last executing test programs: 7m23.382287644s ago: executing program 32 (id=113): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x4, 0x9}]}) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x30}}, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02150000e578a6ed5bb9c26ed697944d4b06c19897", 0x29) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @empty, 0x7}, {0xa, 0x0, 0x0, @mcast2, 0xfffffffe}, r6}}, 0xfffffe10) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x1, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="b2", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000200)) 7m17.460570314s ago: executing program 33 (id=143): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0xfffffffa, 0x5, 0x0, 0x3, 0x0, "964d22c60f0865671a33b6253500"}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) read$FUSE(r0, &(0x7f0000004900)={0x2020}, 0x2020) writev(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f00000007c0)='T', 0x1}], 0x1) r1 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141101) io_uring_setup(0x77c5, &(0x7f0000000080)={0x0, 0xca3a, 0x8, 0x2, 0x124}) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x34a3, &(0x7f0000000280)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x3e, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20008004) r9 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) syz_clone(0x58060200, 0x0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r9, 0x0, 0x0, 0x200005, 0x0) epoll_create1(0x80000) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) 7m16.084202332s ago: executing program 34 (id=151): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000040), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x201, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000200), &(0x7f00000000c0)=[0x0], &(0x7f0000000340)}) 7m14.953590819s ago: executing program 0 (id=156): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) ioctl$int_in(r0, 0x5452, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) 7m14.778387291s ago: executing program 0 (id=157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ff"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 7m13.969414533s ago: executing program 0 (id=159): r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$rds(r0, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000a80)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x810}, 0x80) 7m13.551918376s ago: executing program 35 (id=159): r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$rds(r0, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000a80)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x810}, 0x80) 6m50.888487109s ago: executing program 36 (id=220): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000004000000", 0x39}], 0x1) 4m23.454205262s ago: executing program 37 (id=870): ioperm(0x4, 0x1, 0xff) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000180)=0x800001, 0x4) gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r4, 0x80045300, 0x0) 3m52.86313974s ago: executing program 7 (id=989): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@private1, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x33}, {0x80000001, 0x8001, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x400}, {0x0, 0x1, 0x0, 0x80000000}, 0x0, 0x0, 0x1, 0x1}, {{@in=@local, 0x2, 0x6c}, 0xa, @in6=@mcast2, 0x0, 0x4}}, 0xe8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8041) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000340)) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x3}) prlimit64(0x0, 0x0, 0x0, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) r4 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffb000/0x1000)=nil) shmctl$SHM_STAT(r4, 0xd, &(0x7f00000019c0)=""/4096) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = syz_open_dev$ndb(0x0, 0x0, 0x141000) r6 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000380)={'\x00', 0xffff, 0x1ff, 0x4, 0x2, 0x9, r6}) unshare(0x40000000) 3m51.125615496s ago: executing program 7 (id=991): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3m50.514682203s ago: executing program 7 (id=993): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="00000080000000000000000000000000f00000000000006cbb60ebf1d1eb650000000000"], 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='children\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffac) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='qdisc_create\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000240)={0x2, &(0x7f00000000c0)=[{0x5, 0x9, 0x3, 0xffffffff}, {0xff80, 0xc, 0x2, 0x3}]}) socket$netlink(0x10, 0x3, 0x0) gettid() pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0xf39, 0x0) 3m48.747991403s ago: executing program 7 (id=1001): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x1) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) 3m47.723634445s ago: executing program 7 (id=1005): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r3, @ANYBLOB="0599000000000000180012800800"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendto$packet(r0, &(0x7f0000000280)='1', 0x1, 0x8040, &(0x7f0000000200)={0x11, 0x18, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x14) 3m47.340215999s ago: executing program 7 (id=1007): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004080)=[{{0x0, 0x0, 0x0}, 0x685}], 0x1, 0x40000130, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) 3m46.740300652s ago: executing program 38 (id=1007): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004080)=[{{0x0, 0x0, 0x0}, 0x685}], 0x1, 0x40000130, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) 3m14.721022932s ago: executing program 9 (id=1142): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0xf39, 0x0) 3m13.592258628s ago: executing program 9 (id=1143): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000001680)=@gcm_128={{0x303}, '\x00', "568c9f21823385cf6b936989b62bac53", '\x00', "b2b08b28e311eec7"}, 0x28) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfdef) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) 3m13.288180845s ago: executing program 9 (id=1145): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000240)={0x1, 0x80, 0x3, 0xf, 0x6, 0xff, 0x28, 0xd5, 0xb, 0xd, 0xf8, 0x5, 0x5, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000340)="698384d7cc3b3bde6933e9aaf4", 0xd}, {0x0}], 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3m12.247769248s ago: executing program 9 (id=1148): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x1) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) 3m11.277744397s ago: executing program 9 (id=1155): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000001680)=@gcm_128={{0x303}, '\x00', "568c9f21823385cf6b936989b62bac53", '\x00', "b2b08b28e311eec7"}, 0x28) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfdef) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) 3m10.560066209s ago: executing program 9 (id=1158): socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000540)=0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 3m10.437937778s ago: executing program 39 (id=1158): socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000540)=0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 3m9.657814966s ago: executing program 3 (id=1165): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 3m9.304774947s ago: executing program 3 (id=1167): syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010010905"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r3, 0x0, &(0x7f0000000200)) r4 = syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0xb, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3m6.133432261s ago: executing program 3 (id=1177): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x1, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 3m4.17367127s ago: executing program 3 (id=1181): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x3, 0x402, 0xd4e, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x7) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0x20363159}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000008c0)={0x2, 0x0, @ioapic={0xeeef0000, 0xfffffffe, 0x6, 0xeffffdff, 0x0, [{0x0, 0xff, 0xfc, '\x00', 0xfd}, {0xfb, 0x3, 0x5, '\x00', 0x9}, {0x8, 0x4, 0x0, '\x00', 0xfe}, {0x0, 0x1, 0x7f}, {}, {0x4, 0x65, 0xfe}, {0x3, 0xff, 0x2c, '\x00', 0x81}, {0x0, 0x1, 0x1, '\x00', 0x1}, {0x4e, 0x10, 0x4, '\x00', 0x2}, {0x2, 0x9, 0x40}, {0x0, 0x4, 0x0, '\x00', 0x7}, {0x0, 0x8, 0x5, '\x00', 0xfc}, {0x3, 0x10, 0x6}, {0x3}, {0x0, 0x6, 0x3}, {0x0, 0x6, 0x80}, {0x80, 0x2, 0xff, '\x00', 0x79}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x4, '\x00', 0x5}, {0x40, 0x0, 0x0, '\x00', 0x26}, {0x8, 0x6, 0xff}, {0x1, 0x0, 0x1}, {0xf6, 0x0, 0x9, '\x00', 0xfc}, {0x0, 0x43, 0x7, '\x00', 0x1}]}}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x2202, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x9) ioctl$IOCTL_GET_NUM_DEVICES(r3, 0x40046104, &(0x7f0000000b00)) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r4, 0xc1086201, &(0x7f0000000240)={'binder0\x00'}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904000001cf28fc000905e20040"], 0x0) syz_usb_connect(0x7, 0x775, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x37, 0x2b, 0xa8, 0x40, 0xbb4, 0xa81, 0x5226, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x763, 0x2, 0xd, 0x0, 0x80, 0x6, [{{0x9, 0x4, 0x60, 0x5, 0xf, 0xea, 0x8d, 0xed, 0xf9, [], [{{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x1, 0x4, 0x5d}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x2, 0x4, 0x8, [@generic={0x93, 0x22, "7193a7bf497af346e7e43b5f6e3292cb422c29a58b0ee5c8123ab87dc40ddf3fb5ac36f642570cfd1d5221d79e325117b1c4378e16eaee1e1949bbb4e38ebcaf04f89ee7506e9384d8e7327650b98b6dd78b52847c6cdfb2312d8bd1d7d7b2e16d7d0ba7f100acad165e28cfebdacf4ae45cc4dbb04e45f7c855f49f3e9e32d61aa63e167fbc2f7ea077de418572c0ceff"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0xc, 0x5a, 0x3}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x7, 0x5, 0x1}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x6, 0x5, 0x8d}}, {{0x9, 0x5, 0xc, 0x4, 0x400, 0x2, 0x3, 0x66}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x7, 0xfe, 0x5}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x22, 0x0, 0x54, [@generic={0x5, 0x4, "abe2fe"}, @generic={0x74, 0xd, "53574b89b36d087b44e9b302deb34fa6f59d49924ceff28511f0035722ad8000641d52490aabf9441cc358275053551974b6158fc7e989571f41819b1c85f833877b7db584ba60a39e06bd338d66040884463f0d704735f861ce1a83fe30d249610cc521a21839e169d47dd16eeab0844972"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0xff, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x37, 0x9}, @generic={0xe8, 0xa, "1d0bd7ebead98ad34e59b8b8f739632b91f2c151e3f0d950ce484725dc56f2f393505f58b4616ecf1d806f2d90950bc26832c6d0c11bda70c8860a364b3afd56550762169cd8e1e4168495e48a81b82b3a4cf45df230fd48af35df8de81e9a78b359f817600dfcedbb5b775c863553f5c943314a920f0d5578fa4cb3517ccf168198c2e4333adda2e30436e4d624ba0d2daf39f8eaa41a68cd92d6b2bff45209070937cc825138ebbe5f3ddcbb66b3bd18173836a50fe479abcd1bad18acf022e67dc98727609cd3c60e284eb71f8cf30432396fb39dcada354fe6fab07fb389542ddb0be2c8"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x10, 0x0, 0x5, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x9}, @generic={0x64, 0xb, "5e04282a5a33f4e26d8c0778ecf1f63a94acbcc6a7e825ab4dd1a0d9eecfcde76504604753cdabb946f2621922944714d9eac7dfbdc38c272cb127eeade42cc30cc3277a37ed8cd951bca355bc66fd2aa73d2ea333c622a454df9a4d70e19abe46cd"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x3, 0xa0, 0x7}}, {{0x9, 0x5, 0xc, 0x8, 0x20, 0x6, 0x6, 0x8, [@generic={0xab, 0x0, "0b9d4a26a86607272bce80cb6af5facedfc2e54b7f88ec261c289d04ccae54dc8d8959b13438e7602d836d752d353843b4d17a11a0fb136a11691b662d375df75aca91b35f061cf8f93c453c659afcfa0232e254ec8e231442d3a0a34f1a13aaf4f817087a88204e1ce90fb8b732de3aa6fa35c49ea4b5ede1c6d1777391bd58de86c45b22394f302275833cd36e4de64a805c1cf936182954fd3b44b8a8dbce6313178ab2c2fc3ee4"}, @generic={0xc, 0x3c, "d1f5c378234e4ae0e1b0"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x3ff, 0x1, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x8000}]}}, {{0x9, 0x5, 0x5, 0x8, 0x8, 0x4, 0xd0, 0x50}}, {{0x9, 0x5, 0xf, 0x4, 0x3ff, 0x4, 0x3, 0x8}}]}}, {{0x9, 0x4, 0x7e, 0x81, 0xa, 0x8, 0xb1, 0x60, 0x4, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0xb3, 0x1, 0x3}]}], [{{0x9, 0x5, 0x0, 0x2, 0x20, 0x0, 0xc, 0x80, [@generic={0xd, 0x8, "145314fc96b6389e60c9ef"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0xb, 0x3, 0x1, [@generic={0xfa, 0xa, "9cc643f10c4a3b09bc7163539de32fd8e975c70d4c1eb68e09aa18e8259245e291f4ba9b78595214612bc63763586a0f4920982f8b39ccd226cce56a10f5107193f2cdf5e3747c69a5d6b54fc133f993becdb8e42027f16c29b5fae5ca09718fa45a2fcd339daa2da49c61740c2e662ff9e926712c6c7a0693ebb13a94c216bb762e6260e94ddfcfae4dc6f636891f5f2ac878da68297b1b965b127bb718089f00ddb89472c0e72855603ca9d6d9cbdde5705ada95586e841fabd03d14e0edbab5eaf2a28cc7c5a3853bdd8fc37df85e0cc27fa068e133c11b12581a772a4e95e35a7f59907a9692b13bd1431edba7f3380a3b212850aa4f"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0xfd, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x2}, @generic={0x73, 0xd, "c43eddc2161a674d2e9c9d2c16e095b274f61a188d9c9c20d8425189040c428027d3be91ca4f87f5c8b99047e186e33d1e79720818545271550ba8628572adc62bd8cb31374bc2bb664de50611056c9b4158508e9f58dee12fe333a88dd1112f1d74ac80e8ad2ed14132034235243d5e74"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x3ff, 0x5, 0xc9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x98, 0x4d}, @generic={0xb6, 0xf, "a42283cc83364ba3c8bb0f04ff7ff701d54bbd01170c75c62b860e9afb25759bc7e15893c8953641f5921dfa8f2d238b783c0c9de8410ef3837fea730265e07e4110cda39386e95fc37027aa7dc21e5f0047e0d7c6a3d51d1a8dd44390c68c6bf2861bd9ea7da9066a2760b6715dea1742cc83d47b41ff4f28c7b1fb386264ca4e9cc40dc9b4e37b70a2c0a339fcbdd606affe6f8f8d55079e044efae6462cf08301b599d3d88c633c249b4695e25396d81fd3e3"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x80, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9d, 0x2}]}}, {{0x9, 0x5, 0x3, 0x3, 0x10, 0x74, 0xf1, 0x2}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x7f, 0xb, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x3e, 0x1}]}}, {{0x9, 0x5, 0xf, 0x3, 0x3ff, 0x9, 0x80, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0xfff9}]}}, {{0x9, 0x5, 0x1cd41a0c184763df, 0x4, 0x400, 0x75, 0x96, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0xfffa}, @generic={0xd4, 0xf, "aecab567779ebaa3fe002e017134b51b6d34b116df6c6ccb62949f99ed104d79a574e7e80111d2e88c68acf3e95c6ddbbbb0cb83f6088e89ff655e2f7c2405caf44154f554cac35876da67a83e75ad4cd04ff3dbfcd7918a9b46f7aa5079980f1c82d690a13e9d7be99b0188bbc3ded8ed85519b64e9a6aaae3554720b9b4455c96d3e049522df4ff7c40a2b18337689a36aefc7c60a49a7bfe5f2be3c84d918c3ad7bf57ffdc8a09f4a9030edf136c98febd6f9006309bb1a6e0b884bc971b4d3c63c16fadbaf6b01d86c1b653635318900"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x8, 0x6, 0x9, 0x1}}]}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x80, 0x5, 0x1, 0x8, 0x5}, 0x13, &(0x7f0000000080)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0xe4, 0x4, 0x4, 0x0, 0xff}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x386d}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1c39}}, {0x4, &(0x7f0000000180)=@string={0x4, 0x3, "3ea6"}}]}) 3m0.964074333s ago: executing program 3 (id=1188): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd000000080002", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 3m0.6652485s ago: executing program 3 (id=1190): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) read$alg(r1, &(0x7f0000000080)=""/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4841}, 0x8000) read$alg(r1, &(0x7f0000000300)=""/99, 0x63) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8081) 2m45.1759863s ago: executing program 40 (id=1190): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) read$alg(r1, &(0x7f0000000080)=""/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4841}, 0x8000) read$alg(r1, &(0x7f0000000300)=""/99, 0x63) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8081) 2m30.288881248s ago: executing program 0 (id=1232): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000280)=""/239, 0xef) syz_usb_disconnect(r0) 2m29.076108078s ago: executing program 8 (id=1268): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44e, 0x121e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000280)='.\x00', 0x64000811) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x18, &(0x7f00000002c0)={0x20, 0x6, 0x8b, {0x8b, 0x31, "062d3df622602aa45ea91835a9cc3716147100fc80486186fd96b9df14b050367eaa750b331d9317cf2f8568b5449b20e7a6c5c6d74aef36576e3de39e62a8d9ef4f8a5b3d9072d1fbb0bf96df8a2440a448a02b5e58c56e44098cbbb76efe3791c07db4e6b20b3c11c52b600f18b3923defb21e75b0f749475e8c2a4f6168b8a703f369580a5dc9db"}}, &(0x7f0000000380)={0x0, 0x3, 0xb0, @string={0xb0, 0x3, "25e4677fd86d66300f528593350e1d5e922aa42cdd338ad1ff266021cf79a2bc814a3f6de646df11f34c676f6eb877610acc217709051a193e19a8e1b77e0107774bf89b98e946d2bc4cdfa6eba29417d5c5ae54894c154adbc8fe6d35dd142d3f7db12a85530b8fa5c1e6b82cf123931e3b5199fc6fa7c440eb9a8bec3858878cf4363d00284b3959239e118620168726241a3a279a7fbb6860e4c0d85c93f316429e7723f6f310aefe94ea8d26"}}, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x2, 0x7, 0x9, 0x0, 0x9}}}, &(0x7f0000000900)={0x44, &(0x7f0000000480)={0x40, 0x0, 0xe5, "43c5a50f704b05ef55fc716ec3feb4a124f3b7ae72035f91800ff19e21d5de02fa938d99d1975875a8cce556dde472e690d9fa2a8fed591ca853e3b337d88e1647f293fd76fac8f966a358efba89f22e830d9a95f565e98287e3a3d5415b03231c75e02032debc59451d23c1fa7d4130f178bcee0ebbc648b8fcf3afaf6fd8708c3931412e9c5385fd714fdabb879f821716909a1ba82bb94029e024b5d54c78aed71d8fdcb7265d6dfe49e0e84152829b8ca284520c3c05d593aec2e42eb02d936a835c0c24ce87842cdcd3402042b4dfd33621f6db6b90a59d2e5286ac6f4d6060f49037"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x1410, 0x8, [0xf0]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x5}, &(0x7f00000006c0)={0x40, 0xb, 0x2, '-Z'}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000740)={0x40, 0x13, 0x6}, &(0x7f0000000780)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "9248"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0xf5c6}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x7}}) chdir(&(0x7f0000000140)='./file0\x00') syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000000)={0x0, 0x9, 0x7, {0x7, 0x7, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2m27.91739534s ago: executing program 0 (id=1270): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) sendmmsg$inet6(r1, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000340)="698384d7cc3b3bde6933e9aaf4", 0xd}, {0x0}], 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 2m27.697241815s ago: executing program 0 (id=1271): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) read$alg(r1, &(0x7f0000000080)=""/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4841}, 0x8000) read$alg(r1, &(0x7f0000000300)=""/99, 0x63) socket(0x2, 0x80805, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8081) 2m25.919473878s ago: executing program 8 (id=1276): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002dc0)=@delchain={0x5b8, 0x65, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x4, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x588, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x40}, @TCA_ROUTE4_ACT={0x57c, 0x6, [@m_simple={0x21c, 0x1f, 0x0, 0x0, {{0xb}, {0x98, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8401, 0x2, 0x1, 0x2, 0x8}}, @TCA_DEF_DATA={0x2d, 0x3, '@-^[\xa5&,.\x00pe\xe9\xb9\xf1Q+=\xdf\xacqd\xb4\xd3\rj6\xb4\xa6fz\x91\xa6\xe9\xdfy\xef\xbcY\xbb[a'}, @TCA_DEF_DATA={0x7, 0x3, 'lo\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x403, 0xfffffffffffffffe, 0x4, 0x2}}, @TCA_DEF_DATA={0x7, 0x3, '\xfc}\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x1, 0x0, 0x4, 0x8}}, @TCA_DEF_DATA={0xb, 0x3, 'j\xbf!