last executing test programs: 18m16.765167505s ago: executing program 4 (id=4495): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket(0xa, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) bind$rds(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {0x0}], 0x1fc}, 0x0, 0x40000000, 0x1}) r4 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r4, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) getsockopt$sock_int(r3, 0x1, 0x2c, 0x0, &(0x7f0000000200)) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0xd2) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) close(r2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = socket(0x840000000002, 0x3, 0x100) connect$inet(r9, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r9, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, 0x0, 0x0) r10 = dup(r8) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x3, 0x0, 0x0) connect$tipc(r10, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x4, 0x1}}, 0x10) 18m16.391352786s ago: executing program 4 (id=4497): socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = timerfd_create(0x0, 0x80000) timerfd_settime(r0, 0x1, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r2, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0xfe05a, 0x5000, 0x0, 0x0, 0xc}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000009800)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="5001000000000000000000000000000003000000000000000100000000000000000000000000000000000000000000000000010002000000000000000000000000000000000000000000000000000000c75f000000000000c900"/109, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="00000000fcffffff0000000000000000000000000000000000000000080000000200000067726f75705f696403"], 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) r6 = getpid() capget(&(0x7f0000000080)={0x20071026, r6}, &(0x7f0000000100)={0x9b9, 0x81, 0x1000, 0xc126, 0xfffffff9, 0x8}) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b5010203010902120001000000000904"], 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x4c, 0x0, 0x8, 0x103, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xa}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x327240, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x7}}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r11, &(0x7f0000000980), 0xfdef) splice(r8, 0x0, r11, 0x0, 0x80, 0x4) read(r8, &(0x7f0000000800)=""/217, 0xd9) read$FUSE(r10, &(0x7f0000000980)={0x2020}, 0x2020) write$nbd(r10, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) 18m13.053844189s ago: executing program 4 (id=4511): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$uac1(r0, 0x0, 0x0) (rerun: 32) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000080)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r0, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x20, 0x31, 0x8c, {0x8c, 0x31, "631d7ceca134843053b3b8d57fc24e2e0a94b8c22bc2d818c3cbccf820e7a4895b17450eda01e428044335ebb797d591ae3596a8541a8c005456cda9de80f80ba736338642f7777555efe339ef7efc81f359175237030a14d4cb3140571904252c69618ad73dd31e0b184c507a1de7ddef03174a7d615610d728f6b68cfc54c10a947d6b2dfcb81b48d8"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x827}}}, &(0x7f0000000440)={0x34, &(0x7f0000000200)={0x0, 0xf, 0x22, "4f631f75abd8752a93b5603ca76021a450a44cd51d3dbf27a6b5d01a6f4ff23aecd4"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x5f}, &(0x7f00000002c0)={0xc0, 0xa1, 0x4, 0x4}, &(0x7f0000000300)={0x40, 0xa0, 0x4, 0x4}, &(0x7f0000000380)={0xc0, 0xa2, 0x2f, "c56bcdff75e2c401df01e3ee2686e1d233b8453679158adc292ac027e84c698d2e62398f200c1b08cdb1afa959068e"}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x0) 18m12.029749453s ago: executing program 4 (id=4517): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400102, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) open_tree(r4, &(0x7f0000000080)='.\x00', 0x9001) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r6 = socket(0x2, 0x80805, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) 18m11.967420492s ago: executing program 4 (id=4518): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xb0, 0x13, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x74, 0x8, "6b29d747a350a3b9cb57edcee2dd798b8b6c145ea96e51f08b5a60f788fd302bd4489756ec734885c90211d2152d71e37c3e5576a80361018c27dcb1f5faf10a57c0f5ce032b700b898e3a8391152bf5b6527aa7dae48000dd84091a7326e0b287c74f817adef9d3d89d731865432988"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 18m11.772189781s ago: executing program 4 (id=4519): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)={0x34, r2, 0x431, 0x70bd2a, 0x259fdc00, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000000) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x40001, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = fanotify_init(0x200, 0x0) r7 = dup(0xffffffffffffffff) fanotify_mark(r6, 0x1, 0x48001059, r7, 0x0) r8 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r8, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r5, 0x80044dfd, &(0x7f0000000240)) syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d4ee0620cf10618012b70102030109022d00010000100009040600024f1ce80009050202000202000009058202"], 0x0) 18m11.476659385s ago: executing program 32 (id=4519): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)={0x34, r2, 0x431, 0x70bd2a, 0x259fdc00, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000000) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x40001, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = fanotify_init(0x200, 0x0) r7 = dup(0xffffffffffffffff) fanotify_mark(r6, 0x1, 0x48001059, r7, 0x0) r8 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r8, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r5, 0x80044dfd, &(0x7f0000000240)) syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d4ee0620cf10618012b70102030109022d00010000100009040600024f1ce80009050202000202000009058202"], 0x0) 17m57.433855449s ago: executing program 2 (id=4561): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x4c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005"], 0x7c}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 17m56.532115365s ago: executing program 2 (id=4564): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1a00000004000000000000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000ffa04039cb89230220b35ded421a28c043"], 0x48) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x20000000005, 0x4a}, 0xd8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x80, 0x8000, 0x6, 0x7fffffff, {{0x13, 0x4, 0x3, 0x34, 0x4c, 0x65, 0x0, 0xcb, 0x2f, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010101, {[@ssrr={0x89, 0xf, 0x44, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x15}, @empty]}, @timestamp={0x44, 0xc, 0x4c, 0x0, 0x1, [0x2, 0x8]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x61, 0x0, 0x2, [0x2, 0xd, 0x4]}, @lsrr={0x83, 0x7, 0xe3, [@private=0xa010102]}]}}}}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9b, 0x9b, 0xa, [@typedef={0x8, 0x0, 0x0, 0x8, 0x4}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x5}, @func={0xb, 0x0, 0x0, 0xc, 0x4}, @const={0xf, 0x0, 0x0, 0xa, 0x3}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x5, 0x9}, @datasec={0xb, 0x2, 0x0, 0xf, 0x3, [{0x4, 0x2, 0xdc22}, {0x5, 0x2, 0x7}], "b32ad3"}, @var={0x1, 0x0, 0x0, 0xe, 0x3, 0x2}, @const={0x2, 0x0, 0x0, 0xa, 0x2}, @volatile={0xa}, @volatile={0x7}]}, {0x0, [0x5f, 0x2e, 0x30, 0x5f, 0x2e, 0x61, 0x2e, 0x61]}}, &(0x7f0000000240)=""/159, 0xbe, 0x9f, 0x0, 0x7}, 0x28) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r5 = accept4(r4, &(0x7f0000000580)=@nfc_llcp, &(0x7f0000000600)=0x80, 0x80800) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x5ad, 0x1, 0x5, 0x480, r1, 0xa, '\x00', r2, r3, 0x5, 0x2, 0x9, 0xf}, 0x50) getsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000140)={@private2}, &(0x7f0000000180)=0x14) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) close(r0) 17m56.113842543s ago: executing program 2 (id=4566): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x17d0, &(0x7f0000000240)={0x0, 0x0, 0x80, 0x0, 0x4}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x1, 0x3, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x4, r0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) r4 = syz_open_dev$video(&(0x7f0000000300), 0x2, 0x101480) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000340)={0x8, @raw_data="b0facc465e1382ff7ac081c3f7362eee384397b8112923dcbd9325cf438113d2d313f1358e43908976ec402d7677a149b6a0b4288275e3d856920be02c26fd76cb3c19a7aa3fc6c18031084df892cde1fbd8775b94441efa1410ca20a50e45bd84ab21cbd26587fc896198aac6ef8a08ad94e30a0d9cc08bd5ffbf9f0b0dd92fe4f23304aaf87bf51691153c8bfa0bfba907fcc56788a737a970913038d2a9766f67c4a130690e4b8b3b22f6e0e6816d8522bad8dd412ca5686958b6c4cb2a9e3084ef9c5ac09dd7"}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r6, 0x4068aea3, &(0x7f0000000140)={0xa8, 0x0, 0x1}) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000f000/0x2000)=nil}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x14}}, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xa005, 0x10100}, 0x0, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$EVIOCSMASK(r7, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(r7, 0x80104592, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000040)="8793eae825bb72c40f"}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000440)={{0x0, 0x1, 0x6, 0x0, 0x6}}) socket$nl_route(0x10, 0x3, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000940)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000080)={r9, 0x1, r8, 0x120000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x4000004, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000200)={'syztnl0\x00', r12, 0x40, 0x40, 0x7c, 0xfffffffc, {{0x6, 0x4, 0x1, 0x31, 0x18, 0x67, 0x0, 0xe, 0x29, 0x0, @remote, @multicast1, {[@generic={0x89, 0x4, "a88c"}]}}}}}) sendto$packet(r11, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r12}, 0x14) 17m54.009136685s ago: executing program 2 (id=4570): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="000058c60c2a690542cab56b47b8d13aaf8a5f330d32cdd18271112852523b774b2e3c5a4fb6a3dd11aa94a5ecc4b3923307fd82d8cbb9498b5da8412dc59494caa648b4c94f4d86a3c5e7c312c41d02b7501bca7c9f6f2f463bbe4de7d972131c87158019dbbce5a093101c7bf66de3155e5e93830872f631150d5971aa20f6dc631ff0d88bcbd3877f036ab21596c7"], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) landlock_restrict_self(r1, 0x6bb0d98eae4f1500) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6fe7427c8b8a5f3a9413b40d8849b40fb0128704f746dec2ef1218885ce7f8fad839950dc4dc8cb3c921b5d3f5f589056e8ec255210e6b1fbbbe7815c32eeb73c1fe25f76f6f205654f5d10ca7bc468af31c1099a3af61c9c95f8c439a18dfefbcc6f13b72f1b19419fd90691515d5", @ANYRES16=r4, @ANYBLOB="01002dbd7000fddbdf250b00000008000300", @ANYRES32=r6, @ANYBLOB="04006e80"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x87}, {0x3c}, {0x6}]}) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 17m52.775622556s ago: executing program 2 (id=4572): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x1cef000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x100) madvise(&(0x7f0000772000/0x1000)=nil, 0x1000, 0x14) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00', 0x0, [0x5, 0x7, 0x5, 0x896, 0x400]}, &(0x7f0000000000)=0x54) syz_usb_control_io$printer(r0, 0x0, 0x0) unshare(0x22020600) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b80)={0x34, &(0x7f0000000c40)=ANY=[@ANYBLOB="0000790000004149e841fd71f203a219733566f1ecb5f35de6401fe9d74634bafaf59cfb2212a8058844b679660d82a07a1a616ff42b589ef770e43234bd2e034cbefb6f9b2d635daf56"], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000140)={0x0, 0x9, 0xffffffff, 0x1}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000001180)={0x2, 0xcb, @start={r3, 0x1, "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", "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"}, [0x9d4d, 0x4, 0x3, 0x8, 0x2, 0x6, 0x7fff, 0x8, 0x10000, 0x0, 0xb0, 0xb, 0x1, 0x9, 0x7, 0x4, 0x1, 0x3, 0x8, 0x5, 0x7d, 0xffffffffffffffff, 0x2, 0xb, 0x3, 0x8, 0x1, 0x3, 0x97, 0x0, 0x2d, 0xe, 0x5, 0x4, 0xffffffffffffffff, 0x8, 0x400, 0x2bf2, 0x1, 0x0, 0xb, 0x40, 0xf, 0x1, 0x7e, 0x6, 0x2, 0x1, 0x8, 0x2, 0x9, 0x7, 0x0, 0xfffffffffffffff9, 0x1317, 0x5, 0x7, 0xfffffffffffffffd, 0x8, 0x3, 0x800, 0xffffffffffff8000, 0x10, 0x3e26]}) 17m52.349381831s ago: executing program 2 (id=4576): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000000)={0x1, 0x0, {0x1, 0x4, 0x100e, 0x0, 0x4, 0x4, 0x0, 0x7}}) 17m51.494913737s ago: executing program 33 (id=4576): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000000)={0x1, 0x0, {0x1, 0x4, 0x100e, 0x0, 0x4, 0x4, 0x0, 0x7}}) 14m26.320152261s ago: executing program 6 (id=5389): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x1, 0x18080) (async) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x1, 0x18080) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x8c, 0x0, 0x81}]}) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa", @ANYRESDEC=r2], 0x58}}, 0x0) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r6, 0xa, 0x13) fcntl$setlease(r6, 0x400, 0x0) openat$incfs(r6, &(0x7f0000000080)='.pending_reads\x00', 0x40, 0x80) (async) r7 = openat$incfs(r6, &(0x7f0000000080)='.pending_reads\x00', 0x40, 0x80) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x10b}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x10b}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x200000000000000, &(0x7f0000000580)='h'}) r10 = dup3(r9, r8, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000200)=[@request_death], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000200)=[@request_death], 0x0, 0x0, 0x0}) r11 = syz_open_dev$vim2m(0x0, 0x10001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r11, 0xc0405602, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffffb, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r12, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x400000}, 0x68) (async) connect$unix(r12, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x400000}, 0x68) sendmmsg$unix(r13, &(0x7f0000001380)=[{{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000040)="626a343a4062fc8ad3", 0x9}, {&(0x7f0000000340)="35240ac896104d875e60d882bc7c869f706851468aa5507e2e94419c33fd50e4520ec58e5ab9cf105706a6", 0x2b}, {&(0x7f0000000380)="daf0c1bf3d3d09b28d1c6938b6a7c1b4ce11e940e13dd3342f99071a6631007e57e398fd11885a0155874af46aa39fac505c67aa20b5fad243a96cbdd1220de88321e1a2044de2cba165", 0x4a}, {&(0x7f0000000440)="94d15333b30b999c3e132c11f9d27fb4574652bff94d9e14d6d65f581fcc213cc725b5d7587d99819379f0de9876da358ebd6ecd58fc169be3df87a9458620b5e8f8630a531662429d2b62a9df4391402fba26f5a507fa64ec37509b414619103cbbbb5d03025b226f4745a6429e461d7761e0a9548315596266608f75befd1f5921d8c101f8ae7aaef802e7a5120e5b3d26cf", 0x93}, {&(0x7f00000005c0)="e0c6bc4f6b2ee89ba120313d39bf120114a141e689455946e916a7c9ac25e26e35ccc24874debd2079f14e2c28beb0c16d5c2d8c3ef1fbd52cb2e5f161dd3c3fab7f1100a66e76e0096ee5271ae23e9da9bfa2a3e0eba7d7d34acfd0b06e26d80eecd9d1aae9be2870fa0bd439e6aa8a9a5d4cdffb1cee11f2c457201ec8cc70816a6ee141f960f2d7a39dadfee73e9ed56b243796a5b787fafc3ca15355a169107ae7e8bca85df78a59b64106a4ecd27c748a5e4adcafee2a7798851c", 0xbd}, {&(0x7f0000000500)="47c4eb", 0x3}, {&(0x7f0000000680)="b615b64e4c4e38dd3a839fdcdfe7b9b3ef6cb7f2797aa83b87cda114c5dfce30b4ad2701a3594f3fbbb21f6f50cd3d35204f1a86df60b0fae59062487e2aea8ad5e564703e443d9b193b270ec72953bcbf7c46699eea56629efae6e470bf830c2f7c233958104a80febd3d972f85bae2ad5a418fb4109a30bd3bde76bf98c079325ed1b68638658c1360497316224d2dccd6b98c", 0x94}, {&(0x7f0000000740)="b953a7eef04a47f35f1a3b196f7dcd2094c0359e9c4792a0ba41c4cf290d56ae2aa869c7d766fe6d178526c89a860bef30b20d52bf3da310da007b5909a31b04e2803bb05ec6258c1defabf19d9ce9f1b0bd4c8ac675ba2b66141ac9ad669ec528858fd6c9575600b0f48d81be49ebb8d09c509f86d71805446635c90d949f0e312bd89875b23e3fd98011a97e172e5100b8214e348db6bd67a78fe3b5be1126a73bd14e024ed87682bb4005037f", 0xae}, {&(0x7f0000000800)="1147d2", 0x3}, {&(0x7f0000000840)="d4c9ce6626942b653ae3a313a0144617c49402d98c83245a475a64fa1c562bb666c5aa75999b9a39b99e0313179ffd8f152fa1ab799ab08cd19b286cb58d6ec180668b40b90fdc55ea3e49f32606c2825036c96df6eac96421c0bb674930d7d38d4da60452c0392af20302f50261e5bb715edbbab51d5636155feb15c6f563a5ef68edb2d8ae8be7e92b6f5d8c64bfe41186bb0aea3e30befd437f2afb5202a61133f5c3f6c16d4c571788cb3963971fa4e98e8414d481a0856fb220ec23a95373eec1e652d8df67b485401dbb0e68191165363dd866ba93864dd00043bdac48", 0xe0}], 0xa, &(0x7f0000000dc0)=[@rights={{0x14, 0x1, 0x1, [r11]}}, @rights={{0x18, 0x1, 0x1, [r11, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r0]}}, @cred={{0x1c}}], 0x98, 0xc884}}, {{&(0x7f0000000ec0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001240)=[{&(0x7f0000000f40)="41df9489882720dfc6ec052102b6d93e71140d4ecb110f55e4e1b0b13419a2066e91c57691d7259729710b4e68f8e707399ae2d1de97e1aaf253f50a26b70c073a42a54b30aea8ef292da53ed5e43f89592d728e92e21b169484e437706a6bd30d4420582cdf57b451da0735f297892bd2807e602c5c9067d95733b1a5901299317069891741dea4f8388eec0fc9b5a561cbdd7d5379b24112053807423874a9471aced5fdf8ed52d8cef2f91ac42de45c5e70da02fe98b120cee46a6a8dc3b9e7d52a42011f33", 0xc7}, {&(0x7f000000a3c0)="f466628aaed99cfa17e442f0d3cbb51738fed8894eed78121415337a1a3078f153fd306590f2361e9e457beee021e0f8ea8281ee93b2e0362791e856083e3c8ac4140da1478cd196910dd60084357daf8f5f54884576e04900aea54b68fbc771269010d36f041e608fdabff993ee7a17ea0cb73ca2344f6810ce105b22bafc5f434ed07c5947fefb6ef035e9de4a26dc1dd88637b934eafd44743b6fd61e662bc766a1bf73bd85f291a28f892a495d5dca9e78e56aab5ee34e2d9e079c2642b15869a3df766438a294669c4df84026c3feb242a4476db30d99f6d735e3ed293dde83b2a14e715c3cbdcdd7326acb2befcd3276185d59ee2c0891160dd5a5bdc12e3a946b636a64a90c41f5030970afaedea7af6ec9e56e38b3250589aceaba3f4f88bf36dac866432529ee548df190cd74d955ded4ecd1fb6e77d3376d7237a6b3387e7bd7135f61422848f6a82e50a2ce56d3e201157a8bb61bad165b8ee7613b9298a34c5737c1ca53e6c2b48546ba2a48249da2a5f9a70237eb2d4223dd34b096c871e10623aecc2777b398bacaccf2ff6333439a279285f71755c9a5372cfd1f8e60752b48f84c10864ac4bb0017ddfb7f44c6e24e4b69227ab42054ba69ab339660eca34541b42cc47fb28e7a38bc7f20afe7b1a6deeec515453d216dcb01d497822ea09a259c2cd8f34b77720e754fed1e745cb57c95e9ad2ee6bba53224c0ca00432fd96d8c35eea775affcf172d3caa70594dbce332382d3a701a83d9bed7165132bb14bb6069eb7cbbfeff24692c133df21e335182222dca665c083c68e9e82c2314a41d570766be98e411b111ec64235bee989a443487cabe75a450830e181bc9d0f916ff90b80e211a52060141be690c4694cd7fdcd00f32c7799b85aadb490d8c398ed7e25cb4f231bc7b631845b23c23d4a40b57d80f1d4458fe100a0aabf1430b89f5cf89c8b4654c68b52a7d3d6567549a7f15cee468c2c26a7edcfef48e543de25281c0da39b6ca575637039943b0b560fc587e73aaeedbd868dfb7af7e5ad15ce23aff38f64fd8aa3880b51b6199edf9ad79baf11b2a23974170f61dbfa4e471f2573d877441970d09da534aba212279a2a3d8acdb760555b16b3410b3e377034cf717a13cec5a7f0de91b8d2c6384a418e3c81a5f5fcce76f9330fa43c5ea002ef548ca7d1558db63da7fbdcb15e53d3ec7e4b11a74f6f56a68929ac9968f5ca994651ed5b9639edb89eaa672ad6c3b67582b86b9c50f5a81f4bf6aff7078e75c5525bf284f9eb730e3882a161d3320fc0b6933d86cacf0035ad5c6f82237f7388ab26ae427713e5b4e2a1bf399fe7d34d72532a72a8905924f5f42b0e183f9c8db410748c47566fcc8b7195428c451511565f3180cf1c3b3dd45240b8ead87e867820a2047ae0bceac03e141e78320ce6797899c691fbaa32e9817cff12eaef20215f6a12c97f35f45bd5432945b76a99da942c32adc4a467fd91d7f1e3c7545eaaef1947f01cd47cc69bf2b21c25354a14af9b809ac77b8761c0596decd5761a8188f81703721d6317a76c5ab9f48ab01e3b484d04794d803eea2ab61fea88c294f3fb0e99c242214d8fbd87689b194c6cee53969832265e1db2d618758cca552d4e775a8f97876a532b18922c20b097a1f9c0b207c07a1190fbb4eba3a9a3852ca0217ea2dbedc677e21a580cc8c3bc05570d09878044c6369e3fcfcb0fe0dfcd5565d09208a5740b86b9945aef3d6a8ea73ceb2600b11d801b4a58da79c33bdca5824d48864ec098f8147d032a8dfc066af5e7945be15c947f5345d6188f048204beed8d1c4d5206c0d8f248b9db4b0e67ec9738716d04e4a4ba87086be086a77d2f98d7222814a192cde347f28ddc46e49d070576aad0f6bd809fc8eb48e43ea413990b3e4f87d918d9f74c86ac11c9923a9b5178892cc4f2a1baa2d919fd88957f61bed517f3b5e98c3dddb915c54d61ab5b64f4d8f66259cdf4f79d6b8ac780bd183d8910b817ef780f62b71a06d6d24374290590bb7af86776332f10052449ca153fbefe210d6cad123f779622d13d4771eef98177ef237c824dd7610a0ef2b2a4437438e2719dc815928285639738f1b5c63b28f06bbb7dc123d0b58fc5802b35d79a0ee99f217c1e8bea3a79ce1a2c4d1c48bbfb1c077a38fd77b33922b5ac6cfa7910c3fe54b9f22caa650158ad76667ee641434631cef031e5468f5b83f433eda83df87679e746cc1e7c37e6d9fdffb51360fc66e14bb7bcc57905fce8e918e8c1606a0e0bdbf9d2d5d1c25cd76aa494b67039095517ebe13ca6ce7134a4041b866de502081ce7720c72f391b4c82d26623c15848dda6f053218bfb566a99c7838709e91550cea1a2de77f39620157dfb8117179705d65e4d9d19b8ecfea47e64668a862e653206abddf2e416c97cf8f8d3e3c0c3722ccfcc7392a16cc4ce033301acf06adabe41e6623cdf961884bd669d3559547b53ea25dd7b2b10f93804d4ea57c1b834eaae2d3685789863233f651ac9ee5530d20c82e706619f099cf280a0e33de375f8700c033b8912fbf33ec3f4046623d2484020c8a3356bd7d096f235b4dca00c629e06f50d537986f1b339ec5be13c1d2c1c0905959dc6926468503d3f9f47b5e4ee14ac1806ff1cf7d74c91ef5e96150b21161da53c61bc5f7c1e20977f9e14760a5bd87b5365ecbdd75888b518abc8f255253921a70c14da0504e76dda751702262920e5ea4536daf122208675c11f5d4d5621225244cfb0c952f40ea895268a9eb90ea9b2ec96b3cc070732d9a04a0f5f983bb67c4c1ce55a4a780f32599750086128d868cc128b0d50c267d29d3a2a38289f1ea4eb679c6d5e722ea450e5618f6bd63ae85f583bc85de091f7482fa81d9f2d98da0549c72f1f473b90b93654c975e5041a4616187c8aa81fe575abaad5e62ca41ab43d402a82521b1e32b53b606876f216b487344459814c60847c1e9fa96ff165562ce46b5428865e090e05dacfa09287309b6438e41fef0006fb45bc69484e4361c5ecaf7848c1c49a2547d5d776332013d8243de03264fa8c7d27946eb4de3392b92b886b38102cb71035c43cf8a79f46ec103b3b04addbff3082de8db980b478d6b5670738c1772380bc7aaa6246efc8ef190c306684940a13e4ae5925f5ccfd3ce86c32d567636b7eb13016c764d1c8deef4b7e0bc058000097b339fd242ed365da0e946abb8d335bdbcd069092a4d4f0d597ee6599b5ba2733af1c759f27e703c6a03ee866c06c7a3643fb8211afa37232c002f307ff12e5f6214d189660ef04295b8e37a88ab033fd8148230c4a3348faa6c7b7ab7f9996af613de3a2131ffc9c192ea142f4a56f2a3bd63ed889d8796c49862e06eb9eeb0a88b1c6123190cd8df4d9d75dc2760f6b51cfa4c1513f54f4b0937caef5a6d275789e7aabaf07e46f2673950f0506ff1b2e896c0857ca846c6574b7295c49d33c3ec9d2867e21ab4470686a93f581d42e978aa5c08fd160bdf1f8e697679c2eb1d2984faeb8ac186b373cc7d622a8802e3086d4795ba9ab1440f4e7fe032c6dc3e669487e70f6a2d3f432dbe6456f1236b0e41fe76955be570c3f2ad08cac80a931ee38e2d77495ca289bfd0e3eec34b5fcbdc6387bce9acfddb771c2170a7bc9ce8fa20e6dbc88cc7d380235618662fe675a258152836a017a2df61a35b4da6c162056d7e7a1dfa64918e66c0c54fb260b3778dbf16b4bc4fa09c0a89b244d7cb9696f08edc39fa87b90c1bec011e3b4807dc5e05857b94a189cf9bcc37e10e5417e73cf859e7f8f7702be9ae1aae242edef909160264c38c8a7b0058381158ec48e7ad16e84aeffc08e0b05326a4fadfbef6c69b70995d43880577aaae0c79087dfc8e92245be10264acabb319ce3f48948cb6fb280c0564b6991c262afd0148cf555181c04c5337f790514a5136221f0df10d7b56d06de0ef8d0a7d575f1f0b47a64d450401b155e450091f40d590b43a43518bbc69da1fa8f20811842c0e31f12a39325b8a706f2a31ed52d85cbabd095f483d73cabd44a88f86a45621e2628547e4454b86d78a5e4e9735d81909772b6c30bacd8776794aea2ac162388aa4270c6a0b30531fc03d2608115055a81784b8b1ebc6ff66fab7e98b0c1b61814f1991426cf5c7114c85045746d077ba23d747abdf2ce8926573ebe2e24784a4380c191b3a16cc2656769fab4aae2ab5164f366f4a9d7e0f875ee84f6941d74d86fc2019dfa84978abe0fee29e0ba5c19502ca12a28874a7eb392e9b05214025c9303f47a77a6ffe6d9d06896c951bafeadf90dace290712ab836a2615e884fa0fbc3658f0950a17746799cd639b994898b5a3af4a5c0fe1d0e44ec783e22bf2ba38342fdb4d421c4dec265433998710169f39bff4cd0cce7fbeaa112019b49b2152904757a7a109007266f4dc96798df0a483bd7aa030f79b7c0b5661fee3ac285aba99a8042a2a00381bce1885ae9755818b9426f5dc50fa385a4879b80df29111a59e8db353c6397bdb3fa4734a48f6f171a66aa396dfb32be7a7b39376391d2944c625fc264d24f3d9aba731fae457b09ad931efd31bc6f281285d8e86f54bad40c44c849805c8937ad550887c1f55625a259f5a3deb027a7bcb1a8019fad97d3ec26b8a806c181722dcb6b3466e04c339564a0c3efb89e89d5ec27eee07f8d18ca6c21818031b8c34bd4cbae263b80582d2c989f34da079de447c6f15a2c6944436d3a63d11457d8f01e05122748647ef3057e852a6d2e7084c7e309acfe06cf1ba80412044c60f10f562563cd4a9135f0b9d271581f98d7ce44b3cb684d496f1c9c17c5286dceb862b96368f97e66cac455611de49d3f2412d524593e0887fbabdefb0654c7b2b26ad20d672cbfbf05ae2125770976ec9017f96c655adcd3ed6b7f2f17a203d02c31c7fcd9dee648959ff94ac72a0970f1e9a0ee0bb9e0c641aa509850f9358ecfb9279b3379d7a035e2b8a4bea92bdb11f87f0b20acc39e6a4c61b666b897106d1c19b913b3cd121281def531ce5df03f905243b577e7b1dde746c163294722894e70dec3304572e41d7444128a06204db9dff2407685fd81e627b13029e2e9e5c7d4f2131aaa591a6e6be484d294b741895222177eca4c68e97abc7e6c043d97075e29ae084af7046bfe38754ccc7303626dde6504b91df6b4fa1a83e89e9935be07fe5844e3a78463c25d15d236b2ab2090dc22849d01b9b8892982e2b36f94674c6d956aa80c23faf8afc7ee40a253c46c6d571941d8c37b18ab3617009d5bede160f53465251fc515823e8159d4958241a637ac5481e230203bed772d9b3dd3620bc77111f97f9409be5d509cbb334754a87a6c8af1fa2ecdedd12240d98f1c4fb3bfa01bdab8c0f6ab2461fb558ad855511ca586615e74d1a16a040d9b8afa1361f20af2f15f610633f31f887f451f27693e27fb197f38d5bdc47f034ddd92c267b435ccabafebebcb8ff0519a96976fe691b0a27e35412703fb465406e51cf4968907bafdd1cd8a3e9c36fa8e13832f3d0a2d8563c1709d8fc8b6f58fced83e0c04a095013b135d995f6df03c7d7d75094884be37fae19e262e3a3a0fb2b925b2f36af91bf4cf370e53e01123f46c5a460a93616717cbff0ab4144f41a1b9f9d02a91ba77d98d5d99f355afe86b9091acc9428dc441abdcdaaa9c4012374ef5aa9fa6131f5637914e108aa651ae0307cb49d0091da55e8f000325135f260554cbd52a2b90901b5444f7481ed0f18", 