last executing test programs: 4m11.488928795s ago: executing program 2 (id=45): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="720866b9d40900000f32b8f9008ec0b83c010f00d00f07f00fc74d080fa4fe000f350f011e9083ba2000b00fee", 0x2d}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) r3 = socket$netlink(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYRESDEC=r4, @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x24004040}, 0x24008824) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, &(0x7f0000000000)={0xf, 0x7f}) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x242202) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r9, 0xc2604111, &(0x7f0000000400)={0x4, [[0x7ff, 0xfffff800, 0x7, 0xb7f0, 0x5, 0x10001, 0x4f0d, 0x3], [0x9, 0xa6, 0x5, 0x3, 0x5, 0x9, 0x7, 0xab], [0x2, 0x4, 0x5bd6e3cf, 0x3ff, 0x8, 0xaf, 0x1000, 0x7]], '\x00', [{0x80000008, 0x5, 0x0, 0x1, 0x1}, {0x9, 0x87a0, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x6, 0x0, 0x1, 0x1}, {0x7, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x8, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xf}, {0x6, 0xf, 0x1, 0x0, 0x1}, {0xe, 0x2, 0x1, 0x1, 0x1}, {0xff, 0x7, 0x1, 0x1, 0x0, 0x1}, {0x5, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x3, 0x4, 0x1, 0x0, 0x1}, {0x8, 0x5, 0x0, 0x0, 0x1}], '\x00', 0xbacf}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x7, 0x100000000], 0x3000, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r8, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r10 = syz_io_uring_setup(0xe3f, &(0x7f0000000140)={0x0, 0x2119, 0x11308, 0x0, 0x82}, &(0x7f0000000240), &(0x7f00000001c0)) io_uring_enter(r10, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') 4m10.580594439s ago: executing program 2 (id=48): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0xff0f000000008080) close_range(r3, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x4ecc, 0x7fffffff, 0x87f}, &(0x7f0000000240)=0x10) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r6, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffc}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x50, r6, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4004010) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x500) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r9, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r10 = memfd_create(&(0x7f0000000000)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0xa) fchmod(r10, 0x109) 4m9.384604174s ago: executing program 2 (id=52): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r3, &(0x7f0000000300)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x1c000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="4000000066001fff0000000000000000", @ANYRES64], 0x40}}, 0x4000800) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902120001000010000904b8070096d1d300"], 0x0) read$FUSE(r4, &(0x7f0000003b80)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r3, 0xff08, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) 4m6.010433679s ago: executing program 2 (id=64): socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2040400) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x280741, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket(0x1e, 0x4, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x54c, 0x4, 0x3, 0x3, 0xc, 0x6, 0x7}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x19, 0x155, 0xfffffffffffffffc}) r8 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x2, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) 4m5.085352823s ago: executing program 2 (id=68): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02090000020000000000000000000000264f86a683e4172e05a285546e082ffa75bdb947278dceeb60989c1df86b812288a1666e7a92bda60659470c1563a2cd454db7e090f5f5d88afaba0bc50fad3e9be4bf844d8bf36c063f3fa8dfc1ce8dc943cfaf616c3f6d5ff4794bdb00ee8671623c4c47fd3bb0f94ec65c7ce7a98ae16b973406ddeb9b148069c2e3941b06c6d8d0e0da67f637acb39f06ff03eade1400802f934eb9"], 0x10}}, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x7ff) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x178}}, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[], 0x28}}, 0x0) 4m4.648780982s ago: executing program 2 (id=69): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x7ff) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 4m4.090069819s ago: executing program 32 (id=69): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x7ff) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 1m14.089410771s ago: executing program 4 (id=385): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x7ff, 0x92f, {0xffffffffffffffff}, {0xee01}, 0x7, 0x6}) r1 = syz_open_procfs$pagemap(r0, &(0x7f0000000040)) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x201, 0x0, 0x2, 0x7}) 1m13.987079333s ago: executing program 4 (id=386): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x28020480) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) timerfd_settime(r6, 0x1, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000647f215f4557e01c504e629500080045000044000000000021907800000000ffffffff050090780a0101024a0000000000000000000000ac1e0001ac141401071300e000000200000000ffffffffac14140c00"], 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000000)="d1", 0x1, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x7}, 0x1c) shutdown(r8, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r8, 0x84, 0x82, &(0x7f0000000200), 0x8) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) 1m9.687542735s ago: executing program 4 (id=399): r0 = fsopen(&(0x7f0000000240)='ntfs3\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000280)='\t\x8b\xc8q{\xc4\xe8d\x8b\x8bh-z\x1c\xf6\xab\xd1\x87\xb2\xe5\xff\xf56W59J\xe2\xde\tTd(\xa9\x82\xe3\xa1\x95\x89Ws\xad@\xb2\x8d\\_;q:\x84$I\x13\xac\x9a\xe6\xb4w<\xf6\xfe\x0f\xdf\x91\xd28g\x01[T\x0e\xd3|6\x11\xc4\x1c\xd0L_\xb2$s\xb3B0\"B%+a\xc6eB\x9d\xa3B)\x80pD\x8b$-\xeac\x84\xd4Tl{gT\xde\rGR;z\xff\xf6\x98\xbbr\xbf\xeaa\xf9\xb9\xb5]\xc60xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x49df, 0x0, 0x0, 0x35, 0x10, "ec28a144f13d7607"}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1, @ANYRES16=r2], 0xff2e) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x44) r7 = socket$kcm(0x21, 0x2, 0x2) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x6}]}}]}, 0x40}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xc28, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) 1m5.768793105s ago: executing program 4 (id=413): writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000"], 0x0) syz_open_dev$midi(0x0, 0x20500, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x200, 0x2, {0x3, @pix={0x7, 0x8, 0x34565559, 0x5, 0x800000, 0xfffffff3, 0x5, 0x983e, 0x0, 0x3, 0x1}}, 0x9}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r5, r5, 0x1a) sendmsg(r4, 0x0, 0x0) r6 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_connect(0x5, 0x35, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000545e0d209904b76b2f680102030109022300010000c0050904970001ff7079000834"], 0x0) socket$inet(0x2, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 50.345820762s ago: executing program 33 (id=413): writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000"], 0x0) syz_open_dev$midi(0x0, 0x20500, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x200, 0x2, {0x3, @pix={0x7, 0x8, 0x34565559, 0x5, 0x800000, 0xfffffff3, 0x5, 0x983e, 0x0, 0x3, 0x1}}, 0x9}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r5, r5, 0x1a) sendmsg(r4, 0x0, 0x0) r6 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_connect(0x5, 0x35, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000545e0d209904b76b2f680102030109022300010000c0050904970001ff7079000834"], 0x0) socket$inet(0x2, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 9.333400086s ago: executing program 1 (id=605): socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_procfs(0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$lock(r3, 0x5, &(0x7f0000000000)={0x0, 0x1, 0x7fffffffffffffff, 0x9}) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) 8.060544175s ago: executing program 3 (id=606): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) read$alg(r3, &(0x7f0000003180)=""/4116, 0x1014) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x9, r4, 0x1, 0x6, 0x6, @local}, 0x14) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f00000005c0)=0xfffffff8, 0x4) sendmmsg$alg(r3, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1ad71c5e1e2ffd65015711202c22a16e97f0b88f833c486c5fbe2f289a0d0f74a06da438dab866494a247e9e4e4f06f21c7c3f5c4dc83ecf01cf0f3edeb9a676c8fb387ad8e1ef53ac7dfd6baf1ecf42036e181292251526714cf6d8fb4bce389c96bc0e24d3abc248a5b98fa279d377b558a6a1486d3a79e1164c19f1c333019380a90df8ef6b", 0x88}, {&(0x7f0000000180)="b01220ee4b5a0b12c273972ea3edd768dbad1c3febf48a9926f16268a3edc6f2ff97ba688eaaaf7ee0f2264fb2ee0f67e6121291692267d8b34d076518f221f60e554115e2810116af423f9f1534f78900edd661bc516f8d574e309f4913645794855756a586a7ccc83d81ea4d2578711903a191dd576ce98d41453c09625efe7dff4b6222712a7309e131c3841dec7fdfdea97eaa9652e221e15ad8cb5793f185774b0f49782a59e05617354be85a35db7bcfe79be4356ede43b918981ce2318a65cfe8b262", 0xc6}, {&(0x7f0000000300)="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", 0xfe}, {&(0x7f0000002300)="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", 0xdb8}], 0x4, 0x0, 0x0, 0x20000850}], 0x1, 0x4000080) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000140)={0xffffffffffffffff, 0x7, 0x8000000000000001, 0x4, 0x6, 0x40}) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000040) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)={0x14, 0x5e, 0x30d, 0x3, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x23, 0x111000) 7.000821027s ago: executing program 3 (id=607): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000001680)={0x2020}, 0x2020) r4 = socket(0x40000000015, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c005090423000103"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x0, 0x13, 0x4, "22a85519"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r6], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setflags(r7, 0x2, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r8, 0x40045109, &(0x7f0000000440)=0x5) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480), 0xa0801, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 6.151678799s ago: executing program 1 (id=612): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xffffffff000) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x6, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) r5 = getpgid(0xffffffffffffffff) (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) (async) ptrace$setregs(0xd, r6, 0x930, &(0x7f0000000800)) (async) ptrace$poke(0x21, r6, 0x0, 0x0) syz_clone3(&(0x7f0000000580)={0x140119480, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000240), {0x25}, &(0x7f0000000380)=""/255, 0xff, &(0x7f0000000480)=""/157, &(0x7f0000000540)=[r5, r6], 0x2, {r1}}, 0x58) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=@newtfilter={0x1f8, 0x2c, 0x400, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x1c8, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x1bc, 0x6, [@m_skbmod={0x1b8, 0x9, 0x0, 0x0, {{0xb}, {0xa0, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x10001, 0x8000, 0x8, 0x9, 0xffffffff}, 0x1}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x4, 0x0, 0x9, 0x1}, 0xa}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x401}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}]}, {0xef, 0x6, "ac7b78c00843eda81662f4e7f6da002e0f92f780141fa1dd2b09e8de7526115eba5f912ddc38bfca8ae7d20bc8d6a919aac98307088a00c055fac9eb7583f6b4dac820d34fe2261bb3504e408f7b026a4507622751a14c56b3121121a73daf95bab8a2aa31c9d96b481ec183f0157642377a0ff1580571486f2fbfd519a330d040a94863fd84f817b64bd504dc3cec165517305256b9216ba0b53f345e0946242bec02c727fb90f1e48c543c572b2966fbdd4f8f8967e40c26f4e64f3cb8e479fb7565ee384cf0a6fbb06f4dd4edf9be1c9150021d63dcbecbc602d30672e33d022aba15ad287b3eeb8508"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x1f8}}, 0x4000) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_buf(r8, 0x1, 0x37, 0xfffffffffffffffd, &(0x7f0000000000)=0x46) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (async) write$binfmt_aout(r1, 0x0, 0xffffffdb) (async) syz_open_dev$sndctrl(0x0, 0x84, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) (async) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000005200010030bd7000ffdbdf251c00000008000100", @ANYRES32, @ANYBLOB="5ba393ea2a86f90b371846e198f255dce934410f895940cee8490d85585c56f9bb8cbebdac427b923ff101898c78f03ac1c6dbd368e6eb75ce80cba4f4d227d58b425dcd4a45e98833bb4671f3627ce33e27ab1c107e7cc4c797e162f66ef6346136064d5909cdff87eeb300586c543b58e25c6bfbcd828b5fdd18e7b9fdec9e0b6fbf79d7e74a3fade6f7fb67ad559823684beac63cd69720b3bf22780d3f665c57f9f39107bb90b27a01b41d709763348612feaceedfac2821d2447665e1dd"], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20044884) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 6.032795587s ago: executing program 1 (id=613): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'bond0\x00'}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) ptrace$ARCH_GET_CPUID(0x1e, r1, 0x0, 0x1011) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000180)={0x5, 0xffffffffffffffff, 'id0\x00'}) timer_create(0x2, 0x0, &(0x7f0000044000)) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x0) waitid(0x0, r0, 0x0, 0xc1000004, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'bond0\x00'}) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) (async) ptrace$ARCH_GET_CPUID(0x1e, r1, 0x0, 0x1011) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000180)={0x5, 0xffffffffffffffff, 'id0\x00'}) (async) timer_create(0x2, 0x0, &(0x7f0000044000)) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x0) (async) waitid(0x0, r0, 0x0, 0xc1000004, &(0x7f00000000c0)) (async) 5.939118502s ago: executing program 1 (id=614): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r6 = socket(0x10, 0x3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0xac, 0x0, &(0x7f0000000380)=[@dead_binder_done, @enter_looper, @acquire, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000580)={@flat=@weak_binder={0x77622a85, 0x1, 0x2}, @flat=@handle={0x73682a85, 0x1100}, @flat=@weak_binder={0x77622a85, 0x1000}}, &(0x7f0000000600)={0x0, 0x18, 0x30}}}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x0, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @fd={0x66642a85, 0x0, r6}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000340)={0x0, 0x20, 0x38}}, 0x40}], 0x7, 0x0, &(0x7f0000000440)="553fc696f4b1a1"}) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r8, 0x5b03, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 5.339914783s ago: executing program 5 (id=615): r0 = socket(0xa, 0x2400000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0xfffffffc, 0x10100}, &(0x7f00000003c0), &(0x7f0000000040)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x800, 0x1000, 0xffffffff, 0x0, r5}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r5, 0x48e9, 0x8daf, 0x0, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000380001242abd70002000000010000000"], 0x14}, 0x1, 0x0, 0x0, 0x10004891}, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0xb0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3b4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x32d21162}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7f}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x445}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendto$packet(r8, 0x0, 0x0, 0x20044880, &(0x7f0000000340)={0x11, 0x8100, r9, 0x1, 0x1}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) listen(0xffffffffffffffff, 0x400005) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, 0x0, 0x0) r11 = accept4(r10, 0x0, 0x0, 0x80000) sendmmsg$alg(r11, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="2c0000003e000701fefffffffcffffff017c0000040043800c00018006000600800a02010800028004001280"], 0x2c}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) r13 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r13, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r13, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdaa, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x3, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast2}}}}}}, 0x0) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000007880)}, 0x0) 4.812774866s ago: executing program 3 (id=617): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_usb_connect(0x0, 0x2d2, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000200086dd6002000000600600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22"], 0x0) 4.27835364s ago: executing program 0 (id=618): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x16, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="000cf99db13a1a5a9bbd472709f4e56d77b65ac6bb4bc386a500a871528664f930d18e5ff548aca57bb2820d914d6f06add88c55ed68d51bf3e6d6e9226faad9ea8cabc6d034fe9d592e290894"], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40001) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0x40086e81, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r6, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10) unshare(0x22020600) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8003, 0xc95a, 0xf, 0x1, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xff7fff00, 0x6, 0x3, 0x7, 0x7, 0x4, 0x0, 0x7, 0x3c5e, 0x1, 0x8, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0xffffebf2, 0x7, 0x3, 0x855, 0x4c74, 0x10000, 0x242, 0x3, 0xb, 0x8, 0x80008071, 0x7, 0x17, 0xfffffffe, 0x7, 0x5, 0x3e, 0x8e, 0x9, 0x106, 0x0, 0x5, 0x2, 0x8, 0x3ff, 0x9, 0x0, 0x5, 0x2006, 0x8, 0x4000074, 0x0, 0xe], [0x10000007, 0x9, 0x8000012f, 0x100, 0x5, 0x5, 0x129432e6, 0xc8, 0x2f9, 0xe, 0x2bf, 0x6, 0x9, 0x384, 0xb, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xfffe, 0x4, 0x4007, 0x7fff, 0x6, 0x400, 0x401, 0x4, 0x1, 0xff, 0x5, 0x7, 0x5f31, 0xd, 0x4e0, 0x80000002, 0x6, 0xb, 0x0, 0x5662, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x8, 0x3, 0xbc45, 0x48c93690, 0x80, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x80b, 0x4, 0x5, 0x800, 0x0, 0x4d4, 0x5, 0x8000008, 0x86, 0x3, 0xcc, 0x3e7, 0xb, 0xbc, 0x2, 0x6, 0x3, 0x2000000b, 0x4, 0x106d01, 0x4, 0x38, 0x800003, 0x1fc, 0x9, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x10000ac8, 0xbf, 0x3, 0xffffffff, 0x3, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x7, 0x120000, 0x3, 0x6, 0x712, 0xc, 0x25], [0x9, 0xbb35, 0x7b304120, 0x3ff, 0x5, 0x938, 0x6, 0x6, 0x400000, 0x8, 0xff, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x3f51, 0x4, 0x1, 0xffff, 0xa620, 0x2, 0x5, 0x2000001, 0x2000002, 0x14c, 0x60a7, 0x2000006, 0x16, 0xffffffff, 0x80000000, 0x9, 0x8, 0xc8, 0x1, 0xfffff000, 0x9, 0x3, 0x7e, 0x100, 0x8, 0x7, 0xaf, 0x8, 0xa, 0x226, 0x5, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x6, 0x2, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1000d5, 0x200, 0x9, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) 3.95690108s ago: executing program 0 (id=619): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000d00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 3.800869431s ago: executing program 0 (id=620): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x1080, 0x1}, 0x18, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x2) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x0, 0x0, 0x4) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3a9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x44040) 3.703612074s ago: executing program 5 (id=621): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{&(0x7f00000004c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000f40)="a905000000007464000100000000000000e5c01104b61aa67bf2154694dfa033fe5312e4", 0x24}], 0x1}}], 0x1, 0xc044) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f00000003c0)={0x80, 0x6, 0x300, 0x0, 0x0, 0x1b4, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd, 0xffe0}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xc4}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.584381787s ago: executing program 0 (id=622): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FITHAW(r0, 0xc0045878) (async, rerun: 32) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 32) sendto$inet(r1, &(0x7f0000000000)="18553db37f263f207161c98d8be39441262dc8f088b0acecb14fcfafa9a66f5eae776f516bc6604014f8108a8701560e4c7f90c7de833d05672e32df6d9cf4c243b80a56378a9f46add5297c607448792536be56397de511ae364c2389f3a9843ac74630e6eeb0f021e013fe7fef520d3fb5b3454a7307f6ac6450d4f219bd69d8cc5aa849bc2366d31ed88f8c76d27359984f640186bdc7852be9a38e9909764a435736e1fe1363905452c8", 0xac, 