last executing test programs: 29.793472891s ago: executing program 0 (id=2666): socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = msgget$private(0x0, 0x3ac) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x200) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x1012, 0xffffffffffffffff, 0x0, 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bridge\x00', &(0x7f0000000080)=@ethtool_cmd={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x4}}) msgrcv(r0, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x5) fchdir(r4) socket(0xa, 0x3, 0x87) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc48b, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) 29.326399387s ago: executing program 1 (id=2668): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x9, 0x7ffc0002}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) fchown(r0, 0x0, 0x0) r1 = mq_open(&(0x7f00000000c0)='+$*(/!\xf1\x00', 0x40, 0x8b, &(0x7f0000000100)={0x4, 0x5, 0x100, 0x5}) mq_timedreceive(r1, &(0x7f0000000180)=""/233, 0xe9, 0x0, &(0x7f00000002c0)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f00000005c0)="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", 0xa3f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r3, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x401}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 28.813496927s ago: executing program 1 (id=2669): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r6 = socket(0x2, 0x3, 0xff) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) sendfile(r6, r5, 0x0, 0xffba83) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000010004b0429bd7000faffffff7a", @ANYRES32=0x0, @ANYBLOB="08b0010006820000400012800b0001006272696467650000300002800c002200000000040000000005002400010000000600080088a80000080005000100000005002b00050000000a"], 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 28.204467374s ago: executing program 0 (id=2673): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r2 = syz_io_uring_setup(0x2aa1, &(0x7f0000000380)={0x0, 0x8b97, 0x61cb400c08e95385, 0x2, 0x37e}, &(0x7f00000001c0), &(0x7f0000000280)) syz_io_uring_setup(0x5b6d, &(0x7f0000000140)={0x0, 0x9168, 0x8000, 0x1, 0x40359, 0x0, r2}, &(0x7f0000000300), &(0x7f0000ff4000)) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x4000001e, 0x10, 0x2, 0x34f}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x700, r8, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) connect$qrtr(0xffffffffffffffff, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x1, 0x0, 0x4}]}, 0x8) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r9 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000002, 0x11, r9, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) 27.9015743s ago: executing program 3 (id=2674): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0x9, 0xb}, {0xa, 0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x83, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x5, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008000) sendmmsg$inet(r0, &(0x7f0000001700)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, 0x0, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="140000000000000000000000010000000e000000000000001400000000000000000000000100000007000000000000002400000000000000000000000700000094040000820d212aab96bad6cdf92da325000000009700001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414366401010100000000600000000000000010000000070000000144207d40000000090000069f000000060001000000000a76000000090000000701862a00000002070e301517f337fc5724b0f4b19f0210c22ab262618268e7b39eceaeaa720106fe8b1561940400001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ffffffff00000000000000001100000000000000290000000100000000000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="0a010102ac1414aa000000001400000000000000010000000100000001000000000000001c000000000000000000000008000000", @ANYRES32=r5], 0x168}}], 0x1, 0x8000004) 27.196560368s ago: executing program 0 (id=2675): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000340)=""/41, 0x29, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7ffd, 0xe) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0xfffffffe, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r0, &(0x7f00000001c0), 0x0, 0x0, 0x80000, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x480, 0x0, 0x8000000000000001}]}) r10 = dup(r6) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1ffffffffee, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x5}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8003, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) syz_io_uring_setup(0x1c54, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/pm_trace', 0x4800, 0x106) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 26.799190346s ago: executing program 3 (id=2677): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0xf) wait4(r0, 0x0, 0x2, 0x0) tkill(r0, 0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$sock_int(0xffffffffffffffff, 0x29, 0x29, 0x0, 0xff09) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x10) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="dbe104b35716e6", 0x7, 0x20008894, &(0x7f0000000100)={0x11, 0x7, 0x0, 0x1, 0x5, 0x6, @local}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000df4300128009000100626f6e6400000000340002800500010004004f2e1c852616d48c000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) socket(0x10, 0x3, 0x0) 26.1762017s ago: executing program 1 (id=2678): ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x191, 0x150, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(0x4) r1 = gettid() sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}, 0x0) r2 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$setsig(r2, 0xa, 0x27) syz_usb_connect(0x3, 0x96d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010102e21b5140b1134200e8a90102030109025b09040d9720090904320409f073ea09090503002000f80040090504104000"], &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0}) 26.050849365s ago: executing program 4 (id=2679): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) recvmmsg(r0, &(0x7f00000011c0)=[{{&(0x7f0000000600)=@l2tp, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000680)=""/94, 0x5e}], 0x1, &(0x7f0000000700)=""/175, 0xaf}, 0x7}, {{&(0x7f00000007c0)=@qipcrtr, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000840)=""/171, 0xab}, {&(0x7f0000000900)=""/210, 0xd2}, {&(0x7f0000000240)=""/14, 0xe}], 0x3, &(0x7f0000001280)=""/77, 0x4d}, 0x7681}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000a40)=""/234, 0xffffffa1}, {&(0x7f0000000b40)=""/199, 0xc7}, {&(0x7f0000000c40)=""/255, 0xff}, {&(0x7f0000000d40)=""/162, 0xa2}, {&(0x7f0000000e00)=""/24, 0x18}, {&(0x7f0000001300)=""/204, 0xcc}, {&(0x7f0000000f40)=""/222, 0xde}], 0x7, &(0x7f00000010c0)=""/255, 0xff}, 0x3}], 0x3, 0x10020, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1000, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) (async, rerun: 32) r2 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r3 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1) (async) mq_notify(0xffffffffffffffff, 0x0) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000040)={{@hyper}, 0x10001, 0x0, 0x0, 0x9, 0x3b15, 0xfffffffd, 0x9, 0x6}) (async) unshare(0x2c060000) (async, rerun: 32) unshare(0x22020600) (async, rerun: 32) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) (async, rerun: 64) listen(r5, 0x0) (async, rerun: 64) connect$unix(r4, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept$unix(r5, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) add_key$user(0x0, &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000380)="218768b0ec8fa62c25d0cb36b873f5d52df069b4c7ceafb1be8f1e3b4b76bf0dc197c97e883e6b60a6cf93c3510ea23ed7571f6786f5b099d6cd49bdd58d187a8f52417405d6b822c3ac5691570c4454e1a87f13c42b180e60ab78b369e76db1d7a41632b9b8ef70b96321e9ebc1602fec62988223e95cb3c51f43d0874fc39881a0ee2ddcd011d1309350057480b728223b4c98d0628d9d9ee420142e72e1fe845624973797759a5abffb75b839b205499384c3e46830819154685dc79b555a067dd5f0b163183977d2f7d6c3", 0xcd, r2) (async, rerun: 64) r7 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) (async, rerun: 64) r8 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) (rerun: 64) syz_usb_control_io$hid(r8, 0x0, 0x0) 26.006654406s ago: executing program 0 (id=2680): r0 = epoll_create(0x8) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000440), 0x18100, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x8, 0x0, r0, &(0x7f0000000400), r1, 0x3, 0x0, 0x0, {0x0, r2}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r12 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) signalfd4(r12, &(0x7f0000000140), 0x8, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) r14 = accept4(r13, 0x0, 0x0, 0x800) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r14, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r9, 0x627, 0x4c1, 0x43, 0x0, 0x30) r15 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r15, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r15, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001e40)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/65, 0x41}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r15, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1}, 0x4800) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r5, 0x4188aec6, &(0x7f0000002a00)={0x0, [{0x3, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x6, 0x0, 0x7ff, 0x0}, {0x7, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x5, 0x0}, {0x1, 0x41e8, 0x8, &(0x7f0000000880)="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"}, {0x2, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x183, 0x0}, {0x6, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x3def, 0x0}, {0x2, 0x0, 0x2, 0x0}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 25.797733518s ago: executing program 4 (id=2681): epoll_create1(0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x10000004, 0x8001, 0x1, 0x9, 0xfffffffffffffffc, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) lseek(r1, 0x4, 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r6}, 0x60) 24.157241218s ago: executing program 0 (id=2682): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac0000000000000000ffffffffffffefff00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 24.060149061s ago: executing program 4 (id=2683): socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = msgget$private(0x0, 0x3ac) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x200) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x1012, 0xffffffffffffffff, 0x0, 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bridge\x00', &(0x7f0000000080)=@ethtool_cmd={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x4}}) msgrcv(r0, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x5) fchdir(r4) socket(0xa, 0x3, 0x87) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc48b, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) 23.9954516s ago: executing program 2 (id=2684): mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1, 0x0, 0x3, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000280)='./bus/file0\x00', 0x0, 0x8, r3}, 0x18) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0xa, 0x8, 0x5}, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="0fc79f00800000640f79fd660f380a290f20d7c7442400da586a53c744240209c10000c7442406000000000f011424dbd2660f3882aa1ed90000f2f2f20faac4e1605d15ea2d9b5db900080000b877b98af2baf8b357790f30", 0x59}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)={0x2b, 0x3, 0x0, {0x2, 0xa, 0x0, '@}(&)!!({+'}}, 0x2b) r8 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000180)={0xfffb, 0x6, 0x3, 0x400, 0x17, "24241e6488c67424"}) r9 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmmsg$sock(r10, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000003a00)=@nfc_llcp={0x27, 0x0, 0x1, 0x1, 0x66, 0x2, "3f023ec8a06819bd70e58c762459e55dc2be7d23c887280c427c99e4e59d123ac235a78a68bc9daf672d4816b070f10e0b49a5ce4feac328a43d95524c2724", 0x1d}, 0x80, &(0x7f0000003d00)=[{0x0}, {&(0x7f0000003b80)="8cbc28", 0x3}], 0x2}}], 0x5, 0x885) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x10, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x2, "65cb06ed1e5287d52f99f52800"}}]}, 0x30}}, 0x40041) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x7, 0x37, 0x0) mlock2(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0) 23.702067276s ago: executing program 0 (id=2685): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r2 = syz_io_uring_setup(0x2aa1, &(0x7f0000000380)={0x0, 0x8b97, 0x61cb400c08e95385, 0x2, 0x37e}, &(0x7f00000001c0), &(0x7f0000000280)) syz_io_uring_setup(0x5b6d, &(0x7f0000000140)={0x0, 0x9168, 0x8000, 0x1, 0x40359, 0x0, r2}, &(0x7f0000000300), &(0x7f0000ff4000)) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x4000001e, 0x10, 0x2, 0x34f}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x700, r8, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) connect$qrtr(0xffffffffffffffff, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x1, 0x0, 0x4}]}, 0x8) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r9 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000002, 0x11, r9, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) 23.689813801s ago: executing program 1 (id=2686): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000029c0), 0x400006d, 0x20000004) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/220, 0xdc}], 0x1) timer_create(0x1, &(0x7f0000000000)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'hsr0\x00'}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x800, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000c73d880870272091776c01020301090212000100000000000000000000000000e46c07d320c73904bbb00100fee7b0110fba6e9dc4c9c281440cda0dad7d6154edf2f5256fa970d2cda2a35dde5794445a41798584b98b495a19961186bab8dbcda256"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) 22.339367935s ago: executing program 3 (id=2688): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x1, {0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x5, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc28d, 0x8000000000000004, 0x0, 0xfffffffd, 0x0, 0xc000, 0xfffffffd, 0x0, 0x0, 0x9aa}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x8201) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000004000", [0x0, 0x2000000000001]}}) 21.681468814s ago: executing program 3 (id=2689): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_clone(0x100, &(0x7f0000000500)=',', 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x84}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x13}]}]}, 0x60}}, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x604, 0x0, 0xa, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df, 0x2e}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x882c, 0x0, 0x1101, 0x100}) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[@nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @ro_nat=0x6406, 0x7, 0x6, 0x2c}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @guest32=0x4818, 0x5, 0x466}}, @nested_amd_vmsave={0x183, 0x18}, @nested_load_code={0x12e, 0x63, {0x1, "861666b803008ed0b92f0900000f322e66400f3881a1f20b00000f01c4263e65646465650fae23c403917f5f5fa166ba2100ec66baf80cb87cb2708fef66bafc0cb856e00000ef640f01c2"}}], 0x103}) ioctl$KVM_RUN(r8, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x280}) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r10 = dup(r9) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r12 = accept4(r11, 0x0, 0x0, 0x0) sendto$inet6(r12, &(0x7f0000000440)="dde528f7bb5f6a6b21a0c2ca4752fbaae02db039432ba4127bbccbcaa6757a3d8432f671dc4a6d7afe2889a1a57d5edb5f", 0x31, 0x40, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) write$UHID_INPUT(r10, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0x2000) 21.341140944s ago: executing program 2 (id=2690): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000340)=""/41, 0x29, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7ffd, 0xe) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0xfffffffe, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r0, &(0x7f00000001c0), 0x0, 0x0, 0x80000, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x480, 0x0, 0x8000000000000001}]}) r10 = dup(r6) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1ffffffffee, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x5}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8003, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) syz_io_uring_setup(0x1c54, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/pm_trace', 0x4800, 0x106) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 21.227715304s ago: executing program 4 (id=2691): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x20000253) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000004) (async) syz_usb_connect(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xbe, 0x71, 0xb6, 0x8, 0xbfd, 0x10e, 0xe814, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x10, 0x1, [{{0x9, 0x4, 0x8a, 0x2, 0x2, 0xe7, 0x0, 0x74, 0xfc, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x7, 0xe, 0x200}}]}}]}}]}}, 0x0) 20.90602949s ago: executing program 3 (id=2692): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf9}}, 0x6}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd00000080190000000000000000000000000000000000fe0100", [0x8, 0xffffffff9673e35d]}}) 20.832366274s ago: executing program 4 (id=2693): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0xcff0ad5b37d8381b, 0x0, {0x9, 0x21, 0x1000, 0xfd, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x10, 0x0, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap(&(0x7f00004aa000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0xf, 0x3, 0xe4, 0x40, 0x9, 0x0, 0x2e, 0xd}, {0x41000, 0x1, 0x9, 0x0, 0x40, 0x5, 0x7d, 0x8, 0x58, 0x1, 0x3, 0x1}, {0x4000, 0x200000, 0xe, 0xe3, 0x3, 0x7, 0xfe, 0x9, 0x21, 0xab, 0x5, 0x81}, {0x6000, 0x26000, 0x3, 0x5d, 0x4, 0x42, 0x9, 0x2, 0x6, 0xa, 0xe}, {0x0, 0x9000, 0xb, 0x3, 0x3, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x54000, 0x0, 0x7, 0x7, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1}, {0x40000, 0x8080000, 0x4, 0x5, 0x7, 0x2, 0x5, 0x0, 0x3, 0x82, 0xff, 0x70}, {0xd000, 0x1000, 0xa, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xeeef0000, 