*{$\x00'}]}, {0x159, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x184, 0x4, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffff, 0x200, 0x8, 0x9, 0xff}, 0x5b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xfffffffb, 0x10000000, 0x6357cdec, 0x10000}, 0xf}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x6d7, 0x5, 0x4, 0x8001}, 0x1a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe0, 0x7, 0xcdb3da5a94de4674, 0x3, 0x1}, 0x54}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x81, 0x10000000, 0x1, 0xc}, 0x18}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10, 0x0, 0x0, 0x0, 0x7}, 0x4d}}]}, {0xad, 0x6, "1dc7479808d6c90250d523862380873363ee290289ff44e789cde40973e125f404b7dae756d1e8a04bcc9637b40abe50f02f62b2e8308eb77b659a331ac115d87d73e6232de8f9dad91575b3d6c8cd6762d5298b996754ad8dcb555bf914140ac84d95a4d4a501b1b4ba7c7fba20a003d5334fc0342357ea596bc8072803118c8dbf3be88e493ab4f40b7b3789b7b297cc61ef1488f4c28dbcf2e92f3b73fa308167e351366a76093f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_vlan={0x60, 0xc, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x30a}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x4e9}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb35}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x715}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x8a7}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_mpls={0x84, 0x15, 0x0, 0x0, {{0x9}, {0x4}, {0x55, 0x6, "b785195954bf29eb39a865c5695a7ac46cec065f7db06dbdba2e8cf062693312261bf71915b2d84a074fd931b04b8440933794ba3bc0c3d3302773efdb92a216873b53281af4671231b5fff52cece35cfe"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_bpf={0xf4, 0x1b, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x7, 0x20000000, 0x0, 0xffffffff}}]}, {0xa9, 0x6, "8d3fe574fbc1ca49b619a269038c45853e95bcebaf7809e37533e03d9655c6e3661b66380f0ea5b4dc2df75af2fc5a96b1bcd59b6a7cf20122ebfae4e633f1f61bdf6b44c90c272314e5d9d2042b89088234fdf2e4fb09989c12df538c477b6f5603235328c12c550a6001ad6984c698c84439349bcc53589560f99227ad7bee24787059ac8319efe501f8c325dadd8a36e79e9ea85aa1fd6bc411fd4cec3509d4f3d04f2f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x5b8}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2m25.623634399s ago: executing program 8 (id=1278): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000280)={'macvlan1\x00', 0x400}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2m23.102580175s ago: executing program 8 (id=1280): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000280)=""/239, 0xef) syz_usb_disconnect(r0) 2m19.947912964s ago: executing program 8 (id=1285): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x3, 0x1, 0x207, 0x0, 0x0, 0x1, 0x7, 0x8000}, 0x20) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(&(0x7f00000022c0), 0x10, 0x109041) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000dc0)={0x2, 0x4e23, @remote}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x345a9267}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) read$FUSE(r3, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r7, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000080), 0x4) ioprio_set$pid(0x3, r6, 0x2007) ioprio_set$pid(0x3, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) dup(r8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 2m15.88942198s ago: executing program 8 (id=1293): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) read$alg(r1, &(0x7f0000000080)=""/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) read$alg(r1, &(0x7f0000000300)=""/99, 0x63) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8081) 2m12.495484392s ago: executing program 41 (id=1271): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) read$alg(r1, &(0x7f0000000080)=""/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4841}, 0x8000) read$alg(r1, &(0x7f0000000300)=""/99, 0x63) socket(0x2, 0x80805, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8081) 2m0.428082419s ago: executing program 42 (id=1293): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) read$alg(r1, &(0x7f0000000080)=""/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) read$alg(r1, &(0x7f0000000300)=""/99, 0x63) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8081) 10.288035881s ago: executing program 4 (id=1654): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = semget(0x0, 0x3, 0x3) semctl$SEM_INFO(r2, 0x2, 0x13, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket(0x11, 0x800000003, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') pread64(r4, &(0x7f0000000280)=""/70, 0x46, 0xbbf9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001d00100028bd7000ffdbdf25070000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 7.960574894s ago: executing program 4 (id=1667): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f000000a400)=[{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000080)="02815196a64bf32c73aa46a3c8", 0xd}], 0x1, 0x0, 0x0, 0x20004c40}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000005ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/186, 0xba}], 0x1}, 0x3}], 0x2, 0x0, 0x0) 7.614362724s ago: executing program 4 (id=1668): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x3, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30bd27, 0x2, {0x0, 0x0, 0x0, r4, {0xfff1, 0xa}, {}, {0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200040c0}, 0x0) 7.317850274s ago: executing program 4 (id=1669): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000020001000003f68c5ee17688a200320802d6da123aa983b77f0300000a9a2f00009afc5ad9485bbb6a880000d6c8db0000dba67e694517e3cdff06018000020000f10607bdff59100ac45761407a681f009cee4a5acb3da404001fb71cacebc7b44e096a315033bf79ac0800060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a84e605007f71174aa951f3b0a0c9251574ca408991698bc63e5c83f1ba", 0xb8) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000000c0)={@ifindex, 0xa, 0x31, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x162) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x40, 0x3, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_OPEN={0x8}]}]}, 0x40}}, 0x0) syz_fuse_handle_req(r4, &(0x7f0000004300)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x90, 0x0, 0x0, {0x4, 0x3, 0x0, 0x80000000000, 0x0, 0x40000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0xfffffffd}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000600)='kmem_cache_free\x00', r8}, 0x18) r9 = dup(0xffffffffffffffff) write$FUSE_INIT(r4, &(0x7f0000000e00)={0x50, 0x0, r5}, 0x50) unlink(&(0x7f0000000080)='./file0/file0/file0\x00') syz_fuse_handle_req(r4, &(0x7f0000006300)="ac3baf85266b6996db8802bf503684f8d5de2d126f4d3a9e46c86d11276287b17bd6c4fc3c0671b3edafdbc1e43dfffecbaa1560bf29126fd78295d87a70bdb2ca9619d0f3b32a9cde210bcdc208c780489543a70c0f14e4ecbcd4040e84a6eec736253d76ca82c72e78dd138f6eba6b5a1fadf33a2dfc8cabfbfa10ee69153cca63c1f98e983c93327df032e532e89a71e66dc9047924b5de59c3db50ecf43019154932f60e2ac74a9cc80a36c08803b1fbc9a349d944a13e62ea51916570a830f6037d2fb2d9b74a8e9c974d8e8fb7ff7ec00afc0ed033d4c2b7d5be2226f3bd0ede8585556061f70d731f994f2ea31486c66771d89d4f71cfa54589b71106cd76da834fcd6cd3b82e09f7997c5c4bd0c6fb38521f64b207854ef9b40970906832fa7e96e2063f16b89420af35be21251228ddf3d8e76bda4d6a22c8743ff0b8ca16e62331c23f48f1c1c84f149665cf9741b956baed149d4cbccd9e01d703b1007c4e3f0afc3ac9f29e45185152966eb0e7c8f80c161d972dc5a1f75554109e3e6c4045e84754747a45a4d0ed222734a9e81b4bce92ea5189b683233139d9bcd60deec2f7b350328112ce2d17fc42561d238b81b208b2f5f9d179b09c0d25eef9d460048167ba0795483a54b16c0bdb07d26e71a0ced42e1268a23850625433ade023ee9d7b95cafdc8f4ddc4d0213c43313aa46684e2518621e261ec67a4c531df9dae55158c278416cc7f9f636f10e26f363f69a1768a5e0611ffb7240025f67b6d491c61e17f2d641ca1ad9e39a7b179d3897a8054415145baa58de1628c72319c630e808baffb34d98da60d90ac5defa449c49da1a99415d706a7dd42a07e1c6825bf51c89d9f0b0c0422faade2df12ec9c79a843023603c5a89f03ce6c33ac24ce69bf04cd73efaadff65420bab39e2c6957571fd60a53c0158ea0ecbe4d79dccf756a700c5c56798beab2826f007d19fdd7db9f0c07862153d406c3787c5b9a56047a372ad30d61e76a0767449bec0f8e010e12b601a636a469ed366f9d016107ad3300521e444ed421ebd43ba177e59c13525aee8dd818e1d1f5ea3785762849cf2dcf7e199157a2eaf0199f8ed42877f2f754ee11d6a731ef47936513609fe81921eb0427f5549f8e6e237fe600777c195035a33603233fc7a15c478536ff29eadb7862b570df09d330f6e952d9a374015ef25a5540bd909eacda0787e03f71b59755d0b38baf5362f3ae089cb76f888972584eeb98c01674b362dfdd5da8cfa2b8befb9656b2fa67c129e19510a0fcb5d49a523795b81f1ee70cead19ac25d2c969f1198d3a3d5abf36f84ff07cf97bc8a07bcc82af47a63ee6482ec4ebc23fa11a491ab4c9e6ea66a7573604453a66d221264f07505b73b7ba6a6b1dc32f7d655838dfca67724c79121df58b94c2f9997858909a167800efba7ab488f3adc4f6385dc015b0630dd144c085a11f8db518123c9509241f3af0fde1274eed9aadeadfee9374c2a589dfb239b3882d13fb7ee4ffe6dc92ea402e3a2d16009ef15f8ae1a336b2be0e710e9dd9f79c0db66aecd2dff8397d2cb7177f627c8ef88f98a8e85767121bf5cf40ebdbd77bd20a8122b21b4d7c48b66776319a48409008ce96bf186b208396db4ad5a1359b0e72350f7f9104051fc40dcca4d9b123174af7d4183958610235e2caf936ada75e386facd4033276fd94bb3ed94eea0672c8fe88527a7c8d52e177410d04394d8eb35cc3d13db9471f53e7674d6a9208413bd6671ef85549a54fb0b5c365944dd46894ff52c8de0bcbb05c4b44f6f583488c19909a3e2df822d5233906aa728618c11b8ef708c6222afda36a18dc863f567fc5588acf6d6b17aabfb17547aff847ddbb8f163008f6ef19446d46ac19c99897e73b7416d43bc9e4f8fd71e434845a60267529da80c840cb2ddfa206316a10aab947d4b4690da39bcbc8a1784fcf1667bf0de7c974d1853afa48874d11d17a63ac9fe3048aa2b631ad49be3ffa5fc861adc1e0f2889d548000f11f5df4a59dad2fec859ae801f5bd070d3b39f75b5a5760d6f9cd8d544a1c10b07b71b4a19e7981e509ef3bfd6c33c3e61f630a60fefb60141d3133f88eba3cad6efada13da88dee8b39aa32476c5cff9f556bbac181c99100c4271b0cba73ee07c561839266f934384f8728cb454ba1c66c0cd3fc9040981256f6e58587235d801bd901955545ac15ed0db79cd51e67ed9c6cdb69b627a1be0556317c53313b7e60a60692b92568b3c27ae9c82215f8404a0fab3dac4a378266d28222f565ed2f9f0412b4e9c629027b750e7c5b2cb7469cd9d1cde9cc9b9d8c73d69b4528efc8b4e37771f1abc823ac53ee575d2818fd9e12d8cf65fd776c430994117ec9f7517b536abd58eaedb06ea026bf889f2bc7dd4652ebcd4867fb7c8ffdae2f0492e60dfa95a195d0c8c42ed86bc1fac4400575b74b3c3ba057067a3aa69bd922f3c7861c78f6a05124ea485e8960f885e79b79fc2e8748274d3b679c2f71fe0a15954a383e6ae6237781207dd78e354060222e343ace45548d22d8b6a3b7b4ca73488e423beb70a011dca72fe21b52c53738148cce400bca1b563671207402460eed4136c0d774125dfa03e29cbbcb495dc95f1c610c576d74d70cf703aa622cb9da20cc3dfd713db5dfaac85f94dae4d67992c1b3edeb8b53f26671dd0ad2e4d9ae1c4e547dc90120159d11f1b154368cef5722d50bb7c5158ac045dd6cca156a86405bb0285f3d1cbab488af9679d1679f5dff5f1c9b520b50c610aad15305eb7257b7800fa8575febf86ef6789e0e812a33264d44461d4499e1457fa58bf9f588afa01b6511d68357ac77c0c178f7311b515c647905b1460435a1385b5fc0df961b9957fef818daecb11c42a57e6ea7ee6b8fd90076eeda92cc3a6570ac86de54e205f8770da74bbec9e8a65ab9f59e8688162ddeb54790bf7ee4d76f09ddfee16b5cf82b40ab1f8710f7f3e906030a35094df034ba8c5964ee0a1d0fdbba51222ae2afc8058ba6c44e35c249f604f226e7f4c8cd3e0a4f0cd6904ee7b73765f1529357083397a041ff1e0db2293ad2751af7b70aa46abf256cce8d44e290b5ec965eb48e311f79d804a90e0082c356b496eb995d7397bf838d37aaa5fc660007a370b349e2c45586c6d58d06fe0a4b874c288569db43f5ec5fce093ba18ed6350dab973eef0f41f0edd09cddcea4f6949b877081638843c66140883f8b7048ac6fbb19bc64f362b5a55b61c0fa8a88bcdc6e8424465f17577caeca72aa1154b4e800316fd03eb2096b37fc5f34ec8b540c2d41331765aec6f970847f7dadbd24a2010dce2fda31d91d0745cff5f17878dd99e341528de787243f68f1f41c98556d48b8d757310e7ae2c698534f3cdc805765b1f41d93ae7f7bf2ed76136a4d806822df396e50e7f73bb8aba0acee707a7e21d463d34eedd6b320920ff8372813abdbcf2b1c0165c208098a598e40591409f86b0bfca5f786d00854702c3c9e7680d3e90b9a28766a4beccb858ad2e092c9575e9ed436b7bbf7a3df5febd7b868d5a0a54e6bfb5992fd50805e722e7d2e58e3b64f0405990136ca3c67f2382b37f04cb0cfbe8043f84f10d70210f30fa6abced8b40e6f4329c64f2cb5c6e5fddf745c7e2c7ca64b10c5722769802b3b88db3644778d15d8944eeadd87592a753af42793520a9b3dba31fc77aec90e80067a128075de677a5662a490d48893113598dc5e2d7a98a366e5e75f9b0a03e546492ec531c3dab4473645da2e90bf854fdcbe9c68517767214da76bb2f1d59796019480fe0f65db1328b57dabd0dbd6774d140ef2d6fecea6099912036d31619c0f89b8756654cd25186513df6383f6b9c07097a26a46bb92514b741e62856b49a12816ea344cfa9ad483bcefc43326206091367577b6d90555099abd4cd3608daa49b82b20c5608b9562ee271b148d0c72e76f7dde9eab44cbbf2a49ecc22389a923677d03d02ffab6d36911fab3165f18bb7964f50afe53552abf126d4908fac659707193aadecfaec9f85661493372753486ce06c564ebc8ab2c4fbe11c265a8f7db4d621e9bc6f9bd6cc05b38ca9ac3de05e32b83c2dc165d2e189165029659df3b7585f6466ed88ff8b450f30416b6196d783a2e12b0a76b3265829cecc683f4244a2e4be7eba1ca5528d694d6a464306eb2d72c6c21e31da7f524ae75b9b89fa1f579fa3d3697feb5ab59da791a7467bac6f0481a667968a2f05fbae9a8addd034621e538a90965b5c19fcaa84a820f78fde27004a63b81722d694255fa8333e0244c2ad76c144e41c2d1f8ae2fb9c74b1eed29ceeae423a3483b250cf8186e8d6603aea6ffb5f7fcc9c06d950c95444bdde74fbdfb7f41a64aa4c30a74feedf13120edaddeb34002787b43e9ae483155c90391fb5f2d20f77584b92ceac2793a1fd03c90a153bbe35787ae5d723566771e45b22f73c80ab07c660707a24fd24d490cf1d3ef91dd422bf805c281c3010000000000000058ba333c2b2a498d08000000000000000095a7a077c47f188d90e1a56b0519e819791e37579b51b7e5a64d195282cfc574f22f8936e30d9616cd1c8d1d60221ef79ac0af3e21c24939987da1a49050ab539632afe40ac5674a4655bd890786507517a6973660a9df030d8762bd842c5bb82c420840b9a20f9225b6221ad0e1062751aef43294bdb8713db172bb4fe750f70206cc32decc68af10f7acbf41f84a29165e4f2bb63735ab2f802ae1e9917f3c306a7dcbe36a05346269e8faf202e84dfe4e4bdbd094f8015d768e641c91c21c47138911c69fd231f619be7b805b607d04d01aaa3807969ce47aee74ace547321caa2f7c671f5dc93643530b44291a51efaf7400ff88da34461931641a1737d0af1c7d6f9e9f7d1411350b7075e19a645054b863dc6c77f4daf2004131ffd654d9d45701f15e2fbdc8d1d1dc2e992cf38c84948ccd3cecd18c5212d48c39b216abebb4b354d7dcb7b2d3acb35438bcddb919cf9baa8dba8b9574a0a575a9ff0300003a6ddbc5da4eb5e5b4cfdf684a02ae51f07dfa7242b1879fb05f5168dfbbd2ab896d4d082472382dfa8c21c850f2e862c1b5da8caa6cf532dde5684a5dffebb529f7763946ada811f12f872412f1699aacd2c6679de558ae94bf6707502910cf46fa0a8a5b431f4b9f5d4f00b4656483389609de0d5f97fac7647b35535c47c43dafb7cd4be179cbcaab702b26ed7cc06d39f1650c4efa563100eaf86a1cca6bf35eae48ba2ffd4aaa2dc448372f4634d6aa596018b834e2719c11c89c7ebcd70316d611d3ee121fa42fb4fa0a87d03fdc5ea340307d07d5c3a5cbc0776f1f8589560d90127358129d7b4264926d4ae716defce21b0cfcbe5dc5a38c3851855a90931bc31a4a6d3be0a6bf5dc2c9c4d545d5be93ab809ccf37379fa4dc3d323887d38a90880fcd15bc11826f607a7c82e9ab309642bdf0d9d18bddcc1ce6259746cc7b42d7f0c1b3bce46bb9bf75a682ec89a1553d54340bcf765ce3dd71db6675d5f9c39c7bc964a06d2ea2d80402dbb8c3fb98f59206ee45a0f8b76c31b51763728e1e5744b9095cc55f69bb96eff4e6ec787b62a4adb43cef685758fa8c51a4f6996fb8e2502403d246686b1646c3f2a74a17a6f9aec6be86657f43d0459c492b910fd1f25df2f87246a14ed6823b1d6cadb76900945015fb2d263100bc437e010966c15be008cee511671f948689dfe8c5598c8a77b7927a354189c856b57e7af62d41082fd3a73ef088a63ebe6cff93b7f53d6d7c12a595b29b9e1bd63733ee5173526eab66d1cc9868c1c6c4541077611561e0ea494a34860b6530353e830d4df4919c8d26c399aad600f433f15a35cd6c656259318dbc5f5d63e0f0c74f7ba4f239e8dbaedea6e68c9024eed5d8b78781624cda1acd8029014d62724fe4dd3634c6ef1e27b795920001000000000000845134292254bac54b1ee48d652e2d99218c54d335d94ee1d1f205cc52b841dcf21e4ca1b72c53fc5737b210514d4dea6a6245eafdc773ebc9027b664f7a568b290a9957d9284bcf8d658c863909694e278333ab057c3ce9a9e79f3aada88b5004bdf35ccb003802dbd212f235d29a18c2a336b73bffcaaa7c755f72af1697322a0fb2a5419b44bcad60a954947ed381ca15e19c300caf1d01f8ffff7a78646c584916137626483bb7ee4b1dd2e523eaba28fe5c2daedca1d1f27c0f31209e194ab3ef6230b3fbeb2f3090884fb574803ba74508188f4f852333a9b6ae5bfafc41c270207a52bae318c418f8796561c654961f5d5d8a2dfaa583370ea3e6279a270d987afbf4d37cb87860fa61d27bfea0380d1895dc142f6ccd0a6e2ebb6b81ce2c5bca2f19b68d1543cd6b4128b205786de7b142255af5d55b3a8dc81549e6dffc69332f9dc02a58fab793c9c20975e36dc4a2b39f88b58b2355806d2582e4b1cb31e8e8f4e49441a373f1dea442fb08e60e175f9d47a06df118d6e4dc1cb2be4e52fd76c16449ed4cbbfbbbdba7a7031c6da59db4e2e50b83e2e57101b22c39d64f8397bef97c82ca2db4291ee15c37af5a4c74d5fdbaaa7c77449fb5eea7e31e2b9949318dab16cc5a53e3c2096ea484916deefd87e26d6abda823576dd6f147ea23a5df896c09f1c77627358068a89210385fd6b97591b1341c2cc39abe3e959ea97cacab525497a0e76403913fa6513b72934cbdd2bdaa605ebab7080aa8d5ff431e3a32a343f9af3367c548027ec24e5c4338ce8a71a54b7dadcf1a90eac530a14486e14837d7a18dc61797e6f66e65d3d36fb1bbaf9abfa370059e66c137d6b6864670c6aa208034195487c643b39a9ed81f026a2432c68714033850c5e9ad2e4b69b30b761266d1b19c7346cde9846f4a97091ceeda4f530e1e76afafee15e3bdeebe456685cc86882010f51e195f13826d3ea9a797d26d20aefcdbb5b8515f948a0bf94725de40dc0df8245e4d2a51e53ac1837c5b63377f9f4454645ecbc5c69fb984594d0905b764c2e4fd3982a211f0fc5b522cdc829f2691ad168534e12bdbe6eb9530ca7fcf1c26ca713a80cdda0d34fa08c918db8ea90ca9cef5d75ea53d026c2db8a6a1202bd7835d62b917073632ab08a5bf04ca8723a68dacbcf4e07a4671719840728b454a1685be41e819a580431ab2d642c5d3302dc20b9ed1a0dedde0771a1b8dd0cccfcd7f78c5ebf954b1b2ee5c25f9a20106c9eb9ea96ff912adca7f6d19a6837e3768ee8614052903fc7ccd7f87493f753e27e6559e0f93a018764171bf011f40065ea49482568731e09de9a880d56c9738709265bacc059b432385c44990bb73ab739d1a023fac4f86c6d4efcce15d49b396d9403336d4c7203384a8e64e0229d1f6819e341a495e5db300db1836b9e183a34135e9ddee85c5fa16fda953c63fdb8055faa35f7a740d7396acfd25d3b3de2f3916be113bc80bbcdc7534d583b201bb5810e0fc9dae1eec09da26f5508d01c8ca47855ef690a33c9dd01ce7394bf0cb389de51cca99f0d822a6b46d36250488f5990bb195c4f8d5daba9a3a455613d67ffe7d311e5eb19b8ad778d645d8d778a37ebbe3252bf7f5ab9e8f8dbeea04848c3afbeca7c89d1e70cbebc6759e0f212d1f2759ab0b4b34546e0d4d61d65c35964b28727e445bc71101143006bda6c8957a4a099df7f88abd6add9a2af45d7c232c0392ec070567564c4b5e94f4c3715d4a494da85f5afcd93bc07d7dd190807f5daf7ecddee30e0ed4fcf56d78d980e59681f20907a3c438cd62a157cad6a1bda0486b4a2d2f6c91e86ac901c31a9138a75a38ea866e549875edd933cbd73c7d6467a4651923d6a79b5733783a12dfdd5a1372ff014cea974ff3ecf6687a52bb0dcaf807516c7f11f7b0848509ed2584895cf076c22cf142cbcabe019ff29629e45100e2cc575c226f21cade53307898011c5b34da5d96c21a58d7009b6ba25a15e1909131492edb67ee3a0eb7b03d760cc0b594e06e0840ff0c4e66e72bb0d22192041f41341cc9505c24d2e22d8ee5fdd68b26405a65435e4faae7e6e3637f9b30be491bcd9cfda599d285d56ff2cedccb5cb2f771507351a5dc287c608400f3bcf976d61e6c431ee6552580cdd51b3574d67d1467ed0924e9a48c6db8a2cf38903a6807776c4e068d51b431db79263dad36b8ac3be60687704d424465564a22e662b07cb09a3c6b6d31d02ffe8eafdd46bf88034e3e1f06f90a3454524998beddb7b334eb29d81d14ed02f312cd19fae84a4e01f4ccfa8604241b320612f837678c2a8c813e2d0ad6879a77d3c819dce50c59f2ad53fad18d0ed3b97925c92603e4257c60bc8c53bd9475d1b752dca505adc92e1665f97557c65db46c1e749c104861b8482d9e04f8e228218165f6293469831dbe653b2802f7aeaa5b03d3bed44f2fa5fb3e8b6f564456857671226a9fb54b8416ba44c642b84250c035686debed8ad11ecbdb7e9dd9309789aee6d64ff28fc2ff90ea877aad662695fddcd9dc3c6cf85e718a011c7362f74a52cdc4960d5e950b0a58550cf5a7007d390d1b001e9303f5888f65e26d267e05e2d31cb366e20e2c2e671a4f7c3fa42cf4fc27b6c6a41f85414726a9bd4202b6f4a063947f74537d5674064c817eeb5edccfdc157a83f65c2db680f459bd901fdf45c40fa4098ef3258b2a565ea0da24863de2e34a267dc854ee51050548e698567fdc9802e67266f80b7f3fb3fdef23725fa69e0cfe36ae285daafaddcf4adaf1a7d08d870b8daa8af968c3f9811bb7aa4a482a1736da7ae0d55cf2e04adf22f404f01a08298d3bbd58e34657e0c128d08703fb30e694b3f2213200516ff38e3741282280cdf9d95fcae8cc03c15b485bcf79db6f33c3dec9e146ac4c9093b57afab365037cc65da2cfd9ab035a465acaeefd82df282b3209aff22791ca16f34c16d878b315055368da34410be9860305d590152a3d007a6f4d4d7075fc0c7a472971fe34db0c0c8e6531cb362afba5852c319dfd86ecc0cb5d025701b25a6485197c13cd26bedd62b527cd379e22e76a012b27c021ba283091f85b278e9f69d46483a16b4e74bbe85be75c39599b2f31155c934c36d19c3e151f6c42a710bc3c6d48f1ec0ef302a8ae61cf1610d55dd3280f5cb7138cccd795d0f05e7054e3d1862f548309e32e74b2626ac699c305ec1a08d540848a49c8111578bb28971304758cb1c45ffdf9ac6879f85d05dc1102d45270833815267763c2caf52542c13e8504e35e8df2291af1e33e5bf7eb978939cf0294a87804e812261e0189d1b87c348eb2cd643fe576cff2aa69e18b4c5bb901c5028434d02fe7770e72a27335e9dc2583a4ec3c9165f7c7fbd69c910a572106ad6a2c3a7d978f82a52d2d744e7249c23efc9392f6192069f7fe022f9372a01a9ba7d01c9f8caaf294f4b5a405bb86b59209ce4de8904ae1749bccba9365fc1a49458ad3b6030e04a59e3b108fd094aadb079fb328104461a1eb2d06ec8c1982c275e36a20b929a2bb8da62fb4a39838b3664607b15702ec2e903994db20b36a7a7b00d2381dc5b768b2ac321a85c8b30abbb2eb82544750c976ab4b0a72ab1399affa0e2556576257c7a8e0cdb8d361d97b11e29f1fe027bb4b10dced0b86af1b193907d3fe76e3c4883a19df9c7a53d82c21e4365dcc597dfec3b1a13f8030bf9961173207a8d043195c70c28e83db8293fb5e939b17b37bcfcdeacf0563b795b767cb0573aca4148b6a520c050a8689dd4d713b860073883f3d70cca26727c59ca50b48fbc114f57baa4b19cdb1ac238522a109a37e7ab8a9db4b9cdfd00949bd35debb5670a84601bdd6fa4f255297611b35d93bcf9ae196bb0132a862f4607e85129c625445928b05092d50e934c0cdd5e0f7d95ab08d9ab6cfbff8d4206f37434f5e13bc2fa2693fa454d6c8efbcbb930421f0c24edc6430e15bff418d4f299874b4927186678877bb9d00a8a3fdb7d3b82679679d06b3f6c72f19ed08ddba34efd1852ba0f4ae743bdb3325fc677b8561e0aa5e4c4006faa44f935db66bac47724515a596d7b517cb32f41f975bc39a80a02e49f66d7297e0f45fbaa821d6f75de2a9a0128f29540a461622a991e5f757eaff0b7701dc45d40c1bb1a23672ef738f3d10d12b0573cb239a06a60d3b6c97b5b2dd4c615135ab111b52e57d536c99b07b46f2b0a28601ce40cc0d9baeb5fdda92f301b29e23c384657b5fcf2ef19eda076943e953e07e402e3bf5ea799fef0a9a6584d9052c1fa4d420067c2d956d75eb8efeb549216c62c8c72209008224c4f9df76c308655aee9a609ca5bfc998aac02cd2ddacf8dabd639ef5b6606ef916a0c07773f4a2fa7e12e313c4b6e07674b4209652a94c2f7b9660f4b935bc201d61bec07c1561deb65633f83584403cc993579167c5ceadaf0a464839c0f4983cbcc0f1d055db9905ca9507bdb11bfdd768d629c42645f9ba70719d4841b71e192eb97dff9baf04255f50297c8f5cda1c733a25569d5698ac393d96d9933f48f18e00c1726a85a48abcfc1dd814e43cdbcf0f4d0fefd4112ea417b079186a2014804931c1b5053e9685a897130e5b591166fc450db8a8a9ccaf97053c1d9f2c25da7bf18326c3ad21a75601919084e8eacbae5a00835046ed5581448b9ece9f10f46646a79194bd4b32d210e03fdf3d7b34a1267880df60aa13ecf8fec1f4a3d3795b0d6899ae2b822057ff743c730a5c6ae5530378fdcf4a6746a3e09997d74fce64ae3108790b274fb7cf2bfc851b34da91612abcb9b6b47f46f0b3c889622d8be133f597a72aacf0989572d134a92bad42287a1805fe2b0d85ede4906a42763e06dcddbbed7513a7784f577d3088a445ceae2b73d68b374b5cb7a401f03d857abf7a2b5042a52b09f0a8432006855d9625d7778a36b898aa5457e17395856a24c57cbfa6d0c970e84c398770764dc9b592d85a16bf4b55b82f3a7d0a6645591ddefe22528cb5c57e52ce782c912f6a35aba7f7f7f2e647274d633cfe273a9ac71710ab352f61613f3bff97f8377f1a57e616e82e9263fe183f6ebe953cb9cf6e3654c49b4363c62573bc26ef60cfab3dbd44614918ee59be164278132b7da5c1eebf583098a1a36b6ec2d076070cc2decc1af75274dbd4ef72c0cfae214914135154698f17a850151becb07d6133225a5ebfdfee72658e4be54ef5e1cb4a49eb25b51c1c1383100f2149a4c507def696d5588629ea680c739c3184149e4eea63064ac48d518de16b44913ce53ebad0dc0c2640f9fef1b07152296837b842411e88c621d8b59b9a88d71109fc716cee404e8aa3059f8a39e285947a3e8f8f7b833292740a1be5aaa5e1abcad9e582b89442349c78eb39ee02142b62b87582be6af71e127c9b7da344452678203a0309a91426ff80465d0579f0b41702184cff6488a8cbee6c29e9a7af527d1aef4e20ccb4440c6d4510135d2bb0d900", 0x2000, &(0x7f0000000d00)={&(0x7f00000003c0)={0x50, 0x0, 0x0, {0x7, 0x28, 0xfffffffe, 0x24940c0, 0x0, 0x1, 0x2bc6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f00000000c0)={0x6, 0x4, 0xa, 0x8a3b, 0x7ff}) 6.360418584s ago: executing program 4 (id=1672): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x236, &(0x7f00000002c0)={0x0, 0x4532, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000400)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000180)) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0684113, &(0x7f0000000380)={0x1, 0xa, 0x0, 0x7fffffff, 0x8000, 0x0, 0x2, 0xb00, 0xb00, 0x0, 0xfffffff9, 0x2}) ioctl$SNDRV_PCM_IOCTL_RESET(r6, 0x4141, 0x0) 5.784176607s ago: executing program 4 (id=1676): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) sendmmsg$inet6(r1, &(0x7f0000003f00), 0x0, 0x0) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000340)="698384d7cc3b3bde6933e9aaf4", 0xd}, {0x0}], 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 5.402521329s ago: executing program 43 (id=1676): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) sendmmsg$inet6(r1, &(0x7f0000003f00), 0x0, 0x0) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000340)="698384d7cc3b3bde6933e9aaf4", 0xd}, {0x0}], 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 4.670967579s ago: executing program 1 (id=1682): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000004c0)={0x48, 0x1e, 0x6, 0x8000, "c3fea20000568e00"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000400)="66e000b8010000000f01c1b94c0300000f32b9be0200000f32b9800000c00f3235000400000f307373baf80cb8185c2989b8dd6a00000f23c80f21f8350c0000000f23f86619820c252566baf80cb89fa7d981ef66bafc0cec0f01c566ba4200b00dee0f01cb", 0x66}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000001"]) r3 = semget$private(0x0, 0x3, 0x0) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000080)) semctl$GETPID(r3, 0x1, 0xb, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r6}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r7, 0x8922, &(0x7f0000000880)={'netdevsim0\x00', @ifru_ivalue=0x180}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x18000000, @void, @value}, 0x94) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0xbb, 0x8, 0x1, 0x0, 0xf, 0x9, 0x9, 0x3, 0x4, 0xee, 0x5, 0x6, 0x0, 0x2, 0x406, 0x4, 0x81, 0xe8, 0x3, '\x00', 0x2, 0x3}) 4.670685916s ago: executing program 5 (id=1683): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0xc1105511, &(0x7f0000000040)) 4.460006316s ago: executing program 5 (id=1684): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\xaf\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4\xcd\xba\xf2<\xd6!,\xf7\xe7Y@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`\xfds\x06\xc0\x1av\xb7*\x9b\xf7v\x8eRfd\xdc\x8b\x18rBl{j\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\xff\x01\x00\x00\x00\x00\x00\x00\x00\x98F*T\xd5\xcd4g+\xbd\xd1', 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="3a1128801316d3ccdbddc35c000000140001002dbd7000fcdbdf25ac14143d000000000000000000000000ac1414aa0000000000000000000000004e2400084e230006020090800c0000000446820e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000a0010000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 4.459756403s ago: executing program 2 (id=1685): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}], {0x14}}, 0x64}}, 0x0) 4.276727476s ago: executing program 5 (id=1686): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x11, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd27, 0x2, {0x0, 0x0, 0x0, r4, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}}, 0x0) 4.276052926s ago: executing program 2 (id=1687): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') close(0x3) syz_open_procfs(0x0, &(0x7f0000001340)='fd/3\x00') syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) rt_sigaction(0xe, &(0x7f0000000040)={&(0x7f0000000100)="0080d09634b8f30fc2d6db675e5252aef4f40fa52e2e46b66c8cd6d6f00994aff7000000c4c1796f960600000040cd00f1453c990300000044ca0fa1", 0x7139c37214769140, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r1 = memfd_create(&(0x7f00000001c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xf7\x00d2*Nha\x97\xd5\f\xde@\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\x91\xeb\xfc_q\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1a\x81]\x01*\x1b\xfd\xbcMA\xdcq\xa1b\x17\xab\xe4\x14l\x9b$\x13\xa7\x00MO\xb8\xfdX\xaaf*Du\x02z\x89(\xbcu\x9e\xdf\xe7es\xb9\x1e\xb2\x83\xdc\x82\xed\xcf\x1e\xff\x00\x00\x00\x00g\xa2-\xb1\x94\x9b\x04\x899\xf25\xae\xbb[C\x8aH\xa0\xb1\xa4&\xfb\xe4\xae\xf9R[jQ\x92\xc6K\xe6U\xaa3\xeb\x93\x84bIn\xc9\x11e\xf6;\xce\xee\xe2\x84]\x1eF\xee\xaf\x97Md\xbb\xd1}\x91\x12`\x02\xaa\xb2\xe8F7\t\x92\xedO`\xf7jc\x00\x11|]\x13\xaa<)0\x95-\xe7\xc5\xceuB\xba\xd5\x10\x1d4\x8f@\xfd6\xed?