0x24004800, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 64) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={'syz_tun\x00', {0x2, 0x4e24, @remote}}) (async, rerun: 64) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000140)={{0x2, 0x4e20, @multicast2}, {0x306}, 0x2, {0x2, 0x4e23, @multicast2}, 'ip6_vti0\x00'}) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000200)={0x4bc, 0x1, 0x5, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [{{0x254, 0x1, {{0x0, 0x2}, 0x8, 0x0, 0x4, 0x100, 0x28, 'syz1\x00', "ae9277a85158f9bed09cc2fc9ebdf2d08ab2aa2273144517e0f0a83e54478978", "530f3b7af98adcfbcd4bd80e48e5d0a4f45326d57f7d4189b3ebbcfed65e2317", [{0x1, 0x3, {0x1, 0x2}}, {0xc7e, 0x4, {0x1, 0x7dc}}, {0xf, 0xfff1, {0x0, 0x1}}, {0x5, 0x5, {0x1, 0x5}}, {0x8, 0xf974, {0x2, 0x6}}, {0x31f5, 0x1, {0x1, 0x8}}, {0x7, 0x6, {0x1, 0x9}}, {0x8, 0x1, {0x1, 0x200}}, {0xf, 0xfff, {0x1, 0xc1}}, {0x7f, 0x8, {0x3, 0x3}}, {0x81, 0x4, {0x3, 0xf4a}}, {0x3ff, 0x6, {0x3}}, {0x5, 0x101, {0x1, 0xff}}, {0x8001, 0x9, {0x0, 0x19}}, {0x8, 0x8, {0x3, 0x5}}, {0x401, 0x4, {0x2, 0x8}}, {0x5, 0xb7, {0x2, 0x6}}, {0x8, 0xed2, {0x3, 0x9}}, {0x21, 0x9, {0x2, 0x67}}, {0x4, 0xe9b, {0x0, 0x8}}, {0x425, 0x9, {0x3, 0x3d}}, {0x1, 0x324, {0x1, 0x5}}, {0xa, 0x9, {0x0, 0x7}}, {0x1, 0x0, {0x3, 0x5}}, {0x2a8, 0x8, {0x0, 0xfffff55b}}, {0x5, 0x60, {0x3, 0x7a8e}}, {0x0, 0x6, {0x1, 0x401}}, {0x48, 0x8, {0x3, 0x9}}, {0x55, 0x0, {0x1, 0x6}}, {0x0, 0x8, {0x3, 0x51}}, {0x8, 0xf, {0x0, 0x6a}}, {0x40, 0x4, {0x3, 0x5}}, {0x6, 0x9, {0x0, 0x7f}}, {0x2, 0x0, {0x3, 0x2}}, {0x6, 0x3a1, {0x2, 0x7}}, {0x0, 0x1, {0x1, 0x6}}, {0x8000, 0x9, {0x0, 0x4}}, {0x0, 0x0, {0x3, 0xff}}, {0x2, 0xd7, {0x2, 0x8}}, {0x4, 0x7ff, {0x55eebd21c61e5211}}]}}}, {{0x254, 0x1, {{0x1, 0xffffffc0}, 0x6, 0x10, 0x8, 0x0, 0x3, 'syz0\x00', "d879509a76de7f4abf4e3d869dc2f7f52061dee50ba29ffb3955212640520980", "7dbf05ef1a74b755b4e1333ad007366cbe10cccf658a36bfee0b8b32bf2190e2", [{0xfffb, 0x5, {0x2, 0x2}}, {0x44, 0xf30d, {0x1, 0x40}}, {0x7d0, 0x83bb, {0x1, 0x28}}, {0x6b2c, 0x1, {0x1, 0xe80}}, {0xa, 0x88, {0x2, 0x8000}}, {0xe7, 0x10, {0x2, 0xfffffff8}}, {0x1000, 0x7, {0x0, 0x909}}, {0x9, 0x49d, {0x3, 0x4}}, {0x7fff, 0x2, {0x0, 0x9}}, {0x200, 0x400, {0x3, 0xc9a}}, {0x9, 0x9, {0x1}}, {0x10, 0x2, {0x0, 0x6}}, {0xd0f1, 0x10, {0x2, 0x90f}}, {0x4, 0x6, {0x3, 0x41}}, {0x8000, 0x6, {0x1, 0x6}}, {0x8, 0xffca, {0x3}}, {0x101, 0x5, {0x0, 0x5}}, {0x2, 0xfffd, {0x1, 0x8}}, {0x7, 0x7fff, {0x3, 0x7}}, {0xfff8, 0x5, {0x1, 0x5f}}, {0x9, 0x101, {0x0, 0x1ff}}, {0x3, 0x0, {0x3, 0xade0}}, {0x11, 0xfff0, {0x0, 0x1}}, {0x0, 0xfff, {0x3, 0xfffffffa}}, {0x6, 0xffff, {0x1, 0x3}}, {0x1, 0x1, {0x3, 0x1ff}}, {0xfff4, 0x7, {0x1, 0x81}}, {0x8, 0x9c, {0x0, 0x4}}, {0x1, 0x2, {0x1, 0x6}}, {0x10, 0x1c, {0x3, 0x5}}, {0x3ff, 0x1, {0x0, 0x8}}, {0x0, 0x7, {0x1, 0x8}}, {0x7, 0x7f, {0x0, 0xea64}}, {0x3, 0x7, {0x1, 0x9}}, {0xcb1, 0xf, {0x3, 0x3}}, {0xfffd, 0xffff, {0x2, 0x5}}, {0x0, 0x8, {0x2, 0x1}}, {0x7, 0x0, {0x0, 0x6}}, {0x3, 0x6, {0x2, 0x5}}, {0x5, 0xf7e}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x84}, 0x800) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0xa4040, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000000ac0)={0x0, 0x3, 0x0, &(0x7f0000000780)=[{}, {}, {}], 0x3, 0x0, &(0x7f00000008c0)=[{}, {}, {}], 0x2, 0x0, &(0x7f0000000a40)=[{}, {}], 0x1, 0x0, &(0x7f0000000a80)=[{}]}) (async) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000b40), &(0x7f0000000b80)=@v2={0x5, 0x0, 0x10, 0x2, 0x96, "7f981de05272832b36d79c201b4b51a972a8228afad1a4e2a4c53e6c4e7832eb2f3c52962cf5ac2593e1e3382e81509d259333b06cccdb00459399aa96c89bffdefbe2477a86452f88e6ba4a9482bb2088f984a4da6856bc3b13046a093ecd31b8072c3b64e3a6ab318cf8264e977414daf69326c5a483ec0f9e154bf937ef49676474596c170f86cc98646dcb51024f61d56bb6bf7f"}, 0x9f, 0x2) fgetxattr(r3, &(0x7f0000000c40)=@known='user.incfs.metadata\x00', &(0x7f0000000c80)=""/8, 0x8) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000cc0)={'pimreg0\x00'}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x30) (async) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000d00)=0x8000, 0x4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000d40)={0x1, 'vlan0\x00', {}, 0x8}) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x50, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x6e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8800) (async) read$char_usb(r3, &(0x7f0000000ec0)=""/119, 0x77) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000f40)={'veth1_to_team\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async, rerun: 32) write$P9_RRENAME(r3, &(0x7f0000000f80)={0x7, 0x15, 0x2}, 0x7) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000fc0)={0x3, 0x1, 0x8080000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) read$FUSE(r3, &(0x7f0000001000)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r3, &(0x7f0000003040)={0x18, 0x0, r6, {0x6}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000003080)={'vxcan1\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000030c0)={0x1d, r7}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000003100)={0x80}, 0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000003140)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) (async) ioctl$BTRFS_IOC_BALANCE_CTL(r5, 0x40049421, 0x2) 3.583943244s ago: executing program 5 (id=623): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @rand_addr=0x64010101}, 0xb) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) (async, rerun: 64) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@private2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6}}, &(0x7f0000000080)=0xe8) (rerun: 64) quotactl_fd$Q_GETINFO(r1, 0xffffffff80000501, r2, &(0x7f00000000c0)) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 3.513649229s ago: executing program 5 (id=624): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x3) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000480)='R', 0x1}, {0x0}], 0x2) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000400)={r7, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000001c0)={r10, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000200)={0x0, 0x0, r11}) close_range(r0, 0xffffffffffffffff, 0x0) 3.449990444s ago: executing program 0 (id=625): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000400)={0x80, 0xa, 0x4, 0xb2d4, 0x0, 0x3, 0x0}) syz_usb_connect(0x2, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="05010000b1f203401e0903003bd70102030109024d00010000000009040000050095c20009050000000000000007058433"], 0x0) 3.394196334s ago: executing program 5 (id=626): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4696d64454703258}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80300, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000000040)={0x0, 0x40000105, 0x0, 0x0}) (async) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000eaffffff800000c0"]) (async) r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc, 0x0, 0x5}}}}}]}}]}}, 0x0) (async) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) fallocate(r9, 0x11, 0x9, 0xfd) (async) syz_usb_control_io(r8, 0x0, 0x0) (async) syz_usb_control_io(r8, &(0x7f0000000000)={0x2c, &(0x7f0000000140)={0x10, 0x6, 0xa, {0xa, 0x10, "87912ea0f89e8297"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.16842984s ago: executing program 5 (id=627): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000080)={0x14, &(0x7f0000000140)={0x20, 0x9, 0x30, {0x30, 0x0, "efd3f2d0c525fc8780a6dabdd3e44ab3109bbe5be405e89ce345257764048f5e56e9ac987765b9db1b5d9eae07c2"}}, 0x0}, 0x0) r2 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000000)={0x2000, 0x19c000}) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) ioctl$UFFDIO_COPY(r2, 0x8010aa01, &(0x7f0000000080)={&(0x7f000071f000/0x1000)=nil, &(0x7f000071d000/0x4000)=nil, 0x1000}) 3.12261312s ago: executing program 3 (id=628): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r3 = dup2(r2, r2) sendmmsg$unix(r3, 0x0, 0x0, 0x4008890) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x12) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000480)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000300)={0x2020}, 0x2020) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000240)={@broadcast, @private, 0x0}, &(0x7f0000000280)=0xc) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r5, @ANYBLOB="01002abd7000fedbdf2509000000200001801400020065727370616e3000000000000000000008000300020000000c0001800800030002000000500001801400020065727370616e30000000000000000000080003000000000014000200626f6e645f736c6176655f31000000001400020076657468315f6d61637674617000000008000100", @ANYRES32=r8, @ANYBLOB="440001801400020077672600000000080000000000e8ffffffffffffff0048652ef300"/56, @ANYRES32=r9, @ANYBLOB="0800030003000000"], 0xd4}, 0x1, 0x0, 0x0, 0x2400c041}, 0x44090) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_open_dev$tty1(0xc, 0x4, 0x3) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000e80)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x53}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000b40)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000b80)=ANY=[@ANYBLOB="200036ea02000000"], &(0x7f0000000bc0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000c00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000c40)={0x40, 0xb, 0x2, "0fed"}, 0x0, &(0x7f0000000cc0)={0x40, 0x13, 0x6, @multicast}, 0x0, &(0x7f0000000d40)={0x40, 0x19, 0x2, "02d9"}, &(0x7f0000000d80)={0x40, 0x1a, 0x2, 0x7ff}, &(0x7f0000000dc0)={0x40, 0x1c, 0x1, 0xc}, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1, 0x9}}) dup(r10) 2.826054604s ago: executing program 1 (id=629): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000001200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 2.532809087s ago: executing program 1 (id=630): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r3 = epoll_create1(0x0) fcntl$dupfd(r3, 0x0, r0) preadv(r3, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x4, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r4) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r2, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r2, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) syz_usb_disconnect(r7) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 2.095931389s ago: executing program 0 (id=631): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000002b80), 0xffffffffffffffff) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_connect(0x5, 0x3f, &(0x7f0000004680)={{0x12, 0x1, 0x310, 0x8, 0x31, 0xd8, 0x10, 0x499, 0x1507, 0xaa69, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x2, 0x3, 0xba, 0x30, 0x7, [{{0x9, 0x4, 0xd4, 0x40, 0x0, 0x42, 0xdf, 0xf2, 0xfc}}, {{0x9, 0x4, 0x3, 0xdd, 0x1, 0xff, 0xff, 0xff, 0xc1, [@uac_as={[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xcd, 0x1, 0x7}]}], [{{0x9, 0x5, 0x2, 0xc, 0x40, 0x4, 0x10, 0x5}}]}}]}}]}}, &(0x7f0000005400)={0x0, 0x0, 0x0, 0x0}) 81.579652ms ago: executing program 3 (id=632): read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002340)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000002380)={0x209128000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, {0x33}, &(0x7f00000000c0)=""/220, 0xdc, &(0x7f00000001c0)=""/217, &(0x7f0000002300)=[r1], 0x1, {r2}}, 0x58) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002400), 0x200002, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000002440)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000002480)={0x28, 0x2, r6, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2}) r7 = creat(&(0x7f00000024c0)='./file0\x00', 0x4) ioctl$HIDIOCGCOLLECTIONINFO(r7, 0xc0104811, &(0x7f0000002500)={0x5, 0x2, 0x670b}) prlimit64(r4, 0x6, 0x0, &(0x7f0000002540)) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000002580)={0x48, 0x2, r6}) r8 = openat$cgroup_ro(r2, &(0x7f0000002600)='blkio.bfq.empty_time\x00', 0x0, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) quotactl_fd$Q_GETNEXTQUOTA(r9, 0xffffffff80000900, r0, &(0x7f0000002640)) read(0xffffffffffffffff, &(0x7f00000026c0)=""/63, 0x3f) socket$alg(0x26, 0x5, 0x0) openat$cgroup(r2, &(0x7f0000002700)='syz0\x00', 0x200002, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000002740)=0x8400, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION2(r8, 0x40a0ae49, &(0x7f0000002780)={0x1ff, 0x1, 0x1, 0x1000, &(0x7f0000ffe000/0x1000)=nil, 0x6, r7}) ioctl$KVM_GET_DIRTY_LOG(r8, 0x4010ae42, &(0x7f0000002840)={0x10003, 0x0, &(0x7f0000ffd000/0x2000)=nil}) sendmsg$NFNL_MSG_CTHELPER_GET(r7, &(0x7f00000029c0)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002980)={&(0x7f00000028c0)={0x88, 0x1, 0x9, 0x801, 0x0, 0x0, {0x3}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x6}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_TUPLE={0x50, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x14}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000011}, 0x4000000) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000003980)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x8008420}, 0xc, &(0x7f0000003940)={&(0x7f0000002a40)={0xedc, 0xd, 0xa, 0x101, 0x0, 0x0, {0x8, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xec8, 0x3, 0x0, 0x1, [{0x3b8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xea}, @NFTA_SET_ELEM_DATA={0x10c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x74, 0x1, "b36e14e7764e814545d5520b564e9f0936b3d9d0e99684ff3dcb7d57722f022cda065809bf40a73b04b893099081a00b80ddf2dc084ceb1e4ccc687dcc84361c5e79d67253310741136df96f679ab49da2b35e1ba26e737de0c9415db70e52d6d09e27285ffd8c6467ee037ff6b87ee8"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x290, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x6c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x75, 0x1, "78fe2d500873f8a424a3bcb57fc13ac2082babf13bb0b723939c36277b8b874ac3c7f2ee0e5f8a5252c3b24a59822833786a06d847f1ceee2039b12e60681feb3e6170feefba4c17af3d97e9df769a7e7bd019b89bfbc8bc001a534c6522c58b46e7414d32ef7e0336b52f00708702ec2e"}, @NFTA_DATA_VALUE={0x42, 0x1, "a2c3449fd1cab487d9756921175934891e8d3ff73ff918fe3481c71a95c4c1007b378d1ecfbf3d983d8dd10930dea4fa94992eb50051a8f1eb2164adba18"}, @NFTA_DATA_VALUE={0xcd, 0x1, "2234da176e0c9d86e199c317214cd722f36f71b43397fc1559efe12c3995a695be5b251d26437e10ff5b79c622d0618d771531afee195a1ccdaa69b6037cadbe46109a0f5d3a8b21a31996382872c5c66cb180ea2b8ed67804c35ca4ffe53711b524e65cef60abde0a0cdd1f2ba074657885339ad921946619176e5d16b7bab1b5ca4f3ba61cfffb672946b0fe55cdf4da888a15bc75cba63cf0a31ae530233cdb7fad8fac44179965e9bd105f1ca18840095e29972fcc38a5b972635bb0bf334a26da462b87bbe655"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x15, 0x1, "7da27b17eb27935581a4712eaafd540de6"}]}]}, {0x5a0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x100, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x47, 0x1, "c5b51f620a8ccd4f0ebf958e932d47987d843bae758f60f07752e13f7465759b79e6f60a9bc7446a9c33abd08e2bd764b7c192255ee2c541a2320ed4a3b393ef32e0b2"}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x78, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffff}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_KEY={0x3c8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf3, 0x1, "bdc5b3292aa98a6533a7de0b54e82d769aa2fda2faa9cf43b7fb15b335cc811860cb4d37666acb81c43bd2b561597c6fd118d4dc09f52bbf90f5bd74f797d3522f88fd1a76aced1d887b65098f81aa0932e51b74d417e04a453678e9e7c3d3621b656741eed8d2fe47795c26f74be2a0e6ce3531370aac731cd886c942395dc73d6159b9df29895b26afaa8fd819cc882e993855e4c6a2aa32ea0bd543d678372a86d6a077d8a6cbb46fa138da629ca3fe63975de7b1599cd186a47b20e1436fa3274ccca6ee3caec365e7017f7c4d6f7fced67b44b6291845a889f9b42e7acc76a329b8ed0394624ce8ef45e3ea13"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffffa}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xce, 0x1, "8bbf262b1f32f8eadb37f3b98d7e9fecac6a45aa739b8440f7a03a0749201f47c7740b3ccdc14931310bc8cf8c244609be0fd624f5dea2f2187173395ec1708c05689e950c4c1742a9e77b6e6803906abb1420b1555475829fe7dc590c64dcdca1eeadf6d1f1f4878c9e300af006475a55c218d6b7fac16618583887202ce6a0d9db5e28ff2fd9cb63375f925618538e79020ef3a08ec552097e27d8d6d61a43c7eecf61566de635209550f8c7b545276334e2ea0b31caea108d638a12dc990ff908fc8fe181c97b24c0"}, @NFTA_DATA_VALUE={0x92, 0x1, "e21e342d90d96c1f93f566c5954d12bc901c519701e2ae411322ec6a523ad3b51c104cf20701f324a2699a38184480367f44a43adf907d7fb4b0a7cc67cf81e64ca320f279569963b55cfb2f8b43e0f9681c3c5d7f4fa47a6bb6302fc5bd18b61a19a4933ae737f51e4f93433496b4c8b3c742bb3f6ab2bad362b7a9b148a93460688404fd4d3aef14a82ef5ca8f"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xb9, 0x1, "2b1c01718afd7577aca650ad7d52f6fb863691f6ad2313d471cf58b5dfc834c175d3b3b0c18675811428d30c130b90c789c67ea0b99a6ecd0f870d3cc951f221a11a9865a0e7f74d0cbf0fdbc85e5cc07ac68888d7cd975399fb236b390156c8dd1e568be0bcd351a000adb1c272fcdbdefe431f6188521b760929cd022731faa068eda4b638af19bd1712d0fbd1a7486f4f4cc9b9dba9f55a64b34b77eacc3a45476d7c5cb4ff3b5caf89cc6f83e783d24ba9303f"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x20, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1a, 0x1, "260861bc74697ba74692066e8a6bc78220681a4dd6ff"}]}]}, {0x294, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x250, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xab, 0x1, "e3df038ac08d5c81f5e4db8e24a02b0376dccae435db39b51319d5957e7e2257420f23dda71e0e8d3865c0e64eab681dbd1747ce06864b9fe94a923a757e50d9a1a5f7e7a110f0b966c8778588c0bc9503cf52711da177b25fd813790df9cf59ed722238ecff5462e4c483f086be2fe532395198df0befb538882ed8e0e0078fda52bc1cece7bac43c64b2b84251436cd35ab125ad328d38e3ddaabba4606c05f7f9c8e366e4cd"}, @NFTA_DATA_VALUE={0xb8, 0x1, "de5180ae27633fe034b96e670216427dedb8c0bb8738838fc89b8849697540b8788a0af551656f43eaa8b7c57ba8ceed1d7745d800f03e4cf146d30b872521983668dde6a81de11537a8dd285a403fd50209927487419fd4b354419e8caf71cae8322cbb0bb2109dcb1e240bbc627c47bf0ff813fee906ad86cd5a572eb23a3665757064021efea5067ace07ffed48bd1b43bcb6b83bb30807dc137d07a11e1a3251a17aa153a8aa130ccc98650b97e71012d80b"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x6c, 0x1, "244096ed9c10c9d829fb80f6aa3495df43eb89db888c6fcf3d96870de2f757a06317770f841b7946c22b6b714df29a98822c005b8557d06075e6d80f35c420a5d4a01742b116df5228f8aba90f1116a8bbe9943f8a888b5138f8466c5cd06a788104714c4f54476e"}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x2bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x9c, 0x7, 0x0, 0x1, @inner={{0xa}, @val={0x8c, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x3e}, @NFTA_INNER_EXPR={0x3c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x16}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x16}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0xf}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}]}}}, @NFTA_INNER_EXPR={0x44, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xd}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x1f0, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x8}]}}}, {0x13c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x12c, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xd, 0x1, 'REDIRECT\x00'}, @NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0xf2, 0x3, "93a757ca126b78ff91f04f3e0370c299fec320fde2eec1643fa19d71c1a527d522967a86205a7aaf3b5865d0f8be90fccf460e9282e73f80d828c8cf22bfafdaea0df29540338dc8df532b9fbe13f03bef470b27879edc9eb5c80752163e6294aaacc201ed173a87338d1052dff0dad87a3bce35dd773b6dfaff6fe6c815abd59d7a26e9223c8b1c90a549c29b11a5f4a6b58df8b02c895c72f9047e6e61f814c3efab0c8b7b436b062c4905784ab573f75b17466ffa8ec0ec952e900ba7d1b820d05c920ce92f3d9b4180e616ab8df6064d77eec4eb3ab173c9a5abbc6bd42b61b3f035f71d2d00d48a5597090d"}, @NFTA_TARGET_NAME={0x9, 0x1, 'MARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}, {0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xa}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x4c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}]}}}, {0x14, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4}}}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}]}, 0xedc}}, 0x20000000) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000039c0)) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000003a00)={'\x00', 0xf46c, 0xfff, 0xfffffffc, 0xfffffffffffffffb, 0xffffffffffffffb0, r3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000001, 0x1010, r5, 0x91f82000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000006, 0x12, 0xffffffffffffffff, 0x8f0d000) read$snapshot(r8, &(0x7f0000003a80)=""/202, 0xca) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r9, 0x400c6615, &(0x7f0000003b80)={0x0, @aes128, 0x0, @desc3}) ioctl$SIOCGSTAMPNS(r9, 0x8907, &(0x7f0000003bc0)) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) 0s ago: executing program 3 (id=633): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x43c, 0x3f4, 0x300, 0x70bd26, 0x25dfdbfb, {0x1, 0x2, 0x3e, [0x3ff, 0x5, 0x4c9, 0x8000, 0x0, 0x19, 0x43, 0xfffffffd, 0xfffffff3, 0x0, 0x200, 0x3, 0x40, 0x3, 0x1, 0x9fb, 0x2, 0x0, 0x0, 0x8, 0x6, 0x3, 0x6, 0x5, 0x1, 0x6, 0x1, 0x3, 0xfffffffa, 0x80000000, 0x6, 0x9, 0x5, 0x7, 0x400, 0x0, 0x8, 0x9, 0x10001, 0x0, 0x200, 0xae7, 0xc48, 0x1000, 0x9, 0xb3, 0x2, 0x7, 0x972b, 0x7f, 0x0, 0x3, 0x0, 0x5, 0x10, 0xb, 0x1, 0x10001, 0x80000000, 0x5, 0x1, 0x2, 0xfffffffb, 0x2], [0x7, 0x1000, 0x0, 0x3, 0x9, 0xfffffe00, 0x9eb, 0x2, 0x9, 0x7f, 0x5, 0x5, 0x1, 0x9, 0x3, 0x8, 0x3, 0x5, 0x3, 0x4, 0x6, 0x3ff, 0x5, 0x0, 0x7ff, 0x9, 0x1, 0x4, 0x7ff, 0x2, 0x1, 0x4, 0x82b6, 0x7, 0x9, 0x4, 0x94, 0x8, 0x8, 0xfffffff9, 0x6, 0x4, 0x6, 0xffffffff, 0x2, 0x3, 0xfc, 0x5, 0x7fffffff, 0x0, 0x401, 0x9, 0x7ff, 0x2, 0x8000, 0xfffffff9, 0xc000000, 0x1, 0x1, 0xfffff13b, 0x1, 0x0, 0x5, 0x6], [0x5, 0x0, 0x5, 0x1, 0x8001, 0xfff, 0xffffff81, 0xe1, 0x996d, 0xafe, 0x9, 0x4, 0x7ff, 0x5, 0x9, 0x8, 0x402b, 0xffffffff, 0xffffff81, 0x4, 0x4800, 0x3, 0x88, 0x1, 0x4, 0x2000, 0x0, 0x7, 0x10, 0xcf, 0x0, 0x2, 0x800, 0xfffffffa, 0x8001, 0x0, 0x7, 0x5, 0x10000, 0x8, 0xa5, 0x9, 0x7, 0x7, 0x4, 0x3f, 0x0, 0x3ff, 0x3, 0x5, 0x0, 0x400, 0x0, 0x3, 0x0, 0x10001, 0x0, 0x7, 0xffffffff, 0x3, 0xfffffffa, 0x7, 0x8, 0x401], [0x5, 0x3, 0x4, 0x4, 0x400, 0x14e4, 0x7, 0x958, 0x1000, 0x1, 0x7, 0x1, 0x1, 0xa027, 0x9, 0x4, 0x274, 0x1, 0x4, 0x8, 0x8, 0x81, 0x6325, 0x4, 0x81, 0x512, 0x3, 0x800, 0x6, 0x8, 0x1, 0x0, 0x0, 0x2, 0x4, 0x9, 0x7ff, 0x9, 0x0, 0x1, 0xd63c, 0x6, 0x6, 0x7fffffff, 0x0, 0x81, 0x1000, 0x401, 0x83, 0x9, 0x3, 0x2, 0x4, 0x6, 0x8000, 0xba94, 0xa, 0x8, 0x4, 0x1, 0x2, 0x1, 0x800, 0x72a], 0x1b, ['@:-{{%-,/.