ 448.822613][T11570] ? __pfx_io_poll_task_func+0x10/0x10 [ 448.822624][T11570] ? percpu_ref_get_many+0x21/0x1e0 [ 448.822636][T11570] ? percpu_ref_get_many+0x18c/0x1e0 [ 448.822645][T11570] ? __pfx_io_poll_task_func+0x10/0x10 [ 448.822657][T11570] io_handle_tw_list+0x1f5/0x4c0 [ 448.822670][T11570] tctx_task_work_run+0x99/0x370 [ 448.822681][T11570] tctx_task_work+0x3f/0x90 [ 448.822691][T11570] task_work_run+0x1d1/0x260 [ 448.822704][T11570] ? __pfx_task_work_run+0x10/0x10 [ 448.822718][T11570] ? vhost_vsock_dev_ioctl+0x91c/0xdc0 [ 448.822736][T11570] get_signal+0x11ed/0x1340 [ 448.822749][T11570] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 448.822764][T11570] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 448.822786][T11570] arch_do_signal_or_restart+0x9a/0x750 [ 448.822800][T11570] ? vhost_vsock_dev_ioctl+0x91c/0xdc0 [ 448.822816][T11570] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 448.822832][T11570] ? __fget_files+0x2a/0x420 [ 448.822846][T11570] ? exit_to_user_mode_loop+0x40/0x110 [ 448.822862][T11570] exit_to_user_mode_loop+0x75/0x110 [ 448.822875][T11570] do_syscall_64+0x2bd/0x3b0 [ 448.822888][T11570] ? lockdep_hardirqs_on+0x9c/0x150 [ 448.822902][T11570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.822912][T11570] ? clear_bhb_loop+0x60/0xb0 [ 448.822924][T11570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.822933][T11570] RIP: 0033:0x7f95ea38e929 [ 448.822945][T11570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.822954][T11570] RSP: 002b:00007f95eb1e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 448.822966][T11570] RAX: 0000000000000000 RBX: 00007f95ea5b5fa0 RCX: 00007f95ea38e929 [ 448.822973][T11570] RDX: 0000200000000000 RSI: 000000004004af61 RDI: 0000000000000003 [ 448.822980][T11570] RBP: 00007f95eb1e3090 R08: 0000000000000000 R09: 0000000000000000 [ 448.822986][T11570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.822992][T11570] R13: 0000000000000000 R14: 00007f95ea5b5fa0 R15: 00007f95ea6dfa28 [ 448.823007][T11570] [ 449.254992][T11573] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 449.276228][T11575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.287642][T11575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.537743][T11582] netlink: 'syz.0.1677': attribute type 20 has an invalid length. [ 449.885439][T11584] ptrace attach of "./syz-executor exec"[5845] was attempted by "./syz-executor exec"[11584] [ 450.721145][T11593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1683'. [ 450.753559][T11593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1683'. [ 451.330297][T11608] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1687'. [ 451.843471][ T5829] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 451.993702][ T5829] usb 3-1: Using ep0 maxpacket: 16 [ 452.108767][ T5829] usb 3-1: config 0 has an invalid interface number: 145 but max is 0 [ 452.137858][ T30] audit: type=1326 audit(1751204600.110:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11624 comm="syz.3.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ea38e929 code=0x7ffc0000 [ 452.137866][ T5829] usb 3-1: config 0 has no interface number 0 [ 452.178418][ T5829] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 452.188766][ T30] audit: type=1326 audit(1751204600.110:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11624 comm="syz.3.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ea38e929 code=0x7ffc0000 [ 452.221418][ T30] audit: type=1326 audit(1751204600.140:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11624 comm="syz.3.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f95ea32ab19 code=0x7ffc0000 [ 452.253888][ T30] audit: type=1326 audit(1751204600.140:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11624 comm="syz.3.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ea38e929 code=0x7ffc0000 [ 452.316670][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.340917][ T30] audit: type=1326 audit(1751204600.140:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11624 comm="syz.3.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f95ea32ab19 code=0x7ffc0000 [ 452.388932][ T5829] usb 3-1: Product: syz [ 452.417870][ T5829] usb 3-1: Manufacturer: syz [ 452.445362][ T30] audit: type=1326 audit(1751204600.140:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11624 comm="syz.3.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f95ea32ab19 code=0x7ffc0000 [ 452.475708][ T5829] usb 3-1: SerialNumber: syz [ 452.503559][ T5829] usb 3-1: config 0 descriptor?? [ 452.547080][ T30] audit: type=1326 audit(1751204600.140:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11624 comm="syz.3.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ea38e929 code=0x7ffc0000 [ 452.569601][ C0] vkms_vblank_simulate: vblank timer overrun [ 452.691761][ T5829] hub 3-1:0.145: bad descriptor, ignoring hub [ 452.711240][ T5829] hub 3-1:0.145: probe with driver hub failed with error -5 [ 452.733418][ T30] audit: type=1326 audit(1751204600.140:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11624 comm="syz.3.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f95ea32ab19 code=0x7ffc0000 [ 452.876448][ T5829] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.145/input/input64 [ 452.911318][T11630] sctp: [Deprecated]: syz.1.1693 (pid 11630) Use of int in maxseg socket option. [ 452.911318][T11630] Use struct sctp_assoc_value instead [ 452.981090][T11630] netlink: 'syz.1.1693': attribute type 10 has an invalid length. [ 452.989690][T11630] veth0_vlan: left promiscuous mode [ 452.997383][T11630] veth0_vlan: entered promiscuous mode [ 453.029186][T11630] team0: Device veth0_vlan failed to register rx_handler [ 453.113778][ T30] audit: type=1326 audit(1751204600.140:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11624 comm="syz.3.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f95ea32ab19 code=0x7ffc0000 [ 453.212826][ T5829] input: failed to attach handler mousedev to device input64, error: -2 [ 453.247614][ T30] audit: type=1326 audit(1751204600.140:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11624 comm="syz.3.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95ea38e929 code=0x7ffc0000 [ 453.496238][T11636] sctp: [Deprecated]: syz.0.1694 (pid 11636) Use of int in maxseg socket option. [ 453.496238][T11636] Use struct sctp_assoc_value instead [ 453.524089][T11636] netlink: 'syz.0.1694': attribute type 10 has an invalid length. [ 453.534211][T11636] veth0_vlan: left promiscuous mode [ 453.547471][T11636] veth0_vlan: entered promiscuous mode [ 453.565028][T11636] team0: Device veth0_vlan failed to register rx_handler [ 454.050394][T11625] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1692'. [ 454.206423][T11622] ALSA: mixer_oss: invalid index 40000 [ 454.655744][T11646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1695'. [ 455.342538][T11658] FAULT_INJECTION: forcing a failure. [ 455.342538][T11658] name failslab, interval 1, probability 0, space 0, times 0 [ 455.383570][T11658] CPU: 0 UID: 0 PID: 11658 Comm: syz.4.1698 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 455.383596][T11658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 455.383609][T11658] Call Trace: [ 455.383615][T11658] [ 455.383620][T11658] dump_stack_lvl+0x189/0x250 [ 455.383639][T11658] ? __pfx____ratelimit+0x10/0x10 [ 455.383658][T11658] ? __pfx_dump_stack_lvl+0x10/0x10 [ 455.383673][T11658] ? __pfx__printk+0x10/0x10 [ 455.383687][T11658] ? ref_tracker_alloc+0x318/0x460 [ 455.383701][T11658] should_fail_ex+0x414/0x560 [ 455.383716][T11658] should_failslab+0xa8/0x100 [ 455.383728][T11658] kmem_cache_alloc_noprof+0x73/0x3c0 [ 455.383743][T11658] ? skb_clone+0x212/0x3a0 [ 455.383758][T11658] skb_clone+0x212/0x3a0 [ 455.383772][T11658] __netlink_deliver_tap+0x404/0x850 [ 455.383790][T11658] ? netlink_deliver_tap+0x2e/0x1b0 [ 455.383801][T11658] netlink_deliver_tap+0x19c/0x1b0 [ 455.383812][T11658] netlink_unicast+0x72f/0x8d0 [ 455.383827][T11658] netlink_sendmsg+0x805/0xb30 [ 455.383842][T11658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.383855][T11658] ? aa_sock_msg_perm+0x94/0x160 [ 455.383868][T11658] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 455.383881][T11658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.383892][T11658] __sock_sendmsg+0x219/0x270 [ 455.383908][T11658] ____sys_sendmsg+0x505/0x830 [ 455.383922][T11658] ? __pfx_____sys_sendmsg+0x10/0x10 [ 455.383938][T11658] ? import_iovec+0x74/0xa0 [ 455.383949][T11658] ___sys_sendmsg+0x21f/0x2a0 [ 455.383962][T11658] ? __pfx____sys_sendmsg+0x10/0x10 [ 455.383995][T11658] ? __fget_files+0x2a/0x420 [ 455.384006][T11658] ? __fget_files+0x3a0/0x420 [ 455.384021][T11658] __x64_sys_sendmsg+0x19b/0x260 [ 455.384034][T11658] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 455.384051][T11658] ? __pfx_ksys_write+0x10/0x10 [ 455.384059][T11658] ? rcu_is_watching+0x15/0xb0 [ 455.384076][T11658] ? do_syscall_64+0xbe/0x3b0 [ 455.384092][T11658] do_syscall_64+0xfa/0x3b0 [ 455.384105][T11658] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.384118][T11658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.384128][T11658] ? clear_bhb_loop+0x60/0xb0 [ 455.384139][T11658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.384149][T11658] RIP: 0033:0x7f226b18e929 [ 455.384158][T11658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.384167][T11658] RSP: 002b:00007f226c02e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.384179][T11658] RAX: ffffffffffffffda RBX: 00007f226b3b5fa0 RCX: 00007f226b18e929 [ 455.384186][T11658] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 455.384193][T11658] RBP: 00007f226c02e090 R08: 0000000000000000 R09: 0000000000000000 [ 455.384199][T11658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.384205][T11658] R13: 0000000000000000 R14: 00007f226b3b5fa0 R15: 00007f226b4dfa28 [ 455.384221][T11658] [ 455.503739][ T5829] usb 3-1: USB disconnect, device number 79 [ 455.504374][ C0] vkms_vblank_simulate: vblank timer overrun [ 455.690604][ C0] vkms_vblank_simulate: vblank timer overrun [ 455.696582][ C0] hrtimer: interrupt took 303252524 ns [ 456.537531][T11674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1699'. [ 456.584611][T11676] ptrace attach of "./syz-executor exec"[5836] was attempted by "./syz-executor exec"[11676] [ 456.959843][ T5965] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 457.173663][ T5965] usb 3-1: config 0 has an invalid