\xe5\xb7\x9d\xb7\xc3+m\x94\xf7\x00g\xa8\xd0y\xaa\x86\f?c\x8c.\x05\n\xf1\x9dw8\xbb\xcf\x9a\xfewx\xb7\xea\xb0\xe0\xa2\xa6/u\x18\xb8\x912g\x19\xcauw\xa8\x93\x80h\xad\x04\xf9sCB?b?\x1a\x04\x11U\xac\b\x9b\xd3\x04\xd9\xdb\xa3?qny\x19f{F\xb0\xb2\xc6\xe9\x1f\x13\x14\xbb\xde\x06\x16\b\x95^q\x0f\xc6\x16\xfeG\xf9\xf3D\xe9:\x86\xc8!4\xa0+\xba\x87\xdd\xbc\xbd\x93\xbb\xef*:\x00Ld\x00'/408, 0x4) ftruncate(r1, 0x40000001) r2 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003600)=[{&(0x7f00000024c0)=""/4090, 0xffa}, {&(0x7f0000000000)=""/88, 0x58}, {&(0x7f0000000980)=""/124, 0x7c}, {&(0x7f00000046c0)=""/4098, 0x1002}, {&(0x7f0000000140)=""/117, 0x75}], 0x5}, 0x2) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)="bd75141238ab2afa5bf1be234034abff0ac8611b0ef99d070f0ab656bde3364699e7500a731cf0c8210f64a31f348b373a9f0fc3088d49a374c94453dd91ff4c5b2b8e4fc3cb1a82be6638dacb37c4498f411c05eac71fefc809b89efef15cc14835d131e65392bb073918bc4ff4b86991fab8db9c5fa7fbd03d081f5f6a059fe822a97b06d4cf5aaee937316fabbe1c3788b361cf75c724ea641604e867e972bf6f106141fff807abd7e02f97779a0d12ac4e3b862c8ffe", 0xb8}, {&(0x7f0000000480)="d602da78b753c43ff0583864", 0xc}, {&(0x7f00000004c0)="233780c8bd7390da3488e9c822497b4530e8e3a6fabaad1f79f289e565ce9a4f6ca33a7ef5ff83d864e366f607a0da8227daa5cb5de026cc786dda2623e1f078197a1fdad358bf3ff0061c91cc2d284e987fca85593416b07415833f8e95cfca73b40d202d7aa5357504b9af49c0887f33a1236a962c0e342d9dbd84feec9402eda257e0293ac7906044f7bc5ed8d6a709cd8f6b1e31640a8bea2e6ceddb99cc084890e7efbeabf0029e5f15e3cea489f76a598267bfb460dfe89cabb2673321766b879a00c15d49931662f0fe5e3c7d15d3e5c596c933017dd4cbcdef7605aee3aef5e4c93cfef695633c9c15dd3219d46fb7", 0xf3}, {&(0x7f00000005c0)="c50ae38e6ba262a5b33637c032ffcbb4304527c0d453d481bdfe94735366b1764118ca6bf00b3a13cd5e497a9723ec05f4b4f561bc1f57056e01fd7f2e978268a94e91c5924d1ff0413889df154bbee972034816a0dda14eb65ec4601293ad127059fbe00aa94effed0fd472387e97bb33248f59ec9cbe1b6f339fe9d39ed3c77f7feffe35151a03a9d1710216a1775cdba39ba6b71611bb107b0f2e2c0b", 0x9e}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x4000) 4.230703861s ago: executing program 1 (id=1688): r0 = syz_io_uring_setup(0xd0, &(0x7f0000000480)={0x0, 0x0, 0x400, 0xffffffff}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4000, @fd_index=0x2, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 4.203892507s ago: executing program 6 (id=1689): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x0, &(0x7f0000000140)}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x80082102, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001a0000407d1e242c00000000000109022500010000000009040000020300000009210000000122050009058103"], 0x0) pipe2(0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240), 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={&(0x7f0000000540)="ef2d45aca6c521baa3e2ea205616468ef7b60555ed587487f1f390c9eca23dcd68842c750893ac6bb6fe24cb206e7a2cb74be9e9071e0795bae59a99fdf5fdeb0ac49db0695d319d90c11ba034cb5e55ca7da4a98eb25e65703b6f46b8d23ea1e887364d3a33cba9230441", &(0x7f00000005c0)="87a56a375033ea6e85211f847ca76284c2bec55a6a885f1c3a061627a3e8d25dfe0e330662617f820ac41a681dc67fb03ca303637270fb2385b58cf9f1972c49085c3643a106b607000000651358e2cd18598ff6fd2d94ab0faf4ec860bcd41289b9df5dc544bc8b41346d9a6eb3a24ea30d0000"}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x14, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x0) 4.017821975s ago: executing program 1 (id=1690): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010100, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x0, 0xa}]}]}, 0xa0}}, 0x0) 3.963784126s ago: executing program 1 (id=1691): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000540)={0x14, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000700)={0x18, &(0x7f0000000140)=ANY=[@ANYBLOB="201400000000c89bb7c8ef54e59ba7833d643593bb3d07f8302b7804cfdb65ae356c63ff81f52531996ce9faa80f19164f6e0a1911c4f82d7a7f2dead8943062ba06db2940e4fc9794eb3017e5fc8cd7"], 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x7d, &(0x7f0000000000)=ANY=[@ANYBLOB="7d03abe98397850d9289638d7120310994176d76ee8005e3bf5de76d569d98cc3ce7d4419c84da5f7e420900d136a14f65099da81db6c35a3e0c7fb9fe03b0fa265df2be125facefe74e0e21bb6a1889f400fb20971f7f4031183b1ef33a6b9c5e0d59351755863603e11b1131e4"]}]}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000010c0)={0x10, 0x140d, 0x1}, 0x10}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000240)) openat$sequencer(0xffffff9c, &(0x7f0000000340), 0x801, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) syz_usb_connect$uac1(0x1, 0x7d, &(0x7f0000000440)=ANY=[@ANYBLOB="12011011000000206b1d010140000102030109026b00030181200a0904000000010100000a24010900400201020904010000010200000d0401010101021700090501090002070003072501820607000104020400010200000904020101010200000c2402010f070f0feadd3dbe09058209080006053c072501008081003c1920859af5aa6cd45609c33d15ac4eb99646b3722f50743deb4e7f1794df28dc439c4d3a97905171d2406c844d7dda11bd5f95ca7357bbcab5b4d834baa43f84dc0f7de58746911fef9918b4bdcb03f764243085e7faa90948bba17481e3b5cba2d1e9372563ff2592719519a69bda86"], &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0xa1, 0x0, 0x8, 0x40, 0x9}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x6, 0x101}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x5, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x8, 0x5, 0x2}]}, 0x1, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1809}}]}) splice(r1, 0x0, r3, 0x0, 0x7fff, 0x0) 3.792360048s ago: executing program 5 (id=1692): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000005c0)='L', 0x1}], 0x1) 3.447574795s ago: executing program 2 (id=1693): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@delneigh={0x44, 0x1a, 0x401, 0x0, 0x0, {0xa}, [@NDA_DST_IPV6={0x14, 0x1, @loopback}, @NDA_CACHEINFO={0x14, 0x3, {0x7}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8}, 0x20000800) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x66) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f0000000100)=0xfffffffd, 0x4) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x4) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 2.819560903s ago: executing program 6 (id=1694): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r1 = syz_open_dev$vim2m(&(0x7f0000000240), 0x41d3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) r2 = socket(0x15, 0x5, 0x0) connect$l2tp6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2}, 0x20) getsockname$tipc(r2, 0x0, &(0x7f0000000000)) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8010, r0, 0x8000000) syz_usb_connect(0x5, 0x229, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ff000040720501cbf8cd010203010902170202000000000904"], 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT_DEL_MFC_PROXY(r4, 0x0, 0xd1, 0x0, 0x0) setsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f0000019080)={@empty, @dev={0xac, 0x14, 0x14, 0x16}}, 0x8) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x18, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r5}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000100)=0x1) pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) 1.268131901s ago: executing program 2 (id=1695): syz_emit_ethernet(0x2f, &(0x7f0000000000)={@remote, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x21, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @rand_addr=0x64010101}, {0x4e23, 0x0, 0xd, 0x0, @opaque="4acdf45a86"}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000340)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x3, 0x100, @val=0x80}}}}}}}, 0x0) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000080)=0xc) 1.267962116s ago: executing program 6 (id=1696): epoll_create1(0xd5c6353dd61e7581) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x4004551e, &(0x7f0000000140)={0xffffffff, 0x0, "5a77bd038786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500031681905da88235f8a5447dd2a2fd6e91626f068801000f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008dae0b74873b32103472b1eaa007969d008ba7d34171113dc06726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd50080fcffff2400000e4a62fb73c33424b437bb192cdfcc70d262d4fca60000000000000a82727ef14eee686be00b58e384f93a13e4e8bbf599394baea3a9ca1864f0a25d6cc38fca32ad6b394de70400d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca147df97db00"}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x5514, 0x0) 1.090207849s ago: executing program 2 (id=1697): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000004c0)={0x48, 0x1e, 0x6, 0x8000, "c3fea20000568e00"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000400)="66e000b8010000000f01c1b94c0300000f32b9be0200000f32b9800000c00f3235000400000f307373baf80cb8185c2989b8dd6a00000f23c80f21f8350c0000000f23f86619820c252566baf80cb89fa7d981ef66bafc0cec0f01c566ba4200b00dee0f01cb", 0x66}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000001"]) r3 = semget$private(0x0, 0x3, 0x0) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000080)) semctl$GETPID(r3, 0x1, 0xb, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r6}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r7, 0x8922, &(0x7f0000000880)={'netdevsim0\x00', @ifru_ivalue=0x180}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x18000000, @void, @value}, 0x94) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0xbb, 0x8, 0x1, 0x0, 0xf, 0x9, 0x9, 0x3, 0x4, 0xee, 0x5, 0x6, 0x0, 0x2, 0x406, 0x4, 0x81, 0xe8, 0x3, '\x00', 0x2, 0x3}) 1.072074908s ago: executing program 6 (id=1698): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000000000)={0x2c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x88670ce8e908745a}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x101}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2402}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x30000045}, 0x84) 820.090092ms ago: executing program 1 (id=1699): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x24, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x4, 0x13}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x2c}}, 0x0) 644.002229ms ago: executing program 5 (id=1700): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r7 = dup(r6) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x80a0000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010100, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x0, 0xa}]}]}, 0xa0}}, 0x0) 420.608916ms ago: executing program 6 (id=1701): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002700)=@newtfilter={0x474, 0x2c, 0xd27, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x448, 0x2, [@TCA_FW_POLICE={0x444, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x4, 0x9, 0x9, 0x0, {0x7, 0x2, 0x7, 0x3, 0x1, 0x400}, {0x3, 0x0, 0x100, 0x2, 0x1ff, 0x61f}, 0xfa, 0xfff, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffe81e, 0xc, 0x200, 0x4, 0x7, 0x600000, 0x3, 0x1, 0x2, 0x1, 0x8000, 0x6, 0x9, 0x2, 0xfff, 0x7ff, 0x10001, 0xfffffffa, 0xa, 0x80000000, 0x1000, 0x600000, 0xce, 0x6d, 0x4, 0x40, 0x5, 0x5, 0x3, 0x80000001, 0x9, 0x8, 0x475a, 0x4, 0x0, 0x2, 0x1, 0x1, 0x4, 0x8, 0x80, 0x3ff, 0x7, 0x6, 0x0, 0x6, 0x4, 0x2, 0x4, 0x4, 0x5, 0x4, 0x88, 0x6, 0x10, 0x8, 0x3, 0x32b, 0xff, 0x4, 0x4, 0x8000, 0x4, 0x4, 0x9fd8, 0x5, 0x2, 0x4fe8, 0x80000, 0x4be6fee5, 0x1, 0xff, 0x8, 0x40, 0x8, 0x4fd2, 0x1000, 0x10001, 0x8, 0x7ff, 0xa, 0xfffffff9, 0x9, 0x2, 0x7, 0x86, 0x7, 0x8, 0xcc16, 0x0, 0x817, 0x0, 0xd3, 0xd3f4, 0x8, 0x8, 0x9, 0x6, 0xfffffff6, 0x5ac8, 0x9, 0xdf, 0x5, 0x10001, 0x0, 0xc, 0x8, 0x8, 0x81, 0x4, 0x7161, 0xa, 0x9, 0xefe4, 0x90, 0x200, 0x7, 0x6, 0x101, 0xfff, 0x1, 0x800, 0xfffffff7, 0xf, 0x3, 0xd, 0x1, 0x100, 0x0, 0x401, 0x80000000, 0x5, 0x101, 0x9, 0x7, 0x5, 0x9, 0x2, 0x874d, 0x9, 0x5, 0x6, 0x3, 0xa1a, 0x1003, 0x7f, 0x200, 0x4, 0x10000, 0x9, 0x9ec, 0x8, 0x73560ab7, 0x490, 0x8001, 0x3, 0x7fffffff, 0xb, 0x5, 0x0, 0x1000, 0x200, 0x9, 0x2, 0x2, 0x8, 0x5, 0xd65a, 0x2, 0x6, 0xfffffff5, 0x1, 0x10, 0x53f1, 0xffffffff, 0x3, 0x8000, 0x4, 0x4, 0x0, 0x7, 0x7, 0x7, 0x6, 0xe75a, 0x1, 0x7, 0x4, 0x3b, 0x8, 0x3, 0x3, 0x3, 0x5, 0x0, 0x9, 0x5, 0x9, 0x4, 0x98, 0x3, 0x8, 0x4, 0x1, 0x9, 0xffffffff, 0x8, 0x5, 0x80000000, 0x16000000, 0x4, 0xf, 0x200, 0xac3, 0x5f, 0xffffff65, 0x4, 0x2, 0x40, 0x1, 0x9, 0x66e8, 0x9, 0x10000, 0x54, 0x100, 0x4, 0x0, 0xffff, 0x6, 0x5, 0x6, 0x10001, 0x7fff, 0x5, 0xb, 0x1, 0x5, 0x4, 0x7, 0x1000, 0x800, 0x1, 0x4, 0x3, 0xb, 0x4, 0xb, 0x8, 0x3, 0x10001, 0x0, 0x4, 0x80000000, 0x5, 0x8]}]}]}}]}, 0x474}}, 0x20000000) (fail_nth: 3) 399.046935ms ago: executing program 2 (id=1702): openat$vicodec0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x400004, 0x13900, 0x3, 0x14c}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x244}}) syz_io_uring_setup(0x61c6, &(0x7f0000000140)={0x0, 0xbddd, 0x1000, 0x1, 0x3c5}, &(0x7f00000000c0), &(0x7f00000001c0)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) tee(r2, 0xffffffffffffffff, 0x8, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010100000000000000000100000014000780080012400000000505001500090000000500010006000000050005000a00000005000400000000000900020073797a300000000012000300686173683a6e65742c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x123243, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x28) ioctl$PPPIOCSACTIVE(r4, 0x40087446, &(0x7f0000000840)={0x1, &(0x7f0000000800)=[{0x3, 0x0, 0xe3, 0x2}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socket(0xb, 0x7, 0xdeb) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00x0) (async, rerun: 32) r3 = eventfd(0x6) (async, rerun: 32) r4 = eventfd(0x7ff) r5 = eventfd(0x0) (async) r6 = openat$qrtrtun(0xffffff9c, &(0x7f0000000440), 0xc34ac38639103155) (async) r7 = syz_open_dev$vcsu(&(0x7f0000000580), 0x21, 0x888c0) io_submit(r2, 0x4, &(0x7f0000000600)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x9064, 0xffffffffffffffff, &(0x7f0000000180)="9ad7043e2243f7e77625211e1d5d6907ab3ae6aa60cd1824b943da8db5882cae8d46f2c6c362cea66033585eeb3a4865c1c79f1442cd469faa61085beb16b3337efda399d47567ab51c8fdbc2438964715f889248c1aeb095d959799c1b1d1f6dace1bbe5586d47d10ba288373874e3194b51688335f50a44d36c6e49339a75ce29248801d29de5cf39f65d81b220f112155b0ac0770fb96c7380df8c7b567f97e484a65f1a5aa", 0xa7, 0xf, 0x0, 0x3, r3}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x4, 0xffffffffffffffff, &(0x7f0000000280)="42c9451cf8847f84678232841ef3aa7f3967acf28f0981108b70858e71e0c083fbc05e10aa85a8f7a9fc5ee57a232c4c4c4524e3711ad01e136ccb3714a8ce48516bf4435af0c11768f2dce60ac527f1619dd9b9c7aad0c63951e92bea9decdf2bfcdc7a6213633846fc7980494d939830f4cc719d7acf8ace86c05a9312970682e90322278a9d", 0x87, 0x4, 0x0, 0x1, r4}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x2, 0xffffffffffffffff, &(0x7f0000000380)="92cc95ec2b9e207b795088d8ae75da6086e6cd38735e5035f34c19121884374991800fe9ad6983215b29d58390c9c15f005b6751e73d57de706572a609c346324bf6b09511d568fea68167fcf2cca5c3fce60168cbfadbfc75a84826e3f3fc8eb176f5f4012856c4c666b72d8e821b2d4453214aadb6f45ff81758aa3eabed99", 0x80, 0x14000, 0x0, 0x1, r5}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0xffff, r6, &(0x7f0000000480)="825ad8e056a7c2cf65678254bfe858156ed95e2a8dc78467bbdc1b974e4515a68f0ca904517b89bc27a107608c2f35d8aa11454f79c72c613263f79ebb1dd016d231f252a565470a8e29334a33527e032f3386ed42a3f0640f584f9746ff14e9ce37f5f1e0fcdaa0ac31fe991d2de231fc82dc50df5576a7b01df8fa6377eab7c827d8a82fa7e63eb94c35e64f8dfc07fec68b3ec00abfdcd0a7d96cf25293275a55852884dd5b9c58a5c0e60cf723bd7ca6e26d713f0f5ef1ebc343196f743c4c", 0xc1, 0x56f, 0x0, 0x1, r7}]) (async, rerun: 64) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105511, &(0x7f0000000700)={{0x8, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3]}) (rerun: 64) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189902) ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000940)={&(0x7f0000000740)=[{0x1ca9, 0x2000, 0x0, 0x0}, {0xfffd, 0x15c10, 0xfffffffffffffe2c, &(0x7f0000000700)="92"}], 0x2}) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c2006570d7d5a58a72d843", 0x21) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0x8001, @local, 0xcc5}, 0x1c) (async, rerun: 32) mkdirat(r7, &(0x7f0000000680)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1d7) (async, rerun: 32) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x24040081) (async) syz_usb_connect$cdc_ecm(0x5, 0x55, &(0x7f00000016c0)=ANY=[@ANYBLOB="12010002020000202505a1b040000102030109024300010104c0030904006e0202060009052406000005240009000d240f0102000000090020007f0424133004241308090582024000030ed7090503020800000100"], 0x0) kernel console output (not intermixed with test programs): etting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 486.061012][ T45] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 486.097548][ T25] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 486.108203][ T25] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 486.180415][ T25] usb 2-1: string descriptor 0 read error: -22 [ 486.197577][ T25] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 486.217895][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.226821][ T45] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 486.236403][ T45] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 486.246115][ T45] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 486.273259][ T45] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 486.316514][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 486.334695][ T25] adutux 2-1:168.0: interrupt endpoints not found [ 486.368831][ T5889] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 486.392422][ T45] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 486.401985][ T45] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 486.413408][ T45] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 486.423298][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 486.443017][ T45] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 486.459910][ T45] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 486.471373][ T45] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 486.489493][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 486.502957][ T45] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 486.513552][ T5889] usb 6-1: device descriptor read/64, error -71 [ 486.547331][ T45] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 486.559253][ T8] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 486.583577][ T45] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 486.595001][ T5890] usb 2-1: USB disconnect, device number 31 [ 486.620958][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 486.632177][ T45] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 486.664783][ T45] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 486.696396][ T45] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 486.713509][ T8] usb 5-1: device descriptor read/64, error -71 [ 486.723269][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 486.741545][ T45] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 486.753400][ T5889] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 486.760966][ T45] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 486.761000][ T45] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 486.802344][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 486.813842][ T45] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 486.833062][ T45] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 486.853221][ T45] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 486.873222][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 486.891303][ T45] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 486.903189][ T45] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 486.932356][ T45] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 486.944388][ T5889] usb 6-1: device descriptor read/64, error -71 [ 486.951780][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 486.963801][ T8] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 486.975323][ T45] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 487.003325][ T45] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 487.011719][ T45] usb 3-1: Product: syz [ 487.036489][ T45] usb 3-1: Manufacturer: syz [ 487.041157][ T45] usb 3-1: SerialNumber: syz [ 487.053784][ T5889] usb usb6-port1: attempt power cycle [ 487.060385][ T45] usb 3-1: config 0 descriptor?? [ 487.075849][ T45] yurex 3-1:0.0: Could not submitting URB [ 487.090998][ T45] yurex 3-1:0.0: probe with driver yurex failed with error -5 [ 487.123267][ T8] usb 5-1: device descriptor read/64, error -71 [ 487.246387][ T8] usb usb5-port1: attempt power cycle [ 487.408192][ T25] usb 3-1: USB disconnect, device number 39 [ 487.424859][ T5889] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 487.464930][ T5889] usb 6-1: device descriptor read/8, error -71 [ 487.594637][ T8] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 487.624029][ T8] usb 5-1: device descriptor read/8, error -71 [ 487.733290][ T5889] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 487.765573][ T5889] usb 6-1: device descriptor read/8, error -71 [ 487.856525][ T5890] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 487.872614][ T8] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 487.882606][ T5889] usb usb6-port1: unable to enumerate USB device [ 487.896313][T13666] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1417'. [ 487.906689][ T8] usb 5-1: device descriptor read/8, error -71 [ 488.016038][ T8] usb usb5-port1: unable to enumerate USB device [ 488.033980][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 488.040926][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 488.065015][ T5890] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 488.082852][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.105252][ T5890] usb 2-1: Product: syz [ 488.109483][ T5890] usb 2-1: Manufacturer: syz [ 488.143417][ T5890] usb 2-1: SerialNumber: syz [ 488.160329][ T5890] usb 2-1: config 0 descriptor?? [ 488.206238][ T5890] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 488.408036][T13687] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1421'. [ 488.463264][ T45] usb 2-1: USB disconnect, device number 32 [ 488.469608][ T47] usb 2-1: Failed to submit usb control message: -71 [ 488.479416][ T47] usb 2-1: unable to send the bmi data to the device: -71 [ 488.497988][ T47] usb 2-1: unable to get target info from device [ 488.508780][ T47] usb 2-1: could not get target info (-71) [ 488.527178][ T47] usb 2-1: could not probe fw (-71) [ 488.633302][ T5893] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 488.673487][ T8] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 488.795475][ T5893] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 488.804672][ T5893] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 488.815049][ T5893] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 488.833290][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 488.849408][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 488.849977][ T5893] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 488.888748][ T8] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 488.911239][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.918759][ T5893] usb 6-1: config 0 interface 0 has no altsetting 0 [ 488.931456][ T8] usb 3-1: Product: syz [ 488.945470][ T5893] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 488.945653][ T8] usb 3-1: Manufacturer: syz [ 488.968304][ T5893] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 488.981396][ T8] usb 3-1: SerialNumber: syz [ 489.000185][ T5893] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 489.016112][ T8] usb 3-1: config 0 descriptor?? [ 489.020449][ T5893] usb 6-1: config 0 interface 0 has no altsetting 0 [ 489.073641][ T8] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 489.078349][ T5893] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 489.123249][ T5893] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 489.136379][ T5893] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 489.146605][ T5893] usb 6-1: config 0 interface 0 has no altsetting 0 [ 489.154837][ T5893] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 489.173281][ T5893] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 489.198184][ T5893] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 489.247631][ T5893] usb 6-1: config 0 interface 0 has no altsetting 0 [ 489.261502][ T8] usb 3-1: USB disconnect, device number 40 [ 489.268417][ T35] usb 3-1: Failed to submit usb control message: -71 [ 489.271514][ T5893] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 489.313446][ T35] usb 3-1: unable to send the bmi data to the device: -71 [ 489.320630][ T35] usb 3-1: unable to get target info from device [ 489.331920][ T5893] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 489.338219][ T35] usb 3-1: could not get target info (-71) [ 489.360815][ T35] usb 3-1: could not probe fw (-71) [ 489.367305][T13710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1424'. [ 489.382227][ T5893] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 489.385215][T13712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1423'. [ 489.409392][ T5893] usb 6-1: config 0 interface 0 has no altsetting 0 [ 489.424751][ T5893] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 489.443266][ T5893] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 489.483732][ T5893] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 489.493986][ T5885] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 489.512062][ T5893] usb 6-1: config 0 interface 0 has no altsetting 0 [ 489.529620][ T5893] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 489.543605][ T5893] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 489.563215][ T5893] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 489.583230][ T5893] usb 6-1: config 0 interface 0 has no altsetting 0 [ 489.594513][ T5893] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 489.608770][ T5893] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 489.633242][ T5885] usb 7-1: device descriptor read/64, error -71 [ 489.657517][ T5893] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 489.684218][ T5893] usb 6-1: config 0 interface 0 has no altsetting 0 [ 489.703381][ T5893] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 489.723044][ T5893] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 489.741739][ T5893] usb 6-1: Product: syz [ 489.746341][ T45] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 489.761187][ T5893] usb 6-1: Manufacturer: syz [ 489.769622][ T5893] usb 6-1: SerialNumber: syz [ 489.782341][ T5893] usb 6-1: config 0 descriptor?? [ 489.802936][ T5893] yurex 6-1:0.0: Could not submitting URB [ 489.823845][ T5893] yurex 6-1:0.0: probe with driver yurex failed with error -5 [ 489.883377][ T5885] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 489.893293][ T45] usb 2-1: device descriptor read/64, error -71 [ 490.024619][ T5885] usb 7-1: device descriptor read/64, error -71 [ 490.108566][T13731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1425'. [ 490.133276][ T45] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 490.153908][ T5885] usb usb7-port1: attempt power cycle [ 490.245210][ T5893] usb 6-1: USB disconnect, device number 23 [ 490.283261][ T45] usb 2-1: device descriptor read/64, error -71 [ 490.393220][ T8] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 490.393529][ T45] usb usb2-port1: attempt power cycle [ 490.513302][ T5885] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 490.533258][ T8] usb 5-1: device descriptor read/64, error -71 [ 490.544689][ T5885] usb 7-1: device descriptor read/8, error -71 [ 490.763342][ T45] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 490.789071][ T5885] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 490.794284][ T8] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 490.813556][ T45] usb 2-1: device descriptor read/8, error -71 [ 490.823290][ T5893] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 490.833974][ T5885] usb 7-1: device descriptor read/8, error -71 [ 490.944407][ T5885] usb usb7-port1: unable to enumerate USB device [ 490.953428][ T8] usb 5-1: device descriptor read/64, error -71 [ 490.963426][ T5893] usb 3-1: device descriptor read/64, error -71 [ 491.063237][ T45] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 491.073524][ T8] usb usb5-port1: attempt power cycle [ 491.093758][ T45] usb 2-1: device descriptor read/8, error -71 [ 491.203236][ T5893] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 491.212079][ T45] usb usb2-port1: unable to enumerate USB device [ 491.343412][ T5893] usb 3-1: device descriptor read/64, error -71 [ 491.433997][ T8] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 491.454047][ T5893] usb usb3-port1: attempt power cycle [ 491.480274][T13793] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1428'. [ 491.507207][ T8] usb 5-1: device descriptor read/8, error -71 [ 491.793360][ T8] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 491.803227][ T5893] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 491.828005][ T8] usb 5-1: device descriptor read/8, error -71 [ 491.833864][ T5893] usb 3-1: device descriptor read/8, error -71 [ 491.943308][ T5890] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 491.951883][ T8] usb usb5-port1: unable to enumerate USB device [ 492.073575][ T5893] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 492.099944][ T5893] usb 3-1: device descriptor read/8, error -71 [ 492.114135][ T5890] usb 7-1: device descriptor read/64, error -71 [ 492.223725][ T5893] usb usb3-port1: unable to enumerate USB device [ 492.263483][ T45] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 492.363838][ T5890] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 492.408703][ T45] usb 6-1: device descriptor read/64, error -71 [ 492.545539][ T5890] usb 7-1: device descriptor read/64, error -71 [ 492.584699][T13833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1431'. [ 492.653696][ T5890] usb usb7-port1: attempt power cycle [ 492.654338][ T45] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 492.703604][ T5893] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 492.803341][ T45] usb 6-1: device descriptor read/64, error -71 [ 492.863422][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 492.880320][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 492.900925][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 492.913564][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 492.914564][ T5893] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 492.930905][ T45] usb usb6-port1: attempt power cycle [ 492.939611][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.948492][ T5893] usb 2-1: Product: syz [ 492.952798][ T5893] usb 2-1: Manufacturer: syz [ 492.958021][ T5893] usb 2-1: SerialNumber: syz [ 492.965844][ T5893] usb 2-1: config 0 descriptor?? [ 492.993604][ T5890] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 493.012003][ T5893] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 493.034925][ T5890] usb 7-1: device descriptor read/8, error -71 [ 493.053351][ T10] usb 5-1: device descriptor read/64, error -71 [ 493.273338][ T45] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 493.276980][T13859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.277217][T13859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.298770][ T45] usb 6-1: device descriptor read/8, error -71 [ 493.321918][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 493.335666][ T5890] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 493.378325][ T63] usb 2-1: Failed to submit usb control message: -71 [ 493.386040][ T5889] usb 2-1: USB disconnect, device number 37 [ 493.393001][ T63] usb 2-1: unable to send the bmi data to the device: -71 [ 493.402016][ T5890] usb 7-1: device descriptor read/8, error -71 [ 493.417295][ T63] usb 2-1: unable to get target info from device [ 493.424463][ T63] usb 2-1: could not get target info (-71) [ 493.430335][ T63] usb 2-1: could not probe fw (-71) [ 493.467235][ T10] usb 5-1: device descriptor read/64, error -71 [ 493.523594][ T5890] usb usb7-port1: unable to enumerate USB device [ 493.533530][ T45] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 493.555059][ T45] usb 6-1: device descriptor read/8, error -71 [ 493.573723][ T10] usb usb5-port1: attempt power cycle [ 493.665047][ T45] usb usb6-port1: unable to enumerate USB device [ 493.923332][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 494.003585][ T10] usb 5-1: device descriptor read/8, error -71 [ 494.263335][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 494.311746][ T10] usb 5-1: device descriptor read/8, error -71 [ 494.433892][ T10] usb usb5-port1: unable to enumerate USB device [ 495.333318][ T10] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 495.495015][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 495.521811][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice= 0.00 [ 495.549693][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.575231][ T10] usb 6-1: config 0 descriptor?? [ 495.597086][ T10] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input38 [ 495.733293][ T45] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 495.809244][ T5190] bcm5974 6-1:0.0: could not read from device [ 495.828923][ T5190] bcm5974 6-1:0.0: could not read from device [ 495.833734][ T10] usb 6-1: USB disconnect, device number 28 [ 495.866176][ T5190] bcm5974 6-1:0.0: could not read from device [ 495.890210][ T5190] bcm5974 6-1:0.0: could not read from device [ 495.896917][ T5893] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 495.904966][ T45] usb 7-1: Using ep0 maxpacket: 8 [ 495.933910][ T45] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 495.953885][ T6674] bcm5974 6-1:0.0: could not read from device [ 495.962734][ T45] usb 7-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 495.990637][ T45] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 495.997250][T13938] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=536871104 (1073742208 ns) > initial count (200000 ns). Using initial count to start timer. [ 496.011605][ T45] usb 7-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 496.074500][ T45] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 496.085391][ T5893] usb 3-1: device descriptor read/64, error -71 [ 496.102824][ T45] usb 7-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 496.180235][ T45] usb 7-1: string descriptor 0 read error: -22 [ 496.186848][ T45] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 496.196224][ T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.245861][ T45] adutux 7-1:168.0: interrupt endpoints not found [ 496.268877][ T6674] udevd[6674]: Error opening device "/dev/input/event4": No such file or directory [ 496.278404][ T6674] udevd[6674]: Unable to EVIOCGABS device "/dev/input/event4" [ 496.286184][ T6674] udevd[6674]: Unable to EVIOCGABS device "/dev/input/event4" [ 496.296124][ T6674] udevd[6674]: Unable to EVIOCGABS device "/dev/input/event4" [ 496.303978][ T6674] udevd[6674]: Unable to EVIOCGABS device "/dev/input/event4" [ 496.311551][ T6674] udevd[6674]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 496.340301][ T5205] udevd[5205]: worker [6674] terminated by signal 6 (Aborted) [ 496.348128][ T5205] udevd[5205]: worker [6674] failed while handling '/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input38/event4' [ 496.554773][ T10] usb 7-1: USB disconnect, device number 10 [ 496.598599][ T5893] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 496.744175][ T5893] usb 3-1: device descriptor read/64, error -71 [ 496.855035][ T5893] usb usb3-port1: attempt power cycle [ 497.213413][ T5893] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 497.255420][ T5893] usb 3-1: device descriptor read/8, error -71 [ 497.509528][ T5893] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 497.554349][ T5893] usb 3-1: device descriptor read/8, error -71 [ 497.677622][ T5893] usb usb3-port1: unable to enumerate USB device [ 497.773277][ T10] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 497.963226][ T10] usb 6-1: device descriptor read/64, error -71 [ 498.213264][ T10] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 498.360971][T14004] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=536871104 (1073742208 ns) > initial count (200000 ns). Using initial count to start timer. [ 498.392882][ T10] usb 6-1: device descriptor read/64, error -71 [ 498.523732][ T10] usb usb6-port1: attempt power cycle [ 498.531295][T14011] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1451'. [ 498.883569][ T10] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 498.908436][T14017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1453'. [ 498.941212][ T10] usb 6-1: device descriptor read/8, error -71 [ 499.167655][T14028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1456'. [ 499.213231][ T10] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 499.264028][ T10] usb 6-1: device descriptor read/8, error -71 [ 499.377673][ T10] usb usb6-port1: unable to enumerate USB device [ 499.543310][ T5838] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 499.683791][ T5838] usb 7-1: device descriptor read/64, error -71 [ 499.843837][ T10] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 499.883303][ T5889] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 499.923398][ T5838] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 499.984031][ T10] usb 3-1: device descriptor read/64, error -71 [ 500.013589][ T5889] usb 5-1: device descriptor read/64, error -71 [ 500.065700][ T5838] usb 7-1: device descriptor read/64, error -71 [ 500.173494][ T5838] usb usb7-port1: attempt power cycle [ 500.234715][ T10] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 500.263863][ T5889] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 500.393388][ T10] usb 3-1: device descriptor read/64, error -71 [ 500.433671][ T5889] usb 5-1: device descriptor read/64, error -71 [ 500.523315][ T5838] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 500.527056][ T10] usb usb3-port1: attempt power cycle [ 500.553522][ T5889] usb usb5-port1: attempt power cycle [ 500.559753][ T5838] usb 7-1: device descriptor read/8, error -71 [ 500.741794][T14093] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1461'. [ 500.813215][ T5838] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 500.853875][ T5838] usb 7-1: device descriptor read/8, error -71 [ 500.913392][ T10] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 500.921374][ T5889] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 500.943939][ T10] usb 3-1: device descriptor read/8, error -71 [ 500.953967][ T5889] usb 5-1: device descriptor read/8, error -71 [ 500.974135][ T5838] usb usb7-port1: unable to enumerate USB device [ 501.204088][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 501.223572][ T5889] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 501.254023][ T10] usb 3-1: device descriptor read/8, error -71 [ 501.260653][ T5889] usb 5-1: device descriptor read/8, error -71 [ 501.267071][ T5884] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 501.393574][ T10] usb usb3-port1: unable to enumerate USB device [ 501.400308][ T5889] usb usb5-port1: unable to enumerate USB device [ 501.433346][ T5884] usb 6-1: device descriptor read/64, error -71 [ 501.674214][ T5884] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 501.813930][ T5884] usb 6-1: device descriptor read/64, error -71 [ 501.923434][ T5884] usb usb6-port1: attempt power cycle [ 502.103346][ T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 502.255320][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.266732][ T5884] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 502.274570][ T10] usb 7-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 502.284104][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.302976][ T10] usb 7-1: config 0 descriptor?? [ 502.313239][ T5884] usb 6-1: device descriptor read/8, error -71 [ 502.589176][ T5884] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 502.645262][ T5884] usb 6-1: device descriptor read/8, error -71 [ 502.766398][ T10] hid-alps 0003:044E:121E.0004: item fetching failed at offset 5/7 [ 502.784196][ T5884] usb usb6-port1: unable to enumerate USB device [ 502.794458][ T10] hid-alps 0003:044E:121E.0004: parse failed [ 502.800561][ T10] hid-alps 0003:044E:121E.0004: probe with driver hid-alps failed with error -22 [ 503.026539][T14160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1468'. [ 503.243252][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 503.374846][ T10] usb 3-1: device descriptor read/64, error -71 [ 503.613411][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 503.753493][ T10] usb 3-1: device descriptor read/64, error -71 [ 503.761793][ T5838] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 503.876370][ T10] usb usb3-port1: attempt power cycle [ 503.913664][ T5838] usb 5-1: device descriptor read/64, error -71 [ 504.153227][ T5838] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 504.243308][ T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 504.277460][ T10] usb 3-1: device descriptor read/8, error -71 [ 504.294018][ T5838] usb 5-1: device descriptor read/64, error -71 [ 504.413612][ T5838] usb usb5-port1: attempt power cycle [ 504.543344][ T10] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 504.586215][ T10] usb 3-1: device descriptor read/8, error -71 [ 504.722270][ T10] usb usb3-port1: unable to enumerate USB device [ 504.763515][ T5838] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 504.805346][ T5838] usb 5-1: device descriptor read/8, error -71 [ 504.884518][ T10] usb 7-1: USB disconnect, device number 15 [ 505.079928][ T5838] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 