0x1000}, {&(0x7f0000001040)="e8c83f94627e00e4d3832178742d52f3002fe2c0157bfa8cb63850f853be81f2bd2d1449bb009572d38ae58387caa6ad305c8210c27dd9456f04a25364cade31487d436f8019242842700bea6b04083aa6", 0x51}, {&(0x7f00000010c0)="0143668d2594693973750aa1e70b998d5188efd57e36983dc8451f27d5f90798135b4b009ced73349aeda7e829aae26f762c49db34247d604527f8813f2ddd8a656d62308b2e17b9904eb4d21cdb751f", 0x50}, {&(0x7f0000001140)="56a582da83b4295f85e559a75d316046447809752b40f985ee4d3afa13cc3a7d18291eee596639ef9f1acfa022803f8f2bcd14efb42c82b283f3ca7ccd7df611420d3ea4ac8ea709d25e1dc2d089e0e56fe53c777238262abd51702ef1ba8c68a5c07e56abed2e97dd973b193be5baa1e9fa70cd7a9d8e90ccb9494d05c21839d1ff8fec2d2e747af904ddc50d8a56e66b7c9e3d1af8d2524c76df7b25fca15beb697c9c93186005d9320528cf7feacc6a48f8c8b96fc116d293", 0xba}, {&(0x7f0000001200)="9d1b5a07ceff4d19dbaa952a511721909eb5c7", 0x13}], 0x6, &(0x7f00000012c0)=[@rights={{0x1c, 0x1, 0x1, [r4, r7, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r12, r10, r4, r10, r0, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88, 0x4}}], 0x2, 0x0) (async) sendmmsg$unix(r13, &(0x7f0000001380)=[{{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000040)="626a343a4062fc8ad3", 0x9}, {&(0x7f0000000340)="35240ac896104d875e60d882bc7c869f706851468aa5507e2e94419c33fd50e4520ec58e5ab9cf105706a6", 0x2b}, {&(0x7f0000000380)="daf0c1bf3d3d09b28d1c6938b6a7c1b4ce11e940e13dd3342f99071a6631007e57e398fd11885a0155874af46aa39fac505c67aa20b5fad243a96cbdd1220de88321e1a2044de2cba165", 0x4a}, {&(0x7f0000000440)="94d15333b30b999c3e132c11f9d27fb4574652bff94d9e14d6d65f581fcc213cc725b5d7587d99819379f0de9876da358ebd6ecd58fc169be3df87a9458620b5e8f8630a531662429d2b62a9df4391402fba26f5a507fa64ec37509b414619103cbbbb5d03025b226f4745a6429e461d7761e0a9548315596266608f75befd1f5921d8c101f8ae7aaef802e7a5120e5b3d26cf", 0x93}, {&(0x7f00000005c0)="e0c6bc4f6b2ee89ba120313d39bf120114a141e689455946e916a7c9ac25e26e35ccc24874debd2079f14e2c28beb0c16d5c2d8c3ef1fbd52cb2e5f161dd3c3fab7f1100a66e76e0096ee5271ae23e9da9bfa2a3e0eba7d7d34acfd0b06e26d80eecd9d1aae9be2870fa0bd439e6aa8a9a5d4cdffb1cee11f2c457201ec8cc70816a6ee141f960f2d7a39dadfee73e9ed56b243796a5b787fafc3ca15355a169107ae7e8bca85df78a59b64106a4ecd27c748a5e4adcafee2a7798851c", 0xbd}, {&(0x7f0000000500)="47c4eb", 0x3}, {&(0x7f0000000680)="b615b64e4c4e38dd3a839fdcdfe7b9b3ef6cb7f2797aa83b87cda114c5dfce30b4ad2701a3594f3fbbb21f6f50cd3d35204f1a86df60b0fae59062487e2aea8ad5e564703e443d9b193b270ec72953bcbf7c46699eea56629efae6e470bf830c2f7c233958104a80febd3d972f85bae2ad5a418fb4109a30bd3bde76bf98c079325ed1b68638658c1360497316224d2dccd6b98c", 0x94}, {&(0x7f0000000740)="b953a7eef04a47f35f1a3b196f7dcd2094c0359e9c4792a0ba41c4cf290d56ae2aa869c7d766fe6d178526c89a860bef30b20d52bf3da310da007b5909a31b04e2803bb05ec6258c1defabf19d9ce9f1b0bd4c8ac675ba2b66141ac9ad669ec528858fd6c9575600b0f48d81be49ebb8d09c509f86d71805446635c90d949f0e312bd89875b23e3fd98011a97e172e5100b8214e348db6bd67a78fe3b5be1126a73bd14e024ed87682bb4005037f", 0xae}, {&(0x7f0000000800)="1147d2", 0x3}, {&(0x7f0000000840)="d4c9ce6626942b653ae3a313a0144617c49402d98c83245a475a64fa1c562bb666c5aa75999b9a39b99e0313179ffd8f152fa1ab799ab08cd19b286cb58d6ec180668b40b90fdc55ea3e49f32606c2825036c96df6eac96421c0bb674930d7d38d4da60452c0392af20302f50261e5bb715edbbab51d5636155feb15c6f563a5ef68edb2d8ae8be7e92b6f5d8c64bfe41186bb0aea3e30befd437f2afb5202a61133f5c3f6c16d4c571788cb3963971fa4e98e8414d481a0856fb220ec23a95373eec1e652d8df67b485401dbb0e68191165363dd866ba93864dd00043bdac48", 0xe0}], 0xa, &(0x7f0000000dc0)=[@rights={{0x14, 0x1, 0x1, [r11]}}, @rights={{0x18, 0x1, 0x1, [r11, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r0]}}, @cred={{0x1c}}], 0x98, 0xc884}}, {{&(0x7f0000000ec0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001240)=[{&(0x7f0000000f40)="41df9489882720dfc6ec052102b6d93e71140d4ecb110f55e4e1b0b13419a2066e91c57691d7259729710b4e68f8e707399ae2d1de97e1aaf253f50a26b70c073a42a54b30aea8ef292da53ed5e43f89592d728e92e21b169484e437706a6bd30d4420582cdf57b451da0735f297892bd2807e602c5c9067d95733b1a5901299317069891741dea4f8388eec0fc9b5a561cbdd7d5379b24112053807423874a9471aced5fdf8ed52d8cef2f91ac42de45c5e70da02fe98b120cee46a6a8dc3b9e7d52a42011f33", 0xc7}, {&(0x7f000000a3c0)="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", 0x1000}, {&(0x7f0000001040)="e8c83f94627e00e4d3832178742d52f3002fe2c0157bfa8cb63850f853be81f2bd2d1449bb009572d38ae58387caa6ad305c8210c27dd9456f04a25364cade31487d436f8019242842700bea6b04083aa6", 0x51}, {&(0x7f00000010c0)="0143668d2594693973750aa1e70b998d5188efd57e36983dc8451f27d5f90798135b4b009ced73349aeda7e829aae26f762c49db34247d604527f8813f2ddd8a656d62308b2e17b9904eb4d21cdb751f", 0x50}, {&(0x7f0000001140)="56a582da83b4295f85e559a75d316046447809752b40f985ee4d3afa13cc3a7d18291eee596639ef9f1acfa022803f8f2bcd14efb42c82b283f3ca7ccd7df611420d3ea4ac8ea709d25e1dc2d089e0e56fe53c777238262abd51702ef1ba8c68a5c07e56abed2e97dd973b193be5baa1e9fa70cd7a9d8e90ccb9494d05c21839d1ff8fec2d2e747af904ddc50d8a56e66b7c9e3d1af8d2524c76df7b25fca15beb697c9c93186005d9320528cf7feacc6a48f8c8b96fc116d293", 0xba}, {&(0x7f0000001200)="9d1b5a07ceff4d19dbaa952a511721909eb5c7", 0x13}], 0x6, &(0x7f00000012c0)=[@rights={{0x1c, 0x1, 0x1, [r4, r7, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r12, r10, r4, r10, r0, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88, 0x4}}], 0x2, 0x0) recvmmsg(r12, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r12, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) 14m24.596278548s ago: executing program 6 (id=5398): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000180)) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) mkdir(&(0x7f00000020c0)='./file0\x00', 0x100) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x88901) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x250) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/shm\x00', 0x0, 0x0) preadv(r5, &(0x7f00000010c0)=[{&(0x7f0000000480)=""/260, 0x104}], 0x1, 0x40000004, 0x6) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) r6 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x1, 0x25, &(0x7f00000002c0), 0x8) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="5500000020007fafb700fe7f0000000081000000030b43226c26236925000400fe7f0000bd2dca8a9848a3c72873c215f1c46b7b31afdc1338d5e800030000010000100100005ae583de0dd7d83106000000000000", 0x55}], 0x1}, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x2000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x10001, 0x1, 0x5, 0x18044, 0xffffffffffffffff, 0xfcaa, '\x00', r10, 0xffffffffffffffff, 0x5, 0x5, 0x2, 0x3}, 0x50) futex(&(0x7f0000000000)=0x2, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000040)={0xfffffffc, 0x7f, 0x1, 'queue0\x00', 0x4}) 14m24.527472069s ago: executing program 6 (id=5400): r0 = socket(0x2, 0x2, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, 0x0, r1, 0x0, 0x256) sendto$inet(r0, 0x0, 0x0, 0x2800c846, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) 14m24.404070572s ago: executing program 6 (id=5402): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001900000019000000020000c5061a7d23c5ae3177e4a00f3c4c8821d367000a5f"], 0x0, 0x36, 0x0, 0x1, 0x100}, 0x28) (async) r0 = socket$inet6(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000240), 0x4) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e20, 0x3, 'lc\x00', 0x2, 0x81, 0x1d}, {@broadcast, 0x4e1d, 0x4, 0x2, 0x12d5c, 0x12d5c}}, 0x44) (async) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 32) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x12, 0xffffffffffffffff, 0x0) (async) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0xfffffffe, 0x0, 0x100}, 0x1c) setsockopt$packet_int(r5, 0x107, 0xe, &(0x7f0000000080)=0x8, 0x4) (async) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r7 = socket(0x10, 0x3, 0x4) (rerun: 64) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0xc}, {0xb, 0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x80000a, 0x0, 0x7ff, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x6, 0xc, 0x18, 0xd, 0x1, 0x8, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) (async) ptrace(0x10, r6) (async, rerun: 64) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000540)) (async, rerun: 64) ptrace$cont(0x20, r6, 0x0, 0x0) ptrace$cont(0x7, r6, 0x7, 0x10001) openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) kexec_load(0x86, 0x3, &(0x7f0000000280)=[{&(0x7f0000000040)="f6adde2f8c67d65ad57bf74a47aeba3e5d5459a8db6db53f46e3814304921e67e9653067e6eeaced27ce74cd0b7b4611b7cfea4f2b4a4abf02ee2a89298e3c0b0968ca4bee19c1379e83422c3bddf1763568667faa7ba7d107e84d7373d06552add6be490f6af14e90f994e4323f8d47590c05b2a2b17b91f738b0ad1123acf72c9ff4c2ebcd84646d38eb53b4ca612c6ca720aa5da609b5524f1c6bcbeb8ad7089a3eadf470d67c9b2fad5aaa4c64809347a72b5f71a14e25df617b1c1c2b2e01a4f008cc7f0578f4e456f414a6c0e631b729f4e38cff241b289387dab4eb8938c65f94c34978c3e8", 0xe9, 0x0, 0x2400000000000000}, {&(0x7f0000000140)="e78b88b1cf0cd6f1cc3d55515adc0cdabbf70827dae06ec4dee4c2bc2cc0aaa855f9a3b537bf21e6eb9fbcfdf7500a5c081519aaa406f2cbb235c6807b4f68cc2285bdc59a732c87e555c82e36dd0f35a452896d7f1e58d7b97dc3dde72deda083fdfa2ad1276ae5d9935655a3053878e1b4690200ccee683709af8beebf89f1a183c9f5f7fabd689792841f8e013b0bc270668c44b3fe8b16f6a16ae3b4887b2a39262e72fa328b47478f", 0xab, 0x20, 0x2}, {&(0x7f0000000200)="03c70fb1983f2a3cd081f55e01458ef48b81093a36d4b9232fcb29b67e5118158d27059375f9e04d5d9dbac722065af9578347ef3b0deb88a3ece43e916bff16050e1a9e343334f516122ddf8777e2e74f5b9a8949ceb513125ca4ffd894669fa8328a27ed9e9b62f747f6", 0x6b, 0x7, 0x1}], 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c0010800800014000000000080002"], 0x80}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) 14m24.177599601s ago: executing program 6 (id=5403): timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r4, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r5}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_open_procfs(0x0, 0x0) syz_usb_connect$uac1(0x0, 0xac, &(0x7f000001b780)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a00030100000009040000000101", @ANYRESHEX], 0x0) 14m19.504709677s ago: executing program 6 (id=5420): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x22, 0x2, 0x3) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000fe0000000000000800040001000000", 0x24) getsockopt$packet_buf(r3, 0x107, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4b8affbf514fd00", r4, 0xffffffffffffffff}) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) close_range(r2, r7, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r9, &(0x7f0000000200)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 14m4.382562135s ago: executing program 34 (id=5420): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x22, 0x2, 0x3) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000fe0000000000000800040001000000", 0x24) getsockopt$packet_buf(r3, 0x107, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4b8affbf514fd00", r4, 0xffffffffffffffff}) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) close_range(r2, r7, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r9, &(0x7f0000000200)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 10.763554187s ago: executing program 1 (id=8408): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x2, 0xc, 0x100, @void}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0xfffb, 0x3, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000200)={0x48}) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r7, 0x4611, 0x3) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='.\x00', &(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000001c0)={0x0, 0x325000, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 9.51276425s ago: executing program 0 (id=8414): socket(0x10, 0x3, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x4f8, 0x0, 0x72}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008850) r5 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) unshare(0x2040600) (async) unshare(0x2040600) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0xe, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x40, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0xe, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x40, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x38}}, 0x200c8080) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x38}}, 0x200c8080) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x10, 0xffffffffffffffff, 0x9bd93000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NFT_BATCH(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) ptrace(0x10, r11) (async) ptrace(0x10, r11) ptrace$poke(0x5, r11, &(0x7f0000000200), 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4f4}) r13 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) syz_usb_control_io$uac1(r13, &(0x7f00000000c0)={0xfffffffffffffd54, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000603"]}, 0x0) (async) syz_usb_control_io$uac1(r13, &(0x7f00000000c0)={0xfffffffffffffd54, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000603"]}, 0x0) 9.218224913s ago: executing program 0 (id=8416): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002", 0x5) r0 = io_uring_setup(0x265b, &(0x7f0000000340)={0x0, 0xe8e2, 0x1, 0x1fffe, 0x200002c6}) pipe(&(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1) r1 = io_uring_setup(0x407d, &(0x7f0000000500)={0x0, 0x3fbe, 0x800, 0x20000001, 0xef, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000280)=[r0], 0x1) 9.013572443s ago: executing program 0 (id=8417): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000ff5000/0x8000)=nil, 0x8000, 0x2000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3f", 0x5) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) ppoll(&(0x7f00000002c0)=[{r1, 0x1046}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200)) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x12c, 0x17, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x100, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffa}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x45d}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40040) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) (async) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) syz_usb_connect(0x3, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x200, 0x29, 0x63, 0x90, 0x10, 0x1a86, 0x752d, 0x2d4d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xe9, 0x11, 0xbd}}]}}]}}, 0x0) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x200, 0x29, 0x63, 0x90, 0x10, 0x1a86, 0x752d, 0x2d4d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xe9, 0x11, 0xbd}}]}}]}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r2) (async) fchdir(r2) write$UHID_INPUT2(r2, &(0x7f0000000140)={0xc, {0x92, "91486f289be56fdc47df64b165c8da93178e07b21c2955d624b51bf139d275564e2dfeda74128de489c4624d68f4c9fc15c6dff1431d2e85281a5abd6105d51b4a079b0a655c2dafcc58b0ba7d22c4c6bfddcc36ab8bfa7fb630384ca8982341d85f5764aa879648dd3cc4d7d7461d4635f57b1c360812fcba680d318690f60cb4b6370d78dcadf8872d5692857ac473a1d2"}}, 0x98) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2802, 0x0) inotify_init() (async) inotify_init() 8.417233262s ago: executing program 1 (id=8419): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904cf32d47e82c29f927412b3fb21d2c9b16f065094ae3896bdb148e8d51fa021fc27de8fa45241c2407a48af87f4c249af32557d28463476"], 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x97, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x4, 0x1, 0x0, 0x40, 0x4}, 0x2a, &(0x7f0000000180)={0x5, 0xf, 0x2a, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x6, 0xf0, 0x2}, @ext_cap={0xfffffffffffffc4d, 0x10, 0x2, 0x10, 0x7, 0xe, 0xbe6}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xb, 0x6, 0x5}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x8, 0x3, 0xaaf0}]}, 0x3, [{0x2e, &(0x7f00000001c0)=@string={0x2e, 0x3, "89cd5227a946d039a4a75cc85fa004bae815fbcf4bab4d8022c2bba9b1358e35f334c2a4bae7f262ad71ec39"}}, {0x50, &(0x7f0000000200)=@string={0x50, 0x3, "06290b7039f1c7fe149d58f529a20a67df0f4c8811c0f67aacc0eeda8320602b43cb70c53ea162934dff47a1d8d6063f8c36e781fe9beee3b48ef4ed6add38d05a4a1616ac7bdb65166d6103052e"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x402}}]}) syz_usb_connect(0x3, 0x3c6, &(0x7f00000004c0)={{0x12, 0x1, 0x250, 0xe0, 0x94, 0xaf, 0x20, 0x20b7, 0x1540, 0x3443, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b4, 0x2, 0x6, 0x4, 0x90, 0x1, [{{0x9, 0x4, 0xb8, 0x5, 0xb, 0xff, 0x0, 0x0, 0x2, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "9d5d3ae6"}, {0x5, 0x24, 0x0, 0x3cf}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x7}, [@acm={0x4}, @dmm={0x7, 0x24, 0x14, 0x4, 0x8001}, @mbim={0xc, 0x24, 0x1b, 0xffe0, 0x1, 0x87, 0x6, 0x100, 0x80}, @ncm={0x6, 0x24, 0x1a, 0x2, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x3, 0x62c}]}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x2, 0xdb5}, [@country_functional={0x6, 0x24, 0x7, 0x8, 0x9808}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}]}], [{{0x9, 0x5, 0x6, 0x4, 0x3ff, 0x1, 0x9, 0xc}}, {{0x9, 0x5, 0xb, 0x8, 0x3ff, 0x9, 0x6, 0x5}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x3, 0x81, 0x3}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0xac, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xd, 0xf63}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x3, 0x9, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x81}]}}, {{0x9, 0x5, 0x0, 0x18, 0x10, 0x1, 0x4f, 0x2}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x13, 0x1, 0x7, [@generic={0x29, 0x11, "af8ea9835f57c290d35a90c649180b321cc3e7cea84aedc6f06657def8dd447e5f765cf9fee730"}, @generic={0x3b, 0xa, "f3e7bb768105a604822ec5f82170b179d25804a9b508e59fc7a9a708623b111ecc37c26b66173c3855f73f0f90382121855073068cbd9f5da1"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x7, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x2}]}}, {{0x9, 0x5, 0x4, 0x4, 0x3ff, 0x1, 0x13, 0x5}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x7, 0xa, 0x7f, [@generic={0x20, 0x8, "77e8e80cba19bf183af61278bb0000f0d3282cdc784307684479c87c1ccd"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x7f, 0xf0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x7, 0x4, 0xfeff}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x6998}]}}]}}, {{0x9, 0x4, 0x41, 0x8, 0x5, 0xf5, 0x6d, 0x4, 0x7, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x4, 0xa}, @as_header={0x7, 0x24, 0x1, 0x1, 0xd7, 0x2003}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x1, 0x9, 0xba, "9ff2f7"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x80, 0x2, 0x5, 0xff, "8b"}, @as_header={0x7, 0x24, 0x1, 0xc, 0x6}, @as_header={0x7, 0x24, 0x1, 0x3, 0xd, 0x1}]}, @hid_hid={0x9, 0x21, 0x7, 0x4, 0x1, {0x22, 0x839}}], [{{0x9, 0x5, 0xd, 0x0, 0x40, 0x1, 0x1, 0x0, [@generic={0x102, 0xc, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x81}]}}, {{0x9, 0x5, 0x80, 0x2, 0x3ff, 0x80, 0x3, 0x2}}, {{0x9, 0x5, 0xc, 0x4, 0x3ff, 0x6, 0x3, 0xfc, [@generic={0x44, 0x23, "66ca96b91ffbbca17ea361f97e64d85b58c1406122cf31d8416f3ce0b425a099a6ebda78e29ad3f5a203176950d2eed2d9bc99d76e4bc9c487a4ba0f1d02fcacd645"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x7, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x8}, @generic={0x6c, 0x8, "5309124d08e579a78d8a58b824238d9d450fc0462a02a9d21701f8a4e5c52aef2174ce299bd2739e83558f94875271b656fd08e174f0f15b81d09ef3ee5e89d9f8b3ea8b9466ba3a888c305b66aced62464ddaea13352301ab0bf11156d36f0998faa2a53715dfc7ccc1"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x1, 0xff, 0x9}}]}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x5, 0x8, 0x9, 0x10, 0x3}, 0x12, &(0x7f00000000c0)={0x5, 0xf, 0x12, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x6, 0x1}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x1, [{0x9d, &(0x7f00000008c0)=@string={0x9d, 0x3, "9e864a4317364171c011dd7b24a6fd63b2b025cf3136a3b99658bed0496283467323e1425aebfa9c7360c33ae9eb2971a197198af1a8cfd998e87cc07ab8957d60d513a5040426905f575b0ebe4f85df309bddaf79d2fbc97975fd145e1687ce082aadd1012c3571c47f3dd51053eb1a58b7942654332ee572cbf3fa4e8600f08ff0d15026147cbc5a46b830527a1dcefa3bc6da529125207b23c4"}}]}) (async) syz_usb_connect(0x3, 0x3c6, &(0x7f00000004c0)={{0x12, 0x1, 0x250, 0xe0, 0x94, 0xaf, 0x20, 0x20b7, 0x1540, 0x3443, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b4, 0x2, 0x6, 0x4, 0x90, 0x1, [{{0x9, 0x4, 0xb8, 0x5, 0xb, 0xff, 0x0, 0x0, 0x2, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "9d5d3ae6"}, {0x5, 0x24, 0x0, 0x3cf}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x7}, [@acm={0x4}, @dmm={0x7, 0x24, 0x14, 0x4, 0x8001}, @mbim={0xc, 0x24, 0x1b, 0xffe0, 0x1, 0x87, 0x6, 0x100, 0x80}, @ncm={0x6, 0x24, 0x1a, 0x2, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x3, 0x62c}]}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x2, 0xdb5}, [@country_functional={0x6, 0x24, 0x7, 0x8, 0x9808}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}]}], [{{0x9, 0x5, 0x6, 0x4, 0x3ff, 0x1, 0x9, 0xc}}, {{0x9, 0x5, 0xb, 0x8, 0x3ff, 0x9, 0x6, 0x5}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x3, 0x81, 0x3}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0xac, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xd, 0xf63}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x3, 0x9, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x81}]}}, {{0x9, 0x5, 0x0, 0x18, 0x10, 0x1, 0x4f, 0x2}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x13, 0x1, 0x7, [@generic={0x29, 0x11, "af8ea9835f57c290d35a90c649180b321cc3e7cea84aedc6f06657def8dd447e5f765cf9fee730"}, @generic={0x3b, 0xa, "f3e7bb768105a604822ec5f82170b179d25804a9b508e59fc7a9a708623b111ecc37c26b66173c3855f73f0f90382121855073068cbd9f5da1"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x7, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x2}]}}, {{0x9, 0x5, 0x4, 0x4, 0x3ff, 0x1, 0x13, 0x5}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x7, 0xa, 0x7f, [@generic={0x20, 0x8, "77e8e80cba19bf183af61278bb0000f0d3282cdc784307684479c87c1ccd"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x7f, 0xf0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x7, 0x4, 0xfeff}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x6998}]}}]}}, {{0x9, 0x4, 0x41, 0x8, 0x5, 0xf5, 0x6d, 0x4, 0x7, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x4, 0xa}, @as_header={0x7, 0x24, 0x1, 0x1, 0xd7, 0x2003}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x1, 0x9, 0xba, "9ff2f7"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x80, 0x2, 0x5, 0xff, "8b"}, @as_header={0x7, 0x24, 0x1, 0xc, 0x6}, @as_header={0x7, 0x24, 0x1, 0x3, 0xd, 0x1}]}, @hid_hid={0x9, 0x21, 0x7, 0x4, 0x1, {0x22, 0x839}}], [{{0x9, 0x5, 0xd, 0x0, 0x40, 0x1, 0x1, 0x0, [@generic={0x102, 0xc, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x81}]}}, {{0x9, 0x5, 0x80, 0x2, 0x3ff, 0x80, 0x3, 0x2}}, {{0x9, 0x5, 0xc, 0x4, 0x3ff, 0x6, 0x3, 0xfc, [@generic={0x44, 0x23, "66ca96b91ffbbca17ea361f97e64d85b58c1406122cf31d8416f3ce0b425a099a6ebda78e29ad3f5a203176950d2eed2d9bc99d76e4bc9c487a4ba0f1d02fcacd645"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x7, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x8}, @generic={0x6c, 0x8, "5309124d08e579a78d8a58b824238d9d450fc0462a02a9d21701f8a4e5c52aef2174ce299bd2739e83558f94875271b656fd08e174f0f15b81d09ef3ee5e89d9f8b3ea8b9466ba3a888c305b66aced62464ddaea13352301ab0bf11156d36f0998faa2a53715dfc7ccc1"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x1, 0xff, 0x9}}]}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x5, 0x8, 0x9, 0x10, 0x3}, 0x12, &(0x7f00000000c0)={0x5, 0xf, 0x12, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x6, 0x1}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x1, [{0x9d, &(0x7f00000008c0)=@string={0x9d, 0x3, "9e864a4317364171c011dd7b24a6fd63b2b025cf3136a3b99658bed0496283467323e1425aebfa9c7360c33ae9eb2971a197198af1a8cfd998e87cc07ab8957d60d513a5040426905f575b0ebe4f85df309bddaf79d2fbc97975fd145e1687ce082aadd1012c3571c47f3dd51053eb1a58b7942654332ee572cbf3fa4e8600f08ff0d15026147cbc5a46b830527a1dcefa3bc6da529125207b23c4"}}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xe2, 0x4f, 0x92, 0x20, 0x93a, 0x2622, 0x7fb3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x26, 0x9d, 0x2, 0x2d, 0x26, 0xe6, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) (async) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xe2, 0x4f, 0x92, 0x20, 0x93a, 0x2622, 0x7fb3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x26, 0x9d, 0x2, 0x2d, 0x26, 0xe6, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_ep_write(r1, 0xe1, 