last executing test programs: 18m6.342479762s ago: executing program 3 (id=3157): add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) socket$kcm(0x21, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0xb4, 0x30, 0x100, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ct={0x2c, 0x18, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0x70, 0x19, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x1ff, 0x20000000, 0x2b}}]}, {0x23, 0x6, "ff946eacfee2d520c3f6f487fb8864be623c00"/31}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x4}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x844}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0), 0x0, 0x4001c00) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) r5 = fsopen(&(0x7f00000000c0)='ubifs\x00', 0x0) write$tcp_mem(r4, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) getsockopt$inet6_tcp_buf(r4, 0x6, 0xd, 0x0, &(0x7f0000000280)) close(r5) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001f00000000030000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x300000000000000) 18m3.371712111s ago: executing program 3 (id=3164): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0x27, 0xc0, 0xde, 0x20, 0x86a, 0x3, 0xf03f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x2, 0x2, 0x0, 0xf3, 0xbf, 0xf5}}]}}]}}, 0x0) socket(0x400000000010, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5", 0x13}], 0x1}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000900)="5c3eb879", 0x4}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b", 0x88}], 0x1}, 0x11000000}, {{&(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x4, 0x0) 18m1.783297742s ago: executing program 3 (id=3167): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000180)={0x0, 0x3, 0x1158}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000040)={'sit0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000b40)={0x2, 0x4e22, @empty}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000e3ff0b000000180005800800010075647000050002"], 0x2c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xffffffffffffffe5, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x10000}, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/kexec_crash_loaded', 0x52100, 0x1a8) ioctl$KVM_CLEAR_DIRTY_LOG(r9, 0xc018aec0, &(0x7f00000001c0)={0x10002, 0x40, 0x0, &(0x7f0000000b80)=[0x7, 0xddda, 0x5, 0x10000, 0x1, 0x6, 0xacf, 0xfffffffffffffffd, 0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0x5376, 0x5, 0x4, 0x5639, 0x5, 0xe, 0x1, 0x6, 0x3, 0x101, 0x7fffffffffffffff, 0xffffffff, 0x1000, 0x7f197ef6, 0xa4, 0x81, 0x3, 0x101, 0xffffffff00000000, 0x6, 0x5, 0x9, 0x9, 0x6, 0x3ff, 0xe, 0x101, 0x2, 0x9b8d, 0x5, 0x7, 0x6, 0xb15, 0xc, 0xd7d, 0xfffffffffffffff9, 0x8, 0x8001, 0x7, 0x7fffffffffffffff, 0x7fffffffffffffff, 0xfffffffffffffffe, 0x3, 0x5, 0x4, 0x35e8, 0xfffffffffffffffd, 0x5, 0xfffffffffffffffd, 0x8000, 0x8, 0x620, 0x10000, 0x3, 0x3, 0xb4b, 0x9, 0x401, 0x9, 0x2, 0x7ff, 0x81, 0x429a, 0x9, 0x3, 0x4, 0xd, 0xb4, 0xfffffffffffffff9, 0x9, 0x7, 0x5, 0x9, 0x9b3, 0x7ff, 0x8000000000000000, 0xf, 0xffffffff, 0x93, 0x1, 0x8, 0x81, 0x10, 0x5, 0x8a30, 0x9, 0x1c0d30a1, 0x49, 0x2, 0x1, 0x8c8, 0xfffffffffffffff4, 0x8, 0x4473, 0x3, 0x7, 0xd, 0x68, 0x9, 0x5, 0x3, 0x2, 0x0, 0x6, 0x7, 0x0, 0x100000000, 0x2, 0x2, 0x3, 0x0, 0x6, 0x800000000000001, 0x7, 0x4, 0x8, 0x4]}) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r11 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r7, @ANYRES16=r2, @ANYRES64=r0], 0x2, 0x0, 0x0) read$FUSE(r10, &(0x7f0000007100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r10, &(0x7f0000002140)={0x50, 0x0, r12, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x1c6b}}, 0x50) read$FUSE(r10, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) renameat2(r11, &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xf) write$FUSE_INTERRUPT(r10, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r14}, 0x10) syz_fuse_handle_req(r10, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xfffffffffffffff5, 0x0, {0x0, 0x0, 0x2}}, &(0x7f0000000000)={0x130, 0xffffffffffffffda, 0x0, {0x0, 0x0, 0x0, '\x00', {0x0, 0x0, 0x9, 0x100000, r13, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4, {}, {}, {0x1, 0xfffffffe}, {0x0, 0xffffffff}, 0x3, 0x0, 0x0, 0x4000000}}}}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 18m1.147144716s ago: executing program 3 (id=3169): syz_open_dev$I2C(&(0x7f0000000040), 0x82, 0x42081) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5014, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0x7, 0x5, 0x40}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_open_dev$loop(&(0x7f00000013c0), 0x4, 0xa200) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) socket$inet_sctp(0x2, 0x5, 0x84) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000300)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}}, 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r9, 0xc0045b0f, &(0x7f0000000000)) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000690001000000fc", @ANYRES64], 0x18}}, 0x0) 17m59.437754767s ago: executing program 3 (id=3174): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @empty}}, @sadb_address={0x3, 0x6, 0xb8, 0x0, 0x0, @in={0x2, 0x3, @private}}, @sadb_key={0x2, 0x8, 0x8, 0x0, "b6"}, @sadb_sa={0xb3, 0x1, 0x0, 0x0, 0x0, 0xb3, 0x2}]}, 0x60}, 0x1, 0x7}, 0x0) 17m59.231469216s ago: executing program 3 (id=3176): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (async) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x92}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x30) (async) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x30) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'bridge0\x00'}, 0x18) socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) 17m43.466669211s ago: executing program 32 (id=3176): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (async) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x92}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x30) (async) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x30) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'bridge0\x00'}, 0x18) socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5m15.520820816s ago: executing program 0 (id=6295): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x8, 0xc, 0x2, 0x1, 0x1}, 0x50) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0xfffe, @multicast2}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 5m15.21100263s ago: executing program 0 (id=6297): socket$nl_xfrm(0x10, 0x3, 0x6) open(&(0x7f0000000300)='.\x02\x00', 0x14927e, 0x44) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f00000001c0)='./file0\x00', 0x16927e, 0x10) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902"], 0x0) socket$kcm(0x10, 0x2, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002211c0000001f000000060001000000000008000500", @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 5m13.336379553s ago: executing program 0 (id=6301): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000002440)='net/rt_cache\x00') r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e23, 0x3, @private1, 0x7}}}, 0x3a) read$FUSE(r5, &(0x7f00000001c0)={0x2020}, 0x2020) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, 0x0, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x800, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002400)=ANY=[@ANYRESHEX, @ANYRES64], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000010) r8 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r8, &(0x7f0000001400)=""/4076, 0xfffffeea) 5m10.532106167s ago: executing program 0 (id=6313): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000007c0)="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", 0x2000, &(0x7f00000005c0)={&(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x41, {0x7, 0x28, 0x744a, 0x4000a000, 0x1, 0x1, 0x4400, 0x3, 0x0, 0x0, 0x40, 0x49a9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x1000) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000006140)="e0332f8f5747b9f778142cc174a9b5f0244b78bb6346cb5fc9135b8220090ee698fddc241870359d32327f299718466d88c89e68097036bb35abfe03e3c02234dcdb2c7d1209c657485ca1aa3f2fb80e71397b80fca6f3cf2367fb19eb95e5b4a0170063374645d9e020099ffd7def3d94cd29412b3d7b7a47bc70121be848cfcecea78d41a93622b134bd06e84dec07a9e5abc29cb02d5b9091e748cffacf48352628822bab7b24a17bdf4b3f3bd9fb17793496aa6490da3f58039ce5b40745dd63f82d93bed80b50ca5742d67d39029a98db95c9392e2d5fd9a35bad30cfe98682b5a069738a12c3cfd25949106cfc839202fd21c2b28e44be73280d5037351ead2dd1c277d9cc9088c6b14365eb0937ea9685f6b26232293803260f2c8cfe176b55df304bc2865b8f52581afc4beed445ae8cc405cb7bcc51103aef812c41437c5b070a3591ad0964677f4f9017bb300727dfab009056bee3671a9694be2e2f2173fcc06ceba5aed0d93a3d7cd88365c5c354788efcc705e90d572e34e9e566fc206a8167970ecb9cbc43f4d9de4d43688582b6600dfcfc7379c831e756a45835647bd87879a3e3942c61b9ea2c2af35d49a4caa9a109b0beb972996ff8924ea371e15dc48efd12b1203a7f1fe354977fcf9e4ee2c8f210387e551ddb55e5f67ee6bb9bc8772649693b0adf24606e8ccc59f020834d8cbfcadfa1770549fe464dfc412308fbaee8d30bd20c002794bfb923bac6b490841248d12ad9a0e54d1d96e3aff5dc4930a6c8b7c75264a46af7a6339725fb84e0363463ebaaaf58d6b9309ae7c87a8df8c68d2487d684011de1fa7645f3f48cf3bb61bee8bcace2f8ef5f967f2765f8086aeaa5dcc34c84e379a7ddd6438cccb5b8098dfbffffffffffffeadbc4ad2b2ef98412a46f74a171ad056429dbb723cdb9ca9f9f03170dba2870e5988b7cb755599d1eb8f7eaf5c8ded4b56022cb479d0bdfae18f69f9ecc42f4c181ea10838229ba5db7f088ad8d5f77e49c1fd93ed6b983c43b23c7eeb1233f0c114885057a27cd3f67a309e3fecba241836bc92308b830b10b04af6c9595b44e859b9ca7ef079e151fdd500060787be3a7a5b3e23b06ec70f087134504f8b8e7b6799ebfe14f698ba7a813a380e6f92cace9230aa8094a2465f7224e2becad469d0aaf0e48b0098eacfb17abdb69bb2ebba97a09d2b739b532d70db91fcb0fcb38bccdc01d7c8113024ea8b619e385e58d31899721416e10b408504a9c4fcf870d21051227440a616cf62f6637b62eceaee09029f88009be02269cb5e5ed090c6f5e6c652c31214aef301bd23ec2504f90991cd27539c1b8b54db51825e951d076cd0e70f56de4b91894ce22049205483a0fe7d7886b36118bebd96d138980e26604b6e70a7275c6b81501143119a8c2c271558202eda196704ef9ae3c33301e1afbe56d069ce4926bf531d960f3df58192f3da558adc169d48d39e24e04e95c406b34b1f4ed2726ef0f6a67dd84c75636984191d019cebfa883fdf99affcdb4c874614a5312455403895891daf7469d6721583ccd1290ab05b14516f22965fc52c4a528f1a5c20cc133fea279d9efc991ec4d51d2654daceda234f6d3b0c635db697aba3eeaf8356319adba42428266ac09a6e6495ca8f60c1c4e052068511696296e88ef86a591948627ba97df634e0063eb5f208df00a069b1213c29e58cf76f591253d60de9d7c01d29992ccc728140299c429fec0df9d90f83fa2467ce00de83b16d10c7edb80ff8d4b1b19eea9bd1e2783a0d41215c9cf23bc3ca1ff414e3f29aadba00c5a8d5b44c28c10e99140e5428278e54bfd880a93fd1b54b560422ab2bfcf120a7902373b6442c6e9867b19aa0a6b77b1634ab6fd1c8a1d90d99ebb9ebcb89d593562b266fbc53c40501f9298690283c45059b3f6ee278e46cb3904c947446c28af8855b2a68e6e0c0da205a6e12fdd15b393d579039b31c1a54230ac2ea13cf1f5540046b4dcccdd731fff7323c4880e5d2d8668d8a7f08920715c06ef9652eb55f224c82a6fdb970dbf1032403f283bd868a23f4785a6ab9c0bcd2308dba1a1f258ae512cf64784e501008db366ab7093a6cc4b6ee86154d44a1a15c10834602dd5ccf730f6d1142ac19d113496dbcb80021cb5733924265d082a8453b5c21e0245e4a2627e8df090da6a129ee49c58c1a7437369acdee15f5e4e5638f05d9f6391572d9890219def702a013a2b05239664dba44feec2a9508a3200b47de03e6a784bca2f3633df534af33da0a95a34ca845b61a22ff55a5a4c04ff9e06e7162f458a8c56e106e75ffb76a921f4057dd73d5f3801aa78ca4c78d6b79bce560404c2fe3d57876287f73e84c27c486ffb997951f9e0b3aa81a5e7804ac7360add11e7851842d0ed8df041c999e50226fef006373bbb53d5d8e9d1653924e60234fd0b6645b821746f3d88591ff66e294e8e958ca425ddbc7d604f7cbbcb9d5fe0d4ad53878eb16bc801def1005e1eb12a6d4924d2179948e7aa542f2600ba3c6c600629d64c529c7326c1f38aa4e1a6cc259e58f86400d65d67856c8f4fffc33ad4c279dc05367307f562f8127f37b03c3cf38a97cfde0c02aad8ac40d347a9e0a496f227c068dc6c666fb2b6a18990f607399b0707d135752d93739e1840b5b4c125c81eeeb318869b408f87778451e49f3ad988a8aa97672989ad367833ff7e7f0e79c37ac794fe466623e122127fb94ebbc01bc775183b26b2dc407b1aa1a55d4ce04dbe1df4fba0377fea4c4bfa5a37c4dd733fd116b9c7f50b11dd512ad68646b9ddca295fe27bee78476901fbb5c8d2856ae0e9e21ab26e3587c1325f1fa28edb4081f2ba309d5fc39f7f54abbd0d5a152c2f7e3a8b3a5ef6e097b109061c91124f41f33055a7bb86706629f614d40346715cf2fe387ef4e4fc6646839824d3ef85eeac85bc5e681320f6fa7057e0a10de8c4678b48510f77b91bb397dd1209eaba8ea1f237c348e9e0d7af1229e2c04b6560e48e3a7491f3066b63a8923becdcfd8594c1c55098a51283b599765b049831cacd9478e5e996c778d524b476f6677218c94886d7548be7617e5796e35bb3c9b13d70e4897867d85f0350e9329985f051fb556b861aef7dead54e6b29b9ad837cb4774f47a5371ef034e3ce0113e67eba8842f4ac5b51a61315bf050078c710dcf14371d9593730b1d0302ef999f488bbf42b7360171da98ad68932bda4937358fd1d0c2bcd04f7dbe2beaffa0d53cccda316cb19270cf4aa56695ef3203b49fe92d1623cc1d714da6b8f94112db1781562ab2ae50bda23debd55da440434299c992f2f8c264310d6d8ccdd042737db0253d6889d8bf36fe99a131b73300c9798b8fd58b5fc681b97e71230cd3094e441fe5cf1294bbc28f41146f06e39d5e19e673dd489dbddfc16fe281160a8008e375025cbf25e84945f2f0a5ffb2cd58273328ea9d7533b2f0861eff95823cea18dc1877183fefab808bda0890f91f1d79b36953b138fd62caea3411900647a4afadfecade2ff6274175f06614d108daaf9821c413a137e33c826957953bb39e2f852097f978c3577abcb71d68b45794247d8e82614979708f6d6d0e469828206b22913d6d320d815d42c0d943640c63196f703f946089f535eac511e26c6a5a529e875eb15aaf65fd50dcbaf37a009f2f9081cdbc744cf7aa2336913e89f1961581ad4bb6aeb1d23a787e2d3f99639871df5842c30581263d5139128f0a3f37ef48bb636d7aae06581de6baa55a12019d3ed831950915fdc1eee819dd01047bda606f2852699529718c99606246a92bb1dd9435d8f3a48646c0e423441bc783be358c0c91e6846419b6c0a81354500cb2721834dc11ba40c3bbe5717e5142922a168ca0e20fc269ea584c7f68ff7cced62c4277385368b4ad596b79c45a9c4575c37f300cab37a5693cb777fabed412934d3a77505b17cb2628119ddff45f3fcbffb50386eb9cfb6f82b37fa852ad4b65bf8e2898b11bf051cb7fb0fa81cbf81b9ceebb05498aeb2691eb15297edd682976d5a4f444cdaa82f063bc4482c28c4e6257c7cf3e5ee5a502c6527b77b12725e7526ff896ee2f8066536dce04d63072a34c19d533d4dbdb93e7185482cbf7510c5eef2f8aebebad011727cd8061a367b7e1868252bb43d9a74c9c6a10539e357d5367fac69a9296fe5a79a2e5b45950ff462e0e882aa32ff7f29b5644e5311f3e0b076c58683de29ad9dd8b2c92a41ca8313ac997e44981e82aec550bbf6c88adf3d54e9fdf93d9dce95289e9086043d888f19d209cbea79f8f5b2c81b2c3889eae1cb5305e282b883c4cfa3798eceeabb442a74ff6a8470020a296ef01d8e32553663c844e67e5a3a44375f0074ce9547a6c489ee86d7652219491f35c6b904d51a26c3d2cc77d8ff97050dd0d0aed4a1ecf1db7ac48673a1dcc70ac16f709dcf4b90148aede5302111ceaa3a81c49b724cfa206283b62513f96c1da77efafe2d2d08a5f391ab690b5d974ceed2e95e85b1039def0e94c79cc0aa1de1f8133e985adfadf4a657710487b265bb6692fd2b91a06ac98d50b052b8a13168e2638b93209238fbe67f4590a81a2cdbcc479ca9178720a6ec05bc9457f27ad2e2fd2f4e9c643ef85b6287a01f7fd597799cce7d6464ed3c95110733d4ba92314ba3dd81e51f541a6e37f8bb14376e41560f9049b4ff349a467defc205f915a345b5f06d090645180ca642c719f03e9813bff7fd635660efe38b022130d42f2cedd792bcba2bfb14385c6d1cbe5ff2e38c22f1f8d5e4d93d296042507e43f24ff904827b16f2a3572d26078d7fdb0cfdbe2e6bee07b94ae441e510681c96f97ef0ddbd7efbd80ce0689f6e2022a189dd2937d3eadd82a154a5fac91b5ef48523706957b8d5f55077973e9a036009d745a6df39ba154dc59c4ef784d62b3f2d782dc508242a1b0e4cc294b6e62e98ef946f0d984c3174cf86b8a0beb615f046ec50dd0c8a9c0f36df60bd162f1130f894085e7c47b6c28ff336f5d75166c1840e7ad07204fc10ce976505f6aece0316d8c65b973f61cea2fe4c6db722717985c25249f041c07a86b878702a8c9ab7c33fe41039041aa38489b02a28f18d69ab34619e9e35514c54592c8059984ace64b5302b5f22d68c35c7ffb23c63ce877a1e1b160dd2c329eabcc0e1e3072021bd811de3c0c7a68af20ddb9e2912b7eecc2a8cf083a252d0fe31629b20559f7b976e4d8625644385c692b8cdc2886a42d750962d0dee10a1546ecb7ef961216cc456d2450a44aab07014fe0be076ca6bcb46b644af844b2ad8b3817f1895a5d579af3dc937541f4b7e9203e7a7af534b406d8f6e3bc555d767603122ab1c4e62de19d6af63be8e39fe45732859d6d92e11f1a847f7d62764b6364aa7f95f03cc7deba467da5be71657ae50ff6bf93c51efb7d19ac9887e92fe5f3c9d545209eff307c9e02073bd3404827e148aa63c135ed668589bdfec38cb47716201a9d02f1b03993f89e96b33b32e52ddffb0580dac45422ba7a3fef76e519a3dc8d12eac60c2d2f8c4303aafa3e80135c403360d51c9cdeba3ffb31e664302f587e0e983ede7f9b2bfe2bc64bd5029cfa88445e043e08f3e9affee25e980e75d2664738726e3d2eade7dce0ece78a514bbbe5a54c121374d079e3b05996052d66889742232b73e950e1a9892e7352c9e546a8cfb48332d2b2be6327208ca51dc2869a562581947f62b0d5bfb3e0911d4854f822d6738b4deb195840d2bbae0b074b8d1e1010c24ec00052dce7d259e3044aab1a99d261fb3b49cf09dfc85473f94db06d49e202ca12182283d48144f8389a5301679901600bf8130d36315b277a99204b85a1598f84bd2d4c4893108f6717bf44234181467d6eeee61e1823268b5c60bf04d0e13e429f411b51adfca20ff1a1b1eee203d59b03da1643c3e9fc474a91470116c6c5275542adb10f3adae2ae87e88b93f334e0ceb6216fc081e8d84d8b0a503196dc50599b22b89b807627b427a815aea0dbca69e5fb215ee996395d8a21a1c67ac295be33c6517504e1f00f579f8c484873cc670b5b9e787b1c30ca1f0b25f8bb8f4bde3b3f4fa730c292cbf97b25068ba9c65f78c555d5f75d52a57958d7111e824f3afa16484f625abf62afc80654c36fd9f8284466422fb18e08274e8febc719d45b784974d50d187ad2349429af3f7930252a4d45997762e9d5f5493d408ca144532aa89aa3d43c46951dafb8f81794e2e9679ce238cfe86e104461032819d62f217faa71fa9dc6da8861015567d1f7309090e25b7015dcc6d72a5e7ba53296ab1bc72467ac50831628cf5238155aed3fb189a8b527ebd38771e16454fe51e3edde55cea454414690491207c23f6cf33aaeeda432de2d1ede04e039a16245e66cce6f4e4ea534f290f02a2a81a46d6ffea7967dfbe37461f83d472091156594852823392efc953f4ac099d74e2d0328d9f47bd952352981a34055acd0273309484ab56afa85ff0c22fb53ac5d7cc8e346b4c2f38a4e2451738146b7b90c14f826c7dbc1b2be79d83772a8d629f2dfaf15286a15be1ea22a05d4ee3de6a6bfb7e208dbbcc88e77baac940d6438aeeb77c3a32db08b46e79545b65f7f3c1bd433092bc9116668c338ab35c01cb5871167868c6b61bd4c0ca5f96e5ce2465da06c4a320839f3bb7c0dffd40d5bb9a32fcbc6f691787de7211da062616272c77c62ac83e4cb29fb954ab27d9009877b79be54acd336bfe2a6e087abaab004743f5ea4ec8ddfb8086920e8e458a413adb98077a3cf860513cc8a453eb129556c871be7e7232a6130c4332819ad17b289fdb31f8f8854dffb4cfeca6d792567b444c750820a2a8a2e0f93779e61a4966650909369fc8bd5bd2bad4ff95cc8a14f6cd83ae6411b4bfe1a9b5cdf1fcf32c54cef1731edc47d41fa581376b25006fc859b98805d70a157e501a2cb2ab425340965213adfecdb5addb2b4b2ec5cc6935e4e279bb98283fb20dfcd8a2c91aefda9dc5a57bba4d8803d1eb0f4ba9529de01e39c2aa60a91267c31d036a3f669b9377661837f58c6950fdf38986ea13ff5e9c4d966bf999002da1a854d54aa225b259d91eb88425328e7d13b06dea321a151a8dfc44755214da97168e8acf027d66b7fff45ded94fcde53ff80342d4595644549c4ed827225596e2b30480e94eb049b6cd718fe8424d044bb5098e0206047ddb81755e3cb92131dd47ec754b64c4b78f663e364cf8a74cdd9857c81316dc4ccd5f02a84b310abfbc9d6a23ee6d1eaf6b8fc1544cfeb06002c8a40fb0e49859d2073a7b1cb112713518ad5e007d0a256f901469bfa5cae98841f877faeb584d41bfe695da72ca5700ae085f39c99f769502ea9f43c0b84ca4611441d5adb3e5d0a426297e535258748169cad487f97d171c0630642943508206ce648aad2971297f3d4037d73e5fbc73460ca7401b7dbd7807273ae077a81fd0d4bc90b6068e3ec95afcfeab16619306fb23942a4308e8253b35f4912df392dfc5daf35dd842a5a1f78fc294cbdbd504056f0c7779121b5b3db7461e437347452476f3b0bb22e63aa23cb9d3e797c6c95513058d8fb2c27864ac0e1f5001c988e29c79bfa4236c7be41dee5561d825c1f0fbebc0c06cc4712e88ad5efd94f4eb4e93794af42a9752a2ebc57dc2f3881c75bbb23ad25b69619f9f5b07fe114ba291d2b5b4c1c175e1aa3ee3eda55e6126b3ad1e613bf8e0bbac727b879e7796fa0ad100893677a18b53f5eb31db43a97370d3749afbeb43b9c1c11d9515976976d1cc1e44f35d317299ceb68ea2545f2a2b92b4e1046f6f92c33aae6995593189bb2611576599fd765b8e6fe2e88674ffd57ee8252287b1904d622c36a502db45c72b0d5fc3d983cc44bc955eb43911404667a4ab147d72b69ff2514dfb820ad75758e85df88499cea94ed658b4c1c2f49fe2bbb8d2dd97f844a6df289296cfb9cd5bc8d17aa235e2c4501b1422b25acd6dbc3a91d03904c545320524f9034955ab02f5d058097c37d23984baf808d28b3e12821eb8919a77c1b6a8bdeceecfcc487c39db592817dd378a7c5127b427e7279b2a82f6b8eec6b3fabe0947e353e7a386475b15011de93e2f2891f772ef90f4aba1ee1c4d7321c81ce4dcaa378daeabb93182c319494436dbe67d252a01291cacb59686ebd53c6df21c083e98fa299cf5e9b59f1ccea95c62b1437c8ff8754a6372b5b879ebc3241f6430871eafe35337d75cb68c42862846df4342ab434f7f0a7b9f66824e1e696e3dbecde179592774b7511e5a7a1a06ba601eb5f2a935c7cef0f83ecd412a84afdd05120fceb1afb6445ebfcdff8fffffffb75dddccc45afb4f5bb1308d39309c92c0b61a322d5229881fa5d598113cce54107036ca9f63fe863d257c706fe89d5c7ae59a459c6f15ba48d80da4aff541797b26418acddb987df3544bc4918cdbbdd8dd1bc2163c89635044e7b4da878457727a667c0146a12b4c46639497243259bfe4aa5ea50eb79f39fa9209256c9a685e3e39d6d8b6a9ca7d3554fbff0908ad6c6ecf68e506c20b16cd4a98e3ada9eb0cb3eb0b75b13b6d80bf99eddf2282da52cec085d3a725b71c29395d605e1eb26143290946a3a0d24347fa46145735dbf4eabc12150b8d5f7eeca804d7ed1fecd0132d1b94ebec65cbc07dfd4d54a5140567e77c646bd92666922c43aca8e482c59b970fa43087eb76d6715e4e8e5ebe54ca391383ef685b133534fcc1e5c5eb56f9d76a888506c4ac8d289c37039e0c4f927b0e11e85c5c7ec1cf4b19bebee6014cb89ee57f2ade8d166005e956d46a0c01f60b58299479e8a59a2e88f1a7ffd08b27d92fc2772b338959bd0a1c9cb95075c3cc17043c818345b29b76c0b8ed41c8c7259cc780c657cb9509daec1558453cfe061f54e08523a55d3223897559d51096b680802140800000000000000322e007c2af0c08867291dd732bfe4b24d1d5ae517a7f5903c369ac6b157d42eb6ca8c0d7b50fd533a56c814e7cf04db3012eebd53ec1b123d65ab1e462dc19182b690d56a88ad5a1f4d89f1749b005e88085505cc6d7de8eeee08def67bc1d1519d44b7a62dc07e491f328f786956d9200f00d78829e6af7c1a5835366201374b9487330920d4c57e2f7073292e173acc2424bb0d5e0e9448b4c02f9cfc99bc408110b6a3e9bc3799e4b178c2871069bc7d9ceba564378f02b2932c36f159478b5facd452b595a86d119216af9d860bd3997305320159a69a70fc62284141d23d2dc1e5394b271d99e5570450f1c55807e96c7cbe1b7c2e3e96f69fecf0f375e36e0d2acf145ce2d996c1909402744cce63664a75e480b197c345360321e830e5912d1d7bfe5a129a67fa98e6eda5268fa588047859daa11d087d0dbf0ccc7e120e3a5820cb4f5dc06748317e3f866518eb66e39dc8a68a7411b3403fc8eeab8283dee4d767e8e5842ed922e03ae5b3c9c494d5ebc61527ccd1222740fedd9e469ba6b30761cf387d654081c7e63182860e4548748058914a9cea01caf074fe6a78fafa2b45c516f9f20af9ac6773a400fa9661a872f6b55f0ed52a9be9e9c35502604b924f0eb628d6545da322e0713f9a5587e87e4b04fa495423b7c72093b764adfd1430a2e608b7af3d2bf80fef00e5b69abe386618274921ff57621bb99739de2e066ff17e95eba027f6a35170af3a69e93359a9643e155832d45c1aa9a8f71ad35504b99d3d0a1c11ae108664ea36f4dcded083aee17ac9efe7ee3fdf7b63c7c09bcef62caa88708510d45cea79d323083ddbfe7e5d3d9138f206a7af82ef1d26c85015c3e55a285a35d0052546493536b9061db27291a9292033753b7bddac63dac6f6271689240e43523c434a65e1d35299e386c953d0c92f21057e0b7883e049d20961e75069587eb3df6206496f76bbfd96635bb19837ba2ab193d79072ffb8829306b63697ff104a65031b8a38c24cca9ba23d5cdf753169a00fe2b2c3849f234a7029b657b3324c10d553e601aa97d17024f7bf5a99f96392f4a079a83daa27f4e3b512ee8536e764ce4dc36fb7810a9a502a693e55bd9f116202c5e906703e2c43d84448598b7af78aa60a205c152841e75e23436738ccaa6bbcef87e6a237d86d1a5e38e56c162cd6d61a4fb8b410b1643ad557a22348edfa82c23db11c9abdd8141fce263a66537512e93a930a4801ad862a902c7c1e00eb7c7466b1351318b7196c2a9016c55a05e104e124bdb568132f9397e31b10d04e5284bd029ea2f6a3ed11854e09b5871d6a725c21a9ef5d7e729a90a8206d5f61e6e42e47dda3e31b9134d47872a0dd7a576b665ec6ceaa5fd7d85ed7feede9ac9fc23e40241c0318077edda75b62eb271e28fb3705f7b4950c14b721a3a74a7a4e4de02cef5de76a1602b906016c0892ef37db51b0a1dd53f28b3d896f20abbad1ad0e0220960423267fc6e1779d1150fd584dd184bb43278d2d68ff21ac0daeef5408348cb80f4a9e0e606f6048bbaa517289451f084fffb63c5d904788cfc310b5495528a58f4650dafc4e4675b99d35ebab710ac6fefcee6c51a2835510fb6d2dbd8f97c3e53fb7a23c3f3c0283eb2271504581b9c1fa31e35c117e56a5d668a9c57df3b4e1129ca019a8b877fa4a22768dfbdd9d2154e17f4a7755b065090d88982471bfb242d89af5c6782693a6ab1b1be74dfa5655ac3b5ef4ace8dc595803cf4025bdf5c0e9fbe7a12a3a313311809591da08a2cc6cd8480dc960e1f79fa208440a0e589be5756c36d5830a51c4bdc39c2a85c0431bae3a7331b2ffdf23623693d343a7938a8a8a4dd4d523c6450a705bccbb38427f06f4f84a18adf303c0ddecf4ce2b6cdde4e09a4c31816195f0fe9f05fcdc0609f8a75ad2f23d5c24faaf346c13ec0512a5c29477ac561c878085d1a323f6bab08e2fb9ee57d7bb621ef21caf3609d74036c6dc1d7be0b6058d89dcb8d9aa4462fa0a740be66e3fdaa957f27c5a26dc586ac8c927ab2d7cf1b761798ea4191be8f4423cf1a6727d0c5f27a9969a753573afa584dea82678f3471ba36d726c396d68c671e579120f1a11cd50fa66b26fc2d6cb74ba07edbd5d3a288cf58ed1255381df02b2fb8983b7cf833433d1ab8fdef12651c3507e4b69fbc4b234678cca36761e8da434e5f036f204a1400da15277ef27ac140e2d574b89c0fd617da27e6ce862883bbe81c288834b9477d0d440c15dad505b363fcc1cfef8e2e3a96438809505844196acd0af751dedfced67f209c2ffa9c6da842c93ff4b5fd54a67df904f2f31b4236728c99582a667a8461d397770a657ffa7d514b0f076d7f35e9704a836e7882a2acf0a0ec2158ac7234953c3696abdc791c0b163ee76fbcc5adc18b6fa0f51f76f3d313a0d891f1deb69f6e44289b1aa43a768b8d13270959763a2c45129daeea493a5b0d7b36753b223dca9a8037368653400", 0x2000, &(0x7f0000000700)={&(0x7f0000000100)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x2b, 0x1, 0x300900, 0x0, 0x3, 0x4, 0xded, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfffffff9}]}}) 5m9.515911024s ago: executing program 0 (id=6317): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000002d3a000000000000405f00003a002e2d00000000200002000a00000000000000fc010000000000000000000000030000000000000d0001007564703a73"], 0x6c}}, 0x0) 5m9.125843364s ago: executing program 0 (id=6319): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x5) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000000010029bd7000ffdbdf25020004000000000004000b000800010001000000", @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) 5m8.571350918s ago: executing program 33 (id=6319): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x5) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000000010029bd7000ffdbdf25020004000000000004000b000800010001000000", @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) 4m40.503787528s ago: executing program 2 (id=6425): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) r1 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000100)={0x1000, r1, 'id1\x00'}) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0xffffffffffffffff, "7681960a576b73f5e89f9550e084e3495333787f38194169711a49df2dcb3dd3", 0x7, 0x7, 0x4, 0x7}, 0x3c) write$snddsp(r1, &(0x7f0000000200), 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) syz_io_uring_setup(0x4, &(0x7f00000003c0)={0x0, 0x9a88, 0x100, 0x3, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000ffffffff"]) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000003b80)={0x3, 0x1, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4048aecb, &(0x7f0000000080)) 4m39.635740982s ago: executing program 2 (id=6431): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x100) r1 = syz_io_uring_setup(0x1108, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(0xffffffffffffffff, 0x19, &(0x7f0000000000)={0x8, 0x8}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='\x00\xa8\xd8~3[q\x1f\x80\xc8\xcd\xd0\xa6\xd2G\xbb}\x1b\xd40\xb7\x1c^T\xb9\xeb\xda1\a]2F\x02\x8f\x0f\xb9K\x06S\xae\xac\x8d\xa89\xf9A\xe85\x93\xd8\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xb1\xb7\xf4\x8c\xa0\xf6\xee\xdf\xf0\x11Y\x81p\xa3b\x8dvHf\xea\xe9\xe5\xce\xcb\x05\xef\x82\x8cYXo\x0e\xa2\b\x1c\xeb;J\x81c\x91[\x8a\x81O\x93g\xd9\xaf\x97\x99\t\xe6?