interface number: 173 but max is 0 [ 457.212473][ T5965] usb 3-1: config 0 has no interface number 0 [ 457.242841][ T5965] usb 3-1: too many endpoints for config 0 interface 173 altsetting 244: 255, using maximum allowed: 30 [ 457.278868][ T5965] usb 3-1: config 0 interface 173 altsetting 244 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 457.347051][ T5965] usb 3-1: config 0 interface 173 has no altsetting 0 [ 457.366539][ T5965] usb 3-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=ff.4d [ 457.378964][ T5965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.388917][ T5965] usb 3-1: Product: syz [ 457.397344][ T5965] usb 3-1: Manufacturer: syz [ 457.417656][ T5965] usb 3-1: SerialNumber: syz [ 457.462034][ T5965] usb 3-1: config 0 descriptor?? [ 457.778624][ T5965] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 457.798893][ T5965] gspca_sunplus: reg_r err -71 [ 457.803997][ T5895] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 457.816371][ T5965] sunplus 3-1:0.173: probe with driver sunplus failed with error -71 [ 457.853425][ T5965] usb 3-1: USB disconnect, device number 80 [ 458.086616][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 458.099718][ T5895] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 458.119157][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 458.145693][ T5895] usb 5-1: Product: syz [ 458.149877][ T5895] usb 5-1: Manufacturer: syz [ 458.154849][ T5895] usb 5-1: SerialNumber: syz [ 458.190566][ T5895] usb 5-1: config 0 descriptor?? [ 458.552024][T11697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.560982][T11697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.633484][ T5150] Bluetooth: hci4: command 0x0405 tx timeout [ 458.812197][T11684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1706'. [ 458.868202][T11685] ALSA: mixer_oss: invalid index 40000 [ 458.874768][T11684] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1706'. [ 459.159702][T11703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.169120][T11703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.393492][ T44] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 459.722147][ T44] usb 4-1: config 171 has an invalid interface number: 109 but max is 0 [ 459.748201][ T44] usb 4-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 459.803058][ T44] usb 4-1: config 171 has no interface number 0 [ 459.842632][ T44] usb 4-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 459.865558][ T44] usb 4-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 2560, setting to 64 [ 459.891775][ T44] usb 4-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 459.925458][ T44] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 459.936327][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.946492][ T44] usb 4-1: Product: syz [ 459.955834][ T44] usb 4-1: Manufacturer: syz [ 459.970448][ T44] usb 4-1: SerialNumber: syz [ 459.998785][T11704] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 460.213503][ T44] ath6kl: Failed to submit usb control message: -71 [ 460.221782][ T44] ath6kl: unable to send the bmi data to the device: -71 [ 460.231881][ T44] ath6kl: Unable to send get target info: -71 [ 460.251112][ T44] ath6kl: Failed to init ath6kl core: -71 [ 460.278975][ T44] ath6kl_usb 4-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 460.319656][ T44] usb 4-1: USB disconnect, device number 60 [ 460.417167][ T3569] usb 5-1: USB disconnect, device number 71 [ 461.323481][ T5895] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 461.438014][T11726] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[11726] [ 461.485918][ T5895] usb 4-1: config 0 has an invalid interface number: 173 but max is 0 [ 461.494591][ T5895] usb 4-1: config 0 has no interface number 0 [ 461.500799][ T5895] usb 4-1: too many endpoints for config 0 interface 173 altsetting 244: 255, using maximum allowed: 30 [ 461.513534][ T5895] usb 4-1: config 0 interface 173 altsetting 244 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 461.527250][ T5895] usb 4-1: config 0 interface 173 has no altsetting 0 [ 461.536766][ T5895] usb 4-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=ff.4d [ 461.552928][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.562433][ T5895] usb 4-1: Product: syz [ 461.566772][ T5895] usb 4-1: Manufacturer: syz [ 461.575465][ T5895] usb 4-1: SerialNumber: syz [ 461.620144][ T5895] usb 4-1: config 0 descriptor?? [ 461.841801][ T5895] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 461.858598][ T5895] gspca_sunplus: reg_r err -71 [ 461.881688][ T5895] sunplus 4-1:0.173: probe with driver sunplus failed with error -71 [ 461.893022][T11736] sctp: [Deprecated]: syz.2.1719 (pid 11736) Use of int in maxseg socket option. [ 461.893022][T11736] Use struct sctp_assoc_value instead [ 461.922689][T11736] netlink: 'syz.2.1719': attribute type 10 has an invalid length. [ 461.933592][T11736] veth0_vlan: left promiscuous mode [ 461.944863][T11736] veth0_vlan: entered promiscuous mode [ 461.966254][T11736] batman_adv: batadv0: Interface activated: vlan1 [ 461.999576][T11736] team0: Device veth0_vlan failed to register rx_handler [ 462.033982][T11736] batman_adv: batadv0: Interface deactivated: vlan1 [ 462.068094][ T5895] usb 4-1: USB disconnect, device number 61 [ 462.823988][T11740] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 462.990881][T11750] loop3: detected capacity change from 0 to 1 [ 463.012543][ T5838] Dev loop3: unable to read RDB block 1 [ 463.027420][ T5838] loop3: unable to read partition table [ 463.059978][ T5838] loop3: partition table beyond EOD, truncated [ 463.098696][T11750] Dev loop3: unable to read RDB block 1 [ 463.129371][T11754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.166314][T11750] loop3: unable to read partition table [ 463.176630][T11754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.186432][T11750] loop3: partition table beyond EOD, truncated [ 463.204120][T11750] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 463.274980][T11756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.297817][T11756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.507897][T11760] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1727'. [ 463.519828][T11760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1727'. [ 463.843431][ T3569] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 464.003443][ T3569] usb 5-1: device descriptor read/64, error -71 [ 464.244716][ T3569] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 464.373946][ T44] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 464.390526][T11774] sctp: [Deprecated]: syz.1.1732 (pid 11774) Use of int in maxseg socket option. [ 464.390526][T11774] Use struct sctp_assoc_value instead [ 464.416581][T11774] netlink: 'syz.1.1732': attribute type 10 has an invalid length. [ 464.427192][T11774] veth0_vlan: left promiscuous mode [ 464.433702][ T3569] usb 5-1: device descriptor read/64, error -71 [ 464.447278][T11774] veth0_vlan: entered promiscuous mode [ 464.465631][T11774] team0: Device veth0_vlan failed to register rx_handler [ 464.517588][T11764] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[11764] [ 464.603986][ T3569] usb usb5-port1: attempt power cycle [ 464.676370][ T44] usb 4-1: config 0 has an invalid interface number: 62 but max is 0 [ 464.709257][ T44] usb 4-1: config 0 has no interface number 0 [ 464.927016][ T44] usb 4-1: config 0 interface 62 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 464.965016][ T3569] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 465.005673][ T44] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 465.080357][ T3569] usb 5-1: device descriptor read/8, error -71 [ 465.127923][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.238650][ T44] usb 4-1: config 0 descriptor?? [ 465.403408][ T3569] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 465.425603][ T3569] usb 5-1: device descriptor read/8, error -71 [ 465.533883][ T3569] usb usb5-port1: unable to enumerate USB device [ 466.232791][ T30] kauditd_printk_skb: 253 callbacks suppressed [ 466.232804][ T30] audit: type=1326 audit(1751204614.200:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11789 comm="syz.0.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed938e929 code=0x7ffc0000 [ 466.268413][T11790] FAULT_INJECTION: forcing a failure. [ 466.268413][T11790] name failslab, interval 1, probability 0, space 0, times 0 [ 466.291395][T11790] CPU: 1 UID: 0 PID: 11790 Comm: syz.0.1735 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 466.291418][T11790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 466.291428][T11790] Call Trace: [ 466.291436][T11790] [ 466.291443][T11790] dump_stack_lvl+0x189/0x250 [ 466.291480][T11790] ? __pfx____ratelimit+0x10/0x10 [ 466.291505][T11790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.291531][T11790] ? __pfx__printk+0x10/0x10 [ 466.291556][T11790] ? __pfx___might_resched+0x10/0x10 [ 466.291586][T11790] should_fail_ex+0x414/0x560 [ 466.291612][T11790] should_failslab+0xa8/0x100 [ 466.291633][T11790] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 466.291652][T11790] ? __alloc_skb+0x112/0x2d0 [ 466.291676][T11790] __alloc_skb+0x112/0x2d0 [ 466.291698][T11790] audit_log_start+0x152/0x870 [ 466.291722][T11790] ? __pfx_audit_log_start+0x10/0x10 [ 466.291745][T11790] ? migrate_enable+0x29c/0x3c0 [ 466.291769][T11790] ? __pfx_migrate_enable+0x10/0x10 [ 466.291793][T11790] audit_seccomp+0x64/0x190 [ 466.291808][T11790] ? clear_bhb_loop+0x60/0xb0 [ 466.291825][T11790] ? clear_bhb_loop+0xe/0xb0 [ 466.291847][T11790] __seccomp_filter+0x9aa/0x1a40 [ 466.291877][T11790] ? __fget_files+0x2a/0x420 [ 466.291897][T11790] ? __fget_files+0x2a/0x420 [ 466.291918][T11790] ? __pfx___seccomp_filter+0x10/0x10 [ 466.291943][T11790] ? fdget_raw+0x12f/0x170 [ 466.291964][T11790] ? __x64_sys_newfstat+0x17b/0x200 [ 466.291985][T11790] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 466.292013][T11790] ? __pfx___x64_sys_newfstat+0x10/0x10 [ 466.292035][T11790] ? __fget_files+0x3a0/0x420 [ 466.292070][T11790] ? __pfx_ksys_write+0x10/0x10 [ 466.292087][T11790] ? __secure_computing+0xe2/0x2a0 [ 466.292116][T11790] syscall_trace_enter+0xaa/0x160 [ 466.292142][T11790] do_syscall_64+0xd3/0x3b0 [ 466.292165][T11790] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.292188][T11790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.292206][T11790] ? clear_bhb_loop+0x60/0xb0 [ 466.292227][T11790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.292245][T11790] RIP: 0033:0x7f5ed938d33c [ 466.292261][T11790] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 466.292276][T11790] RSP: 002b:00007f5eda1bb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 466.292296][T11790] RAX: ffffffffffffffda RBX: 00007f5ed95b5fa0 RCX: 00007f5ed938d33c [ 466.292310][T11790] RDX: 000000000000000f RSI: 00007f5eda1bb0a0 RDI: 0000000000000003 [ 466.292322][T11790] RBP: 00007f5eda1bb090 R08: 0000000000000000 R09: 0000000000000000 [ 466.292334][T11790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.292345][T11790] R13: 0000000000000000 R14: 00007f5ed95b5fa0 R15: 00007f5ed96dfa28 [ 466.292373][T11790] [ 466.292396][T11790] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 466.625249][ T30] audit: type=1326 audit(1751204614.240:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11789 comm="syz.0.