last executing test programs: 2m19.484865266s ago: executing program 0 (id=142): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x801) syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) (rerun: 64) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, 0xf1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x1a0, 0x0, 0xffffffffffffffff}]}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x200001b, 0x30, r5, 0x0) (async) read$FUSE(r5, &(0x7f0000005380)={0x2020}, 0xfffffffffffffc4e) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x18000000, 0x8, 0x0, 0x9, 0x0, 0x100000000000006, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 32) r6 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) (rerun: 32) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000180)=0x3) write$dsp(r6, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f3", 0xf) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmsg$unix(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)="e0ff04d9f3a26d52900426391fe89026", 0x10}], 0x1, 0x0, 0x0, 0x811}, 0x4008045) (async, rerun: 64) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async, rerun: 64) close(0x4) (async) syz_usb_connect(0x1, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120141014813442024040001000010000904b8070259d1ca000905060200020d00060905820200020d320ca0dd6ca2e0f78c14008db45e3f86e911489248b400660ceb55"], 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 2m18.938535417s ago: executing program 0 (id=143): r0 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x400) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(xtea)\x00'}, 0x58) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000103d10000140000102030109026e000301d8100c080b"], 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0xf8) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x20000000) set_mempolicy(0x6005, &(0x7f0000000080)=0x1, 0x40000004) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000006480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000006440)={&(0x7f00000064c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x4ab8, 0xe, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4a74, 0x3, 0x0, 0x1, [{0x37c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xc}, @NFTA_SET_ELEM_USERDATA={0xf7, 0x6, 0x1, 0x0, "57e8cdcfde1dc2f8d288adbc246af4e7cb541205f23c9835611f909bfc834fe4fef7ff5937c1a7d168866cd4fb9df6bf2f59b5e58fe47343cee9c7258ed9bce78c8591a03b530e7b78df06a0768c605cc3a4de1483d150e4ff05ef531999254ca3c273cedd1e41251127eec129430d4f93072a111721a771d55cebecb9e7de8bff55c4b1c8c75cb4ba8a6a875188bf953f9ebe3c147432bd57dc37b17862a6d1f09c9eea7d55dff883025e20f080a26bad3acee9e64725ea8a43ae3c92abbdb51fefb377c9f337188e041909ff0bef82a3573238cfe99b606c1c03816e1405e649a3202d0bc2e631a4a97ed080011ffb77a8ce"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x87d9}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @tunnel={{0xb}, @void}}, @NFTA_SET_ELEM_USERDATA={0x94, 0x6, 0x1, 0x0, "dda19dd22ee04a576bc76bcc66304c164e27587a9b93870e0e14bcaaadf5613ae2dd056f8a12f9099a0fbb6aa7949fd8cf0aae2627d5b114b2d29d21a3a1ec90245b74d8c91fe5244d2fd3b1800aeabe662bcb4ef81d2bc42d3267936fc39bcf6e3725523922300155abffe8ab3c69cdc460468490f780ee61b5abdd68253f4982e7cfff6a45d24f9c88805c6540ac15"}, @NFTA_SET_ELEM_KEY_END={0x1b8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe6, 0x1, "588c3185ab2883ffd49ed8740dc49e444667d4f7bd36cb0898fa28508243a361047c35e0f52c88c40cfe923f192835d96a2a40117f29b7b7a3efdbf6de2e8e0df7ebf57a43b37d2eaec187603fddc644329b1b9c6998d935370c4d8f691339185dd3c3a042c11a26f2e08e6b04d2cc98dcecbc6fd8311cb5c1e7e2a57f22da11b617951de3feab70579b34bab4039183a2d5484c874c6c7299ffe2fa88e975e876f986ad5039974d0c593b41412d8908fc80a17c3e659abe19d2189842be07b0795f34c6ee183f4bddf6c7c7d1470229bc2c8b9e5516950355da0c21f030e15f5a0a"}, @NFTA_DATA_VALUE={0x3b, 0x1, "b68c86d55e4cdf0d74f356e73077a1b8288987458bcaa195f47a9d042eb525ac1b3846cf73c12223a5cb5a0ea3ed4e9427c26001b71b13"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x7b, 0x1, "86e4c8d9bd757829665485b1e60f93daa1545985007eaa96d673d023ab01300ce177e1e148737f018401e38f826379e649e03a26c95807114b8c947ad9a82b0ce98e76f35470f00e258b59749288d2c46951b9850924b4d644a0dfc92f4f19d66cb4bcd3ff082b70f806d5f35ebe4fce3e52f2dc0a0e27"}]}]}, {0x648, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x19, 0x6, 0x1, 0x0, "4e86be40183600b37760b7a446788c157277e42b9b"}, @NFTA_SET_ELEM_EXPR={0x5c, 0x7, 0x0, 0x1, @dynset={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x7}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DYNSET_EXPR={0x20, 0x7, 0x0, 0x1, {{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}]}}}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_KEY={0x1b4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8a, 0x1, "3fed9e8650550c5fc9d23fbcbdcc4d149a24e71c68dc4b59242882316c01ab0977d8b94f305863a79623e79a64291e76f0299a285afdf886cc9532c72f024ab43e2ada67580bdb1b829b5323809f0880ef3c7f258fdb54f94237af971b5ea136cb24de88ced53df140b91c3ee6a7bd4b03b6acccbf9a3020a4b5102b3578adbb477f48930010"}, @NFTA_DATA_VALUE={0xfb, 0x1, "dd11a136ab92821832a4470c619fae2996ca9c5da8662bf467e2eb701afdbaa6d693fc9ea931ca0e4a3b422e184a53b6745f425c2469539ecb890d020f9aa2ab862aa8f02567ecdcf8e786c55f850129eb77c355d180a9d1b075f5c3c571bbba03a87da6f3db33195d12818e525f22db21982b34a40f6c21694efa8e1a364d6451839fae5787f0c8427de1abb4e067421298d96e04ca064777736ddb2642a7b9e8f8878168c4b8c6c324ae4ad80dc5a0c3eeb16301bacb301cd49afdb481badee367481a28004dfe0c2465e9bf6feae84a42000a370a4fb071ff544012a6df50fc9f45836f2bf3814098023b99929b5e8d5d2da213dc74"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x2ec, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x1c8, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1b8, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x64, 0x3, "ce878ddcdb8838c89315aa737753a1ceaee2d8c9f1c55c965cacf966f40869df8d9a53e3bf79b9b61547ae8ab7f97f4e306345556e28364edda46948829f1b529ac453129a3bd83d72ad3124df994e7a95855465dcd887f40309b0dd0105bb55"}, @NFTA_MATCH_INFO={0x27, 0x3, "6ce170a2ee0582b68de8a5ff9339f5fb4daa352b78244aa6d538a8d2f5158bb35f5002"}, @NFTA_MATCH_NAME={0xe, 0x1, 'conntrack\x00'}, @NFTA_MATCH_INFO={0xf9, 0x3, "46b6caed8708c7869d5419842fbcff2ba8b497579a2e1f27b88dbc59796894d84b51a8a9bd5c287b23d9a43f995e812d0088abd41dcbae04ce1f3d6ecd1ad81dcb220ac4572cef34d8d218b268b974cf80fe316ae25598b36ad1ec2c6b809e883d7144b2dea17657fe58396a6e3220d3bd0a8f2e8041c16946d42f78058398b9125336f410135d3d7487fdf257023fd0a703669341ef2e1298994f75412c497c798916165e7c72a2f29ae4f0692e1deb2b0125d4f70f6e7892bee2496be4180a86f97e3462dc00cff069a650892f27ffec068077196af58cd6e98c80b49f40951c56e7c1b3f14bc0b5f8ab51ae17bb4d3d9e78f39e"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_NAME={0x8, 0x1, 'mac\x00'}, @NFTA_MATCH_INFO={0x4}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x64, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x75}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x86}]}}}, {0x48, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xff800}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x44, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x120, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x99, 0x1, "84705004a3410265aa22fea84b6ab71d2b14a19613f506480dee0e5489a65e95148030c10ebcafd4503f3dd7488252d505a47246f1441c6dcb20f22cb4de17435b8167be71044c10b21a986ac1135dd6e0c4a095d3eaaa402c8674244b85b8d13cd6f5d3842ece080def54fdf1618302ec9ea3d0f679eada83e7c464f9126bf793bed6d487d3839c29fbd7d5448235f696f92e1804"}, @NFTA_DATA_VALUE={0x7f, 0x1, "352485aa4fd8d6368f15d1c18a4d3dfef1aafedc7da764243369b2d347c9b3d226a849c4ff20848f577232a11c2bdddecc52266983e4b50a466484fc8924ec6a797b046e9e9e25af0ad2df982b9c48e4640680eba013e71aa540e8a0898c43c32e42f5267dd3b10db61f6f413b8a47d7c37882c2e3210525f04538"}]}]}, {0xb4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x68, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY={0x3c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x3d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x3b4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe0, 0x1, "c17f805ba78dad0b545c828053212bf6b401bdb0b9cdc4cf6e3a98935a102a3212aa89ad9677d036467d1a3d95c0a4f226b79b982572a3da65fb19ad0f529ca7a94c3179faaff8d6bfc3b81367347c5f4b9f8ecf7eba18b8b528e46faf39348ad8676beb94621702ac3b212d73444634644a75386bf8c554f6a631b6257bd8a69016999578964bc66a7ea1ea5146ed023407275a862009f7de4b702fb5d42e5ca41dc75bed1fd92ca3ca245db8e319edae9c60c2685646de9e730e5852ac6ab7dc28aa219c97cfd9818aecfd59a67a70fd80f40eafe7a589cb2e6db3"}, @NFTA_DATA_VALUE={0x3b, 0x1, "d489faf52aafea9554a2b3c4f49f6133cf5fd8d7638763bd580c2a21346bf0f950160b82ed5a17a1205f662b9d3fcc167c71bd2b8f99a9"}, @NFTA_DATA_VALUE={0xff, 0x1, "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"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffff8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xab, 0x1, "cfcb6ef401c41a70e2ff2fb89a99c6ce68ffa90d006caa988ded776caa8c2120aa05d1720496be80f5e66050a1f4f9e7c91d7a2e1e229540bb9a782a3c9039c9c678894361a74bf9f38579892a87d1be5ecf488374e02e46a27d0c857c333aca96280fe9e93a1360f07ab6e5d6c010f8be8b792a375e893ea10ea8ad8891a3c836a06d81f63eb91221b0528abe9596a44964a20ff0ed3ad55ffe95107d85b8265d6398e9c1d391"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x24}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x960, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x67c, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x524, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x514, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DATA={0x19c, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd0, 0x1, "dec460d46dbaf1fbc44656bfcbe65273adfd929316e1e337af4b1730518c393c51cba8093af5e73e1f463fb1230a32616d971b9579b89d9c8c4b5dabf9b21232f45d776281a2b63e956405fc0ecc04bd111c2f4c01eec0fc414c0dfaf8170162447ff764fd5dd3e57ff7c13ef127a831bb255e6108fb92dd59db7c0085196b022f74cc581b0224c6e89364bdc759c2c99426ed6cd1848440d385aefbe4658a2efcaa343d64c951f6c1dc37095c10bf0906127971604bca85863dda041f035ba8b56c3c5cd121fe02716b28d7"}, @NFTA_DATA_VALUE={0x5a, 0x1, "e8f827e8df74d1c83b433340225f22099edabaed9957d65c6b6c210a426814d6746968ca2cbcdaded3315134d38acada5689580c7425f7890c40b25afcfdca95517826494d1edc06985580c16ede30b7f109a600ac32"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x65, 0x1, "4e1cfa088b1a983ed73bb1022ddc8b1d5a9429809bbc03f844bf817b329d6a77ce2b3a432b0cd1af882fecaec3e28e33e2c06eb5e3a29daeeef1fecb80bfad1687939e8e80f722fece2af06fa94468c00854f48662d365a78856d8cad178f74138"}]}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_BITWISE_DATA={0x138, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x56, 0x1, "6efce22535ca543932c48a6aa5ee561772e6c853abbbf0c98a52ae7d8934515d6bbf3fba890eb8cc54f62a1cae565504c105e9b435ea00bc1f781161658c603f9272d832c027fe8a82cb9c96dba399ac5575"}, @NFTA_DATA_VALUE={0x5, 0x1, "fa"}, @NFTA_DATA_VALUE={0x54, 0x1, "9628c8e80b6ed1bdd5bfa84508018b5e06c5dae279a6f080d1c07e5e599a89cc2748da78e3ef89de2b49f027adf4bf357521f012c467e126c1c883639cbd57a3c8b1d9d2c96ed387eac7a87be6433194"}]}, @NFTA_BITWISE_MASK={0x234, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x33, 0x1, "6dd2dff066c442ff20e0e15ed5e5112f4ff9f0806dc5ab9c33aeb87b093988ef8c76410bf41a97870d22f0f4851ebc"}, @NFTA_DATA_VALUE={0x84, 0x1, "7f52a3056c7232318e66512ffafa27b93f5cf315071e493b6624cb05aa9c1d7475f7ca8d041160b64da1b6ed03914d35f673b8bff24828d1d5280ae645e9979f85475eef39202f5a4b5df6285ae289c9602a6b5d6256f5900a982180de030522d84c5e04b9d3519e5e1ca5c1f8dd03c89d5962bc9f8b58d48a170406765dd86e"}, @NFTA_DATA_VALUE={0xbd, 0x1, "3b92e23576a2268c3dd5b9c31ddb15bc6991c0a9a41e32b4eafcf979579aa382170455d3d3331dc4c85f7772549b89d86275c7606568fd537f0cc577a5d7b3dbd884c9def15fc9598b2c5961a48bcf8a4f101ae9e1793416d30947b4432278d1856fac8cf614c4b479ebf281a1fa7c672e5075d576f77f7cac96b3b4976004cc6488f5cfd5011d2648651918094aaa79cbad5ed772488cfc01a25e9d73404def9789e531dde7006966e4ac1e77855eda0e84db8721351cc0a2"}, @NFTA_DATA_VALUE={0xa5, 0x1, "fef6832a3b93f345ea63ca40300c1bb52d52c48b7c557fe4eb4a88969badaa50b4c4f27330ceecd51735c9ac42f14d5ad1463867b2c861b2c26756761be3960efcf7181345a013bf43b2cf981a2fd70f087a407b966a61a3e3acb5e61b28a93c544edc6af36acb1dbc37b6998f54fa344fd78da96a99cb501ebf9b4db29a82ec1f012b5ed2cf3725d2122852ce783135b9a1b3674285e2e09b1a098ab3fb2e57f6"}]}]}}}, {0x40, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x34}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}]}}}, {0x40, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_SET_ID={0x8}]}}}, {0x48, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_USERDATA={0x4e, 0x6, 0x1, 0x0, "cca88f10eac18893d32d1d0b1f425c583e88904c856ff2484955a4119d04e6f470a32bc8d100bae06888a6409dff7509ccb771aba5cda59e1817bfdc26441133835758ed4c70d36d6427"}, @NFTA_SET_ELEM_KEY={0x260, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2c, 0x1, "803625a81b71099129468c516cc9ad3143ce8d6c2b5a1c83c2921423be6871b795557bf51f78e416"}, @NFTA_DATA_VALUE={0x88, 0x1, "fb262fe0f25996bdb89d24374c7cad042758cafea46023d65cf32635e1efd739ca39fc2ed16d3f631afb53bd8c9687a4a256d07cd3d5baf808d51271cf602223682312c0964b03ee42f4f1a3b18db543a88efcca3fc42458894377496004ec8c52f446eedf14bf55e872b0de5411ab5d77d8477d36065d08d0e276998a46cdd92bd8ab98"}, @NFTA_DATA_VALUE={0x57, 0x1, "3e888f1cd256eff551cb65399df2873df83ac857f8f6e89383c59c5dfd9bb3e320f52f5ca033a70a2518e8d22b19b338c0cc13b027c7d844e8a76546800ce19dfa9f77414e9ce67f86afe41f9a5c6b3d925eda"}, @NFTA_DATA_VALUE={0x2f, 0x1, "d824181e9ee3fc6a65cd094fba59ec2ae113a6744e9860ce42fc5878d0036a818a75502f45d8f7e3886f84"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x62, 0x1, "3a08b5b54c2e2e92cae54053a7d9f306621356eafac7755976543a433f079d9ca1a8f52b2ecbed456cae56179acd5943c5642fef3a96bebc003bedb0ad0322eaa5a967a89973883ea3de4c6f758d52ad26b304d39e26fcc773f06d7ee4d0"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x82, 0x1, "fb86c75da766fbee7ca1514b8b93a7eadf75ca4a16b995e41644345ddc5e6d7c8c7f54cb54c1d19b61c0d318b1ca69e9c7496abde7151b45769070716db36e898848b2a03715fd413071b148176068f3880d076ab3febf5e85b4fce1ce87dcd73fa16b4172624487741526571aef485d98d309cd81b75253a90734c177b1"}]}, @NFTA_SET_ELEM_KEY={0x18, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x16c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY_END={0x74, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x48, 0x1, "e7cc4933b9ef346a81660be07c1a9bbecadbf574316e2b937a3abbe42e50f225099b982deca946f94439ca79e5bd284fd886903d04109641f5aa0f603aac82c31009992d"}]}, @NFTA_SET_ELEM_USERDATA={0x92, 0x6, 0x1, 0x0, "147d3d640ae6a5c9839d9cce0de73a15970cb51c69393a89701c7b6dd826d1e657384a4a1b1e9ed2da58ec535cd31d7795b053fc06f5fae2e6bb3feab464bfe2ba7af0619fdddbb4c4a7fe931a82a8329e33bdff6674ac2fe0f9bdd28878a8c6f31f7088f1990f594e8722d3cf1afde3ae3bdb412aefbc239f8501520246f129fabcab560a7aa896453a5971c834"}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, @NFTA_SET_ELEM_KEY_END={0x20, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}]}, {0x228c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @match={{0xa}, @void}}, @NFTA_SET_ELEM_KEY_END={0x223c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xfe, 0x1, "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"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x3b, 0x1, "17390faa21942564f6b50d87efd1fa9754f7a704ad7e729b5028eec6e889f3ad528a3d95e27101f5556688efa681cb907cb5f67c23ad45"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}]}, {0xeac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x70, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_SET_ELEM_DATA={0xdd0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa4, 0x1, "67737a61c3fcd29d039c358b076dae4daee737732502e97b20f678fbce661162f1889ef5d772b9f607e51955849d9afab74b6ec8615bc1c8721b345618648fbadf848e64e88d54b02f98726bd69d18aa4efbbcba5eed552df1ab3f82ff94f40c935c126696466377c07f77a87f8bcd47c1f5c255c4a739a4ddf0e295f9fc84face739c692376cfa8c15e4352bae68a3a169b318a49a6fe68d55fcd91b20c87aa"}, @NFTA_DATA_VALUE={0xc04, 0x1, "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"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xe5, 0x1, "497a36aa8299823cfcb01a0b099df70f687ff327744c7a832dcf46afa5cb62c384b51b952b40ce12be46d1e95e540639e11d6fc76961ae8e43fbb9dce91e48d0c18f9b64530f7439d76af1013be88693687993e65d4e9fbc38bccf4ca8625b85f1ae82bb60167470c44f63b8673ac9b921f1b2bc4506e66683b4aee47aa9befc86f3a3fb6f409387aa44ec4f975424942421ab894cb97144c16bf1c315852ff8c4a4a8f35f3f7e974bd772ecf0f58a75713899971b3818ca543be2271eefcc902a196dee6ba44944916d297567ddcd1200ffbc7af5c61302cc6236070bc35be78f"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x4e, 0x6, 0x1, 0x0, "ab1a8377163fda29f8386194a775f0b5d7415344acf349c1acbd9f78af1ef9a2ee406865c8d0179bbd4015b0479e706d98ce79d2c50436ff5e100e834c4e3fedf8ac1a8cd574f4b02b49"}]}, {0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14}}, 0x4ae0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'veth1_to_batadv\x00', &(0x7f00000001c0)=@ethtool_perm_addr={0x4b, 0x44, "4b721b782a17a7b6a00d960a64048655bcb0b0ac551fdb8a571f6b3c1cb52ecdf3e8721b8ac2e30000ff5ee018d48c7c3b54f8dbdeee0aab7d3d8edaf144e5d524000000"}}) unshare(0x22020400) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r3, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x100, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0x1, 0x2000004, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x404, 0x3, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x1, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x1, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0x6, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x12, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x18, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000000, 0x2172, 0xffffffffffffffff, 0xd8e44000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x18, &(0x7f0000000100)=0xa, 0x4) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000000)=0x4) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f00000002c0)=0x7) 2m17.719077092s ago: executing program 0 (id=155): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r3 = fcntl$dupfd(r2, 0x406, r2) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000000d00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000200000000000000b9120000000000000000000000000000000c0015005a"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x8000000000005, 0x4002) write$binfmt_elf64(r3, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) syz_emit_vhci(0x0, 0xf) openat$cgroup_int(r3, &(0x7f00000000c0)='cpuset.mem_hardwall\x00', 0x2, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) userfaultfd(0x801) open$dir(0x0, 0xc4000, 0x20) open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) 2m15.981609299s ago: executing program 0 (id=165): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) writev(r0, &(0x7f00000009c0), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='attr/prev\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2243, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x1000007a, 0x5, 0x0, 0x9, 0x0, 0x2, 0xfa11, 0xffffffff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x8014) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x101) write$FUSE_INIT(r5, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2b, 0xf3f1, 0x10020802, 0x6, 0x5, 0xfffffffb, 0xfffffffb, 0x0, 0x0, 0x1, 0x10001}}, 0x50) ppoll(&(0x7f00000001c0)=[{r5, 0x2002}], 0x1, &(0x7f0000002640)={0x0, 0x3938700}, 0x0, 0x0) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000980)=@assoc_value={0x0, 0x8}, 0x8) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r6 = socket$xdp(0x2c, 0x3, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000000c0)=0x8000, 0x4) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x108, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r8) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="31032cbd7000fbdbdf250b0000000800", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) 2m14.649746162s ago: executing program 0 (id=174): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r3, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000091) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xb020}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x801) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r5) r6 = syz_clone(0x80202000, 0x0, 0xfffffffffffffe70, 0x0, 0x0, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc1}, &(0x7f00000002c0)={0x0, "07ec685224472d3ce62614a517a532cfa6faa7f4f33fb9fdc06c584b134c2a90b2a009126445277df563f444ba32540429912475d90df0e9844f65bf11763185", 0x2a}, 0x48, 0xffffffffffffffff) r8 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$search(0xa, r7, &(0x7f0000000340)='big_key\x00', &(0x7f0000000380)={'syz', 0x0}, r8) r9 = socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x6}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, 0x0) ptrace(0x10, r6) ptrace$setregset(0x4205, r6, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x9a9c41, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) 2m13.45643965s ago: executing program 0 (id=179): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = syz_usb_connect(0x2, 0x2e, 0x0, 0x0) (async) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000180)=""/121, 0x79, 0x1000000101) syz_usb_control_io$uac1(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) (async, rerun: 32) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB]) (async, rerun: 32) close(0x3) r2 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r2, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x1, 0x3}}, 0x10) (async, rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0, 0xfffffd32, r2}, 0x68) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) (async) r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0x100, 0x4000000b, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) (async, rerun: 64) io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x8841, 0x4}, 0x18, 0x0) landlock_restrict_self(r4, 0x6) (async) landlock_restrict_self(r4, 0x0) fcntl$notify(r4, 0x402, 0x80000027) landlock_restrict_self(r4, 0x2) (async) r5 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000240)={'\x00', 0x0, 0x5, 0x2, 0x8, 0x5, "0000000000000016009500", '\x00', '\x00', "64bdac32", ["d96621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "d06cce326f7cfcfa51978ce0"]}) (async, rerun: 64) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000480)={0x5, 0xfffffffffffffffe, 0x7, 0x0, 0x0, 0x40, "0ff8000000000000c5c6ff0717c3a86d", 0x0, 0x2, 0x0, 0x6, 0x0, 0x4, 0xff}) (rerun: 64) landlock_restrict_self(r4, 0xa) r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x548, 0x0, 0x3}, 0x18, 0x3) (async) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000140)={0x100, r7}, 0x0) landlock_restrict_self(r6, 0x6) socket$inet_sctp(0x2, 0x5, 0x84) 1m58.374476605s ago: executing program 32 (id=179): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = syz_usb_connect(0x2, 0x2e, 0x0, 0x0) (async) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000180)=""/121, 0x79, 0x1000000101) syz_usb_control_io$uac1(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) (async, rerun: 32) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB]) (async, rerun: 32) close(0x3) r2 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r2, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x1, 0x3}}, 0x10) (async, rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0, 0xfffffd32, r2}, 0x68) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) (async) r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0x100, 0x4000000b, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) (async, rerun: 