#\x85', r5) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r5) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r4, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x204, 0x24, 0x549, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xc38}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x81, 0xbd7, 0x1e52, 0x0, 0x0, 0x3, 0x3}}, {0xa, 0x2, [0x6, 0xfffe, 0x1000]}}, {{0x1c, 0x1, {0x5, 0x2, 0x7, 0x1, 0x2, 0x7, 0x0, 0x1}}, {0x6, 0x2, [0x8000]}}, {{0x1c, 0x1, {0x6, 0x5, 0x2, 0x5, 0x0, 0x6, 0x4, 0x5}}, {0xe, 0x2, [0x8000, 0x8, 0xf878, 0xb, 0x7f]}}, {{0x1c, 0x1, {0xf, 0x2, 0x5, 0xde1, 0x2, 0x267, 0x6, 0x7}}, {0x12, 0x2, [0x1, 0x5e83, 0xc, 0x8, 0x101, 0x1, 0x9]}}]}, @qdisc_kind_options=@q_choke={{0xa}, {0x110, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x32e5}, @TCA_CHOKE_STAB={0x104, 0x2, "a368625afc3945fa7e0d5d0144f5dcf3aeb03665b89aac1a208ba673249d611a165dc179aa26879552bb84e433b2899f9e13ccb70c732b7ea3b0972a7daf69e3455f0912f40978b6ed75dd80b2fe3813cd6c59ce405f0c37e4a20882b907333230dafc10016bf841c375f92daca2176cd8dda45662dadf6e5cf90bfa5fa5e6c18b36e03b3b5bef1ff841098492cc6ed41d7c3a02813b57f9d002b33b255ac74b515917441a8a76d13953e254682cfec296232a6d14f5a989465aa868774bb5709cce562c559516735c30b4b46b2158f9c5bfa6f07ab1b7082ab2ca10dd5734fff8c5b320395704320f54e32663984906c86808510d179a20fc9799699c4d0b6f"}]}}]}, 0x204}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) 4m38.483026318s ago: executing program 2 (id=6440): memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x92\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x3) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000002200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 4m37.925088735s ago: executing program 2 (id=6442): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}], 0x20) 4m36.73086176s ago: executing program 2 (id=6448): r0 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x2000c000) 4m36.527172596s ago: executing program 2 (id=6450): r0 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) msgsnd(0x0, &(0x7f0000000040)=ANY=[], 0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0xc2, &(0x7f00000002c0)={@local, @link_local, @val={@void, {0x8100, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b74000c00e63b9ba2ea4f115a67245b00", "584cbf2649a50f2dbc436fa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "9cfd56d3c86e55010000000000000000000000004137dfff2f8f00", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000000014000500ff02000000000000000000000000000114000400fe8000"/207, @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0xfffffffd}) (fail_nth: 1) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x10000}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000200)={0x800000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x1}, 0x58) 4m35.202744922s ago: executing program 34 (id=6450): r0 = socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) msgsnd(0x0, &(0x7f0000000040)=ANY=[], 0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0xc2, &(0x7f00000002c0)={@local, @link_local, @val={@void, {0x8100, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b74000c00e63b9ba2ea4f115a67245b00", "584cbf2649a50f2dbc436fa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "9cfd56d3c86e55010000000000000000000000004137dfff2f8f00", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000000014000500ff02000000000000000000000000000114000400fe8000"/207, @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0xfffffffd}) (fail_nth: 1) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x10000}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000200)={0x800000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x1}, 0x58) 1m42.983950134s ago: executing program 5 (id=7129): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) eventfd(0xff7ffff7) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000800)="7deb", 0x5dc}, {0x0}], 0x2, 0x0, 0x0, 0x10}, 0x24048801) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32, @ANYBLOB="0000000000000000b7080000200000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) 1m39.711675934s ago: executing program 5 (id=7132): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101303) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000d26a871dba07e83f34c6e27805b682"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb5) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000020601080000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000002000078005001400000000000c0001800800014080ffffff05"], 0x68}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x53, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3, 0xe, 0x7, 0x0, 0x8, 0x1, 0xe, 0x80, 0xe, 0x7, 0x4, 0x9, 0x0, 0x5, 0x3, 0x3, 0x7, 0x0, 0xdb, '\x00', 0x40, 0x6ea93ba1}) ioctl$KVM_RUN(r3, 0xae80, 0x2000000000000000) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x2) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) chroot(&(0x7f0000000780)='./file0\x00') getcwd(&(0x7f0000001a80)=""/102, 0x66) 1m39.102199302s ago: executing program 5 (id=7136): r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0xb7c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0x0, 0xfff3}, {0xa, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0xb4c, 0x2, [@TCA_BASIC_ACT={0x134, 0x3, [@m_ife={0x130, 0x1b, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_TYPE={0x6, 0x5, 0x8}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x88d}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7fffffff, 0xfffffff0, 0x8, 0x1, 0x1}}}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x2}]}]}, {0x9e, 0x6, "4bedf4ad4a34132db618a4be44a6fb275ce0b26fab31752a6dd447ababc5781b984d5603e4a3f6b0a07809797a691ec4f832c45594ab30d272e5c6a1a27eb484bb405a92ad170769dd39d4d0ad73cb25c11ffcf5c8fd517e0d57f144e55b848c2402b365db9161e0713c48f8af392c1a61cd107b14bec1b50dc27a7c48c6593ac1df3c4d3787354cd6b2755cdeb98d3444446b3e1988983ebd63"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0xa}}, @TCA_BASIC_POLICE={0x414, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3a1, 0x5, 0x6, 0x8000, 0x0, 0xfffffffd, 0x7, 0x81, 0x33, 0x9, 0x7f, 0x3, 0x3, 0xfff, 0x7fff, 0x1, 0xabe4, 0x0, 0xad, 0x8, 0xa6, 0x7ff, 0x9, 0x2, 0x4, 0x3, 0x10, 0x10, 0x8, 0x3, 0x5, 0x9, 0xef, 0x3ff, 0x937, 0x6, 0x6, 0x401, 0x0, 0x10000, 0x818, 0x8, 0x0, 0x9a22, 0x4, 0x1, 0x1ff, 0x9, 0x7, 0x2e, 0x4, 0x1, 0x3, 0x3, 0x8000, 0x401, 0x7, 0xf, 0x6, 0x3, 0xc, 0x8, 0x97, 0xfffffffb, 0x7, 0x5, 0x2, 0x2, 0x6, 0x401, 0x4, 0x1419, 0x1, 0x4ed8, 0x2ba4, 0x4, 0x7, 0x0, 0x4, 0xd, 0x2, 0x4, 0x3, 0x101, 0x10001, 0x3000000, 0xd618, 0x4, 0x5, 0x1, 0x400, 0xa, 0xfffffffd, 0x2, 0x6, 0x75ab50e7, 0x0, 0x1, 0x0, 0x80, 0xf59, 0x7, 0x3, 0xffff, 0x8a, 0x1, 0x99c, 0xfff, 0x7, 0x5, 0xb54, 0x5, 0x1, 0x3, 0x0, 0x10001, 0x0, 0x9, 0x3, 0xffffffff, 0x40000, 0x1, 0x100, 0x2, 0xe, 0x5, 0x2, 0x1, 0x9, 0x401, 0x5, 0xf, 0x91, 0x7f, 0x7, 0x5, 0x8, 0x1000, 0x8, 0x9, 0xab, 0x778, 0x0, 0x9, 0x3, 0xd57, 0x7, 0x7fffffff, 0x4, 0x8001, 0x1, 0x400, 0x0, 0x46, 0x0, 0x1, 0x6, 0x84d, 0x4, 0x9, 0x0, 0x4, 0x6ea, 0xc, 0xb5, 0x7, 0x2, 0x9825, 0x8, 0x5, 0x3, 0xc5f, 0x0, 0xfff, 0x8001, 0x6, 0x1, 0x9, 0xb, 0x5, 0x6, 0x2, 0x4, 0xffffaa00, 0x4, 0x7, 0x5, 0x6, 0x5, 0x3, 0x4, 0x3f, 0xe, 0xfff, 0x6, 0x80000001, 0x7ff, 0xfffffe00, 0x3, 0x5, 0x5, 0x2, 0x1, 0x401, 0x1000, 0x9, 0x7, 0x5, 0x8, 0x2, 0x80000000, 0x9, 0x8, 0x0, 0x8, 0xfffffffd, 0x0, 0x4, 0x1, 0xe, 0x0, 0x1, 0x1ff, 0xe, 0x4, 0x4, 0x3, 0x2, 0x10, 0xffff, 0x426, 0x8, 0x4, 0x8, 0x6, 0xfff, 0x7, 0x6, 0x7, 0x1, 0x2, 0xab50, 0xffff, 0x2, 0x0, 0x7, 0x7, 0xf69, 0x7b, 0x0, 0x4, 0x22, 0x8000, 0xf, 0x4, 0x4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}]}, @TCA_BASIC_POLICE={0x434, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa4c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x2, 0x5d742222, 0xfffffffc, 0x9, 0x9, 0x7, 0x10, 0x1, 0x8, 0xd84, 0x6, 0xa, 0x1, 0x1, 0x5, 0x7, 0x2f, 0x3, 0x71, 0x0, 0x6, 0x7, 0x0, 0xfffffffd, 0x2, 0x4, 0x1f47, 0xfd, 0x3, 0x2, 0x800, 0xe, 0x7, 0x7, 0x800, 0x9bc, 0x0, 0x9, 0xc7, 0xfff, 0x7, 0x3, 0x2, 0x9, 0x3, 0x5, 0x3, 0x1, 0x7, 0xb, 0x64b1, 0xffffb407, 0x5, 0x2, 0xab4, 0x3c7, 0x9fa6, 0x9, 0x8, 0x8, 0xffff, 0x400, 0x2, 0x7, 0xfb, 0x907, 0x0, 0xffffffff, 0x10, 0x8bf7, 0x2, 0x37, 0x8, 0x6, 0x8, 0x80, 0xa, 0x3, 0x5, 0x6425cfac, 0x3, 0x10000, 0xe, 0x3, 0x0, 0x8, 0xf, 0x1bc, 0x10001, 0x9ecc8a35, 0x5, 0x10000, 0x7, 0x9, 0x6, 0x8d3, 0x9, 0xfffffff9, 0x2, 0x3, 0x6, 0x5, 0x2c, 0x4, 0x8, 0x0, 0x9, 0x0, 0x2, 0x0, 0x3, 0x0, 0xfffeffff, 0xd, 0x9, 0xd, 0x1000, 0x7fffffff, 0x9, 0x2, 0x0, 0x7, 0x5c7, 0x1, 0x0, 0x4, 0x8, 0x2, 0x6, 0x3, 0x9, 0x1baeefc9, 0x3fe, 0xffffffff, 0x10001, 0x1ff, 0x6, 0x2800000, 0x80, 0xfff, 0x9, 0xc38, 0x9, 0x9, 0x2, 0xfff, 0x4, 0x9, 0x80000, 0xfffffffd, 0x8, 0x8000000, 0x75, 0x9c9, 0x1, 0x2, 0x44, 0x1, 0x81, 0x401, 0xfffffffd, 0x3d, 0x2, 0x9, 0x9, 0x8000, 0x200, 0x3, 0x40000000, 0x7, 0x0, 0x6, 0x52b, 0x7, 0xd, 0x2, 0xfffffffa, 0xf24, 0x7, 0x8, 0x1, 0x2, 0x7, 0x1, 0x9, 0x8, 0x6, 0x3, 0x80000001, 0x0, 0xf693, 0xae, 0x1, 0x49, 0x5, 0x6, 0x6, 0x8, 0x7fff, 0xa, 0x6, 0x5, 0x760, 0x200, 0xf, 0x9, 0x101, 0x5, 0x6, 0x3, 0x6, 0x7045, 0x10, 0x1, 0x9, 0x6, 0x5, 0x7, 0x16d, 0xfffffffb, 0x7ff, 0xffffffff, 0xf, 0x40, 0x7, 0x26, 0x0, 0x1ff, 0x2, 0xb, 0xba, 0x75ae0728, 0x9, 0x5, 0x7f, 0x4, 0x8, 0x9, 0x4, 0x48a, 0xf8, 0x9, 0x3, 0x888a, 0x32, 0x2, 0x5, 0x7, 0x7f, 0x3, 0xfffffff7, 0x0, 0x6, 0x3, 0x7fffffff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}]}, @TCA_BASIC_EMATCHES={0x1b8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1b4, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x3, 0x3, 0x5}, {0x1, 0x5, 0x7ff, 0x3}}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0xfffc, 0x2, 0x200}, {0x5, 0x9, 0x2, "4929522e03fc81cf1f"}}}, @TCF_EM_META={0x84, 0x3, 0x0, 0x0, {{0xfffa, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x16, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="bc789588", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="9cbef6", @TCF_META_TYPE_VAR='~!4']}, @TCA_EM_META_RVALUE={0x20, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="f47e7584", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="c5a97ed0", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xc, 0x8, 0x1}, {0x3, 0x4}}}, @TCA_EM_META_RVALUE={0x25, 0x3, [@TCF_META_TYPE_VAR="0d08acfbe73bd751d573", @TCF_META_TYPE_VAR="348b58", @TCF_META_TYPE_VAR="da265e2663", @TCF_META_TYPE_VAR="5d04", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="1887cfbaab"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x9, 0x1}, {0x7, 0x9}}}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x3, 0x3}, {0xb15, 0xfffffff7, 0x3, 0x96d2}}}, @TCF_EM_CONTAINER={0x78, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x5}, "2b39c9e195da99be8a9289fa465feaab43191e49e23a54d1cb688edcc014d11c9d0b2d4667ed97e545cc951c7d2c3355265c17982c2b4d80c60f8bfee9e94cd2b9b49cba8a48045b49a1cf81cf44ed0bfdd55cc0cd0bb7e7488ded7a895df30b3c7b0ec127f809d0f3"}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{}, {0x1, 0x5, 0x383f0ce033f1cb27, "c16c977c3b"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x9, 0x8, 0xa}, {0x3, 0x2, 0x5}}}, @TCF_EM_META={0x38, 0x2, 0x0, 0x0, {{0x6, 0x4, 0xbda9}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x24, 0x3, [@TCF_META_TYPE_VAR="577f7b36ea5a8887b473", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="fe9516617f2b", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x3]}]}}]}]}, @TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0xb7c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, 0x0, 0x4000) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x18, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x10000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xffff1000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0x80a0000, 0x1000, 0x9, 0x8, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000, 0x100}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r10, 0xc018ae85, &(0x7f00000000c0)={0x40000}) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="08221b0000009406e53f0b53743ff6070900be0083000000002bc83de831920530"], 0x0}, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socket$alg(0x26, 0x5, 0x0) 1m33.551688068s ago: executing program 5 (id=7147): syz_open_dev$vim2m(0x0, 0x0, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @local}, 0x1c) sendto$inet6(r1, &(0x7f0000000780)="0d0ad7", 0x3, 0x6d91fb6102d8d9cc, 0x0, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000}, &(0x7f0000000040), &(0x7f0000000080)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) syz_usb_disconnect(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4, 0x2}, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13057642795a32"], 0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000080)="44d074913123271600e7bba7b2a04d38b7c8879779ce5fa071b88030c6aabbb65af70759e596508295a3237187b64763a038df0c2d207e8e3514f8a0b2ffee7539e2", 0x42, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000ffdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="2000330040bc010008021100000108021100000011f5030f216b0800ac0146c0"], 0x3c}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be71}, 0x24008080) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="28000002938335605ab5714994ac5deaaaa6611d07f58368038553bab1525ae61c91b4be63deb8a0a4b2cae6816e69b5f4d937eaac3b43d5fb41fe6b8d3f15fb4fc87b4317ab96c241e8ced834b992041f6b8f8fb99786a433f5a534f1a3e2098228cf86aa13c7e2bdc01d1e913b55569618faa26c724106b5bda405321d703f0b341e442f00"/148, @ANYRES16=r5, @ANYBLOB="04002cbd7000fddbdf253e00000008000300", @ANYRES32=r7, @ANYBLOB="0c0099008d97713458000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 1m29.599516339s ago: executing program 5 (id=7153): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) sendmsg$inet_sctp(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="cec48d4c37ef574f38d15e0faef69db1b953a8b2b062f82e8f2cdea600dc85c646e0f41bcec1cb1b89e1d6788ab660dccd953ef9ab668ca64ae1a7b1b6b36f5c28f81966875f1b53c0b6980032d9279e71fd4901e1b0433ea1d254fb41", 0x5d}], 0x1, 0x0, 0x0, 0x40000}, 0x1) write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file0', [{0x20, 'hugetlb.1GB.rsvd.usage_in_bytes\x00'}], 0xa, "ea3a5c9f4d18135cc796331b418a9f00fb5d9073d5bd9fdbd71176898818f02a1ad9d15ab3b706e029bc9e8df395ca6a8415cc69e29913287e04a06efe331f1481d811cb2a23e03a10641ee781e75a6af546b0bb859902e09a079b7999b56384161b8072885ff4e40b209d96b6c69fd78fc3f7844e9bacc1d59dda1ffaced0293684d5fa4bc37deea1691135c031"}, 0xba) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x3ef7, 0x0, 0x2, 0xf4}, &(0x7f00000000c0)=0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x230}, 0x1, 0x0, 0x0, 0x1}, 0x4010) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000700", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1m28.908832793s ago: executing program 5 (id=7155): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000000600000083000000bf0000000000000055090100000000009500000000000000b7080000000000007b8af8ff000080fbb70800000b000010000000bfa10000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000184000000600"], 0x0, 0xe, 0x3b, &(0x7f0000000640)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xdfb9, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x1}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6fc6ad42f4b1b0e9692ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8051}, 0x4008095) r2 = syz_io_uring_setup(0x417e, &(0x7f0000000680)={0x0, 0xc394, 0x0, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3e, 0x4007, @fd, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r2, 0x847ba, 0x0, 0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)=""/75, 0x4b}, {&(0x7f0000001780)=""/105, 0x69}], 0x2}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000010902df0001000000f4ce15e8070103000100092100100601220700090581030000090300"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022070d000019a79700000000"], 0x0}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2d41, 0xd5) r8 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bind$netlink(r6, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x1000}, 0xc) read$FUSE(r8, 0x0, 0x0) write$FUSE_INIT(r8, &(0x7f0000000240)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}, 0x50) 1m13.622996097s ago: executing program 35 (id=7155): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000000600000083000000bf0000000000000055090100000000009500000000000000b7080000000000007b8af8ff000080fbb70800000b000010000000bfa10000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000184000000600"], 0x0, 0xe, 0x3b, &(0x7f0000000640)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xdfb9, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x1}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6fc6ad42f4b1b0e9692ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8051}, 0x4008095) r2 = syz_io_uring_setup(0x417e, &(0x7f0000000680)={0x0, 0xc394, 0x0, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3e, 0x4007, @fd, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r2, 0x847ba, 0x0, 0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)=""/75, 0x4b}, {&(0x7f0000001780)=""/105, 0x69}], 0x2}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000010902df0001000000f4ce15e8070103000100092100100601220700090581030000090300"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022070d000019a79700000000"], 0x0}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2d41, 0xd5) r8 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bind$netlink(r6, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfc, 0x1000}, 0xc) read$FUSE(r8, 0x0, 0x0) write$FUSE_INIT(r8, &(0x7f0000000240)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}, 0x50) 15.574403276s ago: executing program 6 (id=7386): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d004e24000006001c"], 0x2c}}, 0x0) syz_usb_connect(0x0, 0x49, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a52bfb0821048f79548601020301090237000100000000090400000002fe1700052406"], 0x0) 13.765261894s ago: executing program 6 (id=7393): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb, 0x13, r0, 0xb18df000) fanotify_init(0x200, 0x40000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x4d, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x7c81, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x13d040, 0x62) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, 0x0, 0x0) read$FUSE(r5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000009000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa000000000400"/180], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 12.388202445s ago: executing program 7 (id=7397): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x8f62, 0x26243) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000004, 0x11, r2, 0x100000000) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000300), 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) r3 = syz_io_uring_setup(0x116, &(0x7f0000000100)={0x0, 0xf5a, 0x80}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000ff03000000000000ff0f0000612000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x8, 0xd1, &(0x7f0000000600)=""/209, 0x41000, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x30}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x4c9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20001}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r8 = fcntl$getown(r0, 0x9) wait4(r8, 0x0, 0x40000000, &(0x7f0000000180)) io_uring_enter(r3, 0xf3, 0x80ffff, 0x59, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[], 0x78) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000240), 0x10) sendmsg$can_bcm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="2600000040fc20360123b322e8615f562488a1f7080000ffffff7f00000000b74476e0a57771928e002612095450e3432db854b5b6782b22ffdf817cebd09cd978d4dd87afbadee9bd7169e49c49afda757d4db1578b5024d99d22ea2f525f14694b3402b0b89f5ff75c013260a03a8d02010467f31d21ef78059973d8a075dd2fb5816a5d79773f36281d0034596280c7550e9011e32ea6ff2b2f5124cd5be230a2544d733f3bbdda051c7802eab7c9", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100000001000040380200000246edc82ce55b5f1b2de2bb15fb359e891ecedc8a19d9e2a6b06697f2f60a1a9eb36af20b85adb38ffbb7bcd880081ffe6a5a6f86fb13cee7f8529f2552182e"], 0x80}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100050005000700000000000800090000003f0014002000ff250100100000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) dup2(r1, r1) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) 10.771836527s ago: executing program 7 (id=7398): socket$nl_xfrm(0x10, 0x3, 0x6) open(&(0x7f0000000300)='.