0x30}, {0x10000, 0x86}, 0x80000031, 0x0, 0x8000000, 0x42024, 0xb, 0x0, 0x3000, [0x6840000000000000, 0xd, 0x5e, 0xfc]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r7, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) r8 = syz_open_pts(r7, 0x20000) r9 = dup3(r8, r7, 0x0) ioctl$TCSETS(r9, 0x5402, &(0x7f0000000540)={0x100, 0xd0, 0x4, 0x6, 0x18, "e8381d3c39ce1ff81803b95a9c5b202e2f8b0d"}) io_setup(0x8, &(0x7f0000004200)=0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r10, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$TCSETA(r9, 0x5406, &(0x7f00000000c0)={0x9, 0x7, 0x0, 0x1, 0x4, "3e775ce7a13ab6eb"}) 20.384899734s ago: executing program 3 (id=2694): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='schedstat\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x3f, 0x2, 0x1, 0x0, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x84}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}]}, 0x0) io_setup(0xefffffff, &(0x7f0000000140)=0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x0, 0xa, 0x3a, {0x3a, 0x21, "97aa815508d6a9df01f37c5ed36fedbbcdb3aa0f79ac8404481d606ff502a261953f5969b1f91bd21a23a62b6b46a5901781304db9553ea1"}}, 0x0}, 0x0) r6 = eventfd2(0x83, 0x80001) io_submit(r4, 0x1, &(0x7f0000000900)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x80, r6, &(0x7f0000000000)="31ce", 0x2fe, 0xfbe, 0x0, 0x1, r6}]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x44, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}}, 0x481d5) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x402b}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x24004080) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@gettaction={0xac, 0x32, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x8c, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc263}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x220440a8}, 0x20004000) pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x8001) r10 = userfaultfd(0x1) r11 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x80400, 0x0) dup2(r10, r11) 19.952734505s ago: executing program 2 (id=2695): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac0000000000000000dabeffffffffffff00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 19.626096315s ago: executing program 2 (id=2696): r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000080)) (async) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x28041, 0x0) (async) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x28041, 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91", 0x3) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000000)=0x1) (async) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000000)=0x1) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) (async) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') socket$inet6_udplite(0xa, 0x2, 0x88) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdedn\xe5+\xf0', 0xffffffffffffffff) request_key(0x0, &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='\x00', r6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) keyctl$get_security(0x11, r0, &(0x7f0000000180)=""/56, 0x38) r7 = syz_open_dev$sg(&(0x7f00000000c0), 0x4a38, 0x1) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000000)={0x53, 0xfffffffffffffffb, 0x0, 0xb4, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080), 0x0, 0x6, 0x10002, 0xfffffffd, 0x0}) 18.495226131s ago: executing program 1 (id=2697): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0xf) wait4(r0, 0x0, 0x2, 0x0) tkill(r0, 0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$sock_int(0xffffffffffffffff, 0x29, 0x29, 0x0, 0xff09) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x10) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="dbe104b35716e6", 0x7, 0x20008894, &(0x7f0000000100)={0x11, 0x7, 0x0, 0x1, 0x5, 0x6, @local}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000df4300128009000100626f6e6400000000340002800500010004004f2e1c852616d48c000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) socket(0x10, 0x3, 0x0) 18.142215293s ago: executing program 2 (id=2698): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x1, {0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x5, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc28d, 0x8000000000000004, 0x0, 0xfffffffd, 0x0, 0xc000, 0xfffffffd, 0x0, 0x0, 0x9aa}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x8201) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0000008019ffffffffffff0700", [0x0, 0x2000000000001]}}) 17.785261949s ago: executing program 2 (id=2699): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}}, 0x14}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r3, 0x8) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x0, 0x3}, &(0x7f0000000300)=0x8) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r2, 0x10, 0x270bd26, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x8820) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, &(0x7f0000000240)={0x2, 0x2}, 0x0) (async, rerun: 64) sendfile(0xffffffffffffffff, r1, 0x0, 0x20000023893) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x14, r6, 0x333, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x78, r6, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000051}, 0x20000040) (async) write$cgroup_pressure(r1, &(0x7f0000000040)={'some', 0x20, 0xf, 0x20, 0x7fff}, 0x2f) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000080)={'bond_slave_0\x00', @random}) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000002680), r7) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f00000026c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7000fbdbdf25050000000e0001006e657464000073696d0000000f0002006e657464657673696d3000000800030003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000000) r9 = syz_usb_connect$uac1(0x3, 0xbd, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xab, 0x3, 0x1, 0xff, 0x80, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x26}, [@processing_unit={0x7, 0x24, 0x7, 0x3, 0x3, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x2a, 0x1, 0xa, 0x3, "417a215999"}, @as_header={0x7, 0x24, 0x1, 0x19, 0x14, 0x5}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xffff, 0x7f, 0x6, "96d3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x80, 0x2, 0x6, {0x7, 0x25, 0x1, 0x1, 0x7, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x1, 0x2}, @as_header={0x7, 0x24, 0x1, 0x6, 0x0, 0x2}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x4, 0x4, 0xb, "48f907", "bf"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0xeb, 0x9, "e863f9b9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x10, 0x6, 0x3, {0x7, 0x25, 0x1, 0x80, 0x6, 0xfff8}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x201, 0xa, 0x3, 0x9, 0xff}, 0x5f, &(0x7f0000000500)={0x5, 0xf, 0x5f, 0x2, [@generic={0x46, 0x10, 0x2, "1a44c56ef8b7d623ebaff35a054995ef5e753ea092584064dc89347c2b0fc41113483666aa4b01d94397ddd088a4f3055592e82d31a4f1ae677b34a462b08079c21f63"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "41f2a7ca30efd36c91d2111210e4d0a2"}]}, 0x2, [{0x59, &(0x7f0000000580)=@string={0x59, 0x3, "aa13e06502f5a79707d3eea42271d543b73c112ab5e78a547482f9b451e805492485ffa6c40d758a948497777b634f6f7ecab1965eee37b5ac308e5552ff8e5e1ea6eed39147e073385280d8309097b6ecdff60586189f"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x80a}}]}) syz_usb_control_io$uac1(r9, &(0x7f0000000740)={0x14, &(0x7f0000000680)={0x0, 0x31, 0x14, {0x14, 0x21, "1c8bfd69e8965ae74f0ee32fc035e791ebcc"}}, &(0x7f00000006c0)={0x0, 0x3, 0x70, @string={0x70, 0x3, "003a799f824ad1a36434819afb724e36fee1990ced963192c45de2ab17cfc807f5b5723a63893954acc9e9ae5af88aff0b5a9bbafa94702f2770bfc836812b4dbef875cdd94017252d9746da5f68ed524b55e9745d228d949dbb874839415a4105d3b8f22a99725e81277d5148af"}}}, &(0x7f0000000a00)={0x44, &(0x7f0000000780)={0x40, 0x16, 0x8c, "644eab2c148c346a7ebc5d8494218fc3450b3583f778016a8543c42fc3c42ed5de3ec0d75466a09ce68d192f626acba1ba58f8bda2831d45d3b3aaa305a1550cba4a14b91ba52b0a17e4e0e183b89b34e9bfff9d4f1efbbea9607f296d3736ae65d88cdda9f7d356a4bca79e067a7640c6da45df435557fd5f8220276f35c3be513a2b2d4e7c9ba6d351b081"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000008c0)={0x20, 0x81, 0x1, 'Q'}, &(0x7f0000000900)={0x20, 0x82, 0x3, "ff8f17"}, &(0x7f0000000940)={0x20, 0x83, 0x3, "23b9dc"}, &(0x7f0000000980)={0x20, 0x84, 0x2, "18e8"}, &(0x7f00000009c0)={0x20, 0x85, 0x3, "33c2c1"}}) 17.421505028s ago: executing program 4 (id=2700): socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = msgget$private(0x0, 0x3ac) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x200) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x1012, 0xffffffffffffffff, 0x0, 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bridge\x00', &(0x7f0000000080)=@ethtool_cmd={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x4}}) msgrcv(r0, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x5) fchdir(r4) socket(0xa, 0x3, 0x87) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc48b, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) 15.233424365s ago: executing program 1 (id=2701): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0xd20a, 0x10, 0x3, 0x35d}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r0, 0x1, &(0x7f0000000600)=[{&(0x7f0000001000)=""/4085, 0xff5}], 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x194, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_STAB={0x168, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1, 0x5, 0x2, 0x0, 0x40, 0xfffffff2, 0x8}}, {0x14, 0x2, [0x81, 0x5, 0x110b, 0x46, 0x3, 0x8, 0x40, 0xfffb]}}, {{0x1c, 0x1, {0x5c, 0x52, 0x5, 0x7f, 0x2, 0x6, 0x7, 0x3}}, {0xa, 0x2, [0xfffa, 0x4, 0x5]}}, {{0xd, 0x1, {0x9, 0x5, 0x67, 0x2bf5, 0x2, 0x81, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x8, 0xe7, 0x7fff, 0x2, 0x3, 0xc, 0x7, 0x3}}, {0xa, 0x2, [0xfc, 0x6, 0xd]}}, {{0x1c, 0x1, {0x7, 0x2, 0xe000, 0x1e4, 0x2, 0x3aa2, 0xd, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0xb, 0x1, 0x7, 0x7, 0x1, 0x10, 0x10001, 0x9}}, {0x16, 0x2, [0x82, 0x1, 0x1, 0xff, 0xad, 0x2, 0x5, 0xd7e, 0x0]}}, {{0x1c, 0x1, {0xff, 0x7, 0x5, 0x2, 0x1, 0x0, 0x3, 0x2}}, {0x8, 0x2, [0x7, 0xd398]}}, {{0x1c, 0x1, {0x8, 0x5, 0xfffb, 0x9, 0x2, 0xcc1, 0xff, 0x2}}, {0x8, 0x2, [0x8, 0x9]}}, {{0x1c, 0x1, {0x20, 0xb6, 0x3, 0x8, 0x1, 0xfff, 0x1000, 0x2}}, {0x8, 0x2, [0x22a, 0x4]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x194}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@mcast2, @in6=@loopback}}, {{@in6=@private1}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000240)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x1, 0x1, 0x7, 0x658, 0x6b, {0x0, 0xffffffffffffffff, 0x5, 0x7fff, 0x92, 0x6, 0xff, 0x9, 0x3, 0x8000, 0x0, r7, r8, 0x7}}, {0x0, 0x1e}}}, 0xa0) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) getdents64(r1, &(0x7f0000000300)=""/223, 0xdf) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 4.992838669s ago: executing program 32 (id=2694): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='schedstat\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x3f, 0x2, 0x1, 0x0, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x84}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}]}, 0x0) io_setup(0xefffffff, &(0x7f0000000140)=0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x0, 0xa, 0x3a, {0x3a, 0x21, "97aa815508d6a9df01f37c5ed36fedbbcdb3aa0f79ac8404481d606ff502a261953f5969b1f91bd21a23a62b6b46a5901781304db9553ea1"}}, 0x0}, 0x0) r6 = eventfd2(0x83, 0x80001) io_submit(r4, 0x1, &(0x7f0000000900)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x80, r6, &(0x7f0000000000)="31ce", 0x2fe, 0xfbe, 0x0, 0x1, r6}]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x44, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}}, 0x481d5) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x402b}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x24004080) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@gettaction={0xac, 0x32, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x8c, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc263}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x220440a8}, 0x20004000) pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x8001) r10 = userfaultfd(0x1) r11 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x80400, 0x0) dup2(r10, r11) 1.998211862s ago: executing program 33 (id=2699): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}}, 0x14}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r3, 0x8) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x0, 0x3}, &(0x7f0000000300)=0x8) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r2, 0x10, 0x270bd26, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x8820) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, &(0x7f0000000240)={0x2, 0x2}, 0x0) (async, rerun: 64) sendfile(0xffffffffffffffff, r1, 0x0, 0x20000023893) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x14, r6, 0x333, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x78, r6, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000051}, 0x20000040) (async) write$cgroup_pressure(r1, &(0x7f0000000040)={'some', 0x20, 0xf, 0x20, 0x7fff}, 0x2f) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000080)={'bond_slave_0\x00', @random}) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000002680), r7) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f00000026c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7000fbdbdf25050000000e0001006e657464000073696d0000000f0002006e657464657673696d3000000800030003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000000) r9 = syz_usb_connect$uac1(0x3, 0xbd, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xab, 0x3, 0x1, 0xff, 0x80, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x26}, [@processing_unit={0x7, 0x24, 0x7, 0x3, 0x3, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x2a, 0x1, 0xa, 0x3, "417a215999"}, @as_header={0x7, 0x24, 0x1, 0x19, 0x14, 0x5}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xffff, 0x7f, 0x6, "96d3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x80, 0x2, 0x6, {0x7, 0x25, 0x1, 0x1, 0x7, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x1, 0x2}, @as_header={0x7, 0x24, 0x1, 0x6, 0x0, 0x2}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x4, 0x4, 0xb, "48f907", "bf"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0xeb, 0x9, "e863f9b9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x10, 0x6, 0x3, {0x7, 0x25, 0x1, 0x80, 0x6, 0xfff8}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x201, 0xa, 0x3, 0x9, 0xff}, 0x5f, &(0x7f0000000500)={0x5, 0xf, 0x5f, 0x2, [@generic={0x46, 0x10, 0x2, "1a44c56ef8b7d623ebaff35a054995ef5e753ea092584064dc89347c2b0fc41113483666aa4b01d94397ddd088a4f3055592e82d31a4f1ae677b34a462b08079c21f63"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "41f2a7ca30efd36c91d2111210e4d0a2"}]}, 0x2, [{0x59, &(0x7f0000000580)=@string={0x59, 0x3, "aa13e06502f5a79707d3eea42271d543b73c112ab5e78a547482f9b451e805492485ffa6c40d758a948497777b634f6f7ecab1965eee37b5ac308e5552ff8e5e1ea6eed39147e073385280d8309097b6ecdff60586189f"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x80a}}]}) syz_usb_control_io$uac1(r9, &(0x7f0000000740)={0x14, &(0x7f0000000680)={0x0, 0x31, 0x14, {0x14, 0x21, "1c8bfd69e8965ae74f0ee32fc035e791ebcc"}}, &(0x7f00000006c0)={0x0, 0x3, 0x70, @string={0x70, 0x3, "003a799f824ad1a36434819afb724e36fee1990ced963192c45de2ab17cfc807f5b5723a63893954acc9e9ae5af88aff0b5a9bbafa94702f2770bfc836812b4dbef875cdd94017252d9746da5f68ed524b55e9745d228d949dbb874839415a4105d3b8f22a99725e81277d5148af"}}}, &(0x7f0000000a00)={0x44, &(0x7f0000000780)={0x40, 0x16, 0x8c, "644eab2c148c346a7ebc5d8494218fc3450b3583f778016a8543c42fc3c42ed5de3ec0d75466a09ce68d192f626acba1ba58f8bda2831d45d3b3aaa305a1550cba4a14b91ba52b0a17e4e0e183b89b34e9bfff9d4f1efbbea9607f296d3736ae65d88cdda9f7d356a4bca79e067a7640c6da45df435557fd5f8220276f35c3be513a2b2d4e7c9ba6d351b081"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000008c0)={0x20, 0x81, 0x1, 'Q'}, &(0x7f0000000900)={0x20, 0x82, 0x3, "ff8f17"}, &(0x7f0000000940)={0x20, 0x83, 0x3, "23b9dc"}, &(0x7f0000000980)={0x20, 0x84, 0x2, "18e8"}, &(0x7f00000009c0)={0x20, 0x85, 0x3, "33c2c1"}}) 1.942081261s ago: executing program 34 (id=2700): socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = msgget$private(0x0, 0x3ac) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x200) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x1012, 0xffffffffffffffff, 0x0, 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bridge\x00', &(0x7f0000000080)=@ethtool_cmd={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x4}}) msgrcv(r0, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x5) fchdir(r4) socket(0xa, 0x3, 0x87) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc48b, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 35 (id=2701): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0xd20a, 0x10, 0x3, 0x35d}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r0, 0x1, &(0x7f0000000600)=[{&(0x7f0000001000)=""/4085, 0xff5}], 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x194, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_STAB={0x168, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1, 0x5, 0x2, 0x0, 0x40, 0xfffffff2, 0x8}}, {0x14, 0x2, [0x81, 0x5, 0x110b, 0x46, 0x3, 0x8, 0x40, 0xfffb]}}, {{0x1c, 0x1, {0x5c, 0x52, 0x5, 0x7f, 0x2, 0x6, 0x7, 0x3}}, {0xa, 0x2, [0xfffa, 0x4, 0x5]}}, {{0xd, 0x1, {0x9, 0x5, 0x67, 0x2bf5, 0x2, 0x81, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x8, 0xe7, 0x7fff, 0x2, 0x3, 0xc, 0x7, 0x3}}, {0xa, 0x2, [0xfc, 0x6, 0xd]}}, {{0x1c, 0x1, {0x7, 0x2, 0xe000, 0x1e4, 0x2, 0x3aa2, 0xd, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0xb, 0x1, 0x7, 0x7, 0x1, 0x10, 0x10001, 0x9}}, {0x16, 0x2, [0x82, 0x1, 0x1, 0xff, 0xad, 0x2, 0x5, 0xd7e, 0x0]}}, {{0x1c, 0x1, {0xff, 0x7, 0x5, 0x2, 0x1, 0x0, 0x3, 0x2}}, {0x8, 0x2, [0x7, 0xd398]}}, {{0x1c, 0x1, {0x8, 0x5, 0xfffb, 0x9, 0x2, 0xcc1, 0xff, 0x2}}, {0x8, 0x2, [0x8, 0x9]}}, {{0x1c, 0x1, {0x20, 0xb6, 0x3, 0x8, 0x1, 0xfff, 0x1000, 0x2}}, {0x8, 0x2, [0x22a, 0x4]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x194}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@mcast2, @in6=@loopback}}, {{@in6=@private1}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000240)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x1, 