last executing test programs: 2m8.686226148s ago: executing program 2 (id=4850): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0xc, 0x0, 0x0, &(0x7f0000000fc0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000700000035da084f"], 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001380)={{0x12, 0x1, 0xe38693bc18896dfd, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0xd0, 0x1, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x2, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x7bf, 0x6, 0x6, 0x1}}}}}]}}]}}, &(0x7f00000018c0)={0x0, 0x0, 0x5, &(0x7f0000001400)=ANY=[@ANYBLOB="c5a8076300"]}) r2 = syz_usb_connect(0x3, 0x64, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000300)={0x7, 0xeeee0000, 0x0, r3}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f00000001c0)={0x1ff, 0x1c0, 0x100, 0x0}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x8000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m5.560450755s ago: executing program 2 (id=4859): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4138ae84, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4050) recvmsg$unix(r1, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0xb00, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x0, 0x3}}}}}, 0x0) 2m5.291035957s ago: executing program 2 (id=4862): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000240)={0x2, &(0x7f0000000140)=[{0x48, 0x0, 0x0, 0x6}, {0x6, 0x1, 0xfb, 0x2}]}) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) write(r0, &(0x7f0000000080)="3aa0", 0x2) 2m5.0104819s ago: executing program 2 (id=4866): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x108) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000400)=0xffffffff) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x401, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x70, r3, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x4000012) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') 2m4.952936175s ago: executing program 2 (id=4867): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x6, {{0x2, 0x4e23, @multicast2}}}, 0x88) r1 = socket$alg(0x26, 0x5, 0x0) r2 = landlock_create_ruleset(&(0x7f0000006f80)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000240)={0x230, r1}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000140), 0x5, 0x220000) bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x3}]}}}]}, 0x3c}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000004c0)={0x7, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e20, @empty}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @local}}}, 0x108) 2m4.57172015s ago: executing program 2 (id=4868): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0xc, 0x0, 0x0, &(0x7f0000000fc0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000700000035da084f"], 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001380)={{0x12, 0x1, 0xe38693bc18896dfd, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0xd0, 0x1, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x2, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x7bf, 0x6, 0x6, 0x1}}}}}]}}]}}, &(0x7f00000018c0)={0x0, 0x0, 0x5, &(0x7f0000001400)=ANY=[@ANYBLOB="c5a8076300"]}) r2 = syz_usb_connect(0x3, 0x64, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000300)={0x7, 0xeeee0000, 0x0, r3}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f00000001c0)={0x1ff, 0x1c0, 0x100, 0x0}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m3.88418944s ago: executing program 32 (id=4868): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0xc, 0x0, 0x0, &(0x7f0000000fc0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000700000035da084f"], 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001380)={{0x12, 0x1, 0xe38693bc18896dfd, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0xd0, 0x1, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x2, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x7bf, 0x6, 0x6, 0x1}}}}}]}}]}}, &(0x7f00000018c0)={0x0, 0x0, 0x5, &(0x7f0000001400)=ANY=[@ANYBLOB="c5a8076300"]}) r2 = syz_usb_connect(0x3, 0x64, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000300)={0x7, 0xeeee0000, 0x0, r3}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f00000001c0)={0x1ff, 0x1c0, 0x100, 0x0}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 12.03481989s ago: executing program 5 (id=5349): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x8}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000001c0)=""/99) r3 = socket$inet6(0xa, 0x3, 0x87) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume_offset', 0xa102, 0x60) ioctl$FBIOGET_FSCREENINFO(r4, 0x4602, &(0x7f00000004c0)) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x1, 0x32}, 0x2, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) syz_emit_ethernet(0x8a, &(0x7f0000000780)=ANY=[@ANYBLOB="195df410dc2400060000000086dd60aac4e000542c00fe8000000000000000000000000000654d8000000000000000000000000000aa2b0000000000000004000206000000000420880b0000000000000800000086dd080088be0000000010eb0200000020ff0000021b00000000000000000000080065580000000000000000000000000000000000003d500cd74bab00e02e67135891f1e7e92ffb5052e47fa2118d57d10e0314ee57f9a9ba38d9f2a41dab8786ca5e3f72849cc258ebcd0e477048b5c3deea17ed2ef94bf8b176a3820dad0c"], 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010029bd09000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x40) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r5) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x14, r6, 0x1, 0xfffffffd, 0x25dfdbff}, 0x14}}, 0x90) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x57, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="180000e6852542cbddb6576904306b6600", @ANYRES16, @ANYBLOB="040026bd7000fedbdf25000000000800090003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008095) 8.982908966s ago: executing program 5 (id=5365): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2005}}, 0x24) listen(r0, 0x0) listen(r0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) 8.12295606s ago: executing program 3 (id=5374): connect$tipc(0xffffffffffffffff, &(0x7f0000003100)=@id, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b000007df0010c7018d2942", @ANYRES32=0x1, @ANYRES8=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x50) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = getpid() r4 = syz_open_procfs(r3, &(0x7f0000000080)='net/ip_tables_names\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) writev(r5, &(0x7f00000014c0)=[{&(0x7f0000000200)="561700", 0x3}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000000000000000000000dc03000000000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffff7f000000000300"/28], 0x50) write$binfmt_aout(r5, &(0x7f0000000880)={{0xcc, 0x9c, 0x9, 0x1ab, 0xbb, 0x6, 0x353, 0x6fc}, "62c4e83f0fa8a048cb39c262f37c5a4e0a30d412f2295676023752c4cc6ba46ea49a6017c18c1feeeaac1d814c2899c540e1883555b399dd482a42a0710da6157e52f3127f794fd7bdffc32a152a552128c30781c0065cfc4895ca560a6780e168506088783571b8005e84098ab5802a29452ce8c4d2efc34a84ee00465ba532836602c50f57d1cbcd08cd6fddf9fd10edbf7a97e03f306e503e2d16ec574a215ed934a468fa84b7f192147a8d5455025fbe41", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9d3) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{}, 0x0, &(0x7f0000000640)='%+9llu \x00'}, 0x1c) pipe2$watch_queue(&(0x7f00000006c0), 0x80) write$sysctl(r2, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x640}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4000}) 7.314790395s ago: executing program 5 (id=5376): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x8}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000001c0)=""/99) r3 = socket$inet6(0xa, 0x3, 0x87) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume_offset', 0xa102, 0x60) ioctl$FBIOGET_FSCREENINFO(r4, 0x4602, &(0x7f00000004c0)) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x1, 0x32}, 0x2, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) syz_emit_ethernet(0x8a, &(0x7f0000000780)=ANY=[@ANYBLOB="195df410dc2400060000000086dd60aac4e000542c00fe8000000000000000000000000000654d8000000000000000000000000000aa2b0000000000000004000206000000000420880b0000000000000800000086dd080088be0000000010eb0200000020ff0000021b00000000000000000000080065580000000000000000000000000000000000003d500cd74bab00e02e67135891f1e7e92ffb5052e47fa2118d57d10e0314ee57f9a9ba38d9f2a41dab8786ca5e3f72849cc258ebcd0e477048b5c3deea17ed2ef94bf8b176a3820dad0c"], 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010029bd09000000000000000000", @ANYRES32=0x0, @ANYBLOB="4cf2040000000000140003006e657464657673696d300000000000001c00"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x40) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r5) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x14, r6, 0x1, 0xfffffffd, 0x25dfdbff}, 0x14}}, 0x90) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x57, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="180000e6852542cbddb6576904306b6600", @ANYRES16, @ANYBLOB="040026bd7000fedbdf25000000000800090003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008095) 6.96605152s ago: executing program 3 (id=5378): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x0) recvmsg(r0, &(0x7f0000000740)={&(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f00000001c0)=""/72, 0x48}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000280)=""/174, 0xae}, {&(0x7f0000000340)=""/133, 0x85}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/1, 0x1}, {&(0x7f0000000480)=""/234, 0xea}, {&(0x7f0000000580)=""/232, 0xe8}], 0x9}, 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000780)={0x0, r0, 0x1}) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x0, 0x1, 0x202, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}]}, 0x30}}, 0x840) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f00000008c0)={0x11, 0xd, r1, 0x1, 0x5, 0x6, @broadcast}, 0x14) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000980)={'ip6_vti0\x00', r1, 0x29, 0x1, 0x3, 0x8001, 0x40, @private2, @mcast2, 0x20, 0x7800, 0x40000000, 0x6}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000bc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a40)={0x118, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x40}, 0x48014) syz_genetlink_get_family_id$wireguard(&(0x7f0000000c00), r2) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c80)={0xf4, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20004080}, 0x80001) ioctl$int_out(r2, 0x4, &(0x7f0000000e00)) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) fstat(0xffffffffffffffff, &(0x7f0000000ec0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000000f80)={{{0xc, 0x1}}, 0x31, 0x6, &(0x7f0000000f40)="4eef88509c3c370bf5bc73116967f8fd67210d29b76eb2b477931599f0ab7da605a1c3615e4a441d189e20553042b50966"}) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000fc0), 0xa4080) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001040), r6) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000001280)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001240)={&(0x7f0000001080)={0x194, r8, 0x400, 0x70bd26, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x194}, 0x1, 0x0, 0x0, 0x80}, 0x2041) sendmsg$nl_route(r2, &(0x7f00000013c0)={&(0x7f00000012c0), 0xc, &(0x7f0000001380)={&(0x7f0000001300)=@RTM_GETNSID={0x44, 0x5a, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NETNSA_FD={0x8, 0x3, r7}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_NSID={0x8}, @NETNSA_FD={0x8, 0x3, r7}, @NETNSA_FD={0x8, 0x3, r7}, @NETNSA_NSID={0x8, 0x1, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x48844}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2e) ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r7) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x18, r9, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48080}, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000001580), r2) sendmsg$TIPC_CMD_SET_NODE_ADDR(r10, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x24, r11, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x3}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x8084) r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000016c0), r7) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x2c, r12, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x87ba}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) keyctl$revoke(0x3, 0x0) 6.066863484s ago: executing program 4 (id=5380): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="b400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000840012800c0001006d6163766c616e0074000280340005800a000400aaaaaaaaaaaa00000a"], 0xb4}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x84, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r3, 0x4}, 0x8) 5.790572671s ago: executing program 1 (id=5381): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@delchain={0x174, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xd}, {0x0, 0xfff3}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x130, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}, @TCA_BPF_ACT={0x11c, 0x1, [@m_connmark={0x7c, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x49, 0x6, "4eebdf2408e8952792009f587075f394796b87f5e6c0508e4deec5a86d24a64dacafd73234200ce6fe5d4aea9687c8c641b998a1c77c0f725ce22b72f10b8a2d3a770951c3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x9c, 0x1d, 0x0, 0x0, {{0xf}, {0x4}, {0x69, 0x6, "309e7046678cfa85254c612d61e3d2c3e3b6590ca2f3e70c7fcdf5868b95845dfa60edad38b3b8c47659e35d235cfa416f9d81db4b5bb82e527e794cf9c32a539860aa592d929cecb48c76df399b49231fc0de0b4c4b5e510bd82e77a2a017326f355f49b6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x174}, 0x1, 0x0, 0x0, 0x80}, 0x2000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (fail_nth: 9) 5.774575659s ago: executing program 3 (id=5382): socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x50323234, 0x0, 0xb, [{0x80000004, 0x7}, {0x7ff, 0xb325}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x4, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, 0x0, 0x0, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='dctcp-reno\x00', 0xb) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010104050000000000b800000000", @ANYRES32=r4], 0x20}}, 0x20008040) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl0\x00', r4, 0x2f, 0x1, 0xe, 0x8, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}, @local, 0x80, 0x10, 0x1000, 0x8}}) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x3}) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000180)={0x1, 0xbc3, 0x3, 0x100080}) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600"/20], 0x78}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000001c0), 0x4) keyctl$update(0x2, 0x0, &(0x7f0000000380)="c8bd1d2418c573f8151ad173e2", 0xd) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0xff, 0x2, {0x0}, 0x10000003}) 5.754934572s ago: executing program 4 (id=5383): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x8010}}], 0x1, 0x4004801) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0x29, 0x2, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x414002, 0x0) mknodat$loop(r1, &(0x7f0000000040)='./file0\x00', 0x8000, 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 5.630758023s ago: executing program 1 (id=5384): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'netpci0\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000000c0)) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa) write$cgroup_devices(r1, &(0x7f0000000100)={'b', ' *:* ', 'rm\x00'}, 0x9) 5.4415254s ago: executing program 4 (id=5385): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x4c, 0x1, 0x1, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mbim={0xc, 0x24, 0x1b, 0x6, 0x3, 0x7, 0x6, 0x76, 0x3c}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x64}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40}}}}}]}}]}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r1, &(0x7f0000000100)=""/253, 0x2d, 0x9) rt_sigprocmask(0x1, &(0x7f00000000c0)={[0xc]}, 0x0, 0x8) r2 = add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) r3 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r4 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r3) writev(r4, &(0x7f0000000600)=[{&(0x7f0000000040)="01f1", 0x2}], 0x1) sendfile(r0, r1, &(0x7f0000001140)=0x1, 0x3) keyctl$read(0x2, r2, &(0x7f00000000c0)=""/4096, 0x1000) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r6, 0x80045b10, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1e2e81) r7 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}, {0x0, 0x47}], 0x2}) io_uring_enter(r7, 0x4d10, 0x2, 0x2, 0x0, 0x0) connect$unix(r1, &(0x7f00000010c0)=@file={0x0, './file0\x00'}, 0x6e) 5.219619793s ago: executing program 1 (id=5386): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x57, 0xc2}}}}}}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40844) unshare(0x2c020400) lseek(0xffffffffffffffff, 0xfffffffffffffff9, 0x1) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003400)=@base={0x1c, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x48) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000040)={0x6, 'bond_slave_1\x00', {0x1}, 0xff7f}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000023c0)={0x0, 'veth0_vlan\x00', {0xffe}, 0x2b1}) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x0) recvmmsg(r3, &(0x7f0000000740), 0x0, 0x40010000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) socket$alg(0x26, 0x5, 0x0) 4.266318946s ago: executing program 0 (id=5388): r0 = syz_open_pts(0xffffffffffffffff, 0x10000) r1 = socket$key(0xf, 0x3, 0x2) getsockname(r1, &(0x7f00000000c0)=@l2, &(0x7f0000000140)=0x80) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0xb) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x2, &(0x7f0000000080)=0x200, 0x4) unshare(0x400) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)={0x2, 0x400000000000003, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x400, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}]}, 0xd8}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x7, &(0x7f0000000040)=[{0xb31}], 0x1, 0x1, 0x0, 0x2, 0x0, 0x2}) unshare(0x54010400) 3.940986522s ago: executing program 0 (id=5389): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000300)="56b3180c38075601b2972d1f29bf53af9cf343e97e0a27694f123d7ccf3e82ef4caf4bb65ca561b65ea2b8e8fe315f77e4e18b394bd6a1866c4ac4d6c663efe85a4bc0bb3210a5ba5215248e729d9c9867df1731a3c36a0c89b405770388bbe6aa62bf62ea2d59994899acff6ca9af36050d98ef52ca1813b7313f186b64fc21a56cb4ceb973eb30daf34f", 0x8b}], 0x1, 0x0, 0x0, 0x4000001}, 0x4800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x118}}, 0x24000051) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000010c0)={'gretap0\x00', &(0x7f0000001040)={'ip_vti0\x00', 0x0, 0x2826d81f9b7bf0af, 0x40, 0x99, 0x3f, {{0x15, 0x4, 0x2, 0x10, 0x54, 0x64, 0x0, 0x40, 0x4, 0x0, @multicast1, @local, {[@generic={0x7, 0x12, "067c51e0599111a3daf45cebdb0b0571"}, @timestamp={0x44, 0x2c, 0x3e, 0x0, 0x4, [0x884, 0x9, 0x1, 0x1, 0x688, 0x3da, 0x80, 0x1000, 0x8, 0x80000000]}]}}}}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002a80)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000003c0)="a747e0b23a07a0da1cac2c1923d5acccc9b28fef568479fbfa8a892d24e4934c4a587091da2bd182605fcff3bdc9d42c198e8637212086a365aaffbe175e561fafef1b6ec1d7e097a8b617fe91ad636940acc7fb8c98f91612be90b6d871a2ed1e11bdb36756b1e865df3d6da07d3bcfd98ae91f9cfd05a0478e150316950ae388a232102ec5291eda2b069d0ebaaf70446fc9d74d2739870b541f203fc3f3c43a009f1264921dd5da185fe34cb2b85e4b599c991115a490f5fdfa48e4a7887deb827324a6af31acb06215626c4abdfdc1f00150a36a2e763c937c2079324ed2e571", 0xe2}, {&(0x7f00000004c0)="76a5727add6516e56f40e05d809c897eee59a35df40572e22504f7b63a94d2f093c42c4ab9de07333ff25effa66f553f90e671c994b1e2108941ef60dff42f3745da98f4811c0067e7feebe7ce0d476dae7cd334246dc88e14ab01084cae0059e38a8e491e661277a68fa4389352da8705d8fb7ec48e14a879269f58e846b367fceb0ff61183d217a508c28c6576d731f6ae7342887c00090d981385b8d79cd4acc075e49a51b9c1a561f0a54db07780ba1e00c542de3a0929cdcdbf985df3cd23f4a55f32e0fb3bea8259d4f0e5b0121a69cc1681bd34f7bb7216152618dbe64aa1571f6b", 0xe5}, {&(0x7f0000000080)="3e196b13582233b697e3eb6c488b268eee1e12672927b0ebffbf0583994ebda1c342a64a5aba2feb07c587ff0aeed4457963cdda6dd578d27c57f55d38e9c85e19d3ef758ce791ec712f340989582a36a3b00eeb476034c5b0490967800852", 0x5f}, {&(0x7f0000000140)="75932445946d642200", 0x9}, {&(0x7f0000000180)="7ee2076de2edb134766720a5a4ca2d632b4866bbf67486bee299159c03cbd503", 0x20}, {&(0x7f00000005c0)="8936eb19468de127dff4a7abddb1e95446ef52e8d89c37e0f8e59a803ea7b6aaf2521afdf6510302790fd2127b39c9de39b1a20ceff9bc5b4f2520e359681818c411dfc0bb714e6052c6b6dd4170e86c920e7a8793ea8cc73a0663efe9b86dddd7a16a91a44d06c402ceac54ee5db1338a4ca1fe46b5d9ebeae9e5356fe39d6a22a20e456851f8dfb5be1672e69ae03e5f6381300075d82587cb59a2ba8d8094877da7e96d1fc209dc9fa05eee3b86fdd7ae277706e78d770c4df25781cd70e797", 0xc1}, {&(0x7f00000006c0)="b18d401d1de0961fecc575f3a171ffec97039ef426869de3a182857876efe7b4ab2b0a13d79cdea39105ee22e8ca638a3bb264c1c30399cf9f46504c5e72300959af755d41e6bca9dd360b942088dd5b6f851dc898a889588dee3b2a43a6cf461710e11279ec66b780a58fb595da21274563ff7fd6ae3440db0a4e75df42fe500d49dc47e9984486f6d00fa7bdfca4329a4276275bd08b45f1e9ea0e0cebf7c03afbe677d73118e7c1005e759f6406e169d543b53745572854f86a4a461004799b1a619a61ce8437ee3088ff5ac7efbebce90b17df7b00f5acefc3ae0c1efbde24ce99cccae6fd39", 0xe8}], 0x7, &(0x7f00000007c0)=[@tclass={{0x14, 0x29, 0x43, 0xe}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x2b, 0x14, 0x0, 0x6, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2a}, @empty, @empty, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @dstopts={{0x20, 0x29, 0x37, {0x2b, 0x0, '\x00', [@ra={0x5, 0x2, 0x1}, @enc_lim={0x4, 0x1, 0x8}]}}}, @rthdrdstopts={{0xf8, 0x29, 0x37, {0x73, 0x1b, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x8, 0xd4, "14d9bca30bd03e8f353567d1002991abb89244a0d7cb15da84740412b767873562adfc98838b559eac84a524a0db976b23710a6b54c8bd33a65e794ab46e4753989198dea816eabf7c6a551c037c69f6da3e30fe5ed3cf5c72dbdf5c72b1568f78aa51c8ba61fd336cd8bcc40a57d3621dd7a3fbe91cf3725775b1c081b2dda006494c103a87aa2f0b4a5edd96584166945c55bc86a68fc8b095d3d32dd5e7f20cd34fa458ed12daa1443cfa81460fba44198045b5eb1bf62cd81b18b46127a2fc4b2e2c61f080e61446dae220fc0fbc26b913f6"}, @enc_lim={0x4, 0x1, 0x8}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xeb}}], 0x200}}, {{&(0x7f00000002c0)={0xa, 0x4e24, 0xfffffff4, @private1, 0xf85}, 0x1c, &(0x7f0000000c80)=[{&(0x7f00000009c0)="b0a6db633e85286a5cda49087b2ea2f768412d295ced6fe3ca1330310834888c7740e5984ca1f05bf88d238596c6fb0ec708036e48a8bd707bddbb6fcf7c9c5d226ca804a05f075e4c7e5e2db220bc048570dd4403fea55c0a58310581d7cda5eadf3e8555ccc32931fb1e2e402ceae1a66133ebaf6bf84a33ddb193b7e5fa3a293c4f9f5f4a0408a8aeafae0649b56c22eca632a62f69db492b50a26840b346e18aaf286d04eb1497e7518172b3aa3a56e81d567c8151aa9b07258e", 0xbc}, {&(0x7f0000000a80)="2e863658c63aea9dec50582afba6f51b1fad6af22b2655e216a8ff7fd4c532f2665d6935427371268ceccff124c528b4534538fbd276019198c87cfef8e843d5588e2a52bf5468c169", 0x49}, {&(0x7f0000000b00)="9239a1fb43d717cbff6dc8ae4ab0d78edd0e83c9c994eb458b23060d5b840d58f850c97e2a700e72b5332249bdd3ce0c75765afe3411d538bf2569e540087a3ddfaba27bb4f7688d4d96ebcf1c3260581ad0bdf1fa93baa64416032737", 0x5d}, {&(0x7f0000000b80)="76a559a2e3806f5443970c334b5f94a91ac6c4b8408053e6d80f504690b6574ebbff0baeb86dd09bc8e913b84c5b4040478caf5f9f2b9f57fc4eaaabd2d1246981a0c61383a354668f85dfb542a31091a24a2d14a86ec3c1da1b86d9250db9dec98a49ad3da0deac0987bb9d7b8c57a1770be07dc64fb8b45009bdae247c3d5bd4914bd8822f0eff0916a0470e7ef8a240c91e16c62ee67c37cdf848a0530c957f3d9d2ff04ebb036ed809c9e90cd4eb8bbf9b927c29ec5ea6e18dc4be06d690a1d396bc64650a94d0b47654e7d4a6e4253e177336ec17af81256e57dec5d2a263758e953b55a15a74c8", 0xea}], 0x4, &(0x7f0000000cc0)=[@hoplimit={{0x14}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x5c, 0xc, 0x0, 0x0, 0x0, [@mcast2, @ipv4={'\x00', '\xff\xff', @loopback}, @private0, @loopback, @dev={0xfe, 0x80, '\x00', 0xe}, @ipv4={'\x00', '\xff\xff', @multicast1}]}}}, @rthdr={{0x68, 0x29, 0x39, {0x2f, 0xa, 0x0, 0x2, 0x0, [@private1, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}]}}}], 0xf8}}, {{&(0x7f0000000dc0)={0xa, 0x4e22, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c, &(0x7f0000000fc0)=[{&(0x7f0000000e00)="96af8583d77aef7d0b538cc445293b05a8c0c14da0b3f6eb5a807398f74fcddfc4154592ba0cdf366c0d02b5def5cf7a15f374596daf4b3df9b91fa3e3a8789bf51086ccb527a6823d5876f5", 0x4c}, {&(0x7f0000000e80)="cf9181dbba3fe61b1784fcc4a36dbd85ab56d3c6fd1ace9b4c0741db0240b7c6cbaa4ef26ab86fe7ea2582b607205bc4ca8aa64ae624", 0x36}, {&(0x7f0000000ec0)="afdc8939b942efa49ad6bf9d364326d339948109060285597856113c4945814d07093ee06bfea33144bd29585628951b3ac32d463bfbe4f8909ae0f6e4548142e898660ec93cab5172c0b3506039b2626a27f70ea46623d43eaf5943469fb64cfa", 0x61}, {&(0x7f0000000f40)="0e781679cf44fb51ec6db82571c88f94677ce7dc049587758e0fef79bec18ca48764517b4ca15e3df0a815", 