\x02\x00', 0x14927e, 0x44) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x16927e, 0x10) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902"], 0x0) socket$kcm(0x10, 0x2, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x67}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040091) socket$kcm(0x10, 0x3, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002211c0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 9.63538206s ago: executing program 6 (id=7401): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e71, 0x170e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0xc, 0xcf, {0xcf, 0x31, "a4c84f539a3c6f7c4fd91a4b12330bc5ad82563edb922cb7ac5c85ca56eb28dad46f7166b5bcfb52f155f4e88c58756e3b9c89dba88a39b7743f0385a962696c9d1ee49e89cbdda1da9ef435280968005ee91beb9cacd623b85c272b1f1d919eb41cfc153f79c58d53aa81635fc335be88252f1e272a776da06c1c717755594ebdef2f8a62d95e03bdde0de489cd895be668ad24453d73a9886bac435640adc239bd870bf307ecf07c5b695c2c9d0000b002207105ab29052e167adf8792a833d8c7398a9a2fa619c1ddf911f6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x5d312bbabf218fe1, 0x0) 8.659774936s ago: executing program 8 (id=7405): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000005d80)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x9}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000080)="7957d404736da65f9d132319c6a502980bd709", 0x13}, {&(0x7f00000005c0)="ada3468ff5b811c75a5cb675c4e3a6039748de9cec396af61311", 0x1a}], 0x2, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) sendmmsg$inet6(r0, &(0x7f0000019880)=[{{0x0, 0x0, &(0x7f0000019740)=[{&(0x7f0000019940)='i', 0x1}], 0x1}}], 0x1, 0x2604082c) (fail_nth: 3) 8.097329237s ago: executing program 8 (id=7406): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb, 0x13, r0, 0xb18df000) fanotify_init(0x200, 0x40000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x4d, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x7c81, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x13d040, 0x62) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, 0x0, 0x0) read$FUSE(r5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000009000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa000000000400"/180], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 7.647599006s ago: executing program 6 (id=7408): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008810) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$dri(0x0, 0x0, 0x381102) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0x1002, &(0x7f0000001880)=""/4098, 0x41100, 0x20, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfd}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004200)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001", @ANYRESHEX, @ANYRES32, @ANYRESOCT=r8], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x8000000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x191c) 7.469866697s ago: executing program 7 (id=7410): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x5, @sdr={0x50565559, 0x3}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r4, r3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x4, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r1, @ANYBLOB="2daede8f", @ANYBLOB="02000200a80006003c00128009000100626f6e64000000002c00028005001d105400000005000c0002000000080002001d65", @ANYRES32=r0, @ANYRES64=r2], 0x5c}}, 0x2404c010) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x0, {0x2, 0x28, 0x20, 0x0, 0xff, 0x0, 0x0, 0x7, 0x3000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 6.843686444s ago: executing program 4 (id=7412): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0000000000000000002", 0x11) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a00000000000002000100002000100000000200000000030005"], 0x60}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0xfffffffb) 6.759615231s ago: executing program 7 (id=7413): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x10}}, 0x4000010) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000002c0)={0xc, r4}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r3, 0x3b71, &(0x7f0000000040)={0x20, 0x2, 0x0, 0x8000, 0x10003}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1bbd3b3eb838c6ea}) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a000105fefdff04"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x40800) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r3], 0x14}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r6) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="040101000000000014000300766c"], 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newtfilter={0x60, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8, {}, {0x8}, {0x0, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0xc7e}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e20}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @local}]}}, @TCA_RATE={0x6, 0x5, {0xa, 0x3}}]}, 0x60}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 6.38164007s ago: executing program 4 (id=7414): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}]}}]}, 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000001000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[], 0x68}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0xe8}}, 0x8040) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) 5.456366893s ago: executing program 4 (id=7416): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008810) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$dri(0x0, 0x0, 0x381102) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0x1002, &(0x7f0000001880)=""/4098, 0x41100, 0x20, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfd}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004200)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001", @ANYRESHEX, @ANYRES32, @ANYRESOCT=r8], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x8000000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x80, 0x0, &(0x7f00000015c0)=[@request_death={0x400c630e, 0x1}, @enter_looper, @acquire, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@flat=@handle={0x73682a85, 0x1000, 0x1}, @fda={0x66646185, 0x5, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/98, 0x62, 0x0, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x400}, @register_looper, @acquire_done={0x40106309, 0x1}], 0x7, 0x0, &(0x7f0000000440)="553fc67ef4b1a1"}) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x191c) 4.921657019s ago: executing program 8 (id=7417): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000070900020073797a31000000000900010073797a30"], 0xc0}}, 0x0) 4.859622315s ago: executing program 1 (id=7418): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x3, &(0x7f0000000000)=0x6a3, 0x4) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)=""/62, 0x3e}, {&(0x7f0000000400)=""/139, 0x8b}, {&(0x7f0000000200)=""/5, 0x5}, {&(0x7f00000004c0)=""/220, 0xdc}, {&(0x7f00000005c0)=""/102, 0x66}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000700)=""/244, 0xf4}], 0x8, &(0x7f0000000880)=""/236, 0xec}, 0x101}, {{&(0x7f0000000980)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000a00)=""/135, 0x87}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000ac0)=""/54, 0x36}, {&(0x7f0000001bc0)=""/113, 0x71}, {&(0x7f0000000b00)=""/24, 0x18}, {&(0x7f0000001c40)=""/23, 0x17}, {&(0x7f0000001c80)=""/248, 0xf8}, {&(0x7f0000001d80)=""/108, 0x6c}], 0x8, &(0x7f0000001e80)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000002e80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002f00)=""/4, 0x4}], 0x1, &(0x7f0000002f80)=""/91, 0x5b}, 0x100}, {{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000003000)=""/33, 0x21}, {&(0x7f0000003040)=""/114, 0x72}, {&(0x7f00000030c0)=""/96, 0x60}], 0x3, &(0x7f0000003180)=""/60, 0x3c}, 0xdc38}, {{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f00000031c0)=""/33, 0x21}, {&(0x7f0000003200)=""/90, 0x5a}, {&(0x7f0000003280)=""/238, 0xee}], 0x3}, 0x7}, {{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f00000033c0)=""/116, 0x74}, {&(0x7f0000003440)=""/166, 0xa6}, {&(0x7f0000003500)=""/28, 0x1c}], 0x3}, 0x8000}, {{&(0x7f0000003580)=@tipc, 0x80, &(0x7f0000004600)=[{&(0x7f0000003600)=""/4096, 0x1000}], 0x1}, 0x31}, {{&(0x7f0000004640)=@ieee802154, 0x80, &(0x7f00000059c0)=[{&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/224, 0xe0}, {&(0x7f00000057c0)=""/147, 0x93}, {&(0x7f0000005880)=""/218, 0xda}, {&(0x7f0000005980)=""/44, 0x2c}], 0x5, &(0x7f0000005a40)=""/31, 0x1f}, 0x5}, {{&(0x7f0000005a80)=@ax25={{0x3, @default}, [@remote, @null, @netrom, @remote, @null, @netrom, @rose]}, 0x80, &(0x7f0000005b40)=[{&(0x7f0000005b00)=""/61, 0x3d}], 0x1}, 0x9836}], 0x9, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x20000000) socket$kcm(0x10, 0x2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x4}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000380)={r5, 0xe2}, &(0x7f00000003c0)=0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(0xffffffffffffffff, 0xc1007c00, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = getpgid(0x0) kcmp(r7, r6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 4.712948228s ago: executing program 6 (id=7419): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="005c9891be001bdbc79ef4832ac008000000000000005bc887658492a0a8b47a5b7ec73922bf5acbd0b8f63d3618907b0d52f0a7b9953a01a283c2fecef0"], 0x0}, 0x0) 4.432095s ago: executing program 8 (id=7420): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c02000019000100000000000008000000000000000000000000ffff00000000be14144416000000000000000000000000000000000000000200000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="ff00000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010500ff010000000000000000000000000001000004d2330000000a00000000000000000000000000000000000000013500000100"], 0x23c}}, 0x4000) 4.035611422s ago: executing program 8 (id=7421): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000400)={0x0, "aec84b158cf15bd26d0eea0473e7e8deb79fe5103dede9e1606090eb94e0da53a07f6cb2b177ad391d7f406df56a555d8677c1b1a866a5d874285f45b83eb245ee51966851a28f9ed2d0a64aff33a5926772ccfaa439ae68f2767eb79aa08b2c826a2498c395bccf90280de54bae76dfd2590624a99e78c5b55afd370cfed2b9a1f02fb8749b7a72224ebf7abfe8a9f73fc18a81bc807c7d9223dd8d5ae79da3e5f31752917410737a4095544e29d7338c91860d111bccd10780e07ef068c039516774e28d2eee957b758c5720834a671f5f06b0c1cffa55cd8fc367dd5b2f54c3f13a4944d1a14c95b32d2d3914c72666e95ac2d3710558c168e274528ea155"}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.empty_time\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6879ce3c39314ddc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000340)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000002740), 0x0, &(0x7f00000027c0)}, 0x10) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.251458352s ago: executing program 1 (id=7422): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000019c0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x4, @remote, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000280)="e9", 0x1}], 0x1}}], 0x1, 0x931766f6319eed44) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x3}, &(0x7f0000000200)=0x8) 2.879479887s ago: executing program 8 (id=7423): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x802, 0x20) syz_io_uring_setup(0x237, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$kcm(0xa, 0x2, 0x3a) add_key(0x0, 0x0, &(0x7f0000000040)="00000000f5ff", 0x6, 0xfffffffffffffffd) flistxattr(r1, &(0x7f00000002c0)=""/132, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) r3 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'lc\x00', 0xa, 0x0, 0x14}, 0x2c) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r4, 0xffffffffffffffff, 0xff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.799646939s ago: executing program 6 (id=7424): syz_open_dev$sg(0x0, 0x0, 0x8002) chdir(0x0) setitimer(0x2, &(0x7f0000000580)={{0x77359400}}, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101041, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000440)={r3, &(0x7f0000000c00), 0x0}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000000008000, 0x0, 0xd4}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d000000000001090224"], 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmmsg$inet6(r4, &(0x7f0000000400), 0x0, 0x24065c21) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty, 0xfff}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'dvmrp0\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x30}, 0x0, 0x238, 0x268, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@rt={{0x138}, {0xf, [0xd, 0x4], 0x0, 0x4, 0x6, [@empty, @private0, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @mcast2, @empty, @dev={0xfe, 0x80, '\x00', 0x2d}, @mcast2, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @loopback, @loopback, @mcast2], 0xa}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x200}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd8}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_disconn_req={{0x6, 0xe, 0x4}, {0x100, 0x400}}]}}, 0x11) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)={'raw\x00', 0x0, [0xfc, 0x9, 0xa66c, 0x3, 0x6]}, &(0x7f0000000200)=0x54) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x10, 0xffffffffffffffff, &(0x7f0000000000)=0x9700) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x80) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x84}}, 0x0) listen(0xffffffffffffffff, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 2.799113601s ago: executing program 1 (id=7425): socket$nl_xfrm(0x10, 0x3, 0x6) open(&(0x7f0000000300)='.\x02\x00', 0x14927e, 0x44) socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f00000001c0)='./file0\x00', 0x16927e, 0x10) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902"], 0x0) socket$kcm(0x10, 0x2, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x10, 0x3, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)=ANY=[@ANYBLOB="64000000100003040ffe00"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002211c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 2.181561861s ago: executing program 7 (id=7426): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r2, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x20) 2.108904633s ago: executing program 4 (id=7427): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) (async) close(r0) recvmmsg(r1, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1, &(0x7f0000000280)=""/5, 0x5}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1}, 0x4}], 0x2, 0x40002162, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000680)) 1.831921699s ago: executing program 4 (id=7428): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0000000000000000002", 0x11) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a00000000000002000100002000100000000200000000030005"], 0x60}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) (fail_nth: 13) 1.720608731s ago: executing program 7 (id=7429): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008810) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$dri(0x0, 0x0, 0x381102) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0x1002, &(0x7f0000001880)=""/4098, 0x41100, 0x20, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfd}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004200)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001", @ANYRESHEX, @ANYRES32, @ANYRESOCT=r8], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x8000000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x191c) 940.93391ms ago: executing program 4 (id=7430): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) writev(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f0000000080)="011db6ce2ce16db8754805", 0xb}, {&(0x7f0000001300)}], 0x2) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) sendmmsg(r1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0x27, 0xc0, 0xde, 0x20, 0x86a, 0x3, 0xf03f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x2, 0x2, 0x1, 0xf3, 0xbf, 0xf5, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socket$packet(0x11, 0x3, 0x300) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x52, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x20000000) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18", 0x11}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000900)='\\>', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520", 0x76}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x241}}], 0x4, 0x0) 740.036056ms ago: executing program 1 (id=7431): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000070000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000070900020073797a31000000000900010073797a30"], 0xc0}}, 0x0) 468.145227ms ago: executing program 1 (id=7432): r0 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x9, 0x2203) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@multicast1, @loopback, 0x0}, &(0x7f0000000100)=0xc) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x50, 0x24, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x6}, {0xffe1, 0xffff}, {0x8, 0xf}}, [@q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0xc}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x101}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1a}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000800}, 0x8011) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0xc1105511, &(0x7f0000000040)) 0s ago: executing program 1 (id=7433): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4e7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x8000, 0x2, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x0, 0x20}}}}}]}}]}}, 0x0) sysfs$1(0x7ffffffe, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0xffffffffffffff92, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x3}, 0x0}, 0x0) kernel console output (not intermixed with test programs): usb 5-1: SerialNumber: syz [ 1744.998695][ T8169] usb 2-1: Using ep0 maxpacket: 32 [ 1745.028461][ T8169] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1745.070368][ T8169] usb 2-1: config 0 has no interface number 0 [ 1745.081940][T30050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1745.107343][T30050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1745.120918][ T8169] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1745.157006][T22895] usbhid 5-1:1.0: can't add hid device: -71 [ 1745.163607][T22895] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1745.172453][ T8169] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1745.189317][T22895] usb 5-1: USB disconnect, device number 62 [ 1745.195497][ T8169] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1745.216581][ T8169] usb 2-1: Product: syz [ 1745.222215][ T8169] usb 2-1: Manufacturer: syz [ 1745.227262][ T8169] usb 2-1: SerialNumber: syz [ 1745.240274][ T8169] usb 2-1: config 0 descriptor?? [ 1745.261173][ T8169] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1745.279694][ T8169] em28xx 2-1:0.132: Video interface 132 found: [ 1745.296802][T26842] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1745.506733][T26842] usb 6-1: Using ep0 maxpacket: 32 [ 1745.523813][T26842] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1745.549390][T26842] usb 6-1: config 0 has no interface number 0 [ 1745.571474][T26842] usb 6-1: config 0 interface 2 has no altsetting 0 [ 1745.614543][T26842] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1745.640989][T26842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1745.662730][T26842] usb 6-1: Product: syz [ 1745.668427][ T8169] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1745.674790][T26842] usb 6-1: Manufacturer: syz [ 1745.694568][T26842] usb 6-1: SerialNumber: syz [ 1745.746374][T26842] usb 6-1: config 0 descriptor?? [ 1745.983217][T26842] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1746.016041][T26842] usb 6-1: invalid MIDI out EP 0 [ 1746.188624][ T8168] usb 7-1: USB disconnect, device number 20 [ 1746.412213][T26842] snd-usb-audio 6-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 1746.433263][T30077] netlink: 'syz.6.7046': attribute type 1 has an invalid length. [ 1746.476333][T26842] usb 6-1: USB disconnect, device number 41 [ 1746.549860][T25505] udevd[25505]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1746.585641][T30077] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1746.609634][ T8169] em28xx 2-1:0.132: failed to read eeprom (err=-110) [ 1746.620995][ T8169] em28xx 2-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 1746.762594][T30079] bond1: (slave ip6erspan0): making interface the new active one [ 1746.834259][T30079] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1746.887259][ T8169] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1746.905636][ T8169] em28xx 2-1:0.132: analog set to bulk mode. [ 1746.957949][ T8169] em28xx 2-1:0.132: Registering V4L2 extension [ 1747.836965][ T8168] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1748.011032][ T8168] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1748.084722][ T8169] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1748.102570][T26845] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1748.163437][ T8168] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1748.185671][T17630] usb 2-1: USB disconnect, device number 66 [ 1748.200697][ T8169] em28xx 2-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1748.209844][ T8168] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1748.227992][ T8169] em28xx 2-1:0.132: failed to trigger read from i2c address 0x42 (error=-19) [ 1748.228865][T17630] em28xx 2-1:0.132: Disconnecting em28xx [ 1748.250186][ T8168] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1748.263190][T30104] loop2: detected capacity change from 0 to 7 [ 1748.281800][ T5999] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 1748.295713][ T8168] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1748.307995][ T5999] loop2: p1 start 811953257 is beyond EOD, truncated [ 1748.344929][ T5999] loop2: p2 start 1650421353 is beyond EOD, truncated [ 1748.364072][ T8168] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1748.382338][ T5999] loop2: p3 start 3184882576 is beyond EOD, truncated [ 1748.393228][T26845] usb 6-1: config 0 has no interfaces? [ 1748.408382][ T8168] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1748.419867][ T5999] loop2: p4 start 360999626 is beyond EOD, truncated [ 1748.435746][T26845] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1748.464630][T26845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.474708][ T5999] loop2: p5 start 3884050206 is beyond EOD, truncated [ 