0x1, 0x7, 0x658, 0x6b, {0x0, 0xffffffffffffffff, 0x5, 0x7fff, 0x92, 0x6, 0xff, 0x9, 0x3, 0x8000, 0x0, r7, r8, 0x7}}, {0x0, 0x1e}}}, 0xa0) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) getdents64(r1, &(0x7f0000000300)=""/223, 0xdf) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 0 [ 731.054339][T15009] ? __pfx_ksys_write+0x10/0x10 [ 731.054378][T15009] do_syscall_64+0xe2/0xf80 [ 731.054399][T15009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.054417][T15009] ? trace_irq_disable+0x37/0x100 [ 731.054435][T15009] ? clear_bhb_loop+0x60/0xb0 [ 731.054458][T15009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.054476][T15009] RIP: 0033:0x7ffb1199aeb9 [ 731.054495][T15009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.054512][T15009] RSP: 002b:00007ffb12869028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 731.054534][T15009] RAX: ffffffffffffffda RBX: 00007ffb11c15fa0 RCX: 00007ffb1199aeb9 [ 731.054549][T15009] RDX: 00000000040048d0 RSI: 0000200000000240 RDI: 0000000000000003 [ 731.054563][T15009] RBP: 00007ffb12869090 R08: 0000000000000000 R09: 0000000000000000 [ 731.054575][T15009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 731.054586][T15009] R13: 00007ffb11c16038 R14: 00007ffb11c15fa0 R15: 00007ffb11d3fa48 [ 731.054617][T15009] [ 731.495604][ T5896] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 731.624217][T15020] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2340'. [ 731.641057][T15020] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2340'. [ 731.654785][ T5888] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 731.678917][ T5896] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 731.690939][ T5896] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 731.713186][ T5896] usb 2-1: config 0 interface 0 has no altsetting 0 [ 731.736688][ T5896] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 731.754731][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 731.773452][ T5896] usb 2-1: Product: syz [ 731.777883][ T5896] usb 2-1: Manufacturer: syz [ 731.790057][ T5896] usb 2-1: SerialNumber: syz [ 731.803413][ T5896] usb 2-1: config 0 descriptor?? [ 731.808737][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 731.823742][ T5896] usb 2-1: selecting invalid altsetting 0 [ 731.830949][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.845000][ T8856] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 731.858808][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.874878][ T5888] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 731.889800][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.934507][ T5888] usb 4-1: config 0 descriptor?? [ 732.025504][ T8856] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 16 [ 732.040709][ T8856] usb 3-1: config 1 interface 0 has no altsetting 0 [ 732.070471][ T8856] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 732.080571][ T8856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.100194][ T8856] usb 3-1: Product: syz [ 732.134860][ T8856] usb 3-1: Manufacturer: syz [ 732.145617][ T8856] usb 3-1: SerialNumber: syz [ 732.163018][T15017] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 732.358957][ T5888] kye 0003:0458:5016.002E: control desc unexpectedly large [ 732.530442][ T5888] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.002E/input/input59 [ 732.728210][T15039] loop8: detected capacity change from 0 to 7 [ 732.735439][T15039] Dev loop8: unable to read RDB block 7 [ 732.741128][T15039] loop8: unable to read partition table [ 732.747253][T15039] loop8: partition table beyond EOD, truncated [ 732.754537][T15039] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 732.795156][ T5888] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.002E/input/input60 [ 732.880522][ T5888] kye 0003:0458:5016.002E: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 733.021033][ T5888] usb 4-1: USB disconnect, device number 117 [ 733.206614][T15040] fido_id[15040]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 733.236129][T15043] FAULT_INJECTION: forcing a failure. [ 733.236129][T15043] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 733.272969][T15043] CPU: 0 UID: 0 PID: 15043 Comm: syz.0.2346 Tainted: G L syzkaller #0 PREEMPT(full) [ 733.273003][T15043] Tainted: [L]=SOFTLOCKUP [ 733.273026][T15043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 733.273039][T15043] Call Trace: [ 733.273048][T15043] [ 733.273056][T15043] dump_stack_lvl+0xe8/0x150 [ 733.273088][T15043] should_fail_ex+0x412/0x560 [ 733.273117][T15043] prepare_alloc_pages+0x22a/0x650 [ 733.273148][T15043] __alloc_frozen_pages_noprof+0x12f/0x380 [ 733.273175][T15043] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 733.273215][T15043] alloc_pages_bulk_noprof+0x558/0x700 [ 733.273241][T15043] ? trace_kmalloc+0x1f/0xb0 [ 733.273260][T15043] ? copy_splice_read+0x16f/0xaa0 [ 733.273287][T15043] copy_splice_read+0x19f/0xaa0 [ 733.273328][T15043] ? __pfx_copy_splice_read+0x10/0x10 [ 733.273352][T15043] ? look_up_lock_class+0x57/0x110 [ 733.273374][T15043] ? register_lock_class+0x31/0x2e0 [ 733.273403][T15043] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 733.273436][T15043] ? alloc_pipe_info+0x373/0x4d0 [ 733.273455][T15043] ? __pfx_copy_splice_read+0x10/0x10 [ 733.273475][T15043] splice_direct_to_actor+0x478/0xc70 [ 733.273497][T15043] ? kstrtoull+0x12f/0x1d0 [ 733.273531][T15043] ? __pfx_direct_splice_actor+0x10/0x10 [ 733.273561][T15043] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 733.273583][T15043] ? get_pid_task+0x20/0x1f0 [ 733.273613][T15043] do_splice_direct+0x195/0x290 [ 733.273638][T15043] ? __pfx_do_splice_direct+0x10/0x10 [ 733.273662][T15043] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 733.273688][T15043] ? bpf_lsm_file_permission+0x9/0x20 [ 733.273711][T15043] ? security_file_permission+0x75/0x260 [ 733.273733][T15043] ? rw_verify_area+0x255/0x4d0 [ 733.273766][T15043] do_sendfile+0x535/0x7d0 [ 733.273788][T15043] ? __pfx_vfs_write+0x10/0x10 [ 733.273823][T15043] ? __pfx_do_sendfile+0x10/0x10 [ 733.273860][T15043] __se_sys_sendfile64+0x144/0x1a0 [ 733.273904][T15043] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 733.273940][T15043] do_syscall_64+0xe2/0xf80 [ 733.273960][T15043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.273979][T15043] ? trace_irq_disable+0x37/0x100 [ 733.273998][T15043] ? clear_bhb_loop+0x60/0xb0 [ 733.274093][T15043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.274113][T15043] RIP: 0033:0x7f577cb9aeb9 [ 733.274133][T15043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.274149][T15043] RSP: 002b:00007f577d973028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 733.274172][T15043] RAX: ffffffffffffffda RBX: 00007f577ce16090 RCX: 00007f577cb9aeb9 [ 733.274187][T15043] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000005 [ 733.274199][T15043] RBP: 00007f577d973090 R08: 0000000000000000 R09: 0000000000000000 [ 733.274210][T15043] R10: 000000000000ffff R11: 0000000000000246 R12: 0000000000000001 [ 733.274222][T15043] R13: 00007f577ce16128 R14: 00007f577ce16090 R15: 00007f577cf3fa48 [ 733.274252][T15043] [ 733.745026][ T39] net_ratelimit: 3 callbacks suppressed [ 733.745049][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.920942][ T39] usb 2-1: USB disconnect, device number 127 [ 734.194770][ T5922] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 734.253921][T15056] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2350'. [ 734.268867][T15056] unsupported nlmsg_type 40 [ 734.344749][ T5922] usb 5-1: Using ep0 maxpacket: 16 [ 734.477587][ T5922] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 734.503948][ T5922] usb 5-1: config 0 has no interface number 0 [ 734.546200][ T6251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.573858][ T5922] usb 5-1: config 0 interface 119 has no altsetting 0 [ 734.610322][ T8856] usb 3-1: USB disconnect, device number 9 [ 734.663095][ T5922] usb 5-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=26.35 [ 734.705902][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.751533][ T5922] usb 5-1: Product: syz [ 734.761312][T15065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.770480][T15065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.772553][ T5922] usb 5-1: Manufacturer: syz [ 734.797530][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.806502][ T5922] usb 5-1: SerialNumber: syz [ 734.829068][ T5922] usb 5-1: config 0 descriptor?? [ 734.829637][T15065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.865576][T15065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.961370][T15068] xt_CT: You must specify a L4 protocol and not use inversions on it [ 734.977619][T15068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 735.108273][T15070] netlink: 182 bytes leftover after parsing attributes in process `syz.3.2355'. [ 735.185401][ T8856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.194292][ T6263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.000411][ T39] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 736.151061][T15079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.251702][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.277454][ T39] usb 3-1: Using ep0 maxpacket: 8 [ 736.300137][ T39] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 736.309732][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.333202][ T39] usb 3-1: Product: syz [ 736.343168][ T39] usb 3-1: Manufacturer: syz [ 736.354311][ T39] usb 3-1: SerialNumber: syz [ 736.373774][ T39] usb 3-1: config 0 descriptor?? [ 736.390860][ T39] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 736.659493][ T5922] usb 5-1: USB disconnect, device number 116 [ 736.830722][T15089] openvswitch: netlink: Actions may not be safe on all matching packets [ 736.896361][T15092] FAULT_INJECTION: forcing a failure. [ 736.896361][T15092] name failslab, interval 1, probability 0, space 0, times 0 [ 736.928094][T15092] CPU: 1 UID: 0 PID: 15092 Comm: syz.1.2360 Tainted: G L syzkaller #0 PREEMPT(full) [ 736.928128][T15092] Tainted: [L]=SOFTLOCKUP [ 736.928135][T15092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 736.928148][T15092] Call Trace: [ 736.928156][T15092] [ 736.928165][T15092] dump_stack_lvl+0xe8/0x150 [ 736.928196][T15092] should_fail_ex+0x412/0x560 [ 736.928227][T15092] should_failslab+0xa8/0x100 [ 736.928253][T15092] __kvmalloc_node_noprof+0x166/0x8d0 [ 736.928277][T15092] ? seq_read_iter+0x202/0xe10 [ 736.928311][T15092] seq_read_iter+0x202/0xe10 [ 736.928338][T15092] ? set_page_refcounted+0x76/0x160 [ 736.928368][T15092] ? __asan_memset+0x22/0x50 [ 736.928401][T15092] copy_splice_read+0x5ff/0xaa0 [ 736.928437][T15092] ? __pfx_copy_splice_read+0x10/0x10 [ 736.928462][T15092] ? look_up_lock_class+0x57/0x110 [ 736.928484][T15092] ? register_lock_class+0x31/0x2e0 [ 736.928521][T15092] ? alloc_pipe_info+0x373/0x4d0 [ 736.928540][T15092] ? __pfx_copy_splice_read+0x10/0x10 [ 736.928559][T15092] splice_direct_to_actor+0x478/0xc70 [ 736.928580][T15092] ? kstrtoull+0x12f/0x1d0 [ 736.928610][T15092] ? __pfx_direct_splice_actor+0x10/0x10 [ 736.928640][T15092] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 736.928663][T15092] ? get_pid_task+0x20/0x1f0 [ 736.928694][T15092] do_splice_direct+0x195/0x290 [ 736.928719][T15092] ? __pfx_do_splice_direct+0x10/0x10 [ 736.928743][T15092] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 736.928768][T15092] ? bpf_lsm_file_permission+0x9/0x20 [ 736.928791][T15092] ? security_file_permission+0x75/0x260 [ 736.928814][T15092] ? rw_verify_area+0x255/0x4d0 [ 736.928845][T15092] do_sendfile+0x535/0x7d0 [ 736.928868][T15092] ? __pfx_vfs_write+0x10/0x10 [ 736.928902][T15092] ? __pfx_do_sendfile+0x10/0x10 [ 736.928939][T15092] __se_sys_sendfile64+0x144/0x1a0 [ 736.928965][T15092] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 736.928997][T15092] do_syscall_64+0xe2/0xf80 [ 736.929017][T15092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.929044][T15092] ? trace_irq_disable+0x37/0x100 [ 736.929062][T15092] ? clear_bhb_loop+0x60/0xb0 [ 736.929087][T15092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.929104][T15092] RIP: 0033:0x7f7e9fd9aeb9 [ 736.929122][T15092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.929140][T15092] RSP: 002b:00007f7e9dfd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 736.929162][T15092] RAX: ffffffffffffffda RBX: 00007f7ea0016090 RCX: 00007f7e9fd9aeb9 [ 736.929176][T15092] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000005 [ 736.929187][T15092] RBP: 00007f7e9dfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 736.929199][T15092] R10: 000000000000ffff R11: 0000000000000246 R12: 0000000000000001 [ 736.929210][T15092] R13: 00007f7ea0016128 R14: 00007f7ea0016090 R15: 00007f7ea013fa48 [ 736.929243][T15092] [ 737.289223][ T5922] usb 3-1: USB disconnect, device number 10 [ 737.305124][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.376145][T15101] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2365'. [ 737.485043][T15106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.495087][T15106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.645402][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.272134][T15119] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 739.285465][T15122] loop9: detected capacity change from 0 to 7 [ 739.426070][ T39] net_ratelimit: 1 callbacks suppressed [ 739.426090][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.763998][T15123] Invalid logical block size (1) [ 739.771772][T15122] Dev loop9: unable to read RDB block 7 [ 739.793785][T15122] loop9: unable to read partition table [ 739.836623][T15122] loop9: partition table beyond EOD, truncated [ 739.856079][T15122] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 739.872591][T15131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.883939][T15131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.045190][ T39] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 740.057084][T15138] loop5: detected capacity change from 0 to 7 [ 740.064603][T15138] loop5: p1 < > p4 [ 740.069168][T15138] loop5: partition table partially beyond EOD, truncated [ 740.091345][T15138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2374'. [ 740.135467][ T5888] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 740.156010][ T6011] udevd[6011]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 740.169467][ T6065] udevd[6065]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 740.213566][T15143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.231349][ T6251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.240835][ T39] usb 2-1: Using ep0 maxpacket: 16 [ 740.257837][ T39] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 740.272716][T15143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.286289][ T39] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 740.299491][ T39] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 740.318059][T12712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.333269][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 740.336418][T15143] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 740.356619][T15145] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 740.365806][ T39] usb 2-1: config 1 interface 0 has no altsetting 0 [ 740.369043][ T5888] usb 5-1: config 1 interface 0 has no altsetting 0 [ 740.376813][T15147] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 740.412143][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 740.428040][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.429016][ T5888] usb 5-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40 [ 740.450118][ T39] usb 2-1: Product: syz [ 740.455599][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.458573][ T39] usb 2-1: Manufacturer: syz [ 740.475439][ T5888] usb 5-1: Product: syz [ 740.480884][ T39] usb 2-1: SerialNumber: syz [ 740.481955][ T5888] usb 5-1: Manufacturer: syz [ 740.491605][ T5888] usb 5-1: SerialNumber: syz [ 740.496535][ T8856] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 740.751664][ T39] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 740.778045][ T5888] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input61 [ 740.809501][ T5179] bcm5974 5-1:1.0: could not read from device [ 740.831111][ T5179] bcm5974 5-1:1.0: could not read from device [ 740.910861][ T5179] bcm5974 5-1:1.0: could not read from device [ 740.931510][ T5179] bcm5974 5-1:1.0: could not read from device [ 740.939438][ T5888] usb 5-1: USB disconnect, device number 117 [ 740.967022][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.310871][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.339358][ T39] usb 2-1: USB disconnect, device number 2 [ 741.489913][ T39] usblp0: removed [ 741.753105][T15162] syzkaller0: entered promiscuous mode [ 741.784108][T15162] syzkaller0: entered allmulticast mode [ 741.874861][ T39] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 742.026022][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 742.034140][T15167] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 742.062247][ T39] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 742.089558][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.113652][ T39] usb 5-1: Product: syz [ 742.124846][ T39] usb 5-1: Manufacturer: syz [ 742.134865][ T39] usb 5-1: SerialNumber: syz [ 742.170043][ T39] usb 5-1: config 0 descriptor?? [ 742.371849][T15174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2384'. [ 742.385030][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.400451][ T39] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 743.389295][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.557145][T15188] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 743.627474][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.879492][T15188] overlayfs: missing 'lowerdir' [ 743.903423][T15192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2388'. [ 744.704944][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.785354][ T8856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.836921][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.888179][ T39] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 744.900053][ T39] usb 5-1: USB disconnect, device