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed938e929 code=0x7ffc0000 [ 466.647852][T11790] audit: out of memory in audit_log_start [ 466.815737][ T30] audit: type=1326 audit(1751204614.240:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11789 comm="syz.0.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ed938d290 code=0x7ffc0000 [ 466.865145][ T30] audit: type=1326 audit(1751204614.240:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11789 comm="syz.0.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5ed938d3df code=0x7ffc0000 [ 466.893604][ T30] audit: type=1326 audit(1751204614.240:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11789 comm="syz.0.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f5ed938e929 code=0x7ffc0000 [ 466.923644][ T30] audit: type=1326 audit(1751204614.680:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11789 comm="syz.0.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5ed938d3df code=0x7ffc0000 [ 466.978280][ T30] audit: type=1326 audit(1751204614.680:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11789 comm="syz.0.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5ed938d58a code=0x7ffc0000 [ 467.052160][ T30] audit: type=1326 audit(1751204614.680:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11789 comm="syz.0.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed938e929 code=0x7ffc0000 [ 467.212653][ T3569] usb 4-1: USB disconnect, device number 62 [ 467.494109][ T5881] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 467.653838][ T5895] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 467.672758][ T5881] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 467.681468][ T5881] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 467.939801][ T5895] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 467.953635][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 467.966865][ T5881] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 468.153735][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 468.166324][ T5881] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 468.187104][ T5895] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 468.211888][ T5881] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 468.223062][ T5895] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 468.232279][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.259008][ T5881] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 468.288479][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 468.296231][T11820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.307616][T11820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.309396][ T5895] usb 3-1: config 0 descriptor?? [ 468.377259][ T5881] usb 5-1: Product: syz [ 468.381609][ T5881] usb 5-1: Manufacturer: syz [ 468.502347][ T5881] cdc_wdm 5-1:1.0: skipping garbage [ 468.511120][ T5881] cdc_wdm 5-1:1.0: skipping garbage [ 468.525229][ T5881] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 468.531392][ T5881] cdc_wdm 5-1:1.0: Unknown control protocol [ 468.718024][T11820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.737397][T11820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.825810][ T5895] plantronics 0003:047F:FFFF.000C: ignoring exceeding usage max [ 468.887952][ T5895] plantronics 0003:047F:FFFF.000C: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 469.143120][T11831] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1748'. [ 469.246162][T11833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.258385][T11833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.313170][ T5895] usb 5-1: USB disconnect, device number 76 [ 469.343709][T11835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.365295][T11835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.382159][T11835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1749'. [ 469.393375][T11835] netlink: 'syz.0.1749': attribute type 7 has an invalid length. [ 469.401205][T11835] netlink: 'syz.0.1749': attribute type 8 has an invalid length. [ 469.411301][T11835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1749'. [ 469.428535][T11834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1747'. [ 469.447456][T11835] bridge0: entered promiscuous mode [ 469.461222][T11834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1747'. [ 469.470516][T11834] netlink: 'syz.3.1747': attribute type 12 has an invalid length. [ 469.479207][T11834] netlink: 'syz.3.1747': attribute type 13 has an invalid length. [ 469.479314][T11835] bridge0: left promiscuous mode [ 469.561973][ T5895] usb 3-1: USB disconnect, device number 81 [ 470.010063][ T5895] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 470.213540][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 470.224396][ T5895] usb 3-1: unable to get BOS descriptor or descriptor too short [ 470.261214][ T5895] usb 3-1: config 1 has an invalid interface number: 26 but max is 1 [ 470.318228][ T5895] usb 3-1: config 1 has an invalid interface number: 89 but max is 1 [ 470.346693][ T5895] usb 3-1: config 1 has an invalid descriptor of length 11, skipping remainder of the config [ 470.372494][ T5895] usb 3-1: config 1 has no interface number 0 [ 470.395741][ T5895] usb 3-1: config 1 has no interface number 1 [ 470.413211][ T5895] usb 3-1: config 1 interface 26 altsetting 213 bulk endpoint 0xC has invalid maxpacket 1023 [ 470.528056][ T5895] usb 3-1: config 1 interface 26 altsetting 213 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 470.556563][ T5881] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 470.581140][ T5895] usb 3-1: config 1 interface 26 altsetting 213 bulk endpoint 0xD has invalid maxpacket 8 [ 470.739317][ T5895] usb 3-1: config 1 interface 26 altsetting 213 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 470.750627][ T5895] usb 3-1: config 1 interface 26 altsetting 213 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 470.765892][ T5895] usb 3-1: config 1 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 470.802966][ T5895] usb 3-1: config 1 interface 26 has no altsetting 0 [ 470.810968][ T5895] usb 3-1: config 1 interface 89 has no altsetting 0 [ 470.817774][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 470.846246][ T5881] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 470.855625][ T5881] usb 5-1: config 0 has no interface number 0 [ 470.862410][ T5881] usb 5-1: too many endpoints for config 0 interface 217 altsetting 169: 100, using maximum allowed: 30 [ 470.877055][ T5881] usb 5-1: config 0 interface 217 altsetting 169 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 470.891660][ T5895] usb 3-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 470.979187][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.987803][ T5881] usb 5-1: config 0 interface 217 has no altsetting 0 [ 470.996814][ T5895] usb 3-1: Product: syz [ 471.001173][ T5895] usb 3-1: Manufacturer: syz [ 471.007111][ T5895] usb 3-1: SerialNumber: syz [ 471.020270][ T5881] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 471.030089][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.049355][T11843] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 471.056863][T11843] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 471.079052][ T5881] usb 5-1: Product: syz [ 471.093177][ T5881] usb 5-1: Manufacturer: syz [ 471.101910][ T5881] usb 5-1: SerialNumber: syz [ 471.111673][ T5881] usb 5-1: config 0 descriptor?? [ 471.303972][T11843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.342125][T11857] binder: 11854:11857 ioctl c0306201 200000000100 returned -11 [ 471.350254][T11843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.446319][ T5895] usb 3-1: unknown interface protocol 0x7d, assuming v1 [ 471.466993][ T5895] usb 3-1: 26:2 : does not exist [ 471.508875][ T5895] usb 3-1: unknown interface protocol 0x13, assuming v1 [ 471.548401][ T5895] usb 3-1: 89:2 : does not exist [ 471.610613][ T5895] usb 3-1: USB disconnect, device number 82 [ 471.749811][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 471.850881][T11864] fuse: Bad value for 'fd' [ 471.866413][T11864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1757'. [ 472.313681][ T3569] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 472.334478][T11876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.363016][T11876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.453630][ T3569] usb 4-1: device descriptor read/64, error -71 [ 472.713438][ T3569] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 472.843534][ T3569] usb 4-1: device descriptor read/64, error -71 [ 472.953650][ T3569] usb usb4-port1: attempt power cycle [ 473.403577][ T3569] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 473.444267][ T3569] usb 4-1: device descriptor read/8, error -71 [ 473.711537][ T3569] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 473.767008][ T5881] smsc75xx v1.0.0 [ 473.771198][ T5881] smsc75xx 5-1:0.217 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 473.800768][T11896] sctp: [Deprecated]: syz.1.1767 (pid 11896) Use of int in maxseg socket option. [ 473.800768][T11896] Use struct sctp_assoc_value instead [ 473.837160][T11896] netlink: 'syz.1.1767': attribute type 10 has an invalid length. [ 473.850468][T11896] veth0_vlan: left promiscuous mode [ 473.857860][T11896] veth0_vlan: entered promiscuous mode [ 473.870083][T11896] team0: Device veth0_vlan failed to register rx_handler [ 473.877423][ T5881] smsc75xx 5-1:0.217: probe with driver smsc75xx failed