1748.482135][ T8168] usb 7-1: Product: syz [ 1748.506409][ T8168] usb 7-1: Manufacturer: syz [ 1748.519884][T26845] usb 6-1: Product: syz [ 1748.525991][ T5999] loop2: p6 start 537650420 is beyond EOD, truncated [ 1748.544712][ T8168] cdc_wdm 7-1:1.0: skipping garbage [ 1748.552625][T26845] usb 6-1: Manufacturer: syz [ 1748.561209][ T5999] loop2: p7 start 3276536533 is beyond EOD, truncated [ 1748.577953][T26845] usb 6-1: SerialNumber: syz [ 1748.584971][ T8168] cdc_wdm 7-1:1.0: skipping garbage [ 1748.601647][T30104] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 1748.607899][T30104] loop2: p1 start 811953257 is beyond EOD, truncated [ 1748.630654][ T8168] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1748.645760][T26845] usb 6-1: config 0 descriptor?? [ 1748.655506][T30104] loop2: p2 start 1650421353 is beyond EOD, truncated [ 1748.683087][ T8168] cdc_wdm 7-1:1.0: Unknown control protocol [ 1748.714348][T30104] loop2: p3 start 3184882576 is beyond EOD, truncated [ 1748.764539][ T8169] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1748.784179][ T8169] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1748.801921][T30104] loop2: p4 start 360999626 is beyond EOD, truncated [ 1748.823824][T30104] loop2: p5 start 3884050206 is beyond EOD, truncated [ 1748.840670][T30104] loop2: p6 start 537650420 is beyond EOD, truncated [ 1748.885574][ T8169] em28xx 2-1:0.132: No AC97 audio processor [ 1748.895352][T30104] loop2: p7 start 3276536533 is beyond EOD, truncated [ 1748.946105][ T8169] usb 2-1: Decoder not found [ 1748.958510][ T8168] usb 7-1: USB disconnect, device number 21 [ 1749.003752][ T8169] em28xx 2-1:0.132: failed to create media graph [ 1749.035822][ T8169] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1749.084956][ T8169] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1749.125825][T17630] em28xx 2-1:0.132: Closing input extension [ 1749.185740][T17630] em28xx 2-1:0.132: Freeing device [ 1749.765500][T30101] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1749.843045][T30101] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1749.872664][T30101] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1749.880107][T30101] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1749.910069][T30101] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1749.922359][T30101] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1749.944118][T30101] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1749.953924][T30101] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1749.973116][T30101] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1749.981930][T30101] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1750.273665][ T8168] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1750.520777][ T8168] usb 7-1: Using ep0 maxpacket: 32 [ 1750.533488][ T8168] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1750.547984][ T8168] usb 7-1: config 8 has an invalid interface number: 143 but max is 3 [ 1750.575042][ T8168] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1750.604856][T30129] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7060'. [ 1750.650515][ T8168] usb 7-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 1750.682447][ T8168] usb 7-1: config 8 has no interface number 0 [ 1750.731954][ T8168] usb 7-1: config 8 interface 143 altsetting 193 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1750.768075][ T8168] usb 7-1: config 8 interface 143 altsetting 193 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1750.830509][ T8168] usb 7-1: config 8 interface 143 altsetting 193 bulk endpoint 0x9 has invalid maxpacket 0 [ 1750.880222][ T8168] usb 7-1: config 8 interface 143 altsetting 193 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1750.903777][T30134] FAULT_INJECTION: forcing a failure. [ 1750.903777][T30134] name failslab, interval 1, probability 0, space 0, times 0 [ 1750.946929][T30134] CPU: 1 UID: 0 PID: 30134 Comm: syz.1.7063 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1750.946961][T30134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1750.946975][T30134] Call Trace: [ 1750.946984][T30134] [ 1750.946994][T30134] dump_stack_lvl+0x189/0x250 [ 1750.947024][T30134] ? __pfx____ratelimit+0x10/0x10 [ 1750.947056][T30134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1750.947081][T30134] ? __pfx__printk+0x10/0x10 [ 1750.947106][T30134] ? __pfx___might_resched+0x10/0x10 [ 1750.947141][T30134] should_fail_ex+0x414/0x560 [ 1750.947168][T30134] should_failslab+0xa8/0x100 [ 1750.947190][T30134] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1750.947210][T30134] ? __alloc_skb+0x112/0x2d0 [ 1750.947232][T30134] __alloc_skb+0x112/0x2d0 [ 1750.947252][T30134] netlink_sendmsg+0x5c6/0xb30 [ 1750.947279][T30134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1750.947301][T30134] ? aa_sock_msg_perm+0x94/0x160 [ 1750.947326][T30134] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1750.947340][T30134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1750.947366][T30134] __sock_sendmsg+0x219/0x270 [ 1750.947389][T30134] ____sys_sendmsg+0x505/0x830 [ 1750.947422][T30134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1750.947457][T30134] ? import_iovec+0x74/0xa0 [ 1750.947486][T30134] ___sys_sendmsg+0x21f/0x2a0 [ 1750.947508][T30134] ? __pfx____sys_sendmsg+0x10/0x10 [ 1750.947554][T30134] ? __fget_files+0x2a/0x420 [ 1750.947573][T30134] ? __fget_files+0x3a0/0x420 [ 1750.947601][T30134] __x64_sys_sendmsg+0x19b/0x260 [ 1750.947623][T30134] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1750.947650][T30134] ? __pfx_ksys_write+0x10/0x10 [ 1750.947666][T30134] ? rcu_is_watching+0x15/0xb0 [ 1750.947687][T30134] ? do_syscall_64+0xbe/0x3b0 [ 1750.947705][T30134] do_syscall_64+0xfa/0x3b0 [ 1750.947719][T30134] ? lockdep_hardirqs_on+0x9c/0x150 [ 1750.947742][T30134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1750.947757][T30134] ? clear_bhb_loop+0x60/0xb0 [ 1750.947774][T30134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1750.947789][T30134] RIP: 0033:0x7fd60278e929 [ 1750.947803][T30134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1750.947817][T30134] RSP: 002b:00007fd6035aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1750.947833][T30134] RAX: ffffffffffffffda RBX: 00007fd6029b5fa0 RCX: 00007fd60278e929 [ 1750.947845][T30134] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 1750.947854][T30134] RBP: 00007fd6035aa090 R08: 0000000000000000 R09: 0000000000000000 [ 1750.947864][T30134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1750.947873][T30134] R13: 0000000000000000 R14: 00007fd6029b5fa0 R15: 00007fd602adfa28 [ 1750.947897][T30134] [ 1750.956970][ T8168] usb 7-1: config 8 interface 143 has no altsetting 0 [ 1750.970652][ T5854] Bluetooth: hci5: command 0x0406 tx timeout [ 1751.476216][T22895] usb 6-1: USB disconnect, device number 42 [ 1751.505847][ T8168] usb 7-1: New USB device found, idVendor=1608, idProduct=021d, bcdDevice= 8.a4 [ 1751.515257][ T8168] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.536735][T26840] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 1751.625743][ T8168] usb 7-1: Product: syz [ 1751.640224][ T8168] usb 7-1: Manufacturer: syz [ 1751.644899][ T8168] usb 7-1: SerialNumber: syz [ 1751.690086][T26840] usb 5-1: config 4 has an invalid interface number: 156 but max is 0 [ 1751.699979][T26840] usb 5-1: config 4 has no interface number 0 [ 1751.740957][T26840] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 1751.763500][T26840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.775348][T26840] usb 5-1: Product: syz [ 1751.780997][T26840] usb 5-1: Manufacturer: syz [ 1751.797999][T26840] usb 5-1: SerialNumber: syz [ 1751.845999][T26840] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 1751.916827][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 1751.923319][T20733] Bluetooth: hci0: command 0x0406 tx timeout [ 1751.925032][T26840] usb 5-1: setting power ON [ 1751.946093][ T8168] io_ti 7-1:8.143: required endpoints missing [ 1752.003338][ T5854] Bluetooth: hci3: command 0x0406 tx timeout [ 1752.012766][T20733] Bluetooth: hci2: command 0x0406 tx timeout [ 1752.092115][ T8168] usb 7-1: USB disconnect, device number 22 [ 1752.112987][T30133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1752.156419][T26840] dvb-usb: bulk message failed: -22 (2/0) [ 1752.338364][T30133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1752.358706][T26840] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1752.468887][T30133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1752.479263][T26840] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19) [ 1752.498318][T26840] dvb_usb_cxusb 5-1:4.156: probe with driver dvb_usb_cxusb failed with error -22 [ 1752.525407][T30133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1753.037362][T20733] Bluetooth: hci5: command 0x0406 tx timeout [ 1753.996895][T20733] Bluetooth: hci1: command 0x0406 tx timeout [ 1754.003124][ T5854] Bluetooth: hci0: command 0x0406 tx timeout [ 1754.083172][ T5854] Bluetooth: hci3: command 0x0406 tx timeout [ 1754.089487][T20733] Bluetooth: hci2: command 0x0406 tx timeout [ 1754.145407][T26840] usb 5-1: USB disconnect, device number 63 [ 1754.383153][T30169] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7072'. [ 1755.292837][T30179] netlink: 'syz.6.7075': attribute type 12 has an invalid length. [ 1756.035228][T26842] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1756.188067][T26842] usb 6-1: Using ep0 maxpacket: 32 [ 1756.230973][T26842] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1756.296881][T26842] usb 6-1: config 0 has no interface number 0 [ 1756.335396][T26842] usb 6-1: config 0 interface 2 has no altsetting 0 [ 1756.455293][T26842] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1756.464507][T26842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1756.473196][T26842] usb 6-1: Product: syz [ 1756.480290][T26842] usb 6-1: Manufacturer: syz [ 1756.485394][T26842] usb 6-1: SerialNumber: syz [ 1756.517448][T26842] usb 6-1: config 0 descriptor?? [ 1756.868750][T26842] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1756.947269][T26842] usb 6-1: invalid MIDI out EP 0 [ 1757.456783][T26840] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1757.592395][T26842] snd-usb-audio 6-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 1757.637776][T26840] usb 7-1: Using ep0 maxpacket: 32 [ 1757.678011][T26842] usb 6-1: USB disconnect, device number 43 [ 1757.686242][T10671] udevd[10671]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1757.732461][T26840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1757.888021][T26840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1757.970766][T26840] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 1758.034004][T26840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1758.081764][T26840] usb 7-1: config 0 descriptor?? [ 1758.523106][T30193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1758.552109][T30193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1758.676811][T26840] usbhid 7-1:0.0: can't add hid device: -71 [ 1758.682946][T26840] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1758.722245][T30220] netlink: 52 bytes leftover after parsing attributes in process `syz.7.7086'. [ 1758.743060][T26840] usb 7-1: USB disconnect, device number 23 [ 1759.141678][T30237] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7092'. [ 1759.407284][T26824] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1759.806828][T26824] usb 6-1: Using ep0 maxpacket: 32 [ 1759.917833][T26824] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1759.992160][T26824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1760.347155][T26824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1760.363308][T26824] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1760.397794][T26824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1760.412285][T26824] usb 6-1: config 0 descriptor?? [ 1760.419109][T30225] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1760.435258][T26824] hub 6-1:0.0: USB hub found [ 1760.643577][T26824] hub 6-1:0.0: 11 ports detected [ 1760.651357][T26824] hub 6-1:0.0: insufficient power available to use all downstream ports [ 1760.696765][T17630] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1760.756258][ T8168] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 1760.888929][ T8168] usb 2-1: device descriptor read/64, error -71 [ 1760.896917][T17630] usb 5-1: device descriptor read/64, error -71 [ 1761.146822][T17630] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1761.166860][ T8168] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 1761.326803][T17630] usb 5-1: device descriptor read/64, error -71 [ 1761.326964][ T8168] usb 2-1: device descriptor read/64, error -71 [ 1761.477109][T17630] usb usb5-port1: attempt power cycle [ 1761.477168][ T8168] usb usb2-port1: attempt power cycle [ 1761.696401][T26824] hub 6-1:0.0: hub_hub_status failed (err = -32) [ 1761.704060][T26824] hub 6-1:0.0: config failed, can't get hub status (err -32) [ 1761.735765][T26824] usbhid 6-1:0.0: can't add hid device: -32 [ 1761.752013][T26824] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 1761.826839][T17630] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1761.846775][ T8168] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 1761.981988][T17630] usb 5-1: device descriptor read/8, error -71 [ 1761.997741][ T8168] usb 2-1: device descriptor read/8, error -71 [ 1762.276960][ T8168] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 1762.280904][T17630] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1762.301061][ T8168] usb 2-1: device descriptor read/8, error -71 [ 1762.325497][T17630] usb 5-1: device descriptor read/8, error -71 [ 1762.407347][ T8168] usb usb2-port1: unable to enumerate USB device [ 1762.438188][T17630] usb usb5-port1: unable to enumerate USB device [ 1762.746284][T30261] fuse: Unknown parameter 'group_idO00000000000000000000' [ 1762.774312][T30262] QAT: Invalid ioctl 21531 [ 1763.210561][T30268] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7102'. [ 1763.337129][ T8168] usb 6-1: USB disconnect, device number 44 [ 1763.396985][T17630] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1763.559028][T17630] usb 7-1: config 0 has no interfaces? [ 1763.577743][T17630] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1763.647789][T17630] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1763.656222][T17630] usb 7-1: Product: syz [ 1763.665788][T17630] usb 7-1: Manufacturer: syz [ 1763.670752][T26837] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1763.679338][T17630] usb 7-1: SerialNumber: syz [ 1763.902157][T17630] usb 7-1: config 0 descriptor?? [ 1764.001932][T26837] usb 6-1: Using ep0 maxpacket: 32 [ 1764.053044][T26837] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 1764.062426][T26837] usb 6-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 1764.081049][T26837] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1764.092096][T26837] usb 6-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 1764.104391][T26837] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1764.114259][T26837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1764.605925][T20733] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1764.623184][T26824] usb 7-1: USB disconnect, device number 24 [ 1764.667827][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1764.667846][ T30] audit: type=1326 audit(1751668557.668:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30263 comm="syz.6.7100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280af8e929 code=0x7ffc0000 [ 1764.714052][ T30] audit: type=1326 audit(1751668557.668:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30263 comm="syz.6.7100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280af8e929 code=0x7ffc0000 [ 1764.746722][ T30] audit: type=1326 audit(1751668557.668:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30263 comm="syz.6.7100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f280af8e929 code=0x7ffc0000 [ 1764.783244][T30296] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1764.856922][ T30] audit: type=1326 audit(1751668557.668:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30263 comm="syz.6.7100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280af8e929 code=0x7ffc0000 [ 1765.078062][ T30] audit: type=1326 audit(1751668557.668:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30263 comm="syz.6.7100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f280af8d58a code=0x7ffc0000 [ 1765.209666][ T30] audit: type=1326 audit(1751668557.668:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30263 comm="syz.6.7100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f280afc11e5 code=0x7ffc0000 [ 1765.651787][ T30] audit: type=1326 audit(1751668557.868:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30263 comm="syz.6.7100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280af8e929 code=0x7ffc0000 [ 1765.765595][ T30] audit: type=1326 audit(1751668557.878:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30263 comm="syz.6.7100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f280af8e929 code=0x7ffc0000 [ 1765.873162][ T30] audit: type=1326 audit(1751668557.878:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30263 comm="syz.6.7100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280af8e929 code=0x7ffc0000 [ 1766.227908][ T30] audit: type=1326 audit(1751668557.878:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30263 comm="syz.6.7100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f280af8e929 code=0x7ffc0000 [ 1767.948953][ T8168] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1768.042757][T30273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1768.106888][ T8168] usb 7-1: device descriptor read/64, error -71 [ 1768.131987][T26845] usb 6-1: USB disconnect, device number 45 [ 1768.171316][T26636] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1768.283987][T26636] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1768.366997][ T8168] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1768.373445][T26636] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1768.596801][ T8168] usb 7-1: device descriptor read/64, error -71 [ 1768.652052][T26636] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1768.707464][ T8168] usb usb7-port1: attempt power cycle [ 1768.921095][T30322] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7116'. [ 1769.065114][ T8168] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1769.147100][ T8168] usb 7-1: device descriptor read/8, error -71 [ 1769.187083][T30327] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7117'. [ 1769.306243][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1769.323233][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1769.333344][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1769.342069][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1769.350257][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1769.387598][ T8168] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1769.425904][ T8168] usb 7-1: device descriptor read/8, error -71 [ 1769.537313][ T8168] usb usb7-port1: unable to enumerate USB device [ 1769.660338][T30340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7118'. [ 1769.677995][T30340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7118'. [ 1771.205952][T26636] bond0 (unregistering): Released all slaves [ 1771.225903][T26636] bond1 (unregistering): Released all slaves [ 1771.438469][T20733] Bluetooth: hci4: command tx timeout [ 1771.464615][T26636] tipc: Disabling bearer [ 1771.470513][T26636] tipc: Left network mode [ 1771.620949][T30363] FAULT_INJECTION: forcing a failure. [ 1771.620949][T30363] name failslab, interval 1, probability 0, space 0, times 0 [ 1771.645061][T30363] CPU: 0 UID: 0 PID: 30363 Comm: syz.4.7122 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1771.645092][T30363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1771.645105][T30363] Call Trace: [ 1771.645114][T30363] [ 1771.645123][T30363] dump_stack_lvl+0x189/0x250 [ 1771.645156][T30363] ? __pfx____ratelimit+0x10/0x10 [ 1771.645190][T30363] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1771.645215][T30363] ? __pfx__printk+0x10/0x10 [ 1771.645251][T30363] ? ref_tracker_alloc+0x318/0x460 [ 1771.645274][T30363] should_fail_ex+0x414/0x560 [ 1771.645310][T30363] should_failslab+0xa8/0x100 [ 1771.645340][T30363] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1771.645366][T30363] ? skb_clone+0x212/0x3a0 [ 1771.645400][T30363] skb_clone+0x212/0x3a0 [ 1771.645433][T30363] __netlink_deliver_tap+0x404/0x850 [ 1771.645474][T30363] ? netlink_deliver_tap+0x2e/0x1b0 [ 1771.645502][T30363] netlink_deliver_tap+0x19c/0x1b0 [ 1771.645537][T30363] netlink_unicast+0x72f/0x8d0 [ 1771.645573][T30363] netlink_sendmsg+0x805/0xb30 [ 1771.645609][T30363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1771.645639][T30363] ? aa_sock_msg_perm+0x94/0x160 [ 1771.645673][T30363] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1771.645693][T30363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1771.645720][T30363] __sock_sendmsg+0x219/0x270 [ 1771.645745][T30363] ____sys_sendmsg+0x505/0x830 [ 1771.645781][T30363] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1771.645819][T30363] ? import_iovec+0x74/0xa0 [ 1771.645849][T30363] ___sys_sendmsg+0x21f/0x2a0 [ 1771.645880][T30363] ? __pfx____sys_sendmsg+0x10/0x10 [ 1771.645948][T30363] ? __fget_files+0x2a/0x420 [ 1771.645976][T30363] ? __fget_files+0x3a0/0x420 [ 1771.646015][T30363] __x64_sys_sendmsg+0x19b/0x260 [ 1771.646047][T30363] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1771.646086][T30363] ? __pfx_ksys_write+0x10/0x10 [ 1771.646109][T30363] ? rcu_is_watching+0x15/0xb0 [ 1771.646139][T30363] ? do_syscall_64+0xbe/0x3b0 [ 1771.646165][T30363] do_syscall_64+0xfa/0x3b0 [ 1771.646184][T30363] ? lockdep_hardirqs_on+0x9c/0x150 [ 1771.646216][T30363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1771.646238][T30363] ? clear_bhb_loop+0x60/0xb0 [ 1771.646263][T30363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1771.646283][T30363] RIP: 0033:0x7f4a5738e929 [ 1771.646302][T30363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1771.646321][T30363] RSP: 002b:00007f4a581c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1771.646344][T30363] RAX: ffffffffffffffda RBX: 00007f4a575b5fa0 RCX: 00007f4a5738e929 [ 1771.646359][T30363] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 1771.646374][T30363] RBP: 00007f4a581c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1771.646387][T30363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1771.646401][T30363] R13: 0000000000000000 R14: 00007f4a575b5fa0 R15: 00007f4a576dfa28 [ 1771.646434][T30363] [ 1771.934070][ C0] vkms_vblank_simulate: vblank timer overrun [ 1772.261146][T30371] PKCS7: Unknown OID: [5] (bad) [ 1772.338303][T30371] PKCS7: Only support pkcs7_signedData type [ 1772.478406][T30370] netlink: 'syz.7.7123': attribute type 1 has an invalid length. [ 