number 118 [ 744.925815][T15199] FAULT_INJECTION: forcing a failure. [ 744.925815][T15199] name failslab, interval 1, probability 0, space 0, times 0 [ 744.938785][T15199] CPU: 1 UID: 0 PID: 15199 Comm: syz.0.2390 Tainted: G L syzkaller #0 PREEMPT(full) [ 744.938807][T15199] Tainted: [L]=SOFTLOCKUP [ 744.938811][T15199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 744.938819][T15199] Call Trace: [ 744.938826][T15199] [ 744.938833][T15199] dump_stack_lvl+0xe8/0x150 [ 744.938854][T15199] should_fail_ex+0x412/0x560 [ 744.938887][T15199] should_failslab+0xa8/0x100 [ 744.938903][T15199] __kmalloc_noprof+0xde/0x7e0 [ 744.938915][T15199] ? copy_splice_read+0x16f/0xaa0 [ 744.938930][T15199] copy_splice_read+0x16f/0xaa0 [ 744.938949][T15199] ? __pfx_copy_splice_read+0x10/0x10 [ 744.938963][T15199] ? look_up_lock_class+0x57/0x110 [ 744.938976][T15199] ? register_lock_class+0x31/0x2e0 [ 744.938995][T15199] ? file_end_write+0xd8/0x250 [ 744.939008][T15199] ? direct_splice_actor+0x10c/0x160 [ 744.939022][T15199] ? __pfx_copy_splice_read+0x10/0x10 [ 744.939034][T15199] splice_direct_to_actor+0x478/0xc70 [ 744.939046][T15199] ? kstrtoull+0x12f/0x1d0 [ 744.939065][T15199] ? __pfx_direct_splice_actor+0x10/0x10 [ 744.939082][T15199] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 744.939095][T15199] ? get_pid_task+0x20/0x1f0 [ 744.939112][T15199] do_splice_direct+0x195/0x290 [ 744.939129][T15199] ? __pfx_do_splice_direct+0x10/0x10 [ 744.939143][T15199] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 744.939158][T15199] ? bpf_lsm_file_permission+0x9/0x20 [ 744.939172][T15199] ? security_file_permission+0x75/0x260 [ 744.939184][T15199] ? rw_verify_area+0x255/0x4d0 [ 744.939203][T15199] do_sendfile+0x535/0x7d0 [ 744.939216][T15199] ? __pfx_vfs_write+0x10/0x10 [ 744.939236][T15199] ? __pfx_do_sendfile+0x10/0x10 [ 744.939256][T15199] __se_sys_sendfile64+0x144/0x1a0 [ 744.939270][T15199] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 744.939288][T15199] do_syscall_64+0xe2/0xf80 [ 744.939301][T15199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.939312][T15199] ? clear_bhb_loop+0x60/0xb0 [ 744.939326][T15199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.939337][T15199] RIP: 0033:0x7f577cb9aeb9 [ 744.939349][T15199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.939359][T15199] RSP: 002b:00007f577d973028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 744.939373][T15199] RAX: ffffffffffffffda RBX: 00007f577ce16090 RCX: 00007f577cb9aeb9 [ 744.939382][T15199] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000005 [ 744.939389][T15199] RBP: 00007f577d973090 R08: 0000000000000000 R09: 0000000000000000 [ 744.939397][T15199] R10: 000000000000ffff R11: 0000000000000246 R12: 0000000000000001 [ 744.939404][T15199] R13: 00007f577ce16128 R14: 00007f577ce16090 R15: 00007f577cf3fa48 [ 744.939421][T15199] [ 745.278640][T15202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2389'. [ 745.508049][ T6263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.066234][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.253545][T15218] [U]  [ 746.620933][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.705774][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.349541][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.358909][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.570468][T15192] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 747.669327][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.709642][T15229] loop2: detected capacity change from 0 to 7 [ 747.717705][T15229] loop2: [ 747.721061][T15229] loop2: partition table partially beyond EOD, truncated [ 748.004290][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.156056][T15202] veth1_vlan (unregistering): left allmulticast mode [ 748.347082][T15237] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2396'. [ 748.358465][T15234] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2396'. [ 748.382452][T15220] syzkaller0: entered promiscuous mode [ 748.394212][T15220] syzkaller0: entered allmulticast mode [ 748.705676][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.756127][T15248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2398'. [ 749.204343][T15251] input: syz1 as /devices/virtual/input/input62 [ 749.637636][T15255] FAULT_INJECTION: forcing a failure. [ 749.637636][T15255] name failslab, interval 1, probability 0, space 0, times 0 [ 749.651420][T15255] CPU: 0 UID: 0 PID: 15255 Comm: syz.1.2401 Tainted: G L syzkaller #0 PREEMPT(full) [ 749.651443][T15255] Tainted: [L]=SOFTLOCKUP [ 749.651447][T15255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 749.651455][T15255] Call Trace: [ 749.651460][T15255] [ 749.651466][T15255] dump_stack_lvl+0xe8/0x150 [ 749.651487][T15255] should_fail_ex+0x412/0x560 [ 749.651504][T15255] should_failslab+0xa8/0x100 [ 749.651518][T15255] __kmalloc_noprof+0xde/0x7e0 [ 749.651530][T15255] ? copy_splice_read+0x16f/0xaa0 [ 749.651546][T15255] copy_splice_read+0x16f/0xaa0 [ 749.651565][T15255] ? __pfx_copy_splice_read+0x10/0x10 [ 749.651579][T15255] ? look_up_lock_class+0x57/0x110 [ 749.651592][T15255] ? register_lock_class+0x31/0x2e0 [ 749.651611][T15255] ? file_end_write+0xd8/0x250 [ 749.651624][T15255] ? direct_splice_actor+0x10c/0x160 [ 749.651638][T15255] ? __pfx_copy_splice_read+0x10/0x10 [ 749.651650][T15255] splice_direct_to_actor+0x478/0xc70 [ 749.651663][T15255] ? kstrtoull+0x12f/0x1d0 [ 749.651681][T15255] ? __pfx_direct_splice_actor+0x10/0x10 [ 749.651698][T15255] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 749.651711][T15255] ? get_pid_task+0x20/0x1f0 [ 749.651728][T15255] do_splice_direct+0x195/0x290 [ 749.651743][T15255] ? __pfx_do_splice_direct+0x10/0x10 [ 749.651756][T15255] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 749.651771][T15255] ? bpf_lsm_file_permission+0x9/0x20 [ 749.651785][T15255] ? security_file_permission+0x75/0x260 [ 749.651801][T15255] ? rw_verify_area+0x255/0x4d0 [ 749.651831][T15255] do_sendfile+0x535/0x7d0 [ 749.651854][T15255] ? __pfx_vfs_write+0x10/0x10 [ 749.651884][T15255] ? __pfx_do_sendfile+0x10/0x10 [ 749.651924][T15255] __se_sys_sendfile64+0x144/0x1a0 [ 749.651940][T15255] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 749.651959][T15255] do_syscall_64+0xe2/0xf80 [ 749.651972][T15255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.651983][T15255] ? trace_irq_disable+0x37/0x100 [ 749.651995][T15255] ? clear_bhb_loop+0x60/0xb0 [ 749.652009][T15255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.652020][T15255] RIP: 0033:0x7f7e9fd9aeb9 [ 749.652032][T15255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.652042][T15255] RSP: 002b:00007f7e9dff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 749.652057][T15255] RAX: ffffffffffffffda RBX: 00007f7ea0015fa0 RCX: 00007f7e9fd9aeb9 [ 749.652066][T15255] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000005 [ 749.652073][T15255] RBP: 00007f7e9dff6090 R08: 0000000000000000 R09: 0000000000000000 [ 749.652080][T15255] R10: 000000000000ffff R11: 0000000000000246 R12: 0000000000000001 [ 749.652087][T15255] R13: 00007f7ea0016038 R14: 00007f7ea0015fa0 R15: 00007f7ea013fa48 [ 749.652105][T15255] [ 749.945648][ T984] net_ratelimit: 1 callbacks suppressed [ 749.945672][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.412734][T15260] program syz.0.2402 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 750.987716][T15278] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 751.001766][T15278] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 751.025044][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.185134][ T6104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.326949][ T5922] usb 5-1: new full-speed USB device number 119 using dummy_hcd [ 751.465602][T15282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.499521][T15282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.526813][ T5922] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.557054][ T5922] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 751.587627][ T5922] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 751.616225][ T984] IPVS: starting estimator thread 0... [ 751.635378][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.675648][ T5922] usb 5-1: config 0 descriptor?? [ 751.739576][T15286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2411'. [ 751.759589][T15291] IPVS: using max 29 ests per chain, 69600 per kthread [ 751.787084][ T5922] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 751.827355][ T6104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.843690][ T5922] dvb-usb: bulk message failed: -22 (3/0) [ 751.890594][ T5922] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 751.908802][ T5922] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 751.919329][ T5922] usb 5-1: media controller created [ 751.927071][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 751.958368][ T8856] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 751.964499][ T5922] dvb-usb: bulk message failed: -22 (6/0) [ 751.986390][ T5922] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 752.024359][ T5922] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input63 [ 752.042326][ T5922] dvb-usb: schedule remote query interval to 150 msecs. [ 752.057768][ T5922] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 752.072071][ T5922] usb 5-1: USB disconnect, device number 119 [ 752.099307][ T5922] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 752.134880][ T39] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 752.157357][ T8856] usb 4-1: Using ep0 maxpacket: 16 [ 752.164531][ T8856] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 752.177450][ T8856] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.189168][ T8856] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.199268][ T8856] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 752.212704][ T8856] usb 4-1: config 7 interface 0 has no altsetting 0 [ 752.219418][ T8856] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 752.228768][ T8856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.228815][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.296821][ T39] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 752.316389][ T39] usb 2-1: config 1 has no interface number 0 [ 752.322675][ T39] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 752.339385][ T39] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 752.351259][ T39] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.373760][ T39] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 752.385576][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.396774][ T39] usb 2-1: Product: syz [ 752.401079][ T39] usb 2-1: Manufacturer: syz [ 752.410488][ T39] usb 2-1: SerialNumber: syz [ 752.438009][T15294] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 752.663548][T15294] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 752.885093][ T8856] usbhid 4-1:7.0: can't add hid device: -71 [ 752.892934][ T8856] usbhid 4-1:7.0: probe with driver usbhid failed with error -71 [ 752.944143][ T8856] usb 4-1: USB disconnect, device number 118 [ 752.967852][ T39] sierra_net 2-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07 [ 753.110873][ T39] sierra_net 2-1:1.7 wwan0: Submit SYNC failed -71 [ 753.122022][ T39] sierra_net 2-1:1.7 wwan0: Send SYNC failed, status -71 [ 753.149302][ T39] sierra_net 2-1:1.7 wwan0: Submit SYNC failed -71 [ 753.167982][ T39] sierra_net 2-1:1.7 wwan0: Send SYNC failed, status -71 [ 753.211750][ T39] usb 2-1: USB disconnect, device number 3 [ 753.225589][ T5922] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 753.258735][ T39] sierra_net 2-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem [ 753.271224][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.366173][ T39] sierra_net 2-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 753.397938][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.419846][ T5922] usb 5-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 753.472412][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.539970][ T5922] usb 5-1: config 0 descriptor?? [ 753.782928][ T5922] usbhid 5-1:0.0: can't add hid device: -71 [ 753.807776][ T5922] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 753.818182][T15324] FAULT_INJECTION: forcing a failure. [ 753.818182][T15324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 753.837700][T15324] CPU: 1 UID: 0 PID: 15324 Comm: syz.1.2419 Tainted: G L syzkaller #0 PREEMPT(full) [ 753.837732][T15324] Tainted: [L]=SOFTLOCKUP [ 753.837739][T15324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 753.837750][T15324] Call Trace: [ 753.837758][T15324] [ 753.837766][T15324] dump_stack_lvl+0xe8/0x150 [ 753.837795][T15324] should_fail_ex+0x412/0x560 [ 753.837823][T15324] _copy_from_user+0x2d/0xb0 [ 753.837854][T15324] io_submit_one+0xd3/0x14c0 [ 753.837884][T15324] ? irqentry_exit+0x59c/0x620 [ 753.837906][T15324] ? lockdep_hardirqs_on+0x7a/0x110 [ 753.837927][T15324] ? irqentry_exit+0x59c/0x620 [ 753.837952][T15324] ? __pfx_io_submit_one+0x10/0x10 [ 753.837977][T15324] ? __might_fault+0xaf/0x130 [ 753.838017][T15324] ? __might_fault+0xaf/0x130 [ 753.838058][T15324] __se_sys_io_submit+0x195/0x340 [ 753.838086][T15324] ? __pfx___se_sys_io_submit+0x10/0x10 [ 753.838107][T15324] ? ksys_write+0x242/0x270 [ 753.838152][T15324] do_syscall_64+0xe2/0xf80 [ 753.838173][T15324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.838192][T15324] ? trace_irq_disable+0x37/0x100 [ 753.838212][T15324] ? clear_bhb_loop+0x60/0xb0 [ 753.838235][T15324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.838255][T15324] RIP: 0033:0x7f7e9fd9aeb9 [ 753.838273][T15324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 753.838290][T15324] RSP: 002b:00007f7e9dfd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 753.838313][T15324] RAX: ffffffffffffffda RBX: 00007f7ea0016090 RCX: 00007f7e9fd9aeb9 [ 753.838327][T15324] RDX: 0000200000004540 RSI: 0000000000000001 RDI: 00007f7ea0b51000 [ 753.838341][T15324] RBP: 00007f7e9dfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 753.838353][T15324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.838365][T15324] R13: 00007f7ea0016128 R14: 00007f7ea0016090 R15: 00007f7ea013fa48 [ 753.838397][T15324] [ 753.841146][ T5922] usb 5-1: USB disconnect, device number 120 [ 754.308288][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.387933][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.025523][ T5922] net_ratelimit: 1 callbacks suppressed [ 755.025544][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.200803][T15350] syzkaller0: entered promiscuous mode [ 755.219699][T15350] syzkaller0: entered allmulticast mode [ 755.520813][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.993453][T15371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2429'. [ 756.021156][T15373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.030069][T15373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.053795][T15373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.076717][T15373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.090524][T15373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.094258][T15376] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 756.121738][T15373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.122549][T15376] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 756.145747][T15373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.177542][T15373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.405327][ T984] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 756.588694][ T984] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.600346][ T984] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 756.645152][ T984] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 756.654343][ T984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.678057][ T984] usb 4-1: config 0 descriptor?? [ 756.703089][ T984] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 756.715622][ T984] dvb-usb: bulk message failed: -22 (3/0) [ 756.736930][ T984] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 756.760345][ T984] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 756.795147][ T984] usb 4-1: media controller created [ 756.825092][ T984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 756.879690][ T984] dvb-usb: bulk message failed: -22 (6/0) [ 756.909350][T15376] dvb-usb: bulk message failed: -22 (2/0) [ 756.916905][ T984] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 756.967451][ T984] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input64 [ 757.060652][ T984] dvb-usb: schedule remote query interval to 150 msecs. [ 757.104435][ T984] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 757.255027][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 757.269501][ T984] dvb-usb: error while querying for an remote control event. [ 757.304003][T15393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.343559][T15393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.445251][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 757.473156][ T984] dvb-usb: error while querying for an remote control event. [ 757.679744][ T5922] dvb-usb: bulk message failed: -22 (1/0) [ 757.686552][ T5922] dvb-usb: error while querying for an remote control event. [ 757.865164][ T5922] dvb-usb: bulk message failed: -22 (1/0) [ 757.871706][ T5922] dvb-usb: error while querying for an remote control event. [ 758.044804][ T5922] dvb-usb: bulk message failed: -22 (1/0) [ 758.050692][ T5922] dvb-usb: error while querying for an remote control event. [ 758.084788][ T5896] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 758.225078][ T5922] dvb-usb: bulk message failed: -22 (1/0) [ 758.231741][ T5922] dvb-usb: error while querying for an remote control event. [ 758.333431][ T5896] usb 2-1: config 128 has an invalid interface number: 148 but max is 0 [ 758.481803][ T5896] usb 2-1: config 128 has no interface number 0 [ 758.481862][ T5922] dvb-usb: bulk message failed: -22 (1/0) [ 758.488467][ T5896] usb 2-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 758.508333][ T5922] dvb-usb: error while querying for an remote control event. [ 758.561319][ T5896] usb 2-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 