505.141946][ T5838] usb 5-1: device descriptor read/8, error -71 [ 505.258210][ T5838] usb usb5-port1: unable to enumerate USB device [ 505.423488][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 505.783554][ T45] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 505.933250][ T45] usb 2-1: device descriptor read/64, error -71 [ 506.197393][ T45] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 506.333316][ T45] usb 2-1: device descriptor read/64, error -71 [ 506.443679][ T45] usb usb2-port1: attempt power cycle [ 506.813254][ T45] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 506.873852][ T45] usb 2-1: device descriptor read/8, error -71 [ 507.123385][ T45] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 507.173962][ T45] usb 2-1: device descriptor read/8, error -71 [ 507.233360][ T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 507.292260][ T45] usb usb2-port1: unable to enumerate USB device [ 507.441638][ T10] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 507.471523][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 507.504166][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 507.564424][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 507.594806][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 507.609761][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 507.645877][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 507.659683][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 507.702977][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 507.784536][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 507.837764][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 507.867315][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 507.893416][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 507.906021][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 507.915791][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 507.938573][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 507.968332][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 508.001917][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 508.070634][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 508.087361][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 508.101672][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 508.118539][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 508.165341][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 508.189371][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 508.209573][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 508.232050][ T10] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 508.261810][ T10] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 508.342037][ T10] usb 7-1: Product: syz [ 508.353239][ T10] usb 7-1: Manufacturer: syz [ 508.394105][ T10] usb 7-1: SerialNumber: syz [ 508.414578][ T10] usb 7-1: config 0 descriptor?? [ 508.444165][ T10] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 508.886914][ T5890] usb 7-1: USB disconnect, device number 16 [ 508.900852][ T5890] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 510.514385][T14356] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1491'. [ 513.656226][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 513.662687][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 516.712943][T14450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1498'. [ 516.982009][ T29] audit: type=1326 audit(1736425505.095:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14459 comm="syz.5.1501" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710d579 code=0x0 [ 517.763853][ T10] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 517.933355][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 517.944190][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 517.977110][ T10] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 517.992251][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.008897][ T10] usb 5-1: Product: syz [ 518.031438][ T10] usb 5-1: Manufacturer: syz [ 518.038017][ T10] usb 5-1: SerialNumber: syz [ 518.063955][ T10] usb 5-1: config 0 descriptor?? [ 518.120612][ T10] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 518.153431][ T5838] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 518.292627][ T63] usb 5-1: Failed to submit usb control message: -71 [ 518.304062][ T63] usb 5-1: unable to send the bmi data to the device: -71 [ 518.311270][ T63] usb 5-1: unable to get target info from device [ 518.317698][ T63] usb 5-1: could not get target info (-71) [ 518.323706][ T63] usb 5-1: could not probe fw (-71) [ 518.343571][ T10] usb 5-1: USB disconnect, device number 45 [ 518.371065][ T25] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 518.378928][ T5885] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 518.399849][ T5838] usb 3-1: device descriptor read/64, error -71 [ 518.531667][ T25] usb 6-1: device descriptor read/64, error -71 [ 518.564531][ T5885] usb 7-1: Using ep0 maxpacket: 16 [ 518.577632][ T5885] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 518.592893][ T5885] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 518.602703][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.632076][ T5885] usb 7-1: Product: syz [ 518.644086][ T5885] usb 7-1: Manufacturer: syz [ 518.653536][ T5885] usb 7-1: SerialNumber: syz [ 518.673220][ T5838] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 518.728139][ T5885] usb 7-1: config 0 descriptor?? [ 518.773715][ T25] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 518.803206][ T5838] usb 3-1: device descriptor read/64, error -71 [ 518.818454][ T5885] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 518.903194][ T25] usb 6-1: device descriptor read/64, error -71 [ 518.914118][ T5838] usb usb3-port1: attempt power cycle [ 518.940425][ T3488] usb 7-1: Failed to submit usb control message: -71 [ 518.946706][ T5885] usb 7-1: USB disconnect, device number 18 [ 518.967070][ T3488] usb 7-1: unable to send the bmi data to the device: -71 [ 518.996604][ T3488] usb 7-1: unable to get target info from device [ 519.035118][ T25] usb usb6-port1: attempt power cycle [ 519.053750][ T3488] usb 7-1: could not get target info (-71) [ 519.069940][ T3488] usb 7-1: could not probe fw (-71) [ 519.254405][ T5838] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 519.274692][T14515] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=536871104 (1073742208 ns) > initial count (200000 ns). Using initial count to start timer. [ 519.293963][ T5838] usb 3-1: device descriptor read/8, error -71 [ 519.403363][ T25] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 519.465731][ T25] usb 6-1: device descriptor read/8, error -71 [ 519.543472][ T5838] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 519.670864][ T5838] usb 3-1: device descriptor read/8, error -71 [ 519.724717][ T25] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 519.768645][ T25] usb 6-1: device descriptor read/8, error -71 [ 519.784572][ T5838] usb usb3-port1: unable to enumerate USB device [ 519.903602][ T25] usb usb6-port1: unable to enumerate USB device [ 520.416079][T14550] IPVS: length: 24 != 120 [ 520.446111][T14550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1511'. [ 520.803342][ T29] audit: type=1326 audit(1736425508.915:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14566 comm="syz.2.1514" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x0 [ 520.863504][ T5889] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 521.033539][ T5889] usb 7-1: Using ep0 maxpacket: 16 [ 521.053541][ T5889] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 521.066715][ T5889] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 521.104585][ T5889] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 521.120223][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.155890][ T5889] usb 7-1: Product: syz [ 521.184252][ T5889] usb 7-1: Manufacturer: syz [ 521.221100][ T5889] usb 7-1: SerialNumber: syz [ 521.268799][ T5889] usb 7-1: config 0 descriptor?? [ 521.375617][ T5889] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 521.554604][ T8] usb 7-1: USB disconnect, device number 19 [ 521.561468][ T2937] usb 7-1: Failed to submit usb control message: -71 [ 521.605159][ T2937] usb 7-1: could not get target info (-71) [ 521.678431][ T2937] usb 7-1: could not probe fw (-71) [ 522.043219][ T5893] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 522.273899][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 522.307055][ T5893] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 522.328463][ T5893] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 522.351327][ T5893] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 522.387877][ T5893] usb 3-1: config 1 has no interface number 0 [ 522.409566][ T5893] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 522.443486][T14608] FAULT_INJECTION: forcing a failure. [ 522.443486][T14608] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 522.451383][ T5893] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 522.518373][ T5893] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 522.528011][T14608] CPU: 0 UID: 0 PID: 14608 Comm: syz.6.1519 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 522.538799][T14608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 522.548149][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.548944][T14608] Call Trace: [ 522.548957][T14608] [ 522.563211][T14608] dump_stack_lvl+0x241/0x360 [ 522.567902][T14608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 522.573112][T14608] ? __pfx__printk+0x10/0x10 [ 522.578160][T14608] ? __pfx_lock_release+0x10/0x10 [ 522.583223][T14608] should_fail_ex+0x3b0/0x4e0 [ 522.587913][T14608] _copy_from_iter+0x1e9/0x1c20 [ 522.592776][T14608] ? __virt_addr_valid+0x183/0x530 [ 522.597949][T14608] ? __alloc_skb+0x28f/0x440 [ 522.602591][T14608] ? __pfx__copy_from_iter+0x10/0x10 [ 522.607894][T14608] ? __virt_addr_valid+0x183/0x530 [ 522.613019][T14608] ? __virt_addr_valid+0x183/0x530 [ 522.618507][T14608] ? __virt_addr_valid+0x45f/0x530 [ 522.624101][T14608] ? __phys_addr_symbol+0x2f/0x70 [ 522.629702][T14608] ? __check_object_size+0x47a/0x730 [ 522.635146][T14608] netlink_sendmsg+0x73d/0xcb0 [ 522.639990][T14608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 522.645409][T14608] ? __pfx_lock_release+0x10/0x10 [ 522.650497][T14608] ? aa_sock_msg_perm+0x91/0x160 [ 522.655485][T14608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 522.660833][T14608] __sock_sendmsg+0x221/0x270 [ 522.665659][T14608] ____sys_sendmsg+0x52a/0x7e0 [ 522.670565][T14608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 522.675904][T14608] __sys_sendmsg+0x269/0x350 [ 522.679698][ T5893] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 522.680510][T14608] ? __pfx_lock_release+0x10/0x10 [ 522.680543][T14608] ? __pfx___sys_sendmsg+0x10/0x10 [ 522.680574][T14608] ? __pfx_vfs_write+0x10/0x10 [ 522.702891][T14608] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 522.709510][T14608] ? lockdep_hardirqs_on+0x99/0x150 [ 522.714853][T14608] __do_fast_syscall_32+0xb4/0x110 [ 522.719989][T14608] ? exc_page_fault+0x590/0x8b0 [ 522.724858][T14608] do_fast_syscall_32+0x34/0x80 [ 522.729729][T14608] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 522.736074][T14608] RIP: 0023:0xf714d579 [ 522.740144][T14608] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 522.759784][T14608] RSP: 002b:00000000f513f55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 522.768229][T14608] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000200 [ 522.776215][T14608] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 522.784564][T14608] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 522.792725][T14608] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 522.800716][T14608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 522.808799][T14608] [ 522.819254][ T5838] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 522.882837][ T5893] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 523.023591][ T5838] usb 5-1: Using ep0 maxpacket: 16 [ 523.043378][ T5838] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 523.102401][ T5838] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 523.127623][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.163489][ T5838] usb 5-1: Product: syz [ 523.210072][ T5838] usb 5-1: Manufacturer: syz [ 523.233189][ T5838] usb 5-1: SerialNumber: syz [ 523.360963][ T5838] usb 5-1: config 0 descriptor?? [ 523.672674][ T5838] ath10k_warn: 2 callbacks suppressed [ 523.672725][ T5838] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 523.733316][ T3488] usb 5-1: Failed to submit usb control message: -71 [ 523.763221][ T3488] usb 5-1: unable to send the bmi data to the device: -71 [ 523.791577][ T5838] usb 5-1: USB disconnect, device number 46 [ 523.812908][ T3488] usb 5-1: unable to get target info from device [ 523.825613][ T3488] usb 5-1: could not get target info (-71) [ 523.835701][ T3488] usb 5-1: could not probe fw (-71) [ 523.905824][ T25] snd_usb_pod 3-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 524.287806][ T8] usb 3-1: USB disconnect, device number 61 [ 524.295078][ T8] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 525.475937][ T5893] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 525.796901][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.808486][ T5893] usb 3-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 525.933480][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.158681][ T5893] usb 3-1: config 0 descriptor?? [ 526.846973][T14701] FAULT_INJECTION: forcing a failure. [ 526.846973][T14701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.964373][T14701] CPU: 0 UID: 0 PID: 14701 Comm: syz.4.1529 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 526.975544][T14701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 526.985695][T14701] Call Trace: [ 526.989005][T14701] [ 526.992038][T14701] dump_stack_lvl+0x241/0x360 [ 526.996741][T14701] ? __pfx_dump_stack_lvl+0x10/0x10 [ 527.002030][T14701] ? __pfx__printk+0x10/0x10 [ 527.006660][T14701] ? __pfx_lock_release+0x10/0x10 [ 527.011770][T14701] should_fail_ex+0x3b0/0x4e0 [ 527.016667][T14701] _copy_from_user+0x2f/0xc0 [ 527.021387][T14701] video_usercopy+0x378/0x1180 [ 527.026268][T14701] ? __pfx___video_do_ioctl+0x10/0x10 [ 527.031664][T14701] ? __pfx_video_usercopy+0x10/0x10 [ 527.036879][T14701] v4l2_ioctl+0x189/0x1e0 [ 527.041222][T14701] v4l2_compat_ioctl32+0x1d7/0x260 [ 527.046511][T14701] __se_compat_sys_ioctl+0x502/0xc10 [ 527.051794][T14701] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 527.057596][T14701] ? __fget_files+0x2a/0x410 [ 527.062205][T14701] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 527.068182][T14701] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 527.074533][T14701] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 527.081150][T14701] ? lockdep_hardirqs_on+0x99/0x150 [ 527.086439][T14701] __do_fast_syscall_32+0xb4/0x110 [ 527.091553][T14701] ? exc_page_fault+0x590/0x8b0 [ 527.096431][T14701] do_fast_syscall_32+0x34/0x80 [ 527.101309][T14701] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 527.107751][T14701] RIP: 0023:0xf7fd1579 [ 527.111812][T14701] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 527.131507][T14701] RSP: 002b:00000000f512655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 527.139972][T14701] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0d05605 [ 527.147950][T14701] RDX: 00000000200002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 527.155936][T14701] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 527.163906][T14701] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 527.171877][T14701] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 527.179854][T14701] [ 527.187318][ T5893] hid-alps 0003:044E:121E.0005: item fetching failed at offset 5/7 [ 527.196245][ T5893] hid-alps 0003:044E:121E.0005: parse failed [ 527.202392][ T5893] hid-alps 0003:044E:121E.0005: probe with driver hid-alps failed with error -22 [ 527.853299][ T5838] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 528.030069][ T5838] usb 5-1: config index 0 descriptor too short (expected 37, got 36) [ 528.050918][ T5838] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 528.101898][ T5838] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 528.129449][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.174912][ T5838] usb 5-1: config 0 descriptor?? [ 528.207156][ T5838] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 528.301811][ T8] usb 3-1: USB disconnect, device number 62 [ 528.513512][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 528.687622][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 528.719231][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 528.739411][T14740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1534'. [ 528.768773][ T10] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 528.782572][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.833590][ T10] usb 2-1: Product: syz [ 528.837818][ T10] usb 2-1: Manufacturer: syz [ 528.864112][ T10] usb 2-1: SerialNumber: syz [ 528.884908][ T10] usb 2-1: config 0 descriptor?? [ 528.942824][ T10] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 529.023493][ T45] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 529.103039][ T8] usb 2-1: USB disconnect, device number 42 [ 529.109972][ T1323] usb 2-1: Failed to submit usb control message: -71 [ 529.140901][ T1323] usb 2-1: unable to send the bmi data to the device: -71 [ 529.160881][ T1323] usb 2-1: unable to get target info from device [ 529.188258][ T1323] usb 2-1: could not get target info (-71) [ 529.216271][ T1323] usb 2-1: could not probe fw (-71) [ 529.267024][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 529.276758][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.310346][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 529.359478][ T45] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 529.409225][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.441672][ T45] usb 3-1: Product: syz [ 529.478039][ T45] usb 3-1: Manufacturer: syz [ 529.482715][ T45] usb 3-1: SerialNumber: syz [ 529.924788][T14740] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1534'. [ 530.010214][T14740] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1534'. [ 530.118233][T14763] FAULT_INJECTION: forcing a failure. [ 530.118233][T14763] name failslab, interval 1, probability 0, space 0, times 1 [ 530.196702][T14763] CPU: 0 UID: 0 PID: 14763 Comm: syz.1.1536 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 530.207596][T14763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 530.217769][T14763] Call Trace: [ 530.221072][T14763] [ 530.224019][T14763] dump_stack_lvl+0x241/0x360 [ 530.228729][T14763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 530.233952][T14763] ? __pfx__printk+0x10/0x10 [ 530.238674][T14763] ? kmem_cache_alloc_noprof+0x48/0x380 [ 530.244257][T14763] ? __pfx___might_resched+0x10/0x10 [ 530.249648][T14763] ? rcu_read_lock_any_held+0xb7/0x160 [ 530.255152][T14763] should_fail_ex+0x3b0/0x4e0 [ 530.259872][T14763] should_failslab+0xac/0x100 [ 530.264587][T14763] ? create_new_namespaces+0x34/0x7b0 [ 530.270002][T14763] kmem_cache_alloc_noprof+0x70/0x380 [ 530.275494][T14763] create_new_namespaces+0x34/0x7b0 [ 530.280728][T14763] ? __pfx_vfs_write+0x10/0x10 [ 530.285521][T14763] ? do_sys_openat2+0x17a/0x1d0 [ 530.290377][T14763] __se_sys_setns+0x2d6/0x1bc0 [ 530.295139][T14763] ? __pfx___se_sys_setns+0x10/0x10 [ 530.300333][T14763] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 530.307037][T14763] ? lockdep_hardirqs_on+0x99/0x150 [ 530.312260][T14763] __do_fast_syscall_32+0xb4/0x110 [ 530.317387][T14763] ? exc_page_fault+0x590/0x8b0 [ 530.322239][T14763] do_fast_syscall_32+0x34/0x80 [ 530.327091][T14763] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 530.333440][T14763] RIP: 0023:0xf7f56579 [ 530.337503][T14763] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 530.357194][T14763] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 000000000000015a [ 530.365663][T14763] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000080 [ 530.373664][T14763] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 530.381646][T14763] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 530.389619][T14763] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 530.397591][T14763] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 530.405565][T14763] [ 530.435433][ T45] usb 3-1: 0:2 : does not exist [ 530.787872][T14778] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1537'. [ 530.803350][ T45] usb 3-1: USB disconnect, device number 63 [ 530.872430][ T8] usb 5-1: USB disconnect, device number 47 [ 531.014090][ T6597] udevd[6597]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 531.908218][T14809] FAULT_INJECTION: forcing a failure. [ 531.908218][T14809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.045885][T14809] CPU: 1 UID: 0 PID: 14809 Comm: syz.6.1543 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 532.056816][T14809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 532.066973][T14809] Call Trace: [ 532.070539][T14809] [ 532.073544][T14809] dump_stack_lvl+0x241/0x360 [ 532.078270][T14809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.083510][T14809] ? __pfx__printk+0x10/0x10 [ 532.088126][T14809] ? __pfx_lock_release+0x10/0x10 [ 532.093169][T14809] should_fail_ex+0x3b0/0x4e0 [ 532.097882][T14809] _copy_from_user+0x2f/0xc0 [ 532.102500][T14809] packet_setsockopt+0x87b/0x1970 [ 532.107534][T14809] ? __pfx_packet_setsockopt+0x10/0x10 [ 532.113009][T14809] ? aa_sk_perm+0x96d/0xab0 [ 532.117565][T14809] ? __pfx_aa_sk_perm+0x10/0x10 [ 532.122444][T14809] ? __pfx_lock_acquire+0x10/0x10 [ 532.127496][T14809] ? aa_sock_opt_perm+0x79/0x120 [ 532.132611][T14809] ? __pfx_packet_setsockopt+0x10/0x10 [ 532.138161][T14809] do_sock_setsockopt+0x3af/0x720 [ 532.143426][T14809] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 532.149036][T14809] ? __fget_files+0x2a/0x410 [ 532.153648][T14809] ? __fget_files+0x395/0x410 [ 532.158337][T14809] ? __fget_files+0x2a/0x410 [ 532.163007][T14809] __ia32_sys_setsockopt+0x1f2/0x280 [ 532.168310][T14809] __do_fast_syscall_32+0xb4/0x110 [ 532.173442][T14809] ? exc_page_fault+0x590/0x8b0 [ 532.178291][T14809] do_fast_syscall_32+0x34/0x80 [ 532.183178][T14809] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 532.189548][T14809] RIP: 0023:0xf714d579 [ 532.193659][T14809] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 532.213313][T14809] RSP: 002b:00000000f513f55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 532.221826][T14809] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000107 [ 532.229845][T14809] RDX: 0000000000000001 RSI: 0000000020000080 RDI: 0000000000000010 [ 532.237862][T14809] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 532.245837][T14809] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 532.253813][T14809] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 532.261799][T14809] [ 533.252649][T14852] FAULT_INJECTION: forcing a failure. [ 533.252649][T14852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.273700][T14852] CPU: 0 UID: 0 PID: 14852 Comm: syz.6.1552 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 533.284553][T14852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 533.294657][T14852] Call Trace: [ 533.297931][T14852] [ 533.300854][T14852] dump_stack_lvl+0x241/0x360 [ 533.305537][T14852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 533.310765][T14852] ? __pfx__printk+0x10/0x10 [ 533.315367][T14852] ? snprintf+0xda/0x120 [ 533.319607][T14852] should_fail_ex+0x3b0/0x4e0 [ 533.324287][T14852] _copy_to_user+0x31/0xb0 [ 533.328705][T14852] simple_read_from_buffer+0xca/0x150 [ 533.334059][ T5893] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 533.342073][T14852] proc_fail_nth_read+0x1e9/0x250 [ 533.347116][T14852] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 533.352669][T14852] ? rw_verify_area+0x55e/0x6f0 [ 533.357517][T14852] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 533.363086][T14852] vfs_read+0x1fc/0xb70 [ 533.367258][T14852] ? __pfx___mutex_lock+0x10/0x10 [ 533.372390][T14852] ? __pfx_vfs_read+0x10/0x10 [ 533.377075][T14852] ? __se_compat_sys_ioctl+0x150/0xc10 [ 533.382535][T14852] ? __fget_files+0x2a/0x410 [ 533.387156][T14852] ? __fget_files+0x395/0x410 [ 533.391836][T14852] ? __fget_files+0x2a/0x410 [ 533.396433][T14852] ksys_read+0x18f/0x2b0 [ 533.400688][T14852] ? __pfx_ksys_read+0x10/0x10 [ 533.405446][T14852] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 533.412928][T14852] ? lockdep_hardirqs_on+0x99/0x150 [ 533.418439][T14852] __do_fast_syscall_32+0xb4/0x110 [ 533.423589][T14852] ? exc_page_fault+0x590/0x8b0 [ 533.428471][T14852] do_fast_syscall_32+0x34/0x80 [ 533.433343][T14852] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.433377][ T25] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 533.439688][T14852] RIP: 0023:0xf714d579 [ 533.439746][T14852] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 533.439764][T14852] RSP: 002b:00000000f513f590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 533.439785][T14852] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f513f620 [ 533.439798][T14852] RDX: 000000000000000f RSI: 00000000f7483ff4 RDI: 0000000000000000 [ 533.439808][T14852] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 533.439819][T14852] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 533.439829][T14852] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 533.439853][T14852] [ 533.524733][T14858] FAULT_INJECTION: forcing a failure. [ 533.524733][T14858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.549694][T14858] CPU: 0 UID: 0 PID: 14858 Comm: syz.4.1553 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 533.560527][T14858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 533.570707][T14858] Call Trace: [ 533.574027][T14858] [ 533.576990][T14858] dump_stack_lvl+0x241/0x360 [ 533.581726][T14858] ? __pfx_dump_stack_lvl+0x10/0x10 [ 533.586968][T14858] ? __pfx__printk+0x10/0x10 [ 533.591618][T14858] ? __pfx_lock_release+0x10/0x10 [ 533.596676][T14858] should_fail_ex+0x3b0/0x4e0 [ 533.601404][T14858] _copy_from_user+0x2f/0xc0 [ 533.606048][T14858] get_compat_msghdr+0xae/0x730 [ 533.610952][T14858] ? __pfx_get_compat_msghdr+0x10/0x10 [ 533.616471][T14858] __sys_sendmsg+0x233/0x350 [ 533.621102][T14858] ? __pfx_lock_release+0x10/0x10 [ 533.626263][T14858] ? __pfx___sys_sendmsg+0x10/0x10 [ 533.631483][T14858] ? __pfx_vfs_write+0x10/0x10 [ 533.636296][T14858] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 533.642910][T14858] ? lockdep_hardirqs_on+0x99/0x150 [ 533.648157][T14858] __do_fast_syscall_32+0xb4/0x110 [ 533.653320][T14858] ? exc_page_fault+0x590/0x8b0 [ 533.658223][T14858] do_fast_syscall_32+0x34/0x80 [ 533.663211][T14858] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.669596][T14858] RIP: 0023:0xf7fd1579 [ 533.673792][T14858] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 533.693443][T14858] RSP: 002b:00000000f512655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 533.695588][ T5893] usb 6-1: config index 0 descriptor too short (expected 37, got 36) [ 533.701885][T14858] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000200 [ 533.717981][T14858] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 533.723205][ T5893] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 533.725944][T14858] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 533.746806][T14858] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 533.754809][T14858] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 533.762834][T14858] [ 533.763211][ T5893] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 533.806062][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 533.822524][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 533.853387][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.861744][ T25] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 533.872957][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.926775][ T5893] usb 6-1: config 0 descriptor?? [ 533.931977][ T25] usb 2-1: Product: syz [ 533.964887][ T25] usb 2-1: Manufacturer: syz [ 533.972148][ T5893] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 533.990865][ T25] usb 2-1: SerialNumber: syz [ 534.012069][ T25] usb 2-1: config 0 descriptor?? [ 534.042821][ T25] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 534.275089][ T25] usb 2-1: USB disconnect, device number 43 [ 534.282304][ T3488] usb 2-1: Failed to submit usb control message: -71 [ 534.462706][ T3488] usb 2-1: unable to send the bmi data to the device: -71 [ 534.480844][ T3488] usb 2-1: unable to get target info from device [ 534.494147][ T3488] usb 2-1: could not get target info (-71) [ 534.513390][ T3488] usb 2-1: could not probe fw (-71) [ 534.762275][T14881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1556'. [ 535.122349][T14893] FAULT_INJECTION: forcing a failure. [ 535.122349][T14893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.158015][T14893] CPU: 1 UID: 0 PID: 14893 Comm: syz.2.1559 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 535.168874][T14893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 535.179157][T14893] Call Trace: [ 535.182470][T14893] [ 535.185445][T14893] dump_stack_lvl+0x241/0x360 [ 535.190175][T14893] ? __pfx_dump_stack_lvl+0x10/0x10 [ 535.195417][T14893] ? __pfx__printk+0x10/0x10 [ 535.200058][T14893] ? snprintf+0xda/0x120 [ 535.204353][T14893] should_fail_ex+0x3b0/0x4e0 [ 535.209119][T14893] _copy_to_user+0x31/0xb0 [ 535.213586][T14893] simple_read_from_buffer+0xca/0x150 [ 535.219102][T14893] proc_fail_nth_read+0x1e9/0x250 [ 535.224188][T14893] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 535.229777][T14893] ? rw_verify_area+0x55e/0x6f0 [ 535.234670][T14893] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 535.240355][T14893] vfs_read+0x1fc/0xb70 [ 535.243323][ T119] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 535.244536][T14893] ? __pfx___mutex_lock+0x10/0x10 [ 535.244570][T14893] ? __pfx_vfs_read+0x10/0x10 [ 535.261871][T14893] ? __fget_files+0x2a/0x410 [ 535.266521][T14893] ? __fget_files+0x395/0x410 [ 535.271249][T14893] ? __fget_files+0x2a/0x410 [ 535.275897][T14893] ksys_read+0x18f/0x2b0 [ 535.280191][T14893] ? __pfx_ksys_read+0x10/0x10 [ 535.285007][T14893] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 535.291740][T14893] ? lockdep_hardirqs_on+0x99/0x150 [ 535.297097][T14893] __do_fast_syscall_32+0xb4/0x110 [ 535.302444][T14893] ? exc_page_fault+0x590/0x8b0 [ 535.307529][T14893] do_fast_syscall_32+0x34/0x80 [ 535.312518][T14893] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 535.319066][T14893] RIP: 0023:0xf7f97579 [ 535.323164][T14893] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 535.344781][T14893] RSP: 002b:00000000f50e6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 535.353933][T14893] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50e6620 [ 535.361944][T14893] RDX: 000000000000000f RSI: 00000000f7423ff4 RDI: 0000000000000000 [ 535.369953][T14893] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 535.378071][T14893] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 535.386203][T14893] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 535.394239][T14893] [ 535.397407][ C1] vkms_vblank_simulate: vblank timer overrun [ 535.441456][ T119] usb 7-1: unable to get BOS descriptor or descriptor too short [ 535.454425][ T119] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 535.483811][ T119] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 535.513183][ T119] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 535.537947][ T119] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 535.599120][ T119] usb 7-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 535.632184][ T119] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.663237][ T119] usb 7-1: Product: syz [ 535.667514][ T119] usb 7-1: Manufacturer: ȉì„쎻﫶᠅６袎îªì……뀟åµè„‰ä¯»ãŸ’彣왥鈰素׀꾈跀䵪ᮮᙂ闇뚬ῧ⋠◉뉜餡䂳酱⻹㚌æ°ä •à§¸æ—䳧쳡㛠믩⎌êµáŽ—㡽홛êŸì®¹áž°î¼µë•±á¥²ï­î‡…ìƒæ‘¢ï¥çššì”î“혪ᤇ矖嫭ꯡ巂㪭೗凢涅æ§ë£¼áµµê‚«é‡¡ [ 535.715776][ T29] audit: type=1326 audit(1736425523.835:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14901 comm="syz.2.1561" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x0 [ 535.764757][ T119] usb 7-1: SerialNumber: syz [ 535.772063][ T45] usb 6-1: USB disconnect, device number 41 [ 535.795167][ T119] usb 7-1: config 0 descriptor?? [ 535.827474][ T119] usb 7-1: NFC: Unable to get FW version [ 535.834015][ T119] pn533_usb 7-1:0.0: probe with driver pn533_usb failed with error -90 [ 536.003467][T14733] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 536.073285][ T25] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 536.160676][T14733] usb 5-1: Using ep0 maxpacket: 32 [ 536.186023][T14733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 536.219553][T14733] usb 5-1: New USB device found, idVendor=0499, idProduct=105a, bcdDevice=cc.96 [ 536.233740][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 536.239359][T14733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.253404][T14733] usb 5-1: Product: syz [ 536.257633][T14733] usb 5-1: Manufacturer: syz [ 536.259056][ T25] usb 2-1: too many configurations: 236, using maximum allowed: 8 [ 536.262249][T14733] usb 5-1: SerialNumber: syz [ 536.285261][T14733] usb 5-1: config 0 descriptor?? [ 536.306244][ T25] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 536.323616][ T25] usb 2-1: can't read configurations, error -61 [ 536.463383][ T25] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 536.499694][T14733] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 536.558338][T14733] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 536.589296][T14733] usb 5-1: USB disconnect, device number 48 [ 536.633581][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 536.644787][ T25] usb 2-1: too many configurations: 236, using maximum allowed: 8 [ 536.674912][ T25] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 536.682576][ T25] usb 2-1: can't read configurations, error -61 [ 536.701188][ T25] usb usb2-port1: attempt power cycle [ 536.709176][T14931] pim6reg1: entered promiscuous mode [ 536.729559][T14931] pim6reg1: entered allmulticast mode [ 536.803324][ T6597] udevd[6597]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 536.973729][T14733] usb 7-1: USB disconnect, device number 20 [ 536.984327][ T5893] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 537.053441][ T25] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 537.084300][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 537.090590][ T25] usb 2-1: too many configurations: 236, using maximum allowed: 8 [ 537.127496][ T25] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 537.135518][ T25] usb 2-1: can't read configurations, error -61 [ 537.220798][ T5893] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 537.232674][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.259041][ T5893] usb 3-1: Product: syz [ 537.272701][ T5893] usb 3-1: Manufacturer: syz [ 537.278581][ T25] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 537.291643][T14950] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1566'. [ 537.298863][ T5893] usb 3-1: SerialNumber: syz [ 537.309262][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 537.318199][ T25] usb 2-1: too many configurations: 236, using maximum allowed: 8 [ 537.350159][ T5893] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 537.370757][ T25] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 537.383602][ T25] usb 2-1: can't read configurations, error -61 [ 537.399061][ T25] usb usb2-port1: unable to enumerate USB device [ 537.502166][ T45] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 537.987565][T14933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.004792][T14933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.033592][ T5893] usb 3-1: USB disconnect, device number 64 [ 538.545793][ T45] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 538.557747][ T45] ath9k_htc: Failed to initialize the device [ 538.677308][ T5893] usb 3-1: ath9k_htc: USB layer deinitialized [ 538.813284][ T119] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 538.870825][T14996] FAULT_INJECTION: forcing a failure. [ 538.870825][T14996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 538.885352][T14996] CPU: 0 UID: 0 PID: 14996 Comm: syz.1.1574 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 538.896264][T14996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 538.906549][T14996] Call Trace: [ 538.909962][T14996] [ 538.912885][T14996] dump_stack_lvl+0x241/0x360 [ 538.917574][T14996] ? __pfx_dump_stack_lvl+0x10/0x10 [ 538.922783][T14996] ? __pfx__printk+0x10/0x10 [ 538.927378][T14996] ? __pfx_lock_release+0x10/0x10 [ 538.932409][T14996] should_fail_ex+0x3b0/0x4e0 [ 538.937091][T14996] _copy_from_iter+0x1e9/0x1c20 [ 538.941937][T14996] ? __virt_addr_valid+0x183/0x530 [ 538.947076][T14996] ? __alloc_skb+0x28f/0x440 [ 538.951753][T14996] ? __pfx__copy_from_iter+0x10/0x10 [ 538.957038][T14996] ? __virt_addr_valid+0x183/0x530 [ 538.962256][T14996] ? __virt_addr_valid+0x183/0x530 [ 538.967398][T14996] ? __virt_addr_valid+0x45f/0x530 [ 538.972506][T14996] ? __phys_addr_symbol+0x2f/0x70 [ 538.977525][T14996] ? __check_object_size+0x47a/0x730 [ 538.982803][T14996] netlink_sendmsg+0x73d/0xcb0 [ 538.987576][T14996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.992872][T14996] ? __pfx_lock_release+0x10/0x10 [ 538.997898][T14996] ? aa_sock_msg_perm+0x91/0x160 [ 539.002871][T14996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.008154][T14996] __sock_sendmsg+0x221/0x270 [ 539.013196][T14996] ____sys_sendmsg+0x52a/0x7e0 [ 539.017968][T14996] ? __pfx_____sys_sendmsg+0x10/0x10 [ 539.023255][T14996] __sys_sendmsg+0x269/0x350 [ 539.027859][T14996] ? __pfx_lock_release+0x10/0x10 [ 539.032918][T14996] ? __pfx___sys_sendmsg+0x10/0x10 [ 539.038044][T14996] ? __pfx_vfs_write+0x10/0x10 [ 539.042829][T14996] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 539.049426][T14996] ? lockdep_hardirqs_on+0x99/0x150 [ 539.054651][T14996] __do_fast_syscall_32+0xb4/0x110 [ 539.059810][T14996] ? exc_page_fault+0x590/0x8b0 [ 539.064692][T14996] do_fast_syscall_32+0x34/0x80 [ 539.069552][T14996] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 539.075908][T14996] RIP: 0023:0xf7f56579 [ 539.079979][T14996] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 539.099594][T14996] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 539.108026][T14996] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 539.116021][T14996] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 539.124014][T14996] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 539.132093][T14996] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 539.140282][T14996] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 539.148541][T14996] [ 539.223281][ T5893] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 539.420099][ T5893] usb 3-1: config index 0 descriptor too short (expected 37, got 36) [ 539.442025][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 539.479026][ T5893] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 539.504845][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.558266][ T5893] usb 3-1: config 0 descriptor?? [ 539.582677][ T5893] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 539.594426][ T119] usb 5-1: Using ep0 maxpacket: 8 [ 539.621638][ T119] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 539.681904][ T119] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 539.733262][ T119] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 539.773028][ T119] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 539.888860][ T119] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 539.945873][ T119] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 539.980841][T15013] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1578'. [ 540.022068][ T119] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.064065][ T119] usb 5-1: config 0 descriptor?? [ 540.101578][T14988] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 540.232035][ T8] usb 3-1: USB disconnect, device number 65 [ 540.288964][ T5893] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 540.473635][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 540.495039][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 540.561970][ T5893] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 540.579159][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.584649][ T5840] Bluetooth: hci0: Opcode 0x0c03 failed: -71 [ 540.596020][T14733] usb 5-1: USB disconnect, device number 49 [ 540.696412][ T5893] usb 2-1: Product: syz [ 540.700665][ T5893] usb 2-1: Manufacturer: syz [ 540.740400][ T5893] usb 2-1: SerialNumber: syz [ 540.761316][ T5893] usb 2-1: config 0 descriptor?? [ 540.804842][ T5893] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 541.017361][ T2937] usb 2-1: Failed to submit usb control message: -71 [ 541.030316][ T2937] usb 2-1: unable to send the bmi data to the device: -71 [ 541.037841][ T2937] usb 2-1: unable to get target info from device [ 541.044375][ T2937] usb 2-1: could not get target info (-71) [ 541.050338][ T2937] usb 2-1: could not probe fw (-71) [ 541.066085][ T45] usb 2-1: USB disconnect, device number 48 [ 541.201520][T15046] netlink: 'syz.4.1583': attribute type 10 has an invalid length. [ 541.209812][T15046] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1583'. [ 541.229055][T15046] batadv0: entered promiscuous mode [ 541.233674][ T5893] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 541.238885][T15046] batadv0: entered allmulticast mode [ 541.261233][T15046] bridge0: port 3(batadv0) entered blocking state [ 541.280416][T15046] bridge0: port 3(batadv0) entered disabled state [ 541.291930][T15046] bridge0: port 3(batadv0) entered blocking state [ 541.298697][T15046] bridge0: port 3(batadv0) entered forwarding state [ 541.396948][ T5893] usb 7-1: Using ep0 maxpacket: 8 [ 541.412681][ T5893] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 541.422572][ T5893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.436197][ T5893] usb 7-1: Product: syz [ 541.444918][ T5893] usb 7-1: Manufacturer: syz [ 541.457362][ T5893] usb 7-1: SerialNumber: syz [ 541.464704][ T2937] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 541.474578][ T2937] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 541.491194][ T5893] usb 7-1: config 0 descriptor?? [ 541.721659][ T5893] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 541.763322][ T5838] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 541.925250][ T5838] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 541.934340][ T5838] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.944791][ T5838] usb 5-1: config 0 has no interface number 0 [ 541.950995][ T5838] usb 5-1: config 0 interface 117 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 541.986035][ T5838] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 542.011291][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.037415][ T5838] usb 5-1: Product: syz [ 542.045190][ T5838] usb 5-1: Manufacturer: syz [ 542.052057][ T5838] usb 5-1: SerialNumber: syz [ 542.064044][ T5838] usb 5-1: config 0 descriptor?? [ 542.358580][ T8] usb 5-1: USB disconnect, device number 50 [ 542.503491][T14733] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 542.547243][T15042] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1581'. [ 542.673200][T14733] usb 2-1: Using ep0 maxpacket: 16 [ 542.680292][T14733] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.706074][T14733] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 542.724433][T14733] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 542.742285][T14733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.762517][T14733] usb 2-1: config 0 descriptor?? [ 543.253248][ T5885] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 543.462474][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 543.496229][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.513203][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.523516][ T5885] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 543.537672][ T5885] usb 5-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.00 [ 543.547531][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.562071][ T5885] usb 5-1: config 0 descriptor?? [ 