1772.744487][T30370] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1772.816430][T30375] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1772.838554][T30375] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1772.889634][T30375] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1772.922507][T26842] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1773.102694][T26842] usb 5-1: config 0 has no interfaces? [ 1773.122354][T30378] gretap1: entered promiscuous mode [ 1773.129770][T26842] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1773.143545][T26842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.161501][T26842] usb 5-1: Product: syz [ 1773.203112][T26842] usb 5-1: Manufacturer: syz [ 1773.218461][T30378] bond2: (slave gretap1): making interface the new active one [ 1773.246740][T26842] usb 5-1: SerialNumber: syz [ 1773.278260][T30378] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1773.328431][T26842] usb 5-1: config 0 descriptor?? [ 1773.405987][T30382] bond2: (slave vlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 1773.558847][T20733] Bluetooth: hci4: command tx timeout [ 1774.131733][T30396] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7126'. [ 1774.385820][T30335] chnl_net:caif_netlink_parms(): no params data found [ 1774.605434][T26636] hsr_slave_0: left promiscuous mode [ 1774.625286][T30410] netlink: 52 bytes leftover after parsing attributes in process `syz.7.7128'. [ 1774.681742][T26636] hsr_slave_1: left promiscuous mode [ 1774.752978][T26842] usb 5-1: USB disconnect, device number 68 [ 1774.816529][T26636] veth1_macvtap: left promiscuous mode [ 1774.849141][T26636] veth0_macvtap: left promiscuous mode [ 1774.854920][T26636] veth1_vlan: left promiscuous mode [ 1774.881960][T26636] veth0_vlan: left promiscuous mode [ 1774.946879][T17630] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 1775.005911][T30415] netlink: 'syz.4.7130': attribute type 1 has an invalid length. [ 1775.240945][T17630] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1775.258176][T17630] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1775.283315][T17630] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1775.312201][T17630] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.333701][T17630] usb 6-1: config 0 descriptor?? [ 1775.606784][T20733] Bluetooth: hci4: command tx timeout [ 1775.929024][T17630] savu 0003:1E7D:2D5A.004B: global environment stack underflow [ 1775.956462][T17630] savu 0003:1E7D:2D5A.004B: item 0 4 1 11 parsing failed [ 1775.987999][T17630] savu 0003:1E7D:2D5A.004B: parse failed [ 1775.994652][T17630] savu 0003:1E7D:2D5A.004B: probe with driver savu failed with error -22 [ 1777.687559][T20733] Bluetooth: hci4: command tx timeout [ 1777.726154][ T8169] usb 6-1: USB disconnect, device number 46 [ 1778.035674][T30415] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1778.480099][T30439] xt_CT: No such helper "snmp" [ 1778.634866][T30335] bridge0: port 1(bridge_slave_0) entered blocking state [ 1778.642834][T30335] bridge0: port 1(bridge_slave_0) entered disabled state [ 1778.650633][T30335] bridge_slave_0: entered allmulticast mode [ 1778.659676][T30335] bridge_slave_0: entered promiscuous mode [ 1778.674238][T26636] IPVS: stop unused estimator thread 0... [ 1778.682683][T30335] bridge0: port 2(bridge_slave_1) entered blocking state [ 1778.694536][T30335] bridge0: port 2(bridge_slave_1) entered disabled state [ 1778.702400][T30335] bridge_slave_1: entered allmulticast mode [ 1778.712839][T30335] bridge_slave_1: entered promiscuous mode [ 1778.727153][T26842] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1778.854625][T30335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1778.867437][ T8169] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 1778.878712][T30335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1778.898279][T26842] usb 6-1: Using ep0 maxpacket: 16 [ 1778.918330][T26842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1778.936695][T26842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1778.957455][T26842] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1778.976247][T26842] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1778.986253][T26842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.002653][T30335] team0: Port device team_slave_0 added [ 1779.017611][T26842] usb 6-1: config 0 descriptor?? [ 1779.053359][ T8169] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1779.074642][ T8169] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1779.092106][ T8169] usb 5-1: Product: syz [ 1779.096529][ T8169] usb 5-1: Manufacturer: syz [ 1779.112608][ T8169] usb 5-1: SerialNumber: syz [ 1779.134568][ T8169] usb 5-1: config 0 descriptor?? [ 1779.239693][T30335] team0: Port device team_slave_1 added [ 1779.383846][T30335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1779.396548][T30335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1779.454986][T30335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1779.499136][T30335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1779.521915][T30335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1779.554357][T30335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1779.586827][ T8169] airspy 5-1:0.0: Board ID: 00 [ 1779.591692][ T8169] airspy 5-1:0.0: Firmware version: [ 1779.914484][T30467] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1780.152515][T30335] hsr_slave_0: entered promiscuous mode [ 1780.206476][T30335] hsr_slave_1: entered promiscuous mode [ 1780.227719][T30335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1780.246778][T30335] Cannot create hsr debugfs directory [ 1780.619590][T30476] loop2: detected capacity change from 0 to 7 [ 1780.630615][ T8169] airspy 5-1:0.0: usb_control_msg() failed -32 request 10 [ 1780.630885][T30476] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 1780.651194][T30476] loop2: p1 start 811953257 is beyond EOD, truncated [ 1780.658157][T30476] loop2: p2 start 1650421353 is beyond EOD, truncated [ 1780.665281][T30476] loop2: p3 start 3184882576 is beyond EOD, truncated [ 1780.673827][T30476] loop2: p4 start 360999626 is beyond EOD, truncated [ 1780.684357][T30476] loop2: p5 start 3884050206 is beyond EOD, truncated [ 1780.691772][T30476] loop2: p6 start 537650420 is beyond EOD, truncated [ 1780.699526][T30476] loop2: p7 start 3276536533 is beyond EOD, truncated [ 1780.702944][ T8169] airspy 5-1:0.0: Registered as swradio24 [ 1780.796201][ T8169] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1781.070881][T30482] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7140'. [ 1781.668270][T26824] usb 5-1: USB disconnect, device number 69 [ 1782.052916][T30494] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7143'. [ 1783.936880][T26842] usbhid 6-1:0.0: can't add hid device: -71 [ 1783.944356][T26842] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1784.039475][T26842] usb 6-1: USB disconnect, device number 47 [ 1784.522828][T26842] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1784.530953][T26845] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1784.556037][T30335] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1784.609150][T30335] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1784.655764][T30335] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1784.729987][T30335] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1784.730156][T26845] usb 5-1: Using ep0 maxpacket: 32 [ 1784.767264][T26842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1784.779169][T30532] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7149'. [ 1784.814270][T26845] usb 5-1: config 0 has an invalid interface number: 53 but max is 0 [ 1784.822663][T26842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1784.837016][T26845] usb 5-1: config 0 has no interface number 0 [ 1784.843201][T26845] usb 5-1: config 0 interface 53 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 16 [ 1784.873772][T26842] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1784.906794][T26842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1784.916563][T26845] usb 5-1: config 0 interface 53 has no altsetting 0 [ 1784.948864][T26845] usb 5-1: New USB device found, idVendor=07c0, idProduct=158a, bcdDevice=dd.2e [ 1784.967236][T26842] usb 6-1: config 0 descriptor?? [ 1785.000226][T26845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1785.110543][T26845] usb 5-1: Product: syz [ 1785.129172][T26845] usb 5-1: Manufacturer: syz [ 1785.134030][T26845] usb 5-1: SerialNumber: syz [ 1785.156308][T26845] usb 5-1: config 0 descriptor?? [ 1785.172044][T30529] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1785.189695][T26845] iowarrior 5-1:0.53: no interrupt-in endpoint found [ 1785.642078][T26824] usb 5-1: USB disconnect, device number 70 [ 1785.868414][T30335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1785.906865][T30335] 8021q: adding VLAN 0 to HW filter on device team0 [ 1785.950935][T12753] bridge0: port 1(bridge_slave_0) entered blocking state [ 1785.958321][T12753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1786.028873][T22895] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1786.049112][T12753] bridge0: port 2(bridge_slave_1) entered blocking state [ 1786.056350][T12753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1786.224592][T22895] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1786.234665][T22895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1786.283722][T22895] usb 7-1: config 0 descriptor?? [ 1786.605522][T30335] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1786.946842][T26837] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1786.993670][T30335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1787.117410][T26837] usb 5-1: Using ep0 maxpacket: 16 [ 1787.282762][T26837] usb 5-1: config 0 has no interfaces? [ 1787.343268][T26837] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1787.406420][T26837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1787.463967][T26837] usb 5-1: SerialNumber: syz [ 1787.506100][T26837] usb 5-1: config 0 descriptor?? [ 1787.860938][T26842] usbhid 6-1:0.0: can't add hid device: -71 [ 1787.872895][T30562] vlan2: entered promiscuous mode [ 1787.897210][T26842] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1787.980289][T26842] usb 6-1: USB disconnect, device number 48 [ 1788.119661][T30571] loop2: detected capacity change from 0 to 7 [ 1788.132558][T30572] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7152'. [ 1788.146322][T30571] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 1788.152558][T30571] loop2: p1 start 811953257 is beyond EOD, truncated [ 1788.171682][T30571] loop2: p2 start 1650421353 is beyond EOD, truncated [ 1788.197821][T30571] loop2: p3 start 3184882576 is beyond EOD, truncated [ 1788.246255][ T8168] usb 5-1: USB disconnect, device number 71 [ 1788.269375][T30571] loop2: p4 start 360999626 is beyond EOD, truncated [ 1788.344966][T30571] loop2: p5 start 3884050206 is beyond EOD, truncated [ 1788.386206][T30571] loop2: p6 start 537650420 is beyond EOD, truncated [ 1788.422114][T30571] loop2: p7 start 3276536533 is beyond EOD, truncated [ 1788.461652][T30335] veth0_vlan: entered promiscuous mode [ 1788.544531][T30335] veth1_vlan: entered promiscuous mode [ 1788.726186][T30335] veth0_macvtap: entered promiscuous mode [ 1788.767663][T30335] veth1_macvtap: entered promiscuous mode [ 1788.851359][T30335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1788.951367][T30335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1789.042567][T30335] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1789.056807][T30335] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1789.096769][T30335] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1789.136976][T30335] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1789.286810][T17630] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1789.452335][T17630] usb 6-1: Invalid ep0 maxpacket: 9 [ 1789.539663][T22895] usb 7-1: Cannot set autoneg [ 1789.544669][T22895] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1789.637755][T22895] usb 7-1: USB disconnect, device number 29 [ 1789.646837][T17630] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1789.877798][T17630] usb 6-1: Invalid ep0 maxpacket: 9 [ 1789.941382][T17630] usb usb6-port1: attempt power cycle [ 1790.088377][ T8668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1790.096247][ T8668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1790.161686][ T8665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1790.171888][ T8665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1790.501478][T22895] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 1790.616743][T17630] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1790.637522][T17630] usb 6-1: Invalid ep0 maxpacket: 9 [ 1790.836920][T17630] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1790.937254][T22895] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 1790.948003][T17630] usb 6-1: Invalid ep0 maxpacket: 9 [ 1790.954419][T17630] usb usb6-port1: unable to enumerate USB device [ 1790.955791][T22895] usb 5-1: config 8 has no interface number 0 [ 1790.976749][T22895] usb 5-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1791.024763][T22895] usb 5-1: config 8 interface 223 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1791.120768][T22895] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1791.141942][T22895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1791.156839][T30620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7112'. [ 1791.226780][T22895] usb 5-1: Product: syz [ 1791.231260][T22895] usb 5-1: Manufacturer: syz [ 1791.235919][T22895] usb 5-1: SerialNumber: syz [ 1791.394890][T30620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7112'. [ 1791.404675][T30620] netlink: 'syz.1.7112': attribute type 5 has an invalid length. [ 1791.412687][T30620] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7112'. [ 1791.440581][T30620] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1791.450767][T30620] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1791.531091][T30620] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1791.565622][T30620] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1791.579057][T30620] geneve2: entered promiscuous mode [ 1791.606199][T22895] usb 5-1: USB disconnect, device number 72 [ 1791.616734][T30620] geneve2: entered allmulticast mode [ 1791.929573][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.936113][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.221730][T30627] loop8: detected capacity change from 0 to 8 [ 1792.238706][T30627] Dev loop8: unable to read RDB block 8 [ 1792.244374][T30627] loop8: unable to read partition table [ 1792.266981][T30627] loop8: partition table beyond EOD, truncated [ 1792.303977][T30627] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 1793.008406][T30636] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7164'. [ 1795.890637][T30699] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7177'. [ 1796.936239][T30710] FAULT_INJECTION: forcing a failure. [ 1796.936239][T30710] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1797.032108][T30710] CPU: 0 UID: 0 PID: 30710 Comm: syz.4.7179 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1797.032140][T30710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1797.032155][T30710] Call Trace: [ 1797.032164][T30710] [ 1797.032174][T30710] dump_stack_lvl+0x189/0x250 [ 1797.032210][T30710] ? __pfx____ratelimit+0x10/0x10 [ 1797.032245][T30710] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1797.032270][T30710] ? __pfx__printk+0x10/0x10 [ 1797.032301][T30710] ? fs_reclaim_acquire+0x7d/0x100 [ 1797.032342][T30710] should_fail_ex+0x414/0x560 [ 1797.032378][T30710] prepare_alloc_pages+0x213/0x610 [ 1797.032417][T30710] __alloc_frozen_pages_noprof+0x123/0x370 [ 1797.032452][T30710] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1797.032495][T30710] ? policy_nodemask+0x27c/0x720 [ 1797.032520][T30710] ? __lock_acquire+0xab9/0xd20 [ 1797.032548][T30710] alloc_pages_mpol+0x232/0x4a0 [ 1797.032582][T30710] vma_alloc_folio_noprof+0xe4/0x200 [ 1797.032614][T30710] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1797.032655][T30710] folio_prealloc+0x30/0x180 [ 1797.032685][T30710] __handle_mm_fault+0x2c88/0x5620 [ 1797.032708][T30710] ? __lock_acquire+0xab9/0xd20 [ 1797.032749][T30710] ? __pfx___handle_mm_fault+0x10/0x10 [ 1797.032774][T30710] ? lock_vma_under_rcu+0xf8/0x710 [ 1797.032812][T30710] ? lock_vma_under_rcu+0xf8/0x710 [ 1797.032840][T30710] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 1797.032877][T30710] handle_mm_fault+0x40a/0x8e0 [ 1797.032921][T30710] do_user_addr_fault+0xa81/0x1390 [ 1797.032950][T30710] ? rcu_is_watching+0x15/0xb0 [ 1797.032976][T30710] ? trace_page_fault_user+0x84/0x1e0 [ 1797.033000][T30710] exc_page_fault+0x76/0xf0 [ 1797.033034][T30710] asm_exc_page_fault+0x26/0x30 [ 1797.033054][T30710] RIP: 0033:0x7f4a5725a33b [ 1797.033074][T30710] Code: 00 00 00 48 8d 3d fd 2b 19 00 48 89 c1 31 c0 e8 fb 3c ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 31 2c 19 00 48 89 34 24 48 8b 14 24 48 8b [ 1797.033093][T30710] RSP: 002b:00007f4a581c6fb0 EFLAGS: 00010202 [ 1797.033112][T30710] RAX: 0000000000000000 RBX: 00007f4a575b5fa0 RCX: 0000000000000000 [ 1797.033126][T30710] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000240 [ 1797.033139][T30710] RBP: 00007f4a581c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1797.033152][T30710] R10: 0000200000000240 R11: 0000000000000000 R12: 0000000000000001 [ 1797.033166][T30710] R13: 0000000000000000 R14: 00007f4a575b5fa0 R15: 00007f4a576dfa28 [ 1797.033198][T30710] [ 1797.476512][T30710] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1798.470884][ T8167] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1798.626858][ T8167] usb 5-1: Using ep0 maxpacket: 32 [ 1798.670860][ T8167] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1798.700102][ T8167] usb 5-1: config 0 has no interface number 0 [ 1798.730824][ T8167] usb 5-1: config 0 interface 2 has no altsetting 0 [ 1798.753953][ T8167] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1798.776876][ T8167] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1798.840183][ T8167] usb 5-1: Product: syz [ 1798.844441][ T8167] usb 5-1: Manufacturer: syz [ 1798.848273][T30736] FAULT_INJECTION: forcing a failure. [ 1798.848273][T30736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1798.870004][ T8167] usb 5-1: SerialNumber: syz [ 1798.901772][ T8167] usb 5-1: config 0 descriptor?? [ 1798.950765][T30736] CPU: 1 UID: 0 PID: 30736 Comm: syz.6.7186 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1798.950799][T30736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1798.950813][T30736] Call Trace: [ 1798.950822][T30736] [ 1798.950832][T30736] dump_stack_lvl+0x189/0x250 [ 1798.950864][T30736] ? __pfx____ratelimit+0x10/0x10 [ 1798.950895][T30736] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1798.950921][T30736] ? __pfx__printk+0x10/0x10 [ 1798.950950][T30736] ? __might_fault+0xb0/0x130 [ 1798.950988][T30736] should_fail_ex+0x414/0x560 [ 1798.951022][T30736] _copy_from_iter+0x1db/0x16f0 [ 1798.951049][T30736] ? rcu_is_watching+0x15/0xb0 [ 1798.951076][T30736] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1798.951104][T30736] ? __pfx__copy_from_iter+0x10/0x10 [ 1798.951129][T30736] ? __build_skb_around+0x257/0x3e0 [ 1798.951159][T30736] ? skb_put+0x11b/0x210 [ 1798.951189][T30736] pfkey_sendmsg+0x230/0x1090 [ 1798.951222][T30736] ? __pfx___might_resched+0x10/0x10 [ 1798.951255][T30736] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1798.951286][T30736] ? aa_sk_perm+0x81e/0x950 [ 1798.951318][T30736] ? __lock_acquire+0xab9/0xd20 [ 1798.951339][T30736] ? __pfx_aa_sk_perm+0x10/0x10 [ 1798.951365][T30736] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1798.951392][T30736] ? aa_sock_msg_perm+0x94/0x160 [ 1798.951423][T30736] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1798.951440][T30736] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1798.951463][T30736] __sock_sendmsg+0x219/0x270 [ 1798.951487][T30736] ____sys_sendmsg+0x52d/0x830 [ 1798.951521][T30736] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1798.951555][T30736] ? import_iovec+0x74/0xa0 [ 1798.951583][T30736] ___sys_sendmsg+0x21f/0x2a0 [ 1798.951621][T30736] ? __pfx____sys_sendmsg+0x10/0x10 [ 1798.951686][T30736] ? __fget_files+0x2a/0x420 [ 1798.951713][T30736] ? __fget_files+0x3a0/0x420 [ 1798.951757][T30736] __sys_sendmmsg+0x227/0x430 [ 1798.951791][T30736] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1798.951816][T30736] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1798.951867][T30736] ? ksys_write+0x22a/0x250 [ 1798.951894][T30736] ? __pfx_ksys_write+0x10/0x10 [ 1798.951916][T30736] ? rcu_is_watching+0x15/0xb0 [ 1798.951947][T30736] __x64_sys_sendmmsg+0xa0/0xc0 [ 1798.951977][T30736] do_syscall_64+0xfa/0x3b0 [ 1798.951995][T30736] ? lockdep_hardirqs_on+0x9c/0x150 [ 1798.952024][T30736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1798.952044][T30736] ? clear_bhb_loop+0x60/0xb0 [ 1798.952068][T30736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1798.952088][T30736] RIP: 0033:0x7f280af8e929 [ 1798.952108][T30736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1798.952126][T30736] RSP: 002b:00007f280bd20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1798.952147][T30736] RAX: ffffffffffffffda RBX: 00007f280b1b5fa0 RCX: 00007f280af8e929 [ 1798.952162][T30736] RDX: 032bc45944b084a6 RSI: 0000200000000180 RDI: 0000000000000003 [ 1798.952176][T30736] RBP: 00007f280bd20090 R08: 0000000000000000 R09: 0000000000000000 [ 1798.952189][T30736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1798.952201][T30736] R13: 0000000000000000 R14: 00007f280b1b5fa0 R15: 00007f280b2dfa28 [ 1798.952231][T30736] [ 1799.442201][ T8167] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1799.491329][ T8167] usb 5-1: invalid MIDI out EP 0 [ 1799.988368][T30749] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7189'. [ 1800.113427][ T8167] snd-usb-audio 5-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 1800.283802][T30758] netlink: 56 bytes leftover after parsing attributes in process `syz.6.7192'. [ 1800.314844][ T8167] usb 5-1: USB disconnect, device number 73 [ 1800.408527][T10671] udevd[10671]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1802.660219][T30788] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7197'. [ 1802.679750][T30788] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7197'. [ 1804.366823][T26837] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1804.659798][T26837] usb 5-1: Using ep0 maxpacket: 32 [ 1804.704049][T26837] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1804.758162][T26837] usb 5-1: config 0 has no interface number 0 [ 1804.811650][T26837] usb 5-1: config 0 interface 2 has no altsetting 0 [ 1804.843471][T26837] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1804.863176][T26837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1804.871834][T30826] loop8: detected capacity change from 0 to 8 [ 1804.896992][T30826] Dev loop8: unable to read RDB block 8 [ 1804.907747][T26837] usb 5-1: Product: syz [ 1804.911987][T26837] usb 5-1: Manufacturer: syz [ 1804.929761][T30826] loop8: unable to read