758.623431][ T5896] usb 2-1: config 128 interface 148 has no altsetting 0 [ 758.663135][ T5896] usb 2-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 758.672395][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.681850][T15416] loop8: detected capacity change from 0 to 7 [ 758.689577][ T5896] usb 2-1: Product: syz [ 758.695418][ T5922] dvb-usb: bulk message failed: -22 (1/0) [ 758.695943][ T5896] usb 2-1: Manufacturer: syz [ 758.706821][T15416] Dev loop8: unable to read RDB block 7 [ 758.713143][T15416] loop8: unable to read partition table [ 758.727487][T15416] loop8: partition table beyond EOD, truncated [ 758.729630][ T5922] dvb-usb: error while querying for an remote control event. [ 758.737373][ T5896] usb 2-1: SerialNumber: syz [ 758.757534][T15416] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 758.986094][ T5922] dvb-usb: bulk message failed: -22 (1/0) [ 759.002951][ T5922] dvb-usb: error while querying for an remote control event. [ 759.031649][T15418] syzkaller0: entered promiscuous mode [ 759.041409][ T5896] usb 2-1: USB disconnect, device number 4 [ 759.073531][ T5922] usb 4-1: USB disconnect, device number 119 [ 759.157609][T15418] syzkaller0: entered allmulticast mode [ 759.248485][ T5922] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 759.585035][ T984] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 759.755147][ T984] usb 2-1: Using ep0 maxpacket: 8 [ 759.764323][ T984] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 759.799964][ T984] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 759.831316][ T984] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 759.867805][ T984] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 759.906288][ T984] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 759.955957][ T984] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 759.965583][ T984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.192670][ T984] usb 2-1: GET_CAPABILITIES returned 0 [ 760.212616][ T984] usbtmc 2-1:16.0: can't read capabilities [ 760.403586][T15413] usb 2-1: usbtmc_ioctl_clear_in_halt returned -32 [ 760.502550][ T984] usb 2-1: USB disconnect, device number 5 [ 760.631354][ T5922] net_ratelimit: 958 callbacks suppressed [ 760.631371][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.794930][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.289438][T15465] xt_CT: You must specify a L4 protocol and not use inversions on it [ 761.298878][T15466] loop8: detected capacity change from 0 to 7 [ 761.458458][T15466] Dev loop8: unable to read RDB block 7 [ 761.469193][T15466] loop8: unable to read partition table [ 761.486771][T15466] loop8: partition table beyond EOD, truncated [ 761.584761][T15466] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 761.675052][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.996254][ T6263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.074776][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.103831][ T6260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.549615][T15460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 762.614140][T15487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.629781][T15487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.640493][T15487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.719196][ T984] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 762.826878][T15487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.844765][ T5896] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 763.005679][ T984] usb 5-1: unable to get BOS descriptor or descriptor too short [ 763.014771][ T5896] usb 2-1: Using ep0 maxpacket: 8 [ 763.016482][ T984] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 763.038606][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 763.064766][ T984] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 763.064773][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 763.064804][ T984] usb 5-1: config 63 has no interface number 0 [ 763.111977][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.140419][ T5896] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 763.168165][ T984] usb 5-1: config 63 interface 66 has no altsetting 0 [ 763.168275][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 763.214762][ T5896] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 763.258633][ T5896] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 763.275319][ T984] usb 5-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 763.294950][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.295418][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.302984][ T984] usb 5-1: Product: syz [ 763.303008][ T984] usb 5-1: Manufacturer: syz [ 763.303022][ T984] usb 5-1: SerialNumber: syz [ 763.444604][ T5896] usb 2-1: config 0 descriptor?? [ 763.474232][T15481] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 763.622298][ T984] uvcvideo 5-1:63.66: probe with driver uvcvideo failed with error -22 [ 763.640629][ T984] usb 5-1: USB disconnect, device number 121 [ 763.924477][T15493] FAULT_INJECTION: forcing a failure. [ 763.924477][T15493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 763.948024][T15493] CPU: 0 UID: 0 PID: 15493 Comm: syz.0.2455 Tainted: G L syzkaller #0 PREEMPT(full) [ 763.948056][T15493] Tainted: [L]=SOFTLOCKUP [ 763.948063][T15493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 763.948082][T15493] Call Trace: [ 763.948090][T15493] [ 763.948097][T15493] dump_stack_lvl+0xe8/0x150 [ 763.948118][T15493] should_fail_ex+0x412/0x560 [ 763.948145][T15493] _copy_to_user+0x31/0xb0 [ 763.948177][T15493] simple_read_from_buffer+0xe1/0x170 [ 763.948202][T15493] proc_fail_nth_read+0x1bb/0x230 [ 763.948232][T15493] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 763.948251][T15493] ? rw_verify_area+0x2a6/0x4d0 [ 763.948268][T15493] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 763.948286][T15493] vfs_read+0x20c/0xa70 [ 763.948309][T15493] ? fdget_pos+0x246/0x320 [ 763.948335][T15493] ? __pfx___mutex_lock+0x10/0x10 [ 763.948357][T15493] ? __pfx_vfs_read+0x10/0x10 [ 763.948384][T15493] ? __fget_files+0x2a/0x420 [ 763.948401][T15493] ? __fget_files+0x3a0/0x420 [ 763.948413][T15493] ? __fget_files+0x2a/0x420 [ 763.948430][T15493] ksys_read+0x150/0x270 [ 763.948453][T15493] ? __pfx_ksys_read+0x10/0x10 [ 763.948491][T15493] do_syscall_64+0xe2/0xf80 [ 763.948511][T15493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.948527][T15493] ? trace_irq_disable+0x37/0x100 [ 763.948545][T15493] ? clear_bhb_loop+0x60/0xb0 [ 763.948560][T15493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.948572][T15493] RIP: 0033:0x7f577cb5b78e [ 763.948583][T15493] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 763.948593][T15493] RSP: 002b:00007f577d972fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 763.948610][T15493] RAX: ffffffffffffffda RBX: 00007f577d9736c0 RCX: 00007f577cb5b78e [ 763.948624][T15493] RDX: 000000000000000f RSI: 00007f577d9730a0 RDI: 0000000000000006 [ 763.948637][T15493] RBP: 00007f577d973090 R08: 0000000000000000 R09: 0000000000000000 [ 763.948649][T15493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 763.948669][T15493] R13: 00007f577ce16128 R14: 00007f577ce16090 R15: 00007f577cf3fa48 [ 763.948700][T15493] [ 764.181174][T15481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.190050][T15481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.198958][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.224483][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.232674][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.268053][T15481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.286366][T15496] syzkaller0: entered promiscuous mode [ 764.291947][T15496] syzkaller0: entered allmulticast mode [ 764.327752][T15481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.365511][T15500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.398386][T15500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.435200][ T984] usb 2-1: USB disconnect, device number 6 [ 764.446990][ T5146] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 764.622241][T15506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.737097][T15506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.249506][T15516] loop2: detected capacity change from 0 to 7 [ 765.282564][T15516] loop2: [ 765.290050][T15516] loop2: partition table partially beyond EOD, truncated [ 766.314293][ T984] net_ratelimit: 3 callbacks suppressed [ 766.314317][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.629063][T15533] loop8: detected capacity change from 0 to 7 [ 766.680199][T15533] Dev loop8: unable to read RDB block 7 [ 766.688885][T15533] loop8: unable to read partition table [ 766.776366][T15531] netlink: 203340 bytes leftover after parsing attributes in process `syz.1.2462'. [ 767.139827][T15533] loop8: partition table beyond EOD, truncated [ 767.262015][ T6260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.338673][T15533] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 767.349219][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.564764][ T5922] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 767.737217][ T5922] usb 3-1: Using ep0 maxpacket: 32 [ 767.765793][ T5922] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 767.801265][ T5922] usb 3-1: config 0 has no interface number 0 [ 767.825996][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.852600][ T5922] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 767.896699][ T5922] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 767.913980][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.923124][ T5922] usb 3-1: Product: syz [ 767.942948][ T5922] usb 3-1: Manufacturer: syz [ 767.955049][ T5922] usb 3-1: SerialNumber: syz [ 767.961642][T15545] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 767.969759][T15545] IPv6: NLM_F_CREATE should be set when creating new route [ 767.980900][T15543] syzkaller0: entered promiscuous mode [ 767.990026][ T5922] usb 3-1: config 0 descriptor?? [ 767.997629][T15543] syzkaller0: entered allmulticast mode [ 768.019558][ T5922] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 768.055250][ T5922] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 768.067966][T15547] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 768.214257][ T5922] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 768.403549][T15554] syzkaller0: entered promiscuous mode [ 768.409683][T15554] syzkaller0: entered allmulticast mode [ 768.428428][ T5922] radio-raremono 3-1:0.35: V4L2 device registered as radio48 [ 768.639117][ T30] audit: type=1804 audit(1770374561.161:6694): pid=15536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2469" name="/newroot/482/file1" dev="tmpfs" ino=2522 res=1 errno=0 [ 768.797182][ T798] usb 3-1: USB disconnect, device number 12 [ 768.808036][ T798] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 768.870327][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.012765][T15562] syzkaller0: entered promiscuous mode [ 769.021313][T15562] syzkaller0: entered allmulticast mode [ 769.040371][T15562] TC_ACT_REPEAT abuse ? [ 769.057976][T15562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 769.105029][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.255561][T15567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2478'. [ 769.406356][T15573] loop8: detected capacity change from 0 to 7 [ 769.416987][ T6011] Dev loop8: unable to read RDB block 7 [ 769.422996][ T6011] loop8: unable to read partition table [ 769.432596][ T6011] loop8: partition table beyond EOD, truncated [ 769.440668][T15573] Dev loop8: unable to read RDB block 7 [ 769.464047][T15573] loop8: unable to read partition table [ 769.476591][T15573] loop8: partition table beyond EOD, truncated [ 769.492114][T15573] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 769.679295][T15580] tipc: Enabling of bearer rejected, failed to enable media [ 769.745441][ T6263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.907412][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.685477][T15630] loop6: detected capacity change from 0 to 7 [ 771.742919][T15630] Dev loop6: unable to read RDB block 7 [ 771.750879][T15630] loop6: unable to read partition table [ 771.765311][T15630] loop6: partition table beyond EOD, truncated [ 771.791889][T15630] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 771.992146][ T39] net_ratelimit: 2 callbacks suppressed [ 771.992169][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.999760][T15640] loop2: detected capacity change from 0 to 7 [ 772.028078][ T6065] loop2: [ 772.031085][ T6065] loop2: partition table partially beyond EOD, truncated [ 772.044256][T15640] loop2: [ 772.068768][T15640] loop2: partition table partially beyond EOD, truncated [ 772.414869][ T798] usb 5-1: new full-speed USB device number 122 using dummy_hcd [ 772.586638][ T798] usb 5-1: not running at top speed; connect to a high speed hub [ 772.644406][ T798] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 772.666562][ T798] usb 5-1: config 0 has no interface number 0 [ 772.683356][ T798] usb 5-1: config 0 interface 1 has no altsetting 0 [ 772.725246][ T798] usb 5-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice=58.e0 [ 772.744552][ T798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.762348][ T798] usb 5-1: Product: syz [ 772.772391][ T798] usb 5-1: Manufacturer: syz [ 772.781622][ T798] usb 5-1: SerialNumber: syz [ 772.794493][ T798] usb 5-1: config 0 descriptor?? [ 772.948176][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.957184][ T6104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.133209][ T798] snd-usb-audio 5-1:0.1: probe with driver snd-usb-audio failed with error -22 [ 773.183495][ T798] usb 5-1: USB disconnect, device number 122 [ 773.232533][ T6011] udevd[6011]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 773.987099][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.733254][T15674] loop6: detected capacity change from 0 to 7 [ 774.768590][ T6011] Dev loop6: unable to read RDB block 7 [ 774.779082][ T6011] loop6: unable to read partition table [ 774.785053][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.824128][ T6011] loop6: partition table beyond EOD, truncated [ 774.845522][T15674] Dev loop6: unable to read RDB block 7 [ 774.851446][T15674] loop6: unable to read partition table [ 774.862308][T15674] loop6: partition table beyond EOD, truncated [ 774.868810][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.910698][T15674] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 775.034807][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.885967][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.054291][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.074835][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.248323][ T5922] net_ratelimit: 1 callbacks suppressed [ 777.248340][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.008233][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.340153][T15708] netlink: 'syz.2.2512': attribute type 1 has an invalid length. [ 778.715336][ T6263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.778918][T15718] loop2: detected capacity change from 0 to 7 [ 778.841416][T15718] loop2: [ 778.856347][T15718] loop2: partition table partially beyond EOD, truncated [ 778.920336][T15722] openvswitch: netlink: Actions may not be safe on all matching packets [ 779.024992][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.074921][T15724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2517'. [ 779.130152][T15724] netlink: 'syz.2.2517': attribute type 5 has an invalid length. [ 779.150942][T15724] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2517'. [ 779.181433][T15724] geneve2: entered promiscuous mode [ 779.199369][T15724] geneve2: entered allmulticast mode [ 779.207789][ T6104] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 779.223861][ T6104] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 779.244210][ T6104] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 779.265431][T15728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.274420][T15728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.313655][ T6104] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 779.384797][ T39] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 779.416565][T15732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.425661][T15732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.444829][T15732] netlink: 'syz.0.2520': attribute type 1 has an invalid length. [ 779.470430][T15732] gtp0: entered promiscuous mode [ 779.475924][T15732] gtp0: entered allmulticast mode [ 779.481060][T15732] team0: Device gtp0 is of different type [ 779.715526][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 779.728965][ T39] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 779.737787][ T39] usb 5-1: config 0 has no interface number 0 [ 779.744435][ T39] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 779.756989][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.795761][ T39] usb 5-1: config 0 descriptor?? [ 779.945571][ T39] viperboard 5-1:0.143: version 0.00 found at bus 005 address 123 [ 780.026666][ T39] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 780.044958][ T39] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 780.065931][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.350815][ T39] usb 5-1: USB disconnect, device number 123 [ 781.108379][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.591999][T15746] syzkaller0: entered promiscuous mode [ 781.607467][T15746] syzkaller0: entered allmulticast mode [ 781.745162][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.905553][ T6104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.145169][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.754856][ T798] usb 5-1: new full-speed USB device number 124 using dummy_hcd [ 783.372631][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.380965][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.456398][ T798] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 783.470172][ T798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.496130][T15766] loop2: detected capacity change