544.014078][T15090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.055160][T15090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.310670][ T5885] wacom 0003:056A:00D3.0006: Unknown device_type for 'HID 056a:00d3'. Assuming pen. [ 544.502000][T15090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1589'. [ 544.536491][T15090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.551398][ T5885] wacom 0003:056A:00D3.0006: hidraw0: USB HID v0.10 Device [HID 056a:00d3] on usb-dummy_hcd.4-1/input0 [ 544.565873][T15090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.594920][T15090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.629290][ T5893] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 544.647763][T15090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.678815][ T5885] input: Wacom Bamboo 2FG 6x8 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00D3.0006/input/input39 [ 544.730381][T15090] bridge0: port 3(batadv0) entered disabled state [ 544.838288][T15090] bridge0: port 3(batadv0) entered disabled state [ 544.877514][ T119] usb 7-1: USB disconnect, device number 21 [ 544.883662][ T10] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 545.138452][ T5890] usb 5-1: USB disconnect, device number 51 [ 545.158786][ T10] usb 3-1: config 116 has no interfaces? [ 545.164717][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 545.174881][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.285890][ T5893] usb 2-1: USB disconnect, device number 49 [ 545.347090][T15114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1597'. [ 545.356589][ T5885] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 545.396642][T15103] netlink: 'syz.2.1593': attribute type 10 has an invalid length. [ 545.404914][T15103] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1593'. [ 545.414019][T15103] batadv0: entered promiscuous mode [ 545.420482][T15103] batadv0: entered allmulticast mode [ 545.426701][T15103] bridge0: port 3(batadv0) entered blocking state [ 545.433379][T15103] bridge0: port 3(batadv0) entered disabled state [ 545.440921][T15103] bridge0: port 3(batadv0) entered blocking state [ 545.447542][T15103] bridge0: port 3(batadv0) entered forwarding state [ 545.456560][ T29] audit: type=1326 audit(1736425533.575:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15102 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 545.466404][ T5838] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 545.478690][ T29] audit: type=1326 audit(1736425533.575:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15102 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 545.478739][ T29] audit: type=1326 audit(1736425533.575:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15102 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 545.523418][ T5885] usb 6-1: Using ep0 maxpacket: 16 [ 545.531253][ T29] audit: type=1326 audit(1736425533.575:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15102 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 545.537747][ T5885] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 545.558403][ T29] audit: type=1326 audit(1736425533.575:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15102 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 545.581241][ T5885] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 545.592078][ T29] audit: type=1326 audit(1736425533.695:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15102 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 545.623486][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.623516][ T5885] usb 6-1: Product: syz [ 545.623532][ T5885] usb 6-1: Manufacturer: syz [ 545.623548][ T5885] usb 6-1: SerialNumber: syz [ 545.645653][ T5885] usb 6-1: config 0 descriptor?? [ 545.646037][ T29] audit: type=1326 audit(1736425533.695:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15102 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 545.673119][ T29] audit: type=1326 audit(1736425533.695:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15102 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 545.685323][ T5838] usb 7-1: config index 0 descriptor too short (expected 37, got 36) [ 545.695147][ T29] audit: type=1326 audit(1736425533.695:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15102 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 545.703978][ T5893] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 545.726085][ T29] audit: type=1326 audit(1736425533.695:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15102 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 545.733577][ T5838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.733607][ T5838] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 545.733646][ T5838] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 545.733670][ T5838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.735614][ T5838] usb 7-1: config 0 descriptor?? [ 545.839355][ T63] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 545.846174][ T5838] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 545.848772][ T63] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 545.868473][ T5885] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 545.955312][ T5893] usb 2-1: config 0 has an invalid interface number: 153 but max is 0 [ 545.966210][ T5893] usb 2-1: config 0 has no interface number 0 [ 545.981940][ T5893] usb 2-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30 [ 546.077171][ T10] usb 3-1: USB disconnect, device number 66 [ 546.095120][ T5893] usb 2-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 546.130202][ T5893] usb 2-1: config 0 interface 153 has no altsetting 0 [ 546.157447][ T5893] usb 2-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 546.174741][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.182961][ T5893] usb 2-1: Product: syz [ 546.197196][ T5893] usb 2-1: Manufacturer: syz [ 546.201909][ T5893] usb 2-1: SerialNumber: syz [ 546.212432][ T5893] usb 2-1: config 0 descriptor?? [ 546.437882][ T5893] hub 2-1:0.153: bad descriptor, ignoring hub [ 546.451814][ T5893] hub 2-1:0.153: probe with driver hub failed with error -5 [ 546.471327][ T5893] sierra 2-1:0.153: Sierra USB modem converter detected [ 546.521690][ T5893] usb 2-1: USB disconnect, device number 50 [ 546.568382][ T5893] sierra 2-1:0.153: device disconnected [ 546.944172][ T3488] usb 6-1: Failed to submit usb control message: -110 [ 546.952139][ T3488] usb 6-1: unable to send the bmi data to the device: -110 [ 546.973209][ T3488] usb 6-1: unable to get target info from device [ 546.994099][ T3488] usb 6-1: could not get target info (-110) [ 547.021619][ T3488] usb 6-1: could not probe fw (-110) [ 547.896248][ T10] usb 7-1: USB disconnect, device number 22 [ 547.921309][ T5890] usb 6-1: USB disconnect, device number 42 [ 548.161316][T15152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1605'. [ 548.953310][ T5838] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 549.073248][ T5885] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 549.118823][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.153224][ T5838] usb 2-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 549.162337][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.185111][ T5838] usb 2-1: config 0 descriptor?? [ 549.223343][ T5885] usb 3-1: device descriptor read/64, error -71 [ 549.223390][T15190] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1613'. [ 549.326517][T15190] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1613'. [ 549.481182][ T5885] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 549.619285][ T5838] hid-alps 0003:044E:121E.0007: item fetching failed at offset 5/7 [ 549.648874][ T5838] hid-alps 0003:044E:121E.0007: parse failed [ 549.663536][ T5885] usb 3-1: device descriptor read/64, error -71 [ 549.670443][ T5838] hid-alps 0003:044E:121E.0007: probe with driver hid-alps failed with error -22 [ 549.774939][ T5885] usb usb3-port1: attempt power cycle [ 550.123366][ T5885] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 550.138575][ T10] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 550.163890][ T5885] usb 3-1: device descriptor read/8, error -71 [ 550.303573][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 550.317243][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 550.338588][ T10] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 550.351494][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.363438][ T10] usb 5-1: Product: syz [ 550.367752][ T10] usb 5-1: Manufacturer: syz [ 550.372590][ T10] usb 5-1: SerialNumber: syz [ 550.379846][ T10] usb 5-1: config 0 descriptor?? [ 550.409052][ T5885] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 550.427606][ T10] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 550.454857][ T5885] usb 3-1: device descriptor read/8, error -71 [ 550.563655][ T5885] usb usb3-port1: unable to enumerate USB device [ 550.598307][ T2937] usb 5-1: Failed to submit usb control message: -71 [ 550.598650][ T10] usb 5-1: USB disconnect, device number 52 [ 550.633050][ T2937] usb 5-1: unable to send the bmi data to the device: -71 [ 550.655950][ T2937] usb 5-1: unable to get target info from device [ 550.668359][ T2937] usb 5-1: could not get target info (-71) [ 550.681261][ T2937] usb 5-1: could not probe fw (-71) [ 551.366374][T15213] netlink: 'syz.2.1619': attribute type 21 has an invalid length. [ 551.390069][T15213] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1619'. [ 551.623803][ T5838] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 551.733290][ T5885] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 551.789414][ T5891] usb 2-1: USB disconnect, device number 51 [ 551.798362][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.829809][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.852266][ T5838] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 551.872826][ T5893] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 551.890567][ T5838] usb 5-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 551.911525][ T5885] usb 6-1: config index 0 descriptor too short (expected 37, got 36) [ 551.922687][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.930933][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.954666][ T5885] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 551.977280][ T5838] usb 5-1: config 0 descriptor?? [ 551.997872][ T5885] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 552.035805][ T5893] usb 3-1: Using ep0 maxpacket: 16 [ 552.051029][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.083638][ T5893] usb 3-1: config 2 has an invalid interface number: 77 but max is 0 [ 552.116952][ T5885] usb 6-1: config 0 descriptor?? [ 552.132937][ T5893] usb 3-1: config 2 has no interface number 0 [ 552.146356][ T5885] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 552.178499][ T5893] usb 3-1: config 2 interface 77 has no altsetting 0 [ 552.218037][ T5893] usb 3-1: New USB device found, idVendor=6f1c, idProduct=05a1, bcdDevice=52.3d [ 552.253344][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.261437][ T5893] usb 3-1: Product: syz [ 552.333986][ T5893] usb 3-1: Manufacturer: syz [ 552.338739][ T5893] usb 3-1: SerialNumber: syz [ 552.412461][ T5838] hid-alps 0003:044E:120B.0008: unknown main item tag 0x0 [ 552.453337][ T5838] hid-alps 0003:044E:120B.0008: unknown main item tag 0x0 [ 552.482084][ T5838] hid-alps 0003:044E:120B.0008: unknown main item tag 0x0 [ 552.503246][ T5838] hid-alps 0003:044E:120B.0008: unknown main item tag 0x0 [ 552.530936][ T5838] hid-alps 0003:044E:120B.0008: unknown main item tag 0x0 [ 552.554916][ T5838] hid-alps 0003:044E:120B.0008: hidraw0: USB HID v0.00 Device [HID 044e:120b] on usb-dummy_hcd.4-1/input0 [ 552.591550][ T5893] usb-storage 3-1:2.77: USB Mass Storage device detected [ 552.793924][ T5893] usb 3-1: USB disconnect, device number 71 [ 552.811600][ T10] usb 5-1: USB disconnect, device number 53 [ 554.380011][T15273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1630'. [ 554.509620][ T5891] usb 6-1: USB disconnect, device number 43 [ 555.103475][ T119] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 555.263168][ T119] usb 3-1: Using ep0 maxpacket: 16 [ 555.283907][ T119] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 555.305717][ T119] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 555.354949][ T119] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.374879][ T119] usb 3-1: Product: syz [ 555.379117][ T119] usb 3-1: Manufacturer: syz [ 555.396842][ T119] usb 3-1: SerialNumber: syz [ 555.414347][ T119] usb 3-1: config 0 descriptor?? [ 555.444076][ T119] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 555.603751][ T5890] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 555.653770][ T2937] usb 3-1: Failed to submit usb control message: -71 [ 555.654386][ T119] usb 3-1: USB disconnect, device number 72 [ 555.691599][ T2937] usb 3-1: unable to send the bmi data to the device: -71 [ 555.699891][ T2937] usb 3-1: unable to get target info from device [ 555.735900][ T2937] usb 3-1: could not get target info (-71) [ 555.741810][ T2937] usb 3-1: could not probe fw (-71) [ 555.766031][ T5890] usb 5-1: device descriptor read/64, error -71 [ 556.031102][ T5890] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 556.093852][ T10] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 556.273290][ T5890] usb 5-1: device descriptor read/64, error -71 [ 556.403482][ T5890] usb usb5-port1: attempt power cycle [ 556.421202][ T10] usb 6-1: too many configurations: 11, using maximum allowed: 8 [ 556.514036][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 556.543899][ T10] usb 6-1: can't read configurations, error -61 [ 556.703371][ T10] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 556.804128][ T5891] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 556.975278][ T5891] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 557.003936][ T5891] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 557.039021][ T5891] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 557.079170][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.123704][T15320] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 557.173016][ T5891] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 557.193338][ T45] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 557.375002][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 557.391910][ T45] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 557.441149][ T45] usb 2-1: config 0 has no interface number 0 [ 557.476184][ T45] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 557.531346][ T45] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 557.600334][ T45] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 557.674169][ T45] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 557.684896][ T45] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 557.700011][ T45] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 557.711230][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.725215][ T45] usb 2-1: config 0 descriptor?? [ 557.744640][ T45] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 557.868290][T15336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.909435][T15336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.097046][ T5891] usb 2-1: USB disconnect, device number 52 [ 558.130647][ T5891] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 558.325124][T15320] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1634'. [ 558.369959][T15320] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 558.445116][ T5891] usb 3-1: USB disconnect, device number 73 [ 558.783267][ T5890] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 559.128951][T15354] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1641'. [ 559.143484][ T5890] usb 5-1: device not accepting address 56, error -71 [ 559.151050][T15362] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 559.173899][ T5891] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 559.213823][ T10] usb 6-1: device not accepting address 45, error -71 [ 559.221170][ T10] usb usb6-port1: attempt power cycle [ 559.483773][ T5891] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 559.694685][ T5891] usb 3-1: config index 0 descriptor too short (expected 37, got 36) [ 559.703170][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.771444][ T5891] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 559.849358][ T5891] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 559.892016][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.903626][ T5885] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 559.954397][ T5891] usb 3-1: config 0 descriptor?? [ 559.990117][ T5891] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 560.280681][ T5890] usb 3-1: USB disconnect, device number 74 [ 560.890453][T15421] FAULT_INJECTION: forcing a failure. [ 560.890453][T15421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 560.964086][T15421] CPU: 1 UID: 0 PID: 15421 Comm: syz.4.1650 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 560.975014][T15421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 560.985072][T15421] Call Trace: [ 560.988432][T15421] [ 560.991444][T15421] dump_stack_lvl+0x241/0x360 [ 560.996126][T15421] ? __pfx_dump_stack_lvl+0x10/0x10 [ 561.001316][T15421] ? __pfx__printk+0x10/0x10 [ 561.005898][T15421] ? __pfx_lock_release+0x10/0x10 [ 561.010938][T15421] should_fail_ex+0x3b0/0x4e0 [ 561.015616][T15421] _copy_from_iter+0x1e9/0x1c20 [ 561.020465][T15421] ? __virt_addr_valid+0x183/0x530 [ 561.025579][T15421] ? __alloc_skb+0x28f/0x440 [ 561.030185][T15421] ? __pfx__copy_from_iter+0x10/0x10 [ 561.035494][T15421] ? __virt_addr_valid+0x183/0x530 [ 561.040600][T15421] ? __virt_addr_valid+0x183/0x530 [ 561.045703][T15421] ? __virt_addr_valid+0x45f/0x530 [ 561.050810][T15421] ? __phys_addr_symbol+0x2f/0x70 [ 561.056037][T15421] ? __check_object_size+0x47a/0x730 [ 561.061327][T15421] netlink_sendmsg+0x73d/0xcb0 [ 561.066089][T15421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.071370][T15421] ? __pfx_lock_release+0x10/0x10 [ 561.076399][T15421] ? aa_sock_msg_perm+0x91/0x160 [ 561.081356][T15421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.086670][T15421] __sock_sendmsg+0x221/0x270 [ 561.091358][T15421] ____sys_sendmsg+0x52a/0x7e0 [ 561.096147][T15421] ? __pfx_____sys_sendmsg+0x10/0x10 [ 561.101975][T15421] __sys_sendmsg+0x269/0x350 [ 561.106561][T15421] ? __pfx_lock_release+0x10/0x10 [ 561.111674][T15421] ? __pfx___sys_sendmsg+0x10/0x10 [ 561.116874][T15421] ? __pfx_vfs_write+0x10/0x10 [ 561.121825][T15421] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 561.128420][T15421] ? lockdep_hardirqs_on+0x99/0x150 [ 561.133628][T15421] __do_fast_syscall_32+0xb4/0x110 [ 561.138849][T15421] ? exc_page_fault+0x590/0x8b0 [ 561.143717][T15421] do_fast_syscall_32+0x34/0x80 [ 561.148587][T15421] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 561.154923][T15421] RIP: 0023:0xf7fd1579 [ 561.158990][T15421] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 561.178624][T15421] RSP: 002b:00000000f512655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 561.187154][T15421] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020001ac0 [ 561.195139][T15421] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 561.203115][T15421] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 561.211088][T15421] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 561.219052][T15421] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 561.227029][T15421] [ 561.973420][ T25] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 562.017120][T15438] loop6: detected capacity change from 0 to 524287999 [ 562.075117][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 562.084342][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 562.114943][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 562.124363][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 562.139651][ T25] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 562.172486][ T25] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.179610][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 562.191814][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 562.199832][ T25] usb 7-1: config 0 has no interface number 0 [ 562.204226][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 562.215116][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 562.225030][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 562.234247][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 562.234931][ T25] usb 7-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 562.252712][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 562.264383][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 562.275470][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 562.284707][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 562.326258][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 562.335501][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 562.357542][T15438] ldm_validate_partition_table(): Disk read failed. [ 562.419333][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 562.428737][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 562.440690][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 562.448600][ T25] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 562.450012][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 562.459494][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.475393][ T25] usb 7-1: Product: syz [ 562.479591][ T25] usb 7-1: Manufacturer: syz [ 562.484442][ T25] usb 7-1: SerialNumber: syz [ 562.487285][T15438] Dev loop6: unable to read RDB block 0 [ 562.493507][ T25] usb 7-1: config 0 descriptor?? [ 562.553149][T15438] loop6: unable to read partition table [ 562.553523][T15461] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1658'. [ 562.583814][T15438] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 562.859307][ T5885] usb 7-1: USB disconnect, device number 23 [ 563.643207][ T5885] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 563.683496][ T25] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 563.801804][ T5885] usb 6-1: Using ep0 maxpacket: 16 [ 563.842831][ T5885] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 563.866329][ T25] usb 