64) io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x8841, 0x4}, 0x18, 0x0) landlock_restrict_self(r4, 0x6) (async) landlock_restrict_self(r4, 0x0) fcntl$notify(r4, 0x402, 0x80000027) landlock_restrict_self(r4, 0x2) (async) r5 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000240)={'\x00', 0x0, 0x5, 0x2, 0x8, 0x5, "0000000000000016009500", '\x00', '\x00', "64bdac32", ["d96621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "d06cce326f7cfcfa51978ce0"]}) (async, rerun: 64) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000480)={0x5, 0xfffffffffffffffe, 0x7, 0x0, 0x0, 0x40, "0ff8000000000000c5c6ff0717c3a86d", 0x0, 0x2, 0x0, 0x6, 0x0, 0x4, 0xff}) (rerun: 64) landlock_restrict_self(r4, 0xa) r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x548, 0x0, 0x3}, 0x18, 0x3) (async) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000140)={0x100, r7}, 0x0) landlock_restrict_self(r6, 0x6) socket$inet_sctp(0x2, 0x5, 0x84) 12.290680567s ago: executing program 4 (id=835): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r2, r3, 0xfffffffffffffc01, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000180), 0x200000002, 0x400) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002740)={0x2020, 0x0, 0x0}, 0x2020) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000004780)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xe8) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r7, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r7, &(0x7f0000000140)={0x90, 0x0, r8, {0x20000000000007, 0x0, 0x8, 0x11, 0x0, 0xfffff801, {0x2, 0x0, 0x6, 0x6, 0x10000, 0x7, 0x7fff, 0x7, 0x7ff, 0x0, 0x7, r9, r10, 0x5, 0x1000}}}, 0x90) write$FUSE_ATTR(r4, &(0x7f00000048c0)={0x78, 0x0, r5, {0x100000001, 0x8699, 0x0, {0x5, 0x3, 0x6, 0x4, 0x3, 0x80000000, 0x3, 0x5, 0x9, 0x6000, 0xfff, r6, r10, 0x0, 0x13}}}, 0x78) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r11 = openat$random(0xffffffffffffff9c, 0x0, 0x8000, 0x0) sendfile(0xffffffffffffffff, r11, 0x0, 0x8000fffffffe) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000080)={@hyper, 0x3}) r12 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r12, &(0x7f0000002700)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x854}], 0x1, 0x2004001) io_submit(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRESHEX], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x0, 0x3}, 0x0) syz_clone(0x600, 0x0, 0x0, 0x0, 0x0, 0x0) 9.247656105s ago: executing program 4 (id=857): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000040)=@arm64={0x9, 0x5, 0x24, '\x00', 0xe}) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000080)) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0x5, 0x0, [{0x271, 0x0, 0x4}, {0x3a8, 0x0, 0x2}, {0x2ba, 0x0, 0xfff}, {0xbaf, 0x0, 0x1}, {0xc0011032, 0x0, 0x7}]}) r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x4, 0x301201) ioctl$SNDCTL_SEQ_GETINCOUNT(r2, 0x80045105, &(0x7f0000000180)) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x2, 0x3, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x8, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1ba0}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x18}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40048d5) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) syz_ublk_add_dev(r3, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2e, 0x706344705b17c7f3, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xe6d7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@any_dev={0x3, 0x48f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x0, 0x20}}}, &(0x7f00000004c0)) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000500)={0x0, r4, 0x7, 0x5, 0x101, 0xe4e}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000640)=@o_path={&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, 0x4000, r0}, 0x18) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'batadv0\x00'}) r5 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f00000006c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1477, 0x1026, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x40, 0x8, "", [{{0x9, 0x4, 0x0, 0x76, 0x1, 0x3, 0x1, 0x3, 0x7, {0x9, 0x21, 0xb02, 0x53, 0x1, {0x22, 0x456}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x6, 0x2, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x30, 0xf, 0x2, 0x6}}]}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x300, 0x6, 0x2, 0xff, 0x10, 0xff}, 0x110, &(0x7f0000000740)={0x5, 0xf, 0x110, 0x5, [@generic={0xd2, 0x10, 0x3, "19fa46315905a85b593121bead0ebc8ef2b79891bd3ea7e4fb06ce73abfbfad14496e4b07170203a46c20ea0236897b28f23fae8ce8ca8417c087fae29951f2f65221d39500443776632c15b666bc2582c7d24500be40945d4ebf629b6fbd3878580a571209bb530c08bb908aaba90b11f132c68ca178056ba3f380bfdbf9484f5e618b994b11082d83ad1aa4a4616fa6ceffc459c402a6156145531ebee1e1e142037704599bb818e53815bbd1261390112b8874eb560105f62bd919142f560271ca996c6c8d129f2c9afc08653c1"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x2, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "50959d6496adf1462f626bab089b2858"}, @ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x1032055, 0x1e0f, 0x0, [0xffc0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x81, 0xfa, 0x6, 0x5, 0x3}]}, 0x5, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x427}}, {0x26, &(0x7f0000000900)=@string={0x26, 0x3, "498bb499a1ea058eb20f3d59bb95e4ebe6ec62fd5adc759379b61095c1f6b4a04c93383f"}}, {0xcc, &(0x7f0000000940)=@string={0xcc, 0x3, "7a93af4a58030ad53fa31166f2947977d9f1d3c36792b6242b338a8dc4d23fb74bc0b477505911233df0af8138079c7ee39129f5178095f7fd601611f9432ee009baa710aa602709b2f6a2c5adcb30a48d18244bc5aee1271bc1b354a8413fc48ee9adc8f51c1f5a6b1bba5772d5348a15282940cb184cca736936b2700218bf5e534f3c658117e9bf37ddc19f4ab29402757973224ccfa9a36623a97a9499116ab321d48a56d78cd63945a76e69b61b62fc5311d243cec7e97b1bc343ba5bd64d86bd047a5a7aa125d5"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x41b}}]}) syz_usb_control_io$hid(r5, &(0x7f0000000c40)={0x24, &(0x7f0000000b00)={0x40, 0x10, 0x67, {0x67, 0x4, "cd89e954c7b75394e21d71d749ce01948183e855b6662882cb9cd36d7b16bc56885733fe59a844c3467b06cc3bde3022fa42d8df773270f85ddc626b360be0aa9a4d3a2f29ebe3a24f849571cd1813a342e96b7224e197a3e361cf1dee385d099d99d3afa7"}}, &(0x7f0000000b80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc07}}, &(0x7f0000000bc0)={0x0, 0x22, 0x17, {[@main=@item_4={0x3, 0x0, 0x8, "1df0caaf"}, @global=@item_012={0x2, 0x1, 0xb, "91dc"}, @global=@item_4={0x3, 0x1, 0xf, "8cfff02e"}, @main=@item_4={0x3, 0x0, 0x8, "4ddd2cf1"}, @local=@item_4={0x3, 0x2, 0x2, "7e5ae23f"}]}}, &(0x7f0000000c00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x10, 0x1, {0x22, 0xdb9}}}}, &(0x7f0000000ec0)={0x2c, &(0x7f0000000c80)={0x0, 0x0, 0xfd, "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"}, &(0x7f0000000dc0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000e00)={0x0, 0x8, 0x1}, &(0x7f0000000e40)={0x20, 0x1, 0x3a, "0df2190cf68f179af56f4bec778e167dbc68419511c4ae33549c9448de640b6584592e241497bcdb9cff0e6b55e743415c0e923cdf826bee72c5"}, &(0x7f0000000e80)={0x20, 0x3, 0x1, 0x9}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000001300)=[@ioring_restriction_sqe_flags_required={0x3, 0x9}, @ioring_restriction_register_op={0x0, 0x17}, @ioring_restriction_sqe_flags_allowed={0x2, 0x5}, @ioring_restriction_register_op={0x0, 0x1b}, @ioring_restriction_register_op={0x0, 0x3}, @ioring_restriction_sqe_flags_required={0x3, 0x4}, @ioring_restriction_sqe_flags_required={0x3, 0xd}, @ioring_restriction_sqe_flags_required={0x3, 0x22}, @ioring_restriction_sqe_op={0x1, 0x10}, @ioring_restriction_sqe_op={0x1, 0x16}], 0xa) syz_open_dev$dvb_frontend(&(0x7f00000013c0), 0x664e, 0x200) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f0000001400)={'caif0\x00', {0x2, 0x0, @loopback}}) syz_usb_connect$cdc_ecm(0x521f15cd91cb75b6, 0x5b, &(0x7f0000001440)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x1, 0x1, 0x3, 0xd0, 0xf7, "", [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0xb, {{0x6, 0x24, 0x6, 0x0, 0x0, "f1"}, {0x5, 0x24, 0x0, 0x6e88}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x7, 0x7fff, 0x3}, [@dmm={0x7, 0x24, 0x14, 0x6}, @ncm={0x6, 0x24, 0x1a, 0x5, 0x20}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x80, 0x2, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x79, 0x5, 0x6}}}}}]}}]}}, &(0x7f0000001600)={0xa, &(0x7f00000014c0)={0xa, 0x6, 0x1, 0x1, 0xf8, 0x1, 0x8, 0x7a}, 0x2b, &(0x7f0000001500)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x1, 0x8e, 0x8, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "abfbeb57b5257463f064b38f7ac6a3a1"}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x8, 0x5, 0x101}]}, 0x3, [{0x30, &(0x7f0000001540)=@string={0x30, 0x3, "43f879fda1ea1616d7e24b84579087aa946fe7bfa683a9f2d8d92c75c2d265e252492ec0694c78a58c40426f3ebb"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x408}}]}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001680), r3) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000001800)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000017c0)={&(0x7f00000016c0)={0xd0, r7, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfd8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xaba}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x124d2ee3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc8b}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x44040}, 0x40) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000001840)) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001880), 0x600841, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r8, 0x3304) syz_usb_connect$uac1(0x1, 0xa8, &(0x7f00000018c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x1, 0x0, 0xa0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x1c}, [@selector_unit={0xa, 0x24, 0x5, 0x6, 0x0, "30e7886314"}, @extension_unit={0x8, 0x24, 0x8, 0x1, 0x7, 0x9, '2'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x5, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0xcd, 0x0, {0x7, 0x25, 0x1, 0x0, 0x9, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xf, 0x9, 0x2}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x0, 0x0, 0x8}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x8, 0x4, 0x7, 0x0, "0574f1c6"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xa, 0x9, 0x8, {0x7, 0x25, 0x1, 0xc, 0x0, 0xa49}}}}}}}}]}}, &(0x7f0000001b80)={0xa, &(0x7f0000001980)={0xa, 0x6, 0x310, 0x95, 0x7, 0x5, 0x64, 0x3}, 0x5, &(0x7f00000019c0)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000001a00)=@lang_id={0x4, 0x3, 0x861}}, {0x48, &(0x7f0000001a40)=@string={0x48, 0x3, "9c04ae9fa67369a34698c533a2d3389adc22734f32d56cd1ccae39fdb1b0c2a644165176620751c0ab80f16778012ce7ab394218d19cea1340165ed02482fe3c511f631e11cd"}}, {0xb8, &(0x7f0000001ac0)=@string={0xb8, 0x3, "d883e3420da5b2ae25ce4141ac7578258eab256d547c4839c6362c43b480d973f75ee728bbe1d743d3b368b144f3b5b0b9f43c67fb02e622ffc4d95fd3ba844a7f203171c8c46d91b43c2cfd96d140733c0918c9e3796e1691aa77d0d9f975a2efad40419f9432799c9c43fb6cb52fbea3eaaa2cc4aba42972717fbac0f7e9fae6ea4427d2f703261ee8b3329f847e8883a45668d44dce7f241dc4410c19015c9b0aba83958b1a3c0418ae0d393253b9fb381bfe9769"}}]}) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0x1) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001bc0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f0000001c00)={{r9}, "5743c12000eefbadd14d8da0232fce55a78b966093f85bb1c6000b0a6150095ac679e14425071ed0a855774304f108ab6ad43704f3de80956b8d44040e595cb19a07522585230a3b27f43a57385f23d7069a095803bd2b11e459b8af4cb7efb907769731aee14d4e5bef15830a119c83d33ae8be10a8b056c0e7f0d01fe418e375385af0c3fb3efbcdd6097ee8b5642c55d47913a3f10706c00bcd657e07ffaceb6698e88f81babfd5abc1e7a5958a8325bbfd202368b8f3cb50a9ca5a9a62800df6da833e50084c83d430619b6f327f838df10f3502b701485fd1580fe1bb550b61ab7414f17f19d6b0771de1c4a01286c6f817f99ebf4801266654c3323746e09a6a461189d51495c32c6e85344e2c6f8ed39d290b0d2b5d21004ec6364e6cadb1fd5b76455d6f47c762cea766ffa90039e3858abdcd52737b8d121f266458de3f4109d1a1187e471b4feb4924aad213a15912d1061472b32820220372a23ca9a2851d981a1cfb366657f5006c1b0ecbd5a2a583dc0425d13f322329bdbfc152157b953488cd3f02e654444c671edf19a17c0f719d6e365ab4ffc460bff937e0be86be0759a2c1fbfc73c967652afe71c5c66ca214cb3adf071d89ab13273fc052b893f264dbf4fce4198d43c8b1f32a84c6b47cb3f2f8fac316d0f5cde9cf1cc6895ec464c05bebf38c9503b40a2ec68b1c6b6cfeeb65031bd84915e4ebbefb3af8979b772742ed578f3aa192b15b64a4db776012e6701e4f46c1f99f7152441d9b0dcf7dc40964791f97b781e6d39ff010e6a264a3828d7bcd6e66391115e30882b8e44104a37e195ffb9223b071cb383048035a972fac61add1fee4da0215d5c25a00cdb4e6bf41c94351d1c84ac73f031815f3cce3fc4270b9460ac7e187ad19c8ada2adac7b49823615316829968a196f73b41e39cc47eb629da918b8e76bc702327cd8962a940c38248397ffd2e9168a7c326b861ab4acc081571e327509f7744df062272af58b279a4897fa79a910c93ca3bb9bdcecb439725cac262c85758aafbbaebfce0341fe855afa3fa396d92c50cb6b8067b8590a9d0360f6945f73abed27bdc110c5027ddfa068107af85b1cff546af2939622e9d50412bf513f2819c7695f69454fb1e1312c1ff4df362cd00f877e0d6836d12e7872d6f2354b6524d8227d7a320499ae32074b98dcdb1f7c57a48905c9e56d232ec96a910b357f41d1d86f2df2d8cf32054d104990e973eb650df81108c08f8f7aa03e75fcc59a795e736313aa5e10181f45b3c81b6a32a4857af42027095ba15d798a4669d793ea108c3265551c333487487c2c5a407e980847ee8cbe4ab60fabc6c040a25707afa4982ea1ed72a9ac2c9c65ea0718ae7a51511534665c19b4e45a09e90ff53e455209e2be82303101a0903cc5c7a994e7271ef20974cec7a2be7f91dafd2a55e185f28c677dda81c170c802d1bb5acb16c0b8619dc82d4fae9006e02962338c4d80da4867d7ad2466b286f83d4318f3a5cdba615a2d5b20a7af1afb3cba6894f035d0e26901f4ccd4e383a19d7d51b7d123c48781960a4daf931ec646d2d573bbf37ee7765d58200fb5e024ce35e7addf53b8498e7d399ac9d2769f54672bf7426929175d8a275747116174dd660cac3ddd02f5f08e78cc7751315b96d09e2317e5891d733a8704edc40deb557f991f9745a8bcdfc703ed3118624a92021c9b7f65bc2eaecd888e08e173118780a5701ca3707c2ae45d2bf0b6f37eed9721e05b1dfffe907de9932ee64d83a0732964b2f97043af056d93ceaab94923318eabc763ffb41c9d8006ec25567f63c413b4d113f079a61b2a9a02188ffa77dab2cf180622df8b935355eaf6270159d273fcc8f03c7624548be696c35eac24c2b9a2a3607b79305e6f5aa601a9599fd29395e5bba15149225aff6ad8437935fcf0fda4f9e185984798882d4ffb2e403e2ef1720f5e717a0d7f42f514c89f760e5e007548b3228edd2e1acbf6f26b7f8a94fc07c9e7377f935c56d0bae853a929cb31845f5b7c28f52826ff7f9dca3772ef1a7abb6f8fe658a8aa33b62f9ef78bfedaf16fb4d6aeb89635f37f29acda7b7508008d5ece366e5d1808a91fe90d4d1a1fcf9006832689f5764b356abb9957cac565d5121f2699d88af0a87094ec770714753e2cd599cb38a21a1726e6a364b027b30f528b73675490b1b2e59621bbcbc2586a42926618c4d6c79f7e79018f892d216a1b5646e8ad0839440011114f11b84ed2d3faf955858d8726ff2474cd57a0c9c25285edfe26111825938456c928741bd74808cf24a41c7032da153590c807bd5c5a7e4dc6964718342f259173ca7b724d58c5482831e6f47b0c05e38e0103cd2fa90e4feafdd6c9e5f22e25e71f8431d7ac5138745f3039545b85d0fae09c5448e7dd123343d7ba1d45e39c0de5ab0ef9a3e6ec3f78b76013dbfdd4de38de2ea9b84353e75260086a1e7d130673b8722aa4bc595ec5a429691dfd4f1afa58fdd186f7129e566dc77c91008b387ae1abeff3855aad9ec64ffd94c51485979e5a1efa0c9c9cb96abb7c61b9e9c0ff2f8c703d0059fbf65d7125c46d16c72be865c9e66d77c444b48dba1d6b10226fe54a2069acd42f7cdbee87c7a0843ab4c4b2be15820067e85437416f235503791e04c9776f226e0512366ea4f7496a7df9880c51ee23f9bea734ff2c52f0e760e10de03ce612a11b803e403589f70570936caec47c19d40ec8a9532831c89c30a56349a9da6cbf45a3d7733f9101b97d0440d329f5749374ca097dcd9182c1f8849535ce7f25abbb7027b64c8622cbfe58ba6c6a1df46b826ecc28b2520b32deae27e2cc472082021d57fad59d08a7027a815a61244fb5b5965f11bdc7261a4b7fb7594eaeed3ac555ec6446c9727b53f59d1a7edadd0258d27d7e9c8b501260880d0ff4a9c433d2ace9e4283c345ec900bceb3f736eb613fe06910ed1bb31e6fa796c4d0df66c3a8feaf776b7c3dae8d5bb5c408f46acba6d845e1cb4188b4f2903df94af4d3809026b5e281388052a2d2e5754ead777feb7c41c05c6b2142cd664cb9eb707e8d08646b2782ee17915824b293782cfbfa955c53e5146d809bebf6540a8bdd19f6196efa9779dff203dfa68b6ce97d892d05ec96bf7955b292e98dc88dbf81918afe4fce39303224ac8b5e0f0b41b45bcf3d4a456dbdef9ed4771a51232b345265277e9d82e95e10d36acded0f01b311e58cb034928fa85282c34512dab9a98afe6eeeaba978ec107b7a0c79e3661e230127f733148e3d6582661ee40016a1956bab8e5587c706989f18e32c65248911694da1608623c43a8173b2a60a798d2345b3d68238e5eebb689e3ccff645fab4cd9020b7cf802f03dbc93c4aee29a3de5720a6b1824303ab02aaa47feec314b06a3c47fcd1711d48835b79e6b57aee6cdd46fdc888a1c8ddefd929f4b38167c4c9c5e41641e8950515f5fa2b4d50bb24b9b97dd8ddfd6818dcd717e7bc2a824baf399d75fcdcda0783f42c3df25f105dea407cd6d6240ffd823b6a42e77fff2d8c0e4e3283583eb832bd6961dd7c6bd613d3115d9e0d3e46a80b31f6a8f4c8854eefcca1209f73211b399f688ab5cda77c2303f42da2ab3022c6d087b23202d0d79ef6cb84b194fba8b4dd6951e5c0c9da03935bfb76aaed5b0e1cd595ef5d69cc486e197ab88a348381870fe0d73ca9434ebd5eca66ae4452299958c84f74e87caba4f26eab5783735413c1bae519a70a2c56652456b7d433359ae4288bf9c95b7ef8807a374429a3938b93ca7b0651db38da9a8094c709d88f1a2dddfc564faccdb00eb5a464d74d976feec582e82b6db8756b71ce16439261abce3441cb76cb81ff6f941f862d1b6d051132a10e12ebd5ef8ff7255d3caa56d9917cafc6903956923d23315552caf878143e57fe7c25e07965c5617fd000577ffcda0a68567b6026f6620b9dca229e6f3c82861ebe9ebdda541af08176f0b1b50c51f84efabd58b9c36d83553e19b09f5e3733c38ddf176d3ffbb6d64186f6c3d8ab1631800714490109eb157f54656f4000da31b2813ae5e102d8c95d9f417e9601a3f9123603734fde62c92107a74c641271da73576b474e6b4acbc30d8fddf737c9081acf015f7ae351bc3a4a4229aafada216574e9c4805770dfe33286cfe0c8439c7faf8c9960be44cf487d9b3524a76b1f9bf3735ff8f4946fcd758a675634c037b5cb8e7034eb90c1f21cceac89e7d81022a7623381a297ca88c7bfece3d44751785f33c2b101146de088143d8f0c6b0ca3d7372f2aeeec1f452be4ed2ba5962cb84209f6bb5e5a7685c60a82cd5d852f220ff938f4f3da246a914a761b6714c1bde83c23c730f508056b2cefa76b6246293b2a2f9fe77d70e76983f376de26515f9c1d59e0982a6f18fee068a14516fc45531871e70e4821cd8a965c0834c95f80a25dec168075f9e4873eb9f94bdf5b654539f7a0f289a2fbf7d82efea61552b2124e26cc0000467487dae93fdcf892d22e625d5af19e4f07485727bf8a4833edadd3034f48d1b55374b996a0c7f4ecdfbe6cdb63c75c99217206f40d742c539c479865be945c27e311894c123b4e6741d221f3a49ba374f527a7a2d505e1a16b91aff2bdc8f6c16e2c5343a76eeaa93ca129ce5355d81e467fa2421b8b62aab9618745d4cf43c35cdc8bd3b2ae8dc18a60b765788964ae08e761c8b70f190beab40f58cd1479f73fd7a65ba8cc6537bd83d7bc2afc8e21a26c34be6c5721f28f7fdd6752c14cd03befe1a821decca2873005832f5207fa6f606eed32abbd6d67b57a1ed3e2ac02445be9d2ee8e5377fe3e7ca2071701ecea964c3b0be18aca08be0efd552457b7ccac9736663279a321d97f8e2272e641dd7b5bb384461e8899f667636736071da37ca7972899cc0ac52893c40618023f44a4e35f9854c11712e331bcb9c6808d90d8be7b067f4e9faaf78ee6d109602f2562ef8083db3359364331ace70657edbf3741529daf3747165566304a3e98d9f3f4ec341beb0b5a58b94a8a7ca825109bd1b4c6f986ab0eae3cb1704a793f0148d733e20872e6439d18e0fc51194b56bad783fbb09f1f3ba35ce790fb64df02ceefb48a3ff01ddd86e15688cd3f5a7eb9c6a9c3cac753d5d9c69ef8464ee081fc20cd1d4dc7fb74e48136c0d189c88dc069e33c3ab7cadf7d60fe7f02be1706a39ed2053a035001503a6243d2fc1f17480785f3967e37a40532ed9ee4d2954f2150900e149c83c93f3f2360165ce1ff40cdd3fcf89b4263dba2685e71bf57c49839c8afcbe1e94cad1304aa447c01e6c6735edc9b77a0365c5cdad2af33797c757907ad112bc1f0a1f92e4ae6d14fe4b6f04c1f6d8c6e157798a08c9e75456f26066f00dce5d314f4f958a5792be3ec5ebd8b9d0c00d7eb08b594ae51d931469292c5b23b15da37463692601496911212c223461d46ea3825bf0c8588048e408e627a590192308add434fa559e2264d2f12336bf91aa95a8eb0afa9ee955d90fe5c18b54f2d721d37510c73c79a023d6e87f48fcbdb8985e5abf6af4a3627d16522329a3b53c3b5838cb9cb837cb546de59fa8ac1af3b0d9527f69d30612dc1737cc5f24ac860b723e29a306031a2d12f1308c1ecd13f0af944b242b21e57515fbfab0698b608ba1955b14c411db1ac20820cb73e2f59e78b29c50bb14658fc8d02be5ace1641b8f45b4a3ff6f6fb36191cbf6ddf8acee3ca217740cdcd232d5002a3d0657c15081"}) 8.154764065s ago: executing program 5 (id=866): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @private2, @mcast2}}}}, 0x0) syz_usb_disconnect(r0) pivot_root(&(0x7f0000000140)='./cgroup\x00', &(0x7f00000001c0)='./cgroup\x00') syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) 8.043121585s ago: executing program 3 (id=867): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x107842, 0xa) inotify_init() setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000180)=0xfffffffffffffffc, 0x8) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[], 0x0) r0 = add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) unshare(0x20000400) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x6f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x8000000002000a) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r1, 0x0, 0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000080)=0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r3, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x7e1d02, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xcabd8245) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r6, 0x5) 7.662910973s ago: executing program 1 (id=869): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) (async) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700), 0x1}}], 0x3fffd4c, 0x41) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x100, 0x70b906, 0x25dfdbfa, {0x0, 0x0, 0x74, r2, {0x8, 0xfff2}, {0xfff3, 0x9}, {0xa, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x20000804}, 0x200048c4) 7.526881011s ago: executing program 1 (id=870): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x20040084) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0x13}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0xdd86}], 0x2}, 0x5) 6.582346206s ago: executing program 5 (id=872): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYRES16=r6, @ANYBLOB="010028bd7000010000000f00000008000300", @ANYRES32=r7, @ANYBLOB="0500330001000000"], 0x24}}, 0x400c4) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r9, {0x10, 0x7}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) recvmsg$can_bcm(r4, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xfff3, 0xffea}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x4, 0x7, 0xd988, 0x3, 0x3, 0xa089, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x3, 0x92c, 0x1007, 0xffffffb2, 0xeaac, 0x2, 0x5, 0x4, 0x10000, 0xdf0, 0x8, 0x10000000, 0x9, 0x10001, 0xc6d, 0x88000001, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0xffffff9a, 0x3, 0xf, 0xbc, 0x5, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1000001, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x8, 0xfffffff9, 0xd, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x8, 0x6, 0x6, 0x8, 0x6, 0x7ff, 0x100, 0x1ff, 0x6, 0x3, 0x8, 0x8, 0x5, 0x2, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0x5, 0x9, 0xb, 0x5, 0x8000, 0x5, 0x6, 0x6, 0xfa, 0x3, 0x3, 0x10, 0x1ff, 0x3, 0x6, 0x60000000, 0x8, 0x2, 0x5, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x3, 0x6e4, 0x1, 0x5, 0x7, 0xb, 0x6, 0x4, 0x7ffffffd, 0x3, 0x99b, 0x9c4, 0x7f, 0x800003, 0x70, 0xff800, 0xfffffffd, 0x7, 0x5, 0xff, 0x7, 0x26, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x5, 0x8, 0x5, 0xe2f3, 0x4, 0x4, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x10000, 0x480, 0x64c, 0x8, 0x7, 0x8, 0x6, 0x5, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x10000, 0x4, 0x8, 0x8, 0x1000, 0x5, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x8, 0x10000, 0xb, 0xcf9, 0x8, 0x0, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x4007, 0xc28, 0x2, 0x400, 0x2, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xc, 0xe459, 0x7ff, 0xc7, 0x81, 0x40, 0x0, 0x2, 0x3feb, 0x7, 0x100, 0x100, 0x7, 0xfffffb98, 0xfffffffb, 0x4, 0x20001, 0x1003, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x5, 0x5, 0x92, 0x240, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r14) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='GPL\x00'}, 