0x2b}, {&(0x7f0000000f80)="0cd82086698392582060783f0af23a042b466a1bb94e808b29c9360e736ebb", 0x1f}], 0x5, &(0x7f0000001100)=[@rthdr={{0x48, 0x29, 0x39, {0x3b, 0x6, 0x0, 0x6, 0x0, [@mcast2, @dev={0xfe, 0x80, '\x00', 0x20}, @private2]}}}, @tclass={{0x14, 0x29, 0x43, 0x559}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x62, 0x8, 0x1, 0xc, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2]}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x87, 0x0, 0x2, 0x9}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x4, 0x0, [@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @tclass={{0x14}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, r0}}}], 0x160}}, {{&(0x7f0000001280)={0xa, 0x4e21, 0x7ff, @mcast2, 0x100}, 0x1c, &(0x7f0000001480)=[{&(0x7f00000012c0)="e5d8d7c1afffd3c8e5538ef48b63dc62a66db0adc0b47c5dc0fd3ef0a723e33a26c8796bc5fd9588eaf9f30b2d453ea0e194de809ddd7bdd8d1763c6e9cf2c59fd99f8b03b67d0d728eeb9055382f2e75ed194f2344c8f7f37b6d56a5622d2073f11b73284268a7b474e2eedadf801558bc3bd61b1121979b1c64d55813d0b6eaf1c37406bb751e326c19ebc4c5a4054b9b661994b8abe4b9d3167386a681469e678d8673577c7ae330b441e52a427ce1ec30e591a5987e614e9a241e394e43e59f75899bc2769f732efc870e0d315e29ea3f912d90399eb36be4fe8", 0xdc}, {&(0x7f00000013c0)="157afe0f6edec2854008e48ffd38df5ef21efb18da45bdf13b0a69994b6b74c87a1a8776a9b55666c377b20324e903da0b35656a1b714c8615ee2412536120378c6ca064a22f31972a3932fddffb9fbf4f5b6872", 0x54}, {&(0x7f0000001440)}, {&(0x7f0000001540)="8ca53b385613e203891dc801d6378271567c1d5f89bc4b111b65500a685813df51c4f43b33eb072116780738c27a0be26d1e123178c49fbc076af74261b9b0a85661a59001d153580920e316c3f6e2ea0cf7ae9bf01522b05838444c7955995244f1bb07d209365f71306b3926289e606a5046e59e6e929f10f6fb6c5747bfcbe470f79d5b28e14c9e0821cf62c6900a1114b8b635093d4853281405a7bd91b5f957cf2ff2a533de29254724d22e099e1ec87e4ababaa5f5d38f2112b8b7e12be4ef946eb9", 0xc5}, {&(0x7f0000001640)="4c07f94bb20296e3f960c177835cf7431fdb212cd084c0057104c74a52e3bc78a2b70a63e136a30699e7a891bd32168f015ea0bdeda82399d6f29d34fb83b53cef43149a78f9f56047c10b9044b54e9568e684a75388a67c7a784f864465a123e8dc144fde313d676e45505817959275d2c438bbb4203b09215dc63514b3eb68357230f5d7e9a3aa9c628feacea1b3e73689bec092a183f94dd3e17ec74913bca80974ac1c517e880b4a453dfaba6708f36465b8c9a55f5436d4a669b7a6aea457427a21f6d28f0dfad21eef9fb1b3a409ffba34e9dc7757576795f6c1a4b8", 0xdf}, {&(0x7f0000001740)="94cb578be35354b5a42970475eea40c371d2e21ecc3a055733e75f23a11ecd3ac598d967eaed7002423996882187eda62153d298167f853a44565cc2b5ee9cb8984996c7b7afcee1e59b5f35816071b4910efccd6c6255819ae7e5d3ac149f703c63422db10829d32b7d92eea2b154ca88d18cb4035efa922c7f58bed0d50c129cdb0e16ff59809e625261509b078e034e60d6f3", 0x94}], 0x6, &(0x7f00000018c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdrdstopts={{0x128, 0x29, 0x37, {0x3c, 0x21, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @generic={0x81, 0xfe, "a00cc8af3050d89be5fdb1a43c04fe8b94f81413da766a336b3a135a2f21f914dd042f31cf4d0085782901dc7e80fa9c2733d588cc7348061f2d5762b50e4e84dbdba77ae56ea0621fc1f209bdc5ed167e2acbc6844f0502860be4541193c5e00d20f1dd28440fbd7733a6a6d01babfd97fa817e368a4b3cd255f1c2b114c9a71ce09833cf5d67a09d6277d4c0900f76841963a327933df07a5f990a0917b0be3f07277db0079d11d8419314ab85b8d9643d056b8a2ad3cc54a18bc87fa4c082f51a235995f8be42e58156ceeeb84d153bd42298fdbebc0ab0db4f02efb02e3f6c60ce1c715d47e9b5351dc83ebf996730967af9b849225364a3a5330390"}, @pad1, @pad1]}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x6, 0x10, 0x650453a3b7422b37, 0x2, 0x0, [@remote, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}], 0x1d8}}, {{&(0x7f0000001800)={0xa, 0x4e20, 0x8, @mcast2, 0x791c}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001840)="48fe8a30c174da3f4683aea81faec513573183cad01fa0", 0x17}, {&(0x7f0000001ac0)="71fd5e9e7ae87389", 0x8}, {&(0x7f0000001b00)="9bae9a348064c63d5ad5b50a31b5f378049519f48fea9dee6fa62ea27b573f4e161bdebf4a445f6091bbfb8e2933b21e18f4", 0x32}, {&(0x7f0000001b40)="7c16cbea7bd266abc7811f9f7d546ef78bbc82093f71e15dba2b7843a996ba69595c5c0511ca983af7d96da2ddbc95daa0e8d4eaa11e3703136672913e9ea84977d534177deb5343e349eab67e39f350a763fd02dc4e3ae40939374fbad273cddc740fc37fa3038b21c8428c5cf4c820c2bd2c9d6024891ddbc19d6a215220bf65b4f51cf8112cb41852c86ce3c6465b951fe52da41062ba0ee74010ee502338230930a1dce4ab82a0737f", 0xab}], 0x4, &(0x7f0000001c40)=[@rthdr={{0x18, 0x29, 0x39, {0x3a, 0x0, 0x1}}}, @rthdrdstopts={{0x50, 0x29, 0x37, {0x67, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0x131}, @pad1, @hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x18, {0x0, 0x4, 0xff, 0x9, [0xf2, 0x62ad]}}]}}}, @dontfrag={{0x14}}, @rthdr_2292={{0x28, 0x29, 0x39, {0xc, 0x2, 0x2, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0xa8}}, {{&(0x7f0000001d00)={0xa, 0x4e22, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000001dc0)=[{&(0x7f0000001d40)="8539f590d56e3138d8595042626dcb0c5fba4c7712355b287d72007d9b564f66887efdb2c78489641b24dcfe6103f1ccb5e568698d06220738abc400cf5e92f6c2f797695977614671a21e107b1442de5b96dfc49a1fe093cdb7119f5ad2805f2c", 0x61}], 0x1}}, {{&(0x7f0000001e00)={0xa, 0xb98, 0xf, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c, &(0x7f0000002280)=[{&(0x7f0000001e40)="3d88e1d78a1e20df058b5f9d79534e6ba0fe58c27ed42873d368e4b035454ebfdb016f036e9a156d5bf73e20f4b7c43081664196103231bd5ee74b21ef067a7050827c2b23fb0b72e2e3add5304497809d1359355c8c0c971a657a7ee81df03b6d3d855b805f376f4490c17c183b829286492fdb5596d660a5196432ccdf13b64afc7211a815b255e94d4aff73a89bbe77ea897827706c2022b8106cbf4b0772a15f8fdb9b8bf4083901cb7c546978842d3051e53ac45a53d0fb7d8937eea8da6e64dd33b1ef6e9689c8eb521ffda933f1", 0xd1}, {&(0x7f0000001f40)="de44fccd10efe3c62f8181e2d222f3f94049503e021bf83560dd01fde1993c", 0x1f}, {&(0x7f0000001f80)="eec99ef4", 0x4}, {&(0x7f0000001fc0)="2f752d21d23cee56014846884ca7c82af9ff4dd5c9a9a919167b14a8254d1dca17b472f4bdd91960e8f57b9493ce99a5523e60ec9019c2cbdb7edbb4b78d5d06215cd5923c7528d7202181e0970a545291e25f1cd323f0ab0569a6a009c3fefaa5f3397081f6e117c23decd6ec7d203b1aa52cb9f8da4339aaaef965727637aaa8a84a7a7f4ba69563", 0x89}, {&(0x7f0000002080)}, {&(0x7f00000020c0)="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", 0xfc}, {&(0x7f00000021c0)="6aef6ed82ab0bc155cd8c6210fec4098b102490457df3087715167f5b23a6a37e955db5d9cc3e6b1e22eb8165db26676699c8822cd50f88d8f2fa97df90d1a34d2a3078f0381962da9e2e361da0cb76e57e3d9ee79700a9d3d030241cd7941eac1cee26e4903eea2b122dc41c922a9890ee91b193516ced63bf2eec51da759e6f8e0ab97d3b6d72bef2595a636ed38f4e0db22", 0x93}], 0x7}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002300)="21ed5b6ec4d12e9b0ac74428073b1890c4f7a27e3a4eb1657e7084f64781ccda7b3e45e2f52920701eb5c22ef6604f6b202524154273cde86c122a1c4436b228fe91bdedf3fddc3ad44a39e991a7c5c48ae08d947f1d715306bb055211e2a35daabbcba522544206a5ebc61148ebc6235b2accc17e02998c4c446a6726e5ec7cfa4801a6f795ea42e5a9202b02213376ba0e96bbfd69318e4915cd1db9c7c9a56ca4ec493087b18341b5dcc62b3bc739dea3e36b8452de7b4c510a83cd3dc30d93e95650cdb33deae936a2d5bd5ffac1d359ff2f3252", 0xd6}, {&(0x7f0000002400)="93fcc589904e30662a2dc1a32821f54a2e8d68259e4849a76b1ed562c26af65de3fe240a2439f05a88f972773bbb180a9666b7761caba8bb4de446bce918de6d222d6eb2baac39382e90c0ccd76158f835af7f96ae7a89be21ccaf866c5c3316a43c08e3589ba2d213e090bf2fedc0a4e86353282ce908faa5693bfc925e708e4bf95523dd6eef561a371515621a0005d90e8cdea20da3a072b8bf64b670fae73aa5c80baf1d22aa7d652e0537f97e94964cb2c24d9b37b29a953658386ae8a605911ed6b030fe5b28409763", 0xcc}, {&(0x7f0000002500)="9fdd4d96612e7d09db7ef9a7e6e4ee3c5ec2e405c173191552e99387ffee424d537702c69829168a2ea3d696e97fb587ee4115d35d2fb062b785936a661ba70afc6856e3776bbf0647c3dd94370cc4a917187f85f6b4cdf2c7a079390a3566718661659552b4061d513594b1e0cf1e950784067055b320aeea88", 0x7a}], 0x3}}, {{&(0x7f00000025c0)={0xa, 0x4e22, 0x5, @mcast1, 0x3}, 0x1c, &(0x7f0000002800)=[{&(0x7f0000002600)="56d2a0694fdcc925957f4c08cbe95b1333d37e3049080019849f0a108ecfc991afe4030bf655142e0c2a2d6838d27401913c6e33e7f9997163c6c899718ad0550eaa7d88e1e655ade985278fafa9699b285a1b3e47ce92a8a2d21f6591beb391e974769ac96f87883434733f32dfef23c59b74badfe9bdbfb5d58dc135", 0x7d}, {&(0x7f0000002680)="78058c28c5a7231bfb29ea932725d42cf08797753f1eab1189997a8e92bede28ac85a610d32f49ce2bd3c29a300f6c17f491a66a704d4191d398a9f11fca8510ab40102baa340d0d1be990065ff3deaac1bdeeab95aa0bfd8ce9b0b2c391", 0x5e}, {&(0x7f0000002700)="16c19a06a88662641eb908cbaa5ac4d04f75f307e9b8fa775f1d838e497daeac609442b3a7c3f4626bd00baafe96711b9f1b47d56eb22be80075aaecc90e65376cc4d8b9437b785540b815a7f58640ad5b8dbe59da9bd01725099b8b654126bb3d75a66178b96549c41ec1ce200a660388343caaad95db1946b93d33ebb14df3c4fded51275e51d79092c44ef412dbbed37d703f32aa841b93a4018b2c341200348bcbd516fed222cfd5939a43310e0186a82d9a7d6688d26c23d2cdcceddfdc0ea941f2a54db04983180f24de71a07547bd", 0xd2}], 0x3, &(0x7f0000002840)=[@dontfrag={{0x14, 0x29, 0x3e, 0x7fff}}], 0x18}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x154e, @local, 0x9}, 0x1c, &(0x7f0000002940)=[{&(0x7f00000028c0)="26eec943f99f1edbd240", 0xa}, {&(0x7f0000002900)="0becce370429c5577c5ce8a0ef3edc3e6fe11aa5a849e07db8f381b22c799a541f151f6a1aece52cf51a6b66db06903cfb01", 0x32}], 0x2, &(0x7f0000002980)=[@rthdr_2292={{0x78, 0x29, 0x39, {0x1, 0xc, 0x2, 0xc, 0x0, [@dev={0xfe, 0x80, '\x00', 0x44}, @private0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, @mcast1, @private2]}}}, @hopopts_2292={{0x48, 0x29, 0x36, {0x62, 0x5, '\x00', [@hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0xff}, @pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffa}}], 0xd8}}], 0xa, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unshare(0x22020400) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fstat(r1, &(0x7f0000008700)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000300)="56b3180c38075601b2972d1f29bf53af9cf343e97e0a27694f123d7ccf3e82ef4caf4bb65ca561b65ea2b8e8fe315f77e4e18b394bd6a1866c4ac4d6c663efe85a4bc0bb3210a5ba5215248e729d9c9867df1731a3c36a0c89b405770388bbe6aa62bf62ea2d59994899acff6ca9af36050d98ef52ca1813b7313f186b64fc21a56cb4ceb973eb30daf34f", 0x8b}], 0x1, 0x0, 0x0, 0x4000001}, 0x4800) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x118}}, 0x24000051) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000010c0)={'gretap0\x00', &(0x7f0000001040)={'ip_vti0\x00', 0x0, 0x2826d81f9b7bf0af, 0x40, 0x99, 0x3f, {{0x15, 0x4, 0x2, 0x10, 0x54, 0x64, 0x0, 0x40, 0x4, 0x0, @multicast1, @local, {[@generic={0x7, 0x12, "067c51e0599111a3daf45cebdb0b0571"}, @timestamp={0x44, 0x2c, 0x3e, 0x0, 0x4, [0x884, 0x9, 0x1, 0x1, 0x688, 0x3da, 0x80, 0x1000, 0x8, 0x80000000]}]}}}}}) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002a80)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000003c0)="a747e0b23a07a0da1cac2c1923d5acccc9b28fef568479fbfa8a892d24e4934c4a587091da2bd182605fcff3bdc9d42c198e8637212086a365aaffbe175e561fafef1b6ec1d7e097a8b617fe91ad636940acc7fb8c98f91612be90b6d871a2ed1e11bdb36756b1e865df3d6da07d3bcfd98ae91f9cfd05a0478e150316950ae388a232102ec5291eda2b069d0ebaaf70446fc9d74d2739870b541f203fc3f3c43a009f1264921dd5da185fe34cb2b85e4b599c991115a490f5fdfa48e4a7887deb827324a6af31acb06215626c4abdfdc1f00150a36a2e763c937c2079324ed2e571", 0xe2}, {&(0x7f00000004c0)="76a5727add6516e56f40e05d809c897eee59a35df40572e22504f7b63a94d2f093c42c4ab9de07333ff25effa66f553f90e671c994b1e2108941ef60dff42f3745da98f4811c0067e7feebe7ce0d476dae7cd334246dc88e14ab01084cae0059e38a8e491e661277a68fa4389352da8705d8fb7ec48e14a879269f58e846b367fceb0ff61183d217a508c28c6576d731f6ae7342887c00090d981385b8d79cd4acc075e49a51b9c1a561f0a54db07780ba1e00c542de3a0929cdcdbf985df3cd23f4a55f32e0fb3bea8259d4f0e5b0121a69cc1681bd34f7bb7216152618dbe64aa1571f6b", 0xe5}, {&(0x7f0000000080)="3e196b13582233b697e3eb6c488b268eee1e12672927b0ebffbf0583994ebda1c342a64a5aba2feb07c587ff0aeed4457963cdda6dd578d27c57f55d38e9c85e19d3ef758ce791ec712f340989582a36a3b00eeb476034c5b0490967800852", 0x5f}, {&(0x7f0000000140)="75932445946d642200", 0x9}, {&(0x7f0000000180)="7ee2076de2edb134766720a5a4ca2d632b4866bbf67486bee299159c03cbd503", 0x20}, {&(0x7f00000005c0)="8936eb19468de127dff4a7abddb1e95446ef52e8d89c37e0f8e59a803ea7b6aaf2521afdf6510302790fd2127b39c9de39b1a20ceff9bc5b4f2520e359681818c411dfc0bb714e6052c6b6dd4170e86c920e7a8793ea8cc73a0663efe9b86dddd7a16a91a44d06c402ceac54ee5db1338a4ca1fe46b5d9ebeae9e5356fe39d6a22a20e456851f8dfb5be1672e69ae03e5f6381300075d82587cb59a2ba8d8094877da7e96d1fc209dc9fa05eee3b86fdd7ae277706e78d770c4df25781cd70e797", 0xc1}, {&(0x7f00000006c0)="b18d401d1de0961fecc575f3a171ffec97039ef426869de3a182857876efe7b4ab2b0a13d79cdea39105ee22e8ca638a3bb264c1c30399cf9f46504c5e72300959af755d41e6bca9dd360b942088dd5b6f851dc898a889588dee3b2a43a6cf461710e11279ec66b780a58fb595da21274563ff7fd6ae3440db0a4e75df42fe500d49dc47e9984486f6d00fa7bdfca4329a4276275bd08b45f1e9ea0e0cebf7c03afbe677d73118e7c1005e759f6406e169d543b53745572854f86a4a461004799b1a619a61ce8437ee3088ff5ac7efbebce90b17df7b00f5acefc3ae0c1efbde24ce99cccae6fd39", 0xe8}], 0x7, &(0x7f00000007c0)=[@tclass={{0x14, 0x29, 0x43, 0xe}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x2b, 0x14, 0x0, 0x6, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2a}, @empty, @empty, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @dstopts={{0x20, 0x29, 0x37, {0x2b, 0x0, '\x00', [@ra={0x5, 0x2, 0x1}, @enc_lim={0x4, 0x1, 0x8}]}}}, @rthdrdstopts={{0xf8, 0x29, 0x37, {0x73, 0x1b, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x8, 0xd4, "14d9bca30bd03e8f353567d1002991abb89244a0d7cb15da84740412b767873562adfc98838b559eac84a524a0db976b23710a6b54c8bd33a65e794ab46e4753989198dea816eabf7c6a551c037c69f6da3e30fe5ed3cf5c72dbdf5c72b1568f78aa51c8ba61fd336cd8bcc40a57d3621dd7a3fbe91cf3725775b1c081b2dda006494c103a87aa2f0b4a5edd96584166945c55bc86a68fc8b095d3d32dd5e7f20cd34fa458ed12daa1443cfa81460fba44198045b5eb1bf62cd81b18b46127a2fc4b2e2c61f080e61446dae220fc0fbc26b913f6"}, @enc_lim={0x4, 0x1, 0x8}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xeb}}], 0x200}}, {{&(0x7f00000002c0)={0xa, 0x4e24, 0xfffffff4, @private1, 0xf85}, 0x1c, &(0x7f0000000c80)=[{&(0x7f00000009c0)="b0a6db633e85286a5cda49087b2ea2f768412d295ced6fe3ca1330310834888c7740e5984ca1f05bf88d238596c6fb0ec708036e48a8bd707bddbb6fcf7c9c5d226ca804a05f075e4c7e5e2db220bc048570dd4403fea55c0a58310581d7cda5eadf3e8555ccc32931fb1e2e402ceae1a66133ebaf6bf84a33ddb193b7e5fa3a293c4f9f5f4a0408a8aeafae0649b56c22eca632a62f69db492b50a26840b346e18aaf286d04eb1497e7518172b3aa3a56e81d567c8151aa9b07258e", 0xbc}, {&(0x7f0000000a80)="2e863658c63aea9dec50582afba6f51b1fad6af22b2655e216a8ff7fd4c532f2665d6935427371268ceccff124c528b4534538fbd276019198c87cfef8e843d5588e2a52bf5468c169", 0x49}, {&(0x7f0000000b00)="9239a1fb43d717cbff6dc8ae4ab0d78edd0e83c9c994eb458b23060d5b840d58f850c97e2a700e72b5332249bdd3ce0c75765afe3411d538bf2569e540087a3ddfaba27bb4f7688d4d96ebcf1c3260581ad0bdf1fa93baa64416032737", 0x5d}, {&(0x7f0000000b80)="76a559a2e3806f5443970c334b5f94a91ac6c4b8408053e6d80f504690b6574ebbff0baeb86dd09bc8e913b84c5b4040478caf5f9f2b9f57fc4eaaabd2d1246981a0c61383a354668f85dfb542a31091a24a2d14a86ec3c1da1b86d9250db9dec98a49ad3da0deac0987bb9d7b8c57a1770be07dc64fb8b45009bdae247c3d5bd4914bd8822f0eff0916a0470e7ef8a240c91e16c62ee67c37cdf848a0530c957f3d9d2ff04ebb036ed809c9e90cd4eb8bbf9b927c29ec5ea6e18dc4be06d690a1d396bc64650a94d0b47654e7d4a6e4253e177336ec17af81256e57dec5d2a263758e953b55a15a74c8", 0xea}], 0x4, &(0x7f0000000cc0)=[@hoplimit={{0x14}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x5c, 0xc, 0x0, 0x0, 0x0, [@mcast2, @ipv4={'\x00', '\xff\xff', @loopback}, @private0, @loopback, @dev={0xfe, 0x80, '\x00', 0xe}, @ipv4={'\x00', '\xff\xff', @multicast1}]}}}, @rthdr={{0x68, 0x29, 0x39, {0x2f, 0xa, 0x0, 0x2, 0x0, [@private1, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}]}}}], 0xf8}}, {{&(0x7f0000000dc0)={0xa, 0x4e22, 0x4f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c, &(0x7f0000000fc0)=[{&(0x7f0000000e00)="96af8583d77aef7d0b538cc445293b05a8c0c14da0b3f6eb5a807398f74fcddfc4154592ba0cdf366c0d02b5def5cf7a15f374596daf4b3df9b91fa3e3a8789bf51086ccb527a6823d5876f5", 0x4c}, {&(0x7f0000000e80)="cf9181dbba3fe61b1784fcc4a36dbd85ab56d3c6fd1ace9b4c0741db0240b7c6cbaa4ef26ab86fe7ea2582b607205bc4ca8aa64ae624", 0x36}, {&(0x7f0000000ec0)="afdc8939b942efa49ad6bf9d364326d339948109060285597856113c4945814d07093ee06bfea33144bd29585628951b3ac32d463bfbe4f8909ae0f6e4548142e898660ec93cab5172c0b3506039b2626a27f70ea46623d43eaf5943469fb64cfa", 0x61}, {&(0x7f0000000f40)="0e781679cf44fb51ec6db82571c88f94677ce7dc049587758e0fef79bec18ca48764517b4ca15e3df0a815", 0x2b}, {&(0x7f0000000f80)="0cd82086698392582060783f0af23a042b466a1bb94e808b29c9360e736ebb", 0x1f}], 0x5, &(0x7f0000001100)=[@rthdr={{0x48, 0x29, 0x39, {0x3b, 0x6, 0x0, 0x6, 0x0, [@mcast2, @dev={0xfe, 0x80, '\x00', 0x20}, @private2]}}}, @tclass={{0x14, 0x29, 0x43, 0x559}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x62, 0x8, 0x1, 0xc, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2]}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x87, 0x0, 0x2, 0x9}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x4, 0x0, [@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @tclass={{0x14}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, r0}}}], 0x160}}, {{&(0x7f0000001280)={0xa, 0x4e21, 0x7ff, @mcast2, 0x100}, 0x1c, &(0x7f0000001480)=[{&(0x7f00000012c0)="e5d8d7c1afffd3c8e5538ef48b63dc62a66db0adc0b47c5dc0fd3ef0a723e33a26c8796bc5fd9588eaf9f30b2d453ea0e194de809ddd7bdd8d1763c6e9cf2c59fd99f8b03b67d0d728eeb9055382f2e75ed194f2344c8f7f37b6d56a5622d2073f11b73284268a7b474e2eedadf801558bc3bd61b1121979b1c64d55813d0b6eaf1c37406bb751e326c19ebc4c5a4054b9b661994b8abe4b9d3167386a681469e678d8673577c7ae330b441e52a427ce1ec30e591a5987e614e9a241e394e43e59f75899bc2769f732efc870e0d315e29ea3f912d90399eb36be4fe8", 0xdc}, {&(0x7f00000013c0)="157afe0f6edec2854008e48ffd38df5ef21efb18da45bdf13b0a69994b6b74c87a1a8776a9b55666c377b20324e903da0b35656a1b714c8615ee2412536120378c6ca064a22f31972a3932fddffb9fbf4f5b6872", 0x54}, {&(0x7f0000001440)}, {&(0x7f0000001540)="8ca53b385613e203891dc801d6378271567c1d5f89bc4b111b65500a685813df51c4f43b33eb072116780738c27a0be26d1e123178c49fbc076af74261b9b0a85661a59001d153580920e316c3f6e2ea0cf7ae9bf01522b05838444c7955995244f1bb07d209365f71306b3926289e606a5046e59e6e929f10f6fb6c5747bfcbe470f79d5b28e14c9e0821cf62c6900a1114b8b635093d4853281405a7bd91b5f957cf2ff2a533de29254724d22e099e1ec87e4ababaa5f5d38f2112b8b7e12be4ef946eb9", 0xc5}, {&(0x7f0000001640)="4c07f94bb20296e3f960c177835cf7431fdb212cd084c0057104c74a52e3bc78a2b70a63e136a30699e7a891bd32168f015ea0bdeda82399d6f29d34fb83b53cef43149a78f9f56047c10b9044b54e9568e684a75388a67c7a784f864465a123e8dc144fde313d676e45505817959275d2c438bbb4203b09215dc63514b3eb68357230f5d7e9a3aa9c628feacea1b3e73689bec092a183f94dd3e17ec74913bca80974ac1c517e880b4a453dfaba6708f36465b8c9a55f5436d4a669b7a6aea457427a21f6d28f0dfad21eef9fb1b3a409ffba34e9dc7757576795f6c1a4b8", 0xdf}, {&(0x7f0000001740)="94cb578be35354b5a42970475eea40c371d2e21ecc3a055733e75f23a11ecd3ac598d967eaed7002423996882187eda62153d298167f853a44565cc2b5ee9cb8984996c7b7afcee1e59b5f35816071b4910efccd6c6255819ae7e5d3ac149f703c63422db10829d32b7d92eea2b154ca88d18cb4035efa922c7f58bed0d50c129cdb0e16ff59809e625261509b078e034e60d6f3", 0x94}], 0x6, &(0x7f00000018c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdrdstopts={{0x128, 0x29, 0x37, {0x3c, 0x21, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @generic={0x81, 0xfe, "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"}, @pad1, @pad1]}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x6, 0x10, 0x650453a3b7422b37, 0x2, 0x0, [@remote, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}], 0x1d8}}, {{&(0x7f0000001800)={0xa, 0x4e20, 0x8, @mcast2, 0x791c}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001840)="48fe8a30c174da3f4683aea81faec513573183cad01fa0", 0x17}, {&(0x7f0000001ac0)="71fd5e9e7ae87389", 0x8}, {&(0x7f0000001b00)="9bae9a348064c63d5ad5b50a31b5f378049519f48fea9dee6fa62ea27b573f4e161bdebf4a445f6091bbfb8e2933b21e18f4", 0x32}, {&(0x7f0000001b40)="7c16cbea7bd266abc7811f9f7d546ef78bbc82093f71e15dba2b7843a996ba69595c5c0511ca983af7d96da2ddbc95daa0e8d4eaa11e3703136672913e9ea84977d534177deb5343e349eab67e39f350a763fd02dc4e3ae40939374fbad273cddc740fc37fa3038b21c8428c5cf4c820c2bd2c9d6024891ddbc19d6a215220bf65b4f51cf8112cb41852c86ce3c6465b951fe52da41062ba0ee74010ee502338230930a1dce4ab82a0737f", 0xab}], 0x4, &(0x7f0000001c40)=[@rthdr={{0x18, 0x29, 0x39, {0x3a, 0x0, 0x1}}}, @rthdrdstopts={{0x50, 0x29, 0x37, {0x67, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0x131}, @pad1, @hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x18, {0x0, 0x4, 0xff, 0x9, [0xf2, 0x62ad]}}]}}}, @dontfrag={{0x14}}, @rthdr_2292={{0x28, 0x29, 0x39, {0xc, 0x2, 0x2, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0xa8}}, {{&(0x7f0000001d00)={0xa, 0x4e22, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000001dc0)=[{&(0x7f0000001d40)="8539f590d56e3138d8595042626dcb0c5fba4c7712355b287d72007d9b564f66887efdb2c78489641b24dcfe6103f1ccb5e568698d06220738abc400cf5e92f6c2f797695977614671a21e107b1442de5b96dfc49a1fe093cdb7119f5ad2805f2c", 0x61}], 0x1}}, {{&(0x7f0000001e00)={0xa, 0xb98, 0xf, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c, &(0x7f0000002280)=[{&(0x7f0000001e40)="3d88e1d78a1e20df058b5f9d79534e6ba0fe58c27ed42873d368e4b035454ebfdb016f036e9a156d5bf73e20f4b7c43081664196103231bd5ee74b21ef067a7050827c2b23fb0b72e2e3add5304497809d1359355c8c0c971a657a7ee81df03b6d3d855b805f376f4490c17c183b829286492fdb5596d660a5196432ccdf13b64afc7211a815b255e94d4aff73a89bbe77ea897827706c2022b8106cbf4b0772a15f8fdb9b8bf4083901cb7c546978842d3051e53ac45a53d0fb7d8937eea8da6e64dd33b1ef6e9689c8eb521ffda933f1", 0xd1}, {&(0x7f0000001f40)="de44fccd10efe3c62f8181e2d222f3f94049503e021bf83560dd01fde1993c", 0x1f}, {&(0x7f0000001f80)="eec99ef4", 0x4}, {&(0x7f0000001fc0)="2f752d21d23cee56014846884ca7c82af9ff4dd5c9a9a919167b14a8254d1dca17b472f4bdd91960e8f57b9493ce99a5523e60ec9019c2cbdb7edbb4b78d5d06215cd5923c7528d7202181e0970a545291e25f1cd323f0ab0569a6a009c3fefaa5f3397081f6e117c23decd6ec7d203b1aa52cb9f8da4339aaaef965727637aaa8a84a7a7f4ba69563", 0x89}, {&(0x7f0000002080)}, {&(0x7f00000020c0)="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", 0xfc}, {&(0x7f00000021c0)="6aef6ed82ab0bc155cd8c6210fec4098b102490457df3087715167f5b23a6a37e955db5d9cc3e6b1e22eb8165db26676699c8822cd50f88d8f2fa97df90d1a34d2a3078f0381962da9e2e361da0cb76e57e3d9ee79700a9d3d030241cd7941eac1cee26e4903eea2b122dc41c922a9890ee91b193516ced63bf2eec51da759e6f8e0ab97d3b6d72bef2595a636ed38f4e0db22", 0x93}], 0x7}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002300)="21ed5b6ec4d12e9b0ac74428073b1890c4f7a27e3a4eb1657e7084f64781ccda7b3e45e2f52920701eb5c22ef6604f6b202524154273cde86c122a1c4436b228fe91bdedf3fddc3ad44a39e991a7c5c48ae08d947f1d715306bb055211e2a35daabbcba522544206a5ebc61148ebc6235b2accc17e02998c4c446a6726e5ec7cfa4801a6f795ea42e5a9202b02213376ba0e96bbfd69318e4915cd1db9c7c9a56ca4ec493087b18341b5dcc62b3bc739dea3e36b8452de7b4c510a83cd3dc30d93e95650cdb33deae936a2d5bd5ffac1d359ff2f3252", 0xd6}, {&(0x7f0000002400)="93fcc589904e30662a2dc1a32821f54a2e8d68259e4849a76b1ed562c26af65de3fe240a2439f05a88f972773bbb180a9666b7761caba8bb4de446bce918de6d222d6eb2baac39382e90c0ccd76158f835af7f96ae7a89be21ccaf866c5c3316a43c08e3589ba2d213e090bf2fedc0a4e86353282ce908faa5693bfc925e708e4bf95523dd6eef561a371515621a0005d90e8cdea20da3a072b8bf64b670fae73aa5c80baf1d22aa7d652e0537f97e94964cb2c24d9b37b29a953658386ae8a605911ed6b030fe5b28409763", 0xcc}, {&(0x7f0000002500)="9fdd4d96612e7d09db7ef9a7e6e4ee3c5ec2e405c173191552e99387ffee424d537702c69829168a2ea3d696e97fb587ee4115d35d2fb062b785936a661ba70afc6856e3776bbf0647c3dd94370cc4a917187f85f6b4cdf2c7a079390a3566718661659552b4061d513594b1e0cf1e950784067055b320aeea88", 0x7a}], 0x3}}, {{&(0x7f00000025c0)={0xa, 0x4e22, 0x5, @mcast1, 0x3}, 0x1c, &(0x7f0000002800)=[{&(0x7f0000002600)="56d2a0694fdcc925957f4c08cbe95b1333d37e3049080019849f0a108ecfc991afe4030bf655142e0c2a2d6838d27401913c6e33e7f9997163c6c899718ad0550eaa7d88e1e655ade985278fafa9699b285a1b3e47ce92a8a2d21f6591beb391e974769ac96f87883434733f32dfef23c59b74badfe9bdbfb5d58dc135", 0x7d}, {&(0x7f0000002680)="78058c28c5a7231bfb29ea932725d42cf08797753f1eab1189997a8e92bede28ac85a610d32f49ce2bd3c29a300f6c17f491a66a704d4191d398a9f11fca8510ab40102baa340d0d1be990065ff3deaac1bdeeab95aa0bfd8ce9b0b2c391", 0x5e}, {&(0x7f0000002700)="16c19a06a88662641eb908cbaa5ac4d04f75f307e9b8fa775f1d838e497daeac609442b3a7c3f4626bd00baafe96711b9f1b47d56eb22be80075aaecc90e65376cc4d8b9437b785540b815a7f58640ad5b8dbe59da9bd01725099b8b654126bb3d75a66178b96549c41ec1ce200a660388343caaad95db1946b93d33ebb14df3c4fded51275e51d79092c44ef412dbbed37d703f32aa841b93a4018b2c341200348bcbd516fed222cfd5939a43310e0186a82d9a7d6688d26c23d2cdcceddfdc0ea941f2a54db04983180f24de71a07547bd", 0xd2}], 0x3, &(0x7f0000002840)=[@dontfrag={{0x14, 0x29, 0x3e, 0x7fff}}], 0x18}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x154e, @local, 0x9}, 0x1c, &(0x7f0000002940)=[{&(0x7f00000028c0)="26eec943f99f1edbd240", 