\x00', '!^/+@\'\x00', '[\x00', '\\.&^]\x00', '\x00']}, ["", "", "", ""]}, 0x43c}, 0x1, 0x0, 0x0, 0x11}, 0x24000000) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000580), 0x101000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000005c0)={0x0, 0x0, r3}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000600)={"9be78b7ee2531f36a88e92a0a35929616bce2b40685b3911550f901aa26cdcdb", r3}) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000640)={0x7, 0x5, 0xffffff70, 0x4, 0x0, "ef885fef026b74e71359729992d83a49570fd2"}) r4 = syz_open_dev$dri(&(0x7f0000000680), 0xa0000, 0x600240) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000880)={0x0, @empty, @multicast2}, &(0x7f00000008c0)=0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000940)={0x1, 0x0}, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@bloom_filter={0x1e, 0x8, 0x3ff, 0xffffffa9, 0x100, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1f, 0x6, &(0x7f0000000780)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0x39}], &(0x7f00000007c0)='syzkaller\x00', 0x7, 0x5c, &(0x7f0000000800)=""/92, 0x41100, 0x8, '\x00', r6, @fallback, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x0, 0xb, 0x3f, 0x4a}, 0x10, r7, r3, 0x1, &(0x7f0000000a00)=[r3, r2, r8, r3, r3, r3], &(0x7f0000000a40)=[{0x4, 0x4, 0x7, 0x3}], 0x10, 0x5c}, 0x94) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r8) r9 = syz_clone(0xc00, &(0x7f0000000b40)="6cc2a4709dabf9c9a85c5e38d4d517ee63ba4db8aaec5750e30e23fae7f247e4b2812f2dfe72952cb1f7b60d59390dfa87f2f92fa819ff55e926b4ee1f0669d43aa3888bce01f8c8b7e10097fd3751728fbb913ee0e80b7addf6f33e90a3f1e3c6556d578d8a466ab7fc1bb515e9e6718288083d87c0521e5425191bfa69bd002c3d89125a9987f3f3d3d403630d2056ef6c01028d33e0f294b56c02abf9134cb0aa55faf3d7948cd64233bd0b41b2988c03385a398fc70094682a05db8b80431165a9aa5d53190717ad77dba0997527d8e9f70b81b03d1e8735dec64fe629af3dfd99f8e6b6aee5af7e09a5534379e0a1f350a84a398e92bd510737167e66", 0xff, &(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0)="fc228c0b2c89e27a3306f0f934bc782f160b585f60a11fd7c3928e1652c893968c0ab98c7ea2eca2dff9c97a4109b8ae060a68ecb2c0849351ae5e71b3099882610f725a72caeb1d522ffd05f7c094671ebfa4c1768865c05ebe0a3d6726a23347f3") ptrace$ARCH_GET_CPUID(0x1e, r9, 0x0, 0x1011) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r0, {0x40}}, './file0\x00'}) ioctl$TUNGETVNETLE(r10, 0x800454dd, &(0x7f0000000d80)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000f40)={r3, 0x20, &(0x7f0000000f00)={&(0x7f0000000dc0)=""/233, 0xe9, 0x0, &(0x7f0000000ec0)=""/30, 0x1e}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000f80)=r11, 0x4) syz_clone(0x80000, &(0x7f0000000fc0)="711f110c85b6070f2ae67288d9b8b36ef4cca57282f35b522fb8c770a800ab0be9b97934d147bffa2af729099e7b749dceed326c3c794086f6fe2628765e81a31a6fb4c3f57733dfcd86d12b5e366325585b2cc182fb63d5c2eb69e04e2601c0ac7ae4b4577228378634a07746601b4cb5116d86f728cb1360a531dd58e5ae45a2a536d0862cce14509ef12cb3db3088338c4b6ddae5c5cd2f6ac89c31311217894d1dd4c03a9676ac6ef8b4de4d1f9e4414afaa777764ec5b3651ee09c7446259b1df8c282d71480603bb71c8e6bd9235012cdd9616977b5a1998e1d71bf54c684dce1e78249c4d8404514e7226b801e7fd2eb207a964a4b474969f24e0cc54cca0b13a0060b894f6efdc2ceb20d2003ec5452a277f1fc4105623fb9b34513b61e89f7a76e5017ba81e24c87236338cfe7e6ee6377c41d246dba27e049252082aa52f662a47bbf21e83015f83b0ed48a4afd7dfc8d103b422dfec7bd6bb897c2d7008a49c2295d8fc9bd461eccfd73ede33b0c37aa75951e6c331396f2c17c9316490772b4b6b44f401988285a31f3cd760f73e089daa351ed0e77a8eaffdbc9460152ee70decb6c7632641cb473d6a77eaef3dac83cd248dfe368b4b6a58d92bc3b79b4d57712d679d3f099c10d2ac4e0c7163207adccfbaba0d53f429f52feca8cc18fbe846958151d92d48f5da9a0eded634ded6e2a78aeb2af381b91ae9a26e79be24ad20e87473506071f10dcc3ca2bc85723b6c345d6e881ad17d00ea06676c3bbb3a05fdba68a270efefd4e7287fc8c6df71f7751165526b9868a252c3bc4887a7ea4def1477a8f5bf13f43cbd49f07b34d9cd274643309a7132d05f67b5bc5d95cfe02d9a9567c6338a2a7e49d2e38b97f775c491c40b7d6198dac1f75768810b3aa183490fcdd0b5e4cae5b664d1cdf16bd161431b2a0fe006463aac8c23edb53b7c78bbeffc46b0f2d55617c121982a4be2aea131447567cc07e9e55b9e46b0d4bb53582d767dec66b70deb9849afc4186bd1d3987a97ef4b55755284ddf88fee8f2d6eabe6c12e24b129bb3816a6fec0b676ff49ed0a5f5b0d64e72bb3966e744d8e1683a00941a1585efe5118f135899a7c1ec6615a27b653677e1c2fe4b3e483733818e050008e0f36ec3345035253b55f165349798be43b3c35f79d40eb7bbe7b7a62b3c491506a8a4ff26f50310c8f0163aa16ccd68b67c1dd6f83f1dbec6ec31722701bbb43320e24ace0e4ddb594f084be9003fa85c58b66e94c597098731de3b68d7eb39424d93f663ea0fe4c0ce85eec8ed26208edf48be5cafc14ac5df0e5457aaebfce4feae9846becbeb8f09f57a86bd2023a6e02c72065bebbbf24df4a769230443e0be61d961f19ee0926a2178967e6aa042fe9727b1074fa2f5d5fd36c1b003a0f882dd549c2e5953a23adfe552675702ce04689d167feb4ea777ed9268ab9529dc6844ed7695f1a3c98da8d4c0eec74997a8321b5ed6548a7b701195ed0fe6af962a274ef7f4f5f8fb43e2e466bd47af5befcdeb84c40eb99e936b1f080916f667e491b0b2b7c17ce234967a556357eab3a0cf8c9b093fd52f50374b40b88bde458a46499f4f62d4820cb329f3d4199bb2e397691e89b1ee2b24e59272e80f2cf6cee0a2faf2bcb670e8483362125e656e7e89588eee58a4b3c216007e14de55744ab3d7c60fed5e2d4a43315dfebe08f2db7a0a6e101bc9fe68a34bf6e9e5d2cb9b7d5aaabfdb63084b5a355f3f3c91fff023e85182a53908d70b1e4591cca74eae54d444801e0cb91a07afe7bfb06814934b9f836782112b3df9dfa9cd7674682f807ab699149979919af1d9bf2855a86abdfec1d1934d590f10703cafa522ba6651c6b64b27eb3798a9a94f5c049c06eb52652e80f3eeebd22e914079af92c1f7935f55f4a01a10fe8809ffae0ec7cca6675cea29af0645c39cc08af97d6d60a385e10bae61c98ce14c9d60e323e114bd6c0937ea7dab1bc59e312f03dcfa9f21b6cbb943befd342c9a2a2a0b9642e0ba1e6a86f9ba78ae388e736fbb37650e036da04d81ff21a4d9fcc77d3b8d94c19221ac16d3ceb44a5ebc6a3319a2f139e5164808abeb7508f6a49c4c2692322b81fa022041c95294e686c30d4a688edf83f697c2516775f79ec5c40b6bc25b76975cb18415dad3ebb76e5f5ad3ac9556c33b925e4f43111b10b8708cd9e11d64849186c6924516d76e38f414ee0309040a441ff050c225b77a77b6fea74ff821519e12ce05ee1db134cf6b59430cfd2ed44fee9377d4a629cbb77108978c6da72a84b9cf31334791fe80f0a584d7db200183dde2ebcd7893fea85dbf5233051592bed4c76038dd39ae8729ad5782ca1b3c0c640e3dd378eefea9f4fe76a338da6d1d3b8fc7fd5d80af4b92233101fe37827ad12248769cad34b2e3e6b795eb05dd8ff8a98d671e71dc253d700919c32f17dbb0eb89b850c0fd78a04e4cb565d4c14e24c1ca8a1699fe9917744b5389011c34e504ecf84a4aed19f8d56bafd6fd58ec75762b062b380daf33e8d9b136a63a7f12c17173f82e2ee8cc5e08dcaf70c0cd99a27a093179ce5caf6a72acbca8d1ef4c46a1f55d6231a39823517ff30937e295929589cb0cb298cd48cb4e9e967635d2a2dc029737c8e4b72b19ab11907a73c34625990fd4139b514e7f1be49d27a54b42d3caace92ce06abfcdea7035ee0055bf86392677a47ee50d6474fd7b7759651fef5b7065d347c685a1f399b56da12ae4f21ccf4b0d9ffa6eae0965207dbc63303fe21e4c18a93b402208cea4aedf64fad15ecc603a054ddd5424f68e8bbe9ba70b46e40fbe79962093ea3e708b21139b6934c4165f3e97b42b4744978b9d077880b7be432418b3231a9e44432f76bbeebf559682c96089a40cc0bdda5b0939f7654caaf524c51c6f667e82c8c7d685f68025be56da991bd600fa16848718d6359def12382e5aa8d60cb4d83ea2e40f8e0ff49a33e8f4a0d28bd05f870fcfb4f70a0b8159c28694391b16c525e327b9f88dbffe5e96283f8ac7bf01e4dc0cd2129936a4108c94183b3f8c70792eae7bed97faa21b12110558b2d6fe8a7a0df0b671bbe0a0ef5b6d8c4d5c964f198a277b0e0d1cb5354ea109829f126df54c44a2c998368af28e9891eb0ba09fb5377b946377741cdd194ec017fd38d0388cc250c849f2bb0897b4a000693a894d60860befd8708286e816eda36e056a8cef3f417ed223c2c0443d1e575421a1a4c72ccf65de486d8ec64bf43518d5c6ce009904655c02db45ad473139f7d68b6a53a2b75e83ce872a62352589299daaa478b21faed0f6abcf8ad7689b76ded7c2bbea90cfa48900c145cee43985b5f46387f8ec864a3f875dd1da1c8252cda8637535dffd25339ef8f66f7dfa41bcffa4f5f93b6c75ee1d3752864867672fd2b265bf4c1bdaa0726d2c0e8ae7ec3552587ae51de2f55cd3beba3456d8b5e0267d1f9086304cb89349bca438daebe31c74fc3d037d9534e599ec69bab4a43f8ce1b8926a3bc97c5a1653dd07addfa8d834f08a5f5f0060910d47c91cba983326d08e4c5889feb1a729fd9519150dd4a1e2b2706557604e53da4d6dc8d14d23631ba7d4315e4e2d3152bab2db17cc84af5e17f75ca1842a6106ca067e0cf3bd74a6230b6a5321bc3cd0838a9b662086624a060abdfe42838d00b082d90fb7aa28dbb8142b4472f745da674ef2afd00e6a74da246b588df7ad298478e9827dd8e56b2f76b8322ccd08e7d775e6ed303d28a19d7cab2ca82a68641565c5fc7d1a84d62afc79611adcb8a6533887427dfbb6eb88ab4d2b2e12cecd06020b3fb01ae84657f8f5027d3935d86f9cc027283ceff62216aa91c1967b19ede5cf4f9011c6443ee4bab36be3cb0dd9773169b6890b89b3db3b90efd9f8fe3e8f0c941e48c776a0de2249f11b72a202908bf3a922bd24c134ce046a9fa1029779e265bb5cee3c1a2d7e62641573a27b46f057e3ab18bf504a9dd994d91fbffb4cade6c86c49d6d9ac6ad41590f77a558a2e7b35c3e6017873c3b445ecc4d495238b0490b9d3c2c001fa867ed50a65279e3647152227080af992fd6835b79a1775a656c181a331a1a99a49a0eb76736578adf2583496e60423dc0434f802b62f18bfdeb3bb978c5444db3eeb3f44caa93aeeff8a27cefd883aab5a57b6ac438dbbc3fe1155be72c6297af1a43ee4149bfa3b90f5a48e603f348f3f41f48717a27c1f22f4d090653bf213cfc5509f61895bd0010c9fb6cc3d6a412091892b2d9411dea889993b6138ffe71631524724fcb966e8d960a1426bbeb11796d4da3ce6596931e3df9fdcc557750abd0de96da6c044ce58d7d1ea691dab139759bf601c25fb9487709cd151ba866745eeef739cf2fa7d8f90914a51390b7b34b69e3f337244b6ae6ca4644dc0fdc265ed06b279ae4898e9429c963325695ad4d2af57d2e07f736a783ddeec3c57d12a9998725ce29d72db60efbb390e4b2e6401e23079d375a1afdceac9e17e86fdc071d89630ca7ed06515f5ad9702431db27830055d824aa699b2f37711a38f1e419d911382805ba40c8bda88973181f8e95168688d758ca969db1fade6f776ac0c5adc5e9d89594f502d823dd1e72ebbfa2db4b4d74f585d2b8165e1c8b6cb5c0d5a3f7e662b545c944074c41c862b1529001f5d26f7f92703b1a6f94b50c13e40dcad39c9a680916ed3d5b1e36fe936a12827c743661fe4d01f1c00cf13d11707625788d74d9fb22d92fa40ac8d4b66414edd2e02999708c65717422873730c96b758a0dfbf65edd96b8175a90bc5686216efae2c5c1403e5c78ea6c3b197dd6048852aaec348532e83379e298a15fcaa3a5983befad955df2537b967a3e260bf5b7c37ca984ebb7595ee534db522ccda85566dc9cbcf1f8a38e8b5af8198c1e2cced579393c95fd8c0cb0e70a4a0e7540937a89938d72d35afcd8c32317b22d45fd4cde13b77e4ee00c113d1b2fbbb941f110b674d681d0af7a9d682bd1609eb3ef86defb63ed274ea8efe2c64012302a9adcd3a3a2975b252b34aed8787df540d24bb576298fecb9221e63dca901332c7f44fa5e8c985620f3901b3f73fbe974099a11323771c7496eb597b004472a0229ffb9ab5f6294b6904334093a38cb89863d9d77982607967998300e99b19d160f44f0a48f159cd794856dd1e1672764b74966e712a7cdbb7a1f7c46ec53f271fa89150aa67dfc3cb648948afe15bdb99bde686a97858f6706f98e2631f27275d9abfba0f5efd181a0a3c144b7788b9e137c01c1254a85226cf2beb18dc6da49224b038031733d806afa74ac885cb70ec7b848b26abb28e156af68a7d6fdf24c6904ea166dd27c1c8caa28258b0cc3d6cb541c5e62dcd33009530e8c5cad8821b3455e03a6cd8957861a0a1ab7252b0a3bd304d95ee25f18ceb5a7c6f806130bc75a230d41bf2c9eb3008dda466ac6e0f2691d90f3829a2f43d1af8d2b329dc5bf560f06b70a2adea78a400465c41ccdfa10616ef029a69c02d10c97bb8cc9cd7e59ad1d09086221060d4e3c217dbf67e9acde58ada502d932b2bc6b654b7aa9e02c80c7e560a9bf7c8710b9585dca18ea87feee05c8562ce0c11169416329ab8c7b0801db23eb00db2881c656fa5de800e6a7f1ffd3868a99fa337e9a3e9afa98f642c30264a7fe0dd92dd82e64cb629bcc383706635c70fa4c92150b53005ca703a8f648c7ad7c5ded29a6cee1f3aa10e5ad6f01242bda01c1867a5159b4183da7f1d94f5a8061bc644c", 0x1000, &(0x7f0000001fc0), &(0x7f0000002000), &(0x7f0000002040)="f72d7e9a98a35995076d2455282c66bf84c466914b313d5bf091d9bf79254c1058a56dda8b8fa039aff01cbd9600abb7f1a9ddf312c33115cdabfd80eec9e68d4b9d5273f4df59d3cd8950811696efb7a9cdb303054c") r12 = eventfd2(0x81, 0x80000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f00000020c0)) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000002300)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, &(0x7f00000022c0), {[{{@ipv6={@mcast1, @loopback, [0xff, 0xff000000, 0xff000000, 0xff], [0xffffffff, 0xffffffff, 0xff], 'bond_slave_0\x00', 'bond0\x00', {0xff}, {}, 0x4a, 0x2, 0x6, 0x4a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) setsockopt$inet6_MCAST_JOIN_GROUP(r10, 0x29, 0x2a, &(0x7f00000026c0)={0x0, {{0xa, 0x4e20, 0xc, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x337}}}, 0x88) sendmsg$nl_route_sched(r10, &(0x7f0000003940)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003900)={&(0x7f00000027c0)=@delchain={0x1130, 0x65, 0x2, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x10, 0x7}, {0xb, 0xd}, {0x4, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_POLICE={0x2c, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x10}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd99f}, @TCA_POLICE_RATE64={0xc, 0x8, 0x80}, @TCA_POLICE_RATE64={0xc, 0x8, 0xae}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xc60, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0x0, 0x7, 0x1, 0x1}, {0x2ad, 0x9, 0x5, 0x40}]}}, @TCA_BPF_POLICE={0xc2c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x795, 0x1, 0x401, 0x8, 0x8c, 0x4, 0x6, 0x8, 0x4c2, 0x728, 0x10001, 0x4, 0xbd, 0xfff, 0x1, 0xfff, 0x6, 0x2, 0xe2c, 0xf0, 0x100, 0x2, 0x9, 0x1, 0x4, 0x534e57ea, 0x3, 0x5, 0x2, 0x4, 0x1, 0x80, 0x1, 0xfffffffc, 0x5, 0x10000, 0x0, 0x7f, 0x2, 0x2, 0x5, 0xc, 0x2, 0x3, 0x3, 0x49, 0x3, 0x3bf, 0x40, 0x6, 0x2, 0x9, 0x4, 0x7, 0x5, 0x7fffffff, 0xc, 0x10001, 0x0, 0x1, 0x8, 0x3, 0x9, 0xe, 0x0, 0x2, 0xa, 0x5, 0x5, 0x4, 0x106, 0x4, 0x9, 0x1000, 0x9, 0x8, 0xfff, 0x4, 0x996, 0x40, 0x1fb5, 0x2, 0x5, 0x3, 0x4, 0x9, 0x5, 0x3dc, 0x275, 0x5, 0xe457e6c, 0x9, 0x3, 0x8, 0x8, 0x2, 0xb, 0x1, 0x0, 0x6, 0x8, 0xc, 0x6, 0x1, 0x2, 0x6, 0x10000, 0x10000, 0xea1, 0x1, 0xd, 0x1, 0xa, 0x0, 0x200, 0x9, 0x2, 0x2, 0x1, 0x200, 0xfffffff9, 0x2, 0x4, 0x1, 0xff, 0x7, 0xffff5145, 0x0, 0xf, 0x400, 0xe, 0x3, 0x2, 0x4f7d, 0x6, 0xe, 0x1, 0x80000001, 0x8, 0x7fff, 0xffff, 0x7ff, 0x8, 0x4, 0x7, 0x747a, 0x653d, 0x8f, 0xffffffff, 0x5949, 0x9, 0x8, 0x101, 0x5, 0x5, 0x7, 0x9, 0x5, 0x9ea6, 0x800, 0xc, 0x2, 0x0, 0x670, 0x1000, 0x40000, 0x1, 0x3, 0x10000, 0x4, 0x9, 0x80000000, 0x7, 0x9, 0x0, 0x2, 0x2, 0x8, 0x8, 0x7, 0x7f, 0x4, 0xa67, 0x8, 0x1, 0x8, 0x1, 0xf, 0xe, 0x1, 0x7ff, 0x10001, 0xb, 0x2, 0x2, 0x5, 0xfffffff9, 0x9, 0x7fff, 0x8000, 0x1ff, 0x6, 0x2, 0x2, 0xfffffffb, 0x8000, 0x800, 0xf4cd, 0x6, 0x5, 0x0, 0x2, 0x1, 0x0, 0x2, 0x6, 0x8, 0x5, 0x7, 0x7, 0x1, 0xb32, 0x1, 0x0, 0x8, 0x5, 0x7, 0x6, 0x6, 0x7, 0x9, 0xc, 0x5, 0x0, 0x8, 0x7fffffff, 0xc11c65e, 0xe, 0x74f, 0xe, 0x3, 0x2, 0x3, 0xd, 0x2, 0x1, 0x1, 0xdb, 0x6, 0x6, 0x80, 0x1, 0x601b, 0x1, 0x9, 0x808]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffff83}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x1, 0x8, 0x7f, 0x5, 0x3, 0x24000, 0x0, 0x5, 0x6, 0x25d, 0xcb, 0x10000, 0x32f, 0xbbfb, 0x101, 0x1858, 0x9cb21b9, 0x800, 0x3, 0x10, 0x3ff, 0x5, 0x7, 0x9, 0x3ff, 0x6, 0x800, 0x2, 0x200, 0xc6, 0x16848ade, 0x61f, 0x9, 0x1, 0x3, 0x10001, 0x6, 0x6, 0x0, 0xd0, 0x9, 0x4, 0x9, 0x10000, 0xffffffff, 0xfffff17e, 0x9, 0xff, 0x7ff, 0x6, 0x40, 0xa, 0x6, 0xb, 0x1, 0x1, 0xd, 0x3, 0x887, 0x6, 0x9, 0x3, 0x5, 0x5, 0x1d, 0x4, 0x80000001, 0x0, 0x1, 0x7, 0x0, 0x0, 0x40, 0x0, 0x2, 0x7, 0x5cfb, 0xd, 0xd26, 0xb, 0x6b0, 0x10001, 0xf, 0x6, 0x7, 0x8, 0x100, 0x8001, 0x5, 0x1, 0x200, 0x0, 0x2, 0x4, 0x80000001, 0xfff, 0xc, 0x5, 0x5, 0x1, 0x5, 0x6, 0x6, 0x1000, 0x939, 0xfff, 0x100, 0xf, 0x401, 0x0, 0x0, 0x5, 0x6, 0x9, 0x6, 0x4, 0x830b, 0x8, 0x8000, 0x4b, 0x800, 0x5, 0x5, 0xb81, 0x1, 0x1, 0x10000, 0x0, 0xffffffff, 0x3, 0x2, 0x2, 0x101, 0x0, 0x6, 0x0, 0x0, 0x7f0f, 0x5, 0x7, 0x8a32, 0xf, 0x8, 0xfffeffff, 0x40, 0xa, 0x3, 0x3, 0x5f, 0x0, 0x10, 0x8, 0x5, 0xb0, 0x9, 0x72e0, 0x41, 0x0, 0x9, 0x1, 0x0, 0x2799, 0xfffff486, 0x252, 0x85, 0x6, 0xffff0000, 0x8, 0x99, 0xffff, 0x9b69, 0x8000, 0x6, 0x6, 0x5, 0x1000, 0xfffffffa, 0x4, 0x3, 0x9, 0x8, 0x200, 0x5, 0x4, 0x7, 0x9, 0x5, 0x6, 0x3, 0x8, 0x6, 0x7, 0x2, 0x0, 0xff, 0xb, 0x3, 0x9ba, 0x0, 0x6, 0x4, 0x0, 0x10, 0x6, 0x0, 0x8, 0xc, 0x4, 0x4, 0x8, 0x3, 0xfffffffb, 0xdb09, 0xf2, 0x9, 0x7fffffff, 0x2, 0x1, 0x8, 0xcdb, 0x8, 0xfffffff8, 0x6, 0x9, 0x8, 0x9, 0x6, 0x5, 0xa, 0x8, 0xfc, 0x8, 0x2, 0x4, 0x2, 0x5, 0x4, 0x3, 0x4, 0x6b55, 0x5, 0x3, 0x4, 0x6, 0x4, 0x2, 0x400, 0x8, 0x6, 0xffffffff, 0x6, 0x5, 0x9, 0x6, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x7, 0xf, 0x10000, 0xc1, 0x9, 0x200, 0x6b54, 0x80, 0xbc, 0xfffffffc, 0x81, 0x4, 0x101, 0x3ff, 0xc, 0x1000, 0x10000, 0x5, 0x8, 0xd9, 0xf, 0x0, 0x6, 0xbb8, 0x2, 0x3ce, 0x28, 0x9, 0x8, 0x8, 0x5, 0x7, 0x7, 0x3ff, 0x5951, 0x851, 0xe70, 0x8, 0xd, 0xd70, 0x7, 0xc, 0xdbf4, 0x2, 0x2, 0x4, 0x9, 0xe1c, 0x3, 0x1, 0xfc, 0x6, 0x7, 0x1000, 0xffffffff, 0x80000000, 0x6, 0x8, 0x81, 0x8, 0x7, 0x3, 0x0, 0x3, 0x100, 0xde5, 0xd0d, 0xfc, 0x8, 0x1, 0x2, 0x6, 0xffffff08, 0x8, 0x6, 0x57, 0x2, 0x0, 0xe, 0xff0, 0x9, 0xe, 0x9ef5, 0xffff, 0x8, 0x3, 0x6, 0x9, 0x200, 0x8001, 0x2, 0x10000, 0x5, 0x8, 0x10000, 0xd, 0x7fff, 0xfffffffd, 0x7, 0x5, 0x1ff, 0x3, 0x4, 0xc, 0x7, 0x8772, 0x7, 0x3b1, 0x7fff, 0x1, 0x0, 0x8, 0x1, 0xfc, 0x80000000, 0x1, 0x7, 0x800, 0x1, 0x7ff, 0x3d70, 0x92b6, 0x3, 0xfffffff2, 0x3, 0x3, 0xd32, 0x1, 0x24f, 0x7, 0x1, 0x80000001, 0x843d, 0x36, 0x46, 0xfffffff1, 0x2, 0x82c, 0xff, 0x8000, 0x8, 0x3, 0xca3e, 0x368, 0xa0, 0x3, 0x0, 0x401, 0x3, 0x45a, 0xffff, 0x6, 0xffff06ff, 0x7, 0x3, 0x4, 0x1, 0x1, 0x3, 0x2, 0x1, 0x10000, 0x6, 0xec, 0x7, 0x8, 0x80000000, 0x5, 0x7, 0x1, 0x6, 0x10001, 0xfffffff7, 0xff, 0x4, 0xd, 0x9, 0xdd3, 0x9, 0x0, 0x9, 0xffffe1e1, 0x6, 0x650431a1, 0x2, 0x0, 0x5, 0xfffffffa, 0xfffff1f9, 0x7, 0x0, 0x3, 0x0, 0xaf7b, 0x9, 0x2, 0x400000, 0x2, 0x101, 0x1, 0x1, 0x3, 0x40, 0x7, 0x0, 0x800, 0xd, 0x8001, 0x7, 0xedb8, 0xf9, 0xfff, 0x0, 0x5, 0x0, 0x1, 0x200, 0x100, 0x9, 0x9, 0xffff, 0x3, 0x1, 0x10000, 0xffff7fff, 0x5, 0xfff, 0x7f, 0x565c, 0x7, 0x102, 0xb2f, 0x7ff, 0xbdad, 0x7, 0x800, 0x80, 0x2, 0xd82, 0x8, 0x101, 0x32, 0x9, 0x3, 0x81, 0x3ee6, 0x81, 0xeb1a, 0x100, 0x9, 0x400, 0x2c88404d, 0x0, 0x40, 0x4]}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x1, 0x6, 0x60, 0x80}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x6}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e20}, @TCA_FLOWER_KEY_TCP_DST={0x6}]}}, @filter_kind_options=@f_basic={{0xa}, {0x424, 0x2, [@TCA_BASIC_EMATCHES={0x420, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x250, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x5, 0x2, 0x8}, {0xa, 0x3, 0x1, "c10254"}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2f, 0x3, 0x81}, {0x7, 0xbaf5, 0x400, 0x4}}}, @TCF_EM_CONTAINER={0xe8, 0x2, 0x0, 0x0, {{0x100, 0x0, 0x8}, "8e1efe9cdefff5e75dee5c7feada134cb8f4f3a60063fc88e1ce3280bd1e799cd50078ee7b7fd9e85b54bc6ae3aa946a4b60854357ed023e4dd895ab6d3db94645b8b6917d85178a66dc2fc44315f49ec718aa6ebc8094fa7a731ec0d2fed93d5af4264baef697d7a0586a3298ff0e28e7fd4344ad90b8aa9394f26ce8a5ee9a33d344e5f81b1828efab607c186cb0252684b24cf0c35d3424517036e39bcf8bd4755cfa9f6dcc5a59072bef0822961ac231e45d8ea648006680957fd741af67c5b4d89c2237fdac170df4a5eb07367d4a8e509f05969ef052"}}, @TCF_EM_CONTAINER={0x104, 0x2, 0x0, 0x0, {{0x8, 0x0, 0x6}, "164aa5ae1545900629ae7d8f991d82fa95e6ff56a52669a82c06c04efe1dfe8e8852524ff97cc9924af79db561e5ff66e77c41f6fb22ee54ea6b4eb5a9633b9bd416f7f5411ffa23313b3e3de7c85385cd9053b63c6cf9ede570859bc69a81648d524ab5200a93f7e7c48f288b4a36e2d7cb16b77e76e69490e87bfb37b8b9ef2727fafc828ba18731bf4f43844e9dee026a5c213946b59c8fa31f6ea53144405dd67947606ab1a3ba6c632389d940e86d6cc6f14a11b1e22f627c9907b793aef070ed859452c396f12de643bdf993d1cf655a1b4ad7bddeaa5a0b350a77f96b5851a2c8a408555dab8e5541cb38f0ffcf2d6ef15e68467c"}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x9}, {{0x0, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_IPT={0x1c, 0x3, 0x0, 0x0, {{0x5c, 0x9, 0xb}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0xa0, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x9, 0x1, 0x9e5}, {0x7, 