from 0 to 7 [ 783.527119][ T798] usb 5-1: config 0 descriptor?? [ 783.544572][ T798] cdc_ncm 5-1:0.0: CDC Union missing and no IAD found [ 783.554758][ T798] cdc_ncm 5-1:0.0: bind() failure [ 783.658185][ T6011] loop2: [ 783.662510][ T6011] loop2: partition table partially beyond EOD, truncated [ 783.672562][T15766] loop2: [ 783.676404][T15766] loop2: partition table partially beyond EOD, truncated [ 783.722487][ T798] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 783.825666][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.833930][T12712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.236271][T15754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.275465][T15754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.351957][T15778] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 784.521169][ T6260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.871766][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.264753][ T39] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 785.448457][ T798] gp8psk: usb out operation failed. [ 785.464973][ T39] usb 3-1: Using ep0 maxpacket: 32 [ 785.488242][ T39] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 785.505290][ T798] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 785.535509][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.539299][ T798] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 785.626280][ T798] usb 5-1: USB disconnect, device number 124 [ 785.626773][ T39] usb 3-1: config 0 descriptor?? [ 785.693163][ T39] gspca_main: sq930x-2.14.0 probing 041e:403c [ 785.937005][T15792] input: syz1 as /devices/virtual/input/input65 [ 785.969787][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.114834][ T39] gspca_sq930x: ucbus_write failed -71 [ 786.223497][T15796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.248669][T15796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.274854][ T39] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 786.313877][ T39] usb 3-1: USB disconnect, device number 13 [ 786.471246][T15798] loop8: detected capacity change from 0 to 7 [ 786.488046][T15798] Dev loop8: unable to read RDB block 7 [ 786.504762][T15798] loop8: unable to read partition table [ 786.520612][T15798] loop8: partition table beyond EOD, truncated [ 786.543330][T15798] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 787.027992][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.030179][T15806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.397068][T15806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.764767][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.772947][ T6260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.804411][ T30] audit: type=1326 audit(1770374579.941:6695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15808 comm="syz.4.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1199aeb9 code=0x7ffc0000 [ 787.875798][T15810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2542'. [ 787.885041][ T30] audit: type=1326 audit(1770374579.941:6696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15808 comm="syz.4.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1199aeb9 code=0x7ffc0000 [ 787.968402][ T30] audit: type=1326 audit(1770374579.941:6697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15808 comm="syz.4.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1199aeb9 code=0x7ffc0000 [ 787.991238][T15810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2542'. [ 788.034796][ T30] audit: type=1326 audit(1770374580.371:6698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15808 comm="syz.4.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ffb1199aeb9 code=0x7ffc0000 [ 788.146764][ T30] audit: type=1326 audit(1770374580.371:6699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15808 comm="syz.4.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1199aeb9 code=0x7ffc0000 [ 788.180832][ T30] audit: type=1326 audit(1770374580.371:6700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15808 comm="syz.4.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1199aeb9 code=0x7ffc0000 [ 788.204023][ T30] audit: type=1326 audit(1770374580.381:6701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15808 comm="syz.4.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1199aeb9 code=0x7ffc0000 [ 788.284722][ T30] audit: type=1326 audit(1770374580.381:6702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15808 comm="syz.4.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1199aeb9 code=0x7ffc0000 [ 788.364846][ T30] audit: type=1326 audit(1770374580.381:6703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15808 comm="syz.4.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb1199aeb9 code=0x7ffc0000 [ 788.470781][ T30] audit: type=1326 audit(1770374580.381:6704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15808 comm="syz.4.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1199aeb9 code=0x7ffc0000 [ 788.807098][T15831] [U]  [ 788.810470][T15831] [U] K{ [ 788.817409][T15831] [U] T 1ŠFFˊ`GJǘGO/MC [ 788.827596][T15831] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 788.846308][T15831] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 788.876321][T15831] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 788.912073][ T984] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 788.945004][ T39] net_ratelimit: 1 callbacks suppressed [ 788.945023][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.946428][T15831] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 788.953341][T15832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.009806][T15832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.049164][T15831] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 789.061772][T15831] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 789.079089][ T984] usb 2-1: Using ep0 maxpacket: 32 [ 789.085624][T15831] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 789.455919][ T984] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 789.468504][ T984] usb 2-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 789.482349][ T984] usb 2-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 789.495923][ T984] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 789.507480][ T984] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 789.526970][T15831] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 789.560949][ T984] usb 2-1: config 0 interface 239 has no altsetting 0 [ 789.583341][ T984] usb 2-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 789.593878][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.648494][T15831] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 789.674832][T15831] [U] 22Ʃ۩X?0;3U [ 789.680352][T15831] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 789.795347][T15831] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 789.835087][ T984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.847127][ T984] usb 2-1: Product: syz [ 789.851404][ T984] usb 2-1: Manufacturer: syz [ 789.856300][ T984] usb 2-1: SerialNumber: syz [ 789.864236][T15831] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 789.865068][ T984] usb 2-1: config 0 descriptor?? [ 789.879025][T15828] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 789.899993][T15828] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 789.978077][T15831] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 789.992607][T15831] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 790.014947][T15831] [U] EC [ 790.022915][T15831] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 790.099025][ T5146] Bluetooth: hci5: urb ffff888079d0da00 submission failed (90) [ 790.153575][ T984] usb 2-1: USB disconnect, device number 7 [ 790.227090][ T6260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.382784][T15830] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 790.631074][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.733074][T15854] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2554'. [ 790.873628][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.406638][T15877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.461058][T15878] netlink: 'syz.1.2558': attribute type 8 has an invalid length. [ 791.480635][T15878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2558'. [ 791.509043][T15878] bond0: entered promiscuous mode [ 791.515917][T15878] bond_slave_0: entered promiscuous mode [ 791.533840][T15878] bond_slave_1: entered promiscuous mode [ 791.561394][T15878] gretap0: entered promiscuous mode [ 791.578882][T15878] team0: entered promiscuous mode [ 791.594488][T15878] team_slave_0: entered promiscuous mode [ 791.604858][T15878] team_slave_1: entered promiscuous mode [ 791.618501][T15878] debugfs: 'hsr0' already exists in 'hsr' [ 791.638660][T15878] Cannot create hsr debugfs directory [ 791.650440][T15878] hsr0: entered promiscuous mode [ 791.669995][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.694737][ T5896] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 791.864216][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 791.897567][ T5896] usb 4-1: config 0 has no interfaces? [ 791.911957][ T5896] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 791.929715][ T5896] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 791.949129][ T5896] usb 4-1: Manufacturer: syz [ 791.969455][ T5896] usb 4-1: config 0 descriptor?? [ 792.219201][ T5896] usb 4-1: USB disconnect, device number 120 [ 792.709862][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.769060][T15891] loop2: detected capacity change from 0 to 7 [ 792.864919][T15891] loop2: [ 792.871535][T15891] loop2: partition table partially beyond EOD, truncated [ 792.933328][T15894] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 793.274973][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.786113][ T984] net_ratelimit: 2 callbacks suppressed [ 794.786137][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.201879][T15922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.403582][ T6251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.705334][ T39] usb 5-1: new low-speed USB device number 125 using dummy_hcd [ 795.883441][ T39] usb 5-1: config 0 has an invalid interface number: 13 but max is 0 [ 795.891777][ T39] usb 5-1: config 0 has no interface number 0 [ 795.946456][ T39] usb 5-1: string descriptor 0 read error: -22 [ 795.953683][ T39] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0097, bcdDevice=6f.01 [ 795.971667][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.989025][ T6263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.093207][ T39] usb 5-1: config 0 descriptor?? [ 796.239100][T15936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2575'. [ 796.327445][T15938] loop2: detected capacity change from 0 to 7 [ 796.328540][T15936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.352439][T15938] loop2: [ 796.357933][T15938] loop2: partition table partially beyond EOD, truncated [ 796.405058][T15940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.430402][T15940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.466938][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.510033][T15940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.564936][T15940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.687925][ T5896] usb 5-1: USB disconnect, device number 125 [ 797.507889][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.992946][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.625700][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.002679][T15982] loop2: detected capacity change from 0 to 7 [ 799.025458][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.051205][T15982] loop2: [ 799.061065][T15982] loop2: partition table partially beyond EOD, truncated [ 799.738920][ T798] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 800.006190][ T798] usb 2-1: Using ep0 maxpacket: 16 [ 800.016061][ T798] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 800.027203][ T798] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 800.041733][ T798] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 800.229144][ T798] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 800.242226][ T798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.308306][ T798] usb 2-1: config 0 descriptor?? [ 800.545367][ T12] net_ratelimit: 3 callbacks suppressed [ 800.545387][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.801713][ T798] microsoft 0003:045E:07DA.002F: ignoring exceeding usage max [ 800.865211][ T798] microsoft 0003:045E:07DA.002F: unsupported Resolution Multiplier 0 [ 800.912091][ T798] microsoft 0003:045E:07DA.002F: implement() called with n (152) > 32! (kworker/0:2) [ 800.999986][ T798] microsoft 0003:045E:07DA.002F: unsupported Resolution Multiplier 0 [ 801.038200][ T798] microsoft 0003:045E:07DA.002F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 801.049942][ T798] microsoft 0003:045E:07DA.002F: no inputs found [ 801.081461][ T798] microsoft 0003:045E:07DA.002F: could not initialize ff, continuing anyway [ 801.233277][T16017] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 801.665572][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.757599][ T6251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.266814][T16031] Option ' ' to dns_resolver key: bad/missing value [ 802.458932][ T984] usb 2-1: USB disconnect, device number 8 [ 802.708707][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.001276][T16043] netlink: 'syz.1.2603': attribute type 1 has an invalid length. [ 803.018251][T16043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 803.029471][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.037662][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.717812][T16057] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2606'. [ 803.781664][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.857599][T16061] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 803.864161][T16061] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 804.017151][T16061] vhci_hcd vhci_hcd.0: Device attached [ 804.056807][T16062] vhci_hcd: connection closed [ 804.058553][ T6100] vhci_hcd vhci_hcd.2: stop threads [ 804.088695][ T6100] vhci_hcd vhci_hcd.2: release socket [ 804.105449][ T6100] vhci_hcd vhci_hcd.2: disconnect device [ 804.154865][ T39] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 804.254777][ T5888] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 804.447831][ T5888] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 804.464897][ T5888] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 804.493417][ T5888] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 804.518428][ T5888] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 804.541037][ T5888] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 804.567785][ T5888] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 804.592442][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 804.631789][ T5888] usb 2-1: Product: syz [ 804.650601][ T5888] usb 2-1: Manufacturer: syz [ 804.689254][ T5888] cdc_wdm 2-1:1.0: skipping garbage [ 804.694540][ T5888] cdc_wdm 2-1:1.0: skipping garbage [ 804.732947][ T5888] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 804.747264][ T5888] cdc_wdm 2-1:1.0: Unknown control protocol [ 804.789815][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.801410][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.059615][ T984] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 805.187890][T16088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.204786][ T984] usb 3-1: device descriptor read/64, error -71 [ 805.241060][T16088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.277249][T16089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.298053][T16089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.445196][ T984] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 805.574752][ T984] usb 3-1: device descriptor read/64, error -71 [ 805.584929][ T39] net_ratelimit: 1 callbacks suppressed [ 805.584945][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.685026][ T984] usb usb3-port1: attempt power cycle [ 806.086019][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.163339][ T984] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 806.206483][ T984] usb 3-1: device descriptor read/8, error -71 [ 806.226137][ T6104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.265561][T16091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.277569][T16091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.453332][ T984] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 806.490779][ T984] usb 3-1: device descriptor read/8, error -71 [ 806.538049][T16091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.548722][T16091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.559241][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 806.609018][ T984] usb usb3-port1: unable to enumerate USB device [ 806.764820][ T5888] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 806.847902][T16096] loop5: detected capacity change from 0 to 7 [ 806.855865][T16096] loop5: p1 < > p4 [ 806.859770][T16096] loop5: partition table partially beyond EOD, truncated [ 806.876198][T16096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2618'. [ 806.929713][ T6065] udevd[6065]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 806.962209][ T6011] udevd[6011]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 806.972156][ T5888] usb 4-1: config 6 has an invalid interface number: 14 but max is 0 [ 806.992812][ T5888] usb 4-1: config 6 has no interface number 0 [ 807.002828][ T5888] usb 4-1: config 6 interface 14 altsetting 218 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 807.028350][ T5888] usb 4-1: config 6 interface 14 has no altsetting 0 [ 807.057486][ T5888] usb 4-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 807.069328][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.078968][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 807.085614][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 807.091896][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 807.098512][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 807.104892][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 