with error -22 [ 473.904926][ T3569] usb 4-1: device descriptor read/8, error -71 [ 473.919963][ T5881] usb 5-1: USB disconnect, device number 77 [ 474.053744][ T3569] usb usb4-port1: unable to enumerate USB device [ 474.303126][T11904] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1770'. [ 474.519686][T11910] fuse: Unknown parameter 'fd0x000000000000000800000000000000000000' [ 474.556953][T11910] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 474.703969][ T5881] usb 5-1: new low-speed USB device number 78 using dummy_hcd [ 474.883091][ T5881] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 474.891476][ T5881] usb 5-1: config 0 has no interface number 0 [ 474.901023][ T5881] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 474.979437][ T5881] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 475.010007][ T5881] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 475.017700][T11919] netlink: 'syz.0.1776': attribute type 1 has an invalid length. [ 475.032364][T11920] netlink: 'syz.0.1776': attribute type 1 has an invalid length. [ 475.040443][ T5881] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 475.089520][T11922] netlink: 'syz.3.1777': attribute type 4 has an invalid length. [ 475.106645][T11922] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1777'. [ 475.144735][ T5881] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 475.178099][T11924] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 475.224426][ T5881] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 475.271775][ T5881] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 475.273546][T11924] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 475.316140][T11924] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 475.339165][T11924] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 475.370459][T11924] bond1: (slave geneve3): making interface the new active one [ 475.379919][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.396242][T11924] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 475.397188][ T5881] usb 5-1: config 0 descriptor?? [ 475.446034][T11909] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 475.453286][T11909] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 475.492967][ T5881] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 475.896627][T11934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.905497][T11934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.946806][T11934] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1772'. [ 475.956241][T11934] netlink: 'syz.4.1772': attribute type 7 has an invalid length. [ 475.964934][T11934] netlink: 'syz.4.1772': attribute type 8 has an invalid length. [ 475.988662][T11934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1772'. [ 476.031689][T11934] bridge0: entered promiscuous mode [ 476.135723][ T5965] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 476.264872][T11934] batadv_slave_1: entered promiscuous mode [ 476.320114][T11934] bridge0: left promiscuous mode [ 476.510153][T11934] batadv_slave_1: left promiscuous mode [ 476.594567][ T5965] usb 4-1: Using ep0 maxpacket: 32 [ 476.678766][ T5965] usb 4-1: config 0 has an invalid interface number: 217 but max is 0 [ 476.707696][ T5965] usb 4-1: config 0 has no interface number 0 [ 476.822394][ T5965] usb 4-1: too many endpoints for config 0 interface 217 altsetting 169: 100, using maximum allowed: 30 [ 476.843402][ T5949] usb 3-1: new low-speed USB device number 83 using dummy_hcd [ 477.191723][ T5965] usb 4-1: config 0 interface 217 altsetting 169 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 477.241802][ T5965] usb 4-1: config 0 interface 217 has no altsetting 0 [ 477.414963][ T5949] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 477.458324][ T5949] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 477.476038][ T5949] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 477.506012][ T5965] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 477.523642][ T5949] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 477.687769][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.788783][ T3569] usb 5-1: USB disconnect, device number 78 [ 477.816930][ T5965] usb 4-1: Product: syz [ 477.821168][ T5949] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 477.843362][ T5965] usb 4-1: Manufacturer: syz [ 477.848926][ T5965] usb 4-1: SerialNumber: syz [ 477.867072][ T5965] usb 4-1: config 0 descriptor?? [ 477.889501][ T5949] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 477.890007][ T3569] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 477.898120][ T5949] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 478.019855][ T5949] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 478.103423][T11933] binder: 11930:11933 ioctl c0306201 200000000100 returned -11 [ 478.199735][ T5949] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 478.250241][ T5949] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 478.359130][ T5949] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 478.366664][ T5949] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 478.383636][ T5949] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 478.392646][T11949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.395750][ T5949] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 478.422226][ T5949] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 478.486191][T11949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.640359][ T5949] usb 3-1: string descriptor 0 read error: -22 [ 478.646861][ T5949] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 478.656839][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.770161][T11960] FAULT_INJECTION: forcing a failure. [ 478.770161][T11960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.787996][ T5949] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 478.796058][T11960] CPU: 0 UID: 0 PID: 11960 Comm: syz.0.1787 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 478.796076][T11960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 478.796083][T11960] Call Trace: [ 478.796088][T11960] [ 478.796093][T11960] dump_stack_lvl+0x189/0x250 [ 478.796112][T11960] ? __pfx____ratelimit+0x10/0x10 [ 478.796126][T11960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.796144][T11960] ? __pfx__printk+0x10/0x10 [ 478.796161][T11960] should_fail_ex+0x414/0x560 [ 478.796177][T11960] _copy_to_user+0x31/0xb0 [ 478.796187][T11960] simple_read_from_buffer+0xe1/0x170 [ 478.796200][T11960] proc_fail_nth_read+0x1df/0x250 [ 478.796214][T11960] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 478.796227][T11960] ? rw_verify_area+0x258/0x650 [ 478.796241][T11960] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 478.796253][T11960] vfs_read+0x200/0x980 [ 478.796270][T11960] ? __pfx___mutex_lock+0x10/0x10 [ 478.796285][T11960] ? __pfx_vfs_read+0x10/0x10 [ 478.796300][T11960] ? __fget_files+0x2a/0x420 [ 478.796315][T11960] ? __fget_files+0x3a0/0x420 [ 478.796325][T11960] ? __fget_files+0x2a/0x420 [ 478.796340][T11960] ksys_read+0x145/0x250 [ 478.796352][T11960] ? __fget_files+0x2a/0x420 [ 478.796364][T11960] ? __pfx_ksys_read+0x10/0x10 [ 478.796381][T11960] ? do_syscall_64+0xbe/0x3b0 [ 478.796399][T11960] do_syscall_64+0xfa/0x3b0 [ 478.796412][T11960] ? lockdep_hardirqs_on+0x9c/0x150 [ 478.796425][T11960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.796435][T11960] ? clear_bhb_loop+0x60/0xb0 [ 478.796447][T11960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.796457][T11960] RIP: 0033:0x7f5ed938d33c [ 478.796467][T11960] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 478.796476][T11960] RSP: 002b:00007f5eda1bb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 478.796487][T11960] RAX: ffffffffffffffda RBX: 00007f5ed95b5fa0 RCX: 00007f5ed938d33c [ 478.796494][T11960] RDX: 000000000000000f RSI: 00007f5eda1bb0a0 RDI: 0000000000000005 [ 478.796501][T11960] RBP: 00007f5eda1bb090 R08: 0000000000000000 R09: 0000000000000000 [ 478.796507][T11960] R10: 0000200000000f80 R11: 0000000000000246 R12: 0000000000000001 [ 478.796513][T11960] R13: 0000000000000000 R14: 00007f5ed95b5fa0 R15: 00007f5ed96dfa28 [ 478.796529][T11960] [ 479.401985][T11943] lo: entered allmulticast mode [ 479.529019][ T3569] usb 3-1: USB disconnect, device number 83 [ 479.843191][T11978] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1792'. [ 479.953395][ T5829] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 480.205119][ T5829] usb 5-1: Using ep0 maxpacket: 16 [ 480.214711][ T5829] usb 5-1: config 0 has an invalid interface number: 145 but max is 0 [ 480.225748][ T5829] usb 5-1: config 0 has no interface number 0 [ 480.237705][ T5829] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 480.252322][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.260767][ T5829] usb 5-1: Product: syz [ 480.265374][ T5829] usb 5-1: Manufacturer: syz [ 480.270044][ T5829] usb 5-1: SerialNumber: syz [ 480.299757][ T5829] usb 5-1: config 0 descriptor?? [ 480.352994][ T5829] hub 5-1:0.145: bad descriptor, ignoring hub [ 480.373281][ T5829] hub 5-1:0.145: probe with driver hub failed with error -5 [ 480.392013][T11988] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1795'. [ 480.421779][T11988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1795'. [ 480.450743][ T5965] smsc75xx v1.0.0 [ 480.454756][ T5965] smsc75xx 4-1:0.217 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 480.493616][ T5829] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.145/input/input69 [ 480.520116][T11989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.539218][ T5965] smsc75xx 4-1:0.217: probe with driver smsc75xx failed with error -22 [ 480.540786][T11989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.642718][ T5965] usb 4-1: USB disconnect, device number 67 [ 481.628885][T11996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.639316][T11996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.649269][ T5965] IPVS: starting estimator thread 0... [ 481.744151][T11997] IPVS: using max 27 ests per chain, 64800 per kthread [ 482.338084][T12005] usb usb9: usbfs: process 12005 (syz.2.1801) did not claim interface 8 before use [ 482.637204][T12011] syz.2.1803 (12011): drop_caches: 2 [ 482.888015][T12021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.936874][T12021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.064126][T12027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.073062][T12027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.103830][ T5829] usb 5-1: USB disconnect, device number 79 [ 483.125604][T12027] binder: 12023:12027 ioctl c0306201 200000000100 returned -11 [ 483.403385][ T5965] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 483.565393][ T5965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.587915][ T5965] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 483.662707][ T5965] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 483.713499][ T5965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.785834][ T5965] usb 5-1: config 0 descriptor?? [ 483.995080][T12035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.004072][T12035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.441303][ T5965] usbhid 5-1:0.0: can't add hid device: -71 [ 484.452199][ T5965] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 484.489248][ T5965] usb 5-1: USB disconnect, device number 80 [ 485.205174][T12043] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1812'. [ 485.884405][T12051] sctp: [Deprecated]: syz.2.1813 (pid 12051) Use of int in maxseg socket option. [ 485.884405][T12051] Use struct sctp_assoc_value instead [ 485.987309][T12051] netlink: 'syz.2.1813': attribute type 10 has an invalid length. [ 485.998203][T12051] veth0_vlan: left promiscuous mode [ 486.033682][T12051] veth0_vlan: entered promiscuous mode [ 486.183166][T12051] batman_adv: batadv0: Interface activated: vlan1 [ 486.193120][T12051] team0: Device veth0_vlan failed to register rx_handler [ 486.203496][T12051] batman_adv: batadv0: Interface deactivated: vlan1 [ 486.528388][T12057] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1814'. [ 487.337049][T12054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.535746][T12065] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 488.275401][T12073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.290526][T12073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.633444][ T44] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 488.710556][T12081] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[12081] [ 488.827788][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.839156][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 489.149307][ T44] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 489.171385][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.249186][ T5881] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 489.319560][ T44] usb 4-1: config 0 descriptor?? [ 489.420408][T12091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.570681][T12091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.624653][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 489.671477][ T5881] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 489.711109][ T5881] usb 5-1: config 0 has no interface number 0 [ 489.804810][ T5881] usb 5-1: too many endpoints for config 0 interface 217 altsetting 169: 100, using maximum allowed: 30 [ 489.876895][ T5881] usb 5-1: config 0 interface 217 altsetting 169 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 489.919786][ T5881] usb 5-1: config 0 interface 217 has no altsetting 0 [ 489.961363][ T44] usbhid 4-1:0.0: can't add hid device: -71 [ 489.967958][ T44] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 489.986354][ T5881] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 489.986560][ T44] usb 4-1: USB disconnect, device number 68 [ 490.036489][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.076525][ T5881] usb 5-1: Product: syz [ 490.117893][ T5881] usb 5-1: Manufacturer: syz [ 490.143427][ T5881] usb 5-1: SerialNumber: syz [ 490.161667][ T5881] usb 5-1: config 0 descriptor?? [ 490.229894][T12105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.239172][T12105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.535918][T12085] binder: 12082:12085 ioctl c0306201 200000000100 returned -11 [ 490.651313][T12107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.670634][T12107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.888533][T12110] ptrace attach of "./syz-executor exec"[5845] was attempted by "./syz-executor exec"[12110] [ 490.930841][T12113] ptrace attach of "./syz-executor exec"[5845] was attempted by "./syz-executor exec"[12113] [ 491.397639][T12122] fuse: Unknown parameter 'fd0x000000000000000800000000000000000000' [ 491.416426][T12122] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 492.033525][ T3569] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 492.217421][ T3569] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 492.337717][ T3569] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 492.424284][ T3569] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 493.087336][ T3569] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.102919][ T5881] smsc75xx v1.0.0 [ 493.109926][T12124] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 493.120287][ T3569] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 493.191612][ T5881] smsc75xx 5-1:0.217 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 493.302325][ T5881] smsc75xx 5-1:0.217: probe with driver smsc75xx failed with error -22 [ 493.385521][ T5881] usb 5-1: USB disconnect, device number 81 [ 493.538450][T12124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.547346][T12124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.597559][T12136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.708440][T12136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.778742][ T5881] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 493.944596][ T5881] usb 5-1: Using ep0 maxpacket: 16 [ 493.954977][ T5881] usb 5-1: config 0 has an invalid interface number: 68 but max is 0 [ 493.967817][ T5881] usb 5-1: config 0 has no interface number 0 [ 493.993183][ T5881] usb 5-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.020214][ T5881] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 494.029839][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.039017][ T5881] usb 5-1: Product: syz [ 494.044056][ T5881] usb 5-1: Manufacturer: syz [ 494.048812][ T5881] usb 5-1: SerialNumber: syz [ 494.070363][ T5881] usb 5-1: config 0 descriptor?? [ 494.086034][ T3569] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 494.129725][ T5881] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 494.270496][ T3569] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.288500][T12134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.300908][T12134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.311354][ T4548] usb 5-1: Failed to submit usb control message: -71 [ 494.318450][ T5949] usb 5-1: USB disconnect, device number 82 [ 494.334507][ T4548] usb 5-1: unable to send the bmi data to the device: -71 [ 494.344458][ T4548] usb 5-1: unable to get target info from device [ 494.351491][ T3569] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.351921][ T4548] usb 5-1: could not get target info (-71) [ 494.477032][ T3569] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 494.492673][ T4548] usb 5-1: could not probe fw (-71) [ 494.493928][ T3569] usb 3-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 494.520575][ T3569] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.561218][ T3569] usb 3-1: config 0 descriptor?? [ 494.601779][T12148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.624880][T12148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.978547][ T3569] thrustmaster 0003:044F:B65A.000D: nested delimiters [ 494.989539][ T3569] thrustmaster 0003:044F:B65A.000D: item 0 2 2 10 parsing failed [ 495.018406][ T3569] thrustmaster 0003:044F:B65A.000D: parse failed [ 495.057159][ T3569] thrustmaster 0003:044F:B65A.000D: probe with driver thrustmaster failed with error -22 [ 495.072479][ T5881] usb 4-1: USB disconnect, device number 69 [ 495.364109][T12162] PM: Enabling pm_trace changes system date and time during resume. [ 495.364109][T12162] PM: Correct system time has to be restored manually after resume. [ 495.424347][T12165] FAULT_INJECTION: forcing a failure. [ 495.424347][T12165] name failslab, interval 1, probability 0, space 0, times 0 [ 495.437650][T12165] CPU: 0 UID: 0 PID: 12165 Comm: syz.3.1849 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 495.437675][T12165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 495.437687][T12165] Call Trace: [ 495.437695][T12165] [ 495.437703][T12165] dump_stack_lvl+0x189/0x250 [ 495.437733][T12165] ? __pfx____ratelimit+0x10/0x10 [ 495.437758][T12165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.437785][T12165] ? __pfx__printk+0x10/0x10 [ 495.437819][T12165] should_fail_ex+0x414/0x560 [ 495.437846][T12165] should_failslab+0xa8/0x100 [ 495.437866][T12165] kmem_cache_alloc_noprof+0x73/0x3c0 [ 495.437892][T12165] ? skb_clone+0x212/0x3a0 [ 495.437918][T12165] skb_clone+0x212/0x3a0 [ 495.437944][T12165] __netlink_deliver_tap+0x404/0x850 [ 495.437976][T12165] ? netlink_deliver_tap+0x2e/0x1b0 [ 495.437997][T12165] netlink_deliver_tap+0x19c/0x1b0 [ 495.438019][T12165] netlink_sendskb+0x68/0x140 [ 495.438047][T12165] netlink_rcv_skb+0x28c/0x470 [ 495.438068][T12165] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 495.438096][T12165] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 495.438127][T12165] ? netlink_deliver_tap+0x2e/0x1b0 [ 495.438146][T12165] ? netlink_deliver_tap+0x2e/0x1b0 [ 495.438169][T12165] netlink_unicast+0x75b/0x8d0 [ 495.438197][T12165] netlink_sendmsg+0x805/0xb30 [ 495.438226][T12165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.438256][T12165] ? aa_sock_msg_perm+0x94/0x160 [ 495.438279][T12165] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 495.438301][T12165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.438322][T12165] __sock_sendmsg+0x219/0x270 [ 495.438350][T12165] ____sys_sendmsg+0x505/0x830 [ 495.438377][T12165] ? __pfx_____sys_sendmsg+0x10/0x10 [ 495.438408][T12165] ? import_iovec+0x74/0xa0 [ 495.438429][T12165] ___sys_sendmsg+0x21f/0x2a0 [ 495.438453][T12165] ? __pfx____sys_sendmsg+0x10/0x10 [ 495.438511][T12165] ? __fget_files+0x2a/0x420 [ 495.438530][T12165] ? __fget_files+0x3a0/0x420 [ 495.438557][T12165] __x64_sys_sendmsg+0x19b/0x260 [ 495.438584][T12165] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 495.438615][T12165] ? __pfx_ksys_write+0x10/0x10 [ 495.438629][T12165] ? rcu_is_watching+0x15/0xb0 [ 495.438658][T12165] ? do_syscall_64+0xbe/0x3b0 [ 495.438687][T12165] do_syscall_64+0xfa/0x3b0 [ 495.438710][T12165] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.438733][T12165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.438750][T12165] ? clear_bhb_loop+0x60/0xb0 [ 495.438770][T12165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.438788][T12165] RIP: 0033:0x7f95ea38e929 [ 495.438806][T12165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.438821][T12165] RSP: 002b:00007f95eb1e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.438841][T12165] RAX: ffffffffffffffda RBX: 00007f95ea5b5fa0 RCX: 00007f95ea38e929 [ 495.438854][T12165] RDX: 0000000020000040 RSI: 0000200000000080 RDI: 0000000000000003 [ 495.438866][T12165] RBP: 00007f95eb1e3090 R08: 0000000000000000 R09: 0000000000000000 [ 495.438877][T12165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.438888][T12165] R13: 0000000000000000 R14: 00007f95ea5b5fa0 R15: 00007f95ea6dfa28 [ 495.438917][T12165] [ 495.845502][T12169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1850'. [ 496.114605][T12175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1850'. [ 496.853049][T12148] ip6gretap0: entered promiscuous mode [ 496.859000][T12148] macsec1: entered promiscuous mode [ 496.864433][T12148] macsec1: entered allmulticast mode [ 496.869737][T12148] ip6gretap0: entered allmulticast mode [ 496.878859][T12148] ip6gretap0: left allmulticast mode [ 496.890812][T12148] ip6gretap0: left promiscuous mode [ 497.100666][ T5881] usb 3-1: USB disconnect, device number 84 [ 497.116028][T12181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.125314][T12181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.165743][T12181] binder: 12176:12181 ioctl c0306201 200000000100 returned -11 [ 498.286196][T12198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.304191][T12198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.733432][ T3569] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 498.954197][T12213] sctp: [Deprecated]: syz.3.1860 (pid 12213) Use of int in maxseg socket option. [ 498.954197][T12213] Use struct sctp_assoc_value instead [ 498.991472][T12213] netlink: 'syz.3.1860': attribute type 10 has an invalid length. [ 499.001751][T12213] veth0_vlan: left promiscuous mode [ 499.013433][T12213] veth0_vlan: entered promiscuous mode [ 499.036076][T12213] team0: Device veth0_vlan failed to register rx_handler [ 499.427003][ T3569] usb 5-1: unable to get BOS descriptor or descriptor too short [ 499.435922][ T3569] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 499.446056][ T3569] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 499.475337][ T3569] usb 5-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 499.567775][ T3569] usb 5-1: config 1 interface 0 has no altsetting 0 [ 499.585316][ T3569] usb 5-1: config 1 interface 0 has no altsetting 1 [ 499.716032][ T3569] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 499.725761][ T3569] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.740456][ T3569] usb 5-1: Product: syz [ 499.763009][ T3569] usb 5-1: Manufacturer: syz [ 499.768867][ T3569] usb 5-1: SerialNumber: syz [ 499.930885][T12226] PKCS7: Unknown OID: [5] (bad) [ 499.935967][T12226] PKCS7: Only support pkcs7_signedData type [ 500.000417][ T3569] smsusb:smsusb_probe: board id=8, interface number 0 [ 500.041025][ T3569] usb 5-1: selecting invalid altsetting 0 [ 500.047467][ T3569] smsusb:smsusb_probe: usb_set_interface failed, rc -22 [ 500.055676][ T3569] smsusb 5-1:1.0: probe with driver smsusb failed with error -22 [ 500.069457][ T3569] usb 5-1: USB disconnect, device number 83 [ 500.263393][ T5829] usb 3-1: new low-speed USB device number 85 using dummy_hcd [ 500.393473][ T5829] usb 3-1: device descriptor read/64, error -71 [ 500.598568][T12234] PKCS7: Unknown OID: [5] (bad) [ 500.604229][T12234] PKCS7: Only support pkcs7_signedData type [ 500.633412][ T5829] usb 3-1: new low-speed USB device number 86 using dummy_hcd [ 500.694152][T12234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.710473][T12234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.774114][ T5829] usb 3-1: device descriptor read/64, error -71 [ 500.884506][ T5829] usb usb3-port1: attempt power cycle [ 501.224492][ T5829] usb 3-1: new low-speed USB device number 87 using dummy_hcd [ 501.287163][ T5829] usb 3-1: device descriptor read/8, error -71 [ 501.528541][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.534930][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.583566][ T5829] usb 3-1: new low-speed USB device number 88 using dummy_hcd [ 501.803201][T12243] sctp: [Deprecated]: syz.1.1868 (pid 12243) Use of int in maxseg socket option. [ 501.803201][T12243] Use struct sctp_assoc_value instead [ 501.834872][ T5829] usb 3-1: device descriptor read/8, error -71 [ 501.863556][T12243] netlink: 'syz.1.1868': attribute type 10 has an invalid length. [ 501.873589][T12243] veth0_vlan: left promiscuous mode [ 501.880540][T12243] veth0_vlan: entered promiscuous mode [ 501.890912][T12243] team0: Device veth0_vlan failed to register rx_handler [ 502.135048][ T5829] usb usb3-port1: unable to enumerate USB device [ 502.733082][ T5829] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 503.005659][ T5829] usb 5-1: Using ep0 maxpacket: 32 [ 503.018194][ T5829] usb 5-1: unable to get BOS descriptor or descriptor too short [ 503.056158][ T5829] usb 5-1: config 3 has an invalid interface number: 151 but max is 0 [ 503.157180][ T5829] usb 5-1: config 3 has no interface number 0 [ 503.197442][ T5829] usb 5-1: New USB device found, idVendor=9710, idProduct=7840, bcdDevice=6b.91 [ 503.206657][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.214887][ T5829] usb 5-1: Product: syz [ 503.219180][ T5829] usb 5-1: Manufacturer: syz [ 503.225857][ T5829] usb 5-1: SerialNumber: syz [ 503.454483][T12252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.463257][T12252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.494786][ T5829] mos7840 5-1:3.151: required endpoints missing [ 503.510331][ T5829] usb 5-1: USB disconnect, device number 84 [ 503.786564][T12268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.805688][T12268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.940390][T12270] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_macvtap, syncid = 2, id = 0 [ 504.023761][ T5965] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 504.185622][ T5965] usb 3-1: Using ep0 maxpacket: 32 [ 504.192976][ T5965] usb 3-1: config 0 has an invalid interface number: 217 but max is 0 [ 504.202820][ T5965] usb 3-1: config 0 has no interface number 0 [ 504.210983][ T5965] usb 3-1: too many endpoints for config 0 interface 217 altsetting 169: 100, using maximum allowed: 30 [ 504.236318][ T5965] usb 3-1: config 0 interface 217 altsetting 169 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 504.301239][ T5965] usb 3-1: config 0 interface 217 has no altsetting 0 [ 504.352033][ T5965] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 504.363194][ T5965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.373438][ T5965] usb 3-1: Product: syz [ 504.378822][ T5965] usb 3-1: Manufacturer: syz [ 504.399739][ T5965] usb 3-1: SerialNumber: syz [ 504.419485][ T5965] usb 3-1: config 0 descriptor?? [ 504.645715][T12263] binder: 12260:12263 ioctl c0306201 200000000100 returned -11 [ 506.329388][T12292] FAULT_INJECTION: forcing a failure. [ 506.329388][T12292] name failslab, interval 1, probability 0, space 0, times 0 [ 506.387746][T12292] CPU: 1 UID: 0 PID: 12292 Comm: syz.1.1884 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 506.387767][T12292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 506.387778][T12292] Call Trace: [ 506.387787][T12292] [ 506.387796][T12292] dump_stack_lvl+0x189/0x250 [ 506.387827][T12292] ? __pfx____ratelimit+0x10/0x10 [ 506.387851][T12292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 506.387866][T12292] ? __pfx__printk+0x10/0x10 [ 506.387885][T12292] should_fail_ex+0x414/0x560 [ 506.387900][T12292] should_failslab+0xa8/0x100 [ 506.387914][T12292] kmem_cache_alloc_noprof+0x73/0x3c0 [ 506.387940][T12292] ? skb_clone+0x212/0x3a0 [ 506.387967][T12292] skb_clone+0x212/0x3a0 [ 506.387992][T12292] __netlink_deliver_tap+0x404/0x850 [ 506.388013][T12292] ? netlink_deliver_tap+0x2e/0x1b0 [ 506.388024][T12292] netlink_deliver_tap+0x19c/0x1b0 [ 506.388035][T12292] netlink_sendskb+0x68/0x140 [ 506.388051][T12292] netlink_rcv_skb+0x28c/0x470 [ 506.388074][T12292] ? __pfx_genl_rcv_msg+0x10/0x10 [ 506.388101][T12292] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 506.388139][T12292] ? down_read+0x1ad/0x2e0 [ 506.388152][T12292] genl_rcv+0x28/0x40 [ 506.388164][T12292] netlink_unicast+0x75b/0x8d0 [ 506.388179][T12292] netlink_sendmsg+0x805/0xb30 [ 506.388195][T12292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.388211][T12292] ? aa_sock_msg_perm+0x94/0x160 [ 506.388234][T12292] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 506.388255][T12292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.388276][T12292] __sock_sendmsg+0x219/0x270 [ 506.388299][T12292] ____sys_sendmsg+0x505/0x830 [ 506.388313][T12292] ? __pfx_____sys_sendmsg+0x10/0x10 [ 506.388332][T12292] ? import_iovec+0x74/0xa0 [ 506.388343][T12292] ___sys_sendmsg+0x21f/0x2a0 [ 506.388359][T12292] ? __pfx____sys_sendmsg+0x10/0x10 [ 506.388419][T12292] ? __fget_files+0x2a/0x420 [ 506.388437][T12292] ? __fget_files+0x3a0/0x420 [ 506.388455][T12292] __x64_sys_sendmsg+0x19b/0x260 [ 506.388467][T12292] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 506.388484][T12292] ? __pfx_ksys_write+0x10/0x10 [ 506.388491][T12292] ? rcu_is_watching+0x15/0xb0 [ 506.388517][T12292] ? do_syscall_64+0xbe/0x3b0 [ 506.388546][T12292] do_syscall_64+0xfa/0x3b0 [ 506.388568][T12292] ? lockdep_hardirqs_on+0x9c/0x150 [ 506.388589][T12292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.388599][T12292] ? clear_bhb_loop+0x60/0xb0 [ 506.388610][T12292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.388620][T12292] RIP: 0033:0x7f588578e929 [ 506.388629][T12292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.388638][T12292] RSP: 002b:00007f588656d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 506.388651][T12292] RAX: ffffffffffffffda RBX: 00007f58859b5fa0 RCX: 00007f588578e929 [ 506.388665][T12292] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 0000000000000003 [ 506.388677][T12292] RBP: 00007f588656d090 R08: 0000000000000000 R09: 0000000000000000 [ 