0xa}, {&(0x7f0000002900)="0becce370429c5577c5ce8a0ef3edc3e6fe11aa5a849e07db8f381b22c799a541f151f6a1aece52cf51a6b66db06903cfb01", 0x32}], 0x2, &(0x7f0000002980)=[@rthdr_2292={{0x78, 0x29, 0x39, {0x1, 0xc, 0x2, 0xc, 0x0, [@dev={0xfe, 0x80, '\x00', 0x44}, @private0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, @mcast1, @private2]}}}, @hopopts_2292={{0x48, 0x29, 0x36, {0x62, 0x5, '\x00', [@hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0xff}, @pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffa}}], 0xd8}}], 0xa, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) unshare(0x22020400) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) fstat(r1, &(0x7f0000008700)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) (async) 3.830971078s ago: executing program 3 (id=5390): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000140)=0x7) set_mempolicy(0x2, 0x0, 0xf5) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000e80)}, {&(0x7f0000000580)="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", 0x1aa}], 0x2, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) read$alg(r5, &(0x7f0000003780)=""/4096, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) pread64(0xffffffffffffffff, 0x0, 0x0, 0xf27b) openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x400480, 0x3, 0x14}, 0x18) syz_open_procfs(r6, &(0x7f0000000040)='net/udp\x00') ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 3.778413295s ago: executing program 5 (id=5391): openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x903d01) r0 = socket(0x10, 0x803, 0x0) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x1000, 0x0, 0xb4b, 0x9, 0x9, 0x1, 0x400002}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0) lseek(r3, 0x1, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x80, 0x14, 0x9, 0xf8, 0xfffffffffffffe08, 0x0, 0x0}) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) landlock_create_ruleset(&(0x7f0000000280)={0x6000, 0x0, 0x1}, 0x18, 0x1) socket$alg(0x26, 0x5, 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) rt_sigaction(0x40, &(0x7f0000000140)={&(0x7f0000000000)="24339e9e0f1c2bdfd5c4a2f10027c6c43b640febce41d3ca6566f00fc02c101c65d2150e000000dbf5", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f00000004c0)='stat\x00') recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0x34000}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000880)={0x8, @pix={0x7fffffff, 0xffffa5ca, 0x0, 0x5, 0x6, 0x0, 0xf, 0x8, 0x0, 0x0, 0x1, 0x1}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a034e6d00000000000000030000000900010073797a300000000028000000090a010400000000000000000300000008000a40000000000900020073797a3100000000140000001000010000000000000000000000000a"], 0x70}}, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) 3.300626866s ago: executing program 4 (id=5392): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000000000004"]) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000140)=0x7fffffff, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000001000000000000000000000000e10ad599dfd0775db294581ea210fe6a33ebcbe6b2042d7abb064a69c53715cd690003dd15d083c1e23ff0b5c1330d41624f19bd8d030b6ed7dadd46648e1bcf"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000e00000011100907800000000"], 0x0) sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000200001000000000000000064d3afc5400000000700000000140003007665746830000000000000000000000014007300fe800000000000000000000000000017"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0x40086e81, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) r8 = socket$unix(0x1, 0x3a7b68d0a3ecbb74, 0x0) recvmmsg$unix(r8, &(0x7f0000001040)=[{{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000440)=""/213, 0xd5}, {&(0x7f00000001c0)=""/43, 0x2b}, {&(0x7f0000000240)=""/61, 0x3d}, {&(0x7f0000000540)=""/154, 0x9a}], 0x4, &(0x7f0000000640)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000700)=""/186, 0xba}, {&(0x7f00000007c0)=""/72, 0x48}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/182, 0xb6}, {&(0x7f0000000a00)=""/26, 0x1a}, {&(0x7f0000000a40)=""/236, 0xec}, {&(0x7f0000000b40)=""/24, 0x18}, {&(0x7f0000000b80)=""/139, 0x8b}], 0x8}}, {{&(0x7f0000000cc0)=@abs, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000d40)=""/201, 0xc9}, {&(0x7f0000000e40)=""/152, 0x98}, {&(0x7f0000000f00)=""/72, 0x48}], 0x3, &(0x7f0000000fc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}], 0x3, 0x10000, &(0x7f0000001100)={0x0, 0x989680}) r9 = dup(r7) rt_sigaction(0x20, 0x0, &(0x7f0000000380)={&(0x7f0000000280)="f20f34c4e1f82b710026f3440faedac4e27d1d318f491891c6c4617167302e3e660fe6a30e000000f04383720406426e420f01da", 0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x101ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 3.124396759s ago: executing program 0 (id=5393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000008400070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000020200011800a00010071756f7461000000100002800c00014000000000000000003c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}}, 0x20008844) 2.95051645s ago: executing program 0 (id=5394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028005000800000000002c00018014000300fe88000000000000000000000000000114000400fe8000000000000000000000000000bb3c0003800c00028005000100000000002c000180140003000000000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0xc8}}, 0x0) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000100)={0x10}) (async) syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12015002e35b3320fd0b06013920010203010902240001fb8040570904"], &(0x7f0000000a40)={0x40, 0x0, 0xfffffffffffffd9f, 0x0}) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 2.832562342s ago: executing program 4 (id=5395): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)='4', 0x1}], 0x1, 0x0, 0x0, 0x8008840}, 0x4048850) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.457257309s ago: executing program 4 (id=5396): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x4) socket$netlink(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4004010) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00220f00000054b20000935aa8257f90b3"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x400c4808, &(0x7f0000000080)={0x2, 0x100, 0x20a6}) 1.283466378s ago: executing program 5 (id=5397): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8949, &(0x7f0000000580)={'bond0\x00'}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$pagemap(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, &(0x7f0000000040)) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) sendmsg$inet(r2, &(0x7f00000005c0)={&(0x7f0000000200)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000240)="8cccb1d889ef3b7cbcfc31632c0026fe64f6acd2869828a00000f7fe82ac1f8cbbbaad2595b07bc8bf65a66f19", 0x2d}, {&(0x7f0000000400)="47eb5647d18ed38ac4f18f8b9f9cdc9603c70028e8c59e2ba3d6e937abd6e78f2296769b0e0ab5a1965e95ce055ac3c0399e5f97521ceb981f01085cc069273a3c9ad5f82986c656c0a15fa23383118d7f20e16a5fadfe8e34e8a5d893a8700ece8cdf5a004609cafb037bf09b96ee275d00d44676adba8e", 0x78}, {&(0x7f0000000480)="b9d1e3e5ba9b0dbd71551e0c220818c2cf0cba37e37e5061b5d9cdf23e0f55c8c536f8dba8daa724eb00b176c105864ec20ba02fb4d8abad40c3cc60ccaa0ed75eeda987b74e4ad410a0ec47ce1cc3e44a925904798b71b58c8509038c0714a085e26da25560ce20eb514b673e77f43bd980362086db6d34e656d40ac1b5ac3e2f", 0x81}, {&(0x7f00000006c0)="29544b5fd045c3d77c43ab90376426e69391cf93fa3874f03a76e1b03bb3a5d0c365d7ace93a6358392b7d8b06ff0958ba7d099d215626133a7df301e450b00907b05f9e745a3a93b08ea8bc4f5daaf6176fb901cc65d2001e745560a90dc9c3382b54d53964b9e0f243bdca2fe690fca03f3727e0605def8bda6e549a8ce24d5ab673e332505950e6e43808ea14c085b22342376312054fa3a69f38312805f6c03ffd20f939181b6b8dcb7536cc1290551e1243a8bd9f", 0xb7}, {&(0x7f0000000540)}, {&(0x7f0000000780)="3b55415d77ee3acff2d42720030ce1d4066e14b7565259d42211e1aa3edd026d0c262b64564c708527e959879ca176f87106574c373fdbabefb293bc3927e50272ba9aad25ced16e352deeaf659ec9290a405e2e640c82457ac4ed76acc3802ede5a154c677ecd258a70cb93ec00e271908bd35c8f16b036d875e015355de0b8062508bdb129db23ba7fc7133a74f184916f3cc5c25e853424d50352153517d5258e", 0xa2}, {&(0x7f0000001600)="f26fe7ec94c8533bfbc14df83b60ead85c104506416bb4399375e0206780a637a64f5432a409de3d205fe2fe6d43eec76afcd72e1e0c6d2a7c9e5d4b34b07cad63c83185c5b2b8eb29b0c414c3aff32f34e9c300ac0e28440aaab4b8024a53192769dc6466adf04daf32f45b2bdb5d6673994287eaf0a2a26e7358d30f943b96f998be3cfcb6d292f8ac79381d2332c1930a39910d1387e3d3a1bd1d0b532f8efdd2a78d85c4df33e1332baf0201813fb45709703761ee26ace42ae51032f8c4407cc079a4208249999110212ecbf7fc5246fea66c7cfc0c22b30d96c039474a73d4a5c03f95a515adc59dad15b721573c11015432f37f5e899d28d4d7295dfe4f7c79ec548c0afe5753e7978a6570e1ec8117a43cf2724a536a7a4ec4a033eaf6d065a5af4f357872becab559cc398629e90c1e628a99dbdd609609decda0dd53446a2bc8abeebb843211407d840acd9348003a6fda733d9e4cf2fc77d6b442d3db89fb31d5131e0449a7d5b13b626f85b534529a32bf81a2cd443803e97a5d3a26c7b35f2546e3ffe56193a2026963b7fca5a0110325e7494fffd20d4034136cd1e73cfe1a39b34729ed2ea2323c891599741e85f7cb37801973065bf2b315fcee7fef72a91b89d4d2b2fb54465fe674a51b8aa2af61e178fd9d9367a890e572fe097fd44bd612588932dbbc4aaa13de60d48832d02178723cdc4de3ed2d026d716fe20c3819871c3ac703f891a924128af06b70e6fc47c319b16dccaf3b733402b62f7a6280958956307b221fda91af06d447a5f439953e73eb477358cf1f0af21601936858b9fa14156940cae29f633db4a686bdfb91427d491c76ccc0fc3c7b349502c2166efeec442d5d62ae105219e1cb66e60ea694e5690f55587209bed9e8d85b7870e0e085cbb17cf2b1e5591155e6bfcc4fc2825c3096441fafcd2be8826b53c9ef4e970e63c381007068fd2fd1944a275e445dfce2ef78f64c64f2f1fddacb76447b6975759fe2b85926ae3f7669e0154b89fc2da5c1908fdc587e33e1174175415a8ef136bbb6996a23efac8f16925c2ea9b316a63d2eebd8a7e686ee5a4c110302ac9eecdf4f652de25a76e2a643fb5fc66b4620d735f056e9a1d303958bf32f95d8d33be038c3ab8db932a822ab766ea24996ecf1b469694d6555c614dc4b0ae65adc2000ff95b00c300b4648f412c7e25722e9ed929dc9311bdd29093390bb52e42a15d482e6aeac7e54207088750d6ad8793b09ce904ca5e1b8be911a9b5e81655e9ac3db8fdf9cf3cbf74a63f5544e40768faa7e1ccf0429c33d1e92ae87d4f5949dae1b4eec43152c23f145c6068e9a8a0adb9936434344872a03695e46638d05d1932bdb65d2192744970d8bf7e749adad79885d15934d76f2d58f26f94b6e5ec048c3faf2935523d4f21b665c8aa98dc343fceaadd6f4d7e88e30cc1076d3a14549706b75ed405aa473521848831b20a548d1027a29d0d96554505e8433981e42741d94d7ca8fbc5da544edd5a7927666a289c8a91e8cc3b17d6e8189c72c7b72a83b5f7d47ae39ddf9e4fdc37d23372a04ee2c971d7e9fee52810e9ae31d1e25e17e3bc2dbbb0c489aef2fd77e6c9697e183bd5ae2ae34849ad3090b96c009f45d28a821fbabb6ff648653319cf450a60e1cabaee98e09cc8bb3bcae4e6356dfcf7560bc3341de6ac3db8d3fca523eb0147bdb4b29bf4ac225b45c34057adfb8673d4846965d255291e97805da48f71426ec9de524ab01009f107d6cd76c155f296b39426fa4a35cb2a1dfe87ba79ff4046873c81e7cd78e27bc0ab4f3980c5145446c53aa06c66b33b68f106d72b591be3fbccf68df3e3470ea9694b1f891bf88002a2929684643456a9ce781613ee0d204faed55fe71d49e1a85476398c8321d3cf4ec99cb1bda44d99d2b3cddd2b9a194140663cd9c942a0ae700701b101679691b0ff1946046314de1d405293df65bd2d52564afbfa1d38e1fc4b051a876d0a52f4b131457572f1141ac542dadfaa9c791f6865072cbdbb0903a8c791551a5a3ccb7dff5d451c19d7a9e05704c43726d3e92d8106be89e5496e024f5681333fa2988ca7ee0bb4a9bc1c70d7fb5e887f889ee284e1cb76c2d47f96b39e3baefb5cb39d8efa34c649564cbad4efbc0dd463b3e6c33e2c1ee6129b4de10454e105355b7de4a9fc9d4eec3984f7ea3e8ea7b87b0973130c9d492fcf39e734349bc99a58ee88f23d642fbe17edd5fa60a48e516be769f5b1bd36b63e756df2186a4cdf78e4379d264ef04770ff0f15c0c2e07e9cbe170b4aa0b10e913fede221b290c0a0247be7210e642536b1c90c058e87be445dfcbfab5968fd2156c246cb214f0a9a0b4210c64e5c163c75726b84b00994f4dd8d7c6d4c5b19a08d8d09f56360844d9a5c02d6bafd9730d5dc3a3193fd13bea357ee327d3cf375dbb24962dc2ae2f1a4de45905d7cd2b154dba8c4a96f1540c37fe027a8e53a65887177313112f1a8599df4e803dc05ee4eebbdff1d79b64b5c8e1bc2eff2043b32e032dca353e026e7f4a9ea59c7ca0f4061dc159c9eb9f7e77280dc57d3122c9122e360b2533c21e0dbd84c2b24d97d73c95876a35597fc93aea90c3e7c068b9eaf2becf75812885621afc0ebdb354df8ff6d426ee1895150a1b08f920fab96aa8fd42a2509b5b94d1a7dbe8609b205785b46fe15be5db72e185f2e2fb7dd70463ad4f485813a40dae260e401f32775376aa043eb70edeff9e25f5aa7f6b08c6602058d587f485e819f3b10aae63dcd7e6aa8940eb4a0fa8a74255577697d9e4296dda1c825be12d7e96c51575b4a43d87f91af10097d394c90c862c93f792dc67f5315defc63c68218e56328cd0fffb8535111ddaa226a1d60caa2a30cdfaea5d030d8595a45243aa9d337dcc79bf49237b479f3874d0db7feb333cf9335dc4e96f30f454f37469fd57e457613ef83048c817bd04af21eb6c2974f0effa4702101f507720009357b9de37f4584c8b1507e5b39c16b0bf95b945dbeb6fe76732efd544e47944cf7360aae4dde7e49209e84ce52d1ed84cf3c60271b07a5c8ebecbc9fd2c7b0174c401055c35dedcfbb46409b7972e6fd11bad0942e2ac831ace339831a90cae9d21797089e5aff67bf9b8bd2c87dd70bf6758cd9ebd1b9876dbb609c6b24cf54d566619533c9ac902f674e9c5c29866a0c0f8794c5ba548ca1061f3ac2ee2a93788b5d6716ceef7bfea021f4132f63e141540e7631ce327d9d8cb258b48251f7ccb6203785903a4db58ad011c4d57d08e88c28ec5074d03d77b6eb9a90a4e688e1ebfd8f10b092548aa7f76b9c7e5a9ffab68ffd273ab08968047bcdb28ed1e34bbcabbaab2b14edf36bef011271385b65c38760d36159cffba1935b0e8db191f3fe057eb776710db6e50b02e0ed019c2469c6d6f610e0aada5381f580a61e0f759b14ac424fd1234ca5453343386facbaeaf92c843f54696e6a723d92c1957f53435a917ff950062a9c407be20c1a1c4a73c826aaae0696124f6fb5f7d223904910e34b6fe583bf0fc8f25ea229828672edc59fb4eb971ce66a3c4321ed53d744fe707b96c8e1c9b40bb6632643dc0a9d6aeab81f1d7f6be1f0a5bf5c8267c272d09f2f2117fc0ffbf835466779335c7230eb75beef1dd8904c6881e9fa838fd0d1f87a33abbf1405f7488aba9a121fc582b460585029c02afa0b1d3a98d2211203abe315e43ab031cb559d9b5cb13c00ac774e5db7fab383c39cc75a7cb65c860f96cf4d9b0d4e6223660d5e95cabf49e2a1393e5aac4d5c4dd80a583014482c09d81c5d1a0073bf56e4fdc5cb982cc6483253ab41e451544eaa4cb54331951858de686218f815b9ecc5abfefdcd9ecae79109487e6fc33527e09ec386490152552215f528e73724970dc287d566e2ccb9380e4305be6fabbc58d5165240cec6934398ed92bb52632705a5c618da658215829e965efa8eacfd8ec0f3e12dae12247389131e852ef76dc37e2d339e6e37ffba7af0da9f59cb5c94907b36ce08b2e3d61f4f6b7f4d3fdee8b4ab60549f8f6866be348838602a25221b78d53d9aab22e9db2f37cc18605cee1e3c9e8a13751089dda15861c83cf4141a2ffd448df220e40cee8805b03e63e5619cc775aee8befbe7341dc885054dcdf6a2351ebcab4771c1e9d0bf26f543b96478a2c01f0eabf70f471d9378783b14a78c97bee3e961f2ed8eb02fd7bd435fbccded9ea758afb9a1c9cbd8f3c74d37c439a08fc18cc066488fb97c26a8303ad17bc5127d7b293c2836e5d3b18aa69c9e68a5e4ec8dd1558a4e2428fb14f0efac0d75fefbb9bfbfc7c841fc19bcd564a8776b882db8eca70287e655251afd6970dd1e0d7821ea4b1e3719a4976e6713bb5050c3e77f2b3b1a507499af22cdbb36c9fdbd30e688738b0ad68855a77c221aa20f37a98dffd3fd771651fc7bd098585f44dfcb0595db08f89ea3ae19060c4aa0a450fce4043fbaf5ad685dc0623a7b935349c6beeda6a2ebfc60960c96e5cf5c20475670d1293f92f331de7c5dd88890c444d43f6fa7da1203a0da10f050e3fd4ad3e222ba9f1cf381cdd533ddd8b0043dd3bf8060b040a58973b3ab5a0aba29843a24a6ff6ef73cd71a4b272d5a8669f46fd9a43df9a4a32c06c874704a8301901d3e7753359932375983187fa4525a00c2ab24c034f0cc32858d49bf4d94ff4f1b1744882821e0c057b5f67281539644fa431549f5ef80f7b99a5d0b8c3cf7161f5fdd43f040371e40c93e7c29ab90c7338090a7298e201ee4455b7b92c1990acc83c43a11612db628eb8cbd21f8238c64c9bf109e7a5c71950eea0aa19c398cf2f1ef791eee177dbdab1bdc84397e4f0298ecae8f3095950733aa6502a5a2515c0caa84fce60e6b39a074e55b912fb0cfd6bee78f6db7cb536c03ae69416dce6efff7294ac711de2c01270f1e9d72776e48f2bc883075555a0ac957f7f8ad58bbd5d0746daed8ab39b22780bba781af2322d3a2d6a315056c1f88e5140cbb78a11b11260fd3855252fc1c2de4b335c1bf2bea7e528ca6c5afd1be2d1720fa08e4bc1d17adb3b0fc1a32c0a96c0b729de673b6fe39f1edc9b41f032e46bb04260687037b9275a8fd2e61da87dd07f209839a89096c27261adfdb7fcb0a925175a3c161e63177b25919f9363b27a047980686438401e9a329cfe5c0e1559953abaa2da656232660b1a6bffc437b8eaa470514dc3a874607bc052c123f97d49a322671b427c8dfb52f3429f1559bdca36f8242852e1007bc86c0e11ca6f00d90575a5dd692e5067419b7cf3c9bf6c8963d896485d2223365c58c35173349bf31d374525d32678dededb32a7cf3c38b4bf71f7ab37717499b394136591d4017c7c905a3f40cd2799656d3d86d517db4d1005ce08ab90011e7262c73ec7d01d20e09a3d1d6798b461e749ae3bf86ed1b5eddc8751cdd58533d24bfc58ccb53958fbcb29d7325f566c8f804db3c5db4a0bf740fbac50d1035a1bfc592e2151ade981f480aedcea2ae6e8f9de84b142d54932420c88196e6fdba37d653a873d016ef62af4b1e6ba5e2a9fadfc6584244fbee5dfecf77ac45a41e1a4bf3bb88706294c996d268dc7ace64588533983beb289bcdc2c728edb5e8fe99749fa5942734e76ff3567ca69f4dbde5725d9e3e9f138a0521197e650d3178091891c9ee283045893f78dd94c039a123609811ab7cc7fe347c60f0dc730d22e5115d8f7fa975dca7f3ca0fb05d25b4d4d9c61bb4ae7fd897afc49", 0xffe}, {0x0}], 0x8, &(0x7f0000000980)=[@ip_retopts={{0x88, 0x0, 0x7, {[@end, @timestamp_addr={0x44, 0x44, 0x17, 0x1, 0x1, [{@rand_addr=0x64010100, 0x100}, {@loopback, 0x7}, {@loopback, 0xc00}, {@multicast1, 0x6}, {@broadcast, 0x1000}, {@private=0xa010101, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x52d287af}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x6, "ddb333ef"}, @timestamp_prespec={0x44, 0xc, 0xb7, 0x3, 0x0, [{@local, 0xfffffff9}]}, @timestamp={0x44, 0x20, 0xb1, 0x0, 0xc, [0x5, 0xfff, 0x101, 0x4, 0x200, 0x800, 0x6]}]}}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x800}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe7e0}}], 0x120}, 0x4000080) add_key(&(0x7f0000000000)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = fsopen(&(0x7f0000000680)='pvfs2\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='acl\x00\x9a\v\x9e\xd4\x10\x18\xe6\xca\xf1\x0f\xc8H\xc8#A@\x9a\xe4r\x89h8\x1b\xab\x84<\x85\xe5\x88j_<(nW4\xe4\xbb\xe9PF\x1b|\xc4\xa1\xa0\x9e\x81\xa0lZS\'\x8f\x91\xf7\x03\xa2\x8cd\x1f\xd3y\xce\x1asj\x98\xb5\x95\xdf\x915\a\x97=\xa9\xe7A\x12\xc2\xf5_\x11\b\x00\x00\x00\x00\x00\x00\x00\x1c\x1e:^\xdeNT\xe8O\xe8\x1ez\x9e\xc8\x8eo@Ti\xf6\xe5F\x0fv\xf1H\xdf\xf1\xe1\x9en\xc1\xd1\xca\xca\x89\"\xe4\x9c\xe6\xc2\xd8\xaa\xf6\f>\x19\x15t=\x1eXp\xba~\xb8xd>\x92LO\x06\xa3\xfdS\x01\xd1GE\x0f\x98L\x99#\xef5\xed[H\x104\xcd\xe23l\xd1\x9fc5\x87\xb4\xd7\xf6\xecr)\x0f\xc7\xe4\x1d[\x82\xc3\x18\xa4{\xecF\x81\xdb', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xffffffffffffff9c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/77, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x8080000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000600)={0x17}) openat$cgroup_ro(r6, &(0x7f00000001c0)='memory.swap.events\x00', 0x0, 0x0) 1.14648215s ago: executing program 0 (id=5398): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x24e}], 0x1}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x80000009}}}, 0x10, 0x0}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0xec}]}}}}}}}}, 0x0) 1.038002686s ago: executing program 1 (id=5399): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="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", 0xfffffe95}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c5500f2ffffffffffffff0000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0x11}, {&(0x7f0000003240)="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", 0xdc1}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0xf000000) 856.246958ms ago: executing program 1 (id=5400): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000ec00008001f005500000008001d00d1"], 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 518.341744ms ago: executing program 1 (id=5401): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x8}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000001c0)=""/99) r3 = socket$inet6(0xa, 0x3, 0x87) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume_offset', 0xa102, 0x60) ioctl$FBIOGET_FSCREENINFO(r4, 0x4602, &(0x7f00000004c0)) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x1, 0x32}, 0x2, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) syz_emit_ethernet(0x8a, &(0x7f0000000780)=ANY=[@ANYBLOB="195df410dc2400060000000086dd60aac4e000542c00fe8000000000000000000000000000654d8000000000000000000000000000aa2b0000000000000004000206000000000420880b0000000000000800000086dd080088be0000000010eb0200000020ff0000021b00000000000000000000080065580000000000000000000000000000000000003d500cd74bab00e02e67135891f1e7e92ffb5052e47fa2118d57d10e0314ee57f9a9ba38d9f2a41dab8786ca5e3f72849cc258ebcd0e477048b5c3deea17ed2ef94bf8b176a3820dad0c"], 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010029bd09000000000000000000", @ANYRES32=0x0, @ANYBLOB="4cf2040000000000140003006e657464657673696d300000000000001c00"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x40) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r5) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x14, r6, 0x1, 0xfffffffd, 0x25dfdbff}, 0x14}}, 0x90) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x57, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="180000e6852542cbddb6576904306b6600", @ANYRES16, @ANYBLOB="040026bd7000fedbdf25000000000800090003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008095) 490.232701ms ago: executing program 3 (id=5402): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000080)={0xfffffffffffffffe, 0x8, [0xd609, 0xfffffffffffffdd4, 0x8000000000000001, 0xc4ee], &(0x7f0000000040)=[0x0]}) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x10001, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000100)=0xa) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x4081, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) (async, rerun: 64) chroot(&(0x7f00000001c0)='./file0\x00') (rerun: 64) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) preadv2(r3, &(0x7f00000024c0)=[{&(0x7f0000002240)=""/20, 0x14}, {&(0x7f0000002280)=""/23, 0x17}, {&(0x7f00000022c0)=""/43, 0x2b}, {&(0x7f0000002300)=""/23, 0x17}, {&(0x7f0000002340)=""/156, 0x9c}, {&(0x7f0000002400)=""/131, 0x83}], 0x6, 0x142e, 0x9, 0x4) (async) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000002540)={0x2, 0x9}, 0x2) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002580), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000002840)={0x4, 0x0, [{0x8080000, 0x4c, &(0x7f00000025c0)=""/76}, {0x1, 0x82, &(0x7f0000002640)=""/130}, {0x4000, 0x2e, &(0x7f0000002700)=""/46}, {0x6000, 0xd6, &(0x7f0000002740)=""/214}]}) (async, rerun: 64) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000002900)=""/153) (async, rerun: 64) openat$nci(0xffffffffffffff9c, &(0x7f00000029c0), 0x2, 0x0) (async) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000002a00), 0x2, 0x0) fchmod(r6, 0x10c) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002a40), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000002a80)) (async) write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, &(0x7f0000002ac0)={0x14}, 0x14) (async) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000002b00), 0x40800, 0x0) (async) r9 = fsmount(r3, 0x0, 0x80) ioctl$FS_IOC_GETFSUUID(r9, 0x80111500, &(0x7f0000002b40)) (async, rerun: 64) r10 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000002b80), 0x200000, 0x0) (rerun: 64) ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f0000002c40)={0x48, 0x8, r2, 0x0, 0xfffffffffffffff8, 0x5c, &(0x7f0000002bc0)="bafd23be17da6186d7be82f43fed9fd3ee793f9b7b90ccf3861e6a492e22369f3febe2dbdc2007164a21d8518e556b7140304a0a82e5971995853422f41a704b9cfd250a39f1994aafe0c27fe2744e638ed6824d6a2065e93832d6cc", 0x1}) (async) write$uinput_user_dev(r10, &(0x7f0000002cc0)={'syz0\x00', {0x4, 0x7, 0x0, 0xffc0}, 0x2c, [0x200, 0x9, 0x2e06, 0x3ff, 0x1, 0x6, 0xcbd, 0x5, 0xfffffffb, 0x7, 0xffffff80, 0xd87e, 0x59, 0x7, 0x10000, 0x16e6, 0x6, 0x1, 0x0, 0x0, 0x9, 0x0, 0x6, 0xf, 0x5, 0x5, 0x9, 0x4, 0x0, 0x3, 0x2, 0xaf, 0x1, 0x7, 0x40, 0x6, 0x5, 0x1, 0x5a, 0xffffffff, 0x9, 0x8, 0x9, 0x2, 0x7, 0x10, 0x10001, 0x10001, 0xfffffffd, 0x1, 0x5, 0x0, 0xfffffffc, 0x70, 0x4, 0xfff, 0xfff, 0x101, 0x9, 0x0, 0x81, 0x5a877871, 0x5, 0x6], [0x4, 0x2, 0x2, 0x3, 0xfffffffe, 0x9, 0x400, 0x105, 0x3, 0x6, 0x400, 0x1, 0x5b0c732d, 0x3, 0x86, 0x400, 0x7, 0x81, 0x2, 0x7, 0x34479446, 0xa, 0xc, 0x80000001, 0x2, 0x8, 0x5, 0x2, 0x7ff, 0x8000, 0x9, 0x0, 0x80000001, 0x212, 0x7, 0xffffffff, 0xe16, 0x0, 0x7, 0x3, 0xdc, 0xfffff001, 0x6, 0x9, 0x1f, 0x6, 0x2, 0x35b8fa26, 0x2, 0x6, 0x6, 0x14a870ff, 0x80000001, 0x5, 0x9, 0x80000001, 0x101, 0x6, 0x6, 0x4, 0x1, 0x1, 0x400, 0x20000000], [0xffe00000, 0x1000, 0x40, 0x9, 0x0, 0x7, 0xfffffffa, 0x7, 0x3, 0xe7, 0x0, 0x200, 0x6, 0x1, 0x8, 0x1, 0xe, 0x2, 0x9, 0x7, 0x1, 0x200, 0x2, 0x9, 0x9, 0x0, 0xe0000, 0x3, 0xfffffffc, 0x401, 0x0, 0x5, 0x5, 0x7, 0x0, 0x7, 0x8, 0x7, 0x5c, 0x6, 0x0, 0x1, 0xf6e, 0x0, 0x5, 0x4, 0x3ce, 0x9, 0x7, 0x8, 0x3000000, 0x3, 0xddd, 0x87d, 0x0, 0x9, 0x80000001, 0x0, 0x3ff, 0x28c, 0x1, 0x41, 0xfff, 0x8], [0x6000, 0x0, 0x0, 0xa, 0x8001, 0xfffffffb, 0x9, 0x7, 0x8, 0x1, 0x6, 0xa42, 0xfffffffc, 0x5, 0x8, 0x7, 0x6, 0x6, 0x2, 0x8001, 0xa12c, 0x0, 0x16c4bb92, 0x6e, 0x0, 0x6, 0x0, 0x9, 0x0, 0x4, 0x10, 0x97530000, 0x80, 0x400, 0x7fff, 0x4, 0x3, 0x0, 0xe88, 0x301d, 0x1, 0xe, 0x0, 0x80, 0x0, 0x9, 0x3, 0x800, 0x1, 0x1, 0x40, 0x7, 0x200, 0x5, 0x9, 0x5f, 0xffff7540, 0x7, 0xfffffffa, 0x5, 0xfffff50c, 0x0, 0x7fffffff, 0xfffffbff]}, 0x45c) r11 = shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_STAT_ANY(r11, 