0x52, &(0x7f0000000300)="e5ad3463ce253164bb2be4cf749214a9ca5a0acf38f6b9fe67fa527f9d6132bec6434c060f55d39b9489a00bd4160641e624dba69a48e81593cc4541a2ed78098376e92060f2a6a98f2d149c25ac4e221804") syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast1}, {0x4e24, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0xfc}}}}}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 8.305173168s ago: executing program 5 (id=8420): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x118d00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0xe) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x22826, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r5, 0x0, 0xa00, 0x404cc40, &(0x7f0000000040)={0xa, 0x6e29, 0xffffff7a, @mcast1, 0x81}, 0x1c) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x3}, @IFLA_GTP_CREATE_SOCKETS={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8801}, 0x800) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) syz_io_uring_setup(0x62ce, &(0x7f0000000780)={0x0, 0x3, 0x10100, 0x0, 0xffffffff}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) write$dsp(r7, &(0x7f0000000200)="97", 0x1) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, 0x0}) ioctl$VIDIOC_TRY_ENCODER_CMD(r7, 0xc028564e, &(0x7f0000000180)={0x1, 0x1, [0x7, 0x7, 0x8, 0xffff7fff, 0x0, 0x9, 0x8155, 0x800]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r11 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200, 0x2f2}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r10, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r11, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 8.282662092s ago: executing program 0 (id=8422): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x31) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, 0x0, 0x4) 8.138257108s ago: executing program 0 (id=8423): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004e40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/135, 0x87}], 0x1}, 0x6}], 0x1, 0x10000, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="5cafbb19415082dc2d68ffed07036d0d5efb9b5b4aa4e9a4d27912e19aae487301239d3937561ccd182963aaec4f0da35db9774e343ed1481e4654a186e66f54441b06277fdce96084f808db6c16958d2e26bc2aed9ff05a18", 0x59}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0x8810) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r2, 0x847ba, 0x79c, 0xe, 0x0, 0x0) 6.190559243s ago: executing program 1 (id=8427): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00'}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000000)=0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x132b03, 0x0) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x76) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getneightbl={0x14, 0x42, 0x800, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}}, 0x2400c080) 5.938667115s ago: executing program 7 (id=8428): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x4004800) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x3, @random="48d49631204c", 'team_slave_0\x00'}}, 0x1e) (async, rerun: 64) r4 = openat$cgroup_ro(r3, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r1, 0x608, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x20}}, 0x8080) (async) r5 = openat$cgroup_ro(r3, &(0x7f0000000340)='cpuacct.usage_user\x00', 0x0, 0x0) r6 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) close_range(r3, r6, 0x0) ioctl$KDENABIO(r5, 0x4b36) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000400)={0x7, &(0x7f00000003c0)=[{0x9, 0x7, 0x4, 0x8000}, {0x4, 0x4, 0x3, 0x8}, {0x7, 0x3, 0x81, 0x8}, {0x8, 0x2, 0x0, 0xd}, {0x53b, 0x1, 0x4, 0x10000}, {0xb, 0x0, 0x3, 0xc6f9}, {0xb26a, 0x6, 0x82, 0x1}]}, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000480), r0) (rerun: 32) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r7, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x20004018) syz_io_uring_setup(0x67b2, &(0x7f00000005c0)={0x0, 0x9876, 0x80, 0x0, 0xc6, 0x0, r3}, &(0x7f0000000640)=0x0, &(0x7f0000000680)) (async) r9 = io_uring_setup(0x2f86, &(0x7f00000006c0)={0x0, 0x3f87, 0x1, 0x1, 0x4d, 0x0, r3}) syz_io_uring_submit(r8, 0x0, &(0x7f00000007c0)=@IORING_OP_MSG_RING={0x28, 0x2, 0x0, r9, 0x0, &(0x7f0000000740)="4a9de359ff193035acc100f9ba64573e9ac9cd9bf2a027768b200fa893535510558c3dd7e224edf975b1eb43e747ee933955a340a2ca6823358704fdfed7263a7afbedb6d0c495f71db7f9984e04da12a5c7d4e58a38756db01684271eabd99601", 0x61, 0x1, 0x1}) (async) sendmsg$nl_route(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@ipv4_getrule={0x1c, 0x22, 0x1229, 0x70bd25, 0x25dfdbff, {0x2, 0x10, 0x14, 0x5, 0x1, 0x0, 0x0, 0x6, 0x1}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48005}, 0x50) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, 0x1406, 0x300, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x75edb0f360afe26c) ioctl$PTP_PIN_SETFUNC2(r4, 0x40603d10, &(0x7f0000000a00)={'\x00', 0x2, 0x0, 0xfffffc01}) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x797f58f858df9478}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xf4, 0x0, 0x1, 0xffff, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffc}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x2004000}, 0x20040020) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)) (async, rerun: 32) syz_open_dev$char_usb(0xc, 0xb4, 0x7) fcntl$getownex(r9, 0x10, &(0x7f0000000c80)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x0, r10, 0x3, 0x0) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d00), r5) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r11, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000e00)) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001180)={&(0x7f0000000e40)="c0eea4046862bcea167443460210541b12495edcb83802487404210997ea0653791a3ceefdbd8faff5aff15e87361ed5ef40f8334754b2c4cf10f175b7496235e78efb8bd98e5443fd7e317ca309e7e61a0e931df74a856e650ec05efe64e2509023339f9476e870dc824211bb55966a9743267f504832312159ce869359a21b3fad4167761aab9dbc7c5013bc53ef855a02229773", &(0x7f0000000f00)=""/136, &(0x7f0000000fc0)="0ef236d10fb38d4f74a8e23438c115f4bf02e3e8ff0a459eaf7fa07ee2d4064438895e511aa391ff24d264ab90c7b907f9aee453fa5934979b4900f2a64999edf39760bb422da6320015ef9eb700f5f9bfff529bca2ac60b7f1688457965e37e15af02d325b8e1740a406a737074551eaeaef2ac3d5afe97e6c89dbd58fc4a6c19a6380d2665f7a8e249bff0e0b48c4d91f66dc4d7ff96d130753ff6ddc70f4bad40d4a76abc9977f05b19cec93954", &(0x7f0000001080)="e4bff6517c6505f4521394455d5b51b9d1508d550af03edc8011126a414777d3c3d7a8bc64b002ba305530e98daa929f1661c8f237b2bc2cd02701d07ef0589ff7c08830e9da95440c27b5d011b318855bb0dbf43919afba3674bd7cdb68562ff25e467b607f4b2d78e3c409610ec970b155b712921564ccdc162302356baa17cfc10a23bd80ae0ec2538b00bfdc3f70c14026a7e66e28d63d83ac666241fdc491b75c1c4f1cd5a4992b59fa76014105910d6e7e6fc206b810fc709cffc773c775358f26be7c", 0x0, r5}, 0x38) 5.917781803s ago: executing program 5 (id=8430): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000), &(0x7f0000000280)) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtaction={0x80, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x6c, 0x1, [@m_tunnel_key={0x38, 0x17, 0x0, 0x0, {{0xf}, {0x4}, {0x5, 0x6, 'v'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_simple={0x30, 0xe, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x80}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e011480080007"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x154, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1a}, @in6=@private0, 0x2, 0x0, 0x4e21, 0x80, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@rand_addr=0x64010102, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5, 0xfffffffffffffffe, 0xffffffffffffffff}, {0x97}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x4}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2b, 0x70bd25, 0x70bd2d, 0x70bd2d, 0x6}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x14) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000180)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000380)={{r2}, r4, 0x2, @unused=[0x2, 0x6, 0x1, 0x80000001], @subvolid=0xfffffffffffffbff}) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa1, 0x0, r7}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x5}}, @IFA_FLAGS={0x8, 0x8, 0x402}]}, 0x34}}, 0x0) 5.811756431s ago: executing program 7 (id=8431): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=@newqdisc={0x148, 0x24, 0x20, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x8, 0x4, 0x9, 0x7, 0x0, 0x15, 0x6}}, @TCA_RED_STAB={0x104, 0x2, "00002000002002ed88a27e0018f98b7839cd07000690fef6de4af82765208b02c459e0eda4f7f156b0fbab5f2136cf007c57c8c6328e2b3a3c775bcfcc83eec9d5117732ee94044d7fb5ed414036f14151f2feda1116a2599801a213148d513e08fbf879c19e2f3e66804f5123c2403c49bd2be98bafd622d130f8b06ebf7fe936e8566fbc9e3a570a9c0e514456e6506fd25dc99f2e1e28de67fba3aa586338b5861bbb1d914b05f902c31f06ee32350d9fec6d41b4917eca1ff55e5763298ed102ed73a19a1f456a1e27164ee57a19c578bb66ff569149aff95d6b5b963a819ca8e79f10372fe22f0439026c469d99febd3fedd63000"}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20004941}, 0x400081c) r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x100) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000008400000002"], 0x18, 0x4855}, 0x4008850) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000180)={'\x00', 0x4, 0x3, 0x4009c, 0x4de2, 0x1}) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)={0x420, 0x3f4, 0x800, 0x70bd26, 0x25dfdbfe, {0x5, 0x2, 0x1f, [0x48, 0xe, 0x6, 0x1000, 0x3, 0x1dbe5bc0, 0x80000000, 0xa8b5, 0x6, 0x9, 0x1, 0xff, 0xa8, 0xffff, 0x10001, 0x3, 0x9, 0x1, 0x310, 0x9, 0xc, 0x8, 0x800, 0x3, 0x0, 0x0, 0x2f, 0x4, 0x2cef, 0x6, 0x8, 0x0, 0x21, 0x7, 0x713f, 0x5, 0x1, 0x2, 0x8, 0x8c, 0x8, 0xdc, 0x7, 0xd, 0xfffffff9, 0x5, 0x9, 0x6b1, 0x7, 0x0, 0x6, 0x4, 0xb3, 0x0, 0x7, 0x9971, 0x5, 0x6, 0xc55b, 0x8, 0x0, 0x7, 0x4ed3, 0x3], [0x2, 0x1, 0x7f, 0x9, 0x1, 0x7, 0x5, 0x40, 0x1ff, 0x1, 0x80000000, 0xea9b, 0x2, 0x5, 0x10000, 0x1, 0xc4, 0x9, 0x6, 0x5, 0xb, 0xfffffff7, 0x0, 0x3, 0x9, 0x6, 0x5, 0x3, 0x10, 0x1, 0x661f, 0x41e, 0x400, 0x8, 0x9, 0x39bf8219, 0x1, 0x6, 0x6, 0x1, 0x4c2, 0xffff, 0x8001, 0x5, 0x5, 0x1, 0x101, 0x9, 0xffff64b2, 0x2, 0x10, 0x1c0, 0x2, 0x4, 0x5, 0xffff, 0x40, 0x1, 0x2, 0x1, 0x5, 0x9, 0x3ff], [0x9, 0x7, 0xffffffff, 0x2, 0x8, 0x3, 0x8, 0x6, 0x9, 0x101, 0x5, 0x28, 0x800, 0x9, 0x9, 0xffffffff, 0x2, 0x40, 0x6, 0x0, 0x100, 0x1, 0x9, 0x9, 0xffffffff, 0x0, 0x3e, 0xfffffff8, 0x1, 0x7f, 0xfffffff9, 0x8, 0x6, 0x5, 0x6, 0xfffffff8, 0xffff, 0x1, 0x1, 0xc, 0x9, 0x6, 0xffffff7f, 0x2, 0x2, 0x8, 0xfffffff5, 0x9, 0x4, 0xd, 0x7, 0x0, 0xfffffffb, 0x6, 0x7, 0x230a, 0x1, 0x10000, 0xfffffff0, 0xfff, 0x6, 0xccd, 0x8, 0x8], [0x2, 0x87, 0x8, 0x1, 0x2, 0x3, 0x40bd, 0xd, 0x1c3, 0x0, 0x9b8, 0x2, 0x1, 0x7fffffff, 0xfff, 0x6, 0xe, 0x43, 0x3, 0xce, 0x2, 0x5, 0x0, 0x306b, 0x9, 0xffffffff, 0x7, 0x8, 0xe3, 0x3, 0x4, 0x4, 0x0, 0x2, 0x1, 0x7fffffff, 0x4, 0xc81a, 0xf7, 0x1, 0x5, 0x4, 0x400, 0x40, 0x7, 0x0, 0x7, 0x4, 0x70, 0xfff, 0xc, 0x4, 0x6, 0x101, 0xffffffc0, 0x5, 0x9, 0xffff8001, 0xffff, 0x5, 0x3, 0xffff, 0x4, 0xfffffffb]}, ["", "", "", ""]}, 0x420}, 0x1, 0x0, 0x0, 0x14000010}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b0000000000000000001100000000ff0000080001"], 0x20}, 0x1, 0x200000000000000}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_async', 0x420200, 0xc2) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0xc0189436, &(0x7f0000000140)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f00000003c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000400)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x4, r4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x5, 0x2, 0x3, 0x4, 0x0, 0xfffffff6, 0x8, 0x5}}}}]}, 0x58}}, 0x20040084) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) 5.720916578s ago: executing program 1 (id=8432): r0 = socket$netlink(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) getrandom(0x0, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2b, 0x801, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x80) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x1404, 0x200, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0xf08b}]}, 0x18}, 0x1, 0x0, 0x0, 0x20002040}, 0x4000840) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x9b38, 0x0, 0x0, "521982d014c57aef713b05eab83f6c55b0ccfbc065d0aeebc5539864db1e9afe", 0x31364d4e}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {}, {0x0, 0x3}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x20008884}, 0x8000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000040)={0x1, 0x8, 0x5, 0x1, 0x81}) 5.623971477s ago: executing program 5 (id=8434): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000100000000000000800040001000000", 0x24) getsockopt$packet_buf(r1, 0x107, 0x16, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) connect$inet(0xffffffffffffffff, 0x0, 0x0) 5.485932153s ago: executing program 7 (id=8436): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000400)='cdg', 0x3) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000080)=0x7, 0x4) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) shutdown(r1, 0x1) 4.837622502s ago: executing program 3 (id=8437): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="120100000000002043552205040000000001090268491407d877c80cacd79286bc4a1d07404e40aa8c20a97231050400d6def4004337f2e61378854301030001020900010100012205000905810310"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x12, &(0x7f0000000900)=0xffffff9c, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000000)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r3, 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x2a1, 0x21, &(0x7f0000000240)={0x0, 0x6, 0xd, 0x360}, 0x8, 0x7, 0x7f, 0x0, 0x1, 0x101, 0x0}) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x9}, &(0x7f00000003c0)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000300)={0x7, 0x8, 0xfa00, {r6, 0xc}}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000064006bcd9e3fe3dc6e48aa31086b5c6c8752b57446001f0000000000000004000d000a004424eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fc1d92eb8d8d8702ccb7fd7c1b02f50e15554c247958", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000980)=0x1) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000100)=&(0x7f00000000c0)) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000380)={0x0, 0xcdf, 0xf}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="002201000000e8ddcb683bf8a8"], 0x0}, 0x0) 4.510367472s ago: executing program 5 (id=8438): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) fallocate(r2, 0x81, 0x7, 0x5) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0xffff8880b870dfff) ptrace$getregset(0x4204, r5, 0x200, &(0x7f0000000140)={&(0x7f0000000380)=""/237, 0xed}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/timer_list\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000480), 0x84400) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0xc, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x30) write(r0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x301000, 0x0) 4.425811071s ago: executing program 7 (id=8439): r0 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0xb02a2000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x2) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x2) socket$tipc(0x1e, 0x2, 0x0) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c357825577583a5fde8a3427cc42f7d63c6cf", 0x40) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x3}}, 0x10) (async) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x3}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = syz_clone(0x80, &(0x7f0000000580)="888460b4090084fdc1a422f125a772ff864fbd03020056d16a27b64fe7d17e31df7d12c47be30e462ca18bbb4ca95563715abb0370401e830e66937bc808a05fda7c3048d791e0c2d20ac13b40c75c5850485136ac9badcb1af7fe9c347964cbf21b483941259fa38653031dd78976cc3612683f3224d5943e19dd46f9e266e170e73823a342ffe8267da330344891ee6f7e35ec7f9dea5cf0ea64cdac650cf72e2f393d71e37b6cc2ad874ff763cb1b95a4", 0xb2, &(0x7f0000000140), &(0x7f0000000200), &(0x7f00000006c0)="46a02ba2a58a98cb297257f57cd6e6d45a1a0ae34b9ae018c9a12dce301d9b7e36f921493a3b93cb88be0b983863ed64e780a803ff5c05bd83c3d8481c107064e1ce9736c4a3a1f9aefff90283970119dbc204d3947cb569ca35e48cededc1fdc0873fe8b76826b8dc47f449092a0f8b43c64095a58392b5f1b3757d5080af4b35de5680") prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) syz_emit_ethernet(0xce, &(0x7f0000000b00)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x98, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20000, 0x1000300, [{0x1, 0xc, "23d13a9528da89ca8687857fa1c05623e430a7e05df65bb50a75504311ee5de0f521d4ef8bdff765650746569fc64eab97bd29f1573ea4d0bf29234512d00dd30ae604dd40e3c151fd4d595866b48657d2cb4ed8721f45e586a02af6449001"}, {0x5, 0x4, "ef1dc0373c7ae5822ff95684d179152a6da7097d9a664860876ec7127430d92386b1dae46b"}]}}}}}}, 0x0) (async) syz_emit_ethernet(0xce, &(0x7f0000000b00)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x98, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20000, 0x1000300, [{0x1, 0xc, "23d13a9528da89ca8687857fa1c05623e430a7e05df65bb50a75504311ee5de0f521d4ef8bdff765650746569fc64eab97bd29f1573ea4d0bf29234512d00dd30ae604dd40e3c151fd4d595866b48657d2cb4ed8721f45e586a02af6449001"}, {0x5, 0x4, "ef1dc0373c7ae5822ff95684d179152a6da7097d9a664860876ec7127430d92386b1dae46b"}]}}}}}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000680)='7J[o\f', 0x5}], 0x1) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) (async) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4c001) 4.22600726s ago: executing program 1 (id=8440): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000f00000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb700000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) syz_usb_connect(0x0, 0x107, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r2, @ANYRESOCT=r2, @ANYRESOCT=r0, @ANYRES16=r1, @ANYRESOCT=r2, @ANYRESDEC=0x0], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000f00000008"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb700000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) (async) syz_usb_connect(0x0, 0x107, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r2, @ANYRESOCT=r2, @ANYRESOCT=r0, @ANYRES16=r1, @ANYRESOCT=r2, @ANYRESDEC=0x0], 0x0) (async) 3.953846773s ago: executing program 7 (id=8441): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, 0x0) r3 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00000000140000", @ANYRES32, @ANYBLOB="00c0340446ee9fa9010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0xb1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x5522, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000100000480080001400000000008000240000000002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000896fee40abd1f0e62e2d44c1d0f2c5405000000fcdbdf250773727684e35ff80d0000fc2b000180060601000200000008070000100000000600010067000000080006000400000005"], 0x50}, 0x1, 0x0, 0x0, 0x2000}, 0x0) pselect6(0x40, &(0x7f0000000180)={0x3, 0xe, 0x9, 0x5, 0xffffffffffff8000, 0x5e, 0x3ff, 0x9}, &(0x7f0000000240)={0x9, 0x7, 0x5, 0x80, 0x8, 0xe8, 0x3, 0x7}, &(0x7f0000000300)={0x43, 0x45, 0x3ff, 0x4, 0x5, 0xfa, 0x0, 0xa}, &(0x7f0000000340), 0x0) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioprio_set$pid(0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r12, 0x0, 0x8000f28, 0x0) write(r10, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000004c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={&(0x7f0000000a40)={0x9c4, r9, 0x10, 0x70bd29, 0x0, {}, [@WGDEVICE_A_PEERS={0x9a8, 0x8, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @remote}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x248, @mcast1, 0x1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @empty}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x634, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @private=0xa010101}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x401}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @local}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x254, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x42}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x368, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}]}, {0x2c4, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6d0fdeb26f834a44f692eba58b76736ea2783aa403ebfe96f87416fd9b374ffc"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "590bc5a64349f6a29a13ee7cd9c4c6d5d04fec495680e64fdcfff99f540d9d03"}, @WGPEER_A_ALLOWEDIPS={0x21c, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a0989d2cf8bd9021d9ec9d32fb9ce177cdb66867e58f41f2e6621fe925f3e0c4"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b6810390199ab281f2b7fcd09af98ce1b8912c5cca3b33f3d4d93f7760959ec2"}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x9c4}, 0x1, 0x0, 0x0, 0x4000}, 0x10) unshare(0x2040400) r13 = socket(0x1d, 0x2, 0x6) getsockopt$SO_COOKIE(r13, 0x1, 0x39, 0x0, &(0x7f0000000300)) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000076d0a408450c8e625be001000000b2199000"/36], 0x0) sync() sync() 3.697496043s ago: executing program 3 (id=8442): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x1, r2}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000005c0)={0x0, r2}) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000500)=' ,1\t#|^q', 0x8}], 0x1) r3 = fsmount(r0, 0x0, 0xf6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, 0x0, 0x0, 0x4}, 0x20) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000000)={'vlan1\x00', {0x2, 0x4e21, @broadcast}}) syz_clone3(&(0x7f0000001240)={0xa9004080, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.316043007s ago: executing program 3 (id=8443): syz_emit_ethernet(0x77, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @val={@val={0x88a8, 0x3}, {0x8100, 0x4, 0x1, 0x1}}, {@generic={0x6007, "f9fc3ad57ff8bafda6e983dcbcdc25186142bee93127c2ea90e07d63a1f9308533d587d7b30751e2def2f7cec871885b605c75ed6e0a9fff503a79243eb332de48103785758c81a2b0071aed3572aec9998b25d5b67b7926708a01501e4ac45737"}}}, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2f, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x1e23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x5a, "43f61f235132d9d4f53d577994a3daee546e8a9cc35f6b125e86d6a79325e1a1dde0e1ca950b27f77b3bd13c98f72de1694e0c7ac57dc9b5de9f7a227cace0eebf835a403b6676d81051422f9e99932039f11672a2b5c635ed37"}, &(0x7f0000000040)=0x62) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e20, @multicast2}}, 0x7, 0x9}, 0x90) syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12015002e35b3320fd0b06013920010203010902240001fb8040570904"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) 2.373680371s ago: executing program 5 (id=8444): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in=@local, 0xee24, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x200000004, 0x3, 0x20000a0de, 0x100000000, 0x0, 0x200000003, 0x9}, {0x5, 0xfffffffffffffffd}, 0x5, 0x0, 0x1, 0x0, 0x6, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x3502, 0x1, 0x8, 0x0, 0x9075, 0x800, 0xc5f}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_io_uring_setup(0x254c, &(0x7f0000000000)={0x0, 0xf19c, 0x800, 0x3, 0x39}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, 0x0, 0x0, 0x6, 0x1006, &(0x7f0000002080)=""/4102, 0x0, 0x3}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_usbip_server_init(0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x5}, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) 2.233982767s ago: executing program 3 (id=8445): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x31) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 2.127535797s ago: executing program 0 (id=8446): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 1.446680863s ago: executing program 3 (id=8447): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f00000006c0)=[@uexit={0x0, 0x18, 0xce}, @cpuid={0x2, 0x18, {0x800, 0x10}}, @cpuid={0x2, 0x18, {0xab8, 0x401}}, @cpuid={0x2, 0x18, {0x2, 0x3e}}, @code={0x1, 0x5d, {"640f07440f0766b813018ec8264c0fc7ad00000100b9800000c00f3235000400000f30c4a135691e730048b864000000000000000f23c80f21f8350400c0000f23f8c401e9d0c4c4411914c2"}}, @code={0x1, 0x50, {"66ba2100ecb904080000b800980000ba000000000f30c4813658f40f01cb4c0fc79fa8404c87f20f07f20fc27b00ae66b808010f00d066baa10066ed670f30"}}], 0x10d}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x3e}, 0x28) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x7c, 0x0, @multicast1}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2193, 0xd000}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4040) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 800.786281ms ago: executing program 5 (id=8449): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000400)='cdg', 0x3) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000080)=0x7, 0x4) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) shutdown(r1, 0x1) 788.28811ms ago: executing program 1 (id=8450): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020"], 