0x94) close(0x3) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r15, @ANYBLOB="09030000000000fdff072000adce04000280"], 0x18}, 0x1, 0xf000000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) 6.510702276s ago: executing program 3 (id=873): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x8}}, './file0\x00'}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce, &(0x7f0000000040)="3e272bcde25eef692eae4a955d3e9da49e7e806a33bfd68b16bcf9e22e8d7d9baa3a6815576c470b61d9aadd9ed15249299f131cd5bea0a83f245ed3ad3f40c0971dbf2311429e2fe6e4cfee2cd1506510805ce547d11e5850e3bda9e961e4f78f2de604d68e3ee944bb135d812c8e6655995c0d718647b7785b351a939bae93d2353f006bab33b9980047cd545ac2aa55f63d6202511ccd540c800db15e1b50fce9c3898018f44ca2dbbcecca930da5d6b49bf5076e0ac9ee1e4ded5c768b076391b0074413560c243103f7c281"}) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000180), &(0x7f00000001c0)={'U-', 0x8}, 0x16, 0x1) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000280)={0x8, r1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000380)) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000540)={0x0, &(0x7f00000003c0)=[@nested_amd_invlpga={0x17d, 0x20, {0x0, 0xa844}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @enable_nested={0x12c, 0x18}, @nested_load_syzos={0x136, 0x78, {0x1, 0x1, [@in_dx={0x69, 0x20, {0x1fa9, 0x4}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_load_syzos={0x136, 0x20, {0x1, 0xffffffffffffffff}}]}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x45, 0x8000, 0xffffffffffffffff, 0x2}}, @nested_amd_stgi={0x17e, 0x10}, @wrmsr={0x65, 0x20, {0x2e7, 0xe}}, @set_irq_handler={0xc8, 0x20, {0x2d}}], 0x150}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) r5 = getgid() write$FUSE_CREATE_OPEN(r4, &(0x7f00000009c0)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x9, 0x5, 0x6, 0x3, {0x6, 0x3, 0xe, 0x7, 0x6, 0xff, 0xb, 0x41e, 0x33, 0x1000, 0x9, 0xffffffffffffffff, r5, 0x0, 0x3}}, {0x0, 0x6}}}, 0xa0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000a80)={0x0, 0x6, 0x7fff, 0x8, 0xc, 0xaad}, &(0x7f0000000ac0)=0x14) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000b00)={r6, @in={{0x2, 0x4e20, @empty}}, 0x9, 0x3ff, 0xb15, 0xa86, 0x9}, &(0x7f0000000bc0)=0x98) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000c00)=[0x5e, 0x1d]) r7 = syz_open_dev$evdev(&(0x7f0000000c40), 0xa9, 0x40) ioctl$EVIOCSABS2F(r7, 0x401845ef, &(0x7f0000000c80)={0x8, 0x80, 0x4, 0x4, 0x3, 0x3c000000}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000cc0)=0x1, 0x4) ioctl$FS_IOC_SETVERSION(r7, 0x40087602, &(0x7f0000000d00)=0x9) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000d40)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000d80)={0x28, 0x1, r2, r8, 0x6c9, 0x7, 0x6}) r9 = openat2(r0, &(0x7f0000000dc0)='./file0/file0\x00', &(0x7f0000000e00)={0x20201, 0x91, 0x14}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r9, 0xc018937e, &(0x7f0000000e40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$EVIOCREVOKE(r10, 0x40044591, &(0x7f0000000e80)=0xd) r11 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x3e) pipe(&(0x7f0000000ec0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r11, r12, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000f80)=[@text32={0x20, &(0x7f0000000f00)="b9960800000f32c4e1f8283e670f080f22a6360f01c2c4e29dbc481beaac0000002201f3f20f063e0f225ec7442400dbcc0000c7442402faa40000c7442406000000000f011424", 0x47}], 0x1, 0x48, &(0x7f0000000fc0), 0x0) write$FUSE_STATX(r12, &(0x7f0000001000)={0x130, 0x0, 0x0, {0x147, 0x3, 0x0, '\x00', {0x7ff, 0x8, 0x100000001, 0x0, 0x0, r5, 0xc000, '\x00', 0x0, 0x2, 0x8, 0xc, {0xf2, 0x7ff}, {0x4, 0x2}, {0x3, 0x2}, {0x5, 0x2}, 0x2cba, 0x4, 0x5}}}, 0x130) 6.441872965s ago: executing program 3 (id=874): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0xd}]}}]}, 0x40}, 0x1, 0x1000000000000000, 0x0, 0x1}, 0x44814) 6.057927672s ago: executing program 4 (id=875): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, 0x0) shutdown(r0, 0x1) syz_io_uring_setup(0x2c1f, &(0x7f0000000100)={0x0, 0x27c2, 0x20, 0x2, 0x18e}, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000280)) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002a40)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24080058) 5.153836621s ago: executing program 2 (id=878): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x84}}, 0x0) add_key$fscrypt_provisioning(0x0, 0x0, &(0x7f0000000640)={0x1, 0x0, @d}, 0x18, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0x1000, &(0x7f0000ffc000/0x1000)=nil, 0x0, r3}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000068e000/0x4000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f000068b000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x40000183}) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x4a4}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) r8 = dup(r6) write$UHID_INPUT(r8, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.688565333s ago: executing program 2 (id=879): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0xfea000, 0x2000402) (async) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000002940)=[{0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000000280)="1b54beef9765f16d31f668d2db37f753", 0x10}], 0x1, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000800}], 0x1, 0x4054) (async) recvmsg(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000003f80)=""/4117, 0x1015}], 0x1}, 0x20f2) (async) r3 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000380)={r3, &(0x7f0000000100)='pids.current\x00', 0x140, &(0x7f00000002c0)={@_ha_fsid={[0x100, 0x1]}, {0x8, 0x1, 0x5}}, 0x9, &(0x7f0000000300), &(0x7f0000000340)=0x8}) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) lseek(r0, 0x1, 0x3) (async) r5 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r5, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r5, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r5, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="000e19000000"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r5, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r5, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="400b74000000e4cd75cd12d41ff123fc2bb8c43c1bb4d4d883e7626647427f24bdd094479a672f6493ddf55cbdc0ed81c72be578787efa4c5594a16ad6ea49b7611d03e156ad145a0dd88fef5ed6b4ad82c63120750d866f84e8d4d7cc02c5b16acb092c27385e77752d47"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r5, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r5, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="00fe6374978b09785a00"]}, &(0x7f0000000e80)={0x34, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000d00)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0xfc}, &(0x7f0000000d80)={0xc0, 0xa1, 0x4, 0x4}, 0x0, &(0x7f0000000600)={0xc0, 0xa2, 0x2f, "58ffeca636cf7fe58bb4ec34dbe9a00d8e832b540e3b3016a1ed85ee98953c06ded10000feffffff00"}}) (async) syz_usb_control_io$lan78xx(r5, 0x0, &(0x7f0000000280)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f00000003c0)) 4.579302743s ago: executing program 2 (id=880): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) setuid(0xee00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x8001) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000080)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) syz_open_pts(0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)={0x124, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x108, 0x1, 0x0, 0x1, [@nested={0x104, 0x10, 0x0, 0x1, [@nested={0x100, 0x8, 0x0, 0x1, [@typed={0x8, 0x13, 0x0, 0x0, @u32}, @typed={0x8, 0x10b, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0xc, 0xb2, 0x0, 0x0, @u64=0x9}, @nested={0xde, 0x3f, 0x0, 0x1, [@nested={0x4, 0x127}, @generic="ffb84017de4be626085c717cd68df496d047cb5cbc438412a6bfb086c914273579dbb6ec5f516a86b4f4828ee6f66a7ae8fd2bf14ff9fb1b8681e8079580a55b0dbadcb1b50668132e84f1985324b05d06406eccd3c9bf09ae30443225d1808c25f22a46cfff0eb72e205dfb0f84a35c3ab4ae4d6042f21dbca8470f78ac356544e589f91a40b04df302b3fde069aa5423ccf24633529b00ec17c5f906bf06bd819e759d9e7a6def3c5669ea272b16a424fc824287321d6ee2c01e8724c73042ab24bb3ac11dae9c8fbaf9a5e0b5281138faf7593a7c"]}]}]}]}, @typed={0x4, 0x8}]}, 0x124}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) io_uring_enter(0xffffffffffffffff, 0x3e9f, 0x57b8, 0x6, &(0x7f0000000140)={[0xc]}, 0x8) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "25beb819521eb41d", "cae5e9937ba539347092dd17d39ed975", 'LP3F', "50f641306280c4e9"}, 0x28) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="800000002e00090025bd700000dcdf250500000069000a"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet6_tcp_int(r4, 0x11a, 0x5, &(0x7f0000000100)=0x3ff, 0x4) r7 = getpgid(0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000140)={0x1, r7}) sendmmsg$unix(r2, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) r8 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r8, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x1, 0x0, @loopback={0xd0}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80, 0x16}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x44025) 4.255179237s ago: executing program 4 (id=881): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) exit(0xffff) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000240)={0x3, {{0x2, 0x4e22, @rand_addr=0x64010102}}, 0x0, 0x6, [{{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x24}}}, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e21, @multicast1}}]}, 0x390) close(0x3) 3.350041626s ago: executing program 1 (id=882): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'lo\x00', @multicast}) 3.302800752s ago: executing program 3 (id=883): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x80600) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setgroups(0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x58}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0], &(0x7f00000190c0), 0x0, 0x1, 0x0, 0x0, r1}) 3.302466388s ago: executing program 4 (id=884): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newtaction={0x8c, 0x32, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{0x78, 0x1, [@m_vlan={0x74, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0xfca8, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa6b}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x10001, 0xb, 0x10000000, 0x8, 0x4}, 0xfffffffd}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0xd2a0e76c05c99d4}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x53d}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x5}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d10009050700000000000009058973"], 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x20, 0x7, 0x68, {0x68, 0x4, "b36c3ef899ba6f3ad2961d32d62fb3a47905aaac74c5079d3aa31f160da485d37982ba8b1a5cc9abee20f11245e97c60b23e1b3df6d9572b6a8a1041e8a506ebda496440d8d078a670da360830becfcf99396c14a507ecc267cb97443d7f5e3bebd52ff127e7"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xf, 0xc4, "ac8ae96bef6ce80074c60b60feeab3be2fbbc01cd584be9e4b64f804c1271b94fe0c3a71ba3a717e4cdbfb777eabe76c8710a291afc8e12c33452be91ebd4dba7532a393e7769ee09b0a5548f45be00af7a7c556bc92ecba761a5db2f43661ffd38f59b05a0ed7d004c4fb1e2ab8ad8eb2efc35ce9618bbf181fcb4954785c278fab0fd25b3d0ddb726b03cf484c5298224f124bf78ff8341f1fe51d7be27acc72bea500edca20384adbf04b0de3080045fc7c013fb5b13d935d89f262e5d41a42d60c13"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0xa7a3, 0x7fff, 0x80000001, 0xfffd, 0xa, 0x4, 0x3, 0x2, 0x200, 0x2, 0x0, 0x3ff}}, &(0x7f0000000340)={0x20, 0x85, 0x4}, &(0x7f0000000380)={0x20, 0x83, 0x2}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$uac1(r1, &(0x7f00000005c0)={0x14, &(0x7f00000004c0)={0x20, 0xa, 0x93, {0x93, 0xd, "d66d6638de72f33f29fb569fb23b13e873ee67d6b265b068eeba6ebfcbe487e7a56be6752777f94c66409fb4c064c97649de53966e96485a3a958faec8643a30c91498818ca731d66d88d9ed8535bea69288bfa07c7a1ac32f4d2e5ba044bdb699e76949fd499ee8743b8b26a990dff1765579566ae8a0c1f8dff0075bb18d14af05e7f72d5b0a8d94ce9c0b1fdf0b08f4"}}, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000000940)={0x44, &(0x7f00000006c0)={0x0, 0x7, 0xb0, "8a712b1ab4149991bf89b7e289fc09599c3c0fd29775677a33f0051e7690d5c5a2487ebba5a2a22cbdea151f590539acfc970aafdb2179671a17e967ef6b8edb725bab754e2304d08e4a5e20dd31f00e790199515823f59345728aec23ce923edeb3f21bb3d99d0ebd496f47d58827113dd46eafa524d97a4b3c257fd7dfd7684b78701166d86d2cef86a4a3bd292a84c08c70fd0e8e5c34b2cd9f3a308450d1e24a92c0d9e67cfc35d907ccdf92f5c5"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000800)={0x20, 0x81, 0x3, "279f3b"}, &(0x7f0000000840)={0x20, 0x82, 0x3, "8a2d39"}, &(0x7f0000000880)={0x20, 0x83, 0x3, "732bd3"}, &(0x7f00000008c0)={0x20, 0x84, 0x4, "51dcab9d"}, &(0x7f0000000900)={0x20, 0x85, 0x3, "8f4b84"}}) r2 = openat$mice(0xffffff9c, &(0x7f0000000040), 0x1af281) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000000)={'dvmrp1\x00', 0x3}) 3.30203666s ago: executing program 2 (id=885): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) 3.17904986s ago: executing program 5 (id=886): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x100a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000400)={0x8, 0x200, 0x0, 'queue0\x00', 0x3}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000100)={0x2, 0x7fff, 0x0, 'queue0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = fsopen(&(0x7f00000000c0)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000280)='port', &(0x7f00000002c0)='0', 0x0) r5 = fsopen(&(0x7f00000003c0)='ntfs3\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20000003}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000340)={"81234738091a21bc05bb14892bebfcdcb38721cbfc1d366337371fa0aa1bd846"}) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='source', 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r6, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000200)='hybla', 0x5) shutdown(r6, 0x0) r7 = userfaultfd(0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x8000000) socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr(r3, &(0x7f0000000200)=@known='user.incfs.id\x00', &(0x7f0000000280)='+.%+\x00', 0x5, 0x2) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x40}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) close(0x3) 3.111862013s ago: executing program 3 (id=887): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r0, 0x0, r1, 0x0, 0x6, 0x5) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x0, 0x400, 0x70bd25, 0x7, {{}, {@void, @val={0xc, 0x99, {0xeb60, 0x6}}}}, [@NL80211_ATTR_DURATION={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008001}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = fsopen(&(0x7f0000002380)='ecryptfs\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fbdbdf250500000020000180090001007564703a73"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x110, r6, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xfc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x96}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x19fa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2fc3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x80}, 0x4000804) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbM:', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r7, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) 3.08636949s ago: executing program 1 (id=888): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401", @ANYRES16], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 2.382756159s ago: executing program 1 (id=889): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r3, &(0x7f00000040c0)={0x2020}, 0x2020) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r5, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet(r5, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$netlink(0x10, 0x3, 0x2) connect$inet6(r6, &(0x7f0000000800)={0xa, 0x4e24, 0xc0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc58e}, 0x1c) syz_open_dev$sg(0x0, 0x0, 0x40100) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r8 = socket(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000040)=0x4, 0x4) 2.184528878s ago: executing program 5 (id=890): socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) (async) unshare(0x400) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000440)={0x0, 0x0, 0x0}) 2.028762742s ago: executing program 5 (id=891): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, 0x0) shutdown(r0, 0x1) syz_io_uring_setup(0x2c1f, &(0x7f0000000100)={0x0, 0x27c2, 0x20, 0x2, 0x18e}, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000280)) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002a40)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24080058) 1.418848582s ago: executing program 1 (id=892): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0x13}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0xdd86}], 0x2}, 0x5) 607.620767ms ago: executing program 5 (id=893): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0xd}]}}]}, 0x40}, 0x1, 0x0, 0xc00, 0x1}, 0x44814) 100.452345ms ago: executing program 2 (id=894): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x14, r1, 0x100, 0x70bd26, 0x1}, 0x14}}, 0x44094) 100.156347ms ago: executing program 4 (id=895): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4000) fallocate(r2, 0x2, 0x100000000, 0x9c7) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="20144900000085ae18e1405feb2ba95153b76a25b81336800a77a30d1347951da49128c0e8eb4b0721395effbc7d086c37a6e0a102b8e7a88a0262c532cb9420fcce15bb513b5fc7d4d69a78e86edd46365241d4e1c9ce37dd0b45ee92388797a2700dc10938c5221d526d729ca4e7d645183e1fc51332730096dc7b45f3f6537845979237bef74183f2e48a304c7e0035de90e624bbaa982344adbbc2c7ad983f900603b2eb3ecfc8edb4f7af235737f3b233ec76c752196a289f10144492f04c61e04b645864db426e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) (async) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) pipe2(&(0x7f0000000080), 0x4000) (async) fallocate(r2, 0x2, 0x100000000, 0x9c7) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="20144900000085ae18e1405feb2ba95153b76a25b81336800a77a30d1347951da49128c0e8eb4b0721395effbc7d086c37a6e0a102b8e7a88a0262c532cb9420fcce15bb513b5fc7d4d69a78e86edd46365241d4e1c9ce37dd0b45ee92388797a2700dc10938c5221d526d729ca4e7d645183e1fc51332730096dc7b45f3f6537845979237bef74183f2e48a304c7e0035de90e624bbaa982344adbbc2c7ad983f900603b2eb3ecfc8edb4f7af235737f3b233ec76c752196a289f10144492f04c61e04b645864db426e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 50.930845ms ago: executing program 2 (id=896): r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000002880), 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r1 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000140)="240000004e0025000307f4f9f7ffffffffffffff00f4008bf68deaeff2dbba1786c9f221", 0x24) getdents64(r1, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r1, &(0x7f0000000fc0)=""/224, 0xe0) pwritev(r0, &(0x7f00000039c0)=[{&(0x7f00000028c0)='|', 0x1}], 0x1, 0x0, 0x10001) 0s ago: executing program 3 (id=897): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x400000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x4b564dff, 0x0, 0x8000000000000000}]}) kernel console output (not intermixed with test programs): : 'syz.4.555': attribute type 1 has an invalid length. [ 181.470624][ T7841] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.507409][ T7843] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 181.527180][ T7843] bond1: (slave batadv1): making interface the new active one [ 181.544817][ T7843] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 181.613241][ T7841] bond1 (unregistering): (slave batadv1): Releasing active interface [ 181.631345][ T7841] bond1 (unregistering): Released all slaves [ 181.722881][ T5757] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 181.753785][ T5757] usb 4-1: device descriptor read/8, error -71 [ 181.984021][ T6222] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 182.003697][ T5757] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 182.023598][ T5757] usb 4-1: device descriptor read/8, error -71 [ 182.133436][ T5757] usb usb4-port1: unable to enumerate USB device [ 182.162902][ T24] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 182.191678][ T6222] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 182.201325][ T6222] stv0680 3-1:4.0: last error: 32, command = 0x0 [ 182.212556][ T6222] usb 3-1: USB disconnect, device number 48 [ 182.315074][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 182.324300][ T24] usb 5-1: config 114 has an invalid interface number: 240 but max is 0 [ 182.334718][ T24] usb 5-1: config 114 has no interface number 0 [ 182.341025][ T24] usb 5-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 182.351840][ T24] usb 5-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 182.352985][ T7852] netlink: 'syz.5.558': attribute type 1 has an invalid length. [ 182.364576][ T24] usb 5-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 182.385192][ T24] usb 5-1: config 114 interface 240 has no altsetting 0 [ 182.395897][ T24] usb 5-1: string descriptor 0 read error: -22 [ 182.402379][ T24] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 182.411906][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.424939][ T7847] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 182.439060][ T7847] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 182.451951][ T24] ir_usb 5-1:114.240: IR Dongle converter detected [ 182.462038][ T7852] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.479557][ T7851] macvlan2: entered promiscuous mode [ 182.485141][ T7851] macvlan2: entered allmulticast mode [ 182.491055][ T7851] bond1: entered allmulticast mode [ 182.496792][ T7851] bond1: entered promiscuous mode [ 182.504719][ T7851] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 182.514817][ T7851] team0: Port device macvlan2 added [ 182.533939][ T7852] bond1: (slave ip6gretap1): making interface the new active one [ 182.544757][ T7852] ip6gretap1: entered promiscuous mode [ 182.551106][ T7852] ip6gretap1: entered allmulticast mode [ 182.562218][ T7852] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 182.665575][ T24] usb 5-1: IR Dongle converter now attached to ttyUSB0 [ 182.870731][ T6222] usb 5-1: USB disconnect, device number 45 [ 182.903939][ T6222] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 182.918940][ T6222] ir_usb 5-1:114.240: device disconnected [ 182.982919][ T5757] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 183.142853][ T5757] usb 6-1: Using ep0 maxpacket: 8 [ 183.149685][ T5757] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 183.163337][ T5757] usb 6-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 183.172599][ T5757] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.182923][ T5757] usb 6-1: Product: syz [ 183.187156][ T5757] usb 6-1: Manufacturer: syz [ 183.191802][ T5757] usb 6-1: SerialNumber: syz [ 183.404144][ T7860] input: syz1 as /devices/virtual/input/input21 [ 183.425539][ T7860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.437226][ T7860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.537158][ T7877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.566751][ T7877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.599942][ T5757] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 183.609727][ T5757] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 183.624456][ T5757] usb 6-1: USB disconnect, device number 27 [ 183.752864][ T24] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 183.908628][ T24] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 