0xf, &(0x7f0000003140)=""/44) (async) chroot(&(0x7f0000003180)='./file1\x00') (async) setpriority(0x0, r4, 0x2) (async) getsockopt$IP_SET_OP_GET_FNAME(r8, 0x1, 0x53, &(0x7f00000031c0)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000003200)=0x2c) 245.184379ms ago: executing program 0 (id=5403): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = syz_usb_connect(0x2, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x2, 0x5b, 0xbd, 0x97, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000140)={0x20, 0x12, 0x3, "f8b41f"}, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000980)={0x34, &(0x7f00000006c0)={0x40, 0x14, 0x1, "f6"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000480)={0x1c, 0x0, 0x0, 0x0}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0xfffffffc, 0x0, {0x2}, [@typed={0x8, 0x1800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r2}]}]}, 0x28}}, 0x0) 244.395265ms ago: executing program 3 (id=5404): r0 = syz_open_dev$media(&(0x7f0000000080), 0x2e17, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f00000011c0), 0x0}) socket$nl_generic(0x10, 0x3, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="c800000000020104ba00000000000000020000003c0001800c00028005000100210000002c000180140003000000000000000000000000000000000114639100fe8000000000000000000000000000bb3c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c0001"], 0xc8}}, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000300)={&(0x7f0000000200)}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000777a078afbd825c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db2100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc2351270000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r8, r6) writev(r4, &(0x7f0000001400)=[{&(0x7f0000001280)="18", 0x1}], 0x1) splice(r3, 0x0, r5, 0x0, 0x4ffe2, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1, 0x0, 0xff7f}, 0x0) recvmsg$kcm(r9, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40) 0s ago: executing program 5 (id=5405): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xc, 0xc8, 0xfa}}}, 0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000001780)={&(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[{}, {}, {}], &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x6, 0x4}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003980)=ANY=[@ANYBLOB="140000001000010000000000184000000000000a20000000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021380011800a0001006c696d6974000000280002800c00024000000000000000030c00014000000000000001010c0001400000000000000101b81700000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000008c1703800c0000800800034000000002"], 0x1874}, 0x1, 0x0, 0x0, 0x8010}, 0x0) syz_emit_vhci(0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x9c, 0x4) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) kernel console output (not intermixed with test programs): after parsing attributes in process `syz.1.5052'. [ 1250.172144][ T9503] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1250.352136][ T9503] usb 5-1: Using ep0 maxpacket: 8 [ 1250.360524][ T9503] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1250.369392][ T9503] usb 5-1: config 0 has no interface number 0 [ 1250.378704][ T9503] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1250.389022][ T9503] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1250.400292][ T9503] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1250.428080][ T9503] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.467859][ T9503] usb 5-1: config 0 descriptor?? [ 1250.498354][ T9503] hso 5-1:0.1: Failed to find BULK IN ep [ 1250.988417][T22458] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5051'. [ 1251.013158][T22117] usb 5-1: USB disconnect, device number 74 [ 1251.505347][ T30] audit: type=1326 audit(1755289155.244:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22483 comm="syz.3.5058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bd358ebe9 code=0x7ffc0000 [ 1251.531796][ T30] audit: type=1326 audit(1755289155.264:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22483 comm="syz.3.5058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9bd358ebe9 code=0x7ffc0000 [ 1251.610622][ T30] audit: type=1326 audit(1755289155.264:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22483 comm="syz.3.5058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bd358ebe9 code=0x7ffc0000 [ 1251.640783][ T30] audit: type=1326 audit(1755289155.264:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22483 comm="syz.3.5058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9bd358ebe9 code=0x7ffc0000 [ 1252.732216][T20349] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1252.923855][T20349] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1253.020565][T20349] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1253.116288][T20349] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1253.172693][T20349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.227579][T20349] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1253.261364][T20349] usb 5-1: invalid MIDI out EP 0 [ 1253.498800][T20349] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1253.639369][T20349] usb 5-1: USB disconnect, device number 75 [ 1253.834468][T22505] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1254.104670][ T9515] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1254.105610][ T5963] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1254.145650][ T9501] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1254.160863][T21014] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1254.166941][ T9515] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1254.205844][ T9501] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1254.219134][T21014] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1254.263900][ T5963] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1254.293137][ T9501] usb 4-1: USB disconnect, device number 34 [ 1254.326872][ T5963] usb 2-1: USB disconnect, device number 53 [ 1254.390184][ T9515] usb 1-1: USB disconnect, device number 29 [ 1254.438563][T22520] random: crng reseeded on system resumption [ 1254.712305][T21014] usb 3-1: USB disconnect, device number 44 [ 1254.922875][ T5937] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1255.104673][ T9501] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1255.128893][ T9515] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1255.194283][T22526] FAULT_INJECTION: forcing a failure. [ 1255.194283][T22526] name failslab, interval 1, probability 0, space 0, times 0 [ 1255.222384][ T5937] usb 5-1: Using ep0 maxpacket: 32 [ 1255.231249][ T5937] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1255.237750][T22526] CPU: 1 UID: 0 PID: 22526 Comm: syz.5.5071 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 1255.237783][T22526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1255.237798][T22526] Call Trace: [ 1255.237808][T22526] [ 1255.237817][T22526] dump_stack_lvl+0x189/0x250 [ 1255.237850][T22526] ? __pfx____ratelimit+0x10/0x10 [ 1255.237881][T22526] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1255.237907][T22526] ? __pfx__printk+0x10/0x10 [ 1255.237953][T22526] should_fail_ex+0x414/0x560 [ 1255.237988][T22526] should_failslab+0xa8/0x100 [ 1255.238022][T22526] __kmalloc_cache_noprof+0x70/0x3d0 [ 1255.238052][T22526] ? sctp_add_bind_addr+0x8c/0x370 [ 1255.238085][T22526] sctp_add_bind_addr+0x8c/0x370 [ 1255.238118][T22526] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1255.238150][T22526] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1255.238179][T22526] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1255.238209][T22526] ? sctp_v6_is_any+0x64/0x80 [ 1255.238241][T22526] ? sctp_copy_one_addr+0x93/0x360 [ 1255.238273][T22526] sctp_bind_addr_copy+0xb3/0x3c0 [ 1255.238303][T22526] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1255.238333][T22526] sctp_connect_new_asoc+0x2e0/0x690 [ 1255.238372][T22526] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1255.238404][T22526] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1255.238436][T22526] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1255.238462][T22526] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1255.238494][T22526] sctp_sendmsg+0x155c/0x2810 [ 1255.238539][T22526] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1255.238576][T22526] ? aa_sk_perm+0x81e/0x950 [ 1255.238613][T22526] ? __pfx_aa_sk_perm+0x10/0x10 [ 1255.238649][T22526] ? sock_rps_record_flow+0x19/0x410 [ 1255.238698][T22526] ? inet_sendmsg+0x2f4/0x370 [ 1255.238739][T22526] __sock_sendmsg+0x19c/0x270 [ 1255.238775][T22526] ____sys_sendmsg+0x52d/0x830 [ 1255.238808][T22526] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1255.238844][T22526] ? import_iovec+0x74/0xa0 [ 1255.238876][T22526] ___sys_sendmsg+0x21f/0x2a0 [ 1255.238905][T22526] ? __pfx____sys_sendmsg+0x10/0x10 [ 1255.238975][T22526] ? __fget_files+0x2a/0x420 [ 1255.238996][T22526] ? __fget_files+0x3a0/0x420 [ 1255.239031][T22526] __sys_sendmmsg+0x227/0x430 [ 1255.239063][T22526] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1255.239085][T22526] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 1255.239153][T22526] ? ksys_write+0x22a/0x250 [ 1255.239188][T22526] ? __pfx_ksys_write+0x10/0x10 [ 1255.239216][T22526] ? rcu_is_watching+0x15/0xb0 [ 1255.239249][T22526] __x64_sys_sendmmsg+0xa0/0xc0 [ 1255.239277][T22526] do_syscall_64+0xfa/0x3b0 [ 1255.239310][T22526] ? lockdep_hardirqs_on+0x9c/0x150 [ 1255.239341][T22526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.239366][T22526] ? clear_bhb_loop+0x60/0xb0 [ 1255.239397][T22526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.239419][T22526] RIP: 0033:0x7feac918ebe9 [ 1255.239443][T22526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1255.239463][T22526] RSP: 002b:00007feaca005038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1255.239490][T22526] RAX: ffffffffffffffda RBX: 00007feac93b5fa0 RCX: 00007feac918ebe9 [ 1255.239508][T22526] RDX: 0000000000000001 RSI: 0000200000002340 RDI: 0000000000000004 [ 1255.239522][T22526] RBP: 00007feaca005090 R08: 0000000000000000 R09: 0000000000000000 [ 1255.239537][T22526] R10: 00000000200400c0 R11: 0000000000000246 R12: 0000000000000002 [ 1255.239553][T22526] R13: 00007feac93b6038 R14: 00007feac93b5fa0 R15: 00007feac94dfa28 [ 1255.239590][T22526] [ 1255.332265][ T9501] usb 4-1: device descriptor read/64, error -71 [ 1255.343856][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.622746][ T9501] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1255.624064][ T5937] usb 5-1: config 0 descriptor?? [ 1255.842156][ T5937] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1255.843522][ T9501] usb 4-1: device descriptor read/64, error -71 [ 1255.859375][ T5937] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1255.878377][ T5937] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1256.082645][ T9501] usb usb4-port1: attempt power cycle [ 1256.358000][T22538] syzkaller0: entered promiscuous mode [ 1256.366068][T22538] syzkaller0: entered allmulticast mode [ 1256.603334][ T9501] usb usb4-port1: Cannot enable. Maybe the USB cable is bad? [ 1256.762171][ T9501] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 1256.853955][ T9501] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 1256.862991][ T9501] usb 4-1: config 0 has an invalid interface number: 3 but max is 2 [ 1256.929509][ T9501] usb 4-1: config 0 has no interface number 0 [ 1256.936626][ T9501] usb 4-1: config 0 has no interface number 1 [ 1257.474673][ T9501] usb 4-1: too many endpoints for config 0 interface 3 altsetting 255: 255, using maximum allowed: 30 [ 1257.496105][ T9501] usb 4-1: config 0 interface 3 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1257.520093][ T9501] usb 4-1: config 0 interface 3 has no altsetting 0 [ 1257.530341][ T9501] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1257.551374][ T9501] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.592146][ T9503] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1257.747873][ T9501] usb 4-1: config 0 descriptor?? [ 1257.931763][ T9503] usb 1-1: config 0 has no interfaces? [ 1258.022541][ T9501] usb 4-1: Could not set interface, error -71 [ 1258.078315][ T9503] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1258.133859][ T9501] usb 4-1: selecting invalid altsetting 0 [ 1258.169364][ T9503] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.179344][ T9501] usb 4-1: Could not set interface, error -22 [ 1258.220875][ T9503] usb 1-1: Product: syz [ 1258.364982][ T9503] usb 1-1: Manufacturer: syz [ 1258.465675][ T9501] usb 4-1: USB disconnect, device number 38 [ 1258.622129][ T9503] usb 1-1: SerialNumber: syz [ 1258.654623][ T9503] usb 1-1: config 0 descriptor?? [ 1260.281368][ T9501] usb 1-1: USB disconnect, device number 31 [ 1262.321105][T22583] tipc: Enabled bearer , priority 0 [ 1262.333182][T22583] syzkaller0: entered promiscuous mode [ 1262.338803][T22583] syzkaller0: entered allmulticast mode [ 1262.365660][T22583] netlink: 232 bytes leftover after parsing attributes in process `syz.5.5085'. [ 1262.384288][T22586] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5087'. [ 1262.488503][T22583] tipc: Resetting bearer [ 1262.546607][T22591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5089'. [ 1262.560431][T22583] tipc: Disabling bearer [ 1262.597742][T22594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5089'. [ 1262.620604][T22602] syzkaller1: entered promiscuous mode [ 1262.643734][T22602] syzkaller1: entered allmulticast mode [ 1262.679453][T22591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5089'. [ 1262.708949][T22596] netlink: 'syz.1.5091': attribute type 30 has an invalid length. [ 1262.982280][T20349] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1263.032409][ T9503] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1263.081109][T22617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5097'. [ 1263.093678][T22617] openvswitch: netlink: nsh attr 8224 is out of range max 3 [ 1263.104297][ T9501] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1263.112342][T22617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1263.141252][T22617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5097'. [ 1263.152530][T20349] usb 4-1: Using ep0 maxpacket: 8 [ 1263.160255][T20349] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1263.175150][T20349] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1263.186745][T20349] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1263.203202][ T9503] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1263.216876][T20349] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 1263.225255][ T9503] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1263.248039][ T9503] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1263.262580][T20349] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.268393][ T9503] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1263.271521][T20349] usb 4-1: Product: syz [ 1263.280200][ T9503] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.303804][ T9501] usb 6-1: config 0 has no interfaces? [ 1263.318837][T20349] usb 4-1: Manufacturer: syz [ 1263.320872][ T9501] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1263.333229][ T9501] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.334635][T20349] usb 4-1: SerialNumber: syz [ 1263.341264][ T9501] usb 6-1: Product: syz [ 1263.365167][ T9501] usb 6-1: Manufacturer: syz [ 1263.369965][T20349] usb 4-1: config 0 descriptor?? [ 1263.379497][ T9501] usb 6-1: SerialNumber: syz [ 1263.416264][ T9503] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1263.434551][ T9501] usb 6-1: config 0 descriptor?? [ 1263.515743][T22621] syzkaller1: entered promiscuous mode [ 1263.523869][T22621] syzkaller1: entered allmulticast mode [ 1263.593056][T22591] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1263.611027][T20349] usb 4-1: USB disconnect, device number 39 [ 1263.728108][ T9503] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1263.766689][ T1102] RDS/tcp: send to fe80::c on cp [0]returned -104, disconnecting and reconnecting [ 1263.780777][ T9503] usb 1-1: USB disconnect, device number 32 [ 1263.895794][T22626] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5101'. [ 1263.985887][T22628] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5102'. [ 1264.462170][ T9503] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 1264.638460][ T9503] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 1264.647164][ T9503] usb 1-1: config 5 has no interface number 0 [ 1264.680687][ T9503] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1264.696553][ T9503] usb 1-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1264.709106][ T9503] usb 1-1: config 5 interface 123 has no altsetting 0 [ 1264.754142][ T9503] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1265.132111][ T9503] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.224172][ T9503] usb 1-1: Product: syz [ 1265.270630][ T9503] usb 1-1: Manufacturer: syz [ 1265.276805][ T9503] usb 1-1: SerialNumber: syz [ 1265.545476][T22651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5110'. [ 1265.560839][T22652] netlink: 'syz.1.5110': attribute type 11 has an invalid length. [ 1265.562465][ T9503] ni6501 1-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1265.660595][ T9503] usb 1-1: USB disconnect, device number 33 [ 1265.805124][T22657] input: syz1 as /devices/virtual/input/input50 [ 1266.018570][ T9503] usb 6-1: USB disconnect, device number 8 [ 1266.331503][ T30] audit: type=1326 audit(1755289170.064:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22667 comm="syz.4.5117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1558ebe9 code=0x7ffc0000 [ 1266.398678][ T30] audit: type=1326 audit(1755289170.064:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22667 comm="syz.4.5117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1558ebe9 code=0x7ffc0000 [ 1266.436841][ T30] audit: type=1326 audit(1755289170.064:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22667 comm="syz.4.5117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7faf1558ebe9 code=0x7ffc0000 [ 1266.464776][ T30] audit: type=1326 audit(1755289170.064:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22667 comm="syz.4.5117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1558ebe9 code=0x7ffc0000 [ 1266.618611][ T30] audit: type=1326 audit(1755289170.064:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22667 comm="syz.4.5117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1558ebe9 code=0x7ffc0000 [ 1266.798973][ T30] audit: type=1326 audit(1755289170.064:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22667 comm="syz.4.5117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7faf1558ebe9 code=0x7ffc0000 [ 1266.873975][T22677] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 1266.887681][ T30] audit: type=1326 audit(1755289170.064:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22667 comm="syz.4.5117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1558ebe9 code=0x7ffc0000 [ 1266.887732][ T30] audit: type=1326 audit(1755289170.064:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22667 comm="syz.4.5117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1558ebe9 code=0x7ffc0000 [ 1266.887774][ T30] audit: type=1326 audit(1755289170.064:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22667 comm="syz.4.5117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7faf1558ebe9 code=0x7ffc0000 [ 1266.887816][ T30] audit: type=1326 audit(1755289170.064:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22667 comm="syz.4.5117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1558ebe9 code=0x7ffc0000 [ 1266.933781][ C1] vkms_vblank_simulate: vblank timer overrun [ 1266.986466][ T9503] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1267.182215][ T9503] usb 4-1: device descriptor read/64, error -71 [ 1267.196623][T22681] pim6reg: entered allmulticast mode [ 1267.277577][T22683] IPv6: sit1: Disabled Multicast RS [ 1267.320476][T22683] sit1: entered allmulticast mode [ 1267.432162][ T9503] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1267.672222][ T9503] usb 4-1: device descriptor read/64, error -71 [ 1267.718721][T22707] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1267.782710][ T9503] usb usb4-port1: attempt power cycle [ 1268.002303][T20349] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1268.122175][ T9503] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1268.142907][ T9503] usb 4-1: device descriptor read/8, error -71 [ 1268.155243][T20349] usb 2-1: Using ep0 maxpacket: 32 [ 1268.161890][T20349] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1268.171877][T20349] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.184228][T20349] usb 2-1: config 0 descriptor?? [ 1268.383538][ T9503] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1268.410019][T20349] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1268.427825][ T9503] usb 4-1: device descriptor read/8, error -71 [ 1268.542522][ T9503] usb usb4-port1: unable to enumerate USB device [ 1269.424866][T22742] sctp: [Deprecated]: syz.0.5135 (pid 22742) Use of int in maxseg socket option. [ 1269.424866][T22742] Use struct sctp_assoc_value instead [ 1269.560069][T22744] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1269.762197][T22117] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1269.797117][T22754] __nla_validate_parse: 3 callbacks suppressed [ 1269.797131][T22754] netlink: 26188 bytes leftover after parsing attributes in process `syz.1.5140'. [ 1269.914523][T22117] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.925149][T22117] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1269.943469][T22117] usb 6-1: config 1 has no interface number 0 [ 1269.951814][T22117] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1269.964524][T22117] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1269.980887][T22117] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1269.990800][T22117] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.999584][T22117] usb 6-1: Product: syz [ 1270.004041][T22117] usb 6-1: Manufacturer: syz [ 1270.008788][T22117] usb 6-1: SerialNumber: syz [ 1270.628427][T22765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5145'. [ 1270.652476][ T5944] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1270.670837][T22767] FAULT_INJECTION: forcing a failure. [ 1270.670837][T22767] name failslab, interval 1, probability 0, space 0, times 0 [ 1270.689472][T22767] CPU: 1 UID: 0 PID: 22767 Comm: syz.0.5146 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 1270.689503][T22767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1270.689516][T22767] Call Trace: [ 1270.689525][T22767] [ 1270.689537][T22767] dump_stack_lvl+0x189/0x250 [ 1270.689560][T22767] ? __pfx____ratelimit+0x10/0x10 [ 1270.689588][T22767] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1270.689615][T22767] ? __pfx__printk+0x10/0x10 [ 1270.689660][T22767] should_fail_ex+0x414/0x560 [ 1270.689693][T22767] should_failslab+0xa8/0x100 [ 1270.689717][T22767] __kmalloc_cache_noprof+0x70/0x3d0 [ 1270.689738][T22767] ? sctp_add_bind_addr+0x8c/0x370 [ 1270.689770][T22767] sctp_add_bind_addr+0x8c/0x370 [ 1270.689813][T22767] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1270.689844][T22767] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1270.689875][T22767] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1270.689894][T22767] ? sctp_v6_is_any+0x64/0x80 [ 1270.689923][T22767] ? sctp_copy_one_addr+0x93/0x360 [ 1270.689952][T22767] sctp_bind_addr_copy+0xb3/0x3c0 [ 1270.689976][T22767] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1270.690001][T22767] sctp_connect_new_asoc+0x2e0/0x690 [ 1270.690024][T22767] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1270.690044][T22767] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1270.690070][T22767] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1270.690094][T22767] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1270.690122][T22767] sctp_sendmsg+0x155c/0x2810 [ 1270.690159][T22767] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1270.690182][T22767] ? aa_sk_perm+0x81e/0x950 [ 1270.690206][T22767] ? __pfx_aa_sk_perm+0x10/0x10 [ 1270.690240][T22767] ? sock_rps_record_flow+0x19/0x410 [ 1270.690265][T22767] ? inet_sendmsg+0x2f4/0x370 [ 1270.690290][T22767] __sock_sendmsg+0x19c/0x270 [ 1270.690314][T22767] ____sys_sendmsg+0x52d/0x830 [ 1270.690334][T22767] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1270.690354][T22767] ? import_iovec+0x74/0xa0 [ 1270.690382][T22767] ___sys_sendmsg+0x21f/0x2a0 [ 1270.690404][T22767] ? __pfx____sys_sendmsg+0x10/0x10 [ 1270.690456][T22767] ? __fget_files+0x2a/0x420 [ 1270.690468][T22767] ? __fget_files+0x3a0/0x420 [ 1270.690488][T22767] __sys_sendmmsg+0x227/0x430 [ 1270.690507][T22767] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1270.690526][T22767] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 1270.690585][T22767] ? ksys_write+0x22a/0x250 [ 1270.690610][T22767] ? __pfx_ksys_write+0x10/0x10 [ 1270.690633][T22767] __x64_sys_sendmmsg+0xa0/0xc0 [ 1270.690648][T22767] do_syscall_64+0xfa/0x3b0 [ 1270.690673][T22767] ? lockdep_hardirqs_on+0x9c/0x150 [ 1270.690698][T22767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.690717][T22767] ? clear_bhb_loop+0x60/0xb0 [ 1270.690739][T22767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.690757][T22767] RIP: 0033:0x7f72c738ebe9 [ 1270.690769][T22767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1270.690781][T22767] RSP: 002b:00007f72c8150038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1270.690796][T22767] RAX: ffffffffffffffda RBX: 00007f72c75b5fa0 RCX: 00007f72c738ebe9 [ 1270.690807][T22767] RDX: 0000000000000001 RSI: 0000200000002340 RDI: 0000000000000004 [ 1270.690820][T22767] RBP: 00007f72c8150090 R08: 0000000000000000 R09: 0000000000000000 [ 1270.690833][T22767] R10: 00000000200400c0 R11: 0000000000000246 R12: 0000000000000002 [ 1270.690845][T22767] R13: 00007f72c75b6038 R14: 00007f72c75b5fa0 R15: 00007f72c76dfa28 [ 1270.690874][T22767] [ 1270.802451][ T5944] usb 4-1: Using ep0 maxpacket: 16 [ 1270.915425][T22746] input: syz0 as /devices/virtual/input/input51 [ 1270.941384][T22769] openvswitch: netlink: IP tunnel dst address not specified [ 1271.078457][T22117] cdc_ncm 6-1:1.1: failed GET_NTB_PARAMETERS [ 1271.093395][T22117] cdc_ncm 6-1:1.1: bind() failure [ 1271.110836][ T5944] usb 4-1: config 0 has no interfaces? [ 1271.116458][ T5944] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1271.145188][T22117] usb 6-1: USB disconnect, device number 9 [ 1271.151147][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.190037][ T5944] usb 4-1: config 0 descriptor?? [ 1271.229266][T22774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5149'. [ 1271.238146][T22777] netlink: 'syz.4.5150': attribute type 2 has an invalid length. [ 1271.258749][T22777] : entered promiscuous mode [ 1271.408116][T22117] usb 4-1: USB disconnect, device number 44 [ 1271.481545][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 1271.481562][ T30] audit: type=1326 audit(1755289175.214:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22783 comm="syz.4.5152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1558ebe9 code=0x7ffc0000 [ 1271.515501][ T30] audit: type=1326 audit(1755289175.254:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22783 comm="syz.4.5152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1558ebe9 code=0x7ffc0000 [ 1271.544522][ T30] audit: type=1326 audit(1755289175.254:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22783 comm="syz.4.5152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7faf1558ebe9 code=0x7ffc0000 [ 1271.572443][ T30] audit: type=1326 audit(1755289175.254:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22783 comm="syz.4.5152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1558ebe9 code=0x7ffc0000 [ 1271.599241][ T30] audit: type=1326 audit(1755289175.254:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22783 comm="syz.4.5152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7faf1558ebe9 code=0x7ffc0000 [ 1271.655287][ T30] audit: type=1326 audit(1755289175.254:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22783 comm="syz.4.5152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1558ebe9 code=0x7ffc0000 [ 1271.808499][ T30] audit: type=1326 audit(1755289175.254:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22783 comm="syz.4.5152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faf1558ebe9 code=0x7ffc0000 [ 1271.861858][ T30] audit: type=1326 audit(1755289175.254:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22783 comm="syz.4.5152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1558ebe9 code=0x7ffc0000 [ 1271.890534][ T30] audit: type=1326 audit(1755289175.254:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22783 comm="syz.4.5152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7faf1558ebe9 code=0x7ffc0000 [ 1271.978276][ T30] audit: type=1326 audit(1755289175.254:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22783 comm="syz.4.5152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1558ebe9 code=0x7ffc0000 [ 1272.368617][T22799] random: crng reseeded on system resumption [ 1272.877078][T22808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5159'. [ 1272.892942][ T9503] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1273.304356][ T9503] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1273.316938][ T9503] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1273.332017][ T9503] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1273.346946][ T9503] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1273.356539][ T9503] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.377497][ T9503] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1273.500590][ T9503] usb 6-1: invalid MIDI out EP 0 [ 1273.840028][ T9503] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1273.902112][ T9503] usb 6-1: USB disconnect, device number 10 [ 1274.335610][T22829] syzkaller0: entered promiscuous mode [ 1274.341476][T22829] syzkaller0: entered allmulticast mode [ 1274.915181][ T5944] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1274.985411][T22117] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1275.074115][ T5944] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1275.097083][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1275.222176][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1275.316790][ T5944] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1275.333594][ T5944] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1275.344377][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.372978][T22117] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1275.382389][T22117] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.396782][ T5944] usb 6-1: config 0 descriptor?? [ 1275.401784][T22117] usb 1-1: config 220 has no interface number 2 [ 1275.413167][T22117] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1275.426962][T22839] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1275.442311][T22117] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1275.449811][T22117] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1275.459418][T22117] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1275.469620][T22117] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1275.479120][T22117] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.497386][T22117] usb 1-1: Product: syz [ 1275.501608][T22117] usb 1-1: Manufacturer: syz [ 1275.522151][T22117] usb 1-1: SerialNumber: syz [ 1275.750112][T22841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1275.759868][T22841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1275.771939][T22841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1275.783068][T22841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1275.840039][ T5944] plantronics 0003:047F:FFFF.0020: reserved main item tag 0xd [ 1275.928611][ T5944] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1275.957274][T22117] usb 1-1: selecting invalid altsetting 0 [ 1275.973498][T22117] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 1276.014413][T22117] usb 1-1: No valid video chain found. [ 1276.033330][T22117] usb 1-1: selecting invalid altsetting 0 [ 1276.051080][T22117] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 1276.082715][T22117] usb 1-1: USB disconnect, device number 34 [ 1276.127778][ T5944] usb 6-1: USB disconnect, device number 11 [ 1276.228325][T22846] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 1276.364419][T22848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5172'. [ 1276.610015][T22858] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5177'. [ 1276.662158][T21014] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 1276.752874][ T5944] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1276.791755][T22868] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5178'. [ 1276.822413][T22868] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5178'. [ 1276.856195][T21014] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77 [ 1276.873218][T21014] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.899181][T21014] usb 4-1: Product: syz [ 1276.909184][T21014] usb 4-1: Manufacturer: syz [ 1276.936671][T21014] usb 4-1: SerialNumber: syz [ 1276.970871][T21014] usb 4-1: config 0 descriptor?? [ 1276.972102][ T5944] usb 1-1: Using ep0 maxpacket: 16 [ 1277.051792][ T5944] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1277.092278][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.116666][ T5944] usb 1-1: Product: syz [ 1277.137826][ T5944] usb 1-1: Manufacturer: syz [ 1277.151462][ T5944] usb 1-1: SerialNumber: syz [ 1277.179083][ T5944] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1277.190994][ T9503] usb 4-1: USB disconnect, device number 45 [ 1277.194526][ T5944] r8152-cfgselector 1-1: config 0 descriptor?? [ 1277.452157][T22882] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 1277.686772][T22856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1277.724040][T22856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1277.747974][T22887] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5185'. [ 1277.971958][T22886] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5184'. [ 1278.021974][T22886] netlink: 'syz.5.5184': attribute type 10 has an invalid length. [ 1278.056604][T22886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1278.077298][T22886] team0: Port device bond0 added [ 1278.470668][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1278.470689][ T30] audit: type=1804 audit(1755289182.204:1536): pid=22905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.5188" name="/newroot/402/file1" dev="fuse" ino=1 res=1 errno=0 [ 1278.802394][ T9503] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1278.925772][ T9515] r8152-cfgselector 1-1: USB disconnect, device number 35 [ 1278.962093][ T9503] usb 4-1: Using ep0 maxpacket: 8 [ 1278.974978][ T9503] usb 4-1: config 6 has an invalid interface number: 113 but max is 0 [ 1278.996120][ T9503] usb 4-1: config 6 has no interface number 0 [ 1279.006765][ T9503] usb 4-1: config 6 interface 113 has no altsetting 0 [ 1279.028031][ T9503] usb 4-1: New USB device found, idVendor=03f0, idProduct=070c, bcdDevice= 0.00 [ 1279.047698][ T9503] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.072577][ T9503] usb 4-1: Product: syz [ 1279.076848][ T9503] usb 4-1: Manufacturer: syz [ 1279.097984][ T9503] usb 4-1: SerialNumber: syz [ 1279.200421][T22923] FAULT_INJECTION: forcing a failure. [ 1279.200421][T22923] name failslab, interval 1, probability 0, space 0, times 0 [ 1279.242515][T22923] CPU: 0 UID: 0 PID: 22923 Comm: syz.0.5191 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 1279.242543][T22923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1279.242556][T22923] Call Trace: [ 1279.242564][T22923] [ 1279.242573][T22923] dump_stack_lvl+0x189/0x250 [ 1279.242601][T22923] ? __pfx____ratelimit+0x10/0x10 [ 1279.242628][T22923] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1279.242650][T22923] ? __pfx__printk+0x10/0x10 [ 1279.242680][T22923] ? __pfx___might_resched+0x10/0x10 [ 1279.242699][T22923] ? fs_reclaim_acquire+0x7d/0x100 [ 1279.242740][T22923] should_fail_ex+0x414/0x560 [ 1279.242770][T22923] should_failslab+0xa8/0x100 [ 1279.242799][T22923] __kmalloc_cache_noprof+0x70/0x3d0 [ 1279.242825][T22923] ? alloc_netdev_mqs+0xb90/0x11b0 [ 1279.242846][T22923] ? __xdp_rxq_info_reg+0x189/0x2a0 [ 1279.242869][T22923] alloc_netdev_mqs+0xb90/0x11b0 [ 1279.242899][T22923] rtnl_create_link+0x31f/0xd10 [ 1279.242928][T22923] rtnl_newlink_create+0x25c/0xb00 [ 1279.242947][T22923] ? __pfx___nla_validate_parse+0x10/0x10 [ 1279.242977][T22923] ? __lock_acquire+0xab9/0xd20 [ 1279.243010][T22923] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1279.243032][T22923] ? __pfx___mutex_lock+0x10/0x10 [ 1279.243069][T22923] ? ns_capable+0x8a/0xf0 [ 1279.243092][T22923] rtnl_newlink+0x16d6/0x1c70 [ 1279.243137][T22923] ? __pfx_rtnl_newlink+0x10/0x10 [ 1279.243172][T22923] ? is_bpf_text_address+0x26/0x2b0 [ 1279.243209][T22923] ? __lock_acquire+0xab9/0xd20 [ 1279.243247][T22923] ? __lock_acquire+0xab9/0xd20 [ 1279.243296][T22923] ? is_bpf_text_address+0x26/0x2b0 [ 1279.243328][T22923] ? is_bpf_text_address+0x292/0x2b0 [ 1279.243354][T22923] ? is_bpf_text_address+0x26/0x2b0 [ 1279.243390][T22923] ? __lock_acquire+0xab9/0xd20 [ 1279.243443][T22923] ? __pfx_rtnl_newlink+0x10/0x10 [ 1279.243470][T22923] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1279.243496][T22923] ? __lock_acquire+0xab9/0xd20 [ 1279.243524][T22923] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1279.243550][T22923] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1279.243594][T22923] netlink_rcv_skb+0x205/0x470 [ 1279.243621][T22923] ? __lock_acquire+0xab9/0xd20 [ 1279.243648][T22923] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1279.243676][T22923] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1279.243716][T22923] ? netlink_deliver_tap+0x2e/0x1b0 [ 1279.243756][T22923] netlink_unicast+0x82f/0x9e0 [ 1279.243790][T22923] ? __pfx_netlink_unicast+0x10/0x10 [ 1279.243817][T22923] ? netlink_sendmsg+0x642/0xb30 [ 1279.243841][T22923] ? skb_put+0x11b/0x210 [ 1279.243862][T22923] netlink_sendmsg+0x805/0xb30 [ 1279.243901][T22923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1279.243931][T22923] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1279.243962][T22923] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1279.243983][T22923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1279.244012][T22923] __sock_sendmsg+0x21c/0x270 [ 1279.244040][T22923] ____sys_sendmsg+0x505/0x830 [ 1279.244066][T22923] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1279.244094][T22923] ? import_iovec+0x74/0xa0 [ 1279.244119][T22923] ___sys_sendmsg+0x21f/0x2a0 [ 1279.244140][T22923] ? __pfx____sys_sendmsg+0x10/0x10 [ 1279.244198][T22923] ? __fget_files+0x2a/0x420 [ 1279.244214][T22923] ? __fget_files+0x3a0/0x420 [ 1279.244242][T22923] __x64_sys_sendmsg+0x19b/0x260 [ 1279.244264][T22923] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1279.244294][T22923] ? __pfx_ksys_write+0x10/0x10 [ 1279.244317][T22923] ? rcu_is_watching+0x15/0xb0 [ 1279.244342][T22923] ? do_syscall_64+0xbe/0x3b0 [ 1279.244373][T22923] do_syscall_64+0xfa/0x3b0 [ 1279.244398][T22923] ? lockdep_hardirqs_on+0x9c/0x150 [ 1279.244423][T22923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.244442][T22923] ? clear_bhb_loop+0x60/0xb0 [ 1279.244466][T22923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.244485][T22923] RIP: 0033:0x7f72c738ebe9 [ 1279.244502][T22923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1279.244518][T22923] RSP: 002b:00007f72c8150038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1279.244538][T22923] RAX: ffffffffffffffda RBX: 00007f72c75b5fa0 RCX: 00007f72c738ebe9 [ 1279.244552][T22923] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1279.244566][T22923] RBP: 00007f72c8150090 R08: 0000000000000000 R09: 0000000000000000 [ 1279.244577][T22923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1279.244589][T22923] R13: 00007f72c75b6038 R14: 00007f72c75b5fa0 R15: 00007f72c76dfa28 [ 1279.244619][T22923] [ 1279.682491][ C0] vkms_vblank_simulate: vblank timer overrun [ 1279.703938][T22907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1279.713840][T22907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1279.727487][ T9503] usb-storage 4-1:6.113: USB Mass Storage device detected [ 1279.755500][ T9503] usb-storage 4-1:6.113: Quirks match for vid 03f0 pid 070c: 8000 [ 1279.795594][ T9503] usb 4-1: USB disconnect, device number 46 [ 1279.867243][ T30] audit: type=1326 audit(1755289183.594:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22925 comm="syz.5.5194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac918ebe9 code=0x7ffc0000 [ 1279.950707][ T30] audit: type=1326 audit(1755289183.594:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22925 comm="syz.5.5194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feac918ebe9 code=0x7ffc0000 [ 1280.033937][ T30] audit: type=1326 audit(1755289183.634:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22925 comm="syz.5.5194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac918ebe9 code=0x7ffc0000 [ 1280.241352][ T30] audit: type=1326 audit(1755289183.634:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22925 comm="syz.5.5194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac918ebe9 code=0x7ffc0000 [ 1280.272582][ T30] audit: type=1326 audit(1755289183.924:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22925 comm="syz.5.5194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7feac918ebe9 code=0x7ffc0000 [ 1280.337565][ T30] audit: type=1326 audit(1755289183.924:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22925 comm="syz.5.5194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac918ebe9 code=0x7ffc0000 [ 1280.432744][ T30] audit: type=1326 audit(1755289183.924:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22925 comm="syz.5.5194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac918ebe9 code=0x7ffc0000 [ 1280.479356][ T30] audit: type=1326 audit(1755289183.924:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22925 comm="syz.5.5194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7feac918ebe9 code=0x7ffc0000 [ 1280.518508][ T30] audit: type=1326 audit(1755289183.924:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22925 comm="syz.5.5194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac918ebe9 code=0x7ffc0000 [ 1283.200492][T22963] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1283.229244][T22965] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5202'. [ 1283.532204][ T9503] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1283.582454][ T5944] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1283.689407][ T9503] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1283.704859][ T9503] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.716304][ T9503] usb 6-1: Product: syz [ 1283.720679][ T9503] usb 6-1: Manufacturer: syz [ 1283.725901][ T9503] usb 6-1: SerialNumber: syz [ 1283.769929][ T9503] usb 6-1: config 0 descriptor?? [ 1283.785714][ T9503] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1283.822796][ T5944] usb 1-1: Using ep0 maxpacket: 8 [ 1283.833779][ T5944] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1283.843807][ T5944] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1283.878572][ T5944] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1283.916416][ T5944] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1283.994658][ T5944] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1284.026745][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.300741][ T5944] usb 1-1: usb_control_msg returned -32 [ 1284.306723][ T5944] usbtmc 1-1:16.0: can't read capabilities [ 1284.483084][ T9503] gspca_sq905c: sq905c_read: usb_control_msg failed (-110) [ 1284.493736][ T9503] sq905c 6-1:0.0: Reading version command failed [ 1284.521306][ T9503] sq905c 6-1:0.0: probe with driver sq905c failed with error -110 [ 1285.716118][T22987] xfrm0: Master is either lo or non-ether device [ 1286.248827][ T9503] usb 6-1: USB disconnect, device number 12 [ 1286.355132][T21014] usb 1-1: USB disconnect, device number 36 [ 1286.702277][T21014] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1286.872226][T21014] usb 1-1: Using ep0 maxpacket: 8 [ 1286.884018][T21014] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1286.897878][T21014] usb 1-1: config 0 has no interface number 0 [ 1286.904086][T21014] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1286.925234][T21014] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1286.999970][T21014] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.024212][T21014] usb 1-1: config 0 descriptor?? [ 1287.061703][T21014] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1287.779391][T23010] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5215'. [ 1287.821841][T23013] netlink: 'syz.3.5216': attribute type 10 has an invalid length. [ 1287.899089][T23013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.906594][T23013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.357983][T23019] random: crng reseeded on system resumption [ 1289.228221][T23025] FAULT_INJECTION: forcing a failure. [ 1289.228221][T23025] name failslab, interval 1, probability 0, space 0, times 0 [ 1289.369510][T23025] CPU: 1 UID: 0 PID: 23025 Comm: syz.4.5219 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 1289.369540][T23025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1289.369553][T23025] Call Trace: [ 1289.369562][T23025] [ 1289.369572][T23025] dump_stack_lvl+0x189/0x250 [ 1289.369603][T23025] ? __pfx____ratelimit+0x10/0x10 [ 1289.369632][T23025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1289.369657][T23025] ? __pfx__printk+0x10/0x10 [ 1289.369691][T23025] ? __pfx___might_resched+0x10/0x10 [ 1289.369712][T23025] ? fs_reclaim_acquire+0x7d/0x100 [ 1289.369750][T23025] should_fail_ex+0x414/0x560 [ 1289.369784][T23025] should_failslab+0xa8/0x100 [ 1289.369816][T23025] __kmalloc_cache_noprof+0x70/0x3d0 [ 1289.369857][T23025] ? alloc_netdev_mqs+0xbf1/0x11b0 [ 1289.369887][T23025] alloc_netdev_mqs+0xbf1/0x11b0 [ 1289.369917][T23025] rtnl_create_link+0x31f/0xd10 [ 1289.369945][T23025] rtnl_newlink_create+0x25c/0xb00 [ 1289.369970][T23025] ? __pfx___nla_validate_parse+0x10/0x10 [ 1289.369994][T23025] ? __lock_acquire+0xab9/0xd20 [ 1289.370023][T23025] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1289.370047][T23025] ? __pfx___mutex_lock+0x10/0x10 [ 1289.370083][T23025] ? ns_capable+0x8a/0xf0 [ 1289.370107][T23025] rtnl_newlink+0x16d6/0x1c70 [ 1289.370130][T23025] ? netlink_sendmsg+0x805/0xb30 [ 1289.370158][T23025] ? __pfx_rtnl_newlink+0x10/0x10 [ 1289.370215][T23025] ? kasan_quarantine_put+0xdd/0x220 [ 1289.370238][T23025] ? lockdep_hardirqs_on+0x9c/0x150 [ 1289.370268][T23025] ? __pfx_do_softirq+0x10/0x10 [ 1289.370287][T23025] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1289.370301][T23025] ? lockdep_hardirqs_on+0x9c/0x150 [ 1289.370321][T23025] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1289.370341][T23025] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1289.370365][T23025] ? __dev_queue_xmit+0x27b/0x3b50 [ 1289.370385][T23025] ? __dev_queue_xmit+0x27b/0x3b50 [ 1289.370403][T23025] ? __dev_queue_xmit+0x27b/0x3b50 [ 1289.370424][T23025] ? __dev_queue_xmit+0x1d79/0x3b50 [ 1289.370442][T23025] ? __lock_acquire+0xab9/0xd20 [ 1289.370485][T23025] ? __pfx_rtnl_newlink+0x10/0x10 [ 1289.370512][T23025] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1289.370541][T23025] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1289.370567][T23025] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1289.370585][T23025] ? ref_tracker_free+0x63a/0x7d0 [ 1289.370605][T23025] ? __asan_memcpy+0x40/0x70 [ 1289.370620][T23025] ? __pfx_ref_tracker_free+0x10/0x10 [ 1289.370646][T23025] ? __skb_clone+0x63/0x7a0 [ 1289.370676][T23025] netlink_rcv_skb+0x205/0x470 [ 1289.370703][T23025] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1289.370728][T23025] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1289.370756][T23025] ? netlink_deliver_tap+0x2e/0x1b0 [ 1289.370787][T23025] netlink_unicast+0x82f/0x9e0 [ 1289.370821][T23025] ? __pfx_netlink_unicast+0x10/0x10 [ 1289.370849][T23025] ? netlink_sendmsg+0x642/0xb30 [ 1289.370874][T23025] ? skb_put+0x11b/0x210 [ 1289.370894][T23025] netlink_sendmsg+0x805/0xb30 [ 1289.370927][T23025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1289.370959][T23025] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1289.370991][T23025] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1289.371011][T23025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1289.371039][T23025] __sock_sendmsg+0x21c/0x270 [ 1289.371059][T23025] ____sys_sendmsg+0x505/0x830 [ 1289.371078][T23025] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1289.371101][T23025] ? import_iovec+0x74/0xa0 [ 1289.371129][T23025] ___sys_sendmsg+0x21f/0x2a0 [ 1289.371151][T23025] ? __pfx____sys_sendmsg+0x10/0x10 [ 1289.371203][T23025] ? __fget_files+0x2a/0x420 [ 1289.371225][T23025] ? __fget_files+0x3a0/0x420 [ 1289.371244][T23025] __x64_sys_sendmsg+0x19b/0x260 [ 1289.371268][T23025] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1289.371298][T23025] ? __pfx_ksys_write+0x10/0x10 [ 1289.371320][T23025] ? rcu_is_watching+0x15/0xb0 [ 1289.371346][T23025] ? do_syscall_64+0xbe/0x3b0 [ 1289.371368][T23025] do_syscall_64+0xfa/0x3b0 [ 1289.371386][T23025] ? lockdep_hardirqs_on+0x9c/0x150 [ 1289.371408][T23025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.371427][T23025] ? clear_bhb_loop+0x60/0xb0 [ 1289.371451][T23025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.371469][T23025] RIP: 0033:0x7faf1558ebe9 [ 1289.371485][T23025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1289.371502][T23025] RSP: 002b:00007faf163d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1289.371517][T23025] RAX: ffffffffffffffda RBX: 00007faf157b5fa0 RCX: 00007faf1558ebe9 [ 1289.371527][T23025] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1289.371536][T23025] RBP: 00007faf163d2090 R08: 0000000000000000 R09: 0000000000000000 [ 1289.371544][T23025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1289.371553][T23025] R13: 00007faf157b6038 R14: 00007faf157b5fa0 R15: 00007faf158dfa28 [ 1289.371586][T23025] [ 1289.862721][ T9515] usb 1-1: USB disconnect, device number 37 [ 1290.572123][ T5963] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1290.712210][ T9515] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1290.722150][ T5963] usb 1-1: Using ep0 maxpacket: 8 [ 1290.733328][ T5963] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1290.742684][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.751632][ T5963] usb 1-1: Product: syz [ 1290.756374][ T5963] usb 1-1: Manufacturer: syz [ 1290.765882][ T5963] usb 1-1: SerialNumber: syz [ 1290.776205][ T5963] usb 1-1: config 0 descriptor?? [ 1290.864571][ T9515] usb 4-1: Using ep0 maxpacket: 16 [ 1290.878785][ T9515] usb 4-1: config 0 has no interfaces? [ 1290.885412][ T9515] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1290.898619][ T9515] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.918159][ T9515] usb 4-1: config 0 descriptor?? [ 1290.989592][ T5963] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1291.137559][ T9515] usb 4-1: USB disconnect, device number 47 [ 1291.400531][T23029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1291.414866][T23029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1291.451979][T23043] netlink: 304 bytes leftover after parsing attributes in process `syz.5.5228'. [ 1291.461416][T23043] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5228'. [ 1291.712536][ T9515] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1291.865002][ T9515] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1291.875460][ T9515] usb 6-1: config 0 has an invalid interface number: 4 but max is 0 [ 1291.885075][ T9515] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1291.895187][ T9515] usb 6-1: config 0 has no interface number 0 [ 1291.901285][ T9515] usb 6-1: config 0 has no interface number 1 [ 1291.909809][ T9515] usb 6-1: New USB device found, idVendor=cc35, idProduct=693f, bcdDevice=e7.0f [ 1291.919476][ T9515] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.927830][ T9515] usb 6-1: Product: syz [ 1291.932045][ T9515] usb 6-1: Manufacturer: syz [ 1291.936653][ T9515] usb 6-1: SerialNumber: syz [ 1291.944579][ T9515] usb 6-1: config 0 descriptor?? [ 1291.957234][ T9515] cdc_acm 6-1:0.51: probe with driver cdc_acm failed with error -22 [ 1291.972171][T22117] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1292.133097][T22117] usb 4-1: no configurations [ 1292.137873][T22117] usb 4-1: can't read configurations, error -22 [ 1292.162658][T21014] usb 6-1: USB disconnect, device number 13 [ 1292.228991][T23029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1292.239915][T23029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1292.266581][ T5963] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1292.273160][T22117] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1292.294033][ T5963] usb 1-1: USB disconnect, device number 38 [ 1292.329073][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1292.329092][ T30] audit: type=1326 audit(1755289196.064:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23051 comm="syz.0.5231" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72c738ebe9 code=0x0 [ 1292.380292][T23053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5231'. [ 1292.445744][T22117] usb 4-1: no configurations [ 1292.450476][T22117] usb 4-1: can't read configurations, error -22 [ 1292.457268][T22117] usb usb4-port1: attempt power cycle [ 1292.812469][T22117] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1292.856884][T22117] usb 4-1: no configurations [ 1292.861529][T22117] usb 4-1: can't read configurations, error -22 [ 1292.945586][T23058] random: crng reseeded on system resumption [ 1293.017554][T22117] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1293.050032][T22117] usb 4-1: no configurations [ 1293.054952][T22117] usb 4-1: can't read configurations, error -22 [ 1293.081545][T22117] usb usb4-port1: unable to enumerate USB device [ 1293.514155][ T9503] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1293.676222][ T9503] usb 1-1: Using ep0 maxpacket: 16 [ 1293.688235][ T9503] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1293.700476][ T9503] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1293.710621][ T9503] usb 1-1: Product: syz [ 1293.719711][ T9503] usb 1-1: Manufacturer: syz [ 1293.724448][ T9503] usb 1-1: SerialNumber: syz [ 1293.735990][ T9503] usb 1-1: config 0 descriptor?? [ 1294.033346][T23061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1294.065421][T23061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1294.093936][T23072] FAULT_INJECTION: forcing a failure. [ 1294.093936][T23072] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1294.120788][T23072] CPU: 1 UID: 0 PID: 23072 Comm: syz.1.5237 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 1294.120817][T23072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1294.120826][T23072] Call Trace: [ 1294.120833][T23072] [ 1294.120840][T23072] dump_stack_lvl+0x189/0x250 [ 1294.120862][T23072] ? __pfx____ratelimit+0x10/0x10 [ 1294.120889][T23072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1294.120907][T23072] ? __pfx__printk+0x10/0x10 [ 1294.120929][T23072] ? fs_reclaim_acquire+0x7d/0x100 [ 1294.120959][T23072] should_fail_ex+0x414/0x560 [ 1294.120982][T23072] prepare_alloc_pages+0x213/0x610 [ 1294.121003][T23072] __alloc_frozen_pages_noprof+0x123/0x370 [ 1294.121021][T23072] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1294.121043][T23072] ? policy_nodemask+0x27c/0x720 [ 1294.121063][T23072] ? __lock_acquire+0xab9/0xd20 [ 1294.121089][T23072] alloc_pages_mpol+0x232/0x4a0 [ 1294.121114][T23072] vma_alloc_folio_noprof+0xe4/0x200 [ 1294.121138][T23072] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1294.121169][T23072] folio_prealloc+0x30/0x180 [ 1294.121191][T23072] __handle_mm_fault+0x2ab9/0x5440 [ 1294.121223][T23072] ? __pfx___handle_mm_fault+0x10/0x10 [ 1294.121258][T23072] ? find_vma+0xe7/0x160 [ 1294.121276][T23072] ? __pfx_find_vma+0x10/0x10 [ 1294.121296][T23072] handle_mm_fault+0x40a/0x8e0 [ 1294.121323][T23072] do_user_addr_fault+0x764/0x1390 [ 1294.121358][T23072] exc_page_fault+0x76/0xf0 [ 1294.121379][T23072] asm_exc_page_fault+0x26/0x30 [ 1294.121393][T23072] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1294.121410][T23072] Code: 0a 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1294.121423][T23072] RSP: 0018:ffffc900047f74f8 EFLAGS: 00050202 [ 1294.121437][T23072] RAX: ffff888065b4a001 RBX: ffff888065b4a3e1 RCX: 0000000000000157 [ 1294.121448][T23072] RDX: 0000000000000000 RSI: ffff888065b4a421 RDI: 0000200000001000 [ 1294.121458][T23072] RBP: ffffc900047f7650 R08: ffff888065b4a577 R09: 1ffff1100cb694ae [ 1294.121469][T23072] R10: dffffc0000000000 R11: ffffed100cb694af R12: dffffc0000000000 [ 1294.121480][T23072] R13: 0000000000000197 R14: 00007ffffffff000 R15: 0000200000001157 [ 1294.121503][T23072] _copy_to_iter+0x5f6/0x16f0 [ 1294.121526][T23072] ? __pfx__copy_to_iter+0x10/0x10 [ 1294.121539][T23072] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 1294.121561][T23072] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 1294.121581][T23072] __skb_datagram_iter+0xf8/0x990 [ 1294.121599][T23072] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1294.121623][T23072] skb_copy_datagram_iter+0xc5/0x230 [ 1294.121643][T23072] netlink_recvmsg+0x2ab/0xa30 [ 1294.121683][T23072] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1294.121707][T23072] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1294.121730][T23072] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1294.121743][T23072] ? security_socket_recvmsg+0x7e/0x2e0 [ 1294.121759][T23072] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1294.121778][T23072] sock_recvmsg+0x22c/0x270 [ 1294.121799][T23072] ____sys_recvmsg+0x1c9/0x460 [ 1294.121820][T23072] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1294.121845][T23072] ? import_iovec+0x74/0xa0 [ 1294.121862][T23072] ___sys_recvmsg+0x1b5/0x510 [ 1294.121886][T23072] ? __pfx____sys_recvmsg+0x10/0x10 [ 1294.121917][T23072] ? __fget_files+0x3a0/0x420 [ 1294.121937][T23072] do_recvmmsg+0x307/0x770 [ 1294.121957][T23072] ? __pfx_do_recvmmsg+0x10/0x10 [ 1294.121981][T23072] ? _copy_from_user+0x94/0xb0 [ 1294.122016][T23072] __x64_sys_recvmmsg+0x1af/0x240 [ 1294.122040][T23072] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1294.122058][T23072] ? rcu_is_watching+0x15/0xb0 [ 1294.122082][T23072] ? do_syscall_64+0xbe/0x3b0 [ 1294.122111][T23072] do_syscall_64+0xfa/0x3b0 [ 1294.122137][T23072] ? lockdep_hardirqs_on+0x9c/0x150 [ 1294.122161][T23072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.122179][T23072] ? clear_bhb_loop+0x60/0xb0 [ 1294.122202][T23072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.122220][T23072] RIP: 0033:0x7f6a93d8ebe9 [ 1294.122237][T23072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1294.122252][T23072] RSP: 002b:00007f6a94bba038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1294.122271][T23072] RAX: ffffffffffffffda RBX: 00007f6a93fb5fa0 RCX: 00007f6a93d8ebe9 [ 1294.122284][T23072] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 1294.122297][T23072] RBP: 00007f6a94bba090 R08: 0000200000003700 R09: 0000000000000000 [ 1294.122309][T23072] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 1294.122321][T23072] R13: 00007f6a93fb6038 R14: 00007f6a93fb5fa0 R15: 00007f6a940dfa28 [ 1294.122351][T23072] [ 1294.745006][ T9515] usb 1-1: USB disconnect, device number 39 [ 1295.092480][T22117] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1295.182117][ T9503] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1295.244130][T22117] usb 6-1: config 0 has no interfaces? [ 1295.264622][T22117] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1295.292562][T22117] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.332074][ T9503] usb 4-1: Using ep0 maxpacket: 16 [ 1295.334013][T22117] usb 6-1: Product: syz [ 1295.351651][T22117] usb 6-1: Manufacturer: syz [ 1295.358611][ T9503] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 1295.366590][T22117] usb 6-1: SerialNumber: syz [ 1295.375825][T22117] usb 6-1: config 0 descriptor?? [ 1295.401393][ T9503] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.429224][ T9503] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.446518][ T9503] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.464170][ T9503] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.476651][ T9503] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.488780][ T9503] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.503351][T23083] netlink: 124 bytes leftover after parsing attributes in process `syz.0.5241'. [ 1295.534938][ T9503] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.546510][ T9503] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.564396][ T9503] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1295.574403][ T9503] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1295.583811][ T9503] usb 4-1: SerialNumber: syz [ 1295.608493][ T9503] usb 4-1: config 0 descriptor?? [ 1295.628550][ T9503] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input54 [ 1295.839394][T23079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5240'. [ 1295.897552][T23085] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1295.927262][T22117] usb 4-1: USB disconnect, device number 52 [ 1295.937876][ T5219] bcm5974 4-1:0.0: could not read from device [ 1295.945441][ T6053] bcm5974 4-1:0.0: could not read from device [ 1297.143147][T23107] random: crng reseeded on system resumption [ 1297.434026][T23110] syzkaller1: entered promiscuous mode [ 1297.441125][T23110] syzkaller1: entered allmulticast mode [ 1297.925232][T23118] random: crng reseeded on system resumption [ 1297.953865][ T9503] usb 6-1: USB disconnect, device number 14 [ 1298.669345][T23130] syzkaller1: entered promiscuous mode [ 1298.770336][T23130] syzkaller1: entered allmulticast mode [ 1298.844110][T23132] i2c i2c-0: Invalid block write size 36 [ 1298.895908][ T30] audit: type=1326 audit(1755289202.594:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23131 comm="syz.0.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c738ebe9 code=0x7ffc0000 [ 1299.024592][ T30] audit: type=1326 audit(1755289202.604:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23131 comm="syz.0.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c738ebe9 code=0x7ffc0000 [ 1299.064771][ T30] audit: type=1326 audit(1755289202.604:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23131 comm="syz.0.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f72c738ebe9 code=0x7ffc0000 [ 1299.087228][ C1] vkms_vblank_simulate: vblank timer overrun [ 1299.138960][ T30] audit: type=1326 audit(1755289202.604:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23131 comm="syz.0.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c738ebe9 code=0x7ffc0000 [ 1299.212107][ T30] audit: type=1326 audit(1755289202.604:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23131 comm="syz.0.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c738ebe9 code=0x7ffc0000 [ 1299.326969][ T30] audit: type=1326 audit(1755289202.604:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23131 comm="syz.0.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f72c738ebe9 code=0x7ffc0000 [ 1299.379985][ T30] audit: type=1326 audit(1755289202.604:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23131 comm="syz.0.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c738ebe9 code=0x7ffc0000 [ 1299.402479][ C1] vkms_vblank_simulate: vblank timer overrun [ 1299.412133][T23142] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5259'. [ 1299.450737][ T30] audit: type=1326 audit(1755289202.604:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23131 comm="syz.0.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f72c738ebe9 code=0x7ffc0000 [ 1299.473157][ C1] vkms_vblank_simulate: vblank timer overrun [ 1299.568052][ T30] audit: type=1326 audit(1755289202.604:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23131 comm="syz.0.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c738ebe9 code=0x7ffc0000 [ 1299.590602][ C1] vkms_vblank_simulate: vblank timer overrun [ 1299.730857][ T30] audit: type=1326 audit(1755289202.604:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23131 comm="syz.0.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f72c738e7eb code=0x7ffc0000 [ 1299.753280][ C1] vkms_vblank_simulate: vblank timer overrun [ 1300.126449][T23152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5263'. [ 1300.186719][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.193218][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.562349][T22117] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1300.572987][T21014] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1300.712246][T22117] usb 4-1: Using ep0 maxpacket: 32 [ 1300.724015][T22117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1300.738713][T22117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1300.742180][T21014] usb 6-1: Using ep0 maxpacket: 8 [ 1300.749459][T22117] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1300.763418][T22117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.773834][T21014] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1300.776509][T22117] usb 4-1: config 0 descriptor?? [ 1300.792221][ T9515] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1300.866680][T21014] usb 6-1: config 59 has an invalid interface number: 141 but max is 0 [ 1300.880040][T22117] hub 4-1:0.0: USB hub found [ 1300.881029][T21014] usb 6-1: config 59 has no interface number 0 [ 1300.913531][T21014] usb 6-1: config 59 interface 141 altsetting 6 endpoint 0xC has an invalid bInterval 160, changing to 11 [ 1300.932836][T21014] usb 6-1: config 59 interface 141 has no altsetting 0 [ 1300.948813][T21014] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.72 [ 1300.952235][ T9515] usb 1-1: Using ep0 maxpacket: 8 [ 1300.963397][T21014] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.977711][ T9515] usb 1-1: config 0 has no interfaces? [ 1300.984119][ T9515] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1300.984140][T21014] usb 6-1: Product: syz [ 1301.017952][ T9515] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.027832][T21014] usb 6-1: Manufacturer: syz [ 1301.032772][T21014] usb 6-1: SerialNumber: syz [ 1301.045095][ T9515] usb 1-1: config 0 descriptor?? [ 1301.056119][T22117] hub 4-1:0.0: 1 port detected [ 1301.256069][T21014] usbtest 6-1:59.141: couldn't get endpoints, -71 [ 1301.264353][T21014] usbtest 6-1:59.141: probe with driver usbtest failed with error -71 [ 1301.287444][T21014] usb 6-1: USB disconnect, device number 15 [ 1301.303259][ T9515] usb 1-1: USB disconnect, device number 40 [ 1301.465541][T22117] usb 4-1: USB disconnect, device number 53 [ 1301.490051][T23164] netlink: 'syz.1.5268': attribute type 10 has an invalid length. [ 1301.499838][T23164] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.507621][T23164] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.579981][T23166] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1301.937348][T23174] FAULT_INJECTION: forcing a failure. [ 1301.937348][T23174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1301.956167][T23174] CPU: 1 UID: 0 PID: 23174 Comm: syz.0.5272 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 1301.956195][T23174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1301.956207][T23174] Call Trace: [ 1301.956215][T23174] [ 1301.956224][T23174] dump_stack_lvl+0x189/0x250 [ 1301.956251][T23174] ? __pfx____ratelimit+0x10/0x10 [ 1301.956270][T23174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1301.956286][T23174] ? __pfx__printk+0x10/0x10 [ 1301.956305][T23174] ? __might_fault+0xb0/0x130 [ 1301.956332][T23174] should_fail_ex+0x414/0x560 [ 1301.956353][T23174] _copy_from_user+0x2d/0xb0 [ 1301.956369][T23174] ___sys_recvmsg+0x12e/0x510 [ 1301.956387][T23174] ? __pfx____sys_recvmsg+0x10/0x10 [ 1301.956422][T23174] ? __might_fault+0xb0/0x130 [ 1301.956442][T23174] do_recvmmsg+0x307/0x770 [ 1301.956461][T23174] ? __pfx_do_recvmmsg+0x10/0x10 [ 1301.956483][T23174] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1301.956515][T23174] __x64_sys_recvmmsg+0x190/0x240 [ 1301.956531][T23174] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1301.956549][T23174] ? do_syscall_64+0xbe/0x3b0 [ 1301.956570][T23174] do_syscall_64+0xfa/0x3b0 [ 1301.956588][T23174] ? lockdep_hardirqs_on+0x9c/0x150 [ 1301.956604][T23174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.956618][T23174] ? clear_bhb_loop+0x60/0xb0 [ 1301.956634][T23174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.956647][T23174] RIP: 0033:0x7f72c738ebe9 [ 1301.956660][T23174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1301.956672][T23174] RSP: 002b:00007f72c8150038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1301.956687][T23174] RAX: ffffffffffffffda RBX: 00007f72c75b5fa0 RCX: 00007f72c738ebe9 [ 1301.956696][T23174] RDX: 0000000000000414 RSI: 0000200000000840 RDI: 0000000000000003 [ 1301.956705][T23174] RBP: 00007f72c8150090 R08: 0000000000000000 R09: 0000000000000000 [ 1301.956713][T23174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1301.956721][T23174] R13: 00007f72c75b6038 R14: 00007f72c75b5fa0 R15: 00007f72c76dfa28 [ 1301.956741][T23174] [ 1302.170354][ C1] vkms_vblank_simulate: vblank timer overrun [ 1302.712952][ T9515] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1302.852263][ T9515] usb 4-1: device descriptor read/64, error -71 [ 1303.092188][ T9515] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1303.232423][ T9515] usb 4-1: device descriptor read/64, error -71 [ 1303.353149][ T9515] usb usb4-port1: attempt power cycle [ 1303.743231][ T9515] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1303.996473][ T9515] usb 4-1: device descriptor read/8, error -71 [ 1304.058522][T23227] FAULT_INJECTION: forcing a failure. [ 1304.058522][T23227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1304.147180][T23227] CPU: 0 UID: 0 PID: 23227 Comm: syz.5.5288 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 1304.147209][T23227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1304.147221][T23227] Call Trace: [ 1304.147229][T23227] [ 1304.147239][T23227] dump_stack_lvl+0x189/0x250 [ 1304.147267][T23227] ? __pfx____ratelimit+0x10/0x10 [ 1304.147294][T23227] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1304.147319][T23227] ? __pfx__printk+0x10/0x10 [ 1304.147359][T23227] should_fail_ex+0x414/0x560 [ 1304.147382][T23227] _copy_to_user+0x31/0xb0 [ 1304.147399][T23227] simple_read_from_buffer+0xe1/0x170 [ 1304.147422][T23227] proc_fail_nth_read+0x1b3/0x220 [ 1304.147440][T23227] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1304.147457][T23227] ? rw_verify_area+0x2a6/0x4d0 [ 1304.147475][T23227] ? __lock_acquire+0xab9/0xd20 [ 1304.147503][T23227] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1304.147527][T23227] vfs_read+0x1fd/0xa30 [ 1304.147551][T23227] ? fdget_pos+0x247/0x320 [ 1304.147572][T23227] ? __pfx___mutex_lock+0x10/0x10 [ 1304.147599][T23227] ? __pfx_vfs_read+0x10/0x10 [ 1304.147617][T23227] ? __fget_files+0x2a/0x420 [ 1304.147632][T23227] ? __fget_files+0x3a0/0x420 [ 1304.147643][T23227] ? __fget_files+0x2a/0x420 [ 1304.147661][T23227] ksys_read+0x145/0x250 [ 1304.147680][T23227] ? __pfx_ksys_read+0x10/0x10 [ 1304.147700][T23227] ? do_syscall_64+0xbe/0x3b0 [ 1304.147722][T23227] do_syscall_64+0xfa/0x3b0 [ 1304.147740][T23227] ? lockdep_hardirqs_on+0x9c/0x150 [ 1304.147757][T23227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.147771][T23227] ? clear_bhb_loop+0x60/0xb0 [ 1304.147787][T23227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.147800][T23227] RIP: 0033:0x7feac918d5fc [ 1304.147812][T23227] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1304.147823][T23227] RSP: 002b:00007feaca005030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1304.147838][T23227] RAX: ffffffffffffffda RBX: 00007feac93b5fa0 RCX: 00007feac918d5fc [ 1304.147848][T23227] RDX: 000000000000000f RSI: 00007feaca0050a0 RDI: 0000000000000005 [ 1304.147856][T23227] RBP: 00007feaca005090 R08: 0000000000000000 R09: 0000000000000000 [ 1304.147864][T23227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1304.147878][T23227] R13: 00007feac93b6038 R14: 00007feac93b5fa0 R15: 00007feac94dfa28 [ 1304.147899][T23227] [ 1304.552105][ T9515] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1304.572575][ T9515] usb 4-1: device descriptor read/8, error -71 [ 1304.682603][ T9515] usb usb4-port1: unable to enumerate USB device [ 1305.102353][ T9515] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1305.252485][ T9515] usb 1-1: Using ep0 maxpacket: 32 [ 1305.260570][ T9515] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1305.269753][ T9515] usb 1-1: config 0 has no interface number 0 [ 1305.277042][ T9515] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1305.290926][ T9515] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1305.301634][ T9515] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1305.311877][ T9515] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.322562][ T9515] usb 1-1: config 0 descriptor?? [ 1305.622188][ T5963] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1305.805848][ T5963] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1305.820761][ T5963] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1305.852203][T21014] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1305.869001][ T5963] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1305.886901][ T5963] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1305.911959][ T5963] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.956219][ T5963] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1306.002268][T21014] usb 4-1: Using ep0 maxpacket: 8 [ 1306.050554][T21014] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 1306.060836][T21014] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.133416][T21014] usb 4-1: config 0 has no interfaces? [ 1306.168445][ T5963] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1306.200187][T21014] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1306.230085][T21014] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.260217][ T5963] usb 6-1: USB disconnect, device number 16 [ 1306.283719][T21014] usb 4-1: config 0 descriptor?? [ 1306.292737][T23252] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5295'. [ 1306.336640][T23252] bond0: entered promiscuous mode [ 1306.354289][T23252] bond0: left promiscuous mode [ 1306.603493][ T5963] usb 4-1: USB disconnect, device number 58 [ 1306.951677][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 1306.951711][ T30] audit: type=1326 audit(1755289210.684:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23255 comm="syz.4.5297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1558ebe9 code=0x7ffc0000 [ 1307.195733][ T30] audit: type=1326 audit(1755289210.684:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23255 comm="syz.4.5297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7faf1558ebe9 code=0x7ffc0000 [ 1307.377261][ T30] audit: type=1326 audit(1755289210.684:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23255 comm="syz.4.5297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1558ebe9 code=0x7ffc0000 [ 1307.451381][ T30] audit: type=1326 audit(1755289210.684:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23255 comm="syz.4.5297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7faf1558ebe9 code=0x7ffc0000 [ 1307.507031][ T30] audit: type=1326 audit(1755289210.684:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23255 comm="syz.4.5297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1558ebe9 code=0x7ffc0000 [ 1307.572405][T22117] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1307.689136][ T30] audit: type=1326 audit(1755289210.684:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23255 comm="syz.4.5297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1558ebe9 code=0x7ffc0000 [ 1307.811453][T22117] usb 6-1: Using ep0 maxpacket: 32 [ 1307.850041][T22117] usb 6-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=6d.c8 [ 1307.861156][T22117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.874845][ T30] audit: type=1326 audit(1755289210.684:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23255 comm="syz.4.5297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faf1558ebe9 code=0x7ffc0000 [ 1307.921565][T22117] usb 6-1: config 0 descriptor?? [ 1307.951625][T22117] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 1307.973231][T22117] gspca_mr97310a: reg write [21] error -22 [ 1307.986773][ T30] audit: type=1326 audit(1755289210.684:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23255 comm="syz.4.5297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1558ebe9 code=0x7ffc0000 [ 1308.013863][T22117] mr97310a 6-1:0.0: probe with driver mr97310a failed with error -22 [ 1308.062141][ T30] audit: type=1326 audit(1755289210.684:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23255 comm="syz.4.5297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1558ebe9 code=0x7ffc0000 [ 1308.182238][ T30] audit: type=1326 audit(1755289210.684:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23255 comm="syz.4.5297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7faf1558ebe9 code=0x7ffc0000 [ 1308.209854][T16207] usb 6-1: USB disconnect, device number 17 [ 1308.356453][T23272] FAULT_INJECTION: forcing a failure. [ 1308.356453][T23272] name failslab, interval 1, probability 0, space 0, times 0 [ 1308.369189][T23272] CPU: 1 UID: 0 PID: 23272 Comm: syz.3.5302 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 1308.369221][T23272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1308.369235][T23272] Call Trace: [ 1308.369245][T23272] [ 1308.369255][T23272] dump_stack_lvl+0x189/0x250 [ 1308.369287][T23272] ? __pfx____ratelimit+0x10/0x10 [ 1308.369317][T23272] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1308.369344][T23272] ? __pfx__printk+0x10/0x10 [ 1308.369391][T23272] should_fail_ex+0x414/0x560 [ 1308.369426][T23272] should_failslab+0xa8/0x100 [ 1308.369460][T23272] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1308.369490][T23272] ? dst_alloc+0x105/0x170 [ 1308.369519][T23272] dst_alloc+0x105/0x170 [ 1308.369548][T23272] ip_route_input_rcu+0x138c/0x2ff0 [ 1308.369670][T23272] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 1308.369710][T23272] ? __lock_acquire+0xab9/0xd20 [ 1308.369749][T23272] ? ip_route_input_noref+0x98/0x250 [ 1308.369775][T23272] ? ip_route_input_noref+0x98/0x250 [ 1308.369810][T23272] ? ip_route_input_noref+0x98/0x250 [ 1308.369837][T23272] ip_route_input_noref+0x167/0x250 [ 1308.369881][T23272] ? __pfx_ip_route_input_noref+0x10/0x10 [ 1308.369922][T23272] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1308.369946][T23272] ? __lock_acquire+0xab9/0xd20 [ 1308.369985][T23272] ip_rcv_finish_core+0x5af/0x1c00 [ 1308.370030][T23272] ip_rcv_finish+0x14c/0x2f0 [ 1308.370063][T23272] NF_HOOK+0x309/0x3a0 [ 1308.370095][T23272] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1308.370124][T23272] ? NF_HOOK+0x9a/0x3a0 [ 1308.370151][T23272] ? __pfx_NF_HOOK+0x10/0x10 [ 1308.370178][T23272] ? ip_rcv_core+0x7f7/0xd00 [ 1308.370209][T23272] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1308.370258][T23272] ? __pfx_ip_rcv+0x10/0x10 [ 1308.370283][T23272] __netif_receive_skb+0x143/0x380 [ 1308.370316][T23272] ? netif_receive_skb+0x115/0x790 [ 1308.370340][T23272] netif_receive_skb+0x1cb/0x790 [ 1308.370364][T23272] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1308.370386][T23272] ? __pfx_netif_receive_skb+0x10/0x10 [ 1308.370417][T23272] ? tun_rx_batched+0x160/0x730 [ 1308.370439][T23272] tun_rx_batched+0x1b9/0x730 [ 1308.370457][T23272] ? __lock_acquire+0xab9/0xd20 [ 1308.370489][T23272] ? __pfx_tun_rx_batched+0x10/0x10 [ 1308.370512][T23272] ? tun_get_user+0x266c/0x3e20 [ 1308.370545][T23272] tun_get_user+0x2aa2/0x3e20 [ 1308.370572][T23272] ? tun_get_user+0x6f6/0x3e20 [ 1308.370593][T23272] ? tun_get_user+0x266c/0x3e20 [ 1308.370616][T23272] ? aa_file_perm+0x44d/0x1550 [ 1308.370636][T23272] ? __pfx_tun_get_user+0x10/0x10 [ 1308.370666][T23272] ? __lock_acquire+0xab9/0xd20 [ 1308.370700][T23272] ? ref_tracker_alloc+0x318/0x460 [ 1308.370726][T23272] ? __lock_acquire+0xab9/0xd20 [ 1308.370756][T23272] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1308.370790][T23272] ? tun_get+0x1c/0x2f0 [ 1308.370814][T23272] ? tun_get+0x1c/0x2f0 [ 1308.370832][T23272] ? tun_get+0x1c/0x2f0 [ 1308.370861][T23272] tun_chr_write_iter+0x113/0x200 [ 1308.370895][T23272] vfs_write+0x5c6/0xb30 [ 1308.370928][T23272] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1308.370960][T23272] ? __pfx_vfs_write+0x10/0x10 [ 1308.370996][T23272] ? __fget_files+0x2a/0x420 [ 1308.371024][T23272] ksys_write+0x145/0x250 [ 1308.371052][T23272] ? __pfx_ksys_write+0x10/0x10 [ 1308.371085][T23272] ? do_syscall_64+0xbe/0x3b0 [ 1308.371117][T23272] do_syscall_64+0xfa/0x3b0 [ 1308.371143][T23272] ? lockdep_hardirqs_on+0x9c/0x150 [ 1308.371170][T23272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.371190][T23272] ? clear_bhb_loop+0x60/0xb0 [ 1308.371214][T23272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.371235][T23272] RIP: 0033:0x7f9bd358d69f [ 1308.371254][T23272] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1308.371272][T23272] RSP: 002b:00007f9bd44d7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1308.371292][T23272] RAX: ffffffffffffffda RBX: 00007f9bd37b5fa0 RCX: 00007f9bd358d69f [ 1308.371307][T23272] RDX: 0000000000000036 RSI: 0000200000001800 RDI: 00000000000000c8 [ 1308.371319][T23272] RBP: 00007f9bd44d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1308.371332][T23272] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 1308.371344][T23272] R13: 00007f9bd37b6038 R14: 00007f9bd37b5fa0 R15: 00007f9bd38dfa28 [ 1308.371375][T23272] [ 1309.202449][ T9515] usbhid 1-1:0.1: can't add hid device: -71 [ 1309.228469][ T9515] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 1309.281721][ T9515] usb 1-1: USB disconnect, device number 41 [ 1309.572114][T22117] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1309.882365][ T9515] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1309.964165][T22117] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1309.972954][T22117] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1309.985668][T22117] usb 4-1: config 220 has no interface number 2 [ 1309.993047][T22117] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1310.068531][T23294] netlink: 'syz.4.5308': attribute type 1 has an invalid length. [ 1310.126274][T22117] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1310.133748][T22117] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1310.140722][T22117] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1310.148055][ T9515] usb 6-1: Using ep0 maxpacket: 8 [ 1310.157085][ T9515] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1310.165924][T22117] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1310.176887][T22117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.185159][ T9515] usb 6-1: config 5 has an invalid interface number: 184 but max is 3 [ 1310.193890][ T9515] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1310.205427][T22117] usb 4-1: Product: syz [ 1310.215286][T22117] usb 4-1: Manufacturer: syz [ 1310.274820][T22117] usb 4-1: SerialNumber: syz [ 1310.280729][ T9515] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 4 [ 1310.392566][ T9515] usb 6-1: config 5 has no interface number 0 [ 1310.415606][ T9515] usb 6-1: config 5 interface 184 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1310.442376][ T9515] usb 6-1: config 5 interface 184 has no altsetting 0 [ 1310.459659][ T9515] usb 6-1: language id specifier not provided by device, defaulting to English [ 1310.471271][ T9515] usb 6-1: New USB device found, idVendor=1b3d, idProduct=018d, bcdDevice=ee.07 [ 1310.525672][ T9515] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.732414][ T9515] usb 6-1: Product: syz [ 1310.736642][ T9515] usb 6-1: Manufacturer: syz [ 1310.780012][ T9515] usb 6-1: SerialNumber: syz [ 1311.048762][T23277] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1311.108256][T23306] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5313'. [ 1311.126028][T23306] netlink: 'syz.0.5313': attribute type 7 has an invalid length. [ 1311.135511][T23306] netlink: 'syz.0.5313': attribute type 8 has an invalid length. [ 1311.149245][T23306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5313'. [ 1311.247405][ T9515] ftdi_sio 6-1:5.184: FTDI USB Serial Device converter detected [ 1311.300477][ T9515] ftdi_sio ttyUSB0: unknown device type: 0xee07 [ 1311.339601][ T9515] usb 6-1: USB disconnect, device number 18 [ 1311.390148][ T9515] ftdi_sio 6-1:5.184: device disconnected [ 1312.022190][ T9515] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1312.038076][T23325] syzkaller1: entered promiscuous mode [ 1312.047745][T23325] syzkaller1: entered allmulticast mode [ 1312.175849][ T9515] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1312.186319][ T9515] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.230779][ T9515] usb 1-1: config 220 has no interface number 2 [ 1312.278560][ T9515] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1312.427838][ T9515] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1312.439284][T22117] usb 4-1: selecting invalid altsetting 0 [ 1312.449138][T22117] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1312.468898][ T9515] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1312.496398][T22117] usb 4-1: No valid video chain found. [ 1312.502483][ T9515] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1312.529476][ T9515] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1312.546525][T22117] usb 4-1: selecting invalid altsetting 0 [ 1312.555625][ T9515] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.570942][T22117] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1312.589252][ T9515] usb 1-1: Product: syz [ 1312.602163][ T9515] usb 1-1: Manufacturer: syz [ 1312.617071][T22117] usb 4-1: USB disconnect, device number 59 [ 1312.629642][ T9515] usb 1-1: SerialNumber: syz [ 1312.710525][T23333] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5321'. [ 1312.873027][T23319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1312.887022][T23319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1312.899565][T23319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1312.909282][T23319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1313.143015][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1313.143033][ T30] audit: type=1326 audit(1755289216.864:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23338 comm="syz.5.5323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac918ebe9 code=0x7ffc0000 [ 1313.204864][ T30] audit: type=1326 audit(1755289216.874:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23338 comm="syz.5.5323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac918ebe9 code=0x7ffc0000 [ 1313.208330][T23341] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5324'. [ 1313.247343][ T30] audit: type=1326 audit(1755289216.884:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23338 comm="syz.5.5323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feac918ebe9 code=0x7ffc0000 [ 1313.308353][ T30] audit: type=1326 audit(1755289216.884:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23338 comm="syz.5.5323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac918ebe9 code=0x7ffc0000 [ 1313.335409][ T30] audit: type=1326 audit(1755289216.884:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23338 comm="syz.5.5323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac918ebe9 code=0x7ffc0000 [ 1313.365159][ T30] audit: type=1326 audit(1755289216.884:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23338 comm="syz.5.5323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7feac918ebe9 code=0x7ffc0000 [ 1313.396916][ T30] audit: type=1326 audit(1755289216.884:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23338 comm="syz.5.5323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac918ebe9 code=0x7ffc0000 [ 1313.422310][ T30] audit: type=1326 audit(1755289216.884:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23338 comm="syz.5.5323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7feac918ebe9 code=0x7ffc0000 [ 1313.538304][ T30] audit: type=1326 audit(1755289216.884:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23338 comm="syz.5.5323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac918ebe9 code=0x7ffc0000 [ 1313.652555][ T30] audit: type=1326 audit(1755289216.914:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23338 comm="syz.5.5323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feac918ebe9 code=0x7ffc0000 [ 1313.761348][ T9515] usb 1-1: selecting invalid altsetting 0 [ 1313.773466][ T9515] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 1313.780075][ T9515] usb 1-1: No valid video chain found. [ 1313.823006][ T9515] usb 1-1: selecting invalid altsetting 0 [ 1313.828790][ T9515] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 1313.871169][ T9515] usb 1-1: USB disconnect, device number 42 [ 1316.132132][T21014] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1316.322511][T21014] usb 1-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0x15, changing to 0x5 [ 1316.351786][T21014] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1316.354140][T23391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5339'. [ 1316.412109][T21014] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 25647, setting to 1024 [ 1316.433873][T21014] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1316.479922][T21014] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1316.493697][T21014] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.511218][T23393] FAULT_INJECTION: forcing a failure. [ 1316.511218][T23393] name failslab, interval 1, probability 0, space 0, times 0 [ 1316.532908][T23393] CPU: 1 UID: 0 PID: 23393 Comm: syz.5.5340 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 1316.532932][T23393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1316.532941][T23393] Call Trace: [ 1316.532946][T23393] [ 1316.532953][T23393] dump_stack_lvl+0x189/0x250 [ 1316.532973][T23393] ? __pfx____ratelimit+0x10/0x10 [ 1316.532992][T23393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1316.533007][T23393] ? __pfx__printk+0x10/0x10 [ 1316.533029][T23393] ? __pfx___might_resched+0x10/0x10 [ 1316.533041][T23393] ? fs_reclaim_acquire+0x7d/0x100 [ 1316.533065][T23393] should_fail_ex+0x414/0x560 [ 1316.533086][T23393] should_failslab+0xa8/0x100 [ 1316.533107][T23393] __kmalloc_noprof+0xcb/0x4f0 [ 1316.533124][T23393] ? do_sys_poll+0x2ac/0x1070 [ 1316.533146][T23393] do_sys_poll+0x2ac/0x1070 [ 1316.533175][T23393] ? __pfx_do_sys_poll+0x10/0x10 [ 1316.533247][T23393] ? rcu_read_lock_any_held+0xb3/0x120 [ 1316.533262][T23393] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1316.533279][T23393] ? vfs_write+0x956/0xb30 [ 1316.533314][T23393] ? set_user_sigmask+0xc7/0x1b0 [ 1316.533328][T23393] ? __pfx_set_user_sigmask+0x10/0x10 [ 1316.533348][T23393] __se_sys_ppoll+0x1ff/0x260 [ 1316.533369][T23393] ? __pfx___se_sys_ppoll+0x10/0x10 [ 1316.533388][T23393] ? __pfx_ksys_write+0x10/0x10 [ 1316.533404][T23393] ? rcu_is_watching+0x15/0xb0 [ 1316.533421][T23393] ? do_syscall_64+0xbe/0x3b0 [ 1316.533439][T23393] ? __x64_sys_ppoll+0x20/0xc0 [ 1316.533460][T23393] do_syscall_64+0xfa/0x3b0 [ 1316.533477][T23393] ? lockdep_hardirqs_on+0x9c/0x150 [ 1316.533495][T23393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.533508][T23393] ? clear_bhb_loop+0x60/0xb0 [ 1316.533524][T23393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.533537][T23393] RIP: 0033:0x7feac918ebe9 [ 1316.533549][T23393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1316.533560][T23393] RSP: 002b:00007feaca005038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1316.533575][T23393] RAX: ffffffffffffffda RBX: 00007feac93b5fa0 RCX: 00007feac918ebe9 [ 1316.533585][T23393] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 1316.533595][T23393] RBP: 00007feaca005090 R08: 0000000000000000 R09: 0000000000000000 [ 1316.533603][T23393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1316.533611][T23393] R13: 00007feac93b6038 R14: 00007feac93b5fa0 R15: 00007feac94dfa28 [ 1316.533632][T23393] [ 1316.534040][T23383] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1316.926287][T23395] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1316.939925][T21014] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1316.953962][T21014] usb 1-1: invalid MIDI in EP 0 [ 1317.059806][T21014] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1317.102472][ T5924] udevd[5924]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1317.179280][T23398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1317.180007][T23398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1318.297975][T22117] usb 1-1: USB disconnect, device number 43 [ 1318.382484][T23415] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5347'. [ 1318.419482][T23415] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1318.516836][T23418] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5349'. [ 1318.630003][T23422] FAULT_INJECTION: forcing a failure. [ 1318.630003][T23422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1318.644495][T23422] CPU: 1 UID: 0 PID: 23422 Comm: syz.3.5351 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 1318.644522][T23422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1318.644533][T23422] Call Trace: [ 1318.644541][T23422] [ 1318.644549][T23422] dump_stack_lvl+0x189/0x250 [ 1318.644577][T23422] ? __pfx____ratelimit+0x10/0x10 [ 1318.644602][T23422] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1318.644624][T23422] ? __pfx__printk+0x10/0x10 [ 1318.644650][T23422] ? __might_fault+0xb0/0x130 [ 1318.644688][T23422] should_fail_ex+0x414/0x560 [ 1318.644717][T23422] _copy_from_user+0x2d/0xb0 [ 1318.644740][T23422] snd_seq_oss_write+0x140/0x930 [ 1318.644767][T23422] ? get_pid_task+0x20/0x1f0 [ 1318.644800][T23422] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 1318.644826][T23422] ? common_file_perm+0x1b5/0x230 [ 1318.644861][T23422] ? security_file_permission+0x75/0x290 [ 1318.644890][T23422] odev_write+0x5a/0x80 [ 1318.644908][T23422] ? __pfx_odev_write+0x10/0x10 [ 1318.644929][T23422] vfs_write+0x27e/0xb30 [ 1318.644963][T23422] ? __pfx_vfs_write+0x10/0x10 [ 1318.644989][T23422] ? __fget_files+0x2a/0x420 [ 1318.645009][T23422] ? __fget_files+0x2a/0x420 [ 1318.645024][T23422] ? __fget_files+0x3a0/0x420 [ 1318.645040][T23422] ? __fget_files+0x2a/0x420 [ 1318.645071][T23422] ksys_write+0x145/0x250 [ 1318.645098][T23422] ? __pfx_ksys_write+0x10/0x10 [ 1318.645120][T23422] ? rcu_is_watching+0x15/0xb0 [ 1318.645144][T23422] ? do_syscall_64+0xbe/0x3b0 [ 1318.645175][T23422] do_syscall_64+0xfa/0x3b0 [ 1318.645200][T23422] ? lockdep_hardirqs_on+0x9c/0x150 [ 1318.645224][T23422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1318.645243][T23422] ? clear_bhb_loop+0x60/0xb0 [ 1318.645265][T23422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1318.645283][T23422] RIP: 0033:0x7f9bd358ebe9 [ 1318.645300][T23422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1318.645317][T23422] RSP: 002b:00007f9bd44d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1318.645337][T23422] RAX: ffffffffffffffda RBX: 00007f9bd37b5fa0 RCX: 00007f9bd358ebe9 [ 1318.645351][T23422] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 0000000000000007 [ 1318.645363][T23422] RBP: 00007f9bd44d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1318.645375][T23422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1318.645386][T23422] R13: 00007f9bd37b6038 R14: 00007f9bd37b5fa0 R15: 00007f9bd38dfa28 [ 1318.645415][T23422] [ 1318.967669][T22117] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1319.057890][T23428] netlink: 'syz.0.5353': attribute type 10 has an invalid length. [ 1319.068524][T23432] FAULT_INJECTION: forcing a failure. [ 1319.068524][T23432] name failslab, interval 1, probability 0, space 0, times 0 [ 1319.081482][T23432] CPU: 0 UID: 0 PID: 23432 Comm: syz.3.5354 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 1319.081509][T23432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1319.081521][T23432] Call Trace: [ 1319.081529][T23432] [ 1319.081538][T23432] dump_stack_lvl+0x189/0x250 [ 1319.081566][T23432] ? __pfx____ratelimit+0x10/0x10 [ 1319.081592][T23432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1319.081614][T23432] ? __pfx__printk+0x10/0x10 [ 1319.081646][T23432] ? __pfx___might_resched+0x10/0x10 [ 1319.081663][T23432] ? fs_reclaim_acquire+0x7d/0x100 [ 1319.081697][T23432] should_fail_ex+0x414/0x560 [ 1319.081727][T23432] ? alloc_netdev_mqs+0xc7c/0x11b0 [ 1319.081748][T23432] should_failslab+0xa8/0x100 [ 1319.081796][T23432] __kvmalloc_node_noprof+0x161/0x5f0 [ 1319.081824][T23432] ? alloc_netdev_mqs+0xc7c/0x11b0 [ 1319.081844][T23432] ? alloc_netdev_mqs+0xbf1/0x11b0 [ 1319.081871][T23432] alloc_netdev_mqs+0xc7c/0x11b0 [ 1319.081901][T23432] rtnl_create_link+0x31f/0xd10 [ 1319.081930][T23432] rtnl_newlink_create+0x25c/0xb00 [ 1319.081949][T23432] ? __pfx___nla_validate_parse+0x10/0x10 [ 1319.081979][T23432] ? __lock_acquire+0xab9/0xd20 [ 1319.082016][T23432] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1319.082038][T23432] ? __pfx___mutex_lock+0x10/0x10 [ 1319.082074][T23432] ? ns_capable+0x8a/0xf0 [ 1319.082096][T23432] rtnl_newlink+0x16d6/0x1c70 [ 1319.082124][T23432] ? netlink_sendmsg+0x805/0xb30 [ 1319.082163][T23432] ? __pfx_rtnl_newlink+0x10/0x10 [ 1319.082213][T23432] ? kasan_quarantine_put+0xdd/0x220 [ 1319.082237][T23432] ? lockdep_hardirqs_on+0x9c/0x150 [ 1319.082268][T23432] ? nlmon_xmit+0xb0/0x100 [ 1319.082284][T23432] ? kmem_cache_free+0x18f/0x400 [ 1319.082318][T23432] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1319.082356][T23432] ? lockdep_hardirqs_on+0x9c/0x150 [ 1319.082383][T23432] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1319.082403][T23432] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1319.082427][T23432] ? __dev_queue_xmit+0x27b/0x3b50 [ 1319.082467][T23432] ? __dev_queue_xmit+0x27b/0x3b50 [ 1319.082488][T23432] ? __dev_queue_xmit+0x27b/0x3b50 [ 