0x48}}, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f000020d000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000)=0x9, 0x5, 0x4) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x2, 0x8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffce4}, 0x4a3a95bbaf20048f) io_uring_setup(0x5909, &(0x7f0000000400)={0x0, 0xd486, 0x80, 0x7, 0x39d}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x10000021, 0x17fffffe, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x1}, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') epoll_create1(0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) shmctl$IPC_RMID(r5, 0x0) socket(0x23, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r6 = msgget$private(0x0, 0x3ac) msgsnd(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="0213"], 0x1fa, 0x800) msgrcv(r6, 0x0, 0x0, 0x0, 0x5800) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 700.812836ms ago: executing program 7 (id=8451): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r1, 0x101, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffff8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004040}, 0x900) r2 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x8a}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000000) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, &(0x7f0000000000)) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000280)=@v={0x93, 0x3, 0xb8665252e30fa87a, 0x9e, @MIDI_NOTEON=@note=0x14, 0x2, 0x4}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/sync_on_suspend', 0x40901, 0x0) write$FUSE_DIRENT(r4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r4], 0x200001d0) syz_usb_connect(0x2, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="12015002c9825f2082057400702a0102030109021b000205e820040904000000ffdda50309040006"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=8452): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x5}, {0xfffffff9, 0x5}]}}) kernel console output (not intermixed with test programs): nfig 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2161.880517][T22656] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2161.897380][T22656] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2161.922081][T22656] usb 6-1: config 0 descriptor?? [ 2161.928222][ T3043] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2162.146468][T22656] plantronics 0003:047F:FFFF.0071: reserved main item tag 0xd [ 2162.229827][T22656] plantronics 0003:047F:FFFF.0071: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 2162.273069][T22656] usb 6-1: USB disconnect, device number 58 [ 2162.305179][ T3051] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7788'. [ 2162.352123][ T3051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7788'. [ 2162.362103][ T3051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7788'. [ 2162.381099][ T3059] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7791'. [ 2162.462160][ T3055] fido_id[3055]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 2163.497171][ T3070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2163.831580][ T3078] loop2: detected capacity change from 0 to 7 [ 2163.839528][ T3078] Dev loop2: unable to read RDB block 7 [ 2163.845859][ T3078] loop2: AHDI p2 p3 [ 2163.853692][ T3078] loop2: partition table partially beyond EOD, truncated [ 2163.887013][ T3081] netlink: 404 bytes leftover after parsing attributes in process `syz.7.7797'. [ 2163.900968][ T3078] loop2: p3 start 335544320 is beyond EOD, truncated [ 2164.476164][ T3089] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2164.716853][T16046] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 2164.949244][T16046] usb 2-1: Using ep0 maxpacket: 8 [ 2165.150404][T16046] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2165.164961][T16046] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 2165.176201][T16046] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2165.205677][T16046] usb 2-1: config 0 descriptor?? [ 2165.466444][ T3075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2165.476142][ T3075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2165.601165][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2165.609935][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2165.755601][ T3102] binder: 3101:3102 ioctl 8138ae83 7f41a4828aa0 returned -22 [ 2165.807050][ T1270] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 2165.950319][ T3107] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 2165.971954][ T1270] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2165.988315][ T3108] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 2166.006362][ T1270] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2166.041685][ T1270] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2166.076084][ T1270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2166.152950][ T1270] usb 1-1: config 0 descriptor?? [ 2166.528780][ T3103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2166.610111][ T3103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2166.662261][ T1270] usbhid 1-1:0.0: can't add hid device: -71 [ 2166.677304][ T1270] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2166.700657][ T1270] usb 1-1: USB disconnect, device number 3 [ 2167.207080][ T1270] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 2167.408894][T16906] usb 2-1: USB disconnect, device number 119 [ 2167.427642][ T1270] usb 1-1: config index 0 descriptor too short (expected 59, got 36) [ 2167.443529][ T1270] usb 1-1: config 1 has an invalid descriptor of length 13, skipping remainder of the config [ 2167.483579][ T1270] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2167.555497][ T1270] usb 1-1: New USB device found, idVendor=057f, idProduct=a4a3, bcdDevice= 0.40 [ 2167.572480][ T1270] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2167.586434][ T1270] usb 1-1: Product: syz [ 2167.591202][ T1270] usb 1-1: Manufacturer: syz [ 2167.598099][ T1270] usb 1-1: SerialNumber: syz [ 2167.604521][ T3125] loop2: detected capacity change from 0 to 7 [ 2167.621194][ T1270] usb 1-1: bad CDC descriptors [ 2167.629415][T30449] Dev loop2: unable to read RDB block 7 [ 2167.645152][T30449] loop2: AHDI p2 p3 [ 2167.654537][T30449] loop2: partition table partially beyond EOD, truncated [ 2167.670907][T30449] loop2: p3 start 335544320 is beyond EOD, truncated [ 2167.679530][ T3125] Dev loop2: unable to read RDB block 7 [ 2167.685147][ T3125] loop2: AHDI p2 p3 [ 2167.692515][ T3125] loop2: partition table partially beyond EOD, truncated [ 2167.704381][ T3125] loop2: p3 start 335544320 is beyond EOD, truncated [ 2168.935950][T15760] usb 1-1: USB disconnect, device number 4 [ 2169.000389][ T3138] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 2169.280911][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 2169.280932][ T30] audit: type=1326 audit(1765128120.324:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3139 comm="syz.0.7813" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ac098f749 code=0x0 [ 2170.814876][ T3149] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2171.686264][ T1270] hid_parser_main: 7 callbacks suppressed [ 2171.686282][ T1270] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 2171.754790][ T1270] hid-generic 0000:0000:0000.0072: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2172.322915][ T3166] loop2: detected capacity change from 0 to 7 [ 2172.334140][T30449] Dev loop2: unable to read RDB block 7 [ 2172.412006][ T3170] pimreg: entered allmulticast mode [ 2172.426354][ T3170] pimreg: left allmulticast mode [ 2172.475411][ T3172] sctp: [Deprecated]: syz.0.7821 (pid 3172) Use of int in max_burst socket option deprecated. [ 2172.475411][ T3172] Use struct sctp_assoc_value instead [ 2172.475716][T30449] loop2: AHDI p2 p3 [ 2172.531873][ T3171] program syz.7.7818 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2172.601348][T30449] loop2: partition table partially beyond EOD, truncated [ 2172.622252][T30449] loop2: p3 start 335544320 is beyond EOD, truncated [ 2172.688439][ T3166] Dev loop2: unable to read RDB block 7 [ 2172.694131][ T3166] loop2: AHDI p2 p3 [ 2172.698678][ T3166] loop2: partition table partially beyond EOD, truncated [ 2172.720610][ T3166] loop2: p3 start 335544320 is beyond EOD, truncated [ 2172.887675][ T3174] gtp0: entered allmulticast mode [ 2173.022660][ T1270] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 2173.099722][ T3182] netlink: 'syz.3.7822': attribute type 2 has an invalid length. [ 2173.122747][ T3182] : entered promiscuous mode [ 2173.291411][ T1270] usb 6-1: Using ep0 maxpacket: 16 [ 2173.319358][ T1270] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2173.345949][ T1270] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2173.366489][ T1270] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 2173.386778][ T1270] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2173.393560][ T1270] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2173.404061][ T1270] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2173.417116][ T1270] usb 6-1: config 0 descriptor?? [ 2173.462141][ T3188] loop2: detected capacity change from 0 to 7 [ 2173.489937][ T3188] Dev loop2: unable to read RDB block 7 [ 2173.513718][ T3188] loop2: unable to read partition table [ 2173.627266][ T3188] loop2: partition table beyond EOD, truncated [ 2173.641107][ T3188] loop_reread_partitions: partition scan of loop2 (被x, ) failed (rc=-5) [ 2173.907774][ T3170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2173.917266][ T3170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2173.928653][ T3170] netlink: 112 bytes leftover after parsing attributes in process `syz.5.7819'. [ 2173.937957][ T3170] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7819'. [ 2173.947143][ T3170] tipc: Started in network mode [ 2173.952112][ T3170] tipc: Node identity 10000, cluster identity 2 [ 2173.958489][ T3170] tipc: Node number set to 65536 [ 2174.030748][ T1270] hid (null): unknown global tag 0xdf [ 2174.079533][ T1270] hid (null): unknown global tag 0xe [ 2176.501468][T22656] usb 6-1: USB disconnect, device number 59 [ 2176.792802][ T3212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7828'. [ 2177.008735][ T3218] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7829'. [ 2177.240570][ T3221] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2177.441484][ T3228] loop2: detected capacity change from 0 to 7 [ 2177.569544][ T3228] Dev loop2: unable to read RDB block 7 [ 2177.575765][ T3228] loop2: AHDI p2 p3 [ 2177.614536][ T3228] loop2: partition table partially beyond EOD, truncated [ 2177.739778][ T3228] loop2: p3 start 335544320 is beyond EOD, truncated [ 2177.843161][ T3231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7833'. [ 2178.087186][ T3235] loop2: detected capacity change from 0 to 7 [ 2178.114945][ T3235] Dev loop2: unable to read RDB block 7 [ 2178.136417][ T3235] loop2: unable to read partition table [ 2178.158717][ T3235] loop2: partition table beyond EOD, truncated [ 2178.181355][ T3235] loop_reread_partitions: partition scan of loop2 (被x, ) failed (rc=-5) [ 2178.816978][T16046] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 2178.966730][T16046] usb 1-1: Using ep0 maxpacket: 32 [ 2178.968734][T16046] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2178.968791][T16046] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2178.968818][T16046] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2178.971566][T16046] usb 1-1: config 0 descriptor?? [ 2179.121000][ T3234] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 2179.230350][ T1009] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2179.242275][ T1009] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2179.262754][ T1009] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2179.288764][ T1009] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2179.427090][T16046] kye 0003:0458:5013.0074: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 2179.464868][T16046] kye 0003:0458:5013.0074: unknown main item tag 0x7 [ 2179.493704][T16046] kye 0003:0458:5013.0074: hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 2179.532141][T16046] kye 0003:0458:5013.0074: tablet-enabling feature report not found [ 2179.554817][T16046] kye 0003:0458:5013.0074: tablet enabling failed [ 2179.781906][ T3257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2179.859821][ T3257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2180.420151][ T3269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2180.734315][ T3269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2181.118002][T22656] usb 1-1: USB disconnect, device number 5 [ 2181.595045][ T3277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2181.627126][ T3277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2181.939504][ T3283] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2182.024686][ T3287] tipc: Started in network mode [ 2182.068614][ T3287] tipc: Node identity ac14140f, cluster identity 4711 [ 2182.146027][ T3287] tipc: New replicast peer: 255.255.255.255 [ 2182.242773][ T3287] tipc: Enabled bearer , priority 10 [ 2182.320470][ T3289] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7848'. [ 2182.360010][ T3296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7851'. [ 2182.440527][ T3298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2182.518923][ T3298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2182.536827][ T3289] tipc: Disabling bearer [ 2182.571113][ T3298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2182.615953][ T3298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2182.768149][ T3303] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7854'. [ 2183.101344][ T3308] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7856'. [ 2183.967424][T24607] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 2184.082224][ T30] audit: type=1804 audit(1765128135.124:2312): pid=3347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.7862" name="/newroot/311/file1" dev="tmpfs" ino=1622 res=1 errno=0 [ 2184.333786][ T3349] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7865'. [ 2184.454469][ T3353] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2184.749481][ T3360] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2184.859452][ T3364] loop2: detected capacity change from 0 to 7 [ 2184.871323][ T3364] Dev loop2: unable to read RDB block 7 [ 2184.878354][ T3364] loop2: AHDI p2 p3 [ 2184.883332][ T3364] loop2: partition table partially beyond EOD, truncated [ 2184.900162][ T3364] loop2: p3 start 335544320 is beyond EOD, truncated [ 2184.987419][T15760] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 2185.146796][T15760] usb 1-1: Using ep0 maxpacket: 8 [ 2185.181655][T15760] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 2185.203905][T15760] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2185.235628][T15760] usb 1-1: Product: syz [ 2185.259657][T15760] usb 1-1: Manufacturer: syz [ 2185.280216][T15760] usb 1-1: SerialNumber: syz [ 2185.342119][T15760] usb 1-1: config 0 descriptor?? [ 2185.390828][T15760] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 2185.653150][ T3385] loop9: detected capacity change from 0 to 7 [ 2185.660528][T15760] gspca_vc032x: reg_r err -32 [ 2185.670580][T15760] vc032x 1-1:0.0: probe with driver vc032x failed with error -32 [ 2185.684861][ T3385] Dev loop9: unable to read RDB block 7 [ 2185.700500][ T3385] loop9: unable to read partition table [ 2185.717142][ T3385] loop9: partition table beyond EOD, truncated [ 2185.742063][ T3385] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 2185.817791][T16046] usb 1-1: USB disconnect, device number 6 [ 2186.041920][ T3395] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2186.550699][ T3423] FAULT_INJECTION: forcing a failure. [ 2186.550699][ T3423] name failslab, interval 1, probability 0, space 0, times 0 [ 2186.598489][ T3423] CPU: 0 UID: 0 PID: 3423 Comm: syz.0.7881 Tainted: G L syzkaller #0 PREEMPT(full) [ 2186.598526][ T3423] Tainted: [L]=SOFTLOCKUP [ 2186.598540][ T3423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2186.598554][ T3423] Call Trace: [ 2186.598563][ T3423] [ 2186.598573][ T3423] dump_stack_lvl+0x189/0x250 [ 2186.598608][ T3423] ? __pfx____ratelimit+0x10/0x10 [ 2186.598637][ T3423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2186.598660][ T3423] ? __pfx__printk+0x10/0x10 [ 2186.598694][ T3423] ? __pfx___might_resched+0x10/0x10 [ 2186.598718][ T3423] ? fs_reclaim_acquire+0x7d/0x100 [ 2186.598745][ T3423] should_fail_ex+0x414/0x560 [ 2186.598776][ T3423] should_failslab+0xa8/0x100 [ 2186.598805][ T3423] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 2186.598841][ T3423] ? __alloc_skb+0x255/0x430 [ 2186.598869][ T3423] ? napi_skb_cache_get+0x4a5/0x780 [ 2186.598894][ T3423] ? napi_skb_cache_get+0x151/0x780 [ 2186.598928][ T3423] __alloc_skb+0x255/0x430 [ 2186.598961][ T3423] ? __pfx___alloc_skb+0x10/0x10 [ 2186.598991][ T3423] ? netlink_autobind+0xdb/0x300 [ 2186.599011][ T3423] ? netlink_autobind+0x2c2/0x300 [ 2186.599037][ T3423] netlink_sendmsg+0x5c6/0xb30 [ 2186.599068][ T3423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2186.599093][ T3423] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2186.599117][ T3423] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2186.599139][ T3423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2186.599161][ T3423] __sock_sendmsg+0x21c/0x270 [ 2186.599200][ T3423] ____sys_sendmsg+0x505/0x820 [ 2186.599240][ T3423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2186.599282][ T3423] ? import_iovec+0x74/0xa0 [ 2186.599319][ T3423] ___sys_sendmsg+0x21f/0x2a0 [ 2186.599345][ T3423] ? __pfx____sys_sendmsg+0x10/0x10 [ 2186.599374][ T3423] ? rcu_read_lock_any_held+0xb3/0x120 [ 2186.599414][ T3423] ? __fget_files+0x2a/0x420 [ 2186.599435][ T3423] ? __fget_files+0x3a0/0x420 [ 2186.599462][ T3423] __x64_sys_sendmsg+0x19b/0x260 [ 2186.599488][ T3423] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2186.599519][ T3423] ? __pfx_ksys_write+0x10/0x10 [ 2186.599538][ T3423] ? do_syscall_64+0xbe/0xf80 [ 2186.599562][ T3423] do_syscall_64+0xfa/0xf80 [ 2186.599583][ T3423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2186.599599][ T3423] ? clear_bhb_loop+0x60/0xb0 [ 2186.599618][ T3423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2186.599633][ T3423] RIP: 0033:0x7f7ac098f749 [ 2186.599650][ T3423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2186.599669][ T3423] RSP: 002b:00007f7ac17c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2186.599692][ T3423] RAX: ffffffffffffffda RBX: 00007f7ac0be5fa0 RCX: 00007f7ac098f749 [ 2186.599709][ T3423] RDX: 0000000000000844 RSI: 0000200000000040 RDI: 0000000000000004 [ 2186.599723][ T3423] RBP: 00007f7ac17c0090 R08: 0000000000000000 R09: 0000000000000000 [ 2186.599735][ T3423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2186.599747][ T3423] R13: 00007f7ac0be6038 R14: 00007f7ac0be5fa0 R15: 00007f7ac0d0fa28 [ 2186.599781][ T3423] [ 2187.296777][T15760] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 2187.456764][T15760] usb 1-1: Using ep0 maxpacket: 32 [ 2187.488018][T15760] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2187.503594][ T3442] nvme_fabrics: missing parameter 'transport=%s' [ 2187.506056][T15760] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2187.510379][ T3442] nvme_fabrics: missing parameter 'nqn=%s' [ 2187.520649][T15760] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2187.536895][T15760] usb 1-1: Product: syz [ 2187.545041][T15760] usb 1-1: Manufacturer: syz [ 2187.550790][T15760] usb 1-1: SerialNumber: syz [ 2187.572736][T15760] usb 1-1: config 0 descriptor?? [ 2187.582609][ T3433] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2187.593372][T15760] hub 1-1:0.0: bad descriptor, ignoring hub [ 2187.609045][T15760] hub 1-1:0.0: probe with driver hub failed with error -5 [ 2188.398212][ T3433] usb 1-1: reset high-speed USB device number 7 using dummy_hcd [ 2188.571183][ T3446] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2188.803478][T24607] usb 1-1: USB disconnect, device number 7 [ 2189.465701][ T3476] netlink: 5 bytes leftover after parsing attributes in process `syz.7.7893'. [ 2192.079042][ T3491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7898'. [ 2192.885605][ T3502] loop2: detected capacity change from 0 to 7 [ 2192.894011][ T3502] Dev loop2: unable to read RDB block 7 [ 2192.901238][ T3502] loop2: AHDI p2 p3 [ 2192.905386][ T3502] loop2: partition table partially beyond EOD, truncated [ 2192.913287][ T3502] loop2: p3 start 335544320 is beyond EOD, truncated [ 2194.797805][ T3538] blktrace: Concurrent blktraces are not allowed on nullb0 [ 2194.985787][ T3542] loop2: detected capacity change from 0 to 7 [ 2194.993040][ T3542] Dev loop2: unable to read RDB block 7 [ 2194.999126][ T3542] loop2: AHDI p2 p3 [ 2195.003102][ T3542] loop2: partition table partially beyond EOD, truncated [ 2195.016763][T24607] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2195.017181][ T3542] loop2: p3 start 335544320 is beyond EOD, truncated [ 2195.328591][T24607] usb 2-1: config 0 has an invalid interface number: 33 but max is 0 [ 2195.337199][T24607] usb 2-1: config 0 has no interface number 0 [ 2195.343352][T24607] usb 2-1: New USB device found, idVendor=24cf, idProduct=59e4, bcdDevice= 9.43 [ 2195.382258][T24607] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2195.421256][T24607] usb 2-1: config 0 descriptor?? [ 2195.488929][T24607] usb-storage 2-1:0.33: USB Mass Storage device detected [ 2195.720459][ T3534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2195.740501][ T3534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2195.782808][T24607] usb 2-1: USB disconnect, device number 121 [ 2196.619001][ T3574] CUSE: unknown device info "" [ 2196.624243][ T3574] CUSE: unknown device info "" [ 2196.630478][ T3574] CUSE: DEVNAME unspecified [ 2196.647180][ T30] audit: type=1804 audit(1765128147.694:2313): pid=3574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.7919" name="/newroot/499/file1" dev="fuse" ino=1 res=1 errno=0 [ 2196.666953][ T1302] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 2196.766740][T27370] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 2196.846754][ T1302] usb 6-1: Using ep0 maxpacket: 8 [ 2196.854086][ T1302] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 2196.867578][ T1302] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 2196.877288][ T1302] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 2196.885531][ T1302] usb 6-1: Product: syz [ 2196.890733][ T1302] usb 6-1: Manufacturer: syz [ 2196.895467][ T1302] usb 6-1: SerialNumber: syz [ 2196.946742][T27370] usb 2-1: Using ep0 maxpacket: 32 [ 2196.955127][T27370] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2196.970114][T27370] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2196.980166][T27370] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2196.988682][T27370] usb 2-1: Product: syz [ 2196.993651][T27370] usb 2-1: Manufacturer: syz [ 2196.998486][T27370] usb 2-1: SerialNumber: syz [ 2197.007536][T27370] usb 2-1: config 0 descriptor?? [ 2197.013471][ T3572] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2197.022747][T27370] hub 2-1:0.0: bad descriptor, ignoring hub [ 2197.029517][T27370] hub 2-1:0.0: probe with driver hub failed with error -5 [ 2197.117550][ T1302] usb 6-1: Handspring Visor / Palm OS: port 0, is for Console use [ 2197.176787][ T1302] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 2197.184771][ T1302] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 2197.442551][ T1302] usb 6-1: palm_os_3_probe - error -71 getting bytes available request [ 2197.463037][ T1302] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 2197.500021][ T1302] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 2197.543361][ T1302] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 2197.571266][ T1302] usb 6-1: USB disconnect, device number 61 [ 2197.613732][ T1302] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 2197.651527][ T1302] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 2197.653637][ T3584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7924'. [ 2197.685392][ T1302] visor 6-1:1.0: device disconnected [ 2197.701872][ T3584] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2197.877276][ T3592] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7925'. [ 2197.934242][ T3595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2197.948832][ T3595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2198.198279][ T3572] raw-gadget.3 gadget.1: failed to queue resume event [ 2198.304146][T17358] raw-gadget.3 gadget.1: failed to queue suspend event [ 2198.441414][ T3572] raw-gadget.3 gadget.1: failed to queue resume event [ 2198.487809][T30142] raw-gadget.3 gadget.1: failed to queue suspend event [ 2198.846818][ T3572] raw-gadget.3 