0x74bcced9, 0xb, 0x6, 0x6, 0x1, 0x1}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x0, 0x1, 0xfffb}, {0x2, 0x8, 0x400, 0x5, 0x0, 0x0, 0x2}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x80}, {0x3, 0x0, 0x5}}}, @TCF_EM_IPT={0x5c, 0x1, 0x0, 0x0, {{0x3, 0x9, 0xbf80}, [@TCA_EM_IPT_MATCH_DATA={0x3d, 0x5, "1fccf85c4384307fcdbb0a9618de1c0135f06bb6dbe57d4f338a8983836483711c8d38197f2d9a7a61b4decf73ad6a524aed60b83d1a6f9437"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x114, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc0, 0x1, 0x0, 0x0, {{0xebf1, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_DATA={0x71, 0x5, "5608dbca59c347cecd4f673c72ac3d51119313900a255d9e4ab5a91a40c81b1deeb6812418b0ffa6f0c4961bdb27a68f7f36d04ff99c7be4df101b248652d8bdc34db42cadc2471e6db67cfc1f37ac5455f0a22f170fec5ad80241e82993719c0bafa9d9e74ace4b2aa6891c4d"}]}}, @TCF_EM_CONTAINER={0x50, 0x3, 0x0, 0x0, {{0x5, 0x0, 0x8}, "1e3ea3a16495f54775a4f8beb7e755e61151de2721277ba03d8dcc568041f73a6d067533eac9c855b3ca2de5872a3f23cf93b4ad0bf92623d59d1dc9f26abf992717a6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x40}}]}, 0x1130}}, 0x40041) ioctl$FBIOPUT_CON2FBMAP(r10, 0x4610, &(0x7f0000003980)={0x6}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r10, 0xc03064ca, &(0x7f0000003b40)={&(0x7f0000003ac0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000003b00)=[0x1000], 0x101, 0x4, 0x1}) kernel console output (not intermixed with test programs): [ T1212] radio-si470x 6-1:4.10: probe with driver radio-si470x failed with error -5 [ 167.329456][ T1212] usbhid 6-1:4.10: couldn't find an input interrupt endpoint [ 167.412964][ T1212] usb 6-1: USB disconnect, device number 15 [ 167.494030][ T7415] random: crng reseeded on system resumption [ 168.100828][ T7427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.120283][ T7427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.478787][ T7435] @: renamed from vlan0 (while UP) [ 169.243843][ T7439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.267603][ T7439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.315920][ T7439] loop4: detected capacity change from 0 to 7 [ 169.350673][ T5880] Dev loop4: unable to read RDB block 7 [ 169.363267][ T5880] loop4: AHDI p3 p4 [ 169.373126][ T5880] loop4: partition table partially beyond EOD, truncated [ 169.467316][ T5880] loop4: p3 size 4227858431 extends beyond EOD, truncated [ 169.517165][ T7439] Dev loop4: unable to read RDB block 7 [ 169.521621][ T7442] loop2: detected capacity change from 0 to 7 [ 169.523157][ T7439] loop4: AHDI p3 p4 [ 169.545338][ T7442] Dev loop2: unable to read RDB block 7 [ 169.558097][ T7439] loop4: partition table partially beyond EOD, truncated [ 169.565717][ T7442] loop2: unable to read partition table [ 169.573063][ T7439] loop4: p3 size 4227858431 extends beyond EOD, truncated [ 169.586167][ T7442] loop2: partition table beyond EOD, truncated [ 169.626353][ T7442] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 169.906968][ T5880] udevd[5880]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 169.969021][ T5880] udevd[5880]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 170.201099][ T7449] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.574921][ T7461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.595419][ T7461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.681421][ T7465] cgroup: fork rejected by pids controller in /syz1 [ 170.850976][ T7461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.322'. [ 171.193499][ T7474] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 171.292801][ T6692] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.396400][ T6692] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.453317][ T43] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 171.585249][ T6692] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.637961][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 171.677892][ T43] usb 4-1: not running at top speed; connect to a high speed hub [ 171.717791][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.331'. [ 171.727254][ T7484] bridge_slave_1: left allmulticast mode [ 171.733023][ T7484] bridge_slave_1: left promiscuous mode [ 171.739386][ T7484] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.770883][ T43] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 171.784890][ T43] usb 4-1: config 1 interface 0 has no altsetting 0 [ 171.797634][ T43] usb 4-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice= 0.40 [ 171.799204][ T7484] bridge_slave_0: left allmulticast mode [ 171.813184][ T7484] bridge_slave_0: left promiscuous mode [ 171.819129][ T7484] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.827584][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.958097][ T43] usb 4-1: Product: syz [ 172.049772][ T43] usb 4-1: Manufacturer: syz [ 172.189746][ T43] usb 4-1: SerialNumber: syz [ 172.204043][ T6692] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.225942][ T7474] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 172.373050][ T5873] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 172.383040][ T5873] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 172.393176][ T5873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 172.402785][ T5873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 172.426472][ T5873] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 172.705273][ T6692] bridge_slave_1: left allmulticast mode [ 172.741004][ T6692] bridge_slave_1: left promiscuous mode [ 172.780237][ T6692] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.858557][ T6692] bridge_slave_0: left allmulticast mode [ 172.868086][ T7498] FAULT_INJECTION: forcing a failure. [ 172.868086][ T7498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.886351][ T6692] bridge_slave_0: left promiscuous mode [ 172.917227][ T6692] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.964593][ T7498] CPU: 0 UID: 0 PID: 7498 Comm: syz.5.335 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 172.964627][ T7498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 172.964648][ T7498] Call Trace: [ 172.964655][ T7498] [ 172.964664][ T7498] dump_stack_lvl+0x189/0x250 [ 172.964691][ T7498] ? __pfx____ratelimit+0x10/0x10 [ 172.964713][ T7498] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.964733][ T7498] ? __pfx__printk+0x10/0x10 [ 172.964878][ T7498] ? __might_fault+0xb0/0x130 [ 172.964913][ T7498] should_fail_ex+0x414/0x560 [ 172.964940][ T7498] _copy_from_user+0x2d/0xb0 [ 172.964960][ T7498] ___sys_recvmsg+0x12e/0x510 [ 172.964986][ T7498] ? __pfx____sys_recvmsg+0x10/0x10 [ 172.965025][ T7498] ? __pfx_set_normalized_timespec64+0x10/0x10 [ 172.965059][ T7498] do_recvmmsg+0x307/0x770 [ 172.965086][ T7498] ? __pfx_do_recvmmsg+0x10/0x10 [ 172.965116][ T7498] ? _copy_from_user+0x94/0xb0 [ 172.965151][ T7498] __x64_sys_recvmmsg+0x1af/0x240 [ 172.965172][ T7498] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 172.965196][ T7498] ? do_syscall_64+0xbe/0x3b0 [ 172.965223][ T7498] do_syscall_64+0xfa/0x3b0 [ 172.965245][ T7498] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.965266][ T7498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.965282][ T7498] ? clear_bhb_loop+0x60/0xb0 [ 172.965301][ T7498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.965317][ T7498] RIP: 0033:0x7fb23f38ebe9 [ 172.965334][ T7498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.965349][ T7498] RSP: 002b:00007fb2402c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 172.965368][ T7498] RAX: ffffffffffffffda RBX: 00007fb23f5b5fa0 RCX: 00007fb23f38ebe9 [ 172.965379][ T7498] RDX: 00000000000006f5 RSI: 0000200000000440 RDI: 0000000000000003 [ 172.965390][ T7498] RBP: 00007fb2402c7090 R08: 0000200000000480 R09: 0000000000000000 [ 172.965401][ T7498] R10: 0000002000000022 R11: 0000000000000246 R12: 0000000000000001 [ 172.965412][ T7498] R13: 00007fb23f5b6038 R14: 00007fb23f5b5fa0 R15: 00007fb23f6dfa28 [ 172.965438][ T7498] [ 173.179119][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.216466][ T43] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input9 [ 173.234630][ T5219] bcm5974 4-1:1.0: could not read from device [ 173.276602][ T43] usb 4-1: USB disconnect, device number 13 [ 173.305043][ T5219] bcm5974 4-1:1.0: could not read from device [ 173.383071][ T7510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.031439][ T7519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.044418][ T7519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.440880][ T6692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.470221][ T5873] Bluetooth: hci3: command tx timeout [ 174.477954][ T6692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.540489][ T6692] bond0 (unregistering): Released all slaves [ 174.750685][ T7538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.777469][ T7539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.800663][ T7539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.828087][ T6692] bond1 (unregistering): Released all slaves [ 174.838862][ T7538] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 174.930400][ T5931] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 175.094517][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.114916][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.140574][ T5931] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 175.154088][ T5931] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 175.163528][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.253912][ T5931] usb 6-1: config 0 descriptor?? [ 175.559287][ T6692] hsr_slave_0: left promiscuous mode [ 175.611452][ T6692] hsr_slave_1: left promiscuous mode [ 175.640981][ T6692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.654090][ T7561] netlink: 32 bytes leftover after parsing attributes in process `syz.4.349'. [ 175.710755][ T6692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.731420][ T6692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.759217][ T6692] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.768918][ T5931] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 175.813724][ T7564] netlink: 'syz.3.350': attribute type 3 has an invalid length. [ 175.825984][ T7564] IPv4: Oversized IP packet from 127.202.26.0 [ 175.997599][ T5931] usb 6-1: USB disconnect, device number 16 [ 176.021797][ T6692] veth1_macvtap: left promiscuous mode [ 176.054154][ T6692] veth0_macvtap: left promiscuous mode [ 176.079962][ T6692] veth1_vlan: left promiscuous mode [ 176.101411][ T6692] veth0_vlan: left promiscuous mode [ 176.137658][ T7567] fido_id[7567]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 176.551109][ T5873] Bluetooth: hci3: command tx timeout [ 177.689559][ T7610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.358'. [ 177.704256][ T7610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.358'. [ 177.715817][ T7610] netlink: 'syz.3.358': attribute type 5 has an invalid length. [ 178.026144][ T6692] team0 (unregistering): Port device team_slave_1 removed [ 178.063540][ T6692] team0 (unregistering): Port device team_slave_0 removed [ 178.250835][ T983] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 178.413823][ T983] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 178.428081][ T983] usb 1-1: config 1 has an invalid descriptor of length 74, skipping remainder of the config [ 178.439269][ T983] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 178.452545][ T983] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.498065][ T983] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 178.508927][ T983] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 178.572659][ T983] usb 1-1: Product: syz [ 178.578366][ T983] usb 1-1: Manufacturer: syz [ 178.619151][ T983] cdc_wdm 1-1:1.0: skipping garbage [ 178.630094][ T5873] Bluetooth: hci3: command tx timeout [ 178.662114][ T983] cdc_wdm 1-1:1.0: skipping garbage [ 178.678612][ T983] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 178.876578][ T983] usb 1-1: USB disconnect, device number 23 [ 179.120410][ T7494] chnl_net:caif_netlink_parms(): no params data found [ 179.254136][ T7628] pim6reg: entered allmulticast mode [ 179.737283][ T7645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.364'. [ 179.796798][ T7615] pim6reg: left allmulticast mode [ 180.081560][ T7494] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.094934][ T7494] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.102700][ T7494] bridge_slave_0: entered allmulticast mode [ 180.111410][ T7494] bridge_slave_0: entered promiscuous mode [ 180.120929][ T7494] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.129806][ T7494] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.137386][ T7494] bridge_slave_1: entered allmulticast mode [ 180.150718][ T7494] bridge_slave_1: entered promiscuous mode [ 180.153669][ T43] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 180.317856][ T7494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.369953][ T43] usb 1-1: device descriptor read/64, error -71 [ 180.408483][ T7494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.622985][ T43] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 180.691114][ T7661] netlink: 60 bytes leftover after parsing attributes in process `syz.3.367'. [ 180.710439][ T5873] Bluetooth: hci3: command tx timeout [ 180.723167][ T7663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.769808][ T43] usb 1-1: device descriptor read/64, error -71 [ 180.789858][ T30] audit: type=1326 audit(1754930272.263:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.5.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23f38ebe9 code=0x7ffc0000 [ 180.800579][ T7663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.862460][ T30] audit: type=1326 audit(1754930272.283:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.5.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23f38ebe9 code=0x7ffc0000 [ 180.885269][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.896641][ T7494] team0: Port device team_slave_0 added [ 180.910059][ T43] usb usb1-port1: attempt power cycle [ 180.917089][ T30] audit: type=1326 audit(1754930272.283:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.5.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb23f38ebe9 code=0x7ffc0000 [ 180.925016][ T7494] team0: Port device team_slave_1 added [ 180.939704][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.941114][ T30] audit: type=1326 audit(1754930272.283:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.5.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23f38ebe9 code=0x7ffc0000 [ 180.985401][ T30] audit: type=1326 audit(1754930272.283:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.5.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23f38ebe9 code=0x7ffc0000 [ 181.015722][ T30] audit: type=1326 audit(1754930272.283:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.5.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb23f38ebe9 code=0x7ffc0000 [ 181.037836][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.055276][ T30] audit: type=1326 audit(1754930272.283:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.5.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23f38ebe9 code=0x7ffc0000 [ 181.085203][ T30] audit: type=1326 audit(1754930272.283:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.5.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23f38ebe9 code=0x7ffc0000 [ 181.112264][ T30] audit: type=1326 audit(1754930272.283:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.5.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb23f38ebe9 code=0x7ffc0000 [ 181.171086][ T30] audit: type=1326 audit(1754930272.283:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.5.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23f38ebe9 code=0x7ffc0000 [ 181.285961][ T7494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.293282][ T43] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 181.312883][ T7494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.339325][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.347989][ T43] usb 1-1: device descriptor read/8, error -71 [ 181.357558][ T7494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.419476][ T7494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.432684][ T7494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.458715][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.476335][ T7494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.591818][ T43] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 181.630636][ T43] usb 1-1: device descriptor read/8, error -71 [ 181.681711][ T7494] hsr_slave_0: entered promiscuous mode [ 181.688679][ T7494] hsr_slave_1: entered promiscuous mode [ 181.696295][ T7494] debugfs: 'hsr0' already exists in 'hsr' [ 181.702622][ T7494] Cannot create hsr debugfs directory [ 181.752357][ T43] usb usb1-port1: unable to enumerate USB device [ 182.514346][ T7494] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 182.527737][ T7494] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 182.538399][ T7494] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 182.548483][ T7494] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 182.663061][ T7494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.685673][ T7494] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.704379][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.711748][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.731008][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.738153][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.894071][ T7494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.978084][ T7494] veth0_vlan: entered promiscuous mode [ 182.995635][ T7494] veth1_vlan: entered promiscuous mode [ 183.061601][ T7494] veth0_macvtap: entered promiscuous mode [ 183.079220][ T7494] veth1_macvtap: entered promiscuous mode [ 183.126434][ T7494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.148756][ T7494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.175412][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.196070][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.219189][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.230518][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.317008][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.342449][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.379080][ T3176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.396565][ T3176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.505839][ T7724] loop2: detected capacity change from 0 to 7 [ 183.516813][ T7724] Dev loop2: unable to read RDB block 7 [ 183.526037][ T7724] loop2: unable to read partition table [ 183.537649][ T7724] loop2: partition table beyond EOD, truncated [ 183.546961][ T7724] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 194.393599][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.400362][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 232.310212][ T5875] Bluetooth: hci2: command 0x0406 tx timeout [ 255.833056][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.839515][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.637946][ T7806] IPv6: sit1: Disabled Multicast RS [ 269.648286][ T7806] sit1: entered allmulticast mode [ 269.695001][ T983] IPVS: starting estimator thread 0... [ 269.716944][ T7809] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 269.840953][ T7807] IPVS: using max 34 ests per chain, 81600 per kthread [ 269.938930][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 269.938952][ T30] audit: type=1326 audit(1754930361.413:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097c18ebe9 code=0x7ffc0000 [ 270.004392][ T30] audit: type=1326 audit(1754930361.413:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097c18ebe9 code=0x7ffc0000 [ 270.053007][ T30] audit: type=1326 audit(1754930361.453:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f097c18ebe9 code=0x7ffc0000 [ 270.099855][ T5979] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 270.188397][ T30] audit: type=1326 audit(1754930361.453:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097c18ebe9 code=0x7ffc0000 [ 270.212823][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.269619][ T30] audit: type=1326 audit(1754930361.453:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f097c18ebe9 code=0x7ffc0000 [ 270.292638][ T30] audit: type=1326 audit(1754930361.453:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097c18ebe9 code=0x7ffc0000 [ 270.316296][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.325222][ T30] audit: type=1326 audit(1754930361.453:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f097c18ebe9 