7-1: config index 0 descriptor too short (expected 37, got 36) [ 563.876553][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.901578][ T5885] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 563.937291][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.983608][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.025225][ T5885] usb 6-1: Product: syz [ 564.033148][ T25] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 564.049716][ T5885] usb 6-1: Manufacturer: syz [ 564.059481][ T5885] usb 6-1: SerialNumber: syz [ 564.085249][ T5885] usb 6-1: config 0 descriptor?? [ 564.091577][ T25] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 564.117171][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.141870][ T25] usb 7-1: config 0 descriptor?? [ 564.147928][ T5885] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 564.412842][ T5838] usb 6-1: USB disconnect, device number 47 [ 564.517505][ T63] usb 6-1: Failed to submit usb control message: -71 [ 564.604071][ T63] usb 6-1: unable to send the bmi data to the device: -71 [ 564.632501][ T63] usb 6-1: unable to get target info from device [ 564.660871][ T63] usb 6-1: could not get target info (-71) [ 564.683605][ T63] usb 6-1: could not probe fw (-71) [ 565.743637][T15544] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1671'. [ 565.901484][T15543] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1671'. [ 566.167869][T15553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1673'. [ 566.683381][ T25] usbhid 7-1:0.0: can't add hid device: -71 [ 566.691499][ T25] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 566.774964][ T25] usb 7-1: USB disconnect, device number 24 [ 566.864917][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 566.963398][T15573] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1679'. [ 567.029281][T15570] FAULT_INJECTION: forcing a failure. [ 567.029281][T15570] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 567.061366][T15581] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0 [ 567.062704][T15570] CPU: 0 UID: 0 PID: 15570 Comm: syz.2.1679 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 567.071544][T15577] IPVS: stopping backup sync thread 15581 ... [ 567.081576][T15570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 567.081596][T15570] Call Trace: [ 567.081605][T15570] [ 567.081614][T15570] dump_stack_lvl+0x241/0x360 [ 567.081645][T15570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 567.081666][T15570] ? __pfx__printk+0x10/0x10 [ 567.081696][T15570] should_fail_ex+0x3b0/0x4e0 [ 567.081725][T15570] prepare_alloc_pages+0x1da/0x5b0 [ 567.081749][T15570] __alloc_pages_noprof+0x16f/0x710 [ 567.081767][T15570] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 567.081791][T15570] ? __pfx_lock_acquire+0x10/0x10 [ 567.081816][T15570] alloc_pages_mpol_noprof+0x3e8/0x680 [ 567.081842][T15570] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 567.081871][T15570] vma_alloc_folio_noprof+0x12e/0x230 [ 567.081895][T15570] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 567.081925][T15570] folio_prealloc+0x2e/0x170 [ 567.081944][T15570] handle_pte_fault+0x2c98/0x5ed0 [ 567.081973][T15570] ? __pfx_handle_pte_fault+0x10/0x10 [ 567.082005][T15570] ? __lock_acquire+0x1397/0x2100 [ 567.082051][T15570] ? mt_find+0x2a9/0x920 [ 567.082073][T15570] ? __pfx_lock_release+0x10/0x10 [ 567.204560][T15570] handle_mm_fault+0x1106/0x1bb0 [ 567.209516][T15570] ? mt_find+0x2a9/0x920 [ 567.213816][T15570] ? __pfx_handle_mm_fault+0x10/0x10 [ 567.219125][T15570] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 567.225472][T15570] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 567.230770][T15570] exc_page_fault+0x2b9/0x8b0 [ 567.235467][T15570] asm_exc_page_fault+0x26/0x30 [ 567.240335][T15570] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 567.246159][T15570] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 567.265778][T15570] RSP: 0018:ffffc9000cf8f6d8 EFLAGS: 00050202 [ 567.271865][T15570] RAX: ffff88806dda8001 RBX: 0000000000000b2c RCX: 0000000000000b2c [ 567.279877][T15570] RDX: 0000000000000000 RSI: ffff88806dda8000 RDI: 00000000200024c0 [ 567.287864][T15570] RBP: ffffc9000cf8f858 R08: ffff88806dda8b2b R09: 1ffff1100dbb5165 [ 567.295946][T15570] R10: dffffc0000000000 R11: ffffed100dbb5166 R12: 0000000000000000 [ 567.303949][T15570] R13: 1ffff920019f1ef0 R14: ffff88806dda8000 R15: 0000000020002fec [ 567.311980][T15570] _copy_to_iter+0x4d5/0x1c50 [ 567.316687][T15570] ? __pfx__copy_to_iter+0x10/0x10 [ 567.321804][T15570] ? __virt_addr_valid+0x183/0x530 [ 567.326950][T15570] ? __virt_addr_valid+0x183/0x530 [ 567.332600][T15570] ? __virt_addr_valid+0x45f/0x530 [ 567.337811][T15570] ? __check_object_size+0x47a/0x730 [ 567.343125][T15570] __skb_datagram_iter+0x107/0x900 [ 567.348265][T15570] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 567.353916][T15570] skb_copy_datagram_iter+0xd1/0x250 [ 567.359217][T15570] netlink_recvmsg+0x2d0/0x11d0 [ 567.364082][T15570] ? __pfx_netlink_recvmsg+0x10/0x10 [ 567.369380][T15570] ? __pfx_aa_sk_perm+0x10/0x10 [ 567.374240][T15570] ? aa_sock_msg_perm+0x91/0x160 [ 567.379357][T15570] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 567.384737][T15570] ? __pfx_netlink_recvmsg+0x10/0x10 [ 567.390032][T15570] sock_recvmsg+0x22f/0x280 [ 567.394549][T15570] ____sys_recvmsg+0x1c6/0x480 [ 567.399330][T15570] ? __pfx_____sys_recvmsg+0x10/0x10 [ 567.404624][T15570] ? get_compat_msghdr+0x500/0x730 [ 567.409758][T15570] __sys_recvmsg+0x291/0x390 [ 567.414356][T15570] ? __pfx___sys_recvmsg+0x10/0x10 [ 567.419480][T15570] ? __mutex_unlock_slowpath+0x21e/0x790 [ 567.425134][T15570] ? __fget_files+0x2a/0x410 [ 567.429753][T15570] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 567.436354][T15570] ? lockdep_hardirqs_on+0x99/0x150 [ 567.441561][T15570] __do_fast_syscall_32+0xb4/0x110 [ 567.446683][T15570] ? exc_page_fault+0x590/0x8b0 [ 567.451546][T15570] do_fast_syscall_32+0x34/0x80 [ 567.456404][T15570] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 567.462774][T15570] RIP: 0023:0xf7f97579 [ 567.466870][T15570] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 567.486598][T15570] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000174 [ 567.495029][T15570] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000300 [ 567.503013][T15570] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 567.510999][T15570] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 567.519009][T15570] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 567.527106][T15570] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 567.535110][T15570] [ 567.568066][T15583] binder: BINDER_SET_CONTEXT_MGR already set [ 567.589266][T15570] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1679'. [ 567.599127][T15583] binder: 15576:15583 ioctl 4018620d 200002c0 returned -16 [ 567.742188][T15577] binder: 15576:15577 ioctl c0306201 200003c0 returned -22 [ 567.857671][T15595] CIFS: VFS: Malformed UNC in devname [ 567.941957][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 567.979790][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 568.003341][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 568.040735][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 568.053951][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 568.120440][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 568.443328][ T5838] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 568.546241][T15611] chnl_net:caif_netlink_parms(): no params data found [ 568.563188][ T25] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 568.604672][ T5838] usb 7-1: config index 0 descriptor too short (expected 37, got 36) [ 568.613016][ T5838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.627013][ T5838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.637122][ T5838] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 568.650962][ T5838] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 568.662992][ T5838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.683822][T15611] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.691065][ T5838] usb 7-1: config 0 descriptor?? [ 568.691131][T15611] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.708918][T15611] bridge_slave_0: entered allmulticast mode [ 568.717016][T15611] bridge_slave_0: entered promiscuous mode [ 568.724093][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 568.725209][T15611] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.736868][ T119] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 568.745148][T15611] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.753338][T15611] bridge_slave_1: entered allmulticast mode [ 568.757670][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 568.760498][T15611] bridge_slave_1: entered promiscuous mode [ 568.796095][ T25] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 568.822919][ T25] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 568.859638][ T25] usb 2-1: Product: syz [ 568.867078][ T25] usb 2-1: Manufacturer: syz [ 568.871785][ T25] usb 2-1: SerialNumber: syz [ 568.890397][ T119] usb 6-1: device descriptor read/64, error -71 [ 568.926043][T15611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.954286][T15611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.958654][ T5838] usbhid 7-1:0.0: can't add hid device: -71 [ 568.981428][T15641] netlink: 'syz.2.1693': attribute type 3 has an invalid length. [ 568.988287][ T5838] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 569.013989][ T5838] usb 7-1: USB disconnect, device number 25 [ 569.079725][T15611] team0: Port device team_slave_0 added [ 569.104286][ T25] usb 2-1: Invalid connection information received from device [ 569.108222][T15611] team0: Port device team_slave_1 added [ 569.134014][ T119] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 569.186909][T15611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.194764][T15611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.222300][T15611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.260063][T15611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.268484][T15611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.295448][ T5890] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 569.304320][ T119] usb 6-1: device descriptor read/64, error -71 [ 569.327946][T15611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.393437][T15643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.409576][T15611] hsr_slave_0: entered promiscuous mode [ 569.410131][T15643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.423640][ T119] usb usb6-port1: attempt power cycle [ 569.429771][T15611] hsr_slave_1: entered promiscuous mode [ 569.452140][T15611] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 569.486908][T15611] Cannot create hsr debugfs directory [ 569.515559][ T5890] usb 3-1: config 0 interface 0 has no altsetting 0 [ 569.522275][ T5890] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 569.532307][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.547862][ T5890] usb 3-1: config 0 descriptor?? [ 569.713786][ T5838] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 569.803832][ T119] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 569.828256][ T119] usb 6-1: device descriptor read/8, error -71 [ 569.887574][ T5838] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.912650][ T5838] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 569.951590][ T5838] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=cd.f8 [ 569.961969][ T5838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.982038][ T5838] usb 7-1: Product: syz [ 569.988148][ T5838] usb 7-1: Manufacturer: syz [ 569.993852][ T5838] usb 7-1: SerialNumber: syz [ 570.001256][ T5838] usb 7-1: config 0 descriptor?? [ 570.093527][ T119] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 570.134109][ T119] usb 6-1: device descriptor read/8, error -71 [ 570.223530][ T5841] Bluetooth: hci0: command tx timeout [ 570.243923][ T119] usb usb6-port1: unable to enumerate USB device [ 570.349787][ T5838] cx82310_eth 7-1:0.0: probe with driver cx82310_eth failed with error -22 [ 570.372704][ T5890] video4linux radio48: keene_cmd_main failed (-71) [ 570.376865][ T5838] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 570.400125][ T5890] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 570.419751][ T5890] usb 3-1: USB disconnect, device number 75 [ 570.429885][ T5838] usb 7-1: USB disconnect, device number 26 [ 570.556070][T15611] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 570.571985][T15611] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 570.594431][T15611] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 570.615918][T15611] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 570.765608][T15611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.802717][T15611] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.828651][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.835942][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.882751][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.890056][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.972824][T15611] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 570.990779][T15611] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 571.089532][T15611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.106190][T15685] usb usb8: usbfs: interface 0 claimed by hub while 'syz.6.1696' resets device [ 571.121515][T15611] veth0_vlan: entered promiscuous mode [ 571.132811][T15611] veth1_vlan: entered promiscuous mode [ 571.158741][T15611] veth0_macvtap: entered promiscuous mode [ 571.168093][T15611] veth1_macvtap: entered promiscuous mode [ 571.184538][T15611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.195193][T15611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.207122][T15611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.217638][T15611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.228230][T15611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.239679][T15611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.249664][T15611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.260162][T15611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.270086][T15611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.280625][T15611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.290683][T15611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.301189][T15611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.312342][T15611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.335305][T15611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.356037][T15611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.366253][T15611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.382624][T15611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.392596][T15611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.408219][ T5885] usb 2-1: USB disconnect, device number 53 [ 571.413133][T15611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.643720][T15611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.666478][T15611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.676521][T15611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.687068][T15611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.688211][T15700] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1700'. [ 571.696967][T15611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.696992][T15611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.698104][T15611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.738103][T15611] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.747235][T15611] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.756153][T15611] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.764961][T15611] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.808494][T15695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1699'. [ 572.125155][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.183755][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.259436][ T2937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.260541][T15718] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1704'. [ 572.282835][ T2937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.303210][ T5841] Bluetooth: hci0: command tx timeout [ 572.318761][T15712] ------------[ cut here ]------------ [ 572.324588][T15712] kernel BUG at mm/hugetlb.c:2403! [ 572.329912][T15712] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 572.336853][T15712] CPU: 0 UID: 0 PID: 15712 Comm: syz.2.1702 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 572.347615][T15712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 572.357764][T15712] RIP: 0010:alloc_hugetlb_folio_reserve+0xbc/0xc0 [ 572.364191][T15712] Code: 1f eb 05 e8 96 17 a0 ff 48 c7 c7 40 56 61 8e e8 3a 31 cc 09 4c 89 f0 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc e8 75 17 a0 ff 90 <0f> 0b 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f [ 572.383808][T15712] RSP: 0018:ffffc9000c26f638 EFLAGS: 00010083 [ 572.389876][T15712] RAX: ffffffff81ff6cab RBX: 0000000000000000 RCX: 0000000000080000 [ 572.397849][T15712] RDX: ffffc9000cad9000 RSI: 000000000000041f RDI: 0000000000000420 [ 572.405826][T15712] RBP: 1ffffffff34810d9 R08: ffffffff81ff6c63 R09: 1ffffd400028f005 [ 572.413810][T15712] R10: dffffc0000000000 R11: fffff9400028f006 R12: dffffc0000000000 [ 572.421793][T15712] R13: dffffc0000000000 R14: ffffea0001478000 R15: ffffffff9a4086c8 [ 572.429768][T15712] FS: 0000000000000000(0000) GS:ffff8880b8600000(0063) knlGS:00000000f50e6b40 [ 572.438701][T15712] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 572.445286][T15712] CR2: 00000000f50fdda4 CR3: 0000000067578000 CR4: 00000000003526f0 [ 572.453268][T15712] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 572.461238][T15712] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 572.469388][T15712] Call Trace: [ 572.472662][T15712] [ 572.475608][T15712] ? __die_body+0x5f/0xb0 [ 572.479956][T15712] ? die+0x9e/0xc0 [ 572.483684][T15712] ? do_trap+0x15a/0x3a0 [ 572.487931][T15712] ? alloc_hugetlb_folio_reserve+0xbc/0xc0 [ 572.493762][T15712] ? do_error_trap+0x1dc/0x2c0 [ 572.498545][T15712] ? alloc_hugetlb_folio_reserve+0xbc/0xc0 [ 572.504360][T15712] ? __pfx_do_error_trap+0x10/0x10 [ 572.509477][T15712] ? report_bug+0x3cd/0x500 [ 572.513984][T15712] ? handle_invalid_op+0x34/0x40 [ 572.518933][T15712] ? alloc_hugetlb_folio_reserve+0xbc/0xc0 [ 572.524742][T15712] ? exc_invalid_op+0x38/0x50 [ 572.529507][T15712] ? asm_exc_invalid_op+0x1a/0x20 [ 572.534538][T15712] ? alloc_hugetlb_folio_reserve+0x73/0xc0 [ 572.540359][T15712] ? alloc_hugetlb_folio_reserve+0xbb/0xc0 [ 572.546185][T15712] ? alloc_hugetlb_folio_reserve+0xbc/0xc0 [ 572.552013][T15712] ? alloc_hugetlb_folio_reserve+0xbb/0xc0 [ 572.557844][T15712] memfd_alloc_folio+0x1bd/0x370 [ 572.562806][T15712] memfd_pin_folios+0xf10/0x1570 [ 572.567754][T15712] ? __pfx_memfd_pin_folios+0x10/0x10 [ 572.573151][T15712] ? __fget_files+0x2a/0x410 [ 572.577755][T15712] ? __fget_files+0x395/0x410 [ 572.582434][T15712] ? __fget_files+0x2a/0x410 [ 572.587126][T15712] udmabuf_create+0x70e/0x10c0 [ 572.591907][T15712] ? __pfx_udmabuf_create+0x10/0x10 [ 572.597115][T15712] ? __might_fault+0xc6/0x120 [ 572.601831][T15712] udmabuf_ioctl+0x301/0x4e0 [ 572.606428][T15712] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 572.611548][T15712] ? __fget_files+0x2a/0x410 [ 572.616260][T15712] ? __fget_files+0x2a/0x410 [ 572.620895][T15712] __se_compat_sys_ioctl+0x502/0xc10 [ 572.626330][T15712] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 572.632159][T15712] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 572.638158][T15712] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 572.644491][T15712] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 572.651085][T15712] ? lockdep_hardirqs_on+0x99/0x150 [ 572.656290][T15712] __do_fast_syscall_32+0xb4/0x110 [ 572.661407][T15712] ? ret_from_fork_asm+0x1a/0x30 [ 572.666347][T15712] ? lockdep_hardirqs_on+0x99/0x150 [ 572.671554][T15712] do_fast_syscall_32+0x34/0x80 [ 572.676408][T15712] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 572.682744][T15712] RIP: 0023:0xf7f97579 [ 572.686816][T15712] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 572.706431][T15712] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 572.714937][T15712] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000040187542 [ 572.722995][T15712] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 572.731227][T15712] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 572.739196][T15712] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 572.747174][T15712] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 572.755156][T15712] [ 572.758174][T15712] Modules linked in: [ 572.762077][T15712] ---[ end trace 0000000000000000 ]--- [ 572.767540][T15712] RIP: 0010:alloc_hugetlb_folio_reserve+0xbc/0xc0 [ 572.773961][T15712] Code: 1f eb 05 e8 96 17 a0 ff 48 c7 c7 40 56 61 8e e8 3a 31 cc 09 4c 89 f0 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc e8 75 17 a0 ff 90 <0f> 0b 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f [ 572.793570][T15712] RSP: 0018:ffffc9000c26f638 EFLAGS: 00010083 [ 572.799684][T15712] RAX: ffffffff81ff6cab RBX: 0000000000000000 RCX: 0000000000080000 [ 572.807671][T15712] RDX: ffffc9000cad9000 RSI: 000000000000041f RDI: 0000000000000420 [ 572.815638][T15712] RBP: 1ffffffff34810d9 R08: ffffffff81ff6c63 R09: 1ffffd400028f005 [ 572.823607][T15712] R10: dffffc0000000000 R11: fffff9400028f006 R12: dffffc0000000000 [ 572.831586][T15712] R13: dffffc0000000000 R14: ffffea0001478000 R15: ffffffff9a4086c8 [ 572.839555][T15712] FS: 0000000000000000(0000) GS:ffff8880b8600000(0063) knlGS:00000000f50e6b40 [ 572.848487][T15712] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 572.855074][T15712] CR2: 00000000f50fdda4 CR3: 0000000067578000 CR4: 00000000003526f0 [ 572.863051][T15712] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 572.871027][T15712] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 572.879012][T15712] Kernel panic - not syncing: Fatal exception [ 572.885368][T15712] Kernel Offset: disabled [ 572.889686][T15712] Rebooting in 86400 seconds..