183.924756][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 183.939576][ T24] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 183.947286][ T7881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.948816][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.961833][ T7881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.974200][ T24] usb 5-1: config 0 descriptor?? [ 184.001238][ T7881] xt_hashlimit: size too large, truncated to 1048576 [ 184.299706][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.571'. [ 184.312344][ T7894] netlink: 60 bytes leftover after parsing attributes in process `syz.2.571'. [ 184.321441][ T7894] netlink: 16 bytes leftover after parsing attributes in process `syz.2.571'. [ 184.414403][ T24] corsair-psu 0003:1B1C:1C09.000E: unknown main item tag 0x0 [ 184.436895][ T24] corsair-psu 0003:1B1C:1C09.000E: unknown main item tag 0x0 [ 184.478077][ T24] corsair-psu 0003:1B1C:1C09.000E: unknown main item tag 0x0 [ 184.509279][ T24] corsair-psu 0003:1B1C:1C09.000E: unknown main item tag 0x0 [ 184.529974][ T24] corsair-psu 0003:1B1C:1C09.000E: unknown main item tag 0x0 [ 184.573829][ T24] corsair-psu 0003:1B1C:1C09.000E: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0 [ 184.653609][ T24] corsair-psu 0003:1B1C:1C09.000E: unable to initialize device (-38) [ 184.670877][ T24] corsair-psu 0003:1B1C:1C09.000E: probe with driver corsair-psu failed with error -38 [ 184.700297][ T7896] syz_tun: entered allmulticast mode [ 184.739733][ T7896] syz_tun: left allmulticast mode [ 184.908569][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 184.908585][ T29] audit: type=1326 audit(1780957921.277:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.1.575" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d34b9ce59 code=0x7ffc0000 [ 184.982243][ T7914] netlink: 'syz.4.565': attribute type 1 has an invalid length. [ 185.003808][ T29] audit: type=1326 audit(1780957921.307:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.1.575" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d34b9ce59 code=0x7ffc0000 [ 185.039922][ T29] audit: type=1326 audit(1780957921.307:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.1.575" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d34b9ce59 code=0x7ffc0000 [ 185.083949][ T29] audit: type=1326 audit(1780957921.307:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.1.575" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d34b5d68e code=0x7ffc0000 [ 185.111185][ T29] audit: type=1326 audit(1780957921.307:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.1.575" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d34b9ce59 code=0x7ffc0000 [ 185.181648][ T29] audit: type=1326 audit(1780957921.307:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.1.575" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d34b9ce59 code=0x7ffc0000 [ 185.225338][ T29] audit: type=1326 audit(1780957921.307:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.1.575" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d34b9ce59 code=0x7ffc0000 [ 185.254340][ T7914] bond1: option mode: invalid value (11) [ 185.274917][ T29] audit: type=1326 audit(1780957921.307:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.1.575" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f6d34b9ce59 code=0x7ffc0000 [ 185.301857][ T29] audit: type=1326 audit(1780957921.307:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.1.575" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d34b9ce59 code=0x7ffc0000 [ 185.327285][ T6222] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 185.374939][ T7914] bond1 (unregistering): Released all slaves [ 185.382231][ T29] audit: type=1326 audit(1780957921.307:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7915 comm="syz.1.575" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d34b9ce59 code=0x7ffc0000 [ 185.506115][ T6222] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.521343][ T6222] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.533477][ T6220] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 185.556818][ T6222] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 185.591829][ T6222] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.612417][ T6222] usb 3-1: config 0 descriptor?? [ 185.693922][ T6220] usb 4-1: Using ep0 maxpacket: 16 [ 185.702139][ T6220] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.713107][ T6220] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.727580][ T6220] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 185.727614][ T6220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.727625][ T6220] usb 4-1: Product: syz [ 185.727633][ T6220] usb 4-1: Manufacturer: syz [ 185.727640][ T6220] usb 4-1: SerialNumber: syz [ 185.750969][ T6220] usb 4-1: 0:192 : does not exist [ 185.958466][ T7924] netlink: 'syz.3.578': attribute type 1 has an invalid length. [ 185.976835][ T7924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.988251][ T7924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.997648][ T7924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.008462][ T7924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.018399][ T24] usb 4-1: USB disconnect, device number 53 [ 186.032848][ T6235] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 186.060807][ T7921] loop4: detected capacity change from 0 to 2640 [ 186.070283][ T7921] buffer_io_error: 127 callbacks suppressed [ 186.070545][ T7921] Buffer I/O error on dev loop4, logical block 0, async page read [ 186.086463][ T7921] Buffer I/O error on dev loop4, logical block 0, async page read [ 186.094480][ T7921] Buffer I/O error on dev loop4, logical block 0, async page read [ 186.102845][ T7921] Buffer I/O error on dev loop4, logical block 0, async page read [ 186.111083][ T7921] Buffer I/O error on dev loop4, logical block 0, async page read [ 186.121992][ T7921] Buffer I/O error on dev loop4, logical block 0, async page read [ 186.130565][ T7921] Buffer I/O error on dev loop4, logical block 0, async page read [ 186.138823][ T7921] Buffer I/O error on dev loop4, logical block 0, async page read [ 186.147443][ T7921] ldm_validate_partition_table(): Disk read failed. [ 186.154493][ T7939] Buffer I/O error on dev loop4, logical block 0, async page read [ 186.163611][ T7921] Buffer I/O error on dev loop4, logical block 0, async page read [ 186.172292][ T7921] Dev loop4: unable to read RDB block 0 [ 186.181193][ T7921] loop4: unable to read partition table [ 186.194986][ T6235] usb 6-1: Using ep0 maxpacket: 16 [ 186.197708][ T7921] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 186.203427][ T6235] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 186.228013][ T6235] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 186.241225][ T6235] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.253505][ T6235] usb 6-1: Product: syz [ 186.258515][ T6235] usb 6-1: Manufacturer: syz [ 186.265581][ T6235] usb 6-1: SerialNumber: syz [ 186.273198][ T6235] usb 6-1: config 0 descriptor?? [ 186.485595][ T24] usb 6-1: USB disconnect, device number 28 [ 186.632463][ T7944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.645549][ T7944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.862918][ T6235] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 187.015441][ T6220] usb 5-1: USB disconnect, device number 46 [ 187.032974][ T6235] usb 4-1: Using ep0 maxpacket: 16 [ 187.061443][ T5000] ldm_validate_partition_table(): Disk read failed. [ 187.086960][ T5000] Dev loop4: unable to read RDB block 0 [ 187.100304][ T5000] loop4: unable to read partition table [ 187.122975][ T7947] net_ratelimit: 12 callbacks suppressed [ 187.122992][ T7947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.372803][ T5717] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 187.545505][ T5717] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.556922][ T5717] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.568480][ T5717] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.578910][ T5717] usb 6-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 187.588167][ T5717] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.599730][ T5717] usb 6-1: config 0 descriptor?? [ 187.639997][ T6235] usb 4-1: unable to get BOS descriptor or descriptor too short [ 187.648866][ T6235] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 187.659626][ T6235] usb 4-1: can't read configurations, error -71 [ 188.000431][ T5000] ldm_validate_partition_table(): Disk read failed. [ 188.020688][ T5000] Dev loop4: unable to read RDB block 0 [ 188.029793][ T6235] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 188.043473][ T5000] loop4: unable to read partition table [ 188.053794][ T5717] wacom 0003:056A:0000.000F: unknown main item tag 0x0 [ 188.062370][ T5717] wacom 0003:056A:0000.000F: unknown main item tag 0x0 [ 188.089485][ T5717] wacom 0003:056A:0000.000F: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 188.105491][ T5717] wacom 0003:056A:0000.000F: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.5-1/input0 [ 188.132659][ T6222] usbhid 3-1:0.0: can't add hid device: -71 [ 188.145565][ T6222] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 188.156585][ T5717] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0000.000F/input/input22 [ 188.190359][ T6222] usb 3-1: USB disconnect, device number 49 [ 188.208943][ T6235] usb 4-1: unable to get BOS descriptor or descriptor too short [ 188.224535][ T6235] usb 4-1: not running at top speed; connect to a high speed hub [ 188.251182][ T7968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.593'. [ 188.274320][ T6235] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 188.288016][ T5717] usb 6-1: USB disconnect, device number 29 [ 188.297836][ T6235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.315363][ T6235] usb 4-1: Product: syz [ 188.320597][ T6235] usb 4-1: Manufacturer: syz [ 188.330097][ T6235] usb 4-1: SerialNumber: syz [ 188.395856][ T7970] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20001 [ 188.558376][ T6235] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 188.644895][ T6222] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 188.645239][ T7976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.663172][ T6221] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 188.663658][ T7976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.812909][ T6221] usb 5-1: Using ep0 maxpacket: 32 [ 188.828548][ T6222] usb 3-1: unable to get BOS descriptor or descriptor too short [ 188.833622][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.5.597'. [ 188.842270][ T6221] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.845497][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.5.597'. [ 188.858550][ T6222] usb 3-1: not running at top speed; connect to a high speed hub [ 188.872501][ T6221] usb 5-1: too many endpoints for config 0 interface 0 altsetting 11: 36, using maximum allowed: 30 [ 188.884862][ T6221] usb 5-1: config 0 interface 0 altsetting 11 bulk endpoint 0x6 has invalid maxpacket 255 [ 188.897227][ T6222] usb 3-1: config 3 has an invalid interface number: 36 but max is 0 [ 188.908012][ T6221] usb 5-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 36 [ 188.922154][ T6222] usb 3-1: config 3 has no interface number 0 [ 188.928514][ T6222] usb 3-1: config 3 interface 36 has no altsetting 0 [ 188.935472][ T6221] usb 5-1: config 0 interface 0 has no altsetting 0 [ 188.945656][ T6221] usb 5-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 188.955430][ T6222] usb 3-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice=31.fc [ 188.964744][ T6221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.974475][ T6222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.983028][ T6221] usb 5-1: Product: syz [ 188.987446][ T6221] usb 5-1: Manufacturer: syz [ 188.992111][ T6222] usb 3-1: Product: syz [ 188.996753][ T6221] usb 5-1: SerialNumber: syz [ 189.001514][ T6222] usb 3-1: Manufacturer: syz [ 189.007883][ T6222] usb 3-1: SerialNumber: syz [ 189.014152][ T6221] usb 5-1: config 0 descriptor?? [ 189.027816][ T7966] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 189.184229][ T6235] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 189.196242][ T6235] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 189.298617][ T6221] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 189.314049][ T7984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.334986][ T7985] loop9: detected capacity change from 0 to 7 [ 189.341680][ T7984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.372566][ T7984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.398105][ T7984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.406744][ T6235] usb 4-1: USB disconnect, device number 55 [ 189.422064][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.452667][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.470671][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.484860][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.496721][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.507739][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.517377][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.526948][ T7985] ldm_validate_partition_table(): Disk read failed. [ 189.548961][ T6221] usb 5-1: USB disconnect, device number 47 [ 189.552665][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.567134][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.576876][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.588575][ T7985] Dev loop9: unable to read RDB block 0 [ 189.605539][ T7993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.606547][ T7985] loop9: unable to read partition table [ 189.620244][ T7985] loop9: partition table beyond EOD, truncated [ 189.630387][ T7985] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 189.634852][ T7993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.657141][ T6222] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:3.36/input/input25 [ 189.671069][ T7993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.680628][ T4985] bcm5974 3-1:3.36: could not read from device [ 189.702253][ T7993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.735165][ T4985] bcm5974 3-1:3.36: could not read from device [ 189.758465][ T7993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.777955][ T6222] usb 3-1: USB disconnect, device number 50 [ 189.780233][ T4985] bcm5974 3-1:3.36: could not read from device [ 189.793210][ T7993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.858675][ T4985] bcm5974 3-1:3.36: could not read from device [ 189.871356][ T7993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.898019][ T7993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.951902][ T7993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.988285][ T7993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.021646][ T7993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.049755][ T7993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.104394][ T7997] MPI: mpi too large (113288 bits) [ 190.233130][ T5703] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 190.412947][ T5703] usb 6-1: Using ep0 maxpacket: 8 [ 190.421390][ T5703] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 190.443177][ T5703] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 190.454737][ T5703] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 190.475125][ T5703] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 190.502744][ T5703] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.523602][ T5703] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 190.527117][ T6222] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 190.552161][ T5703] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.694619][ T6222] usb 4-1: Using ep0 maxpacket: 8 [ 190.715235][ T6222] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 190.737477][ T6222] usb 4-1: config 0 has no interface number 0 [ 190.753645][ T6222] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 190.772074][ T6222] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 190.775292][ T8018] bond1: entered allmulticast mode [ 190.794031][ T5703] usb 6-1: GET_CAPABILITIES returned 0 [ 190.799690][ T5703] usbtmc 6-1:16.0: can't read capabilities [ 190.811260][ T6222] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 190.852175][ T6222] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 190.905845][ T6222] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 190.924715][ T6222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.931945][ T8027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.935812][ T6222] usb 4-1: config 0 descriptor?? [ 190.981799][ T8027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.006271][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 191.006309][ T29] audit: type=1326 audit(1780957927.377:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.5.600" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dd79ce59 code=0x7ffc0000 [ 191.036902][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 191.052075][ T29] audit: type=1326 audit(1780957927.417:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.5.600" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dd79ce59 code=0x7ffc0000 [ 191.084800][ T6222] ldusb 4-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 191.089709][ T5757] usb 6-1: USB disconnect, device number 30 [ 191.105181][ T29] audit: type=1326 audit(1780957927.417:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.5.600" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f00dd79ce59 code=0x7ffc0000 [ 191.131831][ T29] audit: type=1326 audit(1780957927.417:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.5.600" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dd79ce59 code=0x7ffc0000 [ 191.189423][ T5642] Bluetooth: hci3: command 0x0406 tx timeout [ 191.195959][ T5637] Bluetooth: hci0: command 0x0406 tx timeout [ 191.195975][ T5639] Bluetooth: hci2: command 0x0406 tx timeout [ 191.200660][ T29] audit: type=1326 audit(1780957927.417:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.5.600" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dd79ce59 code=0x7ffc0000 [ 191.204239][ T4950] Bluetooth: hci4: command 0x0406 tx timeout [ 191.292965][ T6222] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 191.373801][ T8041] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 191.547743][ T8049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.557955][ T8050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.568594][ T8050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.583762][ T8049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.904963][ T6222] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 192.022981][ T24] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 192.183216][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 192.210117][ T24] usb 6-1: config 8 has an invalid interface number: 39 but max is 0 [ 192.241835][ T24] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 192.274731][ T24] usb 6-1: config 8 has no interface number 0 [ 192.294628][ T24] usb 6-1: config 8 interface 39 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 192.317593][ T6979] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 192.327845][ T24] usb 6-1: config 8 interface 39 has no altsetting 0 [ 192.353489][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=c6e7, bcdDevice=62.77 [ 192.401862][ T24] usb 6-1: New USB device strings: Mfr=19, Product=2, SerialNumber=3 [ 192.424913][ T24] usb 6-1: Product: syz [ 192.439339][ T24] usb 6-1: Manufacturer: syz [ 192.453620][ T24] usb 6-1: SerialNumber: syz [ 192.603063][ T5757] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 192.651227][ T8087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.696980][ T24] ipheth 6-1:8.39: Unable to find endpoints [ 192.713304][ T8087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.731357][ T24] usb 6-1: USB disconnect, device number 31 [ 192.758576][ T8087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.773450][ T8087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.784567][ T5757] usb 3-1: unable to get BOS descriptor or descriptor too short [ 192.808998][ T5757] usb 3-1: config 3 has an invalid interface number: 92 but max is 0 [ 192.831547][ T5757] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 192.858906][ T5757] usb 3-1: config 3 has no interface number 0 [ 192.869070][ T5757] usb 3-1: config 3 interface 92 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 192.893159][ T5757] usb 3-1: config 3 interface 92 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 192.903150][ T5757] usb 3-1: config 3 interface 92 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.916172][ T5757] usb 3-1: config 3 interface 92 has no altsetting 0 [ 192.928274][ T5757] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=2e.d7 [ 192.938293][ T5757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.953987][ T5757] usb 3-1: Product: syz [ 192.962152][ T5757] usb 3-1: Manufacturer: syz [ 192.969117][ T5757] usb 3-1: SerialNumber: syz [ 193.158282][ T8094] netlink: 32 bytes leftover after parsing attributes in process `syz.4.627'. [ 193.201459][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.627'. [ 193.217221][ T5757] usb 3-1: probing VID:PID(0424:012C) [ 193.232435][ T5757] usb 3-1: vub300 testing BULK OUT EndPoint(0) 03 [ 193.256450][ T5757] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 193.301362][ T8095] netlink: 'syz.4.627': attribute type 16 has an invalid length. [ 193.328102][ T8095] netlink: 'syz.4.627': attribute type 17 has an invalid length. [ 193.332147][ T5757] vub300 3-1:3.92: probe with driver vub300 failed with error -22 [ 193.378880][ T5757] usb 3-1: USB disconnect, device number 51 [ 193.440500][ T6083] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 193.450598][ T6083] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 193.568940][ T8095] veth0_to_team: entered promiscuous mode [ 193.586750][ T8095] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 193.593869][ T6221] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 193.604285][ T6235] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 193.625230][ T6083] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.632401][ T6083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.712804][ T24] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 193.744924][ T6221] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 193.774774][ T6221] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 193.808448][ T6221] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 193.847547][ T6221] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 193.887095][ T6221] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 193.901492][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 193.918188][ T6221] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 193.924703][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.964031][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 193.975627][ T6221] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 193.984391][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 193.992894][ T6221] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 194.015632][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 194.037658][ T6221] usb 6-1: Product: syz [ 194.048024][ T6221] usb 6-1: Manufacturer: syz [ 194.058263][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 