partition table [ 1804.935721][T30826] loop8: partition table beyond EOD, truncated [ 1804.942210][T26837] usb 5-1: SerialNumber: syz [ 1804.968086][T26837] usb 5-1: config 0 descriptor?? [ 1805.022072][T30826] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 1805.333827][ T5854] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1805.371060][ T5854] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1805.386190][T26837] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1805.397779][ T5854] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1805.425264][ T5854] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1805.425862][T26837] usb 5-1: invalid MIDI out EP 0 [ 1805.459210][ T5854] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1805.541607][T30832] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1805.592435][T26837] snd-usb-audio 5-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 1805.668801][T26837] usb 5-1: USB disconnect, device number 74 [ 1805.726290][T10671] udevd[10671]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1806.646875][ T8168] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 1806.818820][ T8168] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1806.836732][ T8168] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1806.881704][ T8168] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1806.923317][ T8168] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1806.952929][ T8168] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1806.962812][ T8168] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1806.985781][T30835] chnl_net:caif_netlink_parms(): no params data found [ 1807.013320][ T8168] usb 7-1: Manufacturer: syz [ 1807.031716][ T8168] usb 7-1: config 0 descriptor?? [ 1807.617188][T20733] Bluetooth: hci5: command tx timeout [ 1807.699749][T30835] bridge0: port 1(bridge_slave_0) entered blocking state [ 1807.774457][T30835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1807.806933][T30835] bridge_slave_0: entered allmulticast mode [ 1807.878448][T30835] bridge_slave_0: entered promiscuous mode [ 1807.918597][T30835] bridge0: port 2(bridge_slave_1) entered blocking state [ 1807.964994][T30835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1807.998640][T30835] bridge_slave_1: entered allmulticast mode [ 1808.029292][T30835] bridge_slave_1: entered promiscuous mode [ 1808.657067][T30835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1808.735298][T30835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1809.114552][T30835] team0: Port device team_slave_0 added [ 1809.239529][ T8169] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1809.348436][T30835] team0: Port device team_slave_1 added [ 1809.397206][ T8169] usb 2-1: Using ep0 maxpacket: 16 [ 1809.405373][ T8169] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1809.423894][ T8169] usb 2-1: can't read configurations, error -61 [ 1809.566889][ T8169] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1809.676780][T20733] Bluetooth: hci5: command tx timeout [ 1809.757660][ T8169] usb 2-1: Using ep0 maxpacket: 16 [ 1809.779419][ T8169] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1809.806745][ T8169] usb 2-1: can't read configurations, error -61 [ 1809.837465][ T8169] usb usb2-port1: attempt power cycle [ 1809.898099][T30835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1809.986673][T30835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1810.187171][ T8169] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1810.194961][T30835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1810.272127][ T8169] usb 2-1: Using ep0 maxpacket: 16 [ 1810.293397][ T8169] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1810.323026][ T8169] usb 2-1: can't read configurations, error -61 [ 1810.638544][T30835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1810.645655][T30835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1810.671989][ T8169] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1810.748736][ T8169] usb 2-1: Using ep0 maxpacket: 16 [ 1810.757862][ T8169] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1810.765717][ T8169] usb 2-1: can't read configurations, error -61 [ 1810.772923][ T8169] usb usb2-port1: unable to enumerate USB device [ 1810.906844][T30835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1811.054692][T30835] hsr_slave_0: entered promiscuous mode [ 1811.084365][T30835] hsr_slave_1: entered promiscuous mode [ 1811.133912][T30835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1811.344890][T30835] Cannot create hsr debugfs directory [ 1811.669462][T30891] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7218'. [ 1811.757723][T20733] Bluetooth: hci5: command tx timeout [ 1812.022162][T30893] program syz.1.7219 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1812.060868][T30835] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1812.136544][T30835] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1812.188907][T30835] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1812.255431][T30835] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1812.345140][T30898] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7221'. [ 1812.354884][T30898] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7221'. [ 1812.356907][ T8168] rc_core: IR keymap rc-hauppauge not found [ 1812.559184][ T8168] Registered IR keymap rc-empty [ 1812.564268][ T8168] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1812.582558][T30898] bridge0: port 2(bridge_slave_1) entered disabled state [ 1812.590185][T30898] bridge0: port 1(bridge_slave_0) entered disabled state [ 1812.660169][ T8168] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1812.755999][ T8168] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1812.789430][ T8168] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input148 [ 1812.848896][ T8168] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1812.877843][ T8168] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1812.897095][ T8168] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1812.946510][ T8168] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1813.026835][ T8168] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1813.097102][ T8168] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1813.117184][ T8168] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1813.147466][ T8168] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1813.172766][ T8168] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1813.211205][ T8168] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1813.274518][ T8168] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 1813.317454][ T8168] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1813.405706][ T8168] usb 7-1: USB disconnect, device number 30 [ 1813.638538][T30835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1813.800091][ T8168] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1813.845782][T30835] 8021q: adding VLAN 0 to HW filter on device team0 [ 1813.854002][T20733] Bluetooth: hci5: command tx timeout [ 1813.960430][ T8168] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1813.981083][ T8168] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1814.012326][ T8668] bridge0: port 1(bridge_slave_0) entered blocking state [ 1814.019521][ T8668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1814.049831][ T8168] usb 7-1: Product: syz [ 1814.054040][ T8168] usb 7-1: Manufacturer: syz [ 1814.059453][ T8168] usb 7-1: SerialNumber: syz [ 1814.085542][ T8668] bridge0: port 2(bridge_slave_1) entered blocking state [ 1814.092815][ T8668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1814.139602][ T8168] usb 7-1: config 0 descriptor?? [ 1814.181736][ T8168] i2c-tiny-usb 7-1:0.0: version 6d.cc found at bus 007 address 031 [ 1814.553793][T30926] tipc: Enabling of bearer rejected, failed to enable media [ 1814.633443][T30835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1814.659351][T30897] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7220'. [ 1814.722917][T30897] macvlan2: entered promiscuous mode [ 1814.733878][T30897] bond0: entered promiscuous mode [ 1814.741229][T30897] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1814.822840][T22895] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1814.850409][ T8168] (null): failure reading functionality [ 1814.870500][ T8168] i2c i2c-1: failure reading functionality [ 1814.902432][T30835] veth0_vlan: entered promiscuous mode [ 1814.913896][ T8168] i2c i2c-1: connected i2c-tiny-usb device [ 1814.968357][T30835] veth1_vlan: entered promiscuous mode [ 1814.987816][T22895] usb 5-1: Using ep0 maxpacket: 16 [ 1815.000515][T22895] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1815.019809][T22895] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1815.050584][T22895] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1815.071353][T22895] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1815.085889][T22895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.096127][T22895] usb 5-1: Product: syz [ 1815.116549][T22895] usb 5-1: Manufacturer: syz [ 1815.123783][T30835] veth0_macvtap: entered promiscuous mode [ 1815.126953][T22895] usb 5-1: SerialNumber: syz [ 1815.141190][T30835] veth1_macvtap: entered promiscuous mode [ 1815.175340][T30835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1815.233668][T30835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1815.266115][T30835] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1815.349974][T30835] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1815.406197][T30835] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1815.441178][T22895] usb 5-1: 0:2 : does not exist [ 1815.471961][T22895] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 1815.540448][T30835] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1815.563406][T22895] usb 5-1: USB disconnect, device number 75 [ 1815.721544][ T5999] udevd[5999]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1816.026538][T26635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1816.051197][T26635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1816.111957][T22895] usb 7-1: USB disconnect, device number 31 [ 1816.235838][T26635] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1816.279874][T30935] delete_channel: no stack [ 1816.293915][T26635] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1816.747918][T30944] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7233'. [ 1817.679047][T30955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7234'. [ 1817.700308][T30955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1817.755056][T30955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1818.282935][T30955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1818.295645][T30955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1818.736744][T26840] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1818.902711][T26840] usb 9-1: config 0 has no interfaces? [ 1818.933571][T26840] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1818.949823][T26840] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.965753][T26840] usb 9-1: Product: syz [ 1818.975169][T26840] usb 9-1: Manufacturer: syz [ 1818.983777][T26840] usb 9-1: SerialNumber: syz [ 1818.992456][T26840] usb 9-1: config 0 descriptor?? [ 1818.997811][ T8167] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1819.046832][T26837] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1819.160617][ T8167] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1819.189969][ T8167] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1819.213741][T26837] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1819.223910][ T8167] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1819.242269][T30967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1819.251708][T30967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1819.264689][ T8167] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1819.274239][T26837] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1819.292566][T26837] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1819.296192][ T8167] usb 5-1: Product: syz [ 1819.304836][T26837] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1819.322930][T26837] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1819.322952][ T8167] usb 5-1: Manufacturer: syz [ 1819.322973][ T8167] usb 5-1: SerialNumber: syz [ 1819.347912][T26837] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1819.359781][T26837] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1819.385194][T26837] usb 2-1: Product: syz [ 1819.389947][T26837] usb 2-1: Manufacturer: syz [ 1819.394156][ T8167] usb 5-1: config 0 descriptor?? [ 1819.414427][T26837] cdc_wdm 2-1:1.0: skipping garbage [ 1819.423522][T26837] cdc_wdm 2-1:1.0: skipping garbage [ 1819.431219][T26837] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1819.441142][T26837] cdc_wdm 2-1:1.0: Unknown control protocol [ 1819.876709][ C1] cdc_wdm 2-1:1.0: Unexpected error -71 [ 1819.885604][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1819.892450][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1819.898775][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1819.905391][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1819.912356][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1819.919037][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1819.925355][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1819.932079][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1819.938546][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1819.945156][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1819.951550][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1819.958177][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1819.964487][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1819.971126][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1819.977454][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1819.984063][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1819.990380][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1819.996985][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1820.003351][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1820.010065][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1820.065542][T22895] usb 2-1: USB disconnect, device number 75 [ 1820.065689][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1820.541614][T22895] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 1820.698113][T22895] usb 2-1: device descriptor read/64, error -71 [ 1820.842228][T30980] loop2: detected capacity change from 0 to 7 [ 1820.873099][T30980] Dev loop2: unable to read RDB block 7 [ 1820.887229][T30980] loop2: unable to read partition table [ 1820.910637][T30980] loop2: partition table beyond EOD, truncated [ 1820.935457][T30980] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1820.971069][T22895] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 1821.130676][T22895] usb 2-1: device descriptor read/64, error -71 [ 1821.249291][T22895] usb usb2-port1: attempt power cycle [ 1821.494240][ T8167] usb 9-1: USB disconnect, device number 2 [ 1821.612464][T22895] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 1821.672846][T22895] usb 2-1: device descriptor read/8, error -71 [ 1821.692393][T30992] netlink: 64 bytes leftover after parsing attributes in process `syz.8.7246'. [ 1821.729248][T30992] netlink: 52 bytes leftover after parsing attributes in process `syz.8.7246'. [ 1821.739516][T30992] bridge0: port 2(bridge_slave_1) entered disabled state [ 1821.747407][T30992] bridge0: port 1(bridge_slave_0) entered disabled state [ 1821.876753][T26837] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1822.046718][T26837] usb 7-1: device descriptor read/64, error -71 [ 1822.278594][T26840] usb 5-1: USB disconnect, device number 76 [ 1822.317193][T26837] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1822.476985][T26837] usb 7-1: device descriptor read/64, error -71 [ 1822.597347][T26837] usb usb7-port1: attempt power cycle [ 1822.976994][T26837] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1823.437175][T26837] usb 7-1: device descriptor read/8, error -71 [ 1823.787106][T26837] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1823.846408][T26837] usb 7-1: device descriptor read/8, error -71 [ 1824.010639][T26837] usb usb7-port1: unable to enumerate USB device [ 1824.408441][T31021] loop2: detected capacity change from 0 to 7 [ 1824.423907][ T5999] Dev loop2: unable to read RDB block 7 [ 1824.434177][ T5999] loop2: unable to read partition table [ 1824.447225][ T5999] loop2: partition table beyond EOD, truncated [ 1824.481729][T31021] Dev loop2: unable to read RDB block 7 [ 1824.487937][T31021] loop2: unable to read partition table [ 1824.540774][T31021] loop2: partition table beyond EOD, truncated [ 1824.583752][T31021] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1824.936467][T31034] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 1824.943052][T31034] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1824.972047][T31034] vhci_hcd vhci_hcd.0: Device attached [ 1825.043871][ T8169] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1825.101351][T31034] vhci_hcd vhci_hcd.0: port 0 already used [ 1825.114216][T31035] vhci_hcd: connection closed [ 1825.114620][ T8668] vhci_hcd: stop threads [ 1825.132240][ T8668] vhci_hcd: release socket [ 1825.143768][ T8668] vhci_hcd: disconnect device [ 1825.227124][ T8169] usb 7-1: Using ep0 maxpacket: 16 [ 1825.234749][ T8169] usb 7-1: config 0 has no interfaces? [ 1825.243335][ T8169] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1825.261210][ T8169] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.280034][ T8169] usb 7-1: Product: syz [ 1825.294775][ T8169] usb 7-1: Manufacturer: syz [ 1825.306714][ T8169] usb 7-1: SerialNumber: syz [ 1825.326486][ T8169] usb 7-1: config 0 descriptor?? [ 1825.549900][T31030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1825.583131][T31030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1825.614187][T31030] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7255'. [ 1826.500041][T26837] usb 7-1: USB disconnect, device number 36 [ 1826.850204][T31058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7263'. [ 1827.187008][T22895] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1827.381562][T22895] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1827.392422][T22895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.455669][T22895] usb 7-1: Product: syz [ 1827.481302][T22895] usb 7-1: Manufacturer: syz [ 1827.485994][T22895] usb 7-1: SerialNumber: syz [ 1827.573320][T22895] usb 7-1: config 0 descriptor?? [ 1827.719752][T31069] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7266'. [ 1827.814702][ T8169] usb 7-1: USB disconnect, device number 37 [ 1828.124923][ T8115] udevd[8115]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1828.316941][T26842] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1828.600217][T26842] usb 9-1: config 0 has no interfaces? [ 1828.608916][T26842] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1828.618449][T26842] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.629875][T26842] usb 9-1: Product: syz [ 1828.638774][T26842] usb 9-1: Manufacturer: syz [ 1828.693373][T26842] usb 9-1: SerialNumber: syz [ 1828.730941][T26842] usb 9-1: config 0 descriptor?? [ 1829.159725][T31074] input: syz0 as /devices/virtual/input/input150 [ 1829.378608][T31095] input: syz1 as /devices/virtual/input/input149 [ 1829.587589][T31098] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7272'. [ 1829.826957][ T8169] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1829.855518][T31105] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7273'. [ 1830.018542][ T8169] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1830.047893][ T8169] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1830.083825][ T8169] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1830.129068][ T8169] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1830.224194][ T8169] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1830.298325][ T8169] usb 7-1: config 0 descriptor?? [ 1830.915716][ T8169] kye 0003:0458:5011.004C: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1830.974514][ T8169] kye 0003:0458:5011.004C: unbalanced collection at end of report description [ 1831.043424][ T8169] kye 0003:0458:5011.004C: parse failed [ 1831.070519][ T8169] kye 0003:0458:5011.004C: probe with driver kye failed with error -22 [ 1831.150378][ T8169] usb 7-1: USB disconnect, device number 38 [ 1831.424747][T20733] Bluetooth: hci3: unexpected event for opcode 0x0403 [ 1832.042205][T26842] usb 9-1: USB disconnect, device number 3 [ 1832.300664][T31131] Cannot find del_set index 0 as target [ 1832.312785][T31127] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1832.535955][T31135] SET target dimension over the limit! [ 1832.567983][T31136] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7284'. [ 1832.680865][T31138] (unnamed net_device) (uninitialized): (slave lo): Device is not bonding slave [ 1832.710591][T31138] (unnamed net_device) (uninitialized): option active_slave: invalid value (lo) [ 1833.047632][T31150] sctp: [Deprecated]: syz.8.7289 (pid 31150) Use of int in maxseg socket option. [ 1833.047632][T31150] Use struct sctp_assoc_value instead [ 1833.816942][T26842] usb 2-1: new low-speed USB device number 80 using dummy_hcd [ 1834.009047][T26842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1834.047856][T26842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 73, setting to 8 [ 1834.148143][T26842] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1834.183050][T26842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1834.205182][T26842] usb 2-1: config 0 descriptor?? [ 1834.220420][T31160] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1834.516365][T26842] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1834.675657][T31170] netlink: 'syz.8.7294': attribute type 1 has an invalid length. [ 1835.008663][T31169] vcan1: entered promiscuous mode [ 1835.843193][T31177] FAULT_INJECTION: forcing a failure. [ 1835.843193][T31177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1835.992836][T31179] netlink: 'syz.8.7295': attribute type 11 has an invalid length. [ 1836.026437][T31177] CPU: 1 UID: 0 PID: 31177 Comm: syz.4.7296 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1836.026470][T31177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1836.026485][T31177] Call Trace: [ 1836.026494][T31177] [ 1836.026504][T31177] dump_stack_lvl+0x189/0x250 [ 1836.026536][T31177] ? __pfx____ratelimit+0x10/0x10 [ 1836.026573][T31177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1836.026597][T31177] ? __pfx__printk+0x10/0x10 [ 1836.026623][T31177] ? __might_fault+0xb0/0x130 [ 1836.026660][T31177] should_fail_ex+0x414/0x560 [ 1836.026695][T31177] _copy_from_user+0x2d/0xb0 [ 1836.026722][T31177] ___sys_sendmsg+0x158/0x2a0 [ 1836.026752][T31177] ? __pfx____sys_sendmsg+0x10/0x10 [ 1836.026811][T31177] ? __fget_files+0x2a/0x420 [ 1836.026839][T31177] ? __fget_files+0x3a0/0x420 [ 