807.111503][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 807.117749][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 807.124345][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 807.130772][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 807.137392][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 807.143765][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 807.150364][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 807.159333][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 807.165968][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 807.172516][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 807.179113][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 807.185587][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 807.192284][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 807.198669][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 807.205557][ T798] usb 2-1: USB disconnect, device number 9 [ 807.211393][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 807.220587][ T5888] usb 4-1: Product: syz [ 807.225048][ T5888] usb 4-1: Manufacturer: syz [ 807.229686][ T5888] usb 4-1: SerialNumber: syz [ 807.275529][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.488882][T16093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.497629][T16093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.511953][ T5888] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 807.515224][ T6251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.518782][ T5888] command write [95] error -8 [ 807.553897][ T5888] usb 4-1: USB disconnect, device number 121 [ 808.319845][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.433145][T16122] dvmrp1: tun_chr_ioctl cmd 2147767517 [ 808.789332][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.796799][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.345973][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.391798][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.398101][T16145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.410167][T16145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.429135][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.545914][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.751825][T16148] loop2: detected capacity change from 0 to 7 [ 810.774528][ T6011] loop2: [ 810.778321][ T6011] loop2: partition table partially beyond EOD, truncated [ 810.839526][T16148] loop2: [ 810.842655][T16148] loop2: partition table partially beyond EOD, truncated [ 811.479353][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.526686][T16159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2635'. [ 811.747070][T16164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2637'. [ 811.766640][T16164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2637'. [ 811.783305][T16164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2637'. [ 811.995884][ T6263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.625005][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.634021][ T6104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.025211][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.940134][T16199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.025358][T16199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.251452][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.997708][T16211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.015769][T16211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.041213][T16211] ipt_ECN: cannot use operation on non-tcp rule [ 815.265607][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.694720][ T5888] usb 4-1: new full-speed USB device number 122 using dummy_hcd [ 815.708916][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.825304][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.856145][ T5888] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 815.867469][ T5888] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 815.918174][ T5888] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 815.927443][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.965531][ T5888] usb 4-1: Product: syz [ 815.969884][ T5888] usb 4-1: Manufacturer: syz [ 816.010408][ T5888] usb 4-1: SerialNumber: syz [ 816.238591][ T5888] usb 4-1: 0:2 : does not exist [ 816.305068][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.446338][ T5888] usb 4-1: USB disconnect, device number 122 [ 817.125812][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.142557][ T6251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.136361][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 818.136407][ T30] audit: type=1400 audit(1770374610.651:6784): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A03 pid=16252 comm="syz.4.2659" [ 818.144869][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.285717][ T798] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 818.433776][ T6251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.444759][ T798] usb 2-1: device descriptor read/64, error -71 [ 818.466992][T16255] loop5: detected capacity change from 0 to 7 [ 818.474105][T16255] loop5: p1 < > p4 [ 818.478104][T16255] loop5: partition table partially beyond EOD, truncated [ 818.516541][T16255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2660'. [ 818.736773][T16257] loop2: detected capacity change from 0 to 7 [ 818.744949][T16257] Dev loop2: unable to read RDB block 7 [ 818.750680][T16257] loop2: unable to read partition table [ 818.757024][ T798] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 818.759195][T16257] loop2: partition table beyond EOD, truncated [ 818.773828][T16257] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 818.948182][ T798] usb 2-1: device descriptor read/64, error -71 [ 819.092121][T16264] syzkaller0: entered promiscuous mode [ 819.095055][ T798] usb usb2-port1: attempt power cycle [ 819.097796][T16264] syzkaller0: entered allmulticast mode [ 819.195267][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.544809][ T798] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 819.687966][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.731057][ T798] usb 2-1: device descriptor read/8, error -71 [ 819.834879][ T984] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 820.005520][ T798] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 820.104695][ T984] usb 5-1: Using ep0 maxpacket: 32 [ 820.110221][ T798] usb 2-1: device descriptor read/8, error -71 [ 820.127392][ T984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.143661][ T984] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 820.186181][ T984] usb 5-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 820.224866][ T984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.233089][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.236936][ T798] usb usb2-port1: unable to enumerate USB device [ 820.276083][ T984] usb 5-1: config 0 descriptor?? [ 820.753914][ T984] usbhid 5-1:0.0: can't add hid device: -71 [ 820.774844][ T984] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 820.829145][ T984] usb 5-1: USB disconnect, device number 126 [ 820.991633][ T30] audit: type=1326 audit(1770374613.511:6785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16284 comm="syz.1.2668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e9fd9aeb9 code=0x7ffc0000 [ 821.034483][T16285] ptrace attach of "./syz-executor exec"[5843] was attempted by "  @ +$*(/!     [ 821.037932][T16285] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.137372][T16285] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.175380][ T30] audit: type=1326 audit(1770374613.541:6786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16284 comm="syz.1.2668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e9fd9aeb9 code=0x7ffc0000 [ 821.222899][ T30] audit: type=1326 audit(1770374613.551:6787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16284 comm="syz.1.2668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e9fd9aeb9 code=0x7ffc0000 [ 821.274344][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.286194][ T30] audit: type=1326 audit(1770374613.551:6788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16284 comm="syz.1.2668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e9fd9aeb9 code=0x7ffc0000 [ 821.345010][ T30] audit: type=1326 audit(1770374613.551:6789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16284 comm="syz.1.2668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e9fd9aeb9 code=0x7ffc0000 [ 821.519178][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.528484][ T30] audit: type=1326 audit(1770374613.551:6790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16284 comm="syz.1.2668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f7e9fd9aeb9 code=0x7ffc0000 [ 821.587183][ T6263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.752767][ T30] audit: type=1326 audit(1770374613.551:6791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16284 comm="syz.1.2668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e9fd9aeb9 code=0x7ffc0000 [ 821.836875][T16293] loop5: detected capacity change from 0 to 7 [ 821.848641][T16293] loop5: p1 < > p4 [ 821.852484][T16293] loop5: partition table partially beyond EOD, truncated [ 821.959723][T16293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2672'. [ 821.981748][ T30] audit: type=1326 audit(1770374613.551:6792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16284 comm="syz.1.2668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e9fd9aeb9 code=0x7ffc0000 [ 822.120532][ T30] audit: type=1326 audit(1770374613.551:6793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16284 comm="syz.1.2668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f7e9fd9aeb9 code=0x7ffc0000 [ 822.225757][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.314857][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.874160][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.888769][T16307] syzkaller0: entered promiscuous mode [ 822.926146][T16307] syzkaller0: entered allmulticast mode [ 823.305411][T16317] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 823.905582][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.175701][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.705043][ T5888] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 824.965363][ T984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.027663][ T5888] usb 2-1: unable to get BOS descriptor or descriptor too short [ 825.037632][ T5888] usb 2-1: config 13 has an invalid interface number: 50 but max is 3 [ 825.046638][ T5888] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 825.121014][ T5888] usb 2-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 825.289847][ T5888] usb 2-1: config 13 has no interface number 0 [ 825.554734][ T5888] usb 2-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 825.635348][ T5888] usb 2-1: config 13 interface 50 has no altsetting 0 [ 825.673651][ T5888] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 825.683430][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.697124][ T5888] usb 2-1: Product: syz [ 825.711817][ T5888] usb 2-1: Manufacturer: syz [ 825.725462][ T5888] usb 2-1: SerialNumber: syz [ 825.991886][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.047083][ T5888] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 826.049368][ T12] usb 2-1: Failed to submit usb control message: -71 [ 826.074528][ T5888] usb 2-1: USB disconnect, device number 14 [ 826.178793][ T12] usb 2-1: unable to send the bmi data to the device: -71 [ 826.234756][ T12] usb 2-1: unable to get target info from device [ 826.248559][T16353] loop2: detected capacity change from 0 to 7 [ 826.271246][ T12] usb 2-1: could not get target info (-71) [ 826.271297][ T5839] Dev loop2: unable to read RDB block 7 [ 826.291193][ T5839] loop2: unable to read partition table [ 826.301420][ T5839] loop2: partition table beyond EOD, truncated [ 826.315899][T16353] Dev loop2: unable to read RDB block 7 [ 826.323461][T16353] loop2: unable to read partition table [ 826.324693][ T12] usb 2-1: could not probe fw (-71) [ 826.352291][T16353] loop2: partition table beyond EOD, truncated [ 826.359459][T16353] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 826.707663][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.027727][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.362513][ T6104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.381376][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.990372][T12712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.074468][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.087710][ T10] usb 1-1: USB disconnect, device number 48 [ 828.149515][T16376] loop6: detected capacity change from 0 to 7 [ 828.197780][T16376] Dev loop6: unable to read RDB block 7 [ 828.203371][T16376] loop6: unable to read partition table [ 828.232697][T13078] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 828.244664][T13078] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 828.253210][T13078] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 828.264283][T13078] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 828.271778][T13078] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 828.288038][T16376] loop6: partition table beyond EOD, truncated [ 828.334752][T16376] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 828.629678][ T6263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.987623][T16378] chnl_net:caif_netlink_parms(): no params data found [ 829.592366][T16378] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.618841][T16378] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.638211][T16402] loop2: detected capacity change from 0 to 7 [ 829.656330][T16402] loop2: [ 829.665209][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.677301][T16402] loop2: partition table partially beyond EOD, truncated [ 829.696150][T16378] bridge_slave_0: entered allmulticast mode [ 829.720922][T16378] bridge_slave_0: entered promiscuous mode [ 829.776405][ T984] usb 5-1: new low-speed USB device number 127 using dummy_hcd [ 829.936410][ T984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.964032][ T984] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 830.035086][ T984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.060564][T12712] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.072633][ T984] usb 5-1: config 0 descriptor?? [ 830.103909][T16378] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.124845][T16378] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.146213][T16404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2694'. [ 830.165446][T16378] bridge_slave_1: entered allmulticast mode [ 830.193599][T16378] bridge_slave_1: entered promiscuous mode [ 830.306114][ T5146] Bluetooth: hci5: command tx timeout [ 830.331944][T12712] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.392460][T16408] loop2: detected capacity change from 0 to 7 [ 830.421297][T16408] Dev loop2: unable to read RDB block 7 [ 830.435892][T16408] loop2: unable to read partition table [ 830.453753][T16408] loop2: partition table beyond EOD, truncated [ 830.463537][T16408] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 830.676740][ T798] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 830.777263][T12712] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.894713][ T798] usb 4-1: device descriptor read/64, error -71 [ 831.119273][T12712] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.155007][ T798] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 831.180392][T16378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 831.228779][T16378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 831.285142][ T5919] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 831.315769][ T798] usb 4-1: device descriptor read/64, error -71 [ 831.356744][T16378] team0: Port device team_slave_0 added [ 831.425456][ T798] usb usb4-port1: attempt power cycle [ 831.456746][T16378] team0: Port device team_slave_1 added [ 831.590484][T16378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 831.604792][T16378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 831.674872][T16378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 831.698480][T16378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 831.715380][T16378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 831.774731][ T798] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 831.782693][T16378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 831.818655][T12712] tipc: Resetting bearer [ 831.831116][ T798] usb 4-1: device descriptor read/8, error -71 [ 832.075004][ T798] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 832.117083][ T798] usb 4-1: device descriptor read/8, error -71 [ 832.223365][T16424] loop6: detected capacity change from 0 to 7 [ 832.236135][ T798] usb usb4-port1: unable to enumerate USB device [ 832.255414][T16424] Dev loop6: unable to read RDB block 7 [ 832.261103][T16424] loop6: unable to read partition table [ 832.287652][T16424] loop6: partition table beyond EOD, truncated [ 832.293919][T16424] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 832.387440][ T5146] Bluetooth: hci5: command tx timeout [ 832.817040][ T984] usbhid 5-1:0.0: can't add hid device: -71 [ 832.833402][ T984] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 832.886993][ T984] usb 5-1: USB disconnect, device number 127 [ 834.236818][T12712] tipc: Disabling bearer [ 834.466963][ T5146] Bluetooth: hci5: command tx timeout [ 835.754823][ T984] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 835.914792][ T984] usb 2-1: Using ep0 maxpacket: 32 [ 835.934092][ T984] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 835.944833][ T984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.958846][ T984] usb 2-1: config 0 descriptor?? [ 835.974299][ T984] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 836.546669][ T5146] Bluetooth: hci5: command tx timeout [ 836.919138][ T984] gspca_nw80x: reg_w err -110 [ 836.923957][ T984] nw80x 2-1:0.0: probe with driver nw80x failed with error -110 [ 845.480759][T13078] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 