gadget.1: failed to queue resume event [ 2198.892198][T23415] raw-gadget.3 gadget.1: failed to queue suspend event [ 2198.985168][ T3572] raw-gadget.3 gadget.1: failed to queue resume event [ 2199.051710][T23415] raw-gadget.3 gadget.1: failed to queue suspend event [ 2199.126830][ T3572] raw-gadget.3 gadget.1: failed to queue resume event [ 2199.170027][T23415] raw-gadget.3 gadget.1: failed to queue suspend event [ 2199.246878][ T3572] raw-gadget.3 gadget.1: failed to queue resume event [ 2199.290050][T23415] raw-gadget.3 gadget.1: failed to queue suspend event [ 2199.366800][ T3572] raw-gadget.3 gadget.1: failed to queue resume event [ 2199.410090][T23022] raw-gadget.3 gadget.1: failed to queue suspend event [ 2199.489192][ T3572] raw-gadget.3 gadget.1: failed to queue resume event [ 2199.567522][T23112] raw-gadget.3 gadget.1: failed to queue suspend event [ 2199.657213][ T3572] raw-gadget.3 gadget.1: failed to queue disconnect event [ 2199.783660][T27370] usb 2-1: USB disconnect, device number 122 [ 2201.115395][ T3634] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7937'. [ 2201.277127][ T3621] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2201.283602][ T3621] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2201.302460][ T3621] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2201.309064][ T3621] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2201.325856][ T3621] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2201.408333][ T3621] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2201.468105][ T3621] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2201.474245][ T3621] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2201.797563][ T3621] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2202.240458][ T3621] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2202.316776][T28112] Bluetooth: hci4: command 0x0406 tx timeout [ 2202.760468][ T3646] loop2: detected capacity change from 0 to 7 [ 2202.802201][ T3648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2202.812141][ T3648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2202.881125][ T3646] Dev loop2: unable to read RDB block 7 [ 2202.894861][ T3646] loop2: AHDI p2 p3 [ 2202.916867][ T3646] loop2: partition table partially beyond EOD, truncated [ 2202.947579][ T3646] loop2: p3 start 335544320 is beyond EOD, truncated [ 2203.136981][T27370] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 2203.357169][T28112] Bluetooth: hci5: command 0x0406 tx timeout [ 2203.357175][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 2203.371543][T27370] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 2203.379804][T27370] usb 6-1: config 0 has no interface number 0 [ 2203.393579][T27370] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 2203.405442][ T3653] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2203.413838][T27370] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2203.446779][T27370] usb 6-1: Product: syz [ 2203.451021][T27370] usb 6-1: Manufacturer: syz [ 2203.461652][T27370] usb 6-1: SerialNumber: syz [ 2203.490560][T27370] usb 6-1: config 0 descriptor?? [ 2203.522431][T28112] Bluetooth: hci3: command 0x0406 tx timeout [ 2203.743883][T27370] uvcvideo 6-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 2203.758899][T27370] uvcvideo 6-1:0.64: Entity type for entity Output 3 was not initialized! [ 2203.787439][T27370] uvcvideo 6-1:0.64: Failed to create links for entity 3 [ 2203.802675][T27370] uvcvideo 6-1:0.64: Failed to register entities (-22). [ 2203.830708][T27370] usb 6-1: USB disconnect, device number 62 [ 2203.839363][T28112] Bluetooth: hci1: command 0x0406 tx timeout [ 2204.041036][ T3669] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7948'. [ 2204.293668][ T30] audit: type=1326 audit(1765128155.334:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3672 comm="syz.1.7950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37858f749 code=0x7ffc0000 [ 2204.351885][ T30] audit: type=1326 audit(1765128155.374:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3672 comm="syz.1.7950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff37858f749 code=0x7ffc0000 [ 2204.396709][T28112] Bluetooth: hci4: command 0x0406 tx timeout [ 2204.408477][ T30] audit: type=1326 audit(1765128155.374:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3672 comm="syz.1.7950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37858f749 code=0x7ffc0000 [ 2204.431607][ T30] audit: type=1326 audit(1765128155.374:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3672 comm="syz.1.7950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff37858f749 code=0x7ffc0000 [ 2204.454784][ T30] audit: type=1326 audit(1765128155.374:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3672 comm="syz.1.7950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37858f749 code=0x7ffc0000 [ 2204.526886][ T30] audit: type=1326 audit(1765128155.374:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3672 comm="syz.1.7950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7ff37858f749 code=0x7ffc0000 [ 2204.600857][ T30] audit: type=1326 audit(1765128155.374:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3672 comm="syz.1.7950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37858f749 code=0x7ffc0000 [ 2204.663576][ T30] audit: type=1326 audit(1765128155.374:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3672 comm="syz.1.7950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37858f749 code=0x7ffc0000 [ 2205.070346][ T3689] mac80211_hwsim hwsim51 syzkaller0: left promiscuous mode [ 2205.097009][ T3689] mac80211_hwsim hwsim51 syzkaller0: left allmulticast mode [ 2205.104854][ T3689] tipc: Resetting bearer [ 2205.198990][T27370] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 2205.437085][T28112] Bluetooth: hci0: command 0x0406 tx timeout [ 2205.437095][ T5828] Bluetooth: hci5: command 0x0406 tx timeout [ 2205.640131][T28112] Bluetooth: hci3: command 0x0406 tx timeout [ 2205.707119][T27370] usb 6-1: Using ep0 maxpacket: 16 [ 2205.724930][T27370] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2205.745543][T27370] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 2205.759060][T27370] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2205.768191][T27370] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2205.916819][T28112] Bluetooth: hci1: command 0x0406 tx timeout [ 2206.005409][T27370] usb 6-1: config 0 descriptor?? [ 2206.301075][ T3696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2206.458792][T27370] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2206.689515][ T3701] loop2: detected capacity change from 0 to 7 [ 2206.709133][ T3701] Dev loop2: unable to read RDB block 7 [ 2206.726192][ T3701] loop2: unable to read partition table [ 2206.740944][ T3701] loop2: partition table beyond EOD, truncated [ 2206.767038][ T3701] loop_reread_partitions: partition scan of loop2 (被x, ) failed (rc=-5) [ 2206.809523][T15760] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 2206.839064][ T5197] Dev loop2: unable to read RDB block 7 [ 2206.862897][ T5197] loop2: unable to read partition table [ 2206.886936][ T5197] loop2: partition table beyond EOD, truncated [ 2206.987204][T15760] usb 2-1: Using ep0 maxpacket: 8 [ 2207.003429][T15760] usb 2-1: config 64 has an invalid interface number: 19 but max is 0 [ 2207.029852][T15760] usb 2-1: config 64 has no interface number 0 [ 2207.053560][T15760] usb 2-1: config 64 interface 19 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2207.082348][T15760] usb 2-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 2207.091968][T15760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2207.160656][T15760] usb 2-1: probing VID:PID(2201:012C) [ 2207.191646][T15760] usb 2-1: vub300 testing UNKNOWN EndPoint(0) 02 [ 2207.225179][T15760] usb 2-1: vub300 ignoring EndPoint(0) 02 [ 2207.243715][T15760] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 2207.271036][T15760] vub300 2-1:64.19: probe with driver vub300 failed with error -22 [ 2207.442966][ T3709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2207.476183][ T3709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2208.068279][T15760] usb 6-1: USB disconnect, device number 63 [ 2208.409620][ T3723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2208.443326][ T3723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2208.736900][T15760] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 2208.770951][ T3729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2208.788462][ T3729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2208.816329][ T3729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2208.852591][ T3729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2208.867883][ T3730] netlink: 'syz.3.7964': attribute type 1 has an invalid length. [ 2208.919822][T15760] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2208.932335][T15760] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2208.947754][T15760] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2208.969683][T15760] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2208.990890][T15760] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2209.018857][T15760] usb 6-1: Product: syz [ 2209.023707][ T3730] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2209.030790][T15760] usb 6-1: Manufacturer: syz [ 2209.035914][T15760] usb 6-1: SerialNumber: syz [ 2209.052800][ T30] audit: type=1326 audit(1765128160.094:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3734 comm="syz.0.7966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac098f749 code=0x7ffc0000 [ 2209.056050][T15760] hub 6-1:1.0: bad descriptor, ignoring hub [ 2209.081402][T15760] hub 6-1:1.0: probe with driver hub failed with error -5 [ 2209.152141][ T3729] bond3: (slave batadv1): Opening slave failed [ 2209.168248][ T30] audit: type=1326 audit(1765128160.094:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3734 comm="syz.0.7966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac098f749 code=0x7ffc0000 [ 2209.353956][T15760] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 64 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2209.659970][ T5921] usb 2-1: USB disconnect, device number 123 [ 2210.017374][T27370] usb 6-1: USB disconnect, device number 64 [ 2210.027052][T27370] usblp0: removed [ 2210.323132][ T3755] loop2: detected capacity change from 0 to 7 [ 2210.527521][ T3748] syz.3.7967 (3748): drop_caches: 2 [ 2210.601433][ T3755] Dev loop2: unable to read RDB block 7 [ 2210.610471][ T3755] loop2: unable to read partition table [ 2210.616464][ T3755] loop2: partition table beyond EOD, truncated [ 2210.657310][ T3755] loop_reread_partitions: partition scan of loop2 (被x, ) failed (rc=-5) [ 2211.144820][ T3765] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 2211.257117][ T3765] bond1 (unregistering): Released all slaves [ 2211.326977][ T5921] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 2211.542259][ T5921] usb 2-1: Using ep0 maxpacket: 8 [ 2211.556979][ T5921] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2211.578089][ T5921] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2211.616671][ T5921] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2211.656488][ T5921] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2211.716786][ T5921] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2211.736152][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2212.001464][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 2212.001488][ T30] audit: type=1326 audit(1765128163.044:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3792 comm="syz.5.7979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3044b8f749 code=0x7ffc0000 [ 2212.040551][ T5921] usb 2-1: GET_CAPABILITIES returned 0 [ 2212.046125][ T5921] usbtmc 2-1:16.0: can't read capabilities [ 2212.156359][ T30] audit: type=1326 audit(1765128163.084:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3792 comm="syz.5.7979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3044b8f749 code=0x7ffc0000 [ 2212.177055][ T5921] usb 2-1: USB disconnect, device number 124 [ 2212.266184][ T30] audit: type=1326 audit(1765128163.104:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3792 comm="syz.5.7979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3044b8f749 code=0x7ffc0000 [ 2212.366796][ T30] audit: type=1326 audit(1765128163.104:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3792 comm="syz.5.7979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3044b8f749 code=0x7ffc0000 [ 2212.390029][ T30] audit: type=1326 audit(1765128163.104:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3792 comm="syz.5.7979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3044b8f749 code=0x7ffc0000 [ 2212.414171][ T30] audit: type=1326 audit(1765128163.104:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3792 comm="syz.5.7979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f3044b8f749 code=0x7ffc0000 [ 2212.437580][ T30] audit: type=1326 audit(1765128163.104:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3792 comm="syz.5.7979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3044b8f749 code=0x7ffc0000 [ 2212.551696][ T30] audit: type=1326 audit(1765128163.104:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3792 comm="syz.5.7979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3044b8f749 code=0x7ffc0000 [ 2213.021032][ T3811] tipc: Started in network mode [ 2213.028605][ T3811] tipc: Node identity d2b019789f5a, cluster identity 4711 [ 2213.044371][ T3811] tipc: Enabled bearer , priority 0 [ 2213.061675][ T3811] syzkaller0: entered promiscuous mode [ 2213.086750][ T3811] syzkaller0: entered allmulticast mode [ 2213.187173][ T3811] tipc: Resetting bearer [ 2213.694840][T27370] hid-generic 009C:0008:0003.0075: unknown main item tag 0x0 [ 2213.730678][T27370] hid-generic 009C:0008:0003.0075: unknown main item tag 0x0 [ 2213.861663][T27370] hid-generic 009C:0008:0003.0075: unknown main item tag 0x0 [ 2214.013148][ T3828] syz.1.7986 (3828): drop_caches: 2 [ 2214.035736][T27370] hid-generic 009C:0008:0003.0075: unknown main item tag 0x0 [ 2214.054555][T27370] hid-generic 009C:0008:0003.0075: unknown main item tag 0x0 [ 2214.063520][T27370] hid-generic 009C:0008:0003.0075: unknown main item tag 0x0 [ 2214.074084][ T5921] tipc: Node number set to 1307187576 [ 2214.110182][T27370] hid-generic 009C:0008:0003.0075: unknown main item tag 0x0 [ 2214.217627][T27370] hid-generic 009C:0008:0003.0075: unknown main item tag 0x0 [ 2214.256793][T27370] hid-generic 009C:0008:0003.0075: unknown main item tag 0x0 [ 2214.315075][T27370] hid-generic 009C:0008:0003.0075: unknown main item tag 0x0 [ 2214.360367][T27370] hid-generic 009C:0008:0003.0075: hidraw0: HID v0.05 Device [syz1] on syz0 [ 2214.949631][ T3839] netlink: 'syz.5.7990': attribute type 3 has an invalid length. [ 2214.968003][T27370] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 2215.136969][T27370] usb 1-1: device descriptor read/64, error -71 [ 2215.396736][T27370] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 2215.509649][ T30] audit: type=1326 audit(1765128166.554:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3847 comm="syz.1.7992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37858f749 code=0x7ffc0000 [ 2215.536939][ T30] audit: type=1326 audit(1765128166.564:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3847 comm="syz.1.7992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff37858f749 code=0x7ffc0000 [ 2215.537300][T27370] usb 1-1: device descriptor read/64, error -71 [ 2215.652818][ T3850] fuse: Unknown parameter 'group_id}00000000000000000000' [ 2215.747438][T27370] usb usb1-port1: attempt power cycle [ 2215.793497][ T3855] netlink: 'syz.5.7995': attribute type 1 has an invalid length. [ 2215.861441][ T3859] loop5: detected capacity change from 0 to 7 [ 2215.869631][ T3859] loop5: p1 [ 2215.872921][ T3859] loop5: partition table partially beyond EOD, truncated [ 2215.880583][ T3859] loop5: p1 size 1919251295 extends beyond EOD, truncated [ 2215.960119][T30449] udevd[30449]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 2216.091810][ T3868] IPVS: set_ctl: invalid protocol: 51 172.20.20.59:20001 [ 2216.096912][T27370] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 2216.148736][T27370] usb 1-1: device descriptor read/8, error -71 [ 2216.269101][ T3872] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 2216.292633][ T3872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8000'. [ 2216.387209][T27370] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 2216.418143][T27370] usb 1-1: device descriptor read/8, error -71 [ 2216.537200][T27370] usb usb1-port1: unable to enumerate USB device [ 2216.667101][T15760] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 2216.926819][T15760] usb 6-1: Using ep0 maxpacket: 16 [ 2216.946507][T15760] usb 6-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2217.271598][T15760] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2217.280100][T15760] usb 6-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 2217.314652][T15760] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2217.355320][T15760] usb 6-1: config 0 descriptor?? [ 2217.829393][T15760] waltop 0003:172F:0034.0076: item fetching failed at offset 1/3 [ 2217.855973][T15760] waltop 0003:172F:0034.0076: probe with driver waltop failed with error -22 [ 2217.995704][ T3875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2218.004798][ T3875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2218.197005][T27370] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 2218.269679][ T3900] loop5: detected capacity change from 0 to 7 [ 2218.288711][ T3900] loop5: p1 [ 2218.292017][ T3900] loop5: partition table partially beyond EOD, truncated [ 2218.299964][ T3900] loop5: p1 size 1919251295 extends beyond EOD, truncated [ 2218.356751][T27370] usb 1-1: Using ep0 maxpacket: 8 [ 2218.370148][T27370] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2218.389349][T27370] usb 1-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 2218.404642][T30449] udevd[30449]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 2218.424501][T27370] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2218.443684][T27370] usb 1-1: Product: syz [ 2218.466531][T27370] usb 1-1: Manufacturer: syz [ 2218.493757][T27370] usb 1-1: SerialNumber: syz [ 2218.715088][ T3892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2218.726329][ T3892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2218.741970][T27370] usb 1-1: selecting invalid altsetting 1 [ 2218.750704][T27370] catc 1-1:8.0: Can't set altsetting 1. [ 2218.758068][T27370] catc 1-1:8.0: probe with driver catc failed with error -5 [ 2218.773023][T27370] usb 1-1: USB disconnect, device number 12 [ 2218.806897][T22656] usb 2-1: new low-speed USB device number 125 using dummy_hcd [ 2218.968964][T22656] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 2218.977413][T22656] usb 2-1: config 0 has an invalid descriptor of length 202, skipping remainder of the config [ 2218.988152][T22656] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2218.997210][T22656] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 2219.006263][T22656] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2219.017327][T22656] usb 2-1: config 0 descriptor?? [ 2219.225715][T22656] usb 2-1: string descriptor 0 read error: -71 [ 2219.237265][T22656] usb 2-1: USB disconnect, device number 125 [ 2219.423623][ T5921] usb 6-1: USB disconnect, device number 65 [ 2219.546802][T15760] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 2219.608479][ T3916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8014'. [ 2219.623554][ T3916] tipc: Resetting bearer [ 2219.631331][ T3916] tipc: Resetting bearer [ 2219.708597][T15760] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2219.719419][T15760] usb 1-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 2219.730843][T15760] usb 1-1: config 0 interface 0 altsetting 144 has 0 endpoint descriptors, different from the interface descriptor's value: 127 [ 2219.753563][T15760] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2219.766728][T15760] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 2219.782183][T15760] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2219.820987][T15760] usb 1-1: config 0 descriptor?? [ 2219.856855][ T5921] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 2220.009730][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2220.033296][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 2220.070417][ T5921] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2220.079913][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2220.114120][ T3911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2220.134108][ T3911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2220.149765][ T3911] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8012'. [ 2220.160418][ T5921] usb 6-1: Product: syz [ 2220.165527][ T5921] usb 6-1: Manufacturer: syz [ 2220.170452][ T5921] usb 6-1: SerialNumber: syz [ 2220.331500][ T5921] usb 6-1: config 0 descriptor?? [ 2220.623950][T15760] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2220.665002][T15760] usb 1-1: USB disconnect, device number 13 [ 2220.849975][ T5921] usb 6-1: USB disconnect, device number 66 [ 2221.535451][ T3942] loop5: detected capacity change from 0 to 7 [ 2221.558138][ T3942] loop5: p1 [ 2221.561550][ T3942] loop5: partition table partially beyond EOD, truncated [ 2221.587967][ T3942] loop5: p1 size 1919251295 extends beyond EOD, truncated [ 2221.597005][ T5921] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 2221.687871][T30449] udevd[30449]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 2221.774925][ T5921] usb 2-1: config 0 has an invalid interface number: 147 but max is 0 [ 2221.797430][ T5921] usb 2-1: config 0 has no interface number 0 [ 2221.812181][ T5921] usb 2-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 2221.836023][ T5921] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 2221.847269][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2221.855402][ T5921] usb 2-1: Product: syz [ 2221.859970][ T5921] usb 2-1: Manufacturer: syz [ 2221.864695][ T5921] usb 2-1: SerialNumber: syz [ 2221.869462][T24607] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 2221.883593][ T5921] usb 2-1: config 0 descriptor?? [ 2221.889964][ T3933] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2221.937918][ T5921] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2222.053213][T24607] usb 1-1: config 0 has an invalid interface number: 172 but max is 0 [ 2222.071045][T24607] usb 1-1: config 0 has no interface number 0 [ 2222.093108][T24607] usb 1-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=3b.de [ 2222.103225][T24607] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2222.112292][T24607] usb 1-1: Product: syz [ 2222.117118][T24607] usb 1-1: Manufacturer: syz [ 2222.121869][T24607] usb 1-1: SerialNumber: syz [ 2222.138449][T24607] usb 1-1: config 0 descriptor?? [ 2222.150142][T24607] dvb-usb: found a 'Pinnacle 400e DVB-S USB2.0' in warm state. [ 2222.158178][T24607] dvb-usb: bulk message failed: -22 (4/0) [ 2222.163951][T24607] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2222.174930][T24607] dvb-usb: bulk message failed: -22 (5/0) [ 2222.180847][T24607] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2222.195689][T24607] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2222.213093][T24607] dvb-usb: Pinnacle 400e DVB-S USB2.0 error while loading driver (-19) [ 2222.355835][T24607] usb 1-1: USB disconnect, device number 14 [ 2222.469267][ T3955] loop2: detected capacity change from 0 to 7 [ 2222.476450][ T3955] Dev loop2: unable to read RDB block 7 [ 2222.484916][ T3955] loop2: unable to read partition table [ 2222.491152][ T3955] loop2: partition table beyond EOD, truncated [ 2222.497874][ T3955] loop_reread_partitions: partition scan of loop2 (被x, ) failed (rc=-5) [ 2222.723968][ T3959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2222.811486][ T3962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2222.828601][ T3962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2222.979563][T23415] usb 2-1: Failed to submit usb control message: -110 [ 2223.000636][T23415] usb 2-1: unable to send the bmi data to the device: -110 [ 2223.015654][T23415] usb 2-1: unable to get target info from device [ 2223.037153][T23415] usb 2-1: could not get target info (-110) [ 2223.058017][T23415] usb 2-1: could not probe fw (-110) [ 2223.127595][ T3967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2223.153429][ T3967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2223.376531][ T3975] program syz.5.8029 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2223.945677][ T3995] loop2: detected capacity change from 