194.063965][ T8097] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 194.092225][ T6221] cdc_wdm 6-1:1.0: skipping garbage [ 194.106586][ T6221] cdc_wdm 6-1:1.0: skipping garbage [ 194.120560][ T6221] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 194.126745][ T24] usb 5-1: Product: syz [ 194.127301][ T6221] cdc_wdm 6-1:1.0: Unknown control protocol [ 194.138993][ T24] usb 5-1: Manufacturer: syz [ 194.178668][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 194.199142][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 194.210446][ T24] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 194.249591][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.257968][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.287893][ T8125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.302633][ T6220] usb 6-1: USB disconnect, device number 32 [ 194.317635][ T8125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.339057][ T5645] Bluetooth: hci3: Malformed LE Event: 0x0d [ 194.351550][ T8124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.364412][ T8124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.452792][ T6221] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 194.603451][ T6221] usb 3-1: Using ep0 maxpacket: 16 [ 194.619357][ T6221] usb 3-1: config 0 has an invalid descriptor of length 76, skipping remainder of the config [ 194.635465][ T6221] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 198, using maximum allowed: 30 [ 194.649088][ T6221] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 198 [ 194.665071][ T6221] usb 3-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 194.688500][ T6221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.713267][ T6221] usb 3-1: config 0 descriptor?? [ 194.936236][ T8122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.956223][ T8122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.990453][ T8133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.015971][ T8133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.150326][ T8133] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 195.163904][ T8122] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 195.406500][ T6221] usb 3-1: string descriptor 0 read error: -71 [ 195.459892][ T6221] usb 3-1: USB disconnect, device number 52 [ 195.707472][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.714955][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.832921][ T6221] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 196.024465][ T6221] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.064032][ T6221] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.101072][ T6221] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 196.113034][ T8148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.147326][ T8148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.166712][ T6235] usb 5-1: USB disconnect, device number 48 [ 196.180333][ T6221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.221891][ T6221] usb 3-1: config 0 descriptor?? [ 196.449563][ T8139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.491923][ T8139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.602846][ T6220] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 196.686861][ T8144] loop4: detected capacity change from 0 to 2640 [ 196.706094][ T8144] buffer_io_error: 184 callbacks suppressed [ 196.706120][ T8144] Buffer I/O error on dev loop4, logical block 0, async page read [ 196.746194][ T8144] Buffer I/O error on dev loop4, logical block 0, async page read [ 196.770279][ T8157] Buffer I/O error on dev loop4, logical block 0, async page read [ 196.795194][ T6220] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 196.806089][ T8143] Buffer I/O error on dev loop4, logical block 0, async page read [ 196.823899][ T8157] Buffer I/O error on dev loop4, logical block 0, async page read [ 196.834788][ T6220] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.848575][ T8144] Buffer I/O error on dev loop4, logical block 0, async page read [ 196.858861][ T6220] usb 6-1: Product: syz [ 196.876090][ T6220] usb 6-1: Manufacturer: syz [ 196.884033][ T6220] usb 6-1: SerialNumber: syz [ 196.895438][ T8144] Buffer I/O error on dev loop4, logical block 0, async page read [ 196.913318][ T6220] usb 6-1: config 0 descriptor?? [ 196.930149][ T8143] Buffer I/O error on dev loop4, logical block 0, async page read [ 196.934617][ T6220] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 196.955780][ T8144] Buffer I/O error on dev loop4, logical block 0, async page read [ 197.000047][ T8143] Buffer I/O error on dev loop4, logical block 0, async page read [ 197.056832][ T8144] ldm_validate_partition_table(): Disk read failed. [ 197.070350][ T8142] vlan2: entered promiscuous mode [ 197.083535][ T8144] Dev loop4: unable to read RDB block 0 [ 197.089269][ T8142] batadv0: entered promiscuous mode [ 197.106298][ T8144] loop4: unable to read partition table [ 197.118619][ T8144] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 197.175126][ T6085] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.184252][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 197.208199][ T6085] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.234606][ T6085] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.252872][ T6085] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.283985][ T5000] ldm_validate_partition_table(): Disk read failed. [ 197.291468][ T5000] Dev loop4: unable to read RDB block 0 [ 197.297949][ T5000] loop4: unable to read partition table [ 197.397145][ T5724] IPVS: starting estimator thread 0... [ 197.492787][ T8162] IPVS: using max 34 ests per chain, 81600 per kthread [ 197.536947][ T6220] gspca_sunplus: reg_r err -71 [ 197.542080][ T6220] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 197.556026][ T6220] usb 6-1: USB disconnect, device number 33 [ 197.604254][ T5000] ldm_validate_partition_table(): Disk read failed. [ 197.604652][ T5000] Dev loop4: unable to read RDB block 0 [ 197.605136][ T5000] loop4: unable to read partition table [ 197.741268][ T8170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.756246][ T8170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.770501][ T8172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.779688][ T8172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.892963][ T6233] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 197.925805][ T8172] fuse: Bad value for 'fd' [ 197.931854][ T8172] netlink: 'syz.3.650': attribute type 1 has an invalid length. [ 198.056840][ T6233] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 198.066329][ T6233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.074557][ T6233] usb 5-1: Product: syz [ 198.079034][ T6233] usb 5-1: Manufacturer: syz [ 198.083782][ T6233] usb 5-1: SerialNumber: syz [ 198.091877][ T6233] usb 5-1: config 0 descriptor?? [ 198.633566][ T6221] usbhid 3-1:0.0: can't add hid device: -71 [ 198.656868][ T6221] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 198.673679][ T6221] usb 3-1: USB disconnect, device number 53 [ 198.709398][ T8190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.721041][ T8190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.072831][ T6221] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 199.236139][ T6221] usb 3-1: no configurations [ 199.250417][ T6221] usb 3-1: can't read configurations, error -22 [ 199.397578][ T6221] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 199.506435][ T8200] ip6_vti0: mtu less than device minimum [ 199.533942][ T8198] ip6_vti0: mtu less than device minimum [ 199.595872][ T24] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 199.604303][ T6233] usb 5-1: Firmware version (0.0) predates our first public release. [ 199.617395][ T24] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 199.634686][ T6221] usb 3-1: no configurations [ 199.643768][ T6233] usb 5-1: Please update to version 0.2 or newer [ 199.654175][ T6221] usb 3-1: can't read configurations, error -22 [ 199.681708][ T6221] usb usb3-port1: attempt power cycle [ 199.992898][ T24] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 200.007272][ T8208] sctp: [Deprecated]: syz.3.661 (pid 8208) Use of int in max_burst socket option deprecated. [ 200.007272][ T8208] Use struct sctp_assoc_value instead [ 200.024941][ T5645] Bluetooth: hci0: unexpected event for opcode 0x0411 [ 200.074243][ T6221] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 200.082334][ T29] audit: type=1326 audit(1780957936.447:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8209 comm="syz.3.662" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f760b79ce59 code=0x0 [ 200.134020][ T6221] usb 3-1: no configurations [ 200.138909][ T6221] usb 3-1: can't read configurations, error -22 [ 200.144673][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.156625][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.167929][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 200.181159][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 200.190678][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.201365][ T24] usb 6-1: config 0 descriptor?? [ 200.272941][ T6221] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 200.294073][ T6221] usb 3-1: no configurations [ 200.298727][ T6221] usb 3-1: can't read configurations, error -22 [ 200.306151][ T6221] usb usb3-port1: unable to enumerate USB device [ 200.616150][ T24] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 200.661352][ T24] usb 5-1: USB disconnect, device number 49 [ 200.893598][ T8218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.923229][ T8218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.139619][ T6221] usb 6-1: USB disconnect, device number 34 [ 201.443429][ T6224] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 201.612805][ T6224] usb 5-1: Using ep0 maxpacket: 8 [ 201.627354][ T6224] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 201.654928][ T6224] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.676452][ T6224] usb 5-1: Product: syz [ 201.689448][ T6224] usb 5-1: Manufacturer: syz [ 201.702905][ T6224] usb 5-1: SerialNumber: syz [ 201.727020][ T6224] usb 5-1: config 0 descriptor?? [ 201.755313][ T6224] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 201.994734][ T6224] gspca_sonixj: reg_r err -71 [ 202.012207][ T6224] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 202.042640][ T6224] usb 5-1: USB disconnect, device number 50 [ 202.263244][ T6233] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 202.472837][ T6233] usb 3-1: Using ep0 maxpacket: 16 [ 202.497172][ T6233] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.523425][ T6233] usb 3-1: config 0 has no interfaces? [ 202.537661][ T6233] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 202.581404][ T6233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.610131][ T6233] usb 3-1: config 0 descriptor?? [ 202.899843][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'. [ 202.940733][ T5695] usb 3-1: USB disconnect, device number 58 [ 203.023042][ T6233] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 203.055593][ T24] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 203.202850][ T6233] usb 6-1: Using ep0 maxpacket: 16 [ 203.212880][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 203.218377][ T6233] usb 6-1: no configurations [ 203.229523][ T6233] usb 6-1: can't read configurations, error -22 [ 203.245210][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.266889][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.288528][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 203.319628][ T24] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 203.339024][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.358536][ T24] usb 5-1: config 0 descriptor?? [ 203.372851][ T6233] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 203.534157][ T6233] usb 6-1: Using ep0 maxpacket: 16 [ 203.543237][ T6233] usb 6-1: no configurations [ 203.548971][ T8277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.559458][ T6233] usb 6-1: can't read configurations, error -22 [ 203.566669][ T6233] usb usb6-port1: attempt power cycle [ 203.576161][ T8277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.743090][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.753708][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.754304][ T8283] netlink: 'syz.3.684': attribute type 30 has an invalid length. [ 203.762056][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.779485][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.821023][ T24] elecom 0003:056E:00FE.0012: unknown main item tag 0x4 [ 203.837467][ T24] elecom 0003:056E:00FE.0012: unknown main item tag 0x6 [ 203.852375][ T24] elecom 0003:056E:00FE.0012: unknown main item tag 0x5 [ 203.868655][ T24] elecom 0003:056E:00FE.0012: unknown main item tag 0x0 [ 203.882399][ T24] elecom 0003:056E:00FE.0012: unknown main item tag 0x0 [ 203.893166][ T24] elecom 0003:056E:00FE.0012: unknown main item tag 0x0 [ 203.900201][ T24] elecom 0003:056E:00FE.0012: unknown main item tag 0x0 [ 203.915805][ T24] elecom 0003:056E:00FE.0012: unknown main item tag 0x0 [ 203.933274][ T6233] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 203.935363][ T24] elecom 0003:056E:00FE.0012: unknown main item tag 0x0 [ 203.980274][ T24] elecom 0003:056E:00FE.0012: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.4-1/input0 [ 203.990285][ T8272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.002620][ T6233] usb 6-1: Using ep0 maxpacket: 16 [ 204.011701][ T6233] usb 6-1: no configurations [ 204.019692][ T6233] usb 6-1: can't read configurations, error -22 [ 204.029237][ T8272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.051743][ T6224] usb 5-1: USB disconnect, device number 51 [ 204.099506][ T8288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.109145][ T8288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.183166][ T6233] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 204.202921][ T6221] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 204.204129][ T6233] usb 6-1: Using ep0 maxpacket: 16 [ 204.204712][ T6233] usb 6-1: no configurations [ 204.204724][ T6233] usb 6-1: can't read configurations, error -22 [ 204.205027][ T6233] usb usb6-port1: unable to enumerate USB device [ 204.245864][ T8291] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 204.271679][ T8291] bond3 (unregistering): Released all slaves [ 204.384204][ T6221] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 204.396698][ T6221] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 204.407279][ T6221] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 204.417767][ T6221] usb 3-1: config 220 has no interface number 2 [ 204.424321][ T6221] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 204.437683][ T6221] usb 3-1: config 220 interface 0 has no altsetting 0 [ 204.444549][ T6221] usb 3-1: config 220 interface 76 has no altsetting 0 [ 204.451493][ T6221] usb 3-1: config 220 interface 1 has no altsetting 0 [ 204.462257][ T6221] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 204.474157][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 204.508938][ T6221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.524304][ T6221] usb 3-1: Product: syz [ 204.536027][ T6221] usb 3-1: Manufacturer: syz [ 204.542413][ T8296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.562152][ T6221] usb 3-1: SerialNumber: syz [ 204.606081][ T8296] netlink: 'syz.3.689': attribute type 13 has an invalid length. [ 204.700670][ T8296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.689'. [ 204.789003][ T6221] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 204.810184][ T6221] uvcvideo 3-1:220.0: No valid video chain found. [ 204.834347][ T6221] usb 3-1: selecting invalid altsetting 0 [ 204.896713][ T6221] usb 3-1: selecting invalid altsetting 0 [ 204.910644][ T6221] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 204.948926][ T6221] usb 3-1: USB disconnect, device number 59 [ 205.127765][ T8307] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 205.512881][ T6221] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 205.705648][ T6221] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.727902][ T6221] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.742248][ T6221] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 205.755655][ T6221] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.794214][ T6221] usb 5-1: config 0 descriptor?? [ 206.286225][ T8319] loop4: detected capacity change from 0 to 2640 [ 206.312125][ T8319] buffer_io_error: 169 callbacks suppressed [ 206.312136][ T8319] Buffer I/O error on dev loop4, logical block 0, async page read [ 206.366782][ T8319] Buffer I/O error on dev loop4, logical block 0, async page read [ 206.422231][ T8345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.434612][ T8319] Buffer I/O error on dev loop4, logical block 0, async page read [ 206.452342][ T8345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.501336][ T8319] Buffer I/O error on dev loop4, logical block 0, async page read [ 206.516202][ T8319] Buffer I/O error on dev loop4, logical block 0, async page read [ 206.609209][ T8319] Buffer I/O error on dev loop4, logical block 0, async page read [ 206.622883][ T24] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 206.644814][ T8318] Buffer I/O error on dev loop4, logical block 0, async page read [ 206.693098][ T8318] Buffer I/O error on dev loop4, logical block 0, async page read [ 206.720305][ T8343] Buffer I/O error on dev loop4, logical block 0, async page read [ 206.748058][ T8319] Buffer I/O error on dev loop4, logical block 0, async page read [ 206.790063][ T8319] ldm_validate_partition_table(): Disk read failed. [ 206.833889][ T8319] Dev loop4: unable to read RDB block 0 [ 206.860389][ T8319] loop4: unable to read partition table [ 206.883308][ T8319] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 206.943054][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.951477][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.959834][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.968157][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.976513][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.984842][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.122822][ T5695] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 207.289935][ T5695] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 207.318417][ T5695] usb 3-1: config 0 has no interface number 0 [ 207.341250][ T5695] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 207.381160][ T5695] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 207.427052][ T5695] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 207.481777][ T5695] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 207.528568][ T5695] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 207.576260][ T5695] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 207.625927][ T5695] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 207.674839][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.790397][ T5695] usb 3-1: config 0 descriptor?? [ 207.816181][ T8356] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 207.831608][ T8356] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 207.851404][ T5695] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 207.862478][ T8366] netlink: 'syz.3.710': attribute type 1 has an invalid length. [ 207.925297][ T8366] 8021q: adding VLAN 0 to HW filter on device bond3 [ 208.184444][ T24] usb 3-1: USB disconnect, device number 60 [ 208.198228][ T24] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 208.283580][ T8389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.317652][ T8389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.390247][ T6221] usbhid 5-1:0.0: can't add hid device: -71 [ 208.422118][ T6221] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 208.481340][ T6221] usb 5-1: USB disconnect, device number 52 [ 208.727192][ T6607] cgroup: fork rejected by pids controller in /syz5 [ 208.854338][ T6221] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 209.023153][ T6221] usb 5-1: Using ep0 maxpacket: 16 [ 209.049568][ T6221] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.094578][ T6221] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 209.184986][ T6221] usb 5-1: config 0 interface 0 has no altsetting 0 [ 209.192758][ T6221] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 209.202513][ T6221] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.215112][ T6221] usb 5-1: config 0 descriptor?? [ 209.226324][ T6221] usbhid 5-1:0.0: can't add hid device: -22 [ 209.257857][ T6221] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 209.278675][ T6089] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.592508][ T5724] usb 5-1: USB disconnect, device number 53 [ 209.668822][ T8403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.689240][ T8403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.798202][ T6089] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.890282][ T8405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.913368][ T8405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.914531][ T6089] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.947138][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.970230][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.979450][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.987653][ T5631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.989503][ T8405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.995528][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.056291][ T8405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.137800][ T6089] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.148778][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.149017][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.149228][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.149437][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.418448][ T8419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.457628][ T8419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.706925][ T6089] bridge_slave_1: left allmulticast mode [ 210.712976][ T6089] bridge_slave_1: left promiscuous mode [ 210.722042][ T6089] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.738543][ T6089] bridge_slave_0: left allmulticast mode [ 210.744657][ T6089] bridge_slave_0: left promiscuous mode [ 210.750586][ T6089] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.758268][ T6221] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 210.881574][ T6089] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 210.898610][ T6089] ip6gretap1 (unregistering): left allmulticast mode [ 210.932763][ T6221] usb 3-1: Using ep0 maxpacket: 8 [ 210.977202][ T6221] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 210.992421][ T6221] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 211.016583][ T6221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.025776][ T6221] usb 3-1: Product: syz [ 211.030086][ T6221] usb 3-1: Manufacturer: syz [ 211.039354][ T6221] usb 3-1: SerialNumber: syz [ 211.055815][ T6221] usb 3-1: config 0 descriptor?? [ 211.075297][ T6221] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 211.100165][ T6221] usb 3-1: setting power ON [ 211.115183][ T6221] dvb-usb: bulk message failed: -22 (2/0) [ 211.174968][ T6221] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 