1836.026877][T31177] __sys_sendmmsg+0x227/0x430 [ 1836.026910][T31177] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1836.026935][T31177] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1836.026982][T31177] ? ksys_write+0x22a/0x250 [ 1836.027010][T31177] ? __pfx_ksys_write+0x10/0x10 [ 1836.027032][T31177] ? rcu_is_watching+0x15/0xb0 [ 1836.027065][T31177] __x64_sys_sendmmsg+0xa0/0xc0 [ 1836.027095][T31177] do_syscall_64+0xfa/0x3b0 [ 1836.027119][T31177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1836.027147][T31177] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1836.027167][T31177] ? clear_bhb_loop+0x60/0xb0 [ 1836.027192][T31177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1836.027213][T31177] RIP: 0033:0x7f4a5738e929 [ 1836.027232][T31177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1836.027251][T31177] RSP: 002b:00007f4a581c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1836.027274][T31177] RAX: ffffffffffffffda RBX: 00007f4a575b5fa0 RCX: 00007f4a5738e929 [ 1836.027290][T31177] RDX: 032bc45944b084a6 RSI: 0000200000000180 RDI: 0000000000000004 [ 1836.027305][T31177] RBP: 00007f4a581c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1836.027318][T31177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1836.027331][T31177] R13: 0000000000000000 R14: 00007f4a575b5fa0 R15: 00007f4a576dfa28 [ 1836.027363][T31177] [ 1836.245488][ C1] vkms_vblank_simulate: vblank timer overrun [ 1836.569259][T31153] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1836.775213][T17630] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1836.819395][ C0] iowarrior 2-1:0.0: iowarrior_callback - usb_submit_urb failed with result -1 [ 1836.850274][T17630] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1836.863128][T26837] usb 2-1: USB disconnect, device number 80 [ 1836.922884][T17630] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1836.980219][T17630] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1837.002331][T17630] rtc rtc0: __rtc_set_alarm: err=-22 [ 1837.327029][T31192] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7301'. [ 1837.386442][T31192] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7301'. [ 1837.398760][T31192] netlink: 'syz.6.7301': attribute type 18 has an invalid length. [ 1837.627136][T17630] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1837.800997][T17630] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1837.839950][T17630] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1837.882684][T17630] usb 7-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 1837.937257][T17630] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1837.962233][T17630] usb 7-1: config 0 descriptor?? [ 1838.431037][T17630] usb 7-1: string descriptor 0 read error: -71 [ 1838.498468][T17630] usb 7-1: USB disconnect, device number 39 [ 1839.806757][T17630] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1840.130210][T22895] usb 7-1: new low-speed USB device number 40 using dummy_hcd [ 1840.199186][T17630] usb 2-1: Using ep0 maxpacket: 16 [ 1840.208569][T17630] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1840.216540][T17630] usb 2-1: can't read configurations, error -61 [ 1840.346746][T17630] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1840.358548][T22895] usb 7-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 1840.378223][T22895] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 1840.460967][T22895] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1840.506940][T22895] usb 7-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1840.550168][T17630] usb 2-1: Using ep0 maxpacket: 16 [ 1840.565665][T22895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1840.610033][T17630] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1840.673739][T17630] usb 2-1: can't read configurations, error -61 [ 1840.682763][T17630] usb usb2-port1: attempt power cycle [ 1840.803891][T22895] usb 7-1: string descriptor 0 read error: -71 [ 1841.055319][T17630] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1841.108418][T22895] usb 7-1: USB disconnect, device number 40 [ 1841.660470][T31243] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 1841.687237][T31243] PKCS7: Only support pkcs7_signedData type [ 1841.837374][T31248] netlink: 'syz.7.7319': attribute type 1 has an invalid length. [ 1841.845552][T31248] netlink: 'syz.7.7319': attribute type 2 has an invalid length. [ 1841.871583][T17630] usb 2-1: device descriptor read/8, error -71 [ 1841.911708][T31249] netlink: 'syz.7.7319': attribute type 1 has an invalid length. [ 1841.912562][T12743] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1842.041098][T31249] netlink: 'syz.7.7319': attribute type 2 has an invalid length. [ 1842.272021][T12743] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1842.471809][T12743] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1842.687153][T17630] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1842.761901][T31274] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7328'. [ 1842.773048][T17630] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1842.806704][ T8169] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1842.822062][T17630] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1842.848677][T17630] usb 2-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 1842.866391][T17630] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.895909][T17630] usb 2-1: config 0 descriptor?? [ 1842.988864][ T8169] usb 5-1: Using ep0 maxpacket: 16 [ 1842.995762][T12743] bridge_slave_1: left allmulticast mode [ 1843.012660][T12743] bridge_slave_1: left promiscuous mode [ 1843.020913][ T8169] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1843.038170][T12743] bridge0: port 2(bridge_slave_1) entered disabled state [ 1843.045533][T22895] usb 7-1: new low-speed USB device number 41 using dummy_hcd [ 1843.053199][ T8169] usb 5-1: config 0 has no interface number 0 [ 1843.063322][ T8169] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1843.075208][T12743] bridge_slave_0: left allmulticast mode [ 1843.081945][T12743] bridge_slave_0: left promiscuous mode [ 1843.087937][ T8169] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1843.095989][ T8169] usb 5-1: Product: syz [ 1843.100770][T12743] bridge0: port 1(bridge_slave_0) entered disabled state [ 1843.109154][ T8169] usb 5-1: Manufacturer: syz [ 1843.113810][ T8169] usb 5-1: SerialNumber: syz [ 1843.140996][ T8169] usb 5-1: config 0 descriptor?? [ 1843.169998][ T8169] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1843.196731][T22895] usb 7-1: device descriptor read/64, error -71 [ 1843.351713][T31259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1843.363563][T31259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1843.467117][T22895] usb 7-1: new low-speed USB device number 42 using dummy_hcd [ 1843.492742][T17630] hid-alps 0003:044E:1215.004D: hidraw0: USB HID v0.04 Device [HID 044e:1215] on usb-dummy_hcd.1-1/input0 [ 1843.606847][T22895] usb 7-1: device descriptor read/64, error -71 [ 1843.701866][T26840] usb 2-1: USB disconnect, device number 84 [ 1843.718769][T22895] usb usb7-port1: attempt power cycle [ 1844.107207][T22895] usb 7-1: new low-speed USB device number 43 using dummy_hcd [ 1844.192628][T22895] usb 7-1: device descriptor read/8, error -71 [ 1844.447124][T22895] usb 7-1: new low-speed USB device number 44 using dummy_hcd [ 1844.523808][T12743] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1844.528987][T22895] usb 7-1: device descriptor read/8, error -71 [ 1844.547141][T12743] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1844.560820][T12743] bond0 (unregistering): Released all slaves [ 1844.661220][T22895] usb usb7-port1: unable to enumerate USB device [ 1844.669981][T12743] tipc: Disabling bearer [ 1844.677523][T12743] tipc: Left network mode [ 1845.083768][T12743] hsr_slave_0: left promiscuous mode [ 1845.125778][T12743] hsr_slave_1: left promiscuous mode [ 1845.269803][T12743] veth1_vlan: left promiscuous mode [ 1845.313042][T12743] veth0_vlan: left promiscuous mode [ 1845.371192][ T8169] gspca_spca1528: reg_r err -71 [ 1845.376445][ T8169] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 1845.443079][ T8169] usb 5-1: USB disconnect, device number 77 [ 1845.558711][T22895] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1847.632670][T12743] team0 (unregistering): Port device team_slave_1 removed [ 1847.736276][T12743] team0 (unregistering): Port device team_slave_0 removed [ 1850.812800][T12743] IPVS: stop unused estimator thread 0... [ 1851.061467][T31370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7344'. [ 1851.505899][T31376] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7346'. [ 1851.899178][T31380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7344'. [ 1851.941563][T31380] netlink: 'syz.1.7344': attribute type 5 has an invalid length. [ 1851.974695][T31380] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7344'. [ 1852.305754][T31389] misc userio: No port type given on /dev/userio [ 1852.312999][T31389] misc userio: The device must be registered before sending interrupts [ 1852.542869][T31390] netlink: 'syz.6.7340': attribute type 1 has an invalid length. [ 1852.550715][T31390] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.7340'. [ 1852.880197][T26840] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1853.118887][T26840] usb 5-1: Using ep0 maxpacket: 8 [ 1853.161138][T26840] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1853.170641][T26840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1853.191297][T26840] usb 5-1: Product: syz [ 1853.195543][T26840] usb 5-1: Manufacturer: syz [ 1853.216170][T26840] usb 5-1: SerialNumber: syz [ 1853.250498][T26840] usb 5-1: config 0 descriptor?? [ 1853.298517][T26840] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1853.306967][T26840] usb 5-1: setting power ON [ 1853.311494][T26840] dvb-usb: bulk message failed: -22 (2/0) [ 1853.347304][T26840] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1853.363772][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.370309][ T8169] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1853.370318][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.449464][T31396] loop2: detected capacity change from 0 to 7 [ 1853.521663][T31396] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 1853.534371][T26840] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1853.569245][T26840] usb 5-1: media controller created [ 1853.576983][T31396] loop2: p1 start 811953257 is beyond EOD, truncated [ 1853.583705][T31396] loop2: p2 start 1650421353 is beyond EOD, truncated [ 1853.595642][T31396] loop2: p3 start 3184882576 is beyond EOD, truncated [ 1853.614071][ T8169] usb 7-1: Using ep0 maxpacket: 8 [ 1853.626764][T31396] loop2: p4 start 360999626 is beyond EOD, truncated [ 1853.664210][ T8169] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1853.692849][T31396] loop2: p5 start 3884050206 is beyond EOD, truncated [ 1853.711178][T26840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1853.723659][T31396] loop2: p6 start 537650420 is beyond EOD, truncated [ 1853.733984][T31396] loop2: p7 start 3276536533 is beyond EOD, truncated [ 1853.787613][ T8169] usb 7-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 1853.799516][ T8169] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1853.821306][ T8169] usb 7-1: Product: syz [ 1853.831814][ T8169] usb 7-1: Manufacturer: syz [ 1853.851043][ T8169] usb 7-1: SerialNumber: syz [ 1853.875620][T26840] usb 5-1: selecting invalid altsetting 6 [ 1853.888048][ T8169] usb 7-1: config 0 descriptor?? [ 1853.922189][ T8169] cdc_phonet 7-1:0.0: probe with driver cdc_phonet failed with error -22 [ 1853.923764][T26840] usb 5-1: digital interface selection failed (-22) [ 1854.042598][T26840] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1854.087469][T26840] usb 5-1: setting power OFF [ 1854.097266][T26840] dvb-usb: bulk message failed: -22 (2/0) [ 1854.116860][T26840] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1854.177648][T26837] usb 7-1: USB disconnect, device number 45 [ 1854.215940][T26840] (NULL device *): no alternate interface [ 1854.362499][T26840] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1854.541265][T31407] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7351'. [ 1854.723029][T31407] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7351'. [ 1854.732109][T31407] netlink: 'syz.8.7351': attribute type 5 has an invalid length. [ 1854.757559][T31407] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7351'. [ 1854.807168][T31407] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1854.815911][T31407] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1854.824668][T31407] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1854.833440][T31407] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1854.842332][T31407] geneve2: entered promiscuous mode [ 1854.847874][T31407] geneve2: entered allmulticast mode [ 1855.256815][T22895] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1855.478478][T22895] usb 2-1: config 0 has an invalid interface number: 171 but max is 0 [ 1855.576719][T22895] usb 2-1: config 0 has no interface number 0 [ 1855.582854][T22895] usb 2-1: config 0 interface 171 has no altsetting 0 [ 1855.622418][T22895] usb 2-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 1855.641055][T22895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1855.729822][T22895] usb 2-1: Product: syz [ 1855.736376][T22895] usb 2-1: Manufacturer: syz [ 1855.798261][T22895] usb 2-1: SerialNumber: syz [ 1855.814444][T26840] usb 5-1: USB disconnect, device number 78 [ 1855.885354][T22895] usb 2-1: config 0 descriptor?? [ 1855.932476][T22895] usb-storage 2-1:0.171: USB Mass Storage device detected [ 1856.230342][T22895] usb 2-1: USB disconnect, device number 86 [ 1856.312137][T31423] FAULT_INJECTION: forcing a failure. [ 1856.312137][T31423] name failslab, interval 1, probability 0, space 0, times 0 [ 1856.357825][T31423] CPU: 1 UID: 0 PID: 31423 Comm: syz.6.7353 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1856.357857][T31423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1856.357871][T31423] Call Trace: [ 1856.357879][T31423] [ 1856.357888][T31423] dump_stack_lvl+0x189/0x250 [ 1856.357918][T31423] ? __pfx____ratelimit+0x10/0x10 [ 1856.357952][T31423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1856.357988][T31423] ? __pfx__printk+0x10/0x10 [ 1856.358031][T31423] ? preempt_schedule_common+0x83/0xd0 [ 1856.358063][T31423] ? preempt_schedule+0xae/0xc0 [ 1856.358092][T31423] ? __pfx_preempt_schedule+0x10/0x10 [ 1856.358125][T31423] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 1856.358151][T31423] should_fail_ex+0x414/0x560 [ 1856.358188][T31423] should_failslab+0xa8/0x100 [ 1856.358218][T31423] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1856.358245][T31423] ? __alloc_skb+0x112/0x2d0 [ 1856.358276][T31423] __alloc_skb+0x112/0x2d0 [ 1856.358306][T31423] unicast_flush_resp+0x2a/0x170 [ 1856.358336][T31423] pfkey_spdflush+0xca/0x290 [ 1856.358364][T31423] ? __pfx_pfkey_spdflush+0x10/0x10 [ 1856.358387][T31423] ? kmem_cache_free+0x18f/0x400 [ 1856.358426][T31423] pfkey_sendmsg+0xbfe/0x1090 [ 1856.358475][T31423] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1856.358527][T31423] ? aa_sock_msg_perm+0x94/0x160 [ 1856.358560][T31423] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1856.358579][T31423] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1856.358603][T31423] __sock_sendmsg+0x219/0x270 [ 1856.358627][T31423] ____sys_sendmsg+0x52d/0x830 [ 1856.358660][T31423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1856.358698][T31423] ? import_iovec+0x74/0xa0 [ 1856.358727][T31423] ___sys_sendmsg+0x21f/0x2a0 [ 1856.358758][T31423] ? __pfx____sys_sendmsg+0x10/0x10 [ 1856.358825][T31423] ? __fget_files+0x2a/0x420 [ 1856.358853][T31423] ? __fget_files+0x3a0/0x420 [ 1856.358893][T31423] __sys_sendmmsg+0x227/0x430 [ 1856.358926][T31423] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1856.358951][T31423] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1856.359002][T31423] ? ksys_write+0x22a/0x250 [ 1856.359028][T31423] ? __pfx_ksys_write+0x10/0x10 [ 1856.359050][T31423] ? rcu_is_watching+0x15/0xb0 [ 1856.359083][T31423] __x64_sys_sendmmsg+0xa0/0xc0 [ 1856.359124][T31423] do_syscall_64+0xfa/0x3b0 [ 1856.359143][T31423] ? lockdep_hardirqs_on+0x9c/0x150 [ 1856.359173][T31423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1856.359194][T31423] ? clear_bhb_loop+0x60/0xb0 [ 1856.359218][T31423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1856.359238][T31423] RIP: 0033:0x7f280af8e929 [ 1856.359257][T31423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1856.359275][T31423] RSP: 002b:00007f280bd20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1856.359296][T31423] RAX: ffffffffffffffda RBX: 00007f280b1b5fa0 RCX: 00007f280af8e929 [ 1856.359310][T31423] RDX: 032bc45944b084a6 RSI: 0000200000000180 RDI: 0000000000000004 [ 1856.359324][T31423] RBP: 00007f280bd20090 R08: 0000000000000000 R09: 0000000000000000 [ 1856.359336][T31423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1856.359348][T31423] R13: 0000000000000000 R14: 00007f280b1b5fa0 R15: 00007f280b2dfa28 [ 1856.359380][T31423] [ 1857.212075][T31436] netlink: 36 bytes leftover after parsing attributes in process `syz.8.7357'. [ 1857.348924][T31443] sch_fq: defrate 2147483648 ignored. [ 1857.686779][T22895] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1857.872222][T22895] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1857.886310][T22895] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.917013][T26837] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1857.969775][T22895] usb 9-1: Product: syz [ 1857.974023][T22895] usb 9-1: Manufacturer: syz [ 1857.979309][T22895] usb 9-1: SerialNumber: syz [ 1857.991277][T22895] usb 9-1: config 0 descriptor?? [ 1858.000735][T22895] hso 9-1:0.0: Not our interface [ 1858.006178][T22895] usb-storage 9-1:0.0: USB Mass Storage device detected [ 1858.127461][T26837] usb 7-1: Using ep0 maxpacket: 16 [ 1858.147515][T26837] usb 7-1: config 0 has no interfaces? [ 1858.160148][T26837] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1858.198685][T26837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1858.218944][T26837] usb 7-1: SerialNumber: syz [ 1858.240958][T26837] usb 7-1: config 0 descriptor?? [ 1858.264204][T26837] usb 9-1: USB disconnect, device number 5 [ 1858.546440][T26837] usb 7-1: USB disconnect, device number 46 [ 1859.746714][T17630] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1859.873464][T31510] FAULT_INJECTION: forcing a failure. [ 1859.873464][T31510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1859.932263][T17630] usb 9-1: Using ep0 maxpacket: 32 [ 1859.959970][T31510] CPU: 0 UID: 0 PID: 31510 Comm: syz.7.7376 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1859.959999][T31510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1859.960008][T31510] Call Trace: [ 1859.960015][T31510] [ 1859.960022][T31510] dump_stack_lvl+0x189/0x250 [ 1859.960044][T31510] ? __pfx____ratelimit+0x10/0x10 [ 1859.960068][T31510] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1859.960086][T31510] ? __pfx__printk+0x10/0x10 [ 1859.960115][T31510] should_fail_ex+0x414/0x560 [ 1859.960141][T31510] _copy_to_user+0x31/0xb0 [ 1859.960162][T31510] simple_read_from_buffer+0xe1/0x170 [ 1859.960186][T31510] proc_fail_nth_read+0x1df/0x250 [ 1859.960217][T31510] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1859.960241][T31510] ? rw_verify_area+0x258/0x650 [ 1859.960258][T31510] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1859.960281][T31510] vfs_read+0x200/0x980 [ 1859.960302][T31510] ? __pfx___mutex_lock+0x10/0x10 [ 1859.960317][T31510] ? __pfx_vfs_read+0x10/0x10 [ 1859.960336][T31510] ? __fget_files+0x2a/0x420 [ 1859.960360][T31510] ? __fget_files+0x3a0/0x420 [ 1859.960379][T31510] ? __fget_files+0x2a/0x420 [ 1859.960406][T31510] ksys_read+0x145/0x250 [ 1859.960422][T31510] ? __fget_files+0x3a0/0x420 [ 1859.960444][T31510] ? __pfx_ksys_read+0x10/0x10 [ 1859.960465][T31510] ? do_syscall_64+0xbe/0x3b0 [ 1859.960482][T31510] do_syscall_64+0xfa/0x3b0 [ 1859.960496][T31510] ? lockdep_hardirqs_on+0x9c/0x150 [ 1859.960518][T31510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1859.960533][T31510] ? clear_bhb_loop+0x60/0xb0 [ 1859.960550][T31510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1859.960565][T31510] RIP: 0033:0x7f769298d33c [ 1859.960578][T31510] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1859.960591][T31510] RSP: 002b:00007f76937ef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1859.960607][T31510] RAX: ffffffffffffffda RBX: 00007f7692bb5fa0 RCX: 00007f769298d33c [ 1859.960618][T31510] RDX: 000000000000000f RSI: 00007f76937ef0a0 RDI: 0000000000000004 [ 1859.960627][T31510] RBP: 00007f76937ef090 R08: 0000000000000000 R09: 0000000000000000 [ 1859.960636][T31510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1859.960645][T31510] R13: 0000000000000000 R14: 00007f7692bb5fa0 R15: 00007f7692cdfa28 [ 1859.960667][T31510] [ 1860.448624][T17630] usb 9-1: config index 0 descriptor too short (expected 65316, got 36) [ 1860.476101][T17630] usb 9-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 1860.510777][T17630] usb 9-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1860.544407][T17630] usb 9-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 1860.564715][T17630] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1860.579839][T17630] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1861.797348][T31540] loop2: detected capacity change from 0 to 7 [ 1861.808411][T31540] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 1861.843508][T31540] loop2: p1 start 811953257 is beyond EOD, truncated [ 1861.897114][T31540] loop2: p2 start 1650421353 is beyond EOD, truncated [ 1861.927354][T31540] loop2: p3 start 3184882576 is beyond EOD, truncated [ 1861.948689][T31540] loop2: p4 start 360999626 is beyond EOD, truncated [ 1861.980103][T31540] loop2: p5 start 3884050206 is beyond EOD, truncated [ 1862.194402][T31540] loop2: p6 start 537650420 is beyond EOD, truncated [ 1862.229782][T31540] loop2: p7 start 3276536533 is beyond EOD, truncated [ 1862.456956][T22895] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1862.657801][T22895] usb 7-1: Using ep0 maxpacket: 8 [ 1862.666178][T22895] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1862.740186][T22895] usb 7-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 1862.811470][T22895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.883291][ T8168] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1862.899634][T22895] usb 7-1: Product: syz [ 1862.903900][T22895] usb 7-1: Manufacturer: syz [ 1862.970205][T22895] usb 7-1: SerialNumber: syz [ 1862.993308][T22895] usb 7-1: config 0 descriptor?? [ 1863.023511][T22895] cdc_phonet 7-1:0.0: probe with driver cdc_phonet failed with error -22 [ 1863.063594][ T8168] usb 2-1: config 0 has no interfaces? [ 1863.077987][ T8168] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1863.090920][ T8168] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1863.130425][T31566] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7390'. [ 