1319.082512][T23432] ? __dev_queue_xmit+0x1d79/0x3b50 [ 1319.082542][T23432] ? __lock_acquire+0xab9/0xd20 [ 1319.082601][T23432] ? __pfx_rtnl_newlink+0x10/0x10 [ 1319.082631][T23432] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1319.082665][T23432] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1319.082694][T23432] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1319.082721][T23432] ? ref_tracker_free+0x63a/0x7d0 [ 1319.082751][T23432] ? __asan_memcpy+0x40/0x70 [ 1319.082774][T23432] ? __pfx_ref_tracker_free+0x10/0x10 [ 1319.082812][T23432] ? __skb_clone+0x63/0x7a0 [ 1319.082844][T23432] netlink_rcv_skb+0x205/0x470 [ 1319.082874][T23432] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1319.082906][T23432] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1319.082950][T23432] ? netlink_deliver_tap+0x2e/0x1b0 [ 1319.082989][T23432] netlink_unicast+0x82f/0x9e0 [ 1319.083026][T23432] ? __pfx_netlink_unicast+0x10/0x10 [ 1319.083056][T23432] ? netlink_sendmsg+0x642/0xb30 [ 1319.083084][T23432] ? skb_put+0x11b/0x210 [ 1319.083107][T23432] netlink_sendmsg+0x805/0xb30 [ 1319.083149][T23432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1319.083184][T23432] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1319.083218][T23432] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1319.083241][T23432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1319.083273][T23432] __sock_sendmsg+0x21c/0x270 [ 1319.083304][T23432] ____sys_sendmsg+0x505/0x830 [ 1319.083332][T23432] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1319.083365][T23432] ? import_iovec+0x74/0xa0 [ 1319.083393][T23432] ___sys_sendmsg+0x21f/0x2a0 [ 1319.083417][T23432] ? __pfx____sys_sendmsg+0x10/0x10 [ 1319.083481][T23432] ? __fget_files+0x2a/0x420 [ 1319.083499][T23432] ? __fget_files+0x3a0/0x420 [ 1319.083530][T23432] __x64_sys_sendmsg+0x19b/0x260 [ 1319.083555][T23432] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1319.083588][T23432] ? __pfx_ksys_write+0x10/0x10 [ 1319.083613][T23432] ? rcu_is_watching+0x15/0xb0 [ 1319.083641][T23432] ? do_syscall_64+0xbe/0x3b0 [ 1319.083675][T23432] do_syscall_64+0xfa/0x3b0 [ 1319.083703][T23432] ? lockdep_hardirqs_on+0x9c/0x150 [ 1319.083741][T23432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.083762][T23432] ? clear_bhb_loop+0x60/0xb0 [ 1319.083794][T23432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.083814][T23432] RIP: 0033:0x7f9bd358ebe9 [ 1319.083832][T23432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1319.083851][T23432] RSP: 002b:00007f9bd44d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1319.083873][T23432] RAX: ffffffffffffffda RBX: 00007f9bd37b5fa0 RCX: 00007f9bd358ebe9 [ 1319.083888][T23432] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1319.083901][T23432] RBP: 00007f9bd44d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1319.083913][T23432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1319.083924][T23432] R13: 00007f9bd37b6038 R14: 00007f9bd37b5fa0 R15: 00007f9bd38dfa28 [ 1319.083956][T23432] [ 1319.563955][ C0] vkms_vblank_simulate: vblank timer overrun [ 1319.596668][T22117] usb 6-1: device descriptor read/64, error -71 [ 1319.842170][T22117] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1319.942144][T16207] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1319.952135][T21014] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1319.972109][T22117] usb 6-1: device descriptor read/64, error -71 [ 1320.082362][T22117] usb usb6-port1: attempt power cycle [ 1320.094153][T16207] usb 1-1: Using ep0 maxpacket: 16 [ 1320.107370][T16207] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1320.116956][T16207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.125363][T16207] usb 1-1: Product: syz [ 1320.127383][T21014] usb 4-1: Using ep0 maxpacket: 8 [ 1320.129712][T16207] usb 1-1: Manufacturer: syz [ 1320.140617][T16207] usb 1-1: SerialNumber: syz [ 1320.149870][T16207] usb 1-1: config 0 descriptor?? [ 1320.151617][T21014] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1320.170584][T21014] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.189150][T21014] usb 4-1: config 0 has no interface number 0 [ 1320.198338][T21014] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1320.211407][T21014] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.219859][T21014] usb 4-1: Product: syz [ 1320.225011][T21014] usb 4-1: Manufacturer: syz [ 1320.229695][T21014] usb 4-1: SerialNumber: syz [ 1320.241909][T21014] usb 4-1: config 0 descriptor?? [ 1320.365360][T16207] speedtch 1-1:0.0: speedtch_bind: wrong device class 68 [ 1320.373377][T16207] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1320.425619][T22117] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1320.452833][T22117] usb 6-1: device descriptor read/8, error -71 [ 1320.459923][T21014] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 1320.466789][T21014] usb 4-1: No valid video chain found. [ 1320.587128][T23437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5356'. [ 1320.597373][T23437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5356'. [ 1320.611430][T23437] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1320.666377][ T5937] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1320.683571][T20349] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1320.700567][T22117] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1320.716418][T21014] usb 1-1: USB disconnect, device number 44 [ 1320.717082][ T5937] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1320.734265][ T9515] usb 4-1: USB disconnect, device number 60 [ 1320.742418][T20349] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1320.755035][T22117] usb 6-1: device descriptor read/8, error -71 [ 1320.771168][ T5937] usb 5-1: USB disconnect, device number 76 [ 1320.780300][T20349] usb 2-1: USB disconnect, device number 54 [ 1320.862828][T22117] usb usb6-port1: unable to enumerate USB device [ 1321.092197][ T5937] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1321.246049][ T5937] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1321.258220][ T5937] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1321.278747][ T5937] usb 5-1: can't read configurations, error -61 [ 1321.405117][T23456] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5364'. [ 1321.414435][ T5937] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1321.429883][T23456] bond0: entered promiscuous mode [ 1321.435309][T23456] bond_slave_0: entered promiscuous mode [ 1321.441226][T23456] bond_slave_1: entered promiscuous mode [ 1321.448751][T23456] bond0: left promiscuous mode [ 1321.453693][T23456] bond_slave_0: left promiscuous mode [ 1321.459397][T23456] bond_slave_1: left promiscuous mode [ 1321.594932][ T5937] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1321.609881][ T5937] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1321.612297][T21014] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1321.627532][T23460] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5366'. [ 1321.629124][ T5937] usb 5-1: can't read configurations, error -61 [ 1321.652256][ T5937] usb usb5-port1: attempt power cycle [ 1321.761278][T23463] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1321.777757][T21014] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1321.792960][T21014] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1321.814526][T21014] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1321.829181][T21014] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.849106][T23454] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1321.866533][T21014] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1321.880494][T23469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5370'. [ 1321.897284][T23469] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1321.922595][ T9501] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1322.004223][ T5937] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1322.023272][T23472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5371'. [ 1322.035390][T23472] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1322.041351][ T5937] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1322.070373][ T5937] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1322.081275][ T5937] usb 5-1: can't read configurations, error -61 [ 1322.081915][T21014] usb 1-1: USB disconnect, device number 45 [ 1322.115311][ T9501] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1322.133344][T23474] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.5372'. [ 1322.141419][ T9501] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1322.154698][ T5963] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1322.191288][ T9501] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1322.199782][T23474] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5372'. [ 1322.205116][ T9501] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.212906][ T5937] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1322.236306][ T9501] usb 6-1: config 0 descriptor?? [ 1322.249100][ T5937] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1322.277379][ T5937] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1322.292872][ T5937] usb 5-1: can't read configurations, error -61 [ 1322.299732][ T5937] usb usb5-port1: unable to enumerate USB device [ 1322.334450][ T5963] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1322.350865][ T5963] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1322.371446][ T5963] usb 2-1: config 220 has no interface number 2 [ 1322.385793][ T5963] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1322.406847][ T5963] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1322.413899][ T5963] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1322.420876][ T5963] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1322.436570][ T5963] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1322.449663][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.462903][ T9501] Bluetooth: Can't get state to change to load ram patch err [ 1322.479170][ T9501] Bluetooth: Loading patch file failed [ 1322.485629][ T9501] ath3k 6-1:0.0: probe with driver ath3k failed with error -71 [ 1322.495313][ T5963] usb 2-1: Product: syz [ 1322.499769][ T5963] usb 2-1: Manufacturer: syz [ 1322.505427][ T5963] usb 2-1: SerialNumber: syz [ 1322.511680][ T9501] usb 6-1: USB disconnect, device number 23 [ 1322.644700][T23481] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 1322.687120][T23481] nvme_fabrics: unknown parameter or missing value 'Ì' in ctrl creation request [ 1322.735045][T23467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.753061][T23467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1323.385671][ T5963] usb 2-1: selecting invalid altsetting 0 [ 1323.413629][ T5963] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1323.442791][ T5963] usb 2-1: No valid video chain found. [ 1323.450793][T23490] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5376'. [ 1323.478048][ T5963] usb 2-1: selecting invalid altsetting 0 [ 1323.487767][T23490] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1323.507149][ T5963] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1323.577553][ T5963] usb 2-1: USB disconnect, device number 55 [ 1324.362076][T21014] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1324.527241][T23504] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5380'. [ 1324.547875][T23504] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5380'. [ 1324.551180][T21014] usb 6-1: device descriptor read/64, error -71 [ 1324.832207][T21014] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1324.902720][T23512] netpci0: tun_chr_ioctl cmd 2147767507 [ 1324.972276][T21014] usb 6-1: device descriptor read/64, error -71 [ 1325.173582][T21014] usb usb6-port1: attempt power cycle [ 1325.612364][T21014] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1325.633500][T21014] usb 6-1: device descriptor read/8, error -71 [ 1325.692229][ T9501] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1325.802172][T20349] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1325.883873][ T9501] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1325.893832][ T9501] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1325.913828][ T9501] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1325.923438][T21014] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1325.931554][ T9501] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1325.940186][ T9501] usb 5-1: SerialNumber: syz [ 1325.952855][T21014] usb 6-1: device descriptor read/8, error -71 [ 1325.987238][T23520] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1326.065614][T21014] usb usb6-port1: unable to enumerate USB device [ 1326.198776][T23520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1326.215559][T23520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1326.326524][T20349] usb 2-1: config 0 has no interfaces? [ 1326.387168][T20349] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1326.438193][T23520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1326.449712][T23520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1326.469571][T20349] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.512067][T20349] usb 2-1: Product: syz [ 1326.567449][ T9501] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 1326.590741][ T9501] usb 5-1: USB disconnect, device number 81 [ 1326.608006][T20349] usb 2-1: Manufacturer: syz [ 1326.617154][T20349] usb 2-1: SerialNumber: syz [ 1326.783383][T20349] usb 2-1: config 0 descriptor?? [ 1326.948786][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 1326.948807][ T30] audit: type=1326 audit(1755289230.604:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23530 comm="syz.5.5391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac918ebe9 code=0x7ffc0000 [ 1327.111870][ T30] audit: type=1326 audit(1755289230.604:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23530 comm="syz.5.5391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feac918ebe9 code=0x7ffc0000 [ 1327.137548][ T30] audit: type=1326 audit(1755289230.604:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23530 comm="syz.5.5391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac918ebe9 code=0x7ffc0000 [ 1327.197713][ T30] audit: type=1326 audit(1755289230.604:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23530 comm="syz.5.5391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7feac918ebe9 code=0x7ffc0000 [ 1327.418543][ T30] audit: type=1326 audit(1755289230.604:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23530 comm="syz.5.5391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac918ebe9 code=0x7ffc0000 [ 1327.626316][ T30] audit: type=1326 audit(1755289230.604:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23530 comm="syz.5.5391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7feac918ebe9 code=0x7ffc0000 [ 1327.722826][ T30] audit: type=1326 audit(1755289230.604:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23530 comm="syz.5.5391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac918ebe9 code=0x7ffc0000 [ 1327.827249][ T30] audit: type=1326 audit(1755289230.604:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23530 comm="syz.5.5391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feac918ebe9 code=0x7ffc0000 [ 1327.913370][ T9501] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1328.022095][ T30] audit: type=1326 audit(1755289230.604:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23530 comm="syz.5.5391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac918ebe9 code=0x7ffc0000 [ 1328.173822][ T9501] usb 1-1: Using ep0 maxpacket: 32 [ 1328.188431][ T9501] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1328.199579][ T9501] usb 1-1: config 251 has an invalid descriptor of length 252, skipping remainder of the config [ 1328.222205][ T9501] usb 1-1: too many endpoints for config 251 interface 0 altsetting 1: 128, using maximum allowed: 30 [ 1328.264216][ T9501] usb 1-1: config 251 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 1328.330262][ T30] audit: type=1326 audit(1755289230.614:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23530 comm="syz.5.5391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7feac918ebe9 code=0x7ffc0000 [ 1328.345119][ T9501] usb 1-1: config 251 interface 0 has no altsetting 0 [ 1328.402148][ T9501] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=20.39 [ 1328.441503][ T9501] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.459777][ T9501] usb 1-1: Product: syz [ 1328.473807][ T9501] usb 1-1: Manufacturer: syz [ 1328.502594][ T9501] usb 1-1: SerialNumber: syz [ 1328.751213][ T9501] kvaser_usb 1-1:251.0: error -ENODEV: Cannot get usb endpoint(s) [ 1328.790210][ T9501] usb 1-1: USB disconnect, device number 46 [ 1328.825956][T20349] usb 2-1: USB disconnect, device number 56 [ 1329.392259][ T9501] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1329.632405][ T9501] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1329.709185][ T9501] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1329.751554][ T9501] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.787842][ T9501] usb 5-1: config 0 descriptor?? [ 1329.804870][ T9501] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1330.040492][T23574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5401'. [ 1330.322687][T20349] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1330.452144][T21014] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 1330.472300][T20349] usb 2-1: device descriptor read/64, error -71 [ 1330.492226][ T9501] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1330.627233][T21014] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 1330.666951][T21014] usb 1-1: config 0 has no interface number 0 [ 1330.673169][ T9501] usb 4-1: Using ep0 maxpacket: 32 [ 1330.681893][T21014] usb 1-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1330.693394][T21014] usb 1-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1330.704983][T21014] usb 1-1: config 0 interface 230 has no altsetting 0 [ 1330.712134][ T9501] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1330.712312][T20349] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1330.720520][ T9501] usb 4-1: config 0 has no interface number 0 [ 1330.755757][T21014] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1330.765593][T21014] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.773906][T21014] usb 1-1: Product: syz [ 1330.778364][T21014] usb 1-1: Manufacturer: syz [ 1330.784330][T21014] usb 1-1: SerialNumber: syz [ 1330.789738][ T9501] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1330.804111][ T9501] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.841650][T21014] usb 1-1: config 0 descriptor?? [ 1330.850433][ T9501] usb 4-1: Product: syz [ 1330.888337][ T9501] usb 4-1: Manufacturer: syz [ 1330.892579][T20349] usb 2-1: device descriptor read/64, error -71 [ 1330.893111][ T9501] usb 4-1: SerialNumber: syz [ 1330.900418][T23584] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1330.915117][ T5871] ------------[ cut here ]------------ [ 1330.921079][ T5871] WARNING: CPU: 0 PID: 5871 at net/bluetooth/hci_conn.c:568 hci_conn_timeout+0xff/0x290 [ 1330.930940][ T5871] Modules linked in: [ 1330.935177][ T5871] CPU: 0 UID: 0 PID: 5871 Comm: kworker/u9:4 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 1330.947616][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1330.952470][T23584] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1330.957905][ T5871] Workqueue: hci0 hci_conn_timeout [ 1330.968255][T21014] ums-usbat 1-1:0.230: USB Mass Storage device detected [ 1330.970073][ T5871] RIP: 0010:hci_conn_timeout+0xff/0x290 [ 1330.970102][ T5871] Code: 48 89 df e8 23 05 09 00 eb 07 e8 7c 9d 48 f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 37 ca fe ff e8 62 9d 48 f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff [ 1331.004234][ T5871] RSP: 0018:ffffc9000420fa50 EFLAGS: 00010293 [ 1331.010312][ T5871] RAX: ffffffff8a770e2e RBX: ffff88805edd4000 RCX: ffff888033059e00 [ 1331.018736][ T5871] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 1331.026790][ T5871] RBP: 00000000ffffffff R08: ffff88805edd4013 R09: 1ffff1100bdba802 [ 1331.035021][ T5871] R10: dffffc0000000000 R11: ffffed100bdba803 R12: dffffc0000000000 [ 1331.043054][ T5871] R13: ffff88801fee0e18 R14: ffff88805edd4948 R15: ffff88805edd4010 [ 1331.051025][ T5871] FS: 0000000000000000(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 1331.059993][ T5871] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1331.066811][ T5871] CR2: 00002000000ef030 CR3: 000000007e1be000 CR4: 00000000003526f0 [ 1331.074828][ T5871] Call Trace: [ 1331.078108][ T5871] [ 1331.081034][ T5871] ? process_scheduled_works+0x9ef/0x17b0 [ 1331.086783][ T5871] process_scheduled_works+0xade/0x17b0 [ 1331.092949][ T5871] ? __pfx_process_scheduled_works+0x10/0x10 [ 1331.098949][ T5871] worker_thread+0x8a0/0xda0 [ 1331.103889][ T5871] kthread+0x70e/0x8a0 [ 1331.107975][ T5871] ? __pfx_worker_thread+0x10/0x10 [ 1331.113115][ T5871] ? __pfx_kthread+0x10/0x10 [ 1331.117707][ T5871] ? _raw_spin_unlock_irq+0x23/0x50 [ 1331.123134][ T5871] ? lockdep_hardirqs_on+0x9c/0x150 [ 1331.128359][ T5871] ? __pfx_kthread+0x10/0x10 [ 1331.132983][ T5871] ret_from_fork+0x3f9/0x770 [ 1331.137575][ T5871] ? __pfx_ret_from_fork+0x10/0x10 [ 1331.142762][ T5871] ? __switch_to_asm+0x39/0x70 [ 1331.147536][ T5871] ? __switch_to_asm+0x33/0x70 [ 1331.152650][ T5871] ? __pfx_kthread+0x10/0x10 [ 1331.157275][ T5871] ret_from_fork_asm+0x1a/0x30 [ 1331.162120][ T5871] [ 1331.165144][ T5871] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1331.172413][ T5871] CPU: 0 UID: 0 PID: 5871 Comm: kworker/u9:4 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 1331.184580][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1331.194630][ T5871] Workqueue: hci0 hci_conn_timeout [ 1331.199744][ T5871] Call Trace: [ 1331.203022][ T5871] [ 1331.205946][ T5871] dump_stack_lvl+0x99/0x250 [ 1331.210530][ T5871] ? __asan_memcpy+0x40/0x70 [ 1331.215129][ T5871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1331.220324][ T5871] ? __pfx__printk+0x10/0x10 [ 1331.224955][ T5871] vpanic+0x281/0x750 [ 1331.228943][ T5871] ? __pfx__printk+0x10/0x10 [ 1331.233534][ T5871] ? __pfx_vpanic+0x10/0x10 [ 1331.238042][ T5871] ? is_bpf_text_address+0x292/0x2b0 [ 1331.243357][ T5871] panic+0xb9/0xc0 [ 1331.247077][ T5871] ? __pfx_panic+0x10/0x10 [ 1331.251493][ T5871] __warn+0x31b/0x4b0 [ 1331.255468][ T5871] ? hci_conn_timeout+0xff/0x290 [ 1331.260402][ T5871] ? hci_conn_timeout+0xff/0x290 [ 1331.265337][ T5871] report_bug+0x2be/0x4f0 [ 1331.269671][ T5871] ? hci_conn_timeout+0xff/0x290 [ 1331.274606][ T5871] ? hci_conn_timeout+0xff/0x290 [ 1331.279585][ T5871] ? hci_conn_timeout+0x101/0x290 [ 1331.284623][ T5871] handle_bug+0x84/0x160 [ 1331.288890][ T5871] exc_invalid_op+0x1a/0x50 [ 1331.293392][ T5871] asm_exc_invalid_op+0x1a/0x20 [ 1331.298254][ T5871] RIP: 0010:hci_conn_timeout+0xff/0x290 [ 1331.303804][ T5871] Code: 48 89 df e8 23 05 09 00 eb 07 e8 7c 9d 48 f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 37 ca fe ff e8 62 9d 48 f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff [ 1331.323433][ T5871] RSP: 0018:ffffc9000420fa50 EFLAGS: 00010293 [ 1331.329510][ T5871] RAX: ffffffff8a770e2e RBX: ffff88805edd4000 RCX: ffff888033059e00 [ 1331.337492][ T5871] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 1331.345465][ T5871] RBP: 00000000ffffffff R08: ffff88805edd4013 R09: 1ffff1100bdba802 [ 1331.353439][ T5871] R10: dffffc0000000000 R11: ffffed100bdba803 R12: dffffc0000000000 [ 1331.361419][ T5871] R13: ffff88801fee0e18 R14: ffff88805edd4948 R15: ffff88805edd4010 [ 1331.369406][ T5871] ? hci_conn_timeout+0xfe/0x290 [ 1331.374356][ T5871] ? process_scheduled_works+0x9ef/0x17b0 [ 1331.380078][ T5871] process_scheduled_works+0xade/0x17b0 [ 1331.385656][ T5871] ? __pfx_process_scheduled_works+0x10/0x10 [ 1331.391657][ T5871] worker_thread+0x8a0/0xda0 [ 1331.396257][ T5871] kthread+0x70e/0x8a0 [ 1331.400327][ T5871] ? __pfx_worker_thread+0x10/0x10 [ 1331.405433][ T5871] ? __pfx_kthread+0x10/0x10 [ 1331.410027][ T5871] ? _raw_spin_unlock_irq+0x23/0x50 [ 1331.415228][ T5871] ? lockdep_hardirqs_on+0x9c/0x150 [ 1331.420422][ T5871] ? __pfx_kthread+0x10/0x10 [ 1331.425009][ T5871] ret_from_fork+0x3f9/0x770 [ 1331.429598][ T5871] ? __pfx_ret_from_fork+0x10/0x10 [ 1331.434718][ T5871] ? __switch_to_asm+0x39/0x70 [ 1331.439494][ T5871] ? __switch_to_asm+0x33/0x70 [ 1331.444271][ T5871] ? __pfx_kthread+0x10/0x10 [ 1331.448862][ T5871] ret_from_fork_asm+0x1a/0x30 [ 1331.453643][ T5871] [ 1331.456990][ T5871] Kernel Offset: disabled [ 1331.461314][ T5871] Rebooting in 86400 seconds..