211.187219][ T6221] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 211.211347][ T6221] usb 3-1: media controller created [ 211.241151][ T6221] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 211.286132][ T6221] usb 3-1: selecting invalid altsetting 6 [ 211.307150][ T6089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.321813][ T6221] usb 3-1: digital interface selection failed (-22) [ 211.332813][ T24] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 211.334871][ T6221] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 211.354883][ T6089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.386799][ T6221] usb 3-1: setting power OFF [ 211.396945][ T6089] bond0 (unregistering): Released all slaves [ 211.427031][ T6221] dvb-usb: bulk message failed: -22 (2/0) [ 211.434208][ T6089] bond1 (unregistering): left allmulticast mode [ 211.442758][ T6221] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 211.452287][ T6089] bond1 (unregistering): left promiscuous mode [ 211.466275][ T6221] (NULL device *): no alternate interface [ 211.469226][ T6089] team0: Port device macvlan2 removed [ 211.502099][ T6089] bond1 (unregistering): Released all slaves [ 211.522981][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 211.534981][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 211.544411][ T24] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 211.552912][ T24] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 211.566902][ T24] usb 5-1: config 14 has no interface number 0 [ 211.580016][ T6221] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 211.598631][ T24] usb 5-1: config 14 has no interface number 1 [ 211.602278][ T6221] usb 3-1: USB disconnect, device number 61 [ 211.631591][ T24] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 211.676396][ T24] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 211.741161][ T24] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 211.790259][ T24] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 211.827459][ T24] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 211.881474][ T24] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.933937][ T24] usb 5-1: config 14 interface 57 has no altsetting 0 [ 211.952385][ T24] usb 5-1: config 14 interface 228 has no altsetting 0 [ 211.984038][ T24] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 211.996608][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.999831][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.737'. [ 212.014502][ T24] usb 5-1: Product: syz [ 212.020272][ T24] usb 5-1: Manufacturer: syz [ 212.025573][ T24] usb 5-1: SerialNumber: syz [ 212.072904][ T5631] Bluetooth: hci1: command tx timeout [ 212.263115][ T8410] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.283590][ T8410] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.294664][ T6221] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 212.306831][ T8462] fuse: Unknown parameter 'fd00000000000000000005' [ 212.326873][ T8410] bridge_slave_0: entered allmulticast mode [ 212.345770][ T8410] bridge_slave_0: entered promiscuous mode [ 212.455639][ T8410] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.462956][ T6221] usb 3-1: Using ep0 maxpacket: 16 [ 212.468864][ T8410] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.477930][ T6221] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.491891][ T8410] bridge_slave_1: entered allmulticast mode [ 212.495920][ T24] legousbtower 5-1:14.57: interrupt endpoints not found [ 212.498022][ T6221] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.523311][ T8410] bridge_slave_1: entered promiscuous mode [ 212.556493][ T6221] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 212.599581][ T6221] usb 3-1: config 0 interface 0 has no altsetting 0 [ 212.613929][ T6089] hsr_slave_0: left promiscuous mode [ 212.628430][ T6221] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 212.645960][ T6089] hsr_slave_1: left promiscuous mode [ 212.658594][ T6089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.675464][ T6221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.692461][ T6089] batadv0: mtu less than device minimum [ 212.710664][ T6221] usb 3-1: config 0 descriptor?? [ 212.721998][ T6089] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 212.736501][ T6089] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 212.748046][ T6089] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 212.759465][ T6089] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 212.770954][ T6089] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 212.810812][ T6089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.823088][ T6089] batman_adv: batadv0: Interface deactivated: dummy0 [ 212.829915][ T6089] batman_adv: batadv0: Removing interface: dummy0 [ 212.873823][ T6089] veth1_macvtap: left promiscuous mode [ 212.883570][ T6089] veth0_macvtap: left promiscuous mode [ 212.894121][ T24] legousbtower 5-1:14.228: get version request failed: -121 [ 212.900412][ T6089] veth1_vlan: left promiscuous mode [ 212.918910][ T6089] veth0_vlan: left promiscuous mode [ 212.936280][ T24] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -121 [ 213.071987][ T8475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.095281][ T8475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.210595][ T8457] netlink: 68 bytes leftover after parsing attributes in process `syz.2.736'. [ 213.239294][ T8457] netlink: 48 bytes leftover after parsing attributes in process `syz.2.736'. [ 213.288203][ T6221] hid (null): unknown global tag 0x9a [ 213.293777][ T6221] hid (null): unknown global tag 0xe [ 213.299128][ T6221] hid (null): invalid report_size -1989522664 [ 213.307482][ T6221] hid (null): unknown global tag 0xd [ 213.320606][ T6221] hid (null): unknown global tag 0xe [ 213.331671][ T6221] hid (null): unknown global tag 0xe [ 213.347416][ T6221] hid (null): unknown global tag 0xe [ 213.366266][ T6221] hid (null): unknown global tag 0x4b [ 213.377908][ T6221] hid (null): unknown global tag 0xe [ 213.392160][ T6221] hid (null): unknown global tag 0xd [ 213.405580][ T6221] hid (null): unknown global tag 0xe [ 213.418405][ T6221] hid (null): global environment stack underflow [ 213.488253][ T6221] usb 3-1: USB disconnect, device number 62 [ 213.525678][ T6089] team0 (unregistering): Port device team_slave_1 removed [ 213.561263][ T6089] team0 (unregistering): Port device team_slave_0 removed [ 213.704419][ T8435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.731112][ T5295] 8021q: adding VLAN 0 to HW filter on device eth1 [ 213.744742][ T8435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.752824][ T8410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.808297][ T5695] hid_parser_main: 48 callbacks suppressed [ 213.808329][ T5695] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 213.825260][ T8410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.827806][ T5695] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 213.942580][ T8410] team0: Port device team_slave_0 added [ 213.966907][ T8410] team0: Port device team_slave_1 added [ 214.122457][ T8410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.138105][ T8410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.167906][ T5631] Bluetooth: hci1: command tx timeout [ 214.182920][ T8410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.195650][ T8410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.202608][ T8410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.228918][ T8410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.339418][ T8410] hsr_slave_0: entered promiscuous mode [ 214.376196][ T8410] hsr_slave_1: entered promiscuous mode [ 214.390507][ T8410] debugfs: 'hsr0' already exists in 'hsr' [ 214.404263][ T8410] Cannot create hsr debugfs directory [ 214.574861][ T8495] fuse: Bad value for 'fd' [ 214.769400][ T8508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.810324][ T8508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.514539][ T6233] usb 5-1: USB disconnect, device number 54 [ 215.920854][ T8410] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 215.983994][ T8410] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 216.008260][ T8410] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 216.075912][ T8410] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 216.109846][ T8410] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 216.187733][ T8410] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 216.208864][ T8410] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 216.223198][ T5631] Bluetooth: hci1: command tx timeout [ 216.302590][ T8410] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 216.463044][ C1] net_ratelimit: 21 callbacks suppressed [ 216.463062][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.477198][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.485467][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.493739][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.502062][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.833439][ T8594] ip6gre1: left promiscuous mode [ 217.875188][ T8410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.889288][ T8597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.917801][ T8597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.979973][ T8597] fuse: Unknown parameter 'gpoup_id' [ 218.312837][ T5631] Bluetooth: hci1: command tx timeout [ 218.362787][ T6221] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 218.516794][ T6221] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 218.526449][ T6221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.537905][ T6221] usb 5-1: Product: syz [ 218.546188][ T6221] usb 5-1: Manufacturer: syz [ 218.551025][ T6221] usb 5-1: SerialNumber: syz [ 218.554242][ T8410] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.555893][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 218.584889][ T6979] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.592091][ T6979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.600964][ T6221] usb 5-1: config 0 descriptor?? [ 218.628583][ T6083] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.635806][ T6083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.790893][ T8410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.877685][ T8610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.889277][ T8610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.926354][ T6221] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 218.973753][ T8410] veth0_vlan: entered promiscuous mode [ 218.997315][ T8410] veth1_vlan: entered promiscuous mode [ 219.072591][ T8410] veth0_macvtap: entered promiscuous mode [ 219.087832][ T8410] veth1_macvtap: entered promiscuous mode [ 219.115154][ T8410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.135796][ T8410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.238987][ T6089] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.251758][ T6089] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.268788][ T6089] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.284973][ T6221] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 219.299280][ T6089] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.333334][ T6221] usb 5-1: USB disconnect, device number 55 [ 219.561666][ T6083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.582971][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.584554][ T6083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.591317][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.607025][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.615557][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.624283][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.662291][ T6979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.672311][ T6979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.690395][ T8614] netlink: 112 bytes leftover after parsing attributes in process `syz.1.761'. [ 219.718753][ T8614] netlink: 112 bytes leftover after parsing attributes in process `syz.1.761'. [ 220.055153][ T6081] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.232397][ T6081] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.408784][ T6081] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.669651][ T6081] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.209686][ T8625] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 221.264837][ T8625] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 221.393854][ T8625] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 221.400794][ T8625] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 221.518236][ T6081] bridge_slave_1: left allmulticast mode [ 221.529198][ T6081] bridge_slave_1: left promiscuous mode [ 221.558228][ T6081] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.603931][ T6081] bridge_slave_0: left allmulticast mode [ 221.627860][ T8625] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 221.641087][ T6081] bridge_slave_0: left promiscuous mode [ 221.651246][ T8625] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 221.672067][ T6081] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.761840][ T8625] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 221.783747][ T8625] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 221.881434][ T8625] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 221.907461][ T8625] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 221.943072][ T8625] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 222.222806][ T5631] Bluetooth: hci0: command 0x0406 tx timeout [ 222.567410][ T6081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.607592][ T6081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.652046][ T6081] bond0 (unregistering): Released all slaves [ 222.721758][ T5295] 8021q: adding VLAN 0 to HW filter on device eth1 [ 222.791541][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.799830][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.808117][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.816459][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.824822][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.423339][ T5631] Bluetooth: hci2: command 0x0406 tx timeout [ 223.594338][ T8707] netlink: 'syz.2.778': attribute type 1 has an invalid length. [ 223.606116][ T8707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.647749][ T8707] netlink: 'syz.2.778': attribute type 1 has an invalid length. [ 223.662406][ T8707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.673231][ T5631] Bluetooth: hci3: command 0x0406 tx timeout [ 223.822848][ T5631] Bluetooth: hci4: command 0x0406 tx timeout [ 223.906076][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 223.944091][ T6081] hsr_slave_0: left promiscuous mode [ 223.989573][ T6081] hsr_slave_1: left promiscuous mode [ 224.012582][ T6081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.041289][ T6081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.051975][ T6081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.059796][ T6081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.085398][ T6081] veth1_macvtap: left promiscuous mode [ 224.091031][ T6081] veth0_macvtap: left promiscuous mode [ 224.098182][ T6081] veth1_vlan: left promiscuous mode [ 224.105235][ T6081] veth0_vlan: left promiscuous mode [ 224.212827][ T5724] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 224.222250][ T6081] team0 (unregistering): Port device batadv1 removed [ 224.302959][ T5631] Bluetooth: hci0: command 0x0406 tx timeout [ 224.363684][ T5724] usb 5-1: Using ep0 maxpacket: 8 [ 224.379830][ T5724] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 224.407431][ T5724] usb 5-1: can't read configurations, error -22 [ 224.552884][ T5724] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 224.590629][ T6081] team0 (unregistering): Port device team_slave_1 removed [ 224.615273][ T6081] team0 (unregistering): Port device team_slave_0 removed [ 224.715334][ T5724] usb 5-1: Using ep0 maxpacket: 8 [ 224.732171][ T5724] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 224.744255][ T5724] usb 5-1: can't read configurations, error -22 [ 224.764853][ T5724] usb usb5-port1: attempt power cycle [ 224.933476][ T5295] 8021q: adding VLAN 0 to HW filter on device eth2 [ 225.121523][ T5724] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 225.155595][ T5724] usb 5-1: Using ep0 maxpacket: 8 [ 225.200759][ T5724] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 225.214859][ T5724] usb 5-1: can't read configurations, error -22 [ 225.372765][ T5724] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 225.421556][ T5724] usb 5-1: Using ep0 maxpacket: 8 [ 225.444530][ T5724] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 225.473745][ T5724] usb 5-1: can't read configurations, error -22 [ 225.502844][ T5631] Bluetooth: hci2: command 0x0406 tx timeout [ 225.515949][ T5724] usb usb5-port1: unable to enumerate USB device [ 225.579384][ T8748] netlink: 'syz.3.787': attribute type 10 has an invalid length. [ 225.620995][ T8748] netlink: 40 bytes leftover after parsing attributes in process `syz.3.787'. [ 225.709259][ T8748] team0: Failed to send options change via netlink (err -105) [ 225.743019][ T5631] Bluetooth: hci3: command 0x0406 tx timeout [ 225.759953][ T8748] team0: Port device geneve1 added [ 225.799104][ T6089] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.826659][ T6089] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.858356][ T6089] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.876944][ T6089] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.907166][ T5631] Bluetooth: hci4: command 0x0406 tx timeout [ 225.978271][ T8763] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 225.985854][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 226.078202][ T8763] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 226.148347][ T8769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.157007][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.217066][ T8769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.230856][ T6081] IPVS: stop unused estimator thread 0... [ 226.289342][ T8769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.332444][ T8769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.681389][ T6233] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 226.805277][ T5295] 8021q: adding VLAN 0 to HW filter on device eth3 [ 226.844469][ T6233] usb 6-1: Using ep0 maxpacket: 16 [ 227.510551][ T6233] usb 6-1: unable to get BOS descriptor or descriptor too short [ 227.547199][ T6233] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 227.599268][ T6233] usb 6-1: can't read configurations, error -71 [ 227.720921][ T8822] FAULT_INJECTION: forcing a failure. [ 227.720921][ T8822] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 227.773518][ T8822] CPU: 0 UID: 0 PID: 8822 Comm: syz.5.804 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.773545][ T8822] Tainted: [L]=SOFTLOCKUP [ 227.773550][ T8822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 227.773559][ T8822] Call Trace: [ 227.773565][ T8822] [ 227.773572][ T8822] dump_stack_lvl+0xe8/0x150 [ 227.773596][ T8822] should_fail_ex+0x412/0x560 [ 227.773620][ T8822] _copy_from_user+0x2d/0xb0 [ 227.773645][ T8822] ___sys_recvmsg+0x175/0x590 [ 227.773661][ T8822] ? get_pid_task+0x20/0x1f0 [ 227.773679][ T8822] ? get_pid_task+0x20/0x1f0 [ 227.773702][ T8822] ? __pfx____sys_recvmsg+0x10/0x10 [ 227.773723][ T8822] ? __fget_files+0x2a/0x420 [ 227.773758][ T8822] ? __fget_files+0x3a0/0x420 [ 227.773786][ T8822] __x64_sys_recvmsg+0x1ba/0x2a0 [ 227.773805][ T8822] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 227.773831][ T8822] ? __pfx_ksys_write+0x10/0x10 [ 227.773860][ T8822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.773878][ T8822] do_syscall_64+0x174/0x580 [ 227.773894][ T8822] ? trace_irq_disable+0x3b/0x140 [ 227.773916][ T8822] ? clear_bhb_loop+0x40/0x90 [ 227.773936][ T8822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.773952][ T8822] RIP: 0033:0x7fe0ca79ce59 [ 227.773968][ T8822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.773981][ T8822] RSP: 002b:00007fe0cb5b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 227.773998][ T8822] RAX: ffffffffffffffda RBX: 00007fe0caa15fa0 RCX: 00007fe0ca79ce59 [ 227.774010][ T8822] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 227.774020][ T8822] RBP: 00007fe0cb5b5090 R08: 0000000000000000 R09: 0000000000000000 [ 227.774029][ T8822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.774039][ T8822] R13: 00007fe0caa16038 R14: 00007fe0caa15fa0 R15: 00007fe0cab3fa48 [ 227.774065][ T8822] [ 227.802943][ T5695] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 228.063571][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 228.346562][ T5295] 8021q: adding VLAN 0 to HW filter on device eth4 [ 228.352896][ T5695] usb 5-1: Using ep0 maxpacket: 8 [ 228.370221][ T5695] usb 5-1: config 1 interface 0 has no altsetting 0 [ 228.381477][ T5695] usb 5-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.40 [ 228.438667][ T5695] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.469495][ T5695] usb 5-1: Product: syz [ 228.481090][ T5695] usb 5-1: Manufacturer: syz [ 228.508463][ T5695] usb 5-1: SerialNumber: syz [ 228.523613][ T6233] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 228.692409][ T6233] usb 6-1: Using ep0 maxpacket: 32 [ 228.722541][ T6233] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 228.767090][ T6233] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.781536][ T5695] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input27 [ 228.816969][ T4985] bcm5974 5-1:1.0: could not read from device [ 228.835241][ T4985] bcm5974 5-1:1.0: could not read from device [ 228.847371][ T6233] usb 6-1: config 0 descriptor?? [ 228.870138][ T4985] bcm5974 5-1:1.0: could not read from device [ 228.880879][ T5695] usb 5-1: USB disconnect, device number 60 [ 229.126047][ T6233] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 229.166844][ T6233] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 229.224399][ T6233] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 229.253141][ T6233] usb 6-1: media controller created [ 229.293092][ T6083] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.323691][ T6083] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.341857][ T6233] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 229.350436][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.350582][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.350719][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.350844][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.497906][ T8853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.535789][ T8853] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.572265][ T8853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.702849][ T6221] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 229.740617][ T8853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.765523][ T8862] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 229.772083][ T8862] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 229.782046][ T8862] vhci_hcd vhci_hcd.0: Device attached [ 229.792132][ T8853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.819615][ T8853] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 229.831378][ T8853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.843976][ T8863] vhci_hcd: connection closed [ 229.847049][ T6978] vhci_hcd vhci_hcd.2: stop threads [ 229.849654][ T8853] veth1_vlan: left promiscuous mode [ 229.860636][ T6978] vhci_hcd vhci_hcd.2: release socket [ 229.869443][ T8853] veth0_vlan: left promiscuous mode [ 229.877151][ T6221] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 229.885313][ T8866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.895837][ T6978] vhci_hcd vhci_hcd.2: disconnect device [ 229.896070][ T8853] veth0_vlan: entered promiscuous mode [ 229.904666][ T6221] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 229.910145][ T8866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.922217][ T6221] usb 5-1: Product: syz [ 229.928695][ T6221] usb 5-1: SerialNumber: syz [ 229.937837][ T6221] usb 5-1: config 0 descriptor?? [ 229.938594][ T8853] veth1_vlan: entered promiscuous mode [ 229.959568][ T8853] veth1_macvtap: left promiscuous mode [ 229.966353][ T8853] veth0_macvtap: left promiscuous mode [ 229.974708][ T8853] veth0_macvtap: entered promiscuous mode [ 229.981737][ T8853] veth1_macvtap: entered promiscuous mode [ 229.994716][ T8853] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 230.004667][ T8853] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 230.013299][ T8853] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 230.021962][ T8853] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 230.033131][ T8853] ip6tnl1: left allmulticast mode [ 230.040596][ T8853] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.049506][ T8853] 8021q: adding VLAN 0 to HW filter on device bond2 [ 230.057043][ T8853] A link change request failed with some changes committed already. Interface rose0 may have been left with an inconsistent configuration, please check. [ 230.073465][ T6083] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.088275][ T6076] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.095709][ T6076] bridge0: port 1(bridge_slave_0) entered listening state [ 230.114688][ T6076] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.121834][ T6076] bridge0: port 2(bridge_slave_1) entered listening state [ 230.140846][ T6233] az6027: usb out operation failed. (-71) [ 230.154443][ T6233] stb0899_attach: Driver disabled by Kconfig [ 230.163237][ T6221] hso 5-1:0.0: Failed to find BULK eps [ 230.180691][ T6233] az6027: no front-end attached [ 230.180691][ T6233] [ 230.205269][ T6233] az6027: usb out operation failed. (-71) [ 230.221249][ T6233] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 230.247968][ T6233] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input28 [ 230.267153][ T6083] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.268014][ T6233] dvb-usb: schedule remote query interval to 400 msecs. [ 230.285968][ T6233] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 230.298718][ T6233] usb 6-1: USB disconnect, device number 41 [ 230.365927][ T6221] usb 5-1: USB disconnect, device number 61 [ 230.377316][ T6233] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 230.424983][ T8872] FAULT_INJECTION: forcing a failure. [ 230.424983][ T8872] name failslab, interval 1, probability 0, space 0, times 1 [ 230.438421][ T8872] CPU: 0 UID: 0 PID: 8872 Comm: syz.3.816 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.438447][ T8872] Tainted: [L]=SOFTLOCKUP [ 230.438453][ T8872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 230.438463][ T8872] Call Trace: [ 230.438470][ T8872] [ 230.438476][ T8872] dump_stack_lvl+0xe8/0x150 [ 230.438500][ T8872] should_fail_ex+0x412/0x560 [ 230.438523][ T8872] should_failslab+0xa8/0x100 [ 230.438542][ T8872] __kmalloc_noprof+0xe8/0x760 [ 230.438562][ T8872] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 230.438582][ T8872] ? sock_kmalloc+0xd6/0x160 [ 230.438612][ T8872] sock_kmalloc+0xd6/0x160 [ 230.438632][ T8872] af_alg_alloc_areq+0x99/0x200 [ 230.438652][ T8872] skcipher_recvmsg+0x321/0x1140 [ 230.438688][ T8872] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 230.438705][ T8872] ? __lock_acquire+0x6b5/0x2cf0 [ 230.438721][ T8872] ? aa_sock_msg_perm+0xf1/0x1b0 [ 230.438746][ T8872] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 230.438765][ T8872] ? security_socket_recvmsg+0x7e/0x2c0 [ 230.438783][ T8872] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 230.438802][ T8872] sock_recvmsg+0x172/0x1b0 [ 230.438825][ T8872] ____sys_recvmsg+0x1e6/0x4a0 [ 230.438850][ T8872] ? __pfx_____sys_recvmsg+0x10/0x10 [ 230.438882][ T8872] ? import_iovec+0x73/0xa0 [ 230.438904][ T8872] ___sys_recvmsg+0x215/0x590 [ 230.438919][ T8872] ? get_pid_task+0x20/0x1f0 [ 230.438943][ T8872] ? __pfx____sys_recvmsg+0x10/0x10 [ 230.438964][ T8872] ? __fget_files+0x2a/0x420 [ 230.439000][ T8872] ? __fget_files+0x3a0/0x420 [ 230.439028][ T8872] __x64_sys_recvmsg+0x1ba/0x2a0 [ 230.439047][ T8872] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 230.439073][ T8872] ? __pfx_ksys_write+0x10/0x10 [ 230.439102][ T8872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.439116][ T8872] do_syscall_64+0x174/0x580 [ 230.439129][ T8872] ? trace_irq_disable+0x3b/0x140 [ 230.439151][ T8872] ? clear_bhb_loop+0x40/0x90 [ 230.439170][ T8872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.439186][ T8872] RIP: 0033:0x7f760b79ce59 [ 230.439203][ T8872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.439215][ T8872] RSP: 002b:00007f760c610028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 230.439232][ T8872] RAX: ffffffffffffffda RBX: 00007f760ba15fa0 RCX: 00007f760b79ce59 [ 230.439244][ T8872] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 230.439254][ T8872] RBP: 00007f760c610090 R08: 0000000000000000 R09: 0000000000000000 [ 230.439263][ T8872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.439272][ T8872] R13: 00007f760ba16038 R14: 00007f760ba15fa0 R15: 00007f760bb3fa48 [ 230.439300][ T8872] [ 230.822505][ T8877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.840912][ T8877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.851637][ T8879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.871933][ T8879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.906573][ T8881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.820'. [ 230.945608][ T8881] team1: entered promiscuous mode [ 230.950779][ T8881] team1: entered allmulticast mode [ 230.970626][ T8881] 8021q: adding VLAN 0 to HW filter on device team1 [ 230.971935][ T8882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.820'. [ 231.011873][ T8882] team2: entered promiscuous mode [ 231.017183][ T8882] team2: entered allmulticast mode [ 231.024032][ T8882] 8021q: adding VLAN 0 to HW filter on device team2 [ 231.070006][ T8886] netlink: 4 bytes leftover after parsing attributes in process `syz.5.822'. [ 231.079397][ T8886] bridge_slave_1: left allmulticast mode [ 231.088187][ T8886] bridge_slave_1: left promiscuous mode [ 231.097627][ T8886] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.110123][ T8886] bridge_slave_0: left allmulticast mode [ 231.116603][ T8886] bridge_slave_0: left promiscuous mode [ 231.123033][ T8886] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.210395][ T8894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.824'. [ 231.394640][ T8899] netlink: 16 bytes leftover after parsing attributes in process `syz.2.825'. [ 231.406486][ T8899] openvswitch: netlink: Flow actions attr not present in new flow. [ 231.489531][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.5.826'. [ 231.520919][ T8906] FAULT_INJECTION: forcing a failure. [ 231.520919][ T8906] name failslab, interval 1, probability 0, space 0, times 0 [ 231.534285][ T8906] CPU: 1 UID: 0 PID: 8906 Comm: syz.1.828 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.534310][ T8906] Tainted: [L]=SOFTLOCKUP [ 231.534316][ T8906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 231.534325][ T8906] Call Trace: [ 231.534332][ T8906] [ 231.534338][ T8906] dump_stack_lvl+0xe8/0x150 [ 231.534361][ T8906] should_fail_ex+0x412/0x560 [ 231.534384][ T8906] should_failslab+0xa8/0x100 [ 231.534402][ T8906] __kmalloc_noprof+0xe8/0x760 [ 231.534440][ T8906] ? sock_kmalloc+0xd6/0x160 [ 231.534461][ T8906] sock_kmalloc+0xd6/0x160 [ 231.534480][ T8906] skcipher_recvmsg+0x517/0x1140 [ 231.534515][ T8906] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 231.534537][ T8906] ? __lock_acquire+0x6b5/0x2cf0 [ 231.534553][ T8906] ? aa_sock_msg_perm+0xf1/0x1b0 [ 231.534576][ T8906] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 231.534595][ T8906] ? security_socket_recvmsg+0x7e/0x2c0 [ 231.534612][ T8906] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 231.534630][ T8906] sock_recvmsg+0x172/0x1b0 [ 231.534653][ T8906] ____sys_recvmsg+0x1e6/0x4a0 [ 231.534677][ T8906] ? __pfx_____sys_recvmsg+0x10/0x10 [ 231.534708][ T8906] ? import_iovec+0x73/0xa0 [ 231.534730][ T8906] ___sys_recvmsg+0x215/0x590 [ 231.534743][ T8906] ? get_pid_task+0x20/0x1f0 [ 231.534766][ T8906] ? __pfx____sys_recvmsg+0x10/0x10 [ 231.534787][ T8906] ? __fget_files+0x2a/0x420 [ 231.534822][ T8906] ? __fget_files+0x3a0/0x420 [ 231.534849][ T8906] __x64_sys_recvmsg+0x1ba/0x2a0 [ 231.534868][ T8906] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 231.534897][ T8906] ? __pfx_ksys_write+0x10/0x10 [ 231.534926][ T8906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.534943][ T8906] do_syscall_64+0x174/0x580 [ 231.534958][ T8906] ? trace_irq_disable+0x3b/0x140 [ 231.534979][ T8906] ? clear_bhb_loop+0x40/0x90 [ 231.534999][ T8906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.535020][ T8906] RIP: 0033:0x7f6d34b9ce59 [ 231.535036][ T8906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.535049][ T8906] RSP: 002b:00007f6d32dee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 231.535066][ T8906] RAX: ffffffffffffffda RBX: 00007f6d34e15fa0 RCX: 00007f6d34b9ce59 [ 231.535077][ T8906] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 231.535086][ T8906] RBP: 00007f6d32dee090 R08: 0000000000000000 R09: 0000000000000000 [ 231.535096][ T8906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.535106][ T8906] R13: 00007f6d34e16038 R14: 00007f6d34e15fa0 R15: 00007f6d34f3fa48 [ 231.535132][ T8906] [ 231.544052][ T8893] syz.4.824 (8893): drop_caches: 2 [ 231.615870][ T8903] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 231.707468][ T8902] netlink: 48 bytes leftover after parsing attributes in process `syz.5.826'. [ 231.799110][ T8899] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 231.846657][ T5724] IPVS: starting estimator thread 0... [ 231.871994][ T8899] bond1 (unregistering): Released all slaves [ 231.924839][ T8902] vlan2: entered allmulticast mode [ 231.931943][ T8902] macvlan1: entered allmulticast mode [ 231.938108][ T8902] veth1_vlan: entered allmulticast mode [ 231.944606][ T8915] IPVS: using max 56 ests per chain, 134400 per kthread [ 231.998248][ T8918] kernel read not supported for file /sg0 (pid: 8918 comm: syz.4.830) [ 232.392812][ T5724] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 232.405738][ T8941] CUSE: unknown device info "" [ 232.415698][ T8942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.424649][ T8941] CUSE: unknown device info "" [ 232.429593][ T8941] CUSE: unknown device info "" [ 232.435554][ T8942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.443575][ T8941] CUSE: unknown device info "" [ 232.452540][ T8941] CUSE: unknown device info "" [ 232.471709][ T8941] CUSE: unknown device info "" [ 232.483620][ T8941] CUSE: unknown device info "" [ 232.493365][ T8941] CUSE: unknown device info "" [ 232.503238][ T8941] CUSE: DEVNAME unspecified [ 232.562924][ T5724] usb 6-1: Using ep0 maxpacket: 16 [ 232.571962][ T5724] usb 6-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=62.b8 [ 232.581951][ T5724] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.587788][ T8945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.590165][ T5724] usb 6-1: Product: syz [ 232.603098][ T8945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.603117][ T5724] usb 6-1: Manufacturer: syz [ 232.615919][ T5724] usb 6-1: SerialNumber: syz [ 232.626181][ T6221] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 232.742809][ T6220] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 232.782874][ T6221] usb 3-1: Using ep0 maxpacket: 16 [ 232.791946][ T6221] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.802370][ T6221] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 232.814247][ T6221] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 232.824512][ T6221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.836099][ T6221] usb 3-1: Product: syz [ 232.842558][ T6221] usb 3-1: Manufacturer: syz [ 232.849269][ T8926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.859778][ T6221] usb 3-1: SerialNumber: syz [ 232.867813][ T8926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.877560][ T6221] usb 3-1: config 0 descriptor?? [ 232.882571][ T6220] usb 5-1: device descriptor read/64, error -71 [ 232.951892][ T5724] upd78f0730 6-1:8.0: upd78f0730 converter detected [ 232.961013][ T5724] usb 6-1: upd78f0730 converter now attached to ttyUSB0 [ 232.972451][ T5724] usb 6-1: USB disconnect, device number 42 [ 232.981133][ T5724] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 232.991232][ T5724] upd78f0730 6-1:8.0: device disconnected [ 233.105699][ T46] usb 3-1: USB disconnect, device number 63 [ 233.132808][ T6220] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 233.283910][ T6220] usb 5-1: device descriptor read/64, error -71 [ 233.390336][ T8952] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 233.406049][ T6220] usb usb5-port1: attempt power cycle [ 233.763067][ T6220] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 233.807350][ T6220] usb 5-1: device descriptor read/8, error -71 [ 233.844215][ T8973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.866263][ T8973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.888894][ T8974] netlink: 16 bytes leftover after parsing attributes in process `syz.2.848'. [ 233.892524][ T8973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.914631][ T8973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.917426][ T8974] openvswitch: netlink: Flow actions attr not present in new flow. [ 233.946615][ T8979] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 233.958317][ T8979] bond1 (unregistering): Released all slaves [ 234.063101][ T6220] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 234.085098][ T6220] usb 5-1: device descriptor read/8, error -71 [ 234.196272][ T6220] usb usb5-port1: unable to enumerate USB device [ 234.270293][ T8986] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size. [ 234.292103][ T8986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.851'. [ 234.462866][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.471426][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.479857][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.573925][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.853'. [ 234.838916][ T9004] capability: warning: `syz.5.854' uses deprecated v2 capabilities in a way that may be insecure [ 235.232803][ T6222] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 235.402785][ T6222] usb 6-1: Using ep0 maxpacket: 16 [ 235.418893][ T6222] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.453192][ T6222] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 235.480319][ T6222] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 235.498018][ T6222] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.508842][ T6222] usb 6-1: Product: syz [ 235.513812][ T6222] usb 6-1: Manufacturer: syz [ 235.529687][ T6222] usb 6-1: SerialNumber: syz [ 235.546275][ T6222] usb 6-1: config 0 descriptor?? [ 235.762991][ T6221] usb 5-1: new low-speed USB device number 66 using dummy_hcd [ 235.790347][ T46] usb 6-1: USB disconnect, device number 43 [ 235.938036][ T6221] usb 5-1: No LPM exit latency info found, disabling LPM. [ 235.947700][ T6221] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 32, setting to 0 [ 235.958968][ T6221] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0 [ 236.133858][ T6222] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 236.334203][ T6222] usb 3-1: Using ep0 maxpacket: 32 [ 236.352054][ T6222] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 236.386067][ T6222] usb 3-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 236.397684][ T6222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.404814][ T9038] netlink: 20 bytes leftover after parsing attributes in process `syz.5.865'. [ 236.407377][ T6222] usb 3-1: Product: syz [ 236.420123][ T6222] usb 3-1: Manufacturer: syz [ 236.426321][ T6222] usb 3-1: SerialNumber: syz [ 236.446282][ T6222] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 236.649119][ T9031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.667183][ T9031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.679936][ T6222] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 236.743484][ T6220] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 236.798521][ T6222] usb 3-1: USB disconnect, device number 64 [ 236.868990][ T9045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.893359][ T9045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.926557][ T6220] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 236.948913][ T6220] usb 6-1: config 0 has no interface number 0 [ 236.964422][ T6220] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 236.980059][ T6220] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.989409][ T6220] usb 6-1: Product: syz [ 236.999723][ T6220] usb 6-1: Manufacturer: syz [ 237.005132][ T6220] usb 6-1: SerialNumber: syz [ 237.014166][ T6220] usb 6-1: config 0 descriptor?? [ 237.138087][ T9054] syzkaller0: entered promiscuous mode [ 237.143951][ T9054] syzkaller0: entered allmulticast mode [ 237.239810][ T6220] dvb_usb_ec168 6-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 237.285158][ T6220] usb 6-1: USB disconnect, device number 44 [ 237.552787][ T46] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 237.665408][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.702801][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 237.710331][ T46] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 237.732445][ T46] usb 3-1: config 0 has no interface number 0 [ 237.744621][ T46] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 237.755261][ T46] usb 3-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 237.769015][ T46] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 237.778869][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.787820][ T46] usb 3-1: Product: syz [ 237.792264][ T46] usb 3-1: Manufacturer: syz [ 237.797139][ T46] usb 3-1: SerialNumber: syz [ 237.815957][ T46] usb 3-1: config 0 descriptor?? [ 237.836187][ T46] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 237.847477][ T46] em28xx 3-1:0.132: Video interface 132 found: bulk [ 238.108236][ T46] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 238.200587][ T46] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 238.203915][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz.5.872'. [ 238.220911][ T46] em28xx 3-1:0.132: board has no eeprom [ 238.283363][ T46] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 238.291792][ T46] em28xx 3-1:0.132: analog set to bulk mode. [ 238.298439][ T5724] em28xx 3-1:0.132: Registering V4L2 extension [ 238.331038][ T46] usb 3-1: USB disconnect, device number 65 [ 238.339056][ T46] em28xx 3-1:0.132: Disconnecting em28xx [ 238.526451][ T6221] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 238.528998][ T5724] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 238.538159][ T6221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.565309][ T5724] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 238.598011][ T5724] em28xx 3-1:0.132: No AC97 audio processor [ 238.600028][ T6221] usb 5-1: can't set config #1, error -71 [ 238.645872][ T6221] usb 5-1: USB disconnect, device number 66 [ 238.712289][ T5724] usb 3-1: Decoder not found [ 238.722861][ T5724] em28xx 3-1:0.132: failed to create media graph [ 238.749892][ T5724] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 238.835502][ T5724] em28xx 3-1:0.132: Remote control support is not available for this card. [ 238.846199][ T46] em28xx 3-1:0.132: Closing input extension [ 238.967791][ T9084] FAULT_INJECTION: forcing a failure. [ 238.967791][ T9084] name failslab, interval 1, probability 0, space 0, times 0 [ 238.969221][ T46] em28xx 3-1:0.132: Freeing device [ 238.982009][ T9084] CPU: 0 UID: 0 PID: 9084 Comm: syz.2.877 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.982042][ T9084] Tainted: [L]=SOFTLOCKUP [ 238.982047][ T9084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 238.982056][ T9084] Call Trace: [ 238.982063][ T9084] [ 238.982070][ T9084] dump_stack_lvl+0xe8/0x150 [ 238.982093][ T9084] should_fail_ex+0x412/0x560 [ 238.982115][ T9084] should_failslab+0xa8/0x100 [ 238.982132][ T9084] __kmalloc_noprof+0xe8/0x760 [ 238.982153][ T9084] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 238.982174][ T9084] tomoyo_realpath_from_path+0xe3/0x5d0 [ 238.982191][ T9084] ? tomoyo_domain+0xd7/0x130 [ 238.982215][ T9084] ? tomoyo_path_number_perm+0x219/0x630 [ 238.982234][ T9084] tomoyo_path_number_perm+0x246/0x630 [ 238.982256][ T9084] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 238.982274][ T9084] ? __lock_acquire+0x6b5/0x2cf0 [ 238.982303][ T9084] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 238.982339][ T9084] ? __fget_files+0x2a/0x420 [ 238.982359][ T9084] ? __fget_files+0x2a/0x420 [ 238.982375][ T9084] ? __fget_files+0x3a0/0x420 [ 238.982392][ T9084] ? __fget_files+0x2a/0x420 [ 238.982413][ T9084] security_file_ioctl+0xc3/0x2a0 [ 238.982434][ T9084] __se_sys_ioctl+0x47/0x170 [ 238.982455][ T9084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.982472][ T9084] do_syscall_64+0x174/0x580 [ 238.982487][ T9084] ? trace_irq_disable+0x3b/0x140 [ 238.982509][ T9084] ? clear_bhb_loop+0x40/0x90 [ 238.982527][ T9084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.982542][ T9084] RIP: 0033:0x7fac2d59ce59 [ 238.982557][ T9084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.982569][ T9084] RSP: 002b:00007fac2e397028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.982586][ T9084] RAX: ffffffffffffffda RBX: 00007fac2d816090 RCX: 00007fac2d59ce59 [ 238.982598][ T9084] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 238.982607][ T9084] RBP: 00007fac2e397090 R08: 0000000000000000 R09: 0000000000000000 [ 238.982617][ T9084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.982626][ T9084] R13: 00007fac2d816128 R14: 00007fac2d816090 R15: 00007fac2d93fa48 [ 238.982652][ T9084] [ 238.982720][ T9084] ERROR: Out of memory at tomoyo_realpath_from_path. [ 239.219977][ T6221] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 239.384950][ T6221] usb 5-1: Using ep0 maxpacket: 16 [ 239.402565][ T6221] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.423842][ T6221] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 239.479414][ T6221] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 239.488629][ T6221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.508272][ T6221] usb 5-1: Product: syz [ 239.512590][ T6221] usb 5-1: Manufacturer: syz [ 239.517647][ T6221] usb 5-1: SerialNumber: syz [ 239.547722][ T6221] usb 5-1: config 0 descriptor?? [ 239.808823][ T6226] usb 5-1: USB disconnect, device number 67 [ 240.112163][ T9101] netlink: 'syz.2.880': attribute type 10 has an invalid