code=0x7ffc0000 [ 270.347928][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.359371][ T5979] usb 2-1: Using ep0 maxpacket: 32 [ 270.402398][ T30] audit: type=1326 audit(1754930361.453:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097c18ebe9 code=0x7ffc0000 [ 270.426857][ T5979] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 270.450338][ T5979] usb 2-1: config 0 has no interface number 0 [ 270.495586][ T5979] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 270.515018][ T5979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.537827][ T30] audit: type=1326 audit(1754930361.453:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f097c18ebe9 code=0x7ffc0000 [ 270.572879][ T5979] usb 2-1: Product: syz [ 270.578766][ T7818] binder: 7817:7818 ioctl 400c620e 200000000040 returned -22 [ 270.581630][ T5979] usb 2-1: Manufacturer: syz [ 270.605340][ T5979] usb 2-1: SerialNumber: syz [ 270.605344][ T30] audit: type=1326 audit(1754930361.453:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097c18ebe9 code=0x7ffc0000 [ 270.633830][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.739253][ T5979] usb 2-1: config 0 descriptor?? [ 270.800332][ T5979] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 271.013628][ T5979] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 271.036013][ T5979] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 271.080847][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 271.138532][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.378'. [ 271.148020][ T7830] netlink: 'syz.4.378': attribute type 5 has an invalid length. [ 271.159499][ T7830] netlink: 20 bytes leftover after parsing attributes in process `syz.4.378'. [ 271.203810][ T7830] geneve2: entered promiscuous mode [ 271.209398][ T7830] geneve2: entered allmulticast mode [ 271.229249][ T3507] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 271.238482][ T9] usb 4-1: device descriptor read/64, error -71 [ 271.255081][ T3507] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 271.276497][ T3507] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 271.304775][ T3507] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 271.427143][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 271.435559][ T43] usb 2-1: USB disconnect, device number 32 [ 271.450564][ T43] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 271.490606][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 271.504454][ T43] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 271.528412][ T43] quatech2 2-1:0.51: device disconnected [ 271.651690][ T9] usb 4-1: device descriptor read/64, error -71 [ 271.780425][ T9] usb usb4-port1: attempt power cycle [ 271.879799][ T983] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 271.997359][ T7835] loop2: detected capacity change from 0 to 7 [ 272.016008][ T7835] Dev loop2: unable to read RDB block 7 [ 272.020688][ T983] usb 1-1: device descriptor read/64, error -71 [ 272.022975][ T7835] loop2: unable to read partition table [ 272.035051][ T7835] loop2: partition table beyond EOD, truncated [ 272.041471][ T7835] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 272.120546][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 272.150667][ T9] usb 4-1: device descriptor read/8, error -71 [ 272.260240][ T983] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 272.380209][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 272.390071][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 272.399886][ T983] usb 1-1: device descriptor read/64, error -71 [ 272.414376][ T9] usb 4-1: device descriptor read/8, error -71 [ 272.510466][ T10] usb 2-1: device descriptor read/64, error -71 [ 272.519016][ T983] usb usb1-port1: attempt power cycle [ 272.542515][ T9] usb usb4-port1: unable to enumerate USB device [ 272.760244][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 272.860158][ T983] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 272.884201][ T983] usb 1-1: device descriptor read/8, error -71 [ 272.890815][ T10] usb 2-1: device descriptor read/64, error -71 [ 272.929863][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 273.003094][ T10] usb usb2-port1: attempt power cycle [ 273.079918][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 273.089580][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 273.104506][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 273.122639][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 273.133853][ T983] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 273.142958][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.152163][ T9] usb 6-1: Product: syz [ 273.156552][ T9] usb 6-1: Manufacturer: syz [ 273.163353][ T9] usb 6-1: SerialNumber: syz [ 273.170489][ T983] usb 1-1: device descriptor read/8, error -71 [ 273.177422][ T9] usb 6-1: config 0 descriptor?? [ 273.192026][ T9] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 273.202154][ T9] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 273.293147][ T983] usb usb1-port1: unable to enumerate USB device [ 273.360055][ T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 273.380729][ T10] usb 2-1: device descriptor read/8, error -71 [ 273.621531][ T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 273.652225][ T10] usb 2-1: device descriptor read/8, error -71 [ 273.771559][ T10] usb usb2-port1: unable to enumerate USB device [ 273.794902][ T9] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 273.803042][ T9] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 273.944559][ T7846] tipc: Started in network mode [ 273.951986][ T7846] tipc: Node identity 4eab1bc994fa, cluster identity 4711 [ 273.962103][ T7846] tipc: Enabled bearer , priority 0 [ 273.975627][ T7846] syzkaller0: entered promiscuous mode [ 273.985371][ T7846] syzkaller0: entered allmulticast mode [ 274.106931][ T7846] tipc: Resetting bearer [ 274.177702][ T7845] tipc: Resetting bearer [ 274.208190][ T7845] tipc: Disabling bearer [ 274.263656][ T9] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 274.279103][ T9] em28xx 6-1:0.0: No AC97 audio processor [ 274.302211][ T7853] netlink: 'syz.4.386': attribute type 27 has an invalid length. [ 274.415387][ T9] usb 6-1: USB disconnect, device number 17 [ 274.462726][ T9] em28xx 6-1:0.0: Disconnecting em28xx [ 274.663138][ T7859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.734666][ T7859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.763393][ T9] em28xx 6-1:0.0: Freeing device [ 275.069460][ T7853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.412880][ T7853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.489158][ T7870] loop2: detected capacity change from 0 to 7 [ 275.519878][ T7870] loop2: [POWERTEC] p1 p2 p3 [ 275.527184][ T7870] loop2: p1 size 25165824 extends beyond EOD, truncated [ 275.577622][ T7870] loop2: p2 start 4259840 is beyond EOD, truncated [ 275.611781][ T7870] loop2: p3 size 51052544 extends beyond EOD, truncated [ 276.027707][ T7802] udevd[7802]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 276.067325][ T7854] udevd[7854]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 276.479915][ T43] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 276.652805][ T43] usb 2-1: config 0 has an invalid interface number: 238 but max is 0 [ 276.663682][ T43] usb 2-1: config 0 has no interface number 0 [ 276.669895][ T5954] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 276.703190][ T43] usb 2-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 276.765017][ T43] usb 2-1: config 0 interface 238 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 276.776306][ T5931] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 276.843154][ T43] usb 2-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 276.843951][ T5954] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.868565][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 276.872317][ T43] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=76.6a [ 276.883115][ T5954] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 276.906864][ T5954] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 276.931581][ T5954] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 276.946808][ T5954] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 276.963632][ T43] usb 2-1: New USB device strings: Mfr=7, Product=2, SerialNumber=3 [ 276.972715][ T5954] usb 1-1: Manufacturer: syz [ 276.979765][ T5931] usb 6-1: Using ep0 maxpacket: 16 [ 276.992848][ T43] usb 2-1: Product: syz [ 276.999132][ T43] usb 2-1: Manufacturer: syz [ 277.006358][ T5931] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 277.013034][ T5954] usb 1-1: config 0 descriptor?? [ 277.021458][ T5931] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.031011][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 277.049035][ T43] usb 2-1: SerialNumber: syz [ 277.057500][ T7853] geneve2: left promiscuous mode [ 277.063539][ T7853] geneve2: left allmulticast mode [ 277.069912][ T5931] usb 6-1: config 0 has no interface number 0 [ 277.076717][ T5931] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 277.090325][ T43] usb 2-1: config 0 descriptor?? [ 277.117952][ T43] ni6501 2-1:0.238: driver 'ni6501' failed to auto-configure device. [ 277.138487][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.177484][ T5931] usb 6-1: config 0 descriptor?? [ 277.210017][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 277.226314][ T5931] uvcvideo 6-1:0.64: probe with driver uvcvideo failed with error -22 [ 277.240372][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1280, setting to 1024 [ 277.255611][ T9] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 277.277930][ T7855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.306559][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.335146][ T9] usb 4-1: config 0 descriptor?? [ 277.380757][ T7855] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.393664][ T7890] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 277.412700][ T9] usbhid 4-1:0.0: can't add hid device: -22 [ 277.424466][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 277.458796][ T7855] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 277.493290][ T6692] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.533476][ T6692] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 277.547017][ T6692] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.569264][ T7894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.585888][ T6692] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 277.600620][ T7894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.604397][ T6692] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.639191][ T9] usb 4-1: USB disconnect, device number 18 [ 277.663736][ T6692] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 277.683712][ T7876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.696350][ T6692] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.700215][ T7876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.708066][ T6692] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 277.783770][ T43] usb 1-1: USB disconnect, device number 32 [ 278.238529][ T7896] netlink: 224 bytes leftover after parsing attributes in process `syz.3.397'. [ 278.325924][ T7897] kvm: emulating exchange as write [ 278.514439][ T7903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.530169][ T7903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.566492][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 278.566509][ T30] audit: type=1326 audit(1754930370.013:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097c18ebe9 code=0x7ffc0000 [ 278.690018][ T30] audit: type=1326 audit(1754930370.013:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097c18ebe9 code=0x7ffc0000 [ 278.758084][ T30] audit: type=1326 audit(1754930370.013:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f097c18ebe9 code=0x7ffc0000 [ 278.898781][ T30] audit: type=1326 audit(1754930370.013:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097c18ebe9 code=0x7ffc0000 [ 278.954047][ T30] audit: type=1326 audit(1754930370.023:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097c18ebe9 code=0x7ffc0000 [ 279.002057][ T30] audit: type=1326 audit(1754930370.023:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f097c18ebe9 code=0x7ffc0000 [ 279.059069][ T9] usb 2-1: USB disconnect, device number 37 [ 279.176460][ T983] usb 6-1: USB disconnect, device number 18 [ 279.276172][ T30] audit: type=1326 audit(1754930370.023:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097c18ebe9 code=0x7ffc0000 [ 279.421658][ T30] audit: type=1326 audit(1754930370.023:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097c18ebe9 code=0x7ffc0000 [ 279.464266][ T7918] loop2: detected capacity change from 0 to 7 [ 279.483435][ T7918] Dev loop2: unable to read RDB block 7 [ 279.495189][ T7918] loop2: unable to read partition table [ 279.537025][ T7918] loop2: partition table beyond EOD, truncated [ 279.545817][ T30] audit: type=1326 audit(1754930370.023:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f097c18ebe9 code=0x7ffc0000 [ 279.599872][ T7918] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 279.633719][ T30] audit: type=1326 audit(1754930370.023:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097c18ebe9 code=0x7ffc0000 [ 279.659609][ T983] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 279.843341][ T983] usb 6-1: config 0 has no interfaces? [ 279.849255][ T983] usb 6-1: New USB device found, idVendor=8086, idProduct=016f, bcdDevice=bf.ad [ 279.870589][ T983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.900334][ T983] usb 6-1: config 0 descriptor?? [ 279.950202][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 280.017437][ T7923] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 280.123653][ T7916] loop2: detected capacity change from 0 to 7 [ 280.135973][ T7916] Dev loop2: unable to read RDB block 7 [ 280.141949][ T7916] loop2: unable to read partition table [ 280.148213][ T7916] loop2: partition table beyond EOD, truncated [ 280.197310][ T7916] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 280.214545][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.250115][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.251325][ T5931] usb 6-1: USB disconnect, device number 19 [ 280.264413][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 280.280087][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 280.289429][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.332935][ T7936] netlink: 'syz.0.407': attribute type 10 has an invalid length. [ 280.342556][ T7936] netlink: 40 bytes leftover after parsing attributes in process `syz.0.407'. [ 280.359131][ T9] usb 2-1: config 0 descriptor?? [ 280.418336][ T7936] team0: entered promiscuous mode [ 280.502030][ T7936] team_slave_0: entered promiscuous mode [ 280.519478][ T7936] team_slave_1: entered promiscuous mode [ 280.528136][ T7936] team0: entered allmulticast mode [ 280.535208][ T7936] team_slave_0: entered allmulticast mode [ 280.558004][ T7936] team_slave_1: entered allmulticast mode [ 280.559996][ T43] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 280.576945][ T7936] bridge0: port 3(team0) entered blocking state [ 280.588803][ T7936] bridge0: port 3(team0) entered disabled state [ 280.633859][ T7936] bridge0: port 3(team0) entered blocking state [ 280.641950][ T7936] bridge0: port 3(team0) entered forwarding state [ 280.748860][ T7943] sch_fq: defrate 6 ignored. [ 280.793732][ T43] usb 4-1: config 0 has an invalid interface number: 46 but max is 0 [ 280.806349][ T43] usb 4-1: config 0 has no interface number 0 [ 280.824921][ T43] usb 4-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=9e.b9 [ 280.885246][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.896345][ T9] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 280.972925][ T43] usb 4-1: Product: syz [ 281.289826][ T43] usb 4-1: Manufacturer: syz [ 281.312687][ T43] usb 4-1: SerialNumber: syz [ 281.331478][ T43] usb 4-1: config 0 descriptor?? [ 281.346107][ T7947] netlink: 28 bytes leftover after parsing attributes in process `syz.5.410'. [ 281.358790][ T7947] netlink: 28 bytes leftover after parsing attributes in process `syz.5.410'. [ 281.373963][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.5.410'. [ 281.402130][ T43] xr_serial 4-1:0.46: More than one union descriptor, skipping ... [ 281.556873][ T43] usb 4-1: USB disconnect, device number 19 [ 281.769801][ T5931] usb 2-1: USB disconnect, device number 38 [ 281.972215][ T7953] tipc: Started in network mode [ 281.977544][ T7953] tipc: Node identity f6bb9e10ccfc, cluster identity 4711 [ 281.998240][ T7953] tipc: Enabled bearer , priority 0 [ 282.028907][ T7953] syzkaller0: entered promiscuous mode [ 282.035316][ T7953] syzkaller0: entered allmulticast mode [ 282.183746][ T7953] tipc: Resetting bearer [ 282.232626][ T7952] tipc: Resetting bearer [ 282.279210][ T7952] tipc: Disabling bearer [ 282.293291][ T7956] netlink: 16 bytes leftover after parsing attributes in process `syz.3.412'. [ 282.379151][ T7956] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 282.522740][ T7962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.532501][ T7962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.767549][ T7965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.781348][ T7965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.071098][ T7978] input: syz0 as /devices/virtual/input/input10 [ 283.620200][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 283.869924][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 283.885672][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 283.963913][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.190529][ T9] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 284.227190][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.309537][ T9] usb 1-1: config 0 descriptor?? [ 284.491644][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.421'. [ 284.647964][ T8012] netlink: 16 bytes leftover after parsing attributes in process `syz.1.421'. [ 284.865687][ T7975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.897272][ T7975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.150646][ T7975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.216855][ T7975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.338984][ T9] usb 1-1: string descriptor 0 read error: -71 [ 285.382993][ T9] usb 1-1: Max retries (5) exceeded reading string descriptor 200 [ 285.391875][ T9] letsketch 0003:6161:4D15.0008: probe with driver letsketch failed with error -32 [ 285.433733][ T9] usb 1-1: USB disconnect, device number 33 [ 285.911037][ T8003] netlink: 28 bytes leftover after parsing attributes in process `syz.3.422'. [ 285.950201][ T8003] netlink: 28 bytes leftover after parsing attributes in process `syz.3.422'. [ 285.961589][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.422'. [ 285.992089][ T5873] Bluetooth: hci0: command 0x0c1a tx timeout [ 286.003299][ T983] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 286.023137][ T8003] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20002 [ 286.049548][ T983] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 286.510305][ T8047] loop2: detected capacity change from 0 to 7 [ 286.528938][ T8047] Dev loop2: unable to read RDB block 7 [ 286.547364][ T8047] loop2: unable to read partition table [ 286.565280][ T8047] loop2: partition table beyond EOD, truncated [ 286.582121][ T8047] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 286.985291][ T43] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 287.159782][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 287.180497][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 287.204190][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 287.234667][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 287.274479][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 287.316659][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 287.364852][ T43] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 287.383352][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.410405][ T8037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.429405][ T43] usb 2-1: config 0 descriptor?? [ 287.461670][ T8053] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 288.040979][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 288.153642][ T5873] Bluetooth: hci1: command 0x0c1a tx timeout [ 288.160505][ T983] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 288.183933][ T983] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 