1863.154287][ T8168] usb 2-1: Product: syz [ 1863.175716][ T8168] usb 2-1: Manufacturer: syz [ 1863.223880][T22895] usb 7-1: USB disconnect, device number 47 [ 1863.235125][ T8168] usb 2-1: SerialNumber: syz [ 1863.336234][ T8168] usb 2-1: config 0 descriptor?? [ 1863.457432][ T8168] usb 9-1: USB disconnect, device number 6 [ 1863.686270][T31573] (unnamed net_device) (uninitialized): (slave lo): Device is not bonding slave [ 1863.712867][T31573] (unnamed net_device) (uninitialized): option active_slave: invalid value (lo) [ 1863.746757][T17630] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1863.955537][T17630] usb 5-1: Using ep0 maxpacket: 32 [ 1864.097532][T17630] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1864.152520][T17630] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1864.192992][T17630] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1864.217855][T17630] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1864.289759][T17630] usb 5-1: config 0 descriptor?? [ 1864.363063][T31586] netlink: 'syz.8.7395': attribute type 11 has an invalid length. [ 1865.066717][T26835] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1865.728974][T26835] usb 9-1: Using ep0 maxpacket: 16 [ 1865.764942][T26835] usb 9-1: config 0 has no interfaces? [ 1865.807798][T26835] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1865.825839][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1865.825867][ T30] audit: type=1800 audit(1751668658.868:1281): pid=31598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7397" name="card6" dev="devtmpfs" ino=7006 res=0 errno=0 [ 1865.849783][T26835] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1865.901248][T26835] usb 9-1: SerialNumber: syz [ 1865.938306][T26835] usb 9-1: config 0 descriptor?? [ 1866.191123][T31591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1866.271885][T31591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1866.359124][T26835] usb 9-1: USB disconnect, device number 7 [ 1867.365859][ T8167] usb 2-1: USB disconnect, device number 87 [ 1867.827122][ T8167] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1868.004938][ T8167] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1868.042527][ T8167] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1868.057232][T17630] usbhid 5-1:0.0: can't add hid device: -71 [ 1868.063338][T17630] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1868.071603][ T8167] usb 2-1: Product: syz [ 1868.078337][T17630] usb 5-1: USB disconnect, device number 79 [ 1868.087960][ T8167] usb 2-1: Manufacturer: syz [ 1868.092647][ T8167] usb 2-1: SerialNumber: syz [ 1868.174792][ T8167] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1868.224264][T22895] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1868.300486][ T8168] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1868.467315][ T8168] usb 7-1: Using ep0 maxpacket: 16 [ 1868.485555][ T8168] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1868.507044][ T8168] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1868.540247][ T8168] usb 7-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 1868.573001][ T8168] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1868.592226][ T8168] usb 7-1: config 0 descriptor?? [ 1868.635490][T17630] usb 2-1: USB disconnect, device number 88 [ 1868.775665][T31633] (unnamed net_device) (uninitialized): (slave lo): Device is not bonding slave [ 1868.786067][T31633] (unnamed net_device) (uninitialized): option active_slave: invalid value (lo) [ 1869.043163][T31636] FAULT_INJECTION: forcing a failure. [ 1869.043163][T31636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1869.066921][T31636] CPU: 1 UID: 0 PID: 31636 Comm: syz.8.7405 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1869.066951][T31636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1869.066964][T31636] Call Trace: [ 1869.066973][T31636] [ 1869.066982][T31636] dump_stack_lvl+0x189/0x250 [ 1869.067013][T31636] ? __pfx____ratelimit+0x10/0x10 [ 1869.067046][T31636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1869.067071][T31636] ? __pfx__printk+0x10/0x10 [ 1869.067100][T31636] ? __might_fault+0xb0/0x130 [ 1869.067136][T31636] should_fail_ex+0x414/0x560 [ 1869.067173][T31636] _copy_from_iter+0x1db/0x16f0 [ 1869.067197][T31636] ? policy_nodemask+0x27c/0x720 [ 1869.067231][T31636] ? __pfx__copy_from_iter+0x10/0x10 [ 1869.067252][T31636] ? set_page_refcounted+0xa0/0x1e0 [ 1869.067278][T31636] ? alloc_pages_noprof+0xbe/0x190 [ 1869.067307][T31636] ? skb_page_frag_refill+0x199/0x320 [ 1869.067343][T31636] udplite_getfrag+0x42/0xb0 [ 1869.067372][T31636] __ip6_append_data+0x2178/0x3de0 [ 1869.067423][T31636] ? __pfx_udplite_getfrag+0x10/0x10 [ 1869.067474][T31636] ? __pfx___ip6_append_data+0x10/0x10 [ 1869.067507][T31636] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1869.067546][T31636] ip6_append_data+0x1c4/0x380 [ 1869.067579][T31636] ? __pfx_udplite_getfrag+0x10/0x10 [ 1869.067608][T31636] udpv6_sendmsg+0xd67/0x2710 [ 1869.067651][T31636] ? __pfx_udplite_getfrag+0x10/0x10 [ 1869.067682][T31636] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1869.067716][T31636] ? __pfx___might_resched+0x10/0x10 [ 1869.067759][T31636] ? aa_sk_perm+0x81e/0x950 [ 1869.067792][T31636] ? __lock_acquire+0xab9/0xd20 [ 1869.067821][T31636] ? inet_send_prepare+0x5c/0x270 [ 1869.067846][T31636] ? inet6_sendmsg+0xe4/0x120 [ 1869.067870][T31636] __sock_sendmsg+0xe5/0x270 [ 1869.067894][T31636] ____sys_sendmsg+0x52d/0x830 [ 1869.067928][T31636] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1869.067966][T31636] ? import_iovec+0x74/0xa0 [ 1869.067993][T31636] ___sys_sendmsg+0x21f/0x2a0 [ 1869.068023][T31636] ? __pfx____sys_sendmsg+0x10/0x10 [ 1869.068085][T31636] ? __fget_files+0x2a/0x420 [ 1869.068112][T31636] ? __fget_files+0x3a0/0x420 [ 1869.068152][T31636] __sys_sendmmsg+0x227/0x430 [ 1869.068184][T31636] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1869.068209][T31636] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1869.068259][T31636] ? ksys_write+0x22a/0x250 [ 1869.068287][T31636] ? __pfx_ksys_write+0x10/0x10 [ 1869.068309][T31636] ? rcu_is_watching+0x15/0xb0 [ 1869.068340][T31636] __x64_sys_sendmmsg+0xa0/0xc0 [ 1869.068370][T31636] do_syscall_64+0xfa/0x3b0 [ 1869.068390][T31636] ? lockdep_hardirqs_on+0x9c/0x150 [ 1869.068420][T31636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1869.068440][T31636] ? clear_bhb_loop+0x60/0xb0 [ 1869.068465][T31636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1869.068484][T31636] RIP: 0033:0x7f5f14f8e929 [ 1869.068503][T31636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1869.068521][T31636] RSP: 002b:00007f5f15e01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1869.068551][T31636] RAX: ffffffffffffffda RBX: 00007f5f151b5fa0 RCX: 00007f5f14f8e929 [ 1869.068566][T31636] RDX: 0000000000000001 RSI: 0000200000019880 RDI: 0000000000000003 [ 1869.068579][T31636] RBP: 00007f5f15e01090 R08: 0000000000000000 R09: 0000000000000000 [ 1869.068592][T31636] R10: 000000002604082c R11: 0000000000000246 R12: 0000000000000001 [ 1869.068605][T31636] R13: 0000000000000000 R14: 00007f5f151b5fa0 R15: 00007f5f152dfa28 [ 1869.068636][T31636] [ 1869.089547][ T8168] nzxt-kraken2 0003:1E71:170E.004E: hidraw0: USB HID v0.00 Device [HID 1e71:170e] on usb-dummy_hcd.6-1/input0 [ 1869.466738][T22895] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1869.473911][T22895] ath9k_htc: Failed to initialize the device [ 1869.498993][T17630] usb 2-1: ath9k_htc: USB layer deinitialized [ 1869.521027][T31639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7403'. [ 1870.129560][T31657] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7408'. [ 1870.284161][ T8168] usb 7-1: USB disconnect, device number 48 [ 1870.541423][T26835] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1870.697253][T26835] usb 2-1: Using ep0 maxpacket: 16 [ 1870.725573][T26835] usb 2-1: config 0 has no interfaces? [ 1870.732544][T26835] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1870.742238][T26835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1870.762449][T26835] usb 2-1: SerialNumber: syz [ 1870.782108][T26835] usb 2-1: config 0 descriptor?? [ 1870.992505][T31656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1871.002685][T31656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1871.055411][T26842] usb 2-1: USB disconnect, device number 89 [ 1871.119357][T31675] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1871.281391][T31679] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7413'. [ 1871.319199][T31675] netlink: 64 bytes leftover after parsing attributes in process `syz.7.7413'. [ 1871.918890][T31691] loop2: detected capacity change from 0 to 7 [ 1871.929265][T31691] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 1872.008437][T31691] loop2: p1 start 811953257 is beyond EOD, truncated [ 1872.096643][T31691] loop2: p2 start 1650421353 is beyond EOD, truncated [ 1872.103516][T31691] loop2: p3 start 3184882576 is beyond EOD, truncated [ 1872.258477][T31691] loop2: p4 start 360999626 is beyond EOD, truncated [ 1872.265440][T31691] loop2: p5 start 3884050206 is beyond EOD, truncated [ 1872.293317][T31691] loop2: p6 start 537650420 is beyond EOD, truncated [ 1872.313757][T31691] loop2: p7 start 3276536533 is beyond EOD, truncated [ 1872.659943][T31698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7416'. [ 1872.831545][T31701] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7417'. [ 1873.273923][ T8168] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1873.395774][ T30] audit: type=1326 audit(1751668666.368:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31704 comm="syz.1.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3838e929 code=0x7ffc0000 [ 1873.591441][ T8168] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1873.644985][ T8168] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1873.660869][ T30] audit: type=1326 audit(1751668666.368:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31704 comm="syz.1.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3838e929 code=0x7ffc0000 [ 1873.683744][ T8168] usb 7-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1873.693264][ T8168] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1873.703555][ T30] audit: type=1326 audit(1751668666.368:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31704 comm="syz.1.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fbe3838e929 code=0x7ffc0000 [ 1873.727231][ T8168] usb 7-1: config 0 descriptor?? [ 1873.810918][ T30] audit: type=1326 audit(1751668666.368:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31704 comm="syz.1.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3838e929 code=0x7ffc0000 [ 1873.858233][T31675] team0 (unregistering): Port device team_slave_0 removed [ 1873.882505][T31675] team0 (unregistering): Port device team_slave_1 removed [ 1873.983830][ T30] audit: type=1326 audit(1751668666.368:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31704 comm="syz.1.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3838e929 code=0x7ffc0000 [ 1874.057946][ T30] audit: type=1326 audit(1751668666.368:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31704 comm="syz.1.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe3838d290 code=0x7ffc0000 [ 1874.149405][ T8168] usbhid 7-1:0.0: can't add hid device: -71 [ 1874.161431][ T8168] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1874.176767][ T30] audit: type=1326 audit(1751668666.368:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31704 comm="syz.1.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe3838d290 code=0x7ffc0000 [ 1874.304094][ T8168] usb 7-1: USB disconnect, device number 49 [ 1874.399388][ T30] audit: type=1326 audit(1751668666.368:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31704 comm="syz.1.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3838e929 code=0x7ffc0000 [ 1874.469777][ T30] audit: type=1326 audit(1751668666.368:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31704 comm="syz.1.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbe3838e929 code=0x7ffc0000 [ 1874.559371][ T30] audit: type=1326 audit(1751668666.368:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31704 comm="syz.1.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3838e929 code=0x7ffc0000 [ 1875.120209][ T8168] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1875.308490][ T8168] usb 2-1: Using ep0 maxpacket: 16 [ 1875.379064][ T8168] usb 2-1: config 0 has no interfaces? [ 1875.386293][ T8168] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1875.443835][ T8168] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1875.480227][ T8168] usb 2-1: SerialNumber: syz [ 1875.506783][T22895] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1875.530015][ T8168] usb 2-1: config 0 descriptor?? [ 1875.550027][T31742] netlink: 'syz.7.7426': attribute type 11 has an invalid length. [ 1875.680190][T22895] usb 7-1: Using ep0 maxpacket: 32 [ 1875.752334][T22895] usb 7-1: config index 0 descriptor too short (expected 65316, got 36) [ 1875.761539][T22895] usb 7-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 1875.791147][T31729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1875.809121][T22895] usb 7-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1875.837773][T31729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1875.857583][T22895] usb 7-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 1875.893490][ T8168] usb 2-1: USB disconnect, device number 90 [ 1875.924353][T22895] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1875.936420][T31751] FAULT_INJECTION: forcing a failure. [ 1875.936420][T31751] name failslab, interval 1, probability 0, space 0, times 0 [ 1875.953777][T22895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.972180][T31751] CPU: 0 UID: 0 PID: 31751 Comm: syz.4.7428 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1875.972211][T31751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1875.972224][T31751] Call Trace: [ 1875.972232][T31751] [ 1875.972242][T31751] dump_stack_lvl+0x189/0x250 [ 1875.972270][T31751] ? __pfx____ratelimit+0x10/0x10 [ 1875.972310][T31751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1875.972335][T31751] ? __pfx__printk+0x10/0x10 [ 1875.972369][T31751] ? __pfx___might_resched+0x10/0x10 [ 1875.972393][T31751] ? fs_reclaim_acquire+0x7d/0x100 [ 1875.972427][T31751] should_fail_ex+0x414/0x560 [ 1875.972464][T31751] should_failslab+0xa8/0x100 [ 1875.972496][T31751] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1875.972521][T31751] ? skb_clone+0x212/0x3a0 [ 1875.972561][T31751] skb_clone+0x212/0x3a0 [ 1875.972593][T31751] pfkey_sendmsg+0x44b/0x1090 [ 1875.972636][T31751] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1875.972688][T31751] ? aa_sock_msg_perm+0x94/0x160 [ 1875.972723][T31751] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1875.972742][T31751] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1875.972767][T31751] __sock_sendmsg+0x219/0x270 [ 1875.972791][T31751] ____sys_sendmsg+0x52d/0x830 [ 1875.972825][T31751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1875.972863][T31751] ? import_iovec+0x74/0xa0 [ 1875.972893][T31751] ___sys_sendmsg+0x21f/0x2a0 [ 1875.972924][T31751] ? __pfx____sys_sendmsg+0x10/0x10 [ 1875.973024][T31751] ? __might_fault+0xb0/0x130 [ 1875.973054][T31751] __sys_sendmmsg+0x227/0x430 [ 1875.973089][T31751] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1875.973115][T31751] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1875.973165][T31751] ? ksys_write+0x22a/0x250 [ 1875.973192][T31751] ? __pfx_ksys_write+0x10/0x10 [ 1875.973215][T31751] ? rcu_is_watching+0x15/0xb0 [ 1875.973248][T31751] __x64_sys_sendmmsg+0xa0/0xc0 [ 1875.973279][T31751] do_syscall_64+0xfa/0x3b0 [ 1875.973315][T31751] ? lockdep_hardirqs_on+0x9c/0x150 [ 1875.973347][T31751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1875.973368][T31751] ? clear_bhb_loop+0x60/0xb0 [ 1875.973394][T31751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1875.973415][T31751] RIP: 0033:0x7f4a5738e929 [ 1875.973434][T31751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1875.973453][T31751] RSP: 002b:00007f4a581c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1875.973476][T31751] RAX: ffffffffffffffda RBX: 00007f4a575b5fa0 RCX: 00007f4a5738e929 [ 1875.973491][T31751] RDX: 032bc45944b084a6 RSI: 0000200000000180 RDI: 0000000000000004 [ 1875.973506][T31751] RBP: 00007f4a581c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1875.973519][T31751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1875.973532][T31751] R13: 0000000000000000 R14: 00007f4a575b5fa0 R15: 00007f4a576dfa28 [ 1875.973564][T31751] [ 1876.410462][T31755] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7429'. [ 1876.777905][T26842] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1876.883665][T31763] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7431'. [ 1876.901180][T20733] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1876.982603][T26835] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1877.006822][T26842] usb 9-1: Using ep0 maxpacket: 8 [ 1877.022892][T26842] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1877.037790][T26842] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.064944][T26842] usb 9-1: Product: syz [ 1877.091084][T26842] usb 9-1: Manufacturer: syz [ 1877.120636][T26842] usb 9-1: SerialNumber: syz [ 1877.148376][T26842] usb 9-1: config 0 descriptor?? [ 1877.167018][T26835] usb 5-1: Using ep0 maxpacket: 32 [ 1877.176421][T26835] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1877.188425][T26842] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1877.206393][T26835] usb 5-1: config 0 has no interface number 0 [ 1877.222566][T26835] usb 5-1: config 0 interface 2 has no altsetting 0 [ 1877.229878][T26842] usb 9-1: setting power ON [ 1877.244804][T26842] dvb-usb: bulk message failed: -22 (2/0) [ 1877.255722][T26835] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1877.272625][T26835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.293391][T26842] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1877.305747][T26835] usb 5-1: Product: syz [ 1877.312313][T26835] usb 5-1: Manufacturer: syz [ 1877.324656][T26842] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1877.342800][T26835] usb 5-1: SerialNumber: syz [ 1877.350657][T26842] usb 9-1: media controller created [ 1877.370685][T26835] usb 5-1: config 0 descriptor?? [ 1877.434032][T26842] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1877.522077][T26842] usb 9-1: selecting invalid altsetting 6 [ 1877.533146][T26842] usb 9-1: digital interface selection failed (-22) [ 1877.544173][T26842] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1877.571146][T26842] usb 9-1: setting power OFF [ 1877.576540][T26842] dvb-usb: bulk message failed: -22 (2/0) [ 1877.627777][T26842] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1877.644927][T26835] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1877.655208][T26835] usb 5-1: invalid MIDI out EP 0 [ 1877.698285][T26842] (NULL device *): no alternate interface [ 1877.815625][T26835] snd-usb-audio 5-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 1877.833152][T26842] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1877.954231][T26835] usb 5-1: USB disconnect, device number 80 [ 1878.007248][T10671] udevd[10671]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1878.107484][ T8168] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 1878.276457][T26835] usb 7-1: USB disconnect, device number 50 [ 1878.460574][ T8168] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1878.501434][ T8168] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1878.666703][ T8168] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1878.701296][ T8168] usb 2-1: config 0 descriptor?? [ 1878.815856][T22895] usb 9-1: USB disconnect, device number 8 [ 1878.886976][ T8169] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1879.130054][ T8169] usb 5-1: Using ep0 maxpacket: 16 [ 1879.157206][ T8168] elo 0003:04E7:0009.004F: unknown main item tag 0x0 [ 1879.179357][ T8169] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 1879.205466][ T8169] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1879.214168][ T8168] elo 0003:04E7:0009.004F: unknown main item tag 0x0 [ 1879.231683][ T8169] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1879.247313][ T8168] elo 0003:04E7:0009.004F: hidraw0: USB HID v80.00 Device [HID 04e7:0009] on usb-dummy_hcd.1-1/input0 [ 1879.264659][ T8169] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1879.280069][ T8169] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1879.291183][ T8169] usb 5-1: config 0 has no interface number 0 [ 1879.303897][ T8169] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1879.330297][ T8169] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1879.374018][ T8168] usb 2-1: USB disconnect, device number 91 [ 1879.385876][ T8169] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1879.441353][ T8169] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1879.486153][ T8169] usb 5-1: config 0 interface 125 has no altsetting 0 [ 1879.514331][T31793] fido_id[31793]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1879.529361][ T8169] usb 5-1: config 0 interface 125 has no altsetting 2 [ 1879.558662][ T8169] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1879.578107][ T8169] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1879.614306][ T8169] usb 5-1: Product: syz [ 1879.625456][ T8169] usb 5-1: Manufacturer: syz [ 1879.643915][ T8169] usb 5-1: SerialNumber: syz [ 1879.686172][ T8169] usb 5-1: config 0 descriptor?? [ 1879.732631][ T8169] usb 5-1: selecting invalid altsetting 2 [ 1879.928643][T31804] ALSA: mixer_oss: invalid OSS volume '' [ 1879.948206][T31804] netlink: 'syz.6.7438': attribute type 21 has an invalid length. [ 1879.962725][T31804] netlink: 128 bytes leftover after parsing attributes in process `syz.6.7438'. [ 1879.990013][T31804] netlink: 'syz.6.7438': attribute type 4 has an invalid length. [ 1880.020617][T31804] netlink: 'syz.6.7438': attribute type 5 has an invalid length. [ 1880.044423][T31804] netlink: 3 bytes leftover after parsing attributes in process `syz.6.7438'. [ 1880.186996][T31809] netlink: 'syz.8.7439': attribute type 11 has an invalid length. [ 1882.415513][T17630] usb 5-1: USB disconnect, device number 81 [ 1896.396857][T31944] Bluetooth: hci4: command 0x0406 tx timeout [ 1914.803912][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.810432][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1932.236941][T31944] Bluetooth: hci5: command 0x0406 tx timeout [ 1976.241574][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.248809][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.682222][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.690152][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.123863][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.130796][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.561856][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.568379][ T1301] ieee802154 phy1 wpan1: encryption failed: -22