length. [ 240.786146][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.794716][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.803337][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.187647][ T9067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.195245][ T9067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.205717][ T9067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.213238][ T9067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.408465][ T9115] : renamed from lo [ 241.440824][ T9116] netlink: 'syz.4.884': attribute type 3 has an invalid length. [ 241.480659][ T9116] netlink: 100 bytes leftover after parsing attributes in process `syz.4.884'. [ 241.597006][ T9128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.632754][ T6221] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 241.642432][ T9128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.743091][ T6220] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 241.766467][ T6221] usb 3-1: device descriptor read/64, error -71 [ 241.912739][ T6220] usb 5-1: Using ep0 maxpacket: 16 [ 241.922456][ T6220] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 241.932829][ T6220] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 241.944812][ T6220] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 241.955209][ T6220] usb 5-1: config 0 interface 0 has no altsetting 0 [ 241.965754][ T6220] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 241.975280][ T6220] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.986016][ T6220] usb 5-1: Product: syz [ 241.990323][ T6220] usb 5-1: Manufacturer: syz [ 241.995433][ T6220] usb 5-1: SerialNumber: syz [ 242.004562][ T6220] usb 5-1: config 0 descriptor?? [ 242.022890][ T6221] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 242.152868][ T6221] usb 3-1: device descriptor read/64, error -71 [ 242.233853][ T6220] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input29 [ 242.259622][ T4985] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 242.273606][ T6221] usb usb3-port1: attempt power cycle [ 242.308517][ T4985] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 242.332069][ T4985] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 242.358080][ T4985] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 242.662772][ T6221] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 242.703433][ T6221] usb 3-1: device descriptor read/8, error -71 [ 242.770123][ T9120] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 242.874011][ T5724] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 242.962911][ T6221] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 243.003388][ T6221] usb 3-1: device descriptor read/8, error -71 [ 243.042813][ T5724] usb 6-1: Using ep0 maxpacket: 16 [ 243.064152][ T5724] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.081424][ T5724] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 243.097316][ T5724] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 243.110267][ T5724] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.120048][ T5724] usb 6-1: Product: syz [ 243.124724][ T5724] usb 6-1: Manufacturer: syz [ 243.124779][ T6221] usb usb3-port1: unable to enumerate USB device [ 243.129434][ T5724] usb 6-1: SerialNumber: syz [ 243.165817][ T5724] usb 6-1: config 0 descriptor?? [ 243.271074][ T9182] syzkaller0: entered promiscuous mode [ 243.276981][ T9182] syzkaller0: entered allmulticast mode [ 243.461326][ T6226] usb 6-1: USB disconnect, device number 45 [ 244.435342][ T6221] usb 5-1: USB disconnect, device number 68 [ 244.912953][ T6221] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 245.089266][ T6221] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 245.104537][ T6221] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.126147][ T6221] usb 5-1: config 0 descriptor?? [ 245.140391][ T6221] cp210x 5-1:0.0: cp210x converter detected [ 245.248722][ T9215] ALSA: mixer_oss: invalid OSS volume 'j& ' [ 245.254993][ T9215] ALSA: mixer_oss: invalid OSS volume '?ԗY{UD' [ 245.263663][ T9215] ALSA: mixer_oss: invalid OSS volume 'ߧ4cT󯆩"m!lT.Π' [ 245.272173][ T9215] ALSA: mixer_oss: invalid OSS volume 'lg' [ 245.279239][ T9215] ALSA: mixer_oss: invalid OSS volume ')nkKi,rWY\ZV?J`G' [ 245.287680][ T9215] ALSA: mixer_oss: invalid OSS volume 'kO0$g{pl{y;_ARW' [ 245.297289][ T9215] ALSA: mixer_oss: invalid OSS volume '' [ 245.304141][ T9215] ALSA: mixer_oss: invalid OSS volume 'sv Fu{Qby>h%w]' [ 245.314519][ T9215] ALSA: mixer_oss: invalid OSS volume 'E= v?@48@hL' [ 245.327602][ T9215] ALSA: mixer_oss: invalid OSS volume '+?>3Iq0:iq|UDř' [ 245.336099][ T9215] ALSA: mixer_oss: invalid OSS volume 'vӷ*xrN0ܗcAdh' [ 245.342878][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.347505][ T6221] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 245.352905][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.360246][ T9215] ALSA: mixer_oss: invalid OSS volume 'JM %HJ[~S' [ 245.368409][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.375819][ T6221] cp210x 5-1:0.0: querying part number failed [ 245.390936][ T9215] ALSA: mixer_oss: invalid OSS volume 'SQF?`*]5S' [ 245.412075][ T9215] ALSA: mixer_oss: invalid OSS volume 'x\E79@ar4b2]jG' [ 245.447844][ T6221] usb 5-1: cp210x converter now attached to ttyUSB0 [ 245.502594][ T9220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.514219][ T9220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.588761][ T9220] loop4: detected capacity change from 0 to 2640 [ 245.598275][ T9220] buffer_io_error: 127 callbacks suppressed [ 245.598291][ T9220] Buffer I/O error on dev loop4, logical block 0, async page read [ 245.623331][ T9220] Buffer I/O error on dev loop4, logical block 0, async page read [ 245.641673][ T9220] Buffer I/O error on dev loop4, logical block 0, async page read [ 245.661419][ T9220] Buffer I/O error on dev loop4, logical block 0, async page read [ 245.679488][ T9220] Buffer I/O error on dev loop4, logical block 0, async page read [ 245.697894][ T9220] Buffer I/O error on dev loop4, logical block 0, async page read [ 245.724118][ T9220] Buffer I/O error on dev loop4, logical block 0, async page read [ 245.745432][ T9220] Buffer I/O error on dev loop4, logical block 0, async page read [ 245.764004][ T9222] Buffer I/O error on dev loop4, logical block 0, async page read [ 245.774656][ T9222] Buffer I/O error on dev loop4, logical block 0, async page read [ 245.782593][ T9220] ldm_validate_partition_table(): Disk read failed. [ 245.790068][ T9220] Dev loop4: unable to read RDB block 0 [ 245.796508][ T9220] loop4: unable to read partition table [ 245.802499][ T9220] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 246.257665][ T9225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.269036][ T9225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.399762][ T9201] netlink: 16 bytes leftover after parsing attributes in process `syz.2.896'. [ 246.415776][ T6221] usb 5-1: USB disconnect, device number 69 [ 246.440359][ T5000] ldm_validate_partition_table(): Disk read failed. [ 246.449751][ T6221] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 246.472368][ T5000] Dev loop4: unable to read RDB block 0 [ 246.479574][ T6221] cp210x 5-1:0.0: device disconnected [ 246.495290][ T5000] loop4: unable to read partition table [ 246.565358][ T9234] netlink: 24 bytes leftover after parsing attributes in process `syz.1.906'. [ 246.619901][ T9234] netlink: 24 bytes leftover after parsing attributes in process `syz.1.906'. [ 246.649274][ T9234] netlink: 48 bytes leftover after parsing attributes in process `syz.1.906'. [ 246.822752][ T6222] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 246.962735][ T6221] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 246.985083][ T6222] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 246.993924][ T6222] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.006198][ T6222] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 247.016826][ T6222] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 247.026906][ T6222] usb 3-1: Manufacturer: syz [ 247.034417][ T6222] usb 3-1: config 0 descriptor?? [ 247.104238][ T6221] usb 5-1: device descriptor read/64, error -71 [ 247.115082][ T6222] rc_core: IR keymap rc-hauppauge not found [ 247.121783][ T6222] Registered IR keymap rc-empty [ 247.129164][ T6222] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 247.146711][ T6222] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input31 [ 247.244460][ C0] igorplugusb 3-1:0.0: Error: urb status = -32 [ 247.344763][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 247.354887][ T6221] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 247.502941][ T6221] usb 5-1: device descriptor read/64, error -71 [ 247.565265][ T9242] netlink: 32 bytes leftover after parsing attributes in process `syz.2.905'. [ 247.623608][ T6221] usb usb5-port1: attempt power cycle [ 247.972873][ T6221] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 247.994027][ T6221] usb 5-1: device descriptor read/8, error -71 [ 248.252935][ T6221] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 248.283407][ T6221] usb 5-1: device descriptor read/8, error -71 [ 248.393265][ T6221] usb usb5-port1: unable to enumerate USB device [ 249.192899][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.201247][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.209574][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.590602][ T5724] usb 3-1: USB disconnect, device number 70 [ 252.382879][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.391183][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.639539][ T5000] udevd[5000]: worker [5647] /devices/platform/dummy_hcd.1/usb2/2-1 is taking a long time [ 255.665493][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.672906][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.222892][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.231170][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.239545][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.145281][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 260.154952][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 260.702897][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.711148][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.719481][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.902912][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.911152][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.102990][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.111256][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.119774][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.582906][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.591224][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.599551][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.607957][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.342900][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.351221][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.359542][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.367806][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.102897][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.111272][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.119758][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.128080][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.862878][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.871148][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.879460][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.887770][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.943364][ T30] INFO: task kworker/0:9:6219 blocked for more than 143 seconds. [ 288.951206][ T30] Tainted: G L syzkaller #0 [ 288.957814][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 288.966752][ T30] task:kworker/0:9 state:D stack:21472 pid:6219 tgid:6219 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 288.978867][ T30] Workqueue: usb_hub_wq hub_event [ 288.984093][ T30] Call Trace: [ 288.987383][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 288.990315][ T30] __schedule+0x1821/0x5740 [ 288.996040][ T30] ? kasan_save_stack+0x3e/0x60 [ 289.001210][ T30] ? __device_attach_driver+0x279/0x430 [ 289.007008][ T30] ? bus_probe_device+0x12a/0x220 [ 289.012082][ T30] ? device_add+0x7e9/0xbb0 [ 289.017698][ T30] ? usb_set_configuration+0x1a87/0x2110 [ 289.039507][ T30] ? usb_probe_device+0x1c4/0x3b0 [ 289.063543][ T30] ? really_probe+0x267/0xaf0 [ 289.087392][ T30] ? __device_attach_driver+0x279/0x430 [ 289.116004][ T30] ? device_initial_probe+0xa1/0xd0 [ 289.131892][ T30] ? bus_probe_device+0x12a/0x220 [ 289.157297][ T30] ? look_up_lock_class+0x57/0x110 [ 289.182590][ T5695] usb 4-1: USB disconnect, device number 56 [ 289.190268][ T30] ? __pfx___schedule+0x10/0x10 [ 289.229843][ T5695] ldusb 4-1:0.55: LD USB Device #1 now disconnected [ 289.238973][ T30] ? schedule+0x90/0x360 [ 289.256177][ T30] schedule+0x164/0x360 [ 289.266896][ T30] schedule_timeout+0xc3/0x2c0 [ 289.278212][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 289.284096][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 289.289183][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 289.294828][ T30] ? wait_for_completion+0x274/0x5e0 [ 289.300164][ T30] wait_for_completion+0x2cc/0x5e0 [ 289.306602][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 289.312358][ T30] i2c_del_adapter+0x5c0/0x790 [ 289.317786][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 289.323355][ T30] ? __pfx_i2c_del_adapter+0x10/0x10 [ 289.328702][ T30] ? dvb_usbv2_exit+0x94c/0xb80 [ 289.334078][ T30] dvb_usbv2_probe+0x4c3/0x3d40 [ 289.339021][ T30] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 289.352722][ T30] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 289.358656][ T30] usb_probe_interface+0x659/0xc70 [ 289.364326][ T30] ? __pfx_usb_probe_interface+0x10/0x10 [ 289.373080][ T30] really_probe+0x267/0xaf0 [ 289.382883][ T30] __driver_probe_device+0x1ef/0x380 [ 289.388563][ T30] driver_probe_device+0x4f/0x240 [ 289.402787][ T30] __device_attach_driver+0x279/0x430 [ 289.408330][ T30] bus_for_each_drv+0x258/0x2f0 [ 289.413654][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 289.428028][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 289.442815][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 289.448087][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 289.457057][ T30] __device_attach+0x2c5/0x450 [ 289.472292][ T30] ? __pfx___device_attach+0x10/0x10 [ 289.478133][ T30] ? _raw_spin_unlock+0x28/0x50 [ 289.483512][ T30] device_initial_probe+0xa1/0xd0 [ 289.488588][ T30] bus_probe_device+0x12a/0x220 [ 289.493941][ T30] device_add+0x7e9/0xbb0 [ 289.498318][ T30] usb_set_configuration+0x1a87/0x2110 [ 289.504286][ T30] usb_generic_driver_probe+0x8d/0x150 [ 289.509800][ T30] usb_probe_device+0x1c4/0x3b0 [ 289.515112][ T30] ? __pfx_usb_probe_device+0x10/0x10 [ 289.520604][ T30] really_probe+0x267/0xaf0 [ 289.525439][ T30] __driver_probe_device+0x1ef/0x380 [ 289.530763][ T30] driver_probe_device+0x4f/0x240 [ 289.535857][ T30] __device_attach_driver+0x279/0x430 [ 289.541683][ T30] bus_for_each_drv+0x258/0x2f0 [ 289.546941][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 289.553145][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 289.558564][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 289.563965][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 289.569985][ T30] __device_attach+0x2c5/0x450 [ 289.574792][ T30] ? __pfx___device_attach+0x10/0x10 [ 289.580084][ T30] ? _raw_spin_unlock+0x28/0x50 [ 289.585463][ T30] device_initial_probe+0xa1/0xd0 [ 289.590531][ T30] bus_probe_device+0x12a/0x220 [ 289.595558][ T30] device_add+0x7e9/0xbb0 [ 289.599929][ T30] usb_new_device+0xa08/0x16f0 [ 289.605002][ T30] ? __pfx_usb_new_device+0x10/0x10 [ 289.610232][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 289.615609][ T30] hub_event+0x2a1c/0x4f30 [ 289.620038][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 289.625319][ T30] ? __pfx_hub_event+0x10/0x10 [ 289.630117][ T30] ? process_scheduled_works+0xa70/0x1860 [ 289.635902][ T30] ? process_scheduled_works+0xa70/0x1860 [ 289.641652][ T30] ? process_scheduled_works+0xa70/0x1860 [ 289.647564][ T30] process_scheduled_works+0xb5d/0x1860 [ 289.653213][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 289.659395][ T30] ? assign_work+0x3d5/0x5e0 [ 289.664558][ T30] worker_thread+0xa53/0xfc0 [ 289.669207][ T30] kthread+0x389/0x470 [ 289.673316][ T30] ? __pfx_worker_thread+0x10/0x10 [ 289.678431][ T30] ? __pfx_kthread+0x10/0x10 [ 289.683214][ T30] ret_from_fork+0x514/0xb70 [ 289.687845][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 289.693029][ T30] ? __switch_to+0xc79/0x1410 [ 289.697729][ T30] ? __pfx_kthread+0x10/0x10 [ 289.702317][ T30] ret_from_fork_asm+0x1a/0x30 [ 289.707415][ T30] [ 289.716931][ T30] [ 289.716931][ T30] Showing all locks held in the system: [ 289.744090][ T30] 1 lock held by khungtaskd/30: [ 289.751769][ T30] #0: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 289.837363][ T30] 2 locks held by getty/5390: [ 289.846184][ T30] #0: ffff8880361520a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 289.872119][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 289.894498][ T30] 4 locks held by udevd/5647: [ 289.903160][ T30] #0: ffff88807bdc2e18 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 289.922800][ T30] #1: ffff88802bfee080 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 289.942773][ T30] #2: ffff8880554d0788 (kn->active#31){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 289.962829][ T30] #3: ffff88802a5511d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 289.982778][ T30] 2 locks held by kworker/1:7/5724: [ 289.992701][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 290.012699][ T30] #1: ffffc90004ba7c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 290.035637][ T30] 5 locks held by kworker/0:9/6219: [ 290.051942][ T30] #0: ffff88801e2dd140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 290.089451][ T30] #1: ffffc9000d7afc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 290.131213][ T30] #2: ffff88802a0d01d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 290.162757][ T30] #3: ffff88802a5511d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 290.202758][ T30] #4: ffff88807c9761a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 290.218323][ T30] 3 locks held by kworker/0:16/6233: [ 290.232742][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.234673][ T30] 1 lock held by syz.2.197/6466: [ 290.241573][ C0] bridge0: topology change detected, propagating [ 290.251813][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.259122][ C0] bridge0: topology change detected, propagating [ 290.263096][ T30] #0: ffff8880b863b0e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 290.282970][ T30] 3 locks held by kworker/u8:29/6979: [ 290.292870][ T30] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 290.322754][ T30] #1: ffffc90003227c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 290.352676][ T30] #2: ffffffff8fdc8ec0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 290.361784][ T30] 2 locks held by syz-executor/8410: [ 290.367392][ T30] #0: ffffffff8fdc8ec0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 290.376664][ T30] #1: ffffffff8e963028 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 290.414495][ T30] [ 290.416903][ T30] ============================================= [ 290.416903][ T30] [ 290.428826][ T30] NMI backtrace for cpu 0 [ 290.428845][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 290.428866][ T30] Tainted: [L]=SOFTLOCKUP [ 290.428872][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 290.428879][ T30] Call Trace: [ 290.428886][ T30] [ 290.428892][ T30] dump_stack_lvl+0xe8/0x150 [ 290.428915][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 290.428936][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 290.428954][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 290.428975][ T30] sys_info+0x135/0x170 [ 290.428991][ T30] watchdog+0xfd3/0x1030 [ 290.429018][ T30] ? watchdog+0x1c9/0x1030 [ 290.429040][ T30] kthread+0x389/0x470 [ 290.429058][ T30] ? __pfx_watchdog+0x10/0x10 [ 290.429073][ T30] ? __pfx_kthread+0x10/0x10 [ 290.429089][ T30] ret_from_fork+0x514/0xb70 [ 290.429108][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 290.429121][ T30] ? __switch_to+0xc79/0x1410 [ 290.429140][ T30] ? __pfx_kthread+0x10/0x10 [ 290.429155][ T30] ret_from_fork_asm+0x1a/0x30 [ 290.429180][ T30] [ 290.429196][ T30] Sending NMI from CPU 0 to CPUs 1: [ 290.547747][ C1] NMI backtrace for cpu 1 [ 290.547766][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 290.547787][ C1] Tainted: [L]=SOFTLOCKUP [ 290.547793][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 290.547802][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 290.547824][ C1] Code: bb 7e 02 e9 03 fa 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 f1 21 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 290.547844][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 290.547858][ C1] RAX: 000000000036f2b5 RBX: ffffffff819a858a RCX: 0000000080000001 [ 290.547869][ C1] RDX: 0000000000000001 RSI: ffffffff8dfa4dc8 RDI: ffffffff8c28b9e0 [ 290.547880][ C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b [ 290.547892][ C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 [ 290.547903][ C1] R13: 1ffff11003b5b000 R14: 0000000000000001 R15: 1ffff11003b5b000 [ 290.547914][ C1] FS: 0000000000000000(0000) GS:ffff8881253a0000(0000) knlGS:0000000000000000 [ 290.547926][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 290.547937][ C1] CR2: 000055a9fdba0418 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 290.547951][ C1] Call Trace: [ 290.547957][ C1] [ 290.547963][ C1] default_idle+0x9/0x20 [ 290.547980][ C1] default_idle_call+0x72/0xb0 [ 290.547999][ C1] do_idle+0x36a/0x5f0 [ 290.548019][ C1] ? __pfx_do_idle+0x10/0x10 [ 290.548036][ C1] ? do_idle+0x11/0x5f0 [ 290.548054][ C1] cpu_startup_entry+0x43/0x60 [ 290.548078][ C1] start_secondary+0x101/0x110 [ 290.548093][ C1] common_startup_64+0x13e/0x147 [ 290.548120][ C1] [ 290.722286][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 290.729270][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 290.739949][ T30] Tainted: [L]=SOFTLOCKUP [ 290.744260][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 290.754300][ T30] Call Trace: [ 290.757570][ T30] [ 290.760484][ T30] vpanic+0x56c/0xa60 [ 290.764455][ T30] ? __pfx___schedule+0x10/0x10 [ 290.769290][ T30] ? __pfx_vpanic+0x10/0x10 [ 290.773780][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 290.779923][ T30] panic+0xc5/0xd0 [ 290.783631][ T30] ? __pfx_panic+0x10/0x10 [ 290.788043][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 290.793408][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 290.799558][ T30] watchdog+0x102c/0x1030 [ 290.803883][ T30] ? watchdog+0x1c9/0x1030 [ 290.808291][ T30] kthread+0x389/0x470 [ 290.812350][ T30] ? __pfx_watchdog+0x10/0x10 [ 290.817015][ T30] ? __pfx_kthread+0x10/0x10 [ 290.821686][ T30] ret_from_fork+0x514/0xb70 [ 290.826268][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 290.831364][ T30] ? __switch_to+0xc79/0x1410 [ 290.836033][ T30] ? __pfx_kthread+0x10/0x10 [ 290.840616][ T30] ret_from_fork_asm+0x1a/0x30 [ 290.845403][ T30] [ 290.848708][ T30] Kernel Offset: disabled [ 290.853021][ T30] Rebooting in 86400 seconds..