0 to 7 [ 2223.963361][ T3995] Dev loop2: unable to read RDB block 7 [ 2223.986855][ T3995] loop2: unable to read partition table [ 2223.992785][ T3995] loop2: partition table beyond EOD, truncated [ 2223.999779][ T3995] loop_reread_partitions: partition scan of loop2 (被x, ) failed (rc=-5) [ 2224.131420][ T3999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2224.154102][ T3999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2224.442104][T22656] usb 2-1: USB disconnect, device number 126 [ 2224.546716][ T5921] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 2224.726766][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2224.757521][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2224.817081][ T5921] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 2224.840729][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2224.899058][ T5921] usb 1-1: config 0 descriptor?? [ 2225.036979][T24607] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 2225.265821][T24607] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2225.292999][T24607] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2225.316498][T24607] usb 2-1: Product: syz [ 2225.329220][T24607] usb 2-1: Manufacturer: syz [ 2225.335032][T24607] usb 2-1: SerialNumber: syz [ 2225.342588][ T5921] cm6533_jd 0003:0D8C:0022.0077: invalid report_count 1192232228 [ 2225.351602][ T5921] cm6533_jd 0003:0D8C:0022.0077: item 0 4 1 9 parsing failed [ 2225.362000][ T4029] loop5: detected capacity change from 0 to 7 [ 2225.370388][T24607] usb 2-1: config 0 descriptor?? [ 2225.390387][ T4029] loop5: p1 [ 2225.394173][ T4029] loop5: partition table partially beyond EOD, truncated [ 2225.402384][ T5921] cm6533_jd 0003:0D8C:0022.0077: parse failed [ 2225.409078][ T5921] cm6533_jd 0003:0D8C:0022.0077: probe with driver cm6533_jd failed with error -22 [ 2225.419764][ T4029] loop5: p1 size 1919251295 extends beyond EOD, truncated [ 2225.513467][T30334] udevd[30334]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 2225.545785][ T4006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2225.556157][ T4006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2225.602795][ T4031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2225.625043][ T4031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2225.785190][T22656] usb 1-1: USB disconnect, device number 15 [ 2225.821360][ T4014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8039'. [ 2226.280875][ T4047] netlink: 'syz.3.8048': attribute type 10 has an invalid length. [ 2226.296372][ T4047] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8048'. [ 2226.366837][T15760] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 2226.482617][ T4047] geneve0: entered promiscuous mode [ 2226.489468][ T4047] geneve0: entered allmulticast mode [ 2226.499130][ T4047] team0: Port device geneve0 added [ 2226.507360][ T802] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2226.518867][ T802] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2226.531397][ T802] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2226.544270][T15760] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2226.555384][ T802] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2226.569544][T15760] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2226.582091][T15760] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2226.597610][T15760] usb 6-1: Product: syz [ 2226.604498][T15760] usb 6-1: Manufacturer: syz [ 2226.614429][T15760] usb 6-1: SerialNumber: syz [ 2226.657268][T15760] usb 6-1: config 0 descriptor?? [ 2226.864006][ T4051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8049'. [ 2226.995947][ T4056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2227.041515][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2227.056714][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2227.114225][ T4056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2227.375277][ T4061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2227.404226][ T4061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2228.011999][ T4066] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2228.428542][T22656] usb 2-1: USB disconnect, device number 127 [ 2228.928263][ T4070] loop5: detected capacity change from 0 to 7 [ 2228.951214][ T4074] Dev loop5: unable to read RDB block 7 [ 2228.959151][ T4074] loop5: unable to read partition table [ 2228.965470][ T4074] loop5: partition table beyond EOD, truncated [ 2228.979620][ T4070] Dev loop5: unable to read RDB block 7 [ 2228.994380][ T4070] loop5: unable to read partition table [ 2229.018198][ T4070] loop5: partition table beyond EOD, truncated [ 2229.058756][ T4070] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 2229.178657][T23415] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2229.200656][T23415] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2229.205162][T22656] usb 6-1: USB disconnect, device number 69 [ 2229.220792][T23415] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2229.256065][T23415] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2229.312230][ T4080] loop2: detected capacity change from 0 to 7 [ 2229.353241][ T4080] Dev loop2: unable to read RDB block 7 [ 2229.397194][ T4080] loop2: unable to read partition table [ 2229.403144][ T4080] loop2: partition table beyond EOD, truncated [ 2229.451242][ T4080] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2229.611260][ T4090] syzkaller1: entered promiscuous mode [ 2229.641633][ T4090] syzkaller1: entered allmulticast mode [ 2229.716812][T22656] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 2229.977096][T15760] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 2230.116876][T15760] usb 2-1: device descriptor read/64, error -71 [ 2230.320035][ T4110] loop5: detected capacity change from 0 to 7 [ 2230.331490][ T4110] loop5: p1 [ 2230.334770][ T4110] loop5: partition table partially beyond EOD, truncated [ 2230.366987][ T4110] loop5: p1 size 1919251295 extends beyond EOD, truncated [ 2230.386738][T15760] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 2230.471697][T30449] udevd[30449]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 2230.546860][T15760] usb 2-1: device descriptor read/64, error -71 [ 2230.657356][T15760] usb usb2-port1: attempt power cycle [ 2230.735809][ T4120] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2231.017703][T15760] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 2231.057506][T15760] usb 2-1: device descriptor read/8, error -71 [ 2231.308982][T15760] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2231.350383][T15760] usb 2-1: device descriptor read/8, error -71 [ 2231.490124][T15760] usb usb2-port1: unable to enumerate USB device [ 2231.763217][ T4129] syz.3.8072 (4129): drop_caches: 2 [ 2232.540731][ T4148] loop5: detected capacity change from 0 to 7 [ 2232.559205][ T4148] loop5: p1 [ 2232.571542][ T4148] loop5: partition table partially beyond EOD, truncated [ 2232.606448][ T4150] program syz.7.8080 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2232.616266][ T4148] loop5: p1 size 1919251295 extends beyond EOD, truncated [ 2232.762383][T30449] udevd[30449]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 2232.885915][ T4155] netlink: 1236 bytes leftover after parsing attributes in process `syz.7.8080'. [ 2233.086522][ T4160] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 2233.118735][ T4160] bond3 (unregistering): Released all slaves [ 2233.187626][ T4169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2233.197203][ T4169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2233.446763][T24607] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 2233.600389][T24607] usb 6-1: config 6 has an invalid interface number: 14 but max is 0 [ 2233.608942][T24607] usb 6-1: config 6 has no interface number 0 [ 2233.615384][T24607] usb 6-1: config 6 interface 14 altsetting 218 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 2233.627085][T24607] usb 6-1: config 6 interface 14 has no altsetting 0 [ 2233.636282][T24607] usb 6-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 2233.645915][T24607] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2233.654102][T24607] usb 6-1: Product: syz [ 2233.658492][T24607] usb 6-1: Manufacturer: syz [ 2233.663112][T24607] usb 6-1: SerialNumber: syz [ 2233.785421][ T4176] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2234.052920][ T4179] netlink: 'syz.1.8089': attribute type 13 has an invalid length. [ 2234.417007][T27370] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2234.548901][ T4185] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2234.590539][T27370] usb 2-1: no configurations [ 2234.595454][T27370] usb 2-1: can't read configurations, error -22 [ 2234.746827][T27370] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2234.920829][T27370] usb 2-1: no configurations [ 2234.925624][T27370] usb 2-1: can't read configurations, error -22 [ 2234.937268][T27370] usb usb2-port1: attempt power cycle [ 2235.127196][ T4190] loop5: detected capacity change from 0 to 7 [ 2235.147534][ T4190] loop5: p1 [ 2235.151011][ T4190] loop5: partition table partially beyond EOD, truncated [ 2235.189266][ T4190] loop5: p1 size 1919251295 extends beyond EOD, truncated [ 2235.297112][T27370] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 2235.332056][T30334] udevd[30334]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 2235.348425][T27370] usb 2-1: no configurations [ 2235.353653][T27370] usb 2-1: can't read configurations, error -22 [ 2235.506852][T27370] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 2235.538685][T27370] usb 2-1: no configurations [ 2235.543439][T27370] usb 2-1: can't read configurations, error -22 [ 2235.550901][T27370] usb usb2-port1: unable to enumerate USB device [ 2235.936184][ T4206] syz.3.8095 (4206): drop_caches: 2 [ 2236.254884][T24607] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 2236.273798][T24607] command write [95] error -8 [ 2236.411348][T24607] usb 6-1: USB disconnect, device number 71 [ 2236.593054][ T4217] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2236.614931][ T4217] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2236.961663][ T4221] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2236.994476][ T4223] loop5: detected capacity change from 0 to 7 [ 2237.025364][T30449] loop5: p1 [ 2237.132046][T30449] loop5: partition table partially beyond EOD, truncated [ 2237.186082][T30449] loop5: p1 size 1919251295 extends beyond EOD, truncated [ 2237.215510][ T4223] loop5: p1 [ 2237.219842][ T4223] loop5: partition table partially beyond EOD, truncated [ 2237.269455][ T4223] loop5: p1 size 1919251295 extends beyond EOD, truncated [ 2237.771315][T30449] udevd[30449]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 2237.977418][T22656] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 2238.174634][T22656] usb 2-1: Using ep0 maxpacket: 32 [ 2238.204405][T22656] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 2238.234802][T22656] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2238.264084][T22656] usb 2-1: Product: syz [ 2238.274982][T22656] usb 2-1: Manufacturer: syz [ 2238.288408][T22656] usb 2-1: SerialNumber: syz [ 2238.310759][ T4231] Cannot find set identified by id 1 to match [ 2238.324273][T22656] usb 2-1: config 0 descriptor?? [ 2238.352469][T22656] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 2238.585068][ T4241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2238.615231][ T4241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2238.812338][T22656] gspca_topro: reg_w err -71 [ 2238.847904][T22656] gspca_topro: Sensor soi763a [ 2238.871031][T22656] usb 2-1: USB disconnect, device number 10 [ 2239.524529][ T4300] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2243.307947][ T4329] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8125'. [ 2243.966833][T24607] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 2244.126959][T24607] usb 6-1: Using ep0 maxpacket: 16 [ 2244.134461][T24607] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 2244.157068][T24607] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2244.188255][T24607] usb 6-1: config 0 descriptor?? [ 2244.219307][T24607] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 2244.279324][ T4336] input: syz0 as /devices/virtual/input/input192 [ 2244.493029][ T4337] netlink: 'syz.5.8126': attribute type 3 has an invalid length. [ 2244.670100][ T4337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2244.682126][ T4337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2244.747189][T24607] gspca_sonixj: reg_w1 err -110 [ 2244.759294][T24607] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 2244.873078][ T4340] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2245.115861][ T4344] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8131'. [ 2245.186719][T24607] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 2245.347961][T24607] usb 2-1: Invalid ep0 maxpacket: 32 [ 2245.479890][T24607] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 2245.533027][ T4352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2245.549484][ T4352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2245.564417][ T4352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2245.579128][ T4352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2245.591197][ T4352] netlink: 'syz.3.8134': attribute type 10 has an invalid length. [ 2245.600156][ T4352] team0: Cannot enslave team device to itself [ 2245.666745][T24607] usb 2-1: Invalid ep0 maxpacket: 32 [ 2245.675057][T24607] usb usb2-port1: attempt power cycle [ 2246.027441][T24607] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 2246.048082][T24607] usb 2-1: Invalid ep0 maxpacket: 32 [ 2246.177104][T24607] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 2246.207548][T24607] usb 2-1: Invalid ep0 maxpacket: 32 [ 2246.213565][T24607] usb usb2-port1: unable to enumerate USB device [ 2246.510552][T24607] usb 6-1: USB disconnect, device number 72 [ 2248.637272][T15760] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 2248.786956][T15760] usb 2-1: device descriptor read/64, error -71 [ 2249.027936][T15760] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 2249.166744][T15760] usb 2-1: device descriptor read/64, error -71 [ 2249.278853][T15760] usb usb2-port1: attempt power cycle [ 2249.433641][ T4388] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2249.636024][T15760] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 2249.657739][T15760] usb 2-1: device descriptor read/8, error -71 [ 2249.898100][T15760] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2249.924230][T15760] usb 2-1: device descriptor read/8, error -71 [ 2250.057059][T15760] usb usb2-port1: unable to enumerate USB device [ 2250.262291][ T4398] syz.0.8145 (4398): drop_caches: 2 [ 2250.937102][ T4408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2251.007410][ T4408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2251.072885][ T4411] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8151'. [ 2251.117813][ T4411] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8151'. [ 2251.197222][ T4411] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 2251.336827][ T5921] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 2251.346371][ T4411] bond1 (unregistering): Released all slaves [ 2252.440100][ T4433] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2253.184289][ T4442] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8160'. [ 2253.560068][ T4450] loop4: detected capacity change from 0 to 7 [ 2253.589039][ T4450] Dev loop4: unable to read RDB block 7 [ 2253.602549][ T4450] loop4: AHDI p1 p2 p3 [ 2253.616778][ T4450] loop4: partition table partially beyond EOD, truncated [ 2253.648084][ T4450] loop4: p1 start 1601398130 is beyond EOD, truncated [ 2253.655519][ T4450] loop4: p2 start 1702059890 is beyond EOD, truncated [ 2253.678797][T27370] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 2253.868861][T27370] usb 6-1: Using ep0 maxpacket: 8 [ 2253.907245][T27370] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2253.941032][T27370] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 2253.973196][T27370] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2253.986714][T22656] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2254.037668][T27370] usb 6-1: config 0 descriptor?? [ 2254.075510][T27370] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 2254.160833][T22656] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2254.195104][T22656] usb 2-1: config 1 has an invalid interface number: 43 but max is 1 [ 2254.205621][T22656] usb 2-1: config 1 has no interface number 1 [ 2254.214330][T22656] usb 2-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2254.233533][T22656] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2254.252651][ T4467] netlink: 'syz.0.8167': attribute type 10 has an invalid length. [ 2254.325757][T22656] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 2254.337627][T22656] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2254.346070][T22656] usb 2-1: Product: syz [ 2254.351283][T22656] usb 2-1: Manufacturer: syz [ 2254.356238][T22656] usb 2-1: SerialNumber: syz [ 2254.406397][ T4470] netlink: 'syz.0.8167': attribute type 10 has an invalid length. [ 2254.422003][ T4467] bond0: (slave netdevsim0): Releasing backup interface [ 2254.457247][ T4467] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 2254.474756][ T4467] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 2254.501912][ T4467] team0: Port device netdevsim0 added [ 2254.744462][ T4476] syz.7.8169 (4476): drop_caches: 2 [ 2254.865987][ T4474] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2254.939874][ T4470] team0: Port device netdevsim0 removed [ 2255.048920][ T4470] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 2255.073534][ T4470] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 2255.118984][ T4470] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2255.183309][ T4452] veth1: Caught tx_queue_len zero misconfig [ 2255.475428][T27370] gspca_vc032x: reg_r err -71 [ 2255.561448][T27370] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 2255.619803][T22656] smsusb:smsusb_probe: board id=8, interface number 0 [ 2255.647088][T27370] usb 6-1: USB disconnect, device number 74 [ 2255.691059][ T4479] loop5: detected capacity change from 0 to 7 [ 2255.713993][T22656] smsusb:smsusb_probe: board id=8, interface number 43 [ 2255.740906][T30361] loop5: p1 [ 2255.756231][T30361] loop5: partition table partially beyond EOD, truncated [ 2255.765818][T22656] usb 2-1: USB disconnect, device number 20 [ 2255.788732][T30361] loop5: p1 size 1919251295 extends beyond EOD, truncated [ 2255.843304][ T4479] loop5: p1 [ 2255.864382][ T4479] loop5: partition table partially beyond EOD, truncated [ 2255.895477][ T4479] loop5: p1 size 1919251295 extends beyond EOD, truncated [ 2256.165996][T30449] udevd[30449]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 2256.275942][T30449] udevd[30449]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 2257.241893][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 2257.241912][ T30] audit: type=1326 audit(1765128208.274:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4497 comm="syz.1.8180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37858f749 code=0x7ffc0000 [ 2257.411466][ T30] audit: type=1326 audit(1765128208.274:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4497 comm="syz.1.8180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7ff37858f749 code=0x7ffc0000 [ 2257.504542][ T30] audit: type=1326 audit(1765128208.274:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4497 comm="syz.1.8180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37858f749 code=0x7ffc0000 [ 2257.592054][ T30] audit: type=1326 audit(1765128208.314:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4497 comm="syz.1.8180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37858f749 code=0x7ffc0000 [ 2257.739422][ T4509] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2258.034017][ T4514] netlink: 'syz.3.8182': attribute type 2 has an invalid length. [ 2258.074218][ T4514] netlink: 'syz.3.8182': attribute type 8 has an invalid length. [ 2258.115603][ T4514] netlink: 'syz.3.8182': attribute type 9 has an invalid length. [ 2258.161659][ T4514] netlink: 'syz.3.8182': attribute type 10 has an invalid length. [ 2258.207017][ T4514] netlink: 'syz.3.8182': attribute type 11 has an invalid length. [ 2258.229606][ T4514] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8182'. [ 2260.996727][T16906] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2261.064460][ T30] audit: type=1326 audit(1765128212.104:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4540 comm="syz.5.8192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3044b8f749 code=0x7ffc0000 [ 2261.173834][ T30] audit: type=1326 audit(1765128212.134:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4540 comm="syz.5.8192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3044b8f749 code=0x7ffc0000 [ 2261.223844][T16906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2261.286252][ T30] audit: type=1326 audit(1765128212.154:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4540 comm="syz.5.8192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3044b8f749 code=0x7ffc0000 [ 2261.341277][T16906] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2261.383107][T16906] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 2261.393814][T16906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2261.407111][ T30] audit: type=1326 audit(1765128212.154:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4540 comm="syz.5.8192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3044b8f749 code=0x7ffc0000 [ 2261.432625][T16906] usb 2-1: Product: syz [ 2261.466719][ T30] audit: type=1326 audit(1765128212.154:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4540 comm="syz.5.8192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3044b8f749 code=0x7ffc0000 [ 2261.469395][T16906] usb 2-1: Manufacturer: syz [ 2261.531249][ T30] audit: type=1326 audit(1765128212.154:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4540 comm="syz.5.8192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3044b8f749 code=0x7ffc0000 [ 2261.555061][T16906] usb 2-1: SerialNumber: syz [ 2261.591056][ T4550] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2261.591247][T16906] usb 2-1: config 0 descriptor?? [ 2261.675043][T16906] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 2261.711649][T16906] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2261.753621][T16906] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 2261.794449][T16906] usb 2-1: media controller created [ 2261.835364][ T4531] netlink: 'syz.3.8187': attribute type 6 has an invalid length. [ 2261.856534][T16906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2261.866121][ T4531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8187'. [ 2262.086960][T16906] DVB: Unable to find symbol tda10046_attach() [ 2262.110591][T16906] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 2262.183482][T16906] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 2262.221283][ T4556] netlink: zone id is out of range [ 2262.226855][ T4556] netlink: zone id is out of range [ 2262.234828][ T4556] netlink: zone id is out of range [ 2262.336992][ T4556] netlink: zone id is out of range [ 2262.342269][ T4556] netlink: zone id is out of range [ 2262.402792][ T4556] netlink: zone id is out of range [ 2262.424207][ T4556] netlink: zone id is out of range [ 2262.448441][ T4556] netlink: zone id is out of range [ 2262.473255][ T4556] netlink: zone id is out of range [ 2262.527164][ T4556] netlink: zone id is out of range [ 2262.633251][ T4560] FAULT_INJECTION: forcing a failure. [ 2262.633251][ T4560] name failslab, interval 1, probability 0, space 0, times 0 [ 2262.737097][ T4560] CPU: 0 UID: 0 PID: 4560 Comm: syz.7.8197 Tainted: G L syzkaller #0 PREEMPT(full) [ 2262.737133][ T4560] Tainted: [L]=SOFTLOCKUP [ 2262.737141][ T4560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2262.737157][ T4560] Call Trace: [ 2262.737172][ T4560] [ 2262.737183][ T4560] dump_stack_lvl+0x189/0x250 [ 2262.737217][ T4560] ? __pfx____ratelimit+0x10/0x10 [ 2262.737248][ T4560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2262.737279][ T4560] ? __pfx__printk+0x10/0x10 [ 2262.737316][ T4560] ? __pfx___might_resched+0x10/0x10 [ 2262.737347][ T4560] should_fail_ex+0x414/0x560 [ 2262.737381][ T4560] should_failslab+0xa8/0x100 [ 2262.737411][ T4560] __kmalloc_noprof+0xdf/0x800 [ 2262.737433][ T4560] ? kfree+0x4d/0x660 [ 2262.737462][ T4560] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2262.737493][ T4560] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2262.737520][ T4560] ? tomoyo_domain+0xd8/0x130 [ 