288.220290][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 288.237182][ T10] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 288.257111][ T10] usb 4-1: config 0 has no interface number 0 [ 288.349609][ T10] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 288.447862][ T10] usb 4-1: config 0 interface 85 has no altsetting 0 [ 288.497233][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 288.517964][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.536177][ T10] usb 4-1: Product: syz [ 288.545665][ T10] usb 4-1: Manufacturer: syz [ 288.555846][ T10] usb 4-1: SerialNumber: syz [ 288.572525][ T10] usb 4-1: config 0 descriptor?? [ 288.820553][ T10] appletouch 4-1:0.85: Geyser mode initialized. [ 288.828714][ T10] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input11 [ 289.052379][ T10] usb 4-1: USB disconnect, device number 21 [ 289.092482][ T10] appletouch 4-1:0.85: input: appletouch disconnected [ 290.196126][ T8105] netlink: 52 bytes leftover after parsing attributes in process `syz.3.436'. [ 290.309844][ T5873] Bluetooth: hci4: command 0x0c1a tx timeout [ 290.317296][ T983] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 290.354828][ T983] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 291.023267][ T8127] loop2: detected capacity change from 0 to 7 [ 291.039440][ T7802] Dev loop2: unable to read RDB block 7 [ 291.053491][ T7802] loop2: unable to read partition table [ 291.060263][ T7802] loop2: partition table beyond EOD, truncated [ 291.132747][ T8127] Dev loop2: unable to read RDB block 7 [ 291.141894][ T8127] loop2: unable to read partition table [ 291.153965][ T8127] loop2: partition table beyond EOD, truncated [ 291.163054][ T8127] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 291.609917][ T5979] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 291.785159][ T5979] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 291.828393][ T5979] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.855140][ T5979] usb 1-1: config 0 has no interface number 0 [ 291.881580][ T5979] usb 1-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 291.905406][ T5979] usb 1-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 291.966867][ T5979] usb 1-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 292.012290][ T5979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.038943][ T5979] usb 1-1: Product: syz [ 292.053523][ T5979] usb 1-1: Manufacturer: syz [ 292.078170][ T5979] usb 1-1: SerialNumber: syz [ 292.115440][ T5979] usb 1-1: config 0 descriptor?? [ 292.136653][ T5979] HFC-S_USB 1-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 292.358474][ T10] usb 1-1: USB disconnect, device number 34 [ 292.510070][ T5979] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 292.680980][ T5979] usb 6-1: config 0 has an invalid descriptor of length 192, skipping remainder of the config [ 292.708741][ T5979] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 243, using maximum allowed: 30 [ 292.727417][ T5979] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 243 [ 292.745705][ T5979] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.a3 [ 292.757397][ T5979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.769903][ T5979] usb 6-1: Product: syz [ 292.775936][ T5979] usb 6-1: Manufacturer: syz [ 292.813018][ T5979] usb 6-1: SerialNumber: syz [ 292.822474][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.842168][ T5979] usb 6-1: config 0 descriptor?? [ 292.852387][ T5979] kvaser_usb 6-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 292.952868][ T5873] Bluetooth: hci2: command 0x0406 tx timeout [ 292.952867][ T983] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 293.020990][ T983] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 293.061118][ T5979] usb 6-1: USB disconnect, device number 20 [ 293.499998][ T5931] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 293.659835][ T5931] usb 1-1: Using ep0 maxpacket: 32 [ 293.666773][ T5931] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 293.675052][ T5931] usb 1-1: config 0 has no interface number 0 [ 293.687318][ T5931] usb 1-1: config 0 interface 12 has no altsetting 0 [ 293.697040][ T5931] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 293.706602][ T5931] usb 1-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 293.715068][ T5931] usb 1-1: Product: syz [ 293.719834][ T5931] usb 1-1: Manufacturer: syz [ 293.724734][ T5931] usb 1-1: SerialNumber: syz [ 293.732651][ T5931] usb 1-1: config 0 descriptor?? [ 293.761679][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 293.830530][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.939898][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 293.947840][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 293.957788][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.5.448'. [ 293.972933][ T8185] netlink: 'syz.5.448': attribute type 5 has an invalid length. [ 293.973265][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.999415][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=7000, bcdDevice=a1.ec [ 294.009114][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.024868][ T9] usb 4-1: Product: syz [ 294.029272][ T9] usb 4-1: Manufacturer: syz [ 294.034085][ T9] usb 4-1: SerialNumber: syz [ 294.042833][ T9] usb 4-1: config 0 descriptor?? [ 294.266714][ T8180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.277844][ T8180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.804165][ T5931] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 294.818544][ T5931] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 294.832169][ T5931] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 294.840872][ T5931] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 294.858738][ T5931] usb 1-1: USB disconnect, device number 35 [ 295.349782][ T5875] Bluetooth: hci3: command 0x0c1a tx timeout [ 295.353135][ T983] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 295.367267][ T983] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 295.607470][ T8188] tipc: Can't bind to reserved service type 0 [ 296.484882][ T5931] usb 4-1: USB disconnect, device number 22 [ 296.886582][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.5.452'. [ 297.155381][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.453'. [ 297.165749][ T8208] netlink: 'syz.0.453': attribute type 5 has an invalid length. [ 297.174983][ T8208] netlink: 20 bytes leftover after parsing attributes in process `syz.0.453'. [ 297.191147][ T8208] geneve2: entered promiscuous mode [ 297.196547][ T8208] geneve2: entered allmulticast mode [ 297.204341][ T49] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 297.215345][ T49] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 297.232639][ T49] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 297.242256][ T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 297.251598][ T49] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 297.421768][ T9] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 297.430416][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.441674][ T9] usb 6-1: config 0 has no interface number 0 [ 297.448083][ T9] usb 6-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 297.479016][ C0] vkms_vblank_simulate: vblank timer overrun [ 297.490096][ T9] usb 6-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 297.506945][ T9] usb 6-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 297.517698][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.526249][ T9] usb 6-1: Product: syz [ 297.530889][ T9] usb 6-1: Manufacturer: syz [ 297.535661][ T9] usb 6-1: SerialNumber: syz [ 297.543608][ T9] usb 6-1: config 0 descriptor?? [ 297.555680][ T9] HFC-S_USB 6-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 297.761015][ T5979] usb 6-1: USB disconnect, device number 21 [ 298.650458][ T5979] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 298.832546][ T5979] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 298.861472][ T5979] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.880495][ T5979] usb 6-1: config 0 interface 0 has no altsetting 0 [ 298.896048][ T5979] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 298.911102][ T5979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.935495][ T5979] usb 6-1: config 0 descriptor?? [ 299.005182][ T8220] ip6erspan0: entered allmulticast mode [ 299.248608][ T5979] usbhid 6-1:0.0: can't add hid device: -71 [ 299.263234][ T5979] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 299.288570][ T5979] usb 6-1: USB disconnect, device number 22 [ 299.339568][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.461'. [ 299.351355][ T8236] netlink: 40 bytes leftover after parsing attributes in process `syz.5.463'. [ 299.366148][ T8238] netlink: 'syz.1.461': attribute type 5 has an invalid length. [ 299.375731][ T8238] netlink: 20 bytes leftover after parsing attributes in process `syz.1.461'. [ 299.390129][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.462'. [ 299.409342][ T8238] geneve2: entered promiscuous mode [ 299.415323][ T8238] geneve2: entered allmulticast mode [ 299.425899][ T8239] netlink: 'syz.3.462': attribute type 5 has an invalid length. [ 299.436209][ T8239] netlink: 20 bytes leftover after parsing attributes in process `syz.3.462'. [ 299.445657][ T59] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 299.470388][ T8239] geneve2: entered promiscuous mode [ 299.478723][ T8239] geneve2: entered allmulticast mode [ 299.537109][ T59] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 299.552260][ T8241] netlink: 28 bytes leftover after parsing attributes in process `syz.5.464'. [ 299.562407][ T59] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 299.575512][ T8241] netlink: 32 bytes leftover after parsing attributes in process `syz.5.464'. [ 299.576435][ T59] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 299.595115][ T59] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 299.619114][ T59] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 299.629408][ T59] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 299.639352][ T59] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 300.987001][ T8249] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 301.026590][ T8249] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 301.146283][ T8254] syz.5.468 (8254): drop_caches: 0 [ 301.659831][ T5954] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 301.812603][ T5954] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 301.824681][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 301.836253][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 41447, setting to 1024 [ 301.847632][ T5954] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 301.856990][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.867928][ T5954] usb 1-1: config 0 descriptor?? [ 302.080056][ T5954] ath6kl: Failed to submit usb control message: -71 [ 302.087522][ T5954] ath6kl: unable to send the bmi data to the device: -71 [ 302.094801][ T5954] ath6kl: Unable to send get target info: -71 [ 302.102695][ T5954] ath6kl: Failed to init ath6kl core: -71 [ 302.113828][ T5954] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 302.130484][ T5954] usb 1-1: USB disconnect, device number 36 [ 302.569799][ T5954] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 302.799806][ T5954] usb 4-1: device descriptor read/64, error -71 [ 302.810100][ T5931] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 302.968532][ T8290] program syz.0.480 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 302.982002][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.030629][ T5931] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 303.039915][ T5954] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 303.055578][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.076665][ T5931] usb 6-1: config 0 descriptor?? [ 303.169933][ T5954] usb 4-1: device descriptor read/64, error -71 [ 303.281427][ T5954] usb usb4-port1: attempt power cycle [ 303.294766][ T8282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.822745][ T8282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.887380][ T8282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.919047][ T8282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.939901][ T5954] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 303.949481][ T8282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.960924][ T8282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.973430][ T8282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.989219][ T8282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.004183][ T5954] usb 4-1: device descriptor read/8, error -71 [ 304.010042][ T8282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.022451][ T8282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.249798][ T5954] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 304.251145][ T5931] usbhid 6-1:0.0: can't add hid device: -71 [ 304.273440][ T5931] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 304.292663][ T5931] usb 6-1: USB disconnect, device number 23 [ 304.352806][ T5954] usb 4-1: device descriptor read/8, error -71 [ 304.424492][ T8305] netlink: 28 bytes leftover after parsing attributes in process `syz.0.482'. [ 304.472611][ T5954] usb usb4-port1: unable to enumerate USB device [ 304.550710][ T8307] syzkaller0: entered promiscuous mode [ 304.556459][ T8307] syzkaller0: entered allmulticast mode [ 304.699920][ T5979] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 304.869870][ T5979] usb 1-1: Using ep0 maxpacket: 32 [ 304.904731][ T5979] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 304.913951][ T5979] usb 1-1: config 0 has no interface number 0 [ 304.920523][ T5979] usb 1-1: config 0 interface 184 has no altsetting 0 [ 304.942568][ T5979] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ae [ 304.960384][ T5979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.968778][ T5979] usb 1-1: Product: syz [ 304.973336][ T5931] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 304.983417][ T5979] usb 1-1: Manufacturer: syz [ 304.988114][ T5979] usb 1-1: SerialNumber: syz [ 304.995509][ T5979] usb 1-1: config 0 descriptor?? [ 305.007779][ T5979] smsc75xx v1.0.0 [ 305.014466][ T5979] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 305.026559][ T5979] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 305.133327][ T5931] usb 6-1: config 0 has an invalid interface number: 25 but max is 0 [ 305.144348][ T5931] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.155543][ T5931] usb 6-1: config 0 has no interface number 0 [ 305.164188][ T5931] usb 6-1: config 0 interface 25 has no altsetting 0 [ 305.172347][ T5931] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 305.181616][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.204146][ T5931] usb 6-1: config 0 descriptor?? [ 305.236039][ T8302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.243866][ T8302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.270602][ T8302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.280391][ T8302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.423975][ T5979] usb 6-1: USB disconnect, device number 24 [ 305.550414][ T8315] FAULT_INJECTION: forcing a failure. [ 305.550414][ T8315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.566598][ T8315] CPU: 0 UID: 0 PID: 8315 Comm: syz.1.487 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 305.566623][ T8315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 305.566644][ T8315] Call Trace: [ 305.566653][ T8315] [ 305.566660][ T8315] dump_stack_lvl+0x189/0x250 [ 305.566686][ T8315] ? __pfx____ratelimit+0x10/0x10 [ 305.566709][ T8315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.566727][ T8315] ? __pfx__printk+0x10/0x10 [ 305.566748][ T8315] ? __might_fault+0xb0/0x130 [ 305.566781][ T8315] should_fail_ex+0x414/0x560 [ 305.566807][ T8315] _copy_from_user+0x2d/0xb0 [ 305.566827][ T8315] ___sys_recvmsg+0x12e/0x510 [ 305.566851][ T8315] ? __pfx____sys_recvmsg+0x10/0x10 [ 305.566892][ T8315] ? __pfx_set_normalized_timespec64+0x10/0x10 [ 305.566923][ T8315] do_recvmmsg+0x307/0x770 [ 305.566950][ T8315] ? __pfx_do_recvmmsg+0x10/0x10 [ 305.566981][ T8315] ? _copy_from_user+0x94/0xb0 [ 305.567012][ T8315] __x64_sys_recvmmsg+0x1af/0x240 [ 305.567032][ T8315] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 305.567048][ T8315] ? rcu_is_watching+0x15/0xb0 [ 305.567069][ T8315] ? do_syscall_64+0xbe/0x3b0 [ 305.567094][ T8315] do_syscall_64+0xfa/0x3b0 [ 305.567114][ T8315] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.567135][ T8315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.567152][ T8315] ? clear_bhb_loop+0x60/0xb0 [ 305.567182][ T8315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.567197][ T8315] RIP: 0033:0x7fbee158ebe9 [ 305.567214][ T8315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.567228][ T8315] RSP: 002b:00007fbee24a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 305.567246][ T8315] RAX: ffffffffffffffda RBX: 00007fbee17b5fa0 RCX: 00007fbee158ebe9 [ 305.567256][ T8315] RDX: 00000000000006f5 RSI: 0000200000000440 RDI: 0000000000000003 [ 305.567278][ T8315] RBP: 00007fbee24a2090 R08: 0000200000000480 R09: 0000000000000000 [ 305.567290][ T8315] R10: 0000002000000022 R11: 0000000000000246 R12: 0000000000000002 [ 305.567301][ T8315] R13: 00007fbee17b6038 R14: 00007fbee17b5fa0 R15: 00007fbee18dfa28 [ 305.567327][ T8315] [ 305.919874][ T5931] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 306.092772][ T5931] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 306.101791][ T5931] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.318938][ T5931] usb 4-1: config 0 has no interface number 0 [ 306.326493][ T5931] usb 4-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 306.374149][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.5.493'. [ 306.384560][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.5.493'. [ 306.395061][ T5931] usb 4-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 306.400017][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.5.493'. [ 306.430206][ T5931] usb 4-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 306.439439][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.449754][ T5931] usb 4-1: Product: syz [ 306.454234][ T5931] usb 4-1: Manufacturer: syz [ 306.459173][ T5931] usb 4-1: SerialNumber: syz [ 306.468565][ T5931] usb 4-1: config 0 descriptor?? [ 306.485229][ T5931] HFC-S_USB 4-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 306.496210][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.5.493'. [ 306.509418][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.5.493'. [ 306.518901][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.5.493'. [ 306.528251][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.5.493'. [ 306.538040][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.5.493'. [ 306.553357][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.5.493'. [ 306.694545][ T5931] usb 4-1: USB disconnect, device number 27 [ 307.030099][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.274902][ T24] usb 1-1: USB disconnect, device number 37 [ 307.444697][ T5954] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 307.538066][ T8354] binder: BINDER_SET_CONTEXT_MGR already set [ 307.557946][ T8354] binder: 8348:8354 ioctl 4018620d 2000000002c0 returned -16 [ 307.668173][ T5954] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.679054][ T5954] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 307.690102][ T5954] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 307.936359][ T8353] can: request_module (can-proto-3) failed. [ 307.943339][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.956434][ T5954] usb 6-1: config 0 descriptor?? [ 308.002899][ T5954] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 308.010703][ T5954] dvb-usb: bulk message failed: -22 (3/0) [ 308.035085][ T5954] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 308.051551][ T5954] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 308.062166][ T5954] usb 6-1: media controller created [ 308.078101][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 308.108343][ T5954] dvb-usb: bulk message failed: -22 (6/0) [ 308.118950][ T5954] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 308.198292][ T5954] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input12 [ 308.276483][ T5954] dvb-usb: schedule remote query interval to 150 msecs. [ 308.300108][ T5954] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 308.426537][ T5954] usb 6-1: USB disconnect, device number 25 [ 308.556306][ T5954] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 