845.502993][T13078] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 845.535994][T13078] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 845.568870][T13078] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 845.601807][T13078] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 847.674950][T13078] Bluetooth: hci1: command tx timeout [ 848.473185][ T5146] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 848.510814][T16450] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 848.547334][T16450] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 848.581356][ T5825] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 848.611345][T16450] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 848.631979][ T5825] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 848.649620][T16450] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 848.671379][ T5825] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 848.690804][T16450] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 848.700294][T16450] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 849.747130][ T5825] Bluetooth: hci1: command tx timeout [ 850.352966][T12712] geneve0 (unregistering): left promiscuous mode [ 850.361536][T12712] geneve0 (unregistering): left allmulticast mode [ 850.371914][T12712] team0: Port device geneve0 removed [ 850.418700][ T5146] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 850.428505][ T5146] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 850.439154][ T5146] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 850.459379][ T5146] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 850.469433][ T5146] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 850.630102][T12712] bond1 (unregistering): Released all slaves [ 850.793530][ T5146] Bluetooth: hci6: command tx timeout [ 850.801191][ T5825] Bluetooth: hci4: command tx timeout [ 851.226448][T16378] hsr_slave_0: entered promiscuous mode [ 851.233444][T16378] hsr_slave_1: entered promiscuous mode [ 851.275705][T16378] debugfs: 'hsr0' already exists in 'hsr' [ 851.283359][T16378] Cannot create hsr debugfs directory [ 851.493823][T16426] syz_tun (unregistering): left allmulticast mode [ 851.638578][ T984] usb 2-1: USB disconnect, device number 16 [ 851.824781][ T5146] Bluetooth: hci1: command tx timeout [ 852.244458][T12712] tipc: Left network mode [ 852.267170][T16453] chnl_net:caif_netlink_parms(): no params data found [ 852.393810][T16452] chnl_net:caif_netlink_parms(): no params data found [ 852.539578][T16445] chnl_net:caif_netlink_parms(): no params data found [ 852.556046][ T5146] Bluetooth: hci7: command tx timeout [ 852.580810][T16453] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.588245][T16453] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.597260][T16453] bridge_slave_0: entered allmulticast mode [ 852.604282][T16453] bridge_slave_0: entered promiscuous mode [ 852.643114][T16456] chnl_net:caif_netlink_parms(): no params data found [ 852.676849][T16453] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.696821][T16453] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.704038][T16453] bridge_slave_1: entered allmulticast mode [ 852.716031][T16453] bridge_slave_1: entered promiscuous mode [ 852.839669][T16453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 852.864976][ T5146] Bluetooth: hci6: command tx timeout [ 852.865743][ T5825] Bluetooth: hci4: command tx timeout [ 852.927054][T16453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 852.996272][T16452] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.003531][T16452] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.011079][T16452] bridge_slave_0: entered allmulticast mode [ 853.019211][T16452] bridge_slave_0: entered promiscuous mode [ 853.080038][T16445] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.087499][T16445] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.095060][T16445] bridge_slave_0: entered allmulticast mode [ 853.102307][T16445] bridge_slave_0: entered promiscuous mode [ 853.114102][T16452] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.121506][T16452] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.129986][T16452] bridge_slave_1: entered allmulticast mode [ 853.139490][T16452] bridge_slave_1: entered promiscuous mode [ 853.161941][T16453] team0: Port device team_slave_0 added [ 853.181966][T16445] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.189558][T16445] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.197021][T16445] bridge_slave_1: entered allmulticast mode [ 853.204179][T16445] bridge_slave_1: entered promiscuous mode [ 853.217484][T12712] hsr_slave_0: left promiscuous mode [ 853.223387][T12712] hsr_slave_1: left promiscuous mode [ 853.236489][T12712] veth1_macvtap: left promiscuous mode [ 853.242040][T12712] veth0_macvtap: left promiscuous mode [ 853.248530][T12712] veth1_vlan: left promiscuous mode [ 853.253810][T12712] @: left promiscuous mode [ 853.905989][ T5825] Bluetooth: hci1: command tx timeout [ 854.301307][T16453] team0: Port device team_slave_1 added [ 854.359870][T16452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 854.381498][T16456] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.390392][T16456] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.397912][T16456] bridge_slave_0: entered allmulticast mode [ 854.406192][T16456] bridge_slave_0: entered promiscuous mode [ 854.438930][T16445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 854.459955][T16452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 854.472827][T16453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 854.480376][T16453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 854.506730][T16453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 854.518170][T16456] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.526565][T16456] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.533827][T16456] bridge_slave_1: entered allmulticast mode [ 854.542171][T16456] bridge_slave_1: entered promiscuous mode [ 854.551108][T16445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 854.607581][T16453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 854.614559][T16453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 854.642158][ T5825] Bluetooth: hci7: command tx timeout [ 854.648163][T16453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 854.679677][T16378] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 854.752377][T16445] team0: Port device team_slave_0 added [ 854.762543][T16378] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 854.798994][T16452] team0: Port device team_slave_0 added [ 854.809486][T16452] team0: Port device team_slave_1 added [ 854.818376][T16456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 854.833637][T16445] team0: Port device team_slave_1 added [ 854.842065][T16378] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 854.860711][T16378] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 854.897732][T16456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 854.945049][ T5825] Bluetooth: hci4: command tx timeout [ 854.946325][ T5146] Bluetooth: hci6: command tx timeout [ 855.010991][T16456] team0: Port device team_slave_0 added [ 855.065878][T16452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 855.073439][T16452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 855.106313][T16452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 855.123785][T12712] IPVS: stop unused estimator thread 0... [ 855.132525][T16456] team0: Port device team_slave_1 added [ 855.164361][T16445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 855.172386][T16445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 855.199604][T16445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 855.213405][T16445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 855.222267][T16445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 855.248563][T16445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 855.269182][T16453] hsr_slave_0: entered promiscuous mode [ 855.278680][T16453] hsr_slave_1: entered promiscuous mode [ 855.300294][T16452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 855.308314][T16452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 855.337854][T16452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 855.418559][T16456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 855.426784][T16456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 855.454015][T16456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 855.467219][T16456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 855.474178][T16456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 855.502024][T16456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 855.583167][T16452] hsr_slave_0: entered promiscuous mode [ 855.590469][T16452] hsr_slave_1: entered promiscuous mode [ 855.596881][T16452] debugfs: 'hsr0' already exists in 'hsr' [ 855.602615][T16452] Cannot create hsr debugfs directory [ 855.729857][T16445] hsr_slave_0: entered promiscuous mode [ 855.736276][T16445] hsr_slave_1: entered promiscuous mode [ 855.742500][T16445] debugfs: 'hsr0' already exists in 'hsr' [ 855.749355][T16445] Cannot create hsr debugfs directory [ 855.780169][T12712] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.862166][T16456] hsr_slave_0: entered promiscuous mode [ 855.868844][T16456] hsr_slave_1: entered promiscuous mode [ 855.875210][T16456] debugfs: 'hsr0' already exists in 'hsr' [ 855.880963][T16456] Cannot create hsr debugfs directory [ 855.966060][T12712] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.066355][T12712] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.184322][T12712] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.330414][T16453] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 856.377844][T16453] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 856.390145][T16453] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 856.446872][T16453] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 856.534246][T16378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 856.651078][T12712] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.698781][T16452] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 856.713181][T16452] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 856.721801][ T5146] Bluetooth: hci7: command tx timeout [ 856.733346][T16452] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 856.754783][T16452] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 856.769697][T16378] 8021q: adding VLAN 0 to HW filter on device team0 [ 856.831436][T12712] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.873938][ T6100] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.881091][ T6100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 856.892278][ T6100] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.899538][ T6100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 856.968311][T12712] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.034940][ T5146] Bluetooth: hci6: command tx timeout [ 857.034973][ T5825] Bluetooth: hci4: command tx timeout [ 857.101744][T12712] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.161638][T16445] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 857.187719][T16445] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 857.259581][T16445] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 857.309660][T16445] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 857.440731][T16453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 857.545286][T16456] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 857.607693][T16456] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 857.656284][T16456] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 857.701340][T16452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 857.717629][T16456] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 857.781441][T12712] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.793266][T12712] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 857.821109][T16453] 8021q: adding VLAN 0 to HW filter on device team0 [ 857.847952][T16378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 857.897847][T12712] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.909074][T12712] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 857.928972][ T6263] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.936182][ T6263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 857.947456][T16452] 8021q: adding VLAN 0 to HW filter on device team0 [ 857.979939][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.987114][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 858.047202][T12712] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.060535][T12712] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 858.133939][ T6260] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.141235][ T6260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 858.200549][T12712] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.215485][T12712] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 858.245689][ T6260] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.252820][ T6260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 858.372231][T16445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 858.459320][T16378] veth0_vlan: entered promiscuous mode [ 858.561347][T16445] 8021q: adding VLAN 0 to HW filter on device team0 [ 858.644154][T16378] veth1_vlan: entered promiscuous mode [ 858.661826][ T6253] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.669016][ T6253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 858.703536][T16456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 858.765948][T12712] bridge_slave_1: left allmulticast mode [ 858.771648][T12712] bridge_slave_1: left promiscuous mode [ 858.785882][T12712] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.794021][ T5825] Bluetooth: hci7: command tx timeout [ 858.803993][T12712] bridge_slave_0: left allmulticast mode [ 858.812076][T12712] bridge_slave_0: left promiscuous mode [ 858.820411][T12712] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.835606][T12712] bridge_slave_1: left allmulticast mode [ 858.841360][T12712] bridge_slave_1: left promiscuous mode [ 858.849224][T12712] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.864071][T12712] bridge_slave_0: left allmulticast mode [ 858.870870][T12712] bridge_slave_0: left promiscuous mode [ 858.877232][T12712] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.923276][T12712] BUG: MAX_LOCKDEP_KEYS too low! [ 859.928247][T12712] turning off the locking correctness validator. [ 859.934565][T12712] CPU: 1 UID: 0 PID: 12712 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 859.934593][T12712] Tainted: [L]=SOFTLOCKUP [ 859.934601][T12712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 859.934616][T12712] Workqueue: netns cleanup_net [ 859.934643][T12712] Call Trace: [ 859.934650][T12712] [ 859.934656][T12712] dump_stack_lvl+0xe8/0x150 [ 859.934673][T12712] register_lock_class+0x2a9/0x2e0 [ 859.934689][T12712] ? add_lock_to_list+0xc7/0x100 [ 859.934701][T12712] __lock_acquire+0xad/0x2cf0 [ 859.934721][T12712] ? dev_reset_queue+0xfa/0x1b0 [ 859.934734][T12712] lock_acquire+0x106/0x330 [ 859.934748][T12712] ? dev_reset_queue+0xfa/0x1b0 [ 859.934763][T12712] ? dev_reset_queue+0xfa/0x1b0 [ 859.934775][T12712] _raw_spin_lock_bh+0x36/0x50 [ 859.934792][T12712] ? dev_reset_queue+0xfa/0x1b0 [ 859.934804][T12712] dev_reset_queue+0xfa/0x1b0 [ 859.934816][T12712] dev_deactivate_many+0x720/0xd40 [ 859.934830][T12712] ? dev_deactivate_many+0x258/0xd40 [ 859.934843][T12712] __dev_close_many+0x17b/0x6d0 [ 859.934856][T12712] ? __pfx___dev_close_many+0x10/0x10 [ 859.934871][T12712] netif_close_many+0x225/0x420 [ 859.934883][T12712] ? __lock_acquire+0x6b5/0x2cf0 [ 859.934899][T12712] ? __pfx_netif_close_many+0x10/0x10 [ 859.934913][T12712] unregister_netdevice_many_notify+0xb47/0x2370 [ 859.934924][T12712] ? lockdep_hardirqs_on+0x7a/0x110 [ 859.934938][T12712] ? unregister_netdevice_queue+0x19b/0x360 [ 859.934954][T12712] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 859.934966][T12712] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 859.934982][T12712] ? net_generic+0x1e/0x240 [ 859.934994][T12712] ? __pfx_nexthop_net_exit_rtnl+0x10/0x10 [ 859.935007][T12712] ? mutex_is_locked+0x17/0x50 [ 859.935018][T12712] ? nexthop_net_exit_rtnl+0x232/0x270 [ 859.935032][T12712] ops_undo_list+0x3d3/0x940 [ 859.935046][T12712] ? __pfx_ops_undo_list+0x10/0x10 [ 859.935060][T12712] ? do_raw_spin_unlock+0xf5/0x210 [ 859.935074][T12712] cleanup_net+0x4df/0x7b0 [ 859.935087][T12712] ? __pfx_cleanup_net+0x10/0x10 [ 859.935101][T12712] ? process_scheduled_works+0xa0f/0x17a0 [ 859.935118][T12712] ? process_scheduled_works+0xa0f/0x17a0 [ 859.935135][T12712] process_scheduled_works+0xaec/0x17a0 [ 859.935157][T12712] ? __pfx_process_scheduled_works+0x10/0x10 [ 859.935172][T12712] ? do_raw_spin_lock+0x12b/0x2f0 [ 859.935185][T12712] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 859.935197][T12712] ? schedule+0x90/0x360 [ 859.935209][T12712] worker_thread+0xda6/0x1360 [ 859.935231][T12712] kthread+0x726/0x8b0 [ 859.935243][T12712] ? __pfx_worker_thread+0x10/0x10 [ 859.935260][T12712] ? __pfx_kthread+0x10/0x10 [ 859.935273][T12712] ? _raw_spin_unlock_irq+0x23/0x50 [ 859.935283][T12712] ? __pfx_kthread+0x10/0x10 [ 859.935295][T12712] ret_from_fork+0x51b/0xa40 [ 859.935306][T12712] ? __pfx_ret_from_fork+0x10/0x10 [ 859.935316][T12712] ? __switch_to+0xc82/0x1410 [ 859.935331][T12712] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 859.935343][T12712] ret_from_fork_asm+0x1a/0x30 [ 859.935362][T12712] [ 867.584927][T15778] IPVS: ip_vs_send_async error -19 [ 870.233705][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.240178][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 VM DIAGNOSIS: Connection timed out during banner exchange Connection to 10.128.1.197 port 22 timed out failed to run ["ssh" "-p" "22" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "IdentitiesOnly=yes" "-o" "BatchMode=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "root@10.128.1.197" "cat" "/proc/lockdep_stats" "/proc/lockdep" "/proc/lockdep_chains"]: exit status 255