2262.737550][ T4560] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2262.737583][ T4560] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2262.737619][ T4560] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2262.737670][ T4560] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 2262.737723][ T4560] ? __fget_files+0x2a/0x420 [ 2262.737757][ T4560] ? __fget_files+0x3a0/0x420 [ 2262.737794][ T4560] ? __fget_files+0x2a/0x420 [ 2262.737827][ T4560] security_file_ioctl+0xcb/0x2d0 [ 2262.737859][ T4560] __se_sys_ioctl+0x47/0x170 [ 2262.737884][ T4560] do_syscall_64+0xfa/0xf80 [ 2262.737916][ T4560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2262.737939][ T4560] ? clear_bhb_loop+0x60/0xb0 [ 2262.737966][ T4560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2262.737990][ T4560] RIP: 0033:0x7f409df8f749 [ 2262.738010][ T4560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2262.738030][ T4560] RSP: 002b:00007f409ed50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2262.738082][ T4560] RAX: ffffffffffffffda RBX: 00007f409e1e5fa0 RCX: 00007f409df8f749 [ 2262.738100][ T4560] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2262.738113][ T4560] RBP: 00007f409ed50090 R08: 0000000000000000 R09: 0000000000000000 [ 2262.738128][ T4560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2262.738141][ T4560] R13: 00007f409e1e6038 R14: 00007f409e1e5fa0 R15: 00007f409e30fa28 [ 2262.738183][ T4560] [ 2262.738202][ T4560] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2263.005170][ T4539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2263.023888][ T4539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2263.108618][ T4558] fuse: Unknown parameter 'ff0x000000000000000a' [ 2264.283652][ T4577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2264.310813][ T4577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2264.717414][T16906] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -110 [ 2265.037116][T16906] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 2265.074542][ T4588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8205'. [ 2265.152895][ T5921] usb 2-1: USB disconnect, device number 21 [ 2265.209637][T16906] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2265.235098][T16906] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 2265.263697][T16906] usb 6-1: language id specifier not provided by device, defaulting to English [ 2265.287048][T16906] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2265.319529][T16906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2265.345331][T16906] usb 6-1: Product: Ń脄祖믝艌寪㐘剕䒰灹桨锕攺젩ꍍnᾠ뾤狀൘ឍ [ 2265.380847][T16906] usb 6-1: Manufacturer: Ў [ 2265.385467][T16906] usb 6-1: SerialNumber: ࠓ [ 2265.429758][ T4585] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 2265.462508][ T4585] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 2265.486269][ T4594] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2265.709718][ T4585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2265.729066][ T4585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2265.780031][T16906] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 2265.813983][T16906] usb 6-1: USB disconnect, device number 75 [ 2265.914932][ T4603] bond3: option miimon: invalid value (18446744071562067968) [ 2265.924458][ T4603] bond3: option miimon: allowed values 0 - 2147483647 [ 2265.939928][ T4603] bond3 (unregistering): Released all slaves [ 2266.356111][ T4610] FAULT_INJECTION: forcing a failure. [ 2266.356111][ T4610] name failslab, interval 1, probability 0, space 0, times 0 [ 2266.424406][ T4610] CPU: 0 UID: 0 PID: 4610 Comm: syz.1.8210 Tainted: G L syzkaller #0 PREEMPT(full) [ 2266.424444][ T4610] Tainted: [L]=SOFTLOCKUP [ 2266.424454][ T4610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2266.424469][ T4610] Call Trace: [ 2266.424479][ T4610] [ 2266.424489][ T4610] dump_stack_lvl+0x189/0x250 [ 2266.424522][ T4610] ? __pfx____ratelimit+0x10/0x10 [ 2266.424552][ T4610] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2266.424580][ T4610] ? __pfx__printk+0x10/0x10 [ 2266.424620][ T4610] ? __pfx___might_resched+0x10/0x10 [ 2266.424644][ T4610] ? fs_reclaim_acquire+0x7d/0x100 [ 2266.424674][ T4610] should_fail_ex+0x414/0x560 [ 2266.424706][ T4610] should_failslab+0xa8/0x100 [ 2266.424734][ T4610] __kmalloc_noprof+0xdf/0x800 [ 2266.424757][ T4610] ? tomoyo_encode+0x28b/0x550 [ 2266.424784][ T4610] tomoyo_encode+0x28b/0x550 [ 2266.424813][ T4610] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2266.424840][ T4610] ? tomoyo_domain+0xd8/0x130 [ 2266.424870][ T4610] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2266.424902][ T4610] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2266.424937][ T4610] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2266.424989][ T4610] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 2266.425041][ T4610] ? __fget_files+0x2a/0x420 [ 2266.425075][ T4610] ? __fget_files+0x3a0/0x420 [ 2266.425103][ T4610] ? __fget_files+0x2a/0x420 [ 2266.425136][ T4610] security_file_ioctl+0xcb/0x2d0 [ 2266.425168][ T4610] __se_sys_ioctl+0x47/0x170 [ 2266.425201][ T4610] do_syscall_64+0xfa/0xf80 [ 2266.425233][ T4610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2266.425256][ T4610] ? clear_bhb_loop+0x60/0xb0 [ 2266.425284][ T4610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2266.425306][ T4610] RIP: 0033:0x7ff37858f749 [ 2266.425327][ T4610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2266.425348][ T4610] RSP: 002b:00007ff379372038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2266.425372][ T4610] RAX: ffffffffffffffda RBX: 00007ff3787e6090 RCX: 00007ff37858f749 [ 2266.425389][ T4610] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2266.425403][ T4610] RBP: 00007ff379372090 R08: 0000000000000000 R09: 0000000000000000 [ 2266.425416][ T4610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2266.425429][ T4610] R13: 00007ff3787e6128 R14: 00007ff3787e6090 R15: 00007ff37890fa28 [ 2266.425466][ T4610] [ 2266.425573][ T4610] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2268.138351][ T4644] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 2268.328356][ T4644] vlan0: entered allmulticast mode [ 2268.333584][ T4644] veth0_to_bond: entered allmulticast mode [ 2268.452617][ T4649] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2269.144881][ T4658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8223'. [ 2269.193686][ T4656] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 2269.271815][ T4656] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 2269.305037][ T4656] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 2269.490339][ T4665] netlink: 'syz.7.8224': attribute type 21 has an invalid length. [ 2269.550408][ T4665] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8224'. [ 2269.667109][T24607] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 2269.858635][T24607] usb 6-1: Using ep0 maxpacket: 16 [ 2269.996426][T24607] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2270.007330][T24607] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2270.041038][T24607] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2270.069139][T24607] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2270.138667][T24607] usb 6-1: config 0 descriptor?? [ 2271.939995][ T4687] mac80211_hwsim hwsim51 syzkaller0: entered promiscuous mode [ 2271.947844][ T4687] mac80211_hwsim hwsim51 syzkaller0: entered allmulticast mode [ 2271.955762][ T4687] tipc: Resetting bearer [ 2273.441030][T22656] usb 6-1: USB disconnect, device number 76 [ 2273.652926][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 2273.652947][ T30] audit: type=1326 audit(1765128224.694:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4704 comm="syz.5.8236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3044b8f749 code=0x7ffc0000 [ 2273.713832][ T30] audit: type=1326 audit(1765128224.724:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4704 comm="syz.5.8236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3044b8f749 code=0x7ffc0000 [ 2273.798852][ T30] audit: type=1326 audit(1765128224.734:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4704 comm="syz.5.8236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3044b8f749 code=0x7ffc0000 [ 2273.829388][ T30] audit: type=1326 audit(1765128224.734:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4704 comm="syz.5.8236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3044b8f749 code=0x7ffc0000 [ 2273.860805][ T30] audit: type=1326 audit(1765128224.744:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4704 comm="syz.5.8236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3044b8f749 code=0x7ffc0000 [ 2273.886215][ T30] audit: type=1326 audit(1765128224.744:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4704 comm="syz.5.8236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3044b8f749 code=0x7ffc0000 [ 2273.910402][ T30] audit: type=1326 audit(1765128224.744:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4704 comm="syz.5.8236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f3044b8f749 code=0x7ffc0000 [ 2273.934097][ T30] audit: type=1326 audit(1765128224.744:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4704 comm="syz.5.8236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3044b8f749 code=0x7ffc0000 [ 2273.979995][ T30] audit: type=1326 audit(1765128224.744:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4704 comm="syz.5.8236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3044b8f749 code=0x7ffc0000 [ 2274.003636][ T30] audit: type=1326 audit(1765128224.744:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4704 comm="syz.5.8236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3044b8f749 code=0x7ffc0000 [ 2274.823854][ T4714] FAULT_INJECTION: forcing a failure. [ 2274.823854][ T4714] name failslab, interval 1, probability 0, space 0, times 0 [ 2274.868191][ T4714] CPU: 1 UID: 0 PID: 4714 Comm: syz.5.8239 Tainted: G L syzkaller #0 PREEMPT(full) [ 2274.868217][ T4714] Tainted: [L]=SOFTLOCKUP [ 2274.868223][ T4714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2274.868234][ T4714] Call Trace: [ 2274.868240][ T4714] [ 2274.868248][ T4714] dump_stack_lvl+0x189/0x250 [ 2274.868271][ T4714] ? __pfx____ratelimit+0x10/0x10 [ 2274.868292][ T4714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2274.868311][ T4714] ? __pfx__printk+0x10/0x10 [ 2274.868340][ T4714] ? __pfx___might_resched+0x10/0x10 [ 2274.868358][ T4714] ? fs_reclaim_acquire+0x7d/0x100 [ 2274.868378][ T4714] should_fail_ex+0x414/0x560 [ 2274.868401][ T4714] should_failslab+0xa8/0x100 [ 2274.868423][ T4714] kmem_cache_alloc_lru_noprof+0x8d/0x6e0 [ 2274.868448][ T4714] ? kmem_cache_free+0x197/0x620 [ 2274.868463][ T4714] ? sock_alloc_inode+0x28/0xc0 [ 2274.868484][ T4714] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2274.868501][ T4714] sock_alloc_inode+0x28/0xc0 [ 2274.868517][ T4714] alloc_inode+0x6a/0x1b0 [ 2274.868537][ T4714] do_accept+0x111/0x680 [ 2274.868560][ T4714] ? __pfx_do_accept+0x10/0x10 [ 2274.868594][ T4714] __sys_accept4+0x127/0x210 [ 2274.868616][ T4714] ? __pfx___sys_accept4+0x10/0x10 [ 2274.868648][ T4714] ? __secure_computing+0xe2/0x2a0 [ 2274.868682][ T4714] __x64_sys_accept4+0x9a/0xb0 [ 2274.868713][ T4714] do_syscall_64+0xfa/0xf80 [ 2274.868741][ T4714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2274.868757][ T4714] ? clear_bhb_loop+0x60/0xb0 [ 2274.868783][ T4714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2274.868805][ T4714] RIP: 0033:0x7f3044b8f749 [ 2274.868824][ T4714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2274.868843][ T4714] RSP: 002b:00007f3045a60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 2274.868867][ T4714] RAX: ffffffffffffffda RBX: 00007f3044de5fa0 RCX: 00007f3044b8f749 [ 2274.868879][ T4714] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2274.868888][ T4714] RBP: 00007f3045a60090 R08: 0000000000000000 R09: 0000000000000000 [ 2274.868898][ T4714] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 2274.868907][ T4714] R13: 00007f3044de6038 R14: 00007f3044de5fa0 R15: 00007f3044f0fa28 [ 2274.868932][ T4714] [ 2275.656804][ T5921] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 2275.828760][ T5921] usb 2-1: config 0 has no interfaces? [ 2275.834432][ T5921] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 2275.845265][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2275.876116][ T5921] usb 2-1: config 0 descriptor?? [ 2276.085316][ T5921] usb 2-1: USB disconnect, device number 22 [ 2276.269892][ T4732] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8245'. [ 2277.100192][ T4742] netlink: 'syz.1.8247': attribute type 29 has an invalid length. [ 2277.144624][ T4742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8247'. [ 2278.176767][T16906] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2278.326952][T16906] usb 2-1: device descriptor read/64, error -71 [ 2278.536682][ T5921] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 2278.574268][T16906] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2278.706783][T16906] usb 2-1: device descriptor read/64, error -71 [ 2278.736902][ T5921] usb 6-1: Using ep0 maxpacket: 32 [ 2278.758059][ T5921] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2278.794639][ T5921] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 2278.817145][T16906] usb usb2-port1: attempt power cycle [ 2278.827378][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2278.835435][ T5921] usb 6-1: Product: syz [ 2278.871280][ T5921] usb 6-1: Manufacturer: syz [ 2278.887379][ T5921] usb 6-1: SerialNumber: syz [ 2278.901324][ T5921] usb 6-1: config 0 descriptor?? [ 2278.929328][ T5921] xr_serial 6-1:0.0: failed to claim sibling interface: -16 [ 2278.947245][ T5921] xr_serial 6-1:0.0: probe with driver xr_serial failed with error -16 [ 2279.133059][T22656] usb 6-1: USB disconnect, device number 77 [ 2279.156801][T16906] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2279.197829][T16906] usb 2-1: device descriptor read/8, error -71 [ 2279.446774][T16906] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2279.467696][T16906] usb 2-1: device descriptor read/8, error -71 [ 2279.593053][T16906] usb usb2-port1: unable to enumerate USB device [ 2279.761810][ T4761] syz.0.8255 (4761): drop_caches: 2 [ 2279.911212][ T4769] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2283.796157][ T4828] syz.1.8271 (4828): drop_caches: 2 [ 2285.607320][ T5921] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 2285.790553][ T4843] bridge0: port 3(bond0) entered disabled state [ 2285.797800][ T4843] bridge0: port 2(bridge_slave_1) entered disabled state [ 2285.805310][ T4843] bridge0: port 1(bridge_slave_0) entered disabled state [ 2285.905197][ T5921] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2285.981022][ T5921] usb 6-1: config 0 has an invalid interface number: 242 but max is 0 [ 2286.064764][ T5921] usb 6-1: config 0 has no interface number 0 [ 2286.103615][ T5921] usb 6-1: config 0 interface 242 altsetting 64 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2286.146337][ T5921] usb 6-1: config 0 interface 242 has no altsetting 0 [ 2286.180962][ T5921] usb 6-1: New USB device found, idVendor=15eb, idProduct=0001, bcdDevice=36.02 [ 2286.201051][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2286.216923][ T5921] usb 6-1: Product: syz [ 2286.221331][ T5921] usb 6-1: Manufacturer: syz [ 2286.230340][ T5921] usb 6-1: SerialNumber: syz [ 2286.250578][ T5921] usb 6-1: config 0 descriptor?? [ 2286.406503][ T4843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2286.445527][ T4843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2286.476454][ T5921] option 6-1:0.242: GSM modem (1-port) converter detected [ 2286.531829][ T5921] usb 6-1: USB disconnect, device number 78 [ 2286.561026][ T5921] option 6-1:0.242: device disconnected [ 2287.124754][ T4843] tipc: Resetting bearer [ 2287.206313][T23415] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2287.238807][T23415] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2287.262969][T23415] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2287.318274][T23415] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2287.459880][ T4884] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8281'. [ 2287.596025][T23415] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2287.614502][T23415] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2287.652744][T23415] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2287.670201][T23415] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2288.484101][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2288.491469][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2288.700831][ T4908] fuse: Unknown parameter '0x0000000000000003' [ 2289.507442][ T4849] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2289.675546][ T4849] usb 2-1: Using ep0 maxpacket: 8 [ 2289.707915][ T4849] usb 2-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=f0.21 [ 2289.726773][ T4849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2289.735224][ T4849] usb 2-1: Product: syz [ 2289.748781][ T4849] usb 2-1: Manufacturer: syz [ 2289.770178][ T4849] usb 2-1: SerialNumber: syz [ 2289.839017][ T4849] usb 2-1: config 0 descriptor?? [ 2289.890862][ T4849] pcwd_usb: The device isn't a Human Interface Device [ 2290.071348][ T4858] usb 2-1: USB disconnect, device number 27 [ 2290.351378][ T4922] netlink: 52 bytes leftover after parsing attributes in process `syz.7.8292'. [ 2290.814309][ T4934] loop5: detected capacity change from 0 to 7 [ 2291.017040][ T4934] loop5: p1 [ 2291.020729][ T4934] loop5: partition table partially beyond EOD, truncated [ 2291.029092][ T4934] loop5: p1 size 1919251295 extends beyond EOD, truncated [ 2291.651912][ T4952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2291.678033][ T4952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2291.983268][ T4952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2292.007311][ T4952] 8021q: adding VLAN 0 to HW filter on device team0 [ 2292.045430][ T4955] loop2: detected capacity change from 0 to 7 [ 2292.067994][ T4955] Dev loop2: unable to read RDB block 7 [ 2292.073767][ T4955] loop2: unable to read partition table [ 2292.095661][ T4955] loop2: partition table beyond EOD, truncated [ 2292.111689][ T4955] loop_reread_partitions: partition scan of loop2 (被x, ) failed (rc=-5) [ 2292.382900][ T4959] FAULT_INJECTION: forcing a failure. [ 2292.382900][ T4959] name failslab, interval 1, probability 0, space 0, times 0 [ 2292.401634][ T4952] net_ratelimit: 31 callbacks suppressed [ 2292.401657][ T4952] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2292.428464][ T4959] CPU: 0 UID: 0 PID: 4959 Comm: syz.1.8303 Tainted: G L syzkaller #0 PREEMPT(full) [ 2292.428498][ T4959] Tainted: [L]=SOFTLOCKUP [ 2292.428507][ T4959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2292.428521][ T4959] Call Trace: [ 2292.428531][ T4959] [ 2292.428541][ T4959] dump_stack_lvl+0x189/0x250 [ 2292.428573][ T4959] ? __pfx____ratelimit+0x10/0x10 [ 2292.428599][ T4959] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2292.428626][ T4959] ? __pfx__printk+0x10/0x10 [ 2292.428661][ T4959] ? __pfx___might_resched+0x10/0x10 [ 2292.428685][ T4959] ? fs_reclaim_acquire+0x7d/0x100 [ 2292.428715][ T4959] should_fail_ex+0x414/0x560 [ 2292.428749][ T4959] should_failslab+0xa8/0x100 [ 2292.428776][ T4959] __kvmalloc_node_noprof+0x175/0x920 [ 2292.428799][ T4959] ? __fget_files+0x2a/0x420 [ 2292.428828][ T4959] ? vmemdup_user+0x2b/0xd0 [ 2292.428859][ T4959] vmemdup_user+0x2b/0xd0 [ 2292.428884][ T4959] map_get_next_key+0x1c3/0x630 [ 2292.428920][ T4959] ? bpf_lsm_bpf+0x9/0x20 [ 2292.428944][ T4959] ? security_bpf+0x7e/0x300 [ 2292.428977][ T4959] __sys_bpf+0x63d/0x860 [ 2292.429011][ T4959] ? __pfx___sys_bpf+0x10/0x10 [ 2292.429059][ T4959] ? ksys_write+0x22a/0x250 [ 2292.429082][ T4959] ? __pfx_ksys_write+0x10/0x10 [ 2292.429119][ T4959] __x64_sys_bpf+0x7c/0x90 [ 2292.429149][ T4959] do_syscall_64+0xfa/0xf80 [ 2292.429179][ T4959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2292.429202][ T4959] ? clear_bhb_loop+0x60/0xb0 [ 2292.429229][ T4959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2292.429250][ T4959] RIP: 0033:0x7ff37858f749 [ 2292.429270][ T4959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2292.429289][ T4959] RSP: 002b:00007ff379393038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2292.429312][ T4959] RAX: ffffffffffffffda RBX: 00007ff3787e5fa0 RCX: 00007ff37858f749 [ 2292.429329][ T4959] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000004 [ 2292.429343][ T4959] RBP: 00007ff379393090 R08: 0000000000000000 R09: 0000000000000000 [ 2292.429357][ T4959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2292.429370][ T4959] R13: 00007ff3787e6038 R14: 00007ff3787e5fa0 R15: 00007ff37890fa28 [ 2292.429405][ T4959] [ 2293.254848][ T4962] syz.5.8302 (4962): drop_caches: 2 [ 2293.846156][ T4978] loop5: detected capacity change from 0 to 7 [ 2293.880372][T30449] loop5: p1 [ 2293.884363][T30449] loop5: partition table partially beyond EOD, truncated [ 2293.942974][T30449] loop5: p1 size 1919251295 extends beyond EOD, truncated [ 2294.162993][ T4978] loop5: p1 [ 2294.172990][ T4978] loop5: partition table partially beyond EOD, truncated [ 2294.219347][ T4978] loop5: p1 size 1919251295 extends beyond EOD, truncated [ 2294.346671][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2294.527778][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 2294.809561][T30449] udevd[30449]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 2294.924797][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2294.983870][T30449] udevd[30449]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 2295.006760][ T9] usb 2-1: config 5 has an invalid interface number: 212 but max is 0 [ 2295.023396][ T9] usb 2-1: config 5 has an invalid descriptor of length 119, skipping remainder of the config [ 2295.103986][ T9] usb 2-1: config 5 has no interface number 0 [ 2295.137224][ T9] usb 2-1: config 5 interface 212 altsetting 41 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 2295.204397][ T9] usb 2-1: config 5 interface 212 has no altsetting 0 [ 2295.244070][ T9] usb 2-1: New USB device found, idVendor=0763, idProduct=2019, bcdDevice=3a.5e [ 2295.268197][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2295.294197][ T9] usb 2-1: Product: syz [ 2295.307206][ T9] usb 2-1: Manufacturer: syz [ 2295.321211][ T9] usb 2-1: SerialNumber: syz [ 2297.650053][ T9] usb 2-1: USB disconnect, device number 28 [ 2297.700186][T30449] udevd[30449]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:5.212/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2297.746235][ T5018] loop5: detected capacity change from 0 to 7 [ 2297.760803][T30334] loop5: p1 [ 2297.764194][T30334] loop5: partition table partially beyond EOD, truncated [ 2297.773996][T30334] loop5: p1 size 1919251295 extends beyond EOD, truncated [ 2297.789281][ T5018] loop5: p1 [ 2297.798212][ T5018] loop5: partition table partially beyond EOD, truncated [ 2297.817041][ T5018] loop5: p1 size 1919251295 extends beyond EOD, truncated [ 2297.944041][T30449] udevd[30449]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 2298.030012][T30449] udevd[30449]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 2299.568560][ T5037] netem: change failed [ 2300.269729][ T5051] loop5: detected capacity change from 0 to 7 [ 2300.300147][ T5051] loop5: p1 [ 2300.303443][ T5051] loop5: partition table partially beyond EOD, truncated [ 2300.325550][ T5051] loop5: p1 size 1919251295 extends beyond EOD, truncated [ 2300.370639][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 2300.370661][ T30] audit: type=1326 audit(1765128251.414:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5053 comm="syz.7.8331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409df8f749 code=0x7ffc0000 [ 2300.414426][ T5055] FAULT_INJECTION: forcing a failure. [ 2300.414426][ T5055] name failslab, interval 1, probability 0, space 0, times 0 [ 2300.432966][ T30] audit: type=1326 audit(1765128251.414:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5053 comm="syz.7.8331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409df8f749 code=0x7ffc0000 [ 2300.480401][ T5055] CPU: 0 UID: 0 PID: 5055 Comm: syz.7.8331 Tainted: G L syzkaller #0 PREEMPT(full) [ 2300.480431][ T5055] Tainted: [L]=SOFTLOCKUP [ 2300.480440][ T5055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2300.480460][ T5055] Call Trace: [ 2300.480470][ T5055] [ 2300.480480][ T5055] dump_stack_lvl+0x189/0x250 [ 2300.480513][ T5055] ? __pfx____ratelimit+0x10/0x10 [ 2300.480542][ T5055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2300.480568][ T5055] ? __pfx__printk+0x10/0x10 [ 2300.480601][ T5055] ? __pfx___might_resched+0x10/0x10 [ 2300.480627][ T5055] ? fs_reclaim_acquire+0x7d/0x100 [ 2300.480656][ T5055] should_fail_ex+0x414/0x560 [ 2300.480689][ T5055] should_failslab+0xa8/0x100 [ 2300.480718][ T5055] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 2300.480756][ T5055] ? __alloc_skb+0x255/0x430 [ 2300.480783][ T5055] ? napi_skb_cache_get+0x4a5/0x780 [ 2300.480812][ T5055] ? napi_skb_cache_get+0x151/0x780 [ 2300.480845][ T5055] __alloc_skb+0x255/0x430 [ 2300.480877][ T5055] ? __pfx___alloc_skb+0x10/0x10 [ 2300.480912][ T5055] ? __raw_spin_lock_init+0x45/0x100 [ 2300.480946][ T5055] audit_log_start+0x1ad/0xa20 [ 2300.480978][ T5055] ? __pfx_audit_log_start+0x10/0x10 [ 2300.481004][ T5055] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2300.481028][ T5055] ? lockdep_hardirqs_on+0x98/0x140 [ 2300.481059][ T5055] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2300.481082][ T5055] ? __pfx___cant_migrate+0x10/0x10 [ 2300.481107][ T5055] ? __lock_acquire+0x6b6/0x2cf0 [ 2300.481133][ T5055] audit_seccomp+0x64/0x190 [ 2300.481154][ T5055] ? clear_bhb_loop+0x60/0xb0 [ 2300.481176][ T5055] ? clear_bhb_loop+0xe/0xb0 [ 2300.481202][ T5055] __seccomp_filter+0xcf0/0x1e20 [ 2300.481239][ T5055] ? __pfx___seccomp_filter+0x10/0x10 [ 2300.481272][ T5055] ? fd_install+0x95/0x3d0 [ 2300.481306][ T5055] ? fput+0xa0/0xd0 [ 2300.481342][ T5055] ? __pfx___sys_accept4+0x10/0x10 [ 2300.481368][ T5055] ? ksys_write+0x22a/0x250 [ 2300.481395][ T5055] ? __secure_computing+0xe2/0x2a0 [ 2300.481426][ T5055] syscall_trace_enter+0xaa/0x160 [ 2300.481463][ T5055] do_syscall_64+0xd3/0xf80 [ 2300.481495][ T5055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2300.481517][ T5055] ? clear_bhb_loop+0x60/0xb0 [ 2300.481544][ T5055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2300.481566][ T5055] RIP: 0033:0x7f409df8e15c [ 2300.481586][ T5055] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2300.481605][ T5055] RSP: 002b:00007f409ed50030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2300.481628][ T5055] RAX: ffffffffffffffda RBX: 00007f409e1e5fa0 RCX: 00007f409df8e15c [ 2300.481645][ T5055] RDX: 000000000000000f RSI: 00007f409ed500a0 RDI: 0000000000000004 [ 2300.481659][ T5055] RBP: 00007f409ed50090 R08: 0000000000000000 R09: 0000000000000000 [ 2300.481673][ T5055] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000002 [ 2300.481687][ T5055] R13: 00007f409e1e6038 R14: 00007f409e1e5fa0 R15: 00007f409e30fa28 [ 2300.481722][ T5055] [ 2300.481819][ T5055] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 2300.519630][T30449] udevd[30449]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 2300.704362][ T30] audit: type=1326 audit(1765128251.454:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5053 comm="syz.7.8331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f409df8f749 code=0x7ffc0000 [ 2300.720080][ T5055] audit: out of memory in audit_log_start [ 2300.729071][ T30] audit: type=1326 audit(1765128251.454:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5053 comm="syz.7.8331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409df8f749 code=0x7ffc0000 [ 2300.862407][ T30] audit: type=1326 audit(1765128251.454:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5053 comm="syz.7.8331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409df8f749 code=0x7ffc0000 [ 2300.990547][ T5061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8328'. [ 2301.022263][ T5061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8328'. [ 2301.031864][ T30] audit: type=1326 audit(1765128251.454:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5053 comm="syz.7.8331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f409df8f749 code=0x7ffc0000 [ 2301.135544][ T30] audit: type=1326 audit(1765128251.454:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5053 comm="syz.7.8331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409df8f749 code=0x7ffc0000 [ 2301.181563][ T5062] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8332'. [ 2301.233170][ T30] audit: type=1326 audit(1765128251.454:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5053 comm="syz.7.8331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f409df8df90 code=0x7ffc0000 [ 2302.053096][ T5077] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2302.083800][ T5077] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2302.339512][ T5083] tipc: Enabling of bearer rejected, failed to enable media [ 2303.158072][ T5092] program syz.5.8342 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2304.206734][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2304.346736][ T9] usb 2-1: device descriptor read/64, error -71 [ 2304.616896][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2304.766848][ T9] usb 2-1: device descriptor read/64, error -71 [ 2304.881674][ T9] usb usb2-port1: attempt power cycle [ 2305.038183][ T8331] wlan0: Trigger new scan to find an IBSS to join [ 2305.226820][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2305.277498][ T9] usb 2-1: device descriptor read/8, error -71 [ 2305.397130][ T4858] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 2305.540081][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2305.567793][ T4858] usb 6-1: no configurations [ 2305.578796][ T4858] usb 6-1: can't read configurations, error -22 [ 2305.618134][ T9] usb 2-1: device descriptor read/8, error -71 [ 2305.736744][ T4858] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 2305.745740][ T9] usb usb2-port1: unable to enumerate USB device [ 2305.773806][ T5120] fuse: Bad value for 'fd' [ 2305.799592][ T5120] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8351'. [ 2305.811037][ T5120] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8351'. [ 2305.942434][ T4858] usb 6-1: no configurations [ 2305.954610][ T4858] usb 6-1: can't read configurations, error -22 [ 2306.001447][ T4858] usb usb6-port1: attempt power cycle [ 2306.366765][ T4858] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 2306.402250][ T4858] usb 6-1: no configurations [ 2306.409779][ T4858] usb 6-1: can't read configurations, error -22 [ 2306.566772][ T4858] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 2306.599663][ T4858] usb 6-1: no configurations [ 2306.614968][ T4858] usb 6-1: can't read configurations, error -22 [ 2306.632662][ T4858] usb usb6-port1: unable to enumerate USB device [ 2307.637457][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 2307.637477][ T30] audit: type=1326 audit(1765128258.684:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5154 comm="syz.3.8358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a398f749 code=0x7ffc0000 [ 2307.681896][ T5155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2307.711573][ T5155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2307.740961][ T30] audit: type=1326 audit(1765128258.724:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5154 comm="syz.3.8358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f41a398df90 code=0x7ffc0000 [ 2307.847435][ T30] audit: type=1326 audit(1765128258.724:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5154 comm="syz.3.8358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f41a398f34b code=0x7ffc0000 [ 2307.886723][ T30] audit: type=1326 audit(1765128258.724:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5154 comm="syz.3.8358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f41a398f34b code=0x7ffc0000 [ 2307.935735][ T30] audit: type=1326 audit(1765128258.804:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5154 comm="syz.3.8358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a398f749 code=0x7ffc0000 [ 2307.971027][ T30] audit: type=1326 audit(1765128258.814:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5154 comm="syz.3.8358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a398f749 code=0x7ffc0000 [ 2307.993876][ T30] audit: type=1326 audit(1765128258.814:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5154 comm="syz.3.8358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f41a398f749 code=0x7ffc0000 [ 2308.040437][ T30] audit: type=1326 audit(1765128258.814:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5154 comm="syz.3.8358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a398f749 code=0x7ffc0000 [ 2308.080000][ T30] audit: type=1326 audit(1765128258.814:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5154 comm="syz.3.8358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f41a398f34b code=0x7ffc0000 [ 2308.103293][ T30] audit: type=1326 audit(1765128258.814:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5154 comm="syz.3.8358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a398f749 code=0x7ffc0000 [ 2309.328801][ T5189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8366'. [ 2309.458595][ T5189] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2309.570846][ T5196] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8367'. [ 2309.998625][ T800] wlan0: Trigger new scan to find an IBSS to join [ 2310.586966][ T5205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8370'. [ 2310.967621][T18445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2312.208496][ T5237] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8379'. [ 2313.357426][T28112] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2316.173551][ T5269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2316.203082][ T5269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2316.240660][ T5269] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8387'. [ 2316.301384][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 2316.301404][ T30] audit: type=1326 audit(1765128267.344:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.7.8388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409df8f749 code=0x7ffc0000 [ 2316.361628][ T5271] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8388'. [ 2316.441026][ T30] audit: type=1326 audit(1765128267.384:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.7.8388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f409df8f749 code=0x7ffc0000 [ 2316.495304][ T30] audit: type=1326 audit(1765128267.384:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.7.8388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409df8f749 code=0x7ffc0000 [ 2316.590171][ T30] audit: type=1326 audit(1765128267.394:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.7.8388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f409df8f749 code=0x7ffc0000 [ 2316.709474][ T30] audit: type=1326 audit(1765128267.394:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.7.8388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409df8f749 code=0x7ffc0000 [ 2316.789403][ T30] audit: type=1326 audit(1765128267.394:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.7.8388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f409df8f749 code=0x7ffc0000 [ 2316.903003][ T30] audit: type=1326 audit(1765128267.394:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.7.8388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409df8f749 code=0x7ffc0000 [ 2317.047868][ T30] audit: type=1326 audit(1765128267.404:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.7.8388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f409df8f749 code=0x7ffc0000 [ 2317.107002][ T30] audit: type=1326 audit(1765128267.574:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.7.8388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409df8f749 code=0x7ffc0000 [ 2317.216013][ T30] audit: type=1326 audit(1765128267.574:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5270 comm="syz.7.8388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409df8f749 code=0x7ffc0000 [ 2317.582130][ T5286] bridge0: port 2(bridge_slave_1) entered disabled state [ 2317.590040][ T5286] bridge0: port 1(bridge_slave_0) entered disabled state [ 2318.164990][ T5286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2318.173986][ T5296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8395'. [ 2318.204599][ T5296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8395'. [ 2318.238362][ T5286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2318.574593][ T1160] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2318.616956][ T1160] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2318.707791][ T1160] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2319.575147][ T5313] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8399'. [ 2319.608101][ T5313] lo: Caught tx_queue_len zero misconfig [ 2319.680038][ T5315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2319.711916][ T5315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2319.877596][ T5317] loop2: detected capacity change from 0 to 7 [ 2319.884797][ T5317] Dev loop2: unable to read RDB block 7 [ 2319.892176][ T5317] loop2: AHDI p2 p3 [ 2319.896229][ T5317] loop2: partition table partially beyond EOD, truncated [ 2319.903769][ T5317] loop2: p3 start 335544320 is beyond EOD, truncated [ 2320.025026][ T5319] loop2: detected capacity change from 0 to 7 [ 2320.032726][ T5319] Dev loop2: unable to read RDB block 7 [ 2320.039705][ T5319] loop2: unable to read partition table [ 2320.051081][ T5319] loop2: partition table beyond EOD, truncated [ 2320.062751][ T5319] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2321.903565][ T5355] loop2: detected capacity change from 0 to 7 [ 2321.911391][ T5355] Dev loop2: unable to read RDB block 7 [ 2321.919772][ T5355] loop2: AHDI p2 p3 [ 2321.924026][ T5355] loop2: partition table partially beyond EOD, truncated [ 2321.964624][ T5355] loop2: p3 start 335544320 is beyond EOD, truncated [ 2322.116675][ T5357] loop2: detected capacity change from 0 to 7 [ 2322.124936][ T5357] Dev loop2: unable to read RDB block 7 [ 2322.131489][ T5357] loop2: unable to read partition table [ 2322.142607][ T5357] loop2: partition table beyond EOD, truncated [ 2322.150099][ T5357] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2322.960649][ T5371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2322.987438][ T5371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2323.697070][ T4849] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2323.859085][ T4849] usb 2-1: config 0 has an invalid interface number: 207 but max is 0 [ 2324.045906][ T4849] usb 2-1: config 0 has no interface number 0 [ 2324.053092][ T4849] usb 2-1: too many endpoints for config 0 interface 207 altsetting 50: 212, using maximum allowed: 30 [ 2324.064770][ T4849] usb 2-1: config 0 interface 207 altsetting 50 has 0 endpoint descriptors, different from the interface descriptor's value: 212 [ 2324.082021][ T4849] usb 2-1: config 0 interface 207 has no altsetting 0 [ 2324.089799][ T4849] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 2324.099758][ T4849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2324.124977][ T4849] usb 2-1: config 0 descriptor?? [ 2324.169077][ T5390] loop2: detected capacity change from 0 to 7 [ 2324.180173][ T5390] Dev loop2: unable to read RDB block 7 [ 2324.186304][ T5390] loop2: AHDI p2 p3 [ 2324.191227][ T5390] loop2: partition table partially beyond EOD, truncated [ 2324.200251][ T5390] loop2: p3 start 335544320 is beyond EOD, truncated [ 2324.345347][ T5377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2324.627422][ T5377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2324.673102][ T5377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2324.714371][ T5392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2324.730761][ T5377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2324.812193][ T5392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2324.898103][ T5377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2324.940214][ T5377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2324.971828][ T5392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2324.996243][ T5394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2325.007376][ T5392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2325.036141][ T5394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2325.078485][ T4849] usb 2-1: string descriptor 0 read error: -71 [ 2325.088591][ T4849] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 2325.108693][ T4849] gspca_cpia1: usb_control_msg 05, error -71 [ 2325.117111][ T4849] gspca_cpia1: usb_control_msg 01, error -71 [ 2325.130562][ T4849] cpia1 2-1:0.207: only firmware version 1 is supported (got: 0) [ 2325.178616][ T4849] usb 2-1: USB disconnect, device number 33 [ 2325.958073][ T5415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2326.086057][ T5420] blktrace: Concurrent blktraces are not allowed on loop4 [ 2326.112658][ T5420] netlink: 'syz.7.8431': attribute type 1 has an invalid length. [ 2326.145470][ T5420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2326.334186][ T5426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8432'. [ 2326.344670][ T5431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2326.355852][ T5431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2327.056994][ T5437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2327.087173][ T5437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2327.117525][ T5437] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2327.381807][ T5426] team0 (unregistering): Port device team_slave_0 removed [ 2327.394755][ T5426] team0 (unregistering): Port device team_slave_1 removed [ 2327.813922][ T5448] syz.5.8438 (5448): drop_caches: 2 [ 2328.020987][ T5455] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8441'. [ 2328.096659][ T4858] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2328.297640][ T4858] usb 2-1: device descriptor read/64, error -71 [ 2328.556885][ T4858] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2328.687443][ T4858] usb 2-1: device descriptor read/64, error -71 [ 2328.801930][ T4858] usb usb2-port1: attempt power cycle [ 2328.836084][ T5462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2328.885190][ T5462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2329.146823][ T4858] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2329.177714][ T4858] usb 2-1: device descriptor read/8, error -71 [ 2329.416739][ T4858] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2329.458068][ T4858] usb 2-1: device descriptor read/8, error -71 [ 2329.591105][ T5465] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2329.606037][ T4858] usb usb2-port1: unable to enumerate USB device [ 2331.408115][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2331.428356][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2331.440692][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2331.449549][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2331.458237][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2331.940137][ T5495] [ 2331.942512][ T5495] ============================================ [ 2331.948668][ T5495] WARNING: possible recursive locking detected [ 2331.954833][ T5495] syzkaller #0 Tainted: G L [ 2331.960827][ T5495] -------------------------------------------- [ 2331.966973][ T5495] syz.3.8452/5495 is trying to acquire lock: [ 2331.973032][ T5495] ffff88805735cd38 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0xcbc/0x1e10 [ 2331.984007][ T5495] [ 2331.984007][ T5495] but task is already holding lock: [ 2331.991369][ T5495] ffff88805735cd38 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19c0 [ 2332.001233][ T5495] and the lock comparison function returns 0: [ 2332.007308][ T5495] [ 2332.007308][ T5495] other info that might help us debug this: [ 2332.015372][ T5495] Possible unsafe locking scenario: [ 2332.015372][ T5495] [ 2332.022834][ T5495] CPU0 [ 2332.026122][ T5495] ---- [ 2332.029406][ T5495] lock(&dev_instance_lock_key#20); [ 2332.034703][ T5495] lock(&dev_instance_lock_key#20); [ 2332.040008][ T5495] [ 2332.040008][ T5495] *** DEADLOCK *** [ 2332.040008][ T5495] [ 2332.048268][ T5495] May be due to missing lock nesting notation [ 2332.048268][ T5495] [ 2332.056600][ T5495] 2 locks held by syz.3.8452/5495: [ 2332.061719][ T5495] #0: ffffffff8f307588 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x19c0 [ 2332.070783][ T5495] #1: ffff88805735cd38 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19c0 [ 2332.081073][ T5495] [ 2332.081073][ T5495] stack backtrace: [ 2332.086981][ T5495] CPU: 0 UID: 0 PID: 5495 Comm: syz.3.8452 Tainted: G L syzkaller #0 PREEMPT(full) [ 2332.087010][ T5495] Tainted: [L]=SOFTLOCKUP [ 2332.087019][ T5495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2332.087032][ T5495] Call Trace: [ 2332.087042][ T5495] [ 2332.087052][ T5495] dump_stack_lvl+0x189/0x250 [ 2332.087081][ T5495] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2332.087104][ T5495] ? __pfx__printk+0x10/0x10 [ 2332.087133][ T5495] ? print_lock_name+0xde/0x100 [ 2332.087162][ T5495] print_deadlock_bug+0x279/0x290 [ 2332.087187][ T5495] __lock_acquire+0x2540/0x2cf0 [ 2332.087216][ T5495] ? __netdev_update_features+0xcbc/0x1e10 [ 2332.087235][ T5495] lock_acquire+0x117/0x340 [ 2332.087252][ T5495] ? __netdev_update_features+0xcbc/0x1e10 [ 2332.087277][ T5495] __mutex_lock+0x187/0x1350 [ 2332.087305][ T5495] ? __netdev_update_features+0xcbc/0x1e10 [ 2332.087327][ T5495] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 2332.087350][ T5495] ? __netdev_update_features+0xcbc/0x1e10 [ 2332.087370][ T5495] ? __pfx___mutex_lock+0x10/0x10 [ 2332.087397][ T5495] ? bond_fix_features+0x191/0x1d0 [ 2332.087431][ T5495] __netdev_update_features+0xcbc/0x1e10 [ 2332.087457][ T5495] ? __pfx___netdev_update_features+0x10/0x10 [ 2332.087488][ T5495] ? do_raw_spin_lock+0x121/0x290 [ 2332.087519][ T5495] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 2332.087541][ T5495] ? lockdep_hardirqs_on+0x98/0x140 [ 2332.087572][ T5495] __netdev_update_features+0xd0d/0x1e10 [ 2332.087592][ T5495] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 2332.087623][ T5495] ? __pfx___netdev_update_features+0x10/0x10 [ 2332.087648][ T5495] ? __lock_acquire+0x6b6/0x2cf0 [ 2332.087667][ T5495] ? ethnl_default_notify+0x806/0xb20 [ 2332.087689][ T5495] ? do_raw_spin_lock+0x121/0x290 [ 2332.087719][ T5495] netdev_update_features+0x6d/0xe0 [ 2332.087744][ T5495] ? __pfx_netdev_update_features+0x10/0x10 [ 2332.087771][ T5495] ? netif_inherit_tso_max+0x1ec/0x340 [ 2332.087801][ T5495] macvlan_device_event+0x541/0x860 [ 2332.087824][ T5495] ? __pfx_macvlan_device_event+0x10/0x10 [ 2332.087850][ T5495] notifier_call_chain+0x19d/0x3a0 [ 2332.087876][ T5495] netdev_compute_master_upper_features+0x911/0xab0 [ 2332.087904][ T5495] ? __pfx_netdev_compute_master_upper_features+0x10/0x10 [ 2332.087933][ T5495] bond_netdev_event+0x748/0xf80 [ 2332.087963][ T5495] ? __pfx_bond_netdev_event+0x10/0x10 [ 2332.087992][ T5495] ? inetdev_event+0x454/0x15b0 [ 2332.088023][ T5495] ? igmp_netdev_event+0x7c/0x750 [ 2332.088053][ T5495] notifier_call_chain+0x19d/0x3a0 [ 2332.088079][ T5495] netdev_features_change+0x85/0xc0 [ 2332.088103][ T5495] ? __pfx_netdev_features_change+0x10/0x10 [ 2332.088126][ T5495] ? __pm_runtime_resume+0x9d/0x180 [ 2332.088165][ T5495] dev_ethtool+0x1541/0x19c0 [ 2332.088197][ T5495] ? __pfx_dev_ethtool+0x10/0x10 [ 2332.088225][ T5495] ? dev_load+0x21/0x1f0 [ 2332.088250][ T5495] dev_ioctl+0x392/0x1150 [ 2332.088277][ T5495] sock_do_ioctl+0x22c/0x300 [ 2332.088299][ T5495] ? __pfx_sock_do_ioctl+0x10/0x10 [ 2332.088325][ T5495] sock_ioctl+0x576/0x790 [ 2332.088345][ T5495] ? __pfx_sock_ioctl+0x10/0x10 [ 2332.088365][ T5495] ? __fget_files+0x3a0/0x420 [ 2332.088389][ T5495] ? __fget_files+0x2a/0x420 [ 2332.088413][ T5495] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2332.088434][ T5495] ? __pfx_sock_ioctl+0x10/0x10 [ 2332.088453][ T5495] __se_sys_ioctl+0xfc/0x170 [ 2332.088476][ T5495] do_syscall_64+0xfa/0xf80 [ 2332.088503][ T5495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2332.088521][ T5495] ? clear_bhb_loop+0x60/0xb0 [ 2332.088542][ T5495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2332.088561][ T5495] RIP: 0033:0x7f41a398f749 [ 2332.088579][ T5495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2332.088597][ T5495] RSP: 002b:00007f41a482a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2332.088618][ T5495] RAX: ffffffffffffffda RBX: 00007f41a3be5fa0 RCX: 00007f41a398f749 [ 2332.088633][ T5495] RDX: 0000200000000000 RSI: 0000000000008946 RDI: 0000000000000004 [ 2332.088646][ T5495] RBP: 00007f41a3a13f91 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2332.088659][ T5495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2332.088671][ T5495] R13: 00007f41a3be6038 R14: 00007f41a3be5fa0 R15: 00007f41a3d0fa28 [ 2332.088693][ T5495] [ 2332.803863][ T9] usb 4-1: USB disconnect, device number 79 [ 2333.516821][ T5828] Bluetooth: hci2: command tx timeout [ 2335.596805][ T5828] Bluetooth: hci2: command tx timeout [ 2337.676861][ T5828] Bluetooth: hci2: command tx timeout [ 2339.756861][ T5828] Bluetooth: hci2: command tx timeout