506.388689][T12292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.388700][T12292] R13: 0000000000000000 R14: 00007f58859b5fa0 R15: 00007f5885adfa28 [ 506.388730][T12292] [ 506.788993][T12296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.871039][T12296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.996097][T12298] ptrace attach of "./syz-executor exec"[5840] was attempted by "./syz-executor exec"[12298] [ 507.048355][ T5965] smsc75xx v1.0.0 [ 507.051999][ T5965] smsc75xx 3-1:0.217 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 507.129323][ T5965] smsc75xx 3-1:0.217: probe with driver smsc75xx failed with error -22 [ 507.316540][ T5965] usb 3-1: USB disconnect, device number 89 [ 507.530480][T12306] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1889'. [ 507.572302][T12306] IPv6: sit1: Disabled Multicast RS [ 507.594493][T12306] sit1: entered allmulticast mode [ 507.954783][T12313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.963991][T12313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.993613][ T3569] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 508.199991][ T3569] usb 3-1: Using ep0 maxpacket: 32 [ 508.236123][T12315] ptrace attach of "./syz-executor exec"[5845] was attempted by "./syz-executor exec"[12315] [ 508.302780][ T3569] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.390254][ T3569] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.453954][ T3569] usb 3-1: New USB device found, idVendor=0c45, idProduct=762b, bcdDevice= 0.00 [ 508.463029][ T3569] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.548717][ T3569] usb 3-1: config 0 descriptor?? [ 508.819078][T12309] IPVS: Unknown mcast interface: veth0_macvtap [ 508.830925][T12324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.849276][T12324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.891614][ T3569] usbhid 3-1:0.0: can't add hid device: -71 [ 508.935711][ T3569] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 508.944725][ T44] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 509.096529][ T3569] usb 3-1: USB disconnect, device number 90 [ 509.125620][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.136653][ T44] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 509.162692][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.228278][ T44] usb 5-1: config 0 descriptor?? [ 509.541454][ T44] usbhid 5-1:0.0: can't add hid device: -71 [ 509.566842][ T44] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 509.578700][ T44] usb 5-1: USB disconnect, device number 85 [ 509.699607][T12333] fuse: Unknown parameter 'fd0x000000000000000800000000000000000000' [ 509.871556][T12333] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 509.903753][ T3569] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 510.063479][ T44] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 510.107088][ T3569] usb 4-1: Using ep0 maxpacket: 32 [ 510.117004][ T3569] usb 4-1: config 0 has an invalid interface number: 217 but max is 0 [ 510.126553][ T3569] usb 4-1: config 0 has no interface number 0 [ 510.132635][ T3569] usb 4-1: too many endpoints for config 0 interface 217 altsetting 169: 100, using maximum allowed: 30 [ 510.156579][ T3569] usb 4-1: config 0 interface 217 altsetting 169 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 510.178893][ T3569] usb 4-1: config 0 interface 217 has no altsetting 0 [ 510.208542][ T3569] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 510.228745][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 510.258260][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.271380][ T3569] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.281215][ T44] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 510.292307][ T3569] usb 4-1: Product: syz [ 510.297687][ T3569] usb 4-1: Manufacturer: syz [ 510.302503][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.314198][ T3569] usb 4-1: SerialNumber: syz [ 510.325691][ T3569] usb 4-1: config 0 descriptor?? [ 510.339852][ T44] usb 5-1: config 0 descriptor?? [ 510.990770][T12331] binder: 12328:12331 ioctl c0306201 200000000100 returned -11 [ 510.992775][ T44] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 511.059430][ C1] ================================================================== [ 511.067532][ C1] BUG: KASAN: slab-out-of-bounds in mcp2221_raw_event+0xfcd/0x1190 [ 511.075466][ C1] Read of size 1 at addr ffff8880319e7fff by task syz.4.1893/12321 [ 511.083372][ C1] [ 511.085690][ C1] CPU: 1 UID: 0 PID: 12321 Comm: syz.4.1893 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 511.085707][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 511.085715][ C1] Call Trace: [ 511.085721][ C1] [ 511.085726][ C1] dump_stack_lvl+0x189/0x250 [ 511.085747][ C1] ? rcu_is_watching+0x15/0xb0 [ 511.085765][ C1] ? __kasan_check_byte+0x12/0x40 [ 511.085778][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 511.085795][ C1] ? rcu_is_watching+0x15/0xb0 [ 511.085812][ C1] ? lock_release+0x4b/0x3e0 [ 511.085828][ C1] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 511.085843][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 511.085854][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 511.085866][ C1] print_report+0xd2/0x2b0 [ 511.085881][ C1] ? mcp2221_raw_event+0xfcd/0x1190 [ 511.085892][ C1] kasan_report+0x118/0x150 [ 511.085904][ C1] ? mcp2221_raw_event+0xfcd/0x1190 [ 511.085917][ C1] mcp2221_raw_event+0xfcd/0x1190 [ 511.085938][ C1] ? down_trylock+0x50/0xb0 [ 511.085949][ C1] hid_input_report+0x40a/0x520 [ 511.085966][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 511.085979][ C1] hid_irq_in+0x47e/0x6d0 [ 511.085993][ C1] __usb_hcd_giveback_urb+0x417/0x690 [ 511.086005][ C1] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 511.086017][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 511.086030][ C1] ? usb_hcd_giveback_urb+0x10e/0x420 [ 511.086042][ C1] dummy_timer+0x862/0x4550 [ 511.086067][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 511.086079][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 511.086089][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 511.086100][ C1] __hrtimer_run_queues+0x529/0xc60 [ 511.086121][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 511.086137][ C1] ? read_tsc+0x9/0x20 [ 511.086151][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 511.086169][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 511.086180][ C1] handle_softirqs+0x286/0x870 [ 511.086197][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 511.086214][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 511.086231][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 511.086246][ C1] __irq_exit_rcu+0xca/0x1f0 [ 511.086261][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 511.086279][ C1] irq_exit_rcu+0x9/0x30 [ 511.086294][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 511.086311][ C1] [ 511.086315][ C1] [ 511.086319][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 511.086332][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 511.086350][ C1] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 aa ac 34 f6 48 89 df e8 02 44 35 f6 e8 8d 54 5e f6 fb bf 01 00 00 00 32 3e 27 f6 65 8b 05 1b 7a 33 07 85 c0 74 07 5b e9 81 4c 00 00 [ 511.086368][ C1] RSP: 0018:ffffc90003f1f890 EFLAGS: 00000286 [ 511.086388][ C1] RAX: 6f5022550c347200 RBX: ffffc90003f1faa8 RCX: 6f5022550c347200 [ 511.086406][ C1] RDX: 0000000000000000 RSI: ffffffff8d982071 RDI: 0000000000000001 [ 511.086420][ C1] RBP: ffffc90003f1fa08 R08: ffffffff8fa104f7 R09: 1ffffffff1f4209e [ 511.086438][ C1] R10: dffffc0000000000 R11: fffffbfff1f4209f R12: dffffc0000000000 [ 511.086456][ C1] R13: 0000000000000001 R14: 7fffffffffffffff R15: ffffc90003f1faa0 [ 511.086480][ C1] __wait_for_common+0x613/0x710 [ 511.086514][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 511.086552][ C1] ? dummy_queue+0x573/0x8e0 [ 511.086585][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 511.086610][ C1] ? __pfx___wait_for_common+0x10/0x10 [ 511.086649][ C1] wait_for_completion_interruptible+0x1f/0x40 [ 511.086681][ C1] raw_process_ep_io+0x5bb/0xbc0 [ 511.086709][ C1] ? __pfx_raw_process_ep_io+0x10/0x10 [ 511.086739][ C1] ? _copy_from_user+0x94/0xb0 [ 511.086762][ C1] raw_ioctl+0x23d1/0x3c90 [ 511.086785][ C1] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 511.086813][ C1] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 511.086839][ C1] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 511.086862][ C1] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 511.086886][ C1] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 511.086910][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 511.086946][ C1] ? __pfx_raw_ioctl+0x10/0x10 [ 511.086969][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 511.087002][ C1] ? __lock_acquire+0xab9/0xd20 [ 511.087043][ C1] ? __fget_files+0x2a/0x420 [ 511.087070][ C1] ? __fget_files+0x2a/0x420 [ 511.087093][ C1] ? __fget_files+0x3a0/0x420 [ 511.087117][ C1] ? __fget_files+0x2a/0x420 [ 511.087142][ C1] ? bpf_lsm_file_ioctl+0x9/0x20 [ 511.087174][ C1] ? __pfx_raw_ioctl+0x10/0x10 [ 511.087194][ C1] __se_sys_ioctl+0xfc/0x170 [ 511.087227][ C1] do_syscall_64+0xfa/0x3b0 [ 511.087261][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.087283][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 511.087308][ C1] ? clear_bhb_loop+0x60/0xb0 [ 511.087333][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.087356][ C1] RIP: 0033:0x7f226b18e52b [ 511.087376][ C1] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 511.087397][ C1] RSP: 002b:00007f226c02cf70 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 511.087421][ C1] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f226b18e52b [ 511.087439][ C1] RDX: 00007f226c02cff0 RSI: 0000000040085507 RDI: 0000000000000007 [ 511.087454][ C1] RBP: 0000000000000007 R08: 00007f226b4e0320 R09: 0000000000000000 [ 511.087470][ C1] R10: 0000000000000007 R11: 0000000000000246 R12: 0000200000000040 [ 511.087483][ C1] R13: 0000000000000000 R14: 00007f226b3b5fa0 R15: 00007f226b4dfa28 [ 511.087506][ C1] [ 511.087513][ C1] [ 511.631302][ C1] Allocated by task 12182: [ 511.635709][ C1] kasan_save_track+0x3e/0x80 [ 511.640390][ C1] __kasan_slab_alloc+0x6c/0x80 [ 511.645232][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 511.650691][ C1] skb_clone+0x212/0x3a0 [ 511.654928][ C1] __skb_tstamp_tx+0x56f/0xf20 [ 511.659684][ C1] __dev_queue_xmit+0x1f55/0x3a70 [ 511.664708][ C1] ip_finish_output2+0xd03/0x1160 [ 511.669732][ C1] ip_send_skb+0x74/0x100 [ 511.674058][ C1] udp_send_skb+0xaf1/0x14c0 [ 511.678651][ C1] udp_sendmsg+0x195b/0x2300 [ 511.683240][ C1] __sock_sendmsg+0x19c/0x270 [ 511.687915][ C1] ____sys_sendmsg+0x52d/0x830 [ 511.692670][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 511.697340][ C1] __sys_sendmmsg+0x227/0x430 [ 511.702008][ C1] __x64_sys_sendmmsg+0xa0/0xc0 [ 511.706855][ C1] do_syscall_64+0xfa/0x3b0 [ 511.711361][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.717251][ C1] [ 511.719562][ C1] Freed by task 12182: [ 511.723615][ C1] kasan_save_track+0x3e/0x80 [ 511.728294][ C1] kasan_save_free_info+0x46/0x50 [ 511.733319][ C1] __kasan_slab_free+0x62/0x70 [ 511.738077][ C1] kmem_cache_free+0x18f/0x400 [ 511.742830][ C1] __dev_queue_xmit+0x1f55/0x3a70 [ 511.747852][ C1] ip_finish_output2+0xd03/0x1160 [ 511.752889][ C1] ip_send_skb+0x74/0x100 [ 511.757214][ C1] udp_send_skb+0xaf1/0x14c0 [ 511.761805][ C1] udp_sendmsg+0x195b/0x2300 [ 511.766399][ C1] __sock_sendmsg+0x19c/0x270 [ 511.771075][ C1] ____sys_sendmsg+0x52d/0x830 [ 511.775838][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 511.780511][ C1] __sys_sendmmsg+0x227/0x430 [ 511.785179][ C1] __x64_sys_sendmmsg+0xa0/0xc0 [ 511.790020][ C1] do_syscall_64+0xfa/0x3b0 [ 511.794525][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.800408][ C1] [ 511.802719][ C1] The buggy address belongs to the object at ffff8880319e7dc0 [ 511.802719][ C1] which belongs to the cache skbuff_head_cache of size 240 [ 511.817284][ C1] The buggy address is located 335 bytes to the right of [ 511.817284][ C1] allocated 240-byte region [ffff8880319e7dc0, ffff8880319e7eb0) [ 511.831940][ C1] [ 511.834258][ C1] The buggy address belongs to the physical page: [ 511.840661][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x319e7 [ 511.849412][ C1] memcg:ffff88805a11a201 [ 511.853639][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 511.860743][ C1] page_type: f5(slab) [ 511.864718][ C1] raw: 00fff00000000000 ffff88801eabaa00 ffffea0001d7f4c0 dead000000000004 [ 511.873292][ C1] raw: 0000000000000000 00000000000c000c 00000000f5000000 ffff88805a11a201 [ 511.881868][ C1] page dumped because: kasan: bad access detected [ 511.888272][ C1] page_owner tracks the page as allocated [ 511.893973][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 11362, tgid 11358 (syz.3.1621), ts 435112087359, free_ts 433575225426 [ 511.913416][ C1] post_alloc_hook+0x240/0x2a0 [ 511.918172][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 511.923716][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 511.929515][ C1] alloc_pages_mpol+0x232/0x4a0 [ 511.934355][ C1] allocate_slab+0x8a/0x3b0 [ 511.938860][ C1] ___slab_alloc+0xbfc/0x1480 [ 511.943540][ C1] kmem_cache_alloc_node_noprof+0x280/0x3c0 [ 511.949433][ C1] __alloc_skb+0x112/0x2d0 [ 511.953842][ C1] pfkey_send_acquire+0x606/0x2cb0 [ 511.958960][ C1] km_query+0x11c/0x210 [ 511.963114][ C1] xfrm_state_find+0x3c07/0x5450 [ 511.968054][ C1] xfrm_resolve_and_create_bundle+0x768/0x2f90 [ 511.974199][ C1] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 511.979563][ C1] xfrm_lookup_route+0x3c/0x1c0 [ 511.984404][ C1] udp_sendmsg+0x1405/0x2300 [ 511.988996][ C1] __sock_sendmsg+0x19c/0x270 [ 511.993674][ C1] page last free pid 5829 tgid 5829 stack trace: [ 511.999984][ C1] __free_frozen_pages+0xc71/0xe70 [ 512.005087][ C1] kasan_depopulate_vmalloc_pte+0x74/0xa0 [ 512.010807][ C1] __apply_to_page_range+0xb8f/0x1380 [ 512.016182][ C1] kasan_release_vmalloc+0xa2/0xd0 [ 512.021293][ C1] purge_vmap_node+0x214/0x8f0 [ 512.026051][ C1] __purge_vmap_area_lazy+0x7a4/0xb40 [ 512.031417][ C1] drain_vmap_area_work+0x27/0x40 [ 512.036438][ C1] process_scheduled_works+0xae1/0x17b0 [ 512.041985][ C1] worker_thread+0x8a0/0xda0 [ 512.046578][ C1] kthread+0x70e/0x8a0 [ 512.050643][ C1] ret_from_fork+0x3fc/0x770 [ 512.055234][ C1] ret_from_fork_asm+0x1a/0x30 [ 512.059994][ C1] [ 512.062309][ C1] Memory state around the buggy address: [ 512.067931][ C1] ffff8880319e7e80: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 512.075985][ C1] ffff8880319e7f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 512.084039][ C1] >ffff8880319e7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 512.092086][ C1] ^ [ 512.100068][ C1] ffff8880319e8000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.108133][ C1] ffff8880319e8080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 512.116210][ C1] ================================================================== [ 512.124295][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 512.131494][ C1] CPU: 1 UID: 0 PID: 12321 Comm: syz.4.1893 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 512.143561][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 512.153637][ C1] Call Trace: [ 512.156918][ C1] [ 512.159758][ C1] dump_stack_lvl+0x99/0x250 [ 512.164363][ C1] ? __asan_memcpy+0x40/0x70 [ 512.168959][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 512.174164][ C1] ? __pfx__printk+0x10/0x10 [ 512.178756][ C1] panic+0x2db/0x790 [ 512.182662][ C1] ? __pfx_panic+0x10/0x10 [ 512.187087][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 512.192288][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 512.198189][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 512.204523][ C1] ? mcp2221_raw_event+0xfcd/0x1190 [ 512.209724][ C1] check_panic_on_warn+0x89/0xb0 [ 512.214666][ C1] ? mcp2221_raw_event+0xfcd/0x1190 [ 512.219865][ C1] end_report+0x78/0x160 [ 512.224193][ C1] kasan_report+0x129/0x150 [ 512.228694][ C1] ? mcp2221_raw_event+0xfcd/0x1190 [ 512.233893][ C1] mcp2221_raw_event+0xfcd/0x1190 [ 512.238917][ C1] ? down_trylock+0x50/0xb0 [ 512.243423][ C1] hid_input_report+0x40a/0x520 [ 512.248296][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 512.253763][ C1] hid_irq_in+0x47e/0x6d0 [ 512.258091][ C1] __usb_hcd_giveback_urb+0x417/0x690 [ 512.263464][ C1] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 512.269279][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 512.275170][ C1] ? usb_hcd_giveback_urb+0x10e/0x420 [ 512.280539][ C1] dummy_timer+0x862/0x4550 [ 512.285062][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 512.289997][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 512.294934][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 512.299865][ C1] __hrtimer_run_queues+0x529/0xc60 [ 512.305077][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 512.310800][ C1] ? read_tsc+0x9/0x20 [ 512.314876][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 512.320688][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 512.325796][ C1] handle_softirqs+0x286/0x870 [ 512.330570][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 512.335338][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 512.340628][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 512.345831][ C1] __irq_exit_rcu+0xca/0x1f0 [ 512.350426][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 512.355635][ C1] irq_exit_rcu+0x9/0x30 [ 512.359880][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 512.365519][ C1] [ 512.368447][ C1] [ 512.371371][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 512.377349][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 512.383179][ C1] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 aa ac 34 f6 48 89 df e8 02 44 35 f6 e8 8d 54 5e f6 fb bf 01 00 00 00 32 3e 27 f6 65 8b 05 1b 7a 33 07 85 c0 74 07 5b e9 81 4c 00 00 [ 512.402802][ C1] RSP: 0018:ffffc90003f1f890 EFLAGS: 00000286 [ 512.408889][ C1] RAX: 6f5022550c347200 RBX: ffffc90003f1faa8 RCX: 6f5022550c347200 [ 512.416874][ C1] RDX: 0000000000000000 RSI: ffffffff8d982071 RDI: 0000000000000001 [ 512.424850][ C1] RBP: ffffc90003f1fa08 R08: ffffffff8fa104f7 R09: 1ffffffff1f4209e [ 512.432918][ C1] R10: dffffc0000000000 R11: fffffbfff1f4209f R12: dffffc0000000000 [ 512.440897][ C1] R13: 0000000000000001 R14: 7fffffffffffffff R15: ffffc90003f1faa0 [ 512.448878][ C1] __wait_for_common+0x613/0x710 [ 512.453836][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 512.460175][ C1] ? dummy_queue+0x573/0x8e0 [ 512.464772][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 512.470155][ C1] ? __pfx___wait_for_common+0x10/0x10 [ 512.475625][ C1] wait_for_completion_interruptible+0x1f/0x40 [ 512.481788][ C1] raw_process_ep_io+0x5bb/0xbc0 [ 512.486748][ C1] ? __pfx_raw_process_ep_io+0x10/0x10 [ 512.492224][ C1] ? _copy_from_user+0x94/0xb0 [ 512.497001][ C1] raw_ioctl+0x23d1/0x3c90 [ 512.501420][ C1] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 512.507070][ C1] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 512.512717][ C1] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 512.518351][ C1] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 512.523984][ C1] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 512.529960][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 512.535165][ C1] ? __pfx_raw_ioctl+0x10/0x10 [ 512.539930][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 512.545830][ C1] ? __lock_acquire+0xab9/0xd20 [ 512.550697][ C1] ? __fget_files+0x2a/0x420 [ 512.555292][ C1] ? __fget_files+0x2a/0x420 [ 512.559905][ C1] ? __fget_files+0x3a0/0x420 [ 512.564595][ C1] ? __fget_files+0x2a/0x420 [ 512.569188][ C1] ? bpf_lsm_file_ioctl+0x9/0x20 [ 512.574129][ C1] ? __pfx_raw_ioctl+0x10/0x10 [ 512.578890][ C1] __se_sys_ioctl+0xfc/0x170 [ 512.583485][ C1] do_syscall_64+0xfa/0x3b0 [ 512.587998][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.594067][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 512.600216][ C1] ? clear_bhb_loop+0x60/0xb0 [ 512.604893][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.610785][ C1] RIP: 0033:0x7f226b18e52b [ 512.615199][ C1] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 512.634807][ C1] RSP: 002b:00007f226c02cf70 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 512.643222][ C1] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f226b18e52b [ 512.651192][ C1] RDX: 00007f226c02cff0 RSI: 0000000040085507 RDI: 0000000000000007 [ 512.659164][ C1] RBP: 0000000000000007 R08: 00007f226b4e0320 R09: 0000000000000000 [ 512.667143][ C1] R10: 0000000000000007 R11: 0000000000000246 R12: 0000200000000040 [ 512.675118][ C1] R13: 0000000000000000 R14: 00007f226b3b5fa0 R15: 00007f226b4dfa28 [ 512.683093][ C1] [ 512.686328][ C1] Kernel Offset: disabled [ 512.690647][ C1] Rebooting in 86400 seconds..