308.714652][ T8359] FAULT_INJECTION: forcing a failure. [ 308.714652][ T8359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.731661][ T8359] CPU: 1 UID: 0 PID: 8359 Comm: syz.3.498 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 308.731687][ T8359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 308.731697][ T8359] Call Trace: [ 308.731704][ T8359] [ 308.731712][ T8359] dump_stack_lvl+0x189/0x250 [ 308.731738][ T8359] ? __pfx____ratelimit+0x10/0x10 [ 308.731771][ T8359] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.731791][ T8359] ? __pfx__printk+0x10/0x10 [ 308.731814][ T8359] ? __might_fault+0xb0/0x130 [ 308.731847][ T8359] should_fail_ex+0x414/0x560 [ 308.731874][ T8359] _copy_from_user+0x2d/0xb0 [ 308.731894][ T8359] ___sys_recvmsg+0x12e/0x510 [ 308.731919][ T8359] ? __pfx____sys_recvmsg+0x10/0x10 [ 308.731968][ T8359] ? __pfx_set_normalized_timespec64+0x10/0x10 [ 308.732002][ T8359] do_recvmmsg+0x307/0x770 [ 308.732028][ T8359] ? __pfx_do_recvmmsg+0x10/0x10 [ 308.732058][ T8359] ? _copy_from_user+0x94/0xb0 [ 308.732090][ T8359] __x64_sys_recvmmsg+0x1af/0x240 [ 308.732111][ T8359] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 308.732135][ T8359] ? do_syscall_64+0xbe/0x3b0 [ 308.732160][ T8359] do_syscall_64+0xfa/0x3b0 [ 308.732181][ T8359] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.732202][ T8359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.732219][ T8359] ? clear_bhb_loop+0x60/0xb0 [ 308.732239][ T8359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.732255][ T8359] RIP: 0033:0x7f9e9758ebe9 [ 308.732271][ T8359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.732285][ T8359] RSP: 002b:00007f9e984e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 308.732303][ T8359] RAX: ffffffffffffffda RBX: 00007f9e977b5fa0 RCX: 00007f9e9758ebe9 [ 308.732315][ T8359] RDX: 00000000000006f5 RSI: 0000200000000440 RDI: 0000000000000003 [ 308.732327][ T8359] RBP: 00007f9e984e2090 R08: 0000200000000480 R09: 0000000000000000 [ 308.732338][ T8359] R10: 0000002000000022 R11: 0000000000000246 R12: 0000000000000002 [ 308.732349][ T8359] R13: 00007f9e977b6038 R14: 00007f9e977b5fa0 R15: 00007f9e978dfa28 [ 308.732376][ T8359] [ 309.050745][ T30] kauditd_printk_skb: 129 callbacks suppressed [ 309.050761][ T30] audit: type=1326 audit(1754930400.533:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9758ebe9 code=0x7ffc0000 [ 309.085231][ T30] audit: type=1326 audit(1754930400.563:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9758ebe9 code=0x7ffc0000 [ 309.107711][ T30] audit: type=1326 audit(1754930400.563:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9e9758ebe9 code=0x7ffc0000 [ 309.131086][ T30] audit: type=1326 audit(1754930400.563:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9758ebe9 code=0x7ffc0000 [ 309.153504][ T30] audit: type=1326 audit(1754930400.563:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9758ebe9 code=0x7ffc0000 [ 309.182107][ T30] audit: type=1326 audit(1754930400.563:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e9758ebe9 code=0x7ffc0000 [ 309.205201][ T30] audit: type=1326 audit(1754930400.563:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9758ebe9 code=0x7ffc0000 [ 309.246468][ T30] audit: type=1326 audit(1754930400.563:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e9758ebe9 code=0x7ffc0000 [ 309.311195][ T30] audit: type=1326 audit(1754930400.583:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9758ebe9 code=0x7ffc0000 [ 309.344228][ T30] audit: type=1326 audit(1754930400.583:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.3.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e9758ebe9 code=0x7ffc0000 [ 309.759811][ T5954] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 309.775547][ T5931] IPVS: starting estimator thread 0... [ 309.869803][ T8387] IPVS: using max 28 ests per chain, 67200 per kthread [ 309.962592][ T5954] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 309.975900][ T5954] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 309.994120][ T5954] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 310.017137][ T5954] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 310.028313][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.063691][ T5954] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 310.078656][ T5954] usb 1-1: invalid MIDI out EP 0 [ 310.139271][ T5954] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 310.217629][ T7831] udevd[7831]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 310.318433][ T5954] usb 1-1: USB disconnect, device number 38 [ 310.861332][ T8399] binder: BINDER_SET_CONTEXT_MGR already set [ 310.867568][ T8399] binder: 8398:8399 ioctl 4018620d 200000000040 returned -16 [ 310.869274][ T8401] binder_alloc: binder_alloc_mmap_handler: 8400 200000ffc000-200001000000 already mapped failed -16 [ 310.891850][ T8399] binder: 8398:8399 ioctl c0306201 200000000140 returned -14 [ 311.057813][ T8407] syzkaller0: entered promiscuous mode [ 311.065994][ T8407] syzkaller0: entered allmulticast mode [ 311.074120][ T8404] FAULT_INJECTION: forcing a failure. [ 311.074120][ T8404] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 311.075561][ T8406] tipc: Started in network mode [ 311.091677][ T8404] CPU: 0 UID: 0 PID: 8404 Comm: syz.3.510 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 311.091704][ T8404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 311.091715][ T8404] Call Trace: [ 311.091722][ T8404] [ 311.091730][ T8404] dump_stack_lvl+0x189/0x250 [ 311.091755][ T8404] ? __pfx____ratelimit+0x10/0x10 [ 311.091778][ T8404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.091798][ T8404] ? __pfx__printk+0x10/0x10 [ 311.091833][ T8404] ? fs_reclaim_acquire+0x7d/0x100 [ 311.091868][ T8404] should_fail_ex+0x414/0x560 [ 311.091894][ T8404] prepare_alloc_pages+0x213/0x610 [ 311.091919][ T8404] __alloc_frozen_pages_noprof+0x123/0x370 [ 311.091941][ T8404] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 311.091969][ T8404] ? policy_nodemask+0x27c/0x720 [ 311.091997][ T8404] alloc_pages_mpol+0x232/0x4a0 [ 311.092026][ T8404] vma_alloc_folio_noprof+0xe4/0x200 [ 311.092052][ T8404] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 311.092087][ T8404] folio_prealloc+0x30/0x180 [ 311.092113][ T8404] do_wp_page+0x1231/0x5800 [ 311.092155][ T8404] ? __pfx_do_wp_page+0x10/0x10 [ 311.092173][ T8404] ? do_raw_spin_lock+0x121/0x290 [ 311.092197][ T8404] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 311.092227][ T8404] __handle_mm_fault+0x1033/0x5440 [ 311.092265][ T8404] ? __pfx___handle_mm_fault+0x10/0x10 [ 311.092307][ T8404] ? find_vma+0xe7/0x160 [ 311.092326][ T8404] ? __pfx_find_vma+0x10/0x10 [ 311.092350][ T8404] handle_mm_fault+0x40a/0x8e0 [ 311.092382][ T8404] do_user_addr_fault+0x764/0x1390 [ 311.092423][ T8404] exc_page_fault+0x76/0xf0 [ 311.092447][ T8404] asm_exc_page_fault+0x26/0x30 [ 311.092464][ T8404] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 311.092488][ T8404] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 c1 44 03 00 90 90 90 90 90 90 90 90 90 90 [ 311.092503][ T8404] RSP: 0018:ffffc90004baf8b8 EFLAGS: 00050206 [ 311.092519][ T8404] RAX: 0000000000000028 RBX: 0000000000000028 RCX: 0000200000001030 [ 311.092531][ T8404] RDX: ffff88802e2a3c00 RSI: 0000000000000022 RDI: 00000000ffffffff [ 311.092543][ T8404] RBP: ffffc90004bafa30 R08: ffff888032a880e7 R09: 1ffff1100655101c [ 311.092556][ T8404] R10: dffffc0000000000 R11: ffffed100655101d R12: 0000000000000022 [ 311.092568][ T8404] R13: dffffc0000000000 R14: 0000000000000010 R15: 0000200000001000 [ 311.092597][ T8404] ____sys_recvmsg+0x2ab/0x460 [ 311.092625][ T8404] ? __pfx_____sys_recvmsg+0x10/0x10 [ 311.092659][ T8404] ? import_iovec+0x74/0xa0 [ 311.092685][ T8404] ___sys_recvmsg+0x1b5/0x510 [ 311.092708][ T8404] ? __pfx____sys_recvmsg+0x10/0x10 [ 311.092757][ T8404] ? __pfx_set_normalized_timespec64+0x10/0x10 [ 311.092790][ T8404] do_recvmmsg+0x307/0x770 [ 311.092824][ T8404] ? __pfx_do_recvmmsg+0x10/0x10 [ 311.092856][ T8404] ? _copy_from_user+0x94/0xb0 [ 311.092892][ T8404] __x64_sys_recvmmsg+0x1af/0x240 [ 311.092912][ T8404] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 311.092935][ T8404] ? do_syscall_64+0xbe/0x3b0 [ 311.092962][ T8404] do_syscall_64+0xfa/0x3b0 [ 311.092983][ T8404] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.093004][ T8404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.093019][ T8404] ? clear_bhb_loop+0x60/0xb0 [ 311.093039][ T8404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.093053][ T8404] RIP: 0033:0x7f9e9758ebe9 [ 311.093067][ T8404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.093080][ T8404] RSP: 002b:00007f9e984e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 311.093096][ T8404] RAX: ffffffffffffffda RBX: 00007f9e977b5fa0 RCX: 00007f9e9758ebe9 [ 311.093107][ T8404] RDX: 00000000000006f5 RSI: 0000200000000440 RDI: 0000000000000003 [ 311.093118][ T8404] RBP: 00007f9e984e2090 R08: 0000200000000480 R09: 0000000000000000 [ 311.093128][ T8404] R10: 0000002000000022 R11: 0000000000000246 R12: 0000000000000002 [ 311.093138][ T8404] R13: 00007f9e977b6038 R14: 00007f9e977b5fa0 R15: 00007f9e978dfa28 [ 311.093164][ T8404] [ 311.492102][ T8406] tipc: Node identity a28482b2e83f, cluster identity 4711 [ 311.499483][ T8406] tipc: Enabled bearer , priority 0 [ 311.543781][ T8408] tipc: Resetting bearer [ 311.549960][ T5931] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 311.587551][ T8408] tipc: Disabling bearer [ 311.699930][ T5931] usb 6-1: device descriptor read/64, error -71 [ 312.000309][ T5931] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 312.100083][ T5979] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 312.139769][ T5931] usb 6-1: device descriptor read/64, error -71 [ 312.250318][ T5931] usb usb6-port1: attempt power cycle [ 312.263812][ T5979] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 312.272302][ T5979] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.287917][ T5979] usb 1-1: config 0 has no interface number 0 [ 312.294180][ T5979] usb 1-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 312.307568][ T5979] usb 1-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 312.327407][ T5979] usb 1-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 312.337860][ T5979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.346209][ T5979] usb 1-1: Product: syz [ 312.350562][ T5979] usb 1-1: Manufacturer: syz [ 312.355265][ T5979] usb 1-1: SerialNumber: syz [ 312.362862][ T5979] usb 1-1: config 0 descriptor?? [ 312.373972][ T5979] HFC-S_USB 1-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 312.578538][ T5954] usb 1-1: USB disconnect, device number 39 [ 312.589925][ T5931] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 312.690373][ T5931] usb 6-1: device descriptor read/8, error -71 [ 312.941537][ T5931] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 312.970694][ T5931] usb 6-1: device descriptor read/8, error -71 [ 313.081738][ T5931] usb usb6-port1: unable to enumerate USB device [ 314.337532][ T8452] FAULT_INJECTION: forcing a failure. [ 314.337532][ T8452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.351222][ T8452] CPU: 1 UID: 0 PID: 8452 Comm: syz.0.521 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 314.351239][ T8452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 314.351246][ T8452] Call Trace: [ 314.351251][ T8452] [ 314.351255][ T8452] dump_stack_lvl+0x189/0x250 [ 314.351272][ T8452] ? __pfx____ratelimit+0x10/0x10 [ 314.351286][ T8452] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.351297][ T8452] ? __pfx__printk+0x10/0x10 [ 314.351311][ T8452] ? __might_fault+0xb0/0x130 [ 314.351331][ T8452] should_fail_ex+0x414/0x560 [ 314.351346][ T8452] _copy_from_user+0x2d/0xb0 [ 314.351358][ T8452] ___sys_recvmsg+0x12e/0x510 [ 314.351372][ T8452] ? __pfx____sys_recvmsg+0x10/0x10 [ 314.351395][ T8452] ? __pfx_set_normalized_timespec64+0x10/0x10 [ 314.351415][ T8452] do_recvmmsg+0x307/0x770 [ 314.351429][ T8452] ? __pfx_do_recvmmsg+0x10/0x10 [ 314.351446][ T8452] ? _copy_from_user+0x94/0xb0 [ 314.351464][ T8452] __x64_sys_recvmmsg+0x1af/0x240 [ 314.351476][ T8452] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 314.351485][ T8452] ? rcu_is_watching+0x15/0xb0 [ 314.351498][ T8452] ? do_syscall_64+0xbe/0x3b0 [ 314.351514][ T8452] do_syscall_64+0xfa/0x3b0 [ 314.351526][ T8452] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.351613][ T8452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.351623][ T8452] ? clear_bhb_loop+0x60/0xb0 [ 314.351635][ T8452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.351644][ T8452] RIP: 0033:0x7f097c18ebe9 [ 314.351655][ T8452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.351664][ T8452] RSP: 002b:00007f097d088038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 314.351676][ T8452] RAX: ffffffffffffffda RBX: 00007f097c3b5fa0 RCX: 00007f097c18ebe9 [ 314.351683][ T8452] RDX: 00000000000006f5 RSI: 0000200000000440 RDI: 0000000000000003 [ 314.351690][ T8452] RBP: 00007f097d088090 R08: 0000200000000480 R09: 0000000000000000 [ 314.351696][ T8452] R10: 0000002000000022 R11: 0000000000000246 R12: 0000000000000002 [ 314.351702][ T8452] R13: 00007f097c3b6038 R14: 00007f097c3b5fa0 R15: 00007f097c4dfa28 [ 314.351718][ T8452] [ 314.799131][ T8469] tipc: Cannot configure node identity twice [ 314.932526][ T5979] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 315.104084][ T5979] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 315.560192][ T5979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.568489][ T5979] usb 4-1: Product: syz [ 315.577540][ T5979] usb 4-1: Manufacturer: syz [ 315.582494][ T5979] usb 4-1: SerialNumber: syz [ 315.589906][ T24] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 315.608832][ T5979] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 315.692103][ T5930] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 315.740172][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 315.747040][ T24] usb 6-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 315.756236][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.773321][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 65 [ 315.786629][ T24] usb 6-1: config 0 has no interface number 0 [ 315.794047][ T24] usb 6-1: too many endpoints for config 0 interface 1 altsetting 61: 142, using maximum allowed: 30 [ 315.805844][ T24] usb 6-1: config 0 interface 1 altsetting 61 has 0 endpoint descriptors, different from the interface descriptor's value: 142 [ 315.822320][ T24] usb 6-1: config 0 interface 1 has no altsetting 0 [ 315.830016][ T24] usb 6-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 315.849396][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.865044][ T24] usb 6-1: config 0 descriptor?? [ 315.898752][ T24] usb 6-1: selecting invalid altsetting 0 [ 316.095806][ T24] usb 6-1: USB disconnect, device number 30 [ 316.176379][ T5931] usb 4-1: USB disconnect, device number 28 [ 316.819015][ T24] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 316.832140][ T5930] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 316.841221][ T5930] ath9k_htc: Failed to initialize the device [ 316.852648][ T5931] usb 4-1: ath9k_htc: USB layer deinitialized [ 316.911666][ T8489] FAULT_INJECTION: forcing a failure. [ 316.911666][ T8489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.925752][ T8489] CPU: 0 UID: 0 PID: 8489 Comm: syz.5.533 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 316.925778][ T8489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 316.925790][ T8489] Call Trace: [ 316.925800][ T8489] [ 316.925807][ T8489] dump_stack_lvl+0x189/0x250 [ 316.925825][ T8489] ? __pfx____ratelimit+0x10/0x10 [ 316.925839][ T8489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.925850][ T8489] ? __pfx__printk+0x10/0x10 [ 316.925863][ T8489] ? __might_fault+0xb0/0x130 [ 316.925883][ T8489] should_fail_ex+0x414/0x560 [ 316.925898][ T8489] _copy_from_user+0x2d/0xb0 [ 316.925910][ T8489] ___sys_recvmsg+0x12e/0x510 [ 316.925925][ T8489] ? __pfx____sys_recvmsg+0x10/0x10 [ 316.925948][ T8489] ? __pfx_set_normalized_timespec64+0x10/0x10 [ 316.925969][ T8489] do_recvmmsg+0x307/0x770 [ 316.925983][ T8489] ? __pfx_do_recvmmsg+0x10/0x10 [ 316.926000][ T8489] ? _copy_from_user+0x94/0xb0 [ 316.926018][ T8489] __x64_sys_recvmmsg+0x1af/0x240 [ 316.926030][ T8489] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 316.926048][ T8489] ? rcu_is_watching+0x15/0xb0 [ 316.926061][ T8489] ? do_syscall_64+0xbe/0x3b0 [ 316.926077][ T8489] do_syscall_64+0xfa/0x3b0 [ 316.926090][ T8489] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.926102][ T8489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.926112][ T8489] ? clear_bhb_loop+0x60/0xb0 [ 316.926124][ T8489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.926134][ T8489] RIP: 0033:0x7fb23f38ebe9 [ 316.926144][ T8489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.926153][ T8489] RSP: 002b:00007fb2402c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 316.926165][ T8489] RAX: ffffffffffffffda RBX: 00007fb23f5b5fa0 RCX: 00007fb23f38ebe9 [ 316.926172][ T8489] RDX: 00000000000006f5 RSI: 0000200000000440 RDI: 0000000000000003 [ 316.926179][ T8489] RBP: 00007fb2402c7090 R08: 0000200000000480 R09: 0000000000000000 [ 316.926185][ T8489] R10: 0000002000000022 R11: 0000000000000246 R12: 0000000000000002 [ 316.926191][ T8489] R13: 00007fb23f5b6038 R14: 00007fb23f5b5fa0 R15: 00007fb23f6dfa28 [ 316.926207][ T8489] [ 317.039853][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 317.198905][ T24] usb 1-1: config 0 has an invalid interface number: 53 but max is 0 [ 317.209443][ T24] usb 1-1: config 0 has no interface number 0 [ 317.223754][ T24] usb 1-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2 [ 317.233205][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.242212][ T24] usb 1-1: Product: syz [ 317.246516][ T24] usb 1-1: Manufacturer: syz [ 317.251334][ T24] usb 1-1: SerialNumber: syz [ 317.258348][ T24] usb 1-1: config 0 descriptor?? [ 317.283598][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.291420][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.319905][ T5931] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 317.409861][ T1212] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 317.481652][ T5931] usb 4-1: too many configurations: 26, using maximum allowed: 8 [ 317.494371][ T5931] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 317.502157][ T5931] usb 4-1: can't read configurations, error -61 [ 317.580004][ T1212] usb 6-1: Using ep0 maxpacket: 16 [ 317.587129][ T1212] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.597613][ T1212] usb 6-1: config 0 has no interfaces? [ 317.604351][ T1212] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 317.613494][ T1212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.624273][ T1212] usb 6-1: config 0 descriptor?? [ 317.639792][ T5931] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 317.800681][ T5931] usb 4-1: too many configurations: 26, using maximum allowed: 8 [ 317.810976][ T5931] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 317.819059][ T5931] usb 4-1: can't read configurations, error -61 [ 317.828234][ T5931] usb usb4-port1: attempt power cycle [ 318.180353][ T5931] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 318.199500][ T1212] usb 6-1: USB disconnect, device number 31 [ 318.220994][ T5931] usb 4-1: too many configurations: 26, using maximum allowed: 8 [ 318.243370][ T5931] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 318.267594][ T5931] usb 4-1: can't read configurations, error -61 [ 318.410375][ T5931] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 318.431064][ T5931] usb 4-1: too many configurations: 26, using maximum allowed: 8 [ 318.442045][ T5931] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 318.449811][ T5931] usb 4-1: can't read configurations, error -61 [ 318.456379][ T5931] usb usb4-port1: unable to enumerate USB device [ 318.710374][ T1212] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 318.879797][ T1212] usb 6-1: Using ep0 maxpacket: 8 [ 318.886963][ T1212] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.898471][ T1212] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 318.907727][ T1212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.918833][ T1212] usb 6-1: config 0 descriptor?? [ 318.927522][ T1212] iowarrior 6-1:0.0: no interrupt-in endpoint found [ 319.185965][ T5954] usb 6-1: USB disconnect, device number 32 [ 319.424795][ T1212] usb 1-1: USB disconnect, device number 40 [ 319.463771][ T8509] loop2: detected capacity change from 0 to 7 [ 319.474079][ T7802] Dev loop2: unable to read RDB block 7 [ 319.481054][ T7802] loop2: unable to read partition table [ 319.487045][ T7802] loop2: partition table beyond EOD, truncated [ 319.495944][ T8509] Dev loop2: unable to read RDB block 7 [ 319.502099][ T8509] loop2: unable to read partition table [ 319.508258][ T8509] loop2: partition table beyond EOD, truncated [ 319.515313][ T8509] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 320.070092][ T5954] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 320.164038][ T8522] sctp: [Deprecated]: syz.3.543 (pid 8522) Use of int in maxseg socket option. [ 320.164038][ T8522] Use struct sctp_assoc_value instead [ 320.191103][ T9] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 320.300578][ T5954] usb 1-1: Using ep0 maxpacket: 32 [ 320.312539][ T5954] usb 1-1: unable to get BOS descriptor or descriptor too short [ 320.325909][ T5954] usb 1-1: config 7 has an invalid interface number: 128 but max is 0 [ 320.338226][ T5954] usb 1-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 320.353194][ T5954] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 320.364934][ T5954] usb 1-1: config 7 has no interface number 0 [ 320.388938][ T5954] usb 1-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 320.402564][ T9] usb 6-1: config 0 has an invalid interface number: 230 but max is 0 [ 320.415329][ T9] usb 6-1: config 0 has no interface number 0 [ 320.422311][ T9] usb 6-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 320.435303][ T5954] usb 1-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 320.445622][ T9] usb 6-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 320.458507][ T5954] usb 1-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 320.474305][ T9] usb 6-1: config 0 interface 230 has no altsetting 0 [ 320.481987][ T5954] usb 1-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 320.500257][ T5954] usb 1-1: config 7 interface 128 has no altsetting 0 [ 320.508004][ T9] usb 6-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 320.517965][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.526696][ T9] usb 6-1: Product: syz [ 320.531587][ T9] usb 6-1: Manufacturer: syz [ 320.537329][ T9] usb 6-1: SerialNumber: syz [ 320.545273][ T5954] usb 1-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 320.566932][ T9] usb 6-1: config 0 descriptor?? [ 320.575060][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.584125][ T5954] usb 1-1: Product: syz [ 320.584497][ T8514] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 320.596588][ T8514] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 320.604013][ T5954] usb 1-1: Manufacturer: syz [ 320.623037][ T5954] usb 1-1: SerialNumber: syz [ 320.629504][ T9] ums-usbat 6-1:0.230: USB Mass Storage device detected [ 320.646112][ T8516] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 320.667312][ T9] ums-usbat 6-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 321.208946][ T8531] IPv6: sit1: Disabled Multicast RS [ 321.216484][ T8531] sit1: entered allmulticast mode [ 321.260878][ T5930] IPVS: starting estimator thread 0... [ 321.285681][ T8533] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 321.379807][ T8532] IPVS: using max 33 ests per chain, 79200 per kthread [ 322.228917][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 322.228936][ T30] audit: type=1800 audit(1754930413.693:393): pid=8536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.545" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 322.919076][ T9] ums-usbat 6-1:0.230: probe with driver ums-usbat failed with error -5 [ 322.928097][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 322.986569][ T9] usb 6-1: USB disconnect, device number 33 [ 323.046651][ T5954] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 323.084796][ T8543] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 323.088266][ T5954] usb 1-1: MIDIStreaming interface descriptor not found [ 323.125389][ T10] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 323.135037][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.162107][ T10] usb 4-1: Product: syz [ 323.179827][ T10] usb 4-1: Manufacturer: syz [ 323.194120][ T10] usb 4-1: SerialNumber: syz [ 323.204541][ T5954] usb 1-1: USB disconnect, device number 41 [ 323.223208][ T10] usb 4-1: config 0 descriptor?? [ 324.128561][ T10] usb 4-1: f81604_read: reg: 100f failed: -EPROTO [ 324.183240][ T10] usb 4-1: f81604_read: reg: 200f failed: -EPROTO [ 324.210766][ T10] usb 4-1: USB disconnect, device number 33 [ 324.243310][ T10] usb 4-1: f81604_read: reg: 100f failed: -ENODEV [ 324.324824][ T10] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 324.690392][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 324.717839][ T122] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 324.855457][ T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 324.864905][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.876894][ T10] usb 4-1: config 0 descriptor?? [ 324.885753][ T10] cp210x 4-1:0.0: cp210x converter detected [ 324.893704][ T122] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.906723][ T122] usb 6-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 324.916251][ T122] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.924644][ T122] usb 6-1: Product: syz [ 324.928828][ T122] usb 6-1: Manufacturer: syz [ 324.933810][ T122] usb 6-1: SerialNumber: syz [ 324.941662][ T122] usb 6-1: config 0 descriptor?? [ 324.951072][ T122] usb 6-1: bad CDC descriptors [ 324.999952][ T5930] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 325.130061][ T5930] usb 1-1: device descriptor read/64, error -71 [ 325.156340][ T1212] usb 6-1: USB disconnect, device number 34 [ 325.286006][ T10] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 325.303166][ T8564] tipc: Enabled bearer , priority 0 [ 325.315734][ T8564] tipc: Resetting bearer [ 325.322688][ T10] usb 4-1: cp210x converter now attached to ttyUSB0 [ 325.343874][ T8563] tipc: Disabling bearer [ 325.370468][ T5930] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 325.502737][ T8557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.511643][ T5930] usb 1-1: device descriptor read/64, error -71 [ 325.513768][ T8557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.541409][ T5931] usb 4-1: USB disconnect, device number 34 [ 325.555951][ T5931] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 325.584689][ T5931] cp210x 4-1:0.0: device disconnected [ 325.620443][ T5930] usb usb1-port1: attempt power cycle [ 325.909119][ T8578] IPv6: sit1: Disabled Multicast RS [ 325.916739][ T8578] sit1: entered allmulticast mode [ 326.008028][ T8580] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 326.030209][ T5930] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 326.061649][ T5930] usb 1-1: device descriptor read/8, error -71 [ 326.329894][ T5930] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 326.352161][ T5930] usb 1-1: device descriptor read/8, error -71 [ 326.460535][ T5930] usb usb1-port1: unable to enumerate USB device [ 326.916903][ T8584] trusted_key: syz.3.557 sent an empty control message without MSG_MORE. [ 326.937209][ T8584] netlink: 'syz.3.557': attribute type 1 has an invalid length. [ 327.017986][ T8589] __nla_validate_parse: 43 callbacks suppressed [ 327.018004][ T8589] netlink: 240 bytes leftover after parsing attributes in process `syz.3.559'. [ 327.449770][ T122] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 327.613867][ T122] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 327.627311][ T122] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.642763][ T122] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 327.654258][ T122] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 327.665743][ T122] usb 6-1: Manufacturer: syz [ 327.676877][ T122] usb 6-1: config 0 descriptor?? [ 327.789839][ T122] rc_core: IR keymap rc-hauppauge not found [ 327.795851][ T122] Registered IR keymap rc-empty [ 327.830826][ T122] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 327.946470][ T122] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input13 [ 328.249491][ T8605] rc rc0: two consecutive events of type space [ 328.483569][ T8612] fuse: Bad value for 'fd' [ 328.819393][ T8620] IPv6: sit1: Disabled Multicast RS [ 328.831914][ T8620] sit1: entered allmulticast mode [ 328.870549][ T8621] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 328.932007][ T122] IPVS: starting estimator thread 0... [ 329.000401][ T1212] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 329.030153][ T8624] IPVS: using max 51 ests per chain, 122400 per kthread [ 329.161966][ T1212] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 329.195324][ T1212] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.227889][ T1212] usb 1-1: config 0 has no interface number 0 [ 329.304662][ T1212] usb 1-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 329.374397][ T1212] usb 1-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 329.424674][ T1212] usb 1-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 329.442683][ T1212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.452749][ T1212] usb 1-1: Product: syz [ 329.457169][ T1212] usb 1-1: Manufacturer: syz [ 329.464926][ T1212] usb 1-1: SerialNumber: syz [ 329.482156][ T1212] usb 1-1: config 0 descriptor?? [ 329.495679][ T1212] HFC-S_USB 1-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 329.709624][ T1212] usb 1-1: USB disconnect, device number 46 [ 330.085989][ T5930] usb 6-1: USB disconnect, device number 35 [ 330.145480][ T8632] sock: sock_set_timeout: `syz.5.571' (pid 8632) tries to set negative timeout [ 330.220187][ T5931] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 330.398002][ T5931] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 330.409487][ T5931] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 330.421512][ T5931] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 330.456436][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.763248][ T8630] kAFS: unable to lookup cell '.,' [ 330.781602][ T122] usb 4-1: USB disconnect, device number 35 [ 331.152190][ T30] audit: type=1326 audit(1754930422.633:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097c18ebe9 code=0x7ffc0000 [ 331.340378][ T30] audit: type=1326 audit(1754930422.653:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f097c18ebe9 code=0x7ffc0000 [ 331.363860][ T30] audit: type=1326 audit(1754930422.653:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097c18ebe9 code=0x7ffc0000 [ 331.386716][ T30] audit: type=1326 audit(1754930422.653:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f097c18ebe9 code=0x7ffc0000 [ 331.411874][ T30] audit: type=1326 audit(1754930422.663:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097c18ebe9 code=0x7ffc0000 [ 331.445902][ T30] audit: type=1326 audit(1754930422.663:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f097c18ebe9 code=0x7ffc0000 [ 331.474023][ T5931] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 331.477984][ T30] audit: type=1326 audit(1754930422.663:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097c18ebe9 code=0x7ffc0000 [ 331.509603][ T30] audit: type=1326 audit(1754930422.663:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f097c18ebe9 code=0x7ffc0000 [ 331.534662][ T30] audit: type=1326 audit(1754930422.663:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097c18ebe9 code=0x7ffc0000 [ 331.557256][ T30] audit: type=1326 audit(1754930422.663:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f097c18ebe9 code=0x7ffc0000 [ 331.673026][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.685486][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.696777][ T5931] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 331.706490][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.719254][ T5931] usb 6-1: config 0 descriptor?? [ 331.943020][ T5931] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 331.982956][ T5931] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 332.074571][ T5931] cp2112 0003:10C4:EA90.0009: error requesting version [ 332.097494][ T5931] cp2112 0003:10C4:EA90.0009: probe with driver cp2112 failed with error -71 [ 332.114253][ T5931] usb 6-1: USB disconnect, device number 36 [ 332.439850][ T5931] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 332.609931][ T5931] usb 6-1: Using ep0 maxpacket: 8 [ 332.617507][ T5931] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 332.629654][ T5931] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 332.642640][ T5931] usb 6-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 332.651417][ T5931] usb 6-1: Product: syz [ 332.656745][ T5931] usb 6-1: Manufacturer: syz [ 332.661667][ T5931] usb 6-1: SerialNumber: syz [ 332.671181][ T5931] usb 6-1: config 0 descriptor?? [ 332.884112][ T5931] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 333.068045][ T8687] netlink: 20 bytes leftover after parsing attributes in process `syz.1.586'. [ 333.083369][ T8677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.110298][ T8677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.126209][ T8693] netlink: 20 bytes leftover after parsing attributes in process `syz.1.586'. [ 333.139065][ T5931] gspca_sunplus: reg_w_riv err -71 [ 333.151314][ T5931] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 333.321895][ T5931] usb 6-1: USB disconnect, device number 37 [ 333.440447][ T122] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 333.670197][ T122] usb 4-1: Using ep0 maxpacket: 8 [ 333.717855][ T122] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 333.728090][ T122] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.753004][ T122] usb 4-1: config 0 descriptor?? [ 333.941949][ T5931] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 333.967280][ T122] usb 4-1: string descriptor 0 read error: -71 [ 333.999501][ T122] usb 4-1: Found UVC 0.00 device (2833:0201) [ 334.037872][ T122] usb 4-1: No valid video chain found. [ 334.062806][ T122] usb 4-1: USB disconnect, device number 36 [ 334.165111][ T5931] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 334.182400][ T5931] usb 6-1: config 0 has no interface number 0 [ 334.204686][ T5931] usb 6-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 334.246429][ T5931] usb 6-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 334.281077][ T5931] usb 6-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 334.290427][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.298440][ T5931] usb 6-1: Product: syz [ 334.306399][ T5931] usb 6-1: Manufacturer: syz [ 334.319975][ T5931] usb 6-1: SerialNumber: syz [ 334.341743][ T5931] usb 6-1: config 0 descriptor?? [ 334.396441][ T5931] vmk80xx 6-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 334.410903][ T5931] vmk80xx 6-1:0.255: probe with driver vmk80xx failed with error -22 [ 334.575886][ T8700] netlink: 'syz.5.587': attribute type 1 has an invalid length. [ 334.719830][ T5931] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 335.169860][ T5931] usb 1-1: Using ep0 maxpacket: 16 [ 335.218926][ T5931] usb 1-1: config 4 has an invalid interface number: 51 but max is 0 [ 335.239996][ T5931] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 335.273312][ T5931] usb 1-1: config 4 has no interface number 0 [ 335.289963][ T5931] usb 1-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 335.335351][ T5931] usb 1-1: config 4 interface 51 has no altsetting 0 [ 335.354713][ T5931] usb 1-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 335.369588][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.384663][ T5931] usb 1-1: Product: syz [ 335.392029][ T5931] usb 1-1: Manufacturer: syz [ 335.403904][ T5931] usb 1-1: SerialNumber: syz [ 335.480417][ T5931] cdc_eem 1-1:4.51: probe with driver cdc_eem failed with error -22 [ 335.636425][ T8717] tipc: Enabled bearer , priority 0 [ 335.674120][ T8717] tipc: Disabling bearer [ 335.785567][ T8724] netlink: 428 bytes leftover after parsing attributes in process `syz.3.594'. [ 337.053593][ T5930] usb 6-1: USB disconnect, device number 38 [ 337.153144][ T8745] netlink: 4 bytes leftover after parsing attributes in process `syz.5.599'. [ 337.161820][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.5.599'. [ 337.179808][ T5931] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 337.310215][ T5931] usb 4-1: device descriptor read/64, error -71 [ 337.532547][ T5954] usb 1-1: USB disconnect, device number 47 [ 337.560482][ T5931] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 337.576580][ T8754] netlink: 108 bytes leftover after parsing attributes in process `syz.0.601'. [ 337.589114][ T8754] netlink: 108 bytes leftover after parsing attributes in process `syz.0.601'. [ 337.608190][ T8754] netlink: 108 bytes leftover after parsing attributes in process `syz.0.601'. [ 337.617769][ T8754] netlink: 108 bytes leftover after parsing attributes in process `syz.0.601'. [ 337.631446][ T8754] netlink: 108 bytes leftover after parsing attributes in process `syz.0.601'. [ 337.709810][ T5931] usb 4-1: device descriptor read/64, error -71 [ 337.820423][ T5931] usb usb4-port1: attempt power cycle [ 337.889912][ T5954] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 338.039936][ T5954] usb 1-1: Using ep0 maxpacket: 8 [ 338.047351][ T5954] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 338.056218][ T5954] usb 1-1: config 179 has no interface number 0 [ 338.062709][ T5954] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 338.074935][ T5954] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 338.086912][ T5954] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 338.104053][ T5954] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 338.115914][ T5954] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 338.161822][ T5954] usb 1-1: config 179 interface 65 has no altsetting 0 [ 338.170342][ T5954] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 338.179794][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.200788][ T5931] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 338.232112][ T5931] usb 4-1: device descriptor read/8, error -71 [ 338.246596][ T5954] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input14 [ 338.320539][ T5219] input input14: unable to receive magic message: -110 [ 338.372395][ T5219] input input14: unable to receive magic message: -32 [ 338.392569][ T5219] input input14: unable to receive magic message: -32 [ 338.410331][ T10] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 338.470185][ T5931] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 338.476094][ T122] usb 1-1: USB disconnect, device number 48 [ 338.478167][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 338.478502][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 338.488045][ T5219] input input14: unable to receive magic message: -32 [ 338.584806][ T5931] usb 4-1: device descriptor read/8, error -71 [ 338.584829][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 338.740160][ T5931] usb usb4-port1: unable to enumerate USB device [ 339.060142][ T122] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 339.899088][ T122] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 339.907699][ T122] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.920694][ T122] usb 1-1: config 0 has no interface number 0 [ 339.928295][ T122] usb 1-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 340.047051][ T122] usb 1-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 340.175221][ T122] usb 1-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 340.185161][ T122] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.193962][ T122] usb 1-1: Product: syz [ 340.198887][ T122] usb 1-1: Manufacturer: syz [ 340.205328][ T122] usb 1-1: SerialNumber: syz [ 340.256251][ T122] usb 1-1: config 0 descriptor?? [ 340.374246][ T122] HFC-S_USB 1-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 340.696606][ T122] usb 1-1: USB disconnect, device number 49 [ 341.160564][ T8800] syzkaller1: entered promiscuous mode [ 341.166245][ T8800] syzkaller1: entered allmulticast mode [ 341.175003][ T8800] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 341.430365][ T122] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 341.526893][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 341.526910][ T30] audit: type=1800 audit(1754930433.003:452): pid=8804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.609" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 341.590053][ T122] usb 4-1: Using ep0 maxpacket: 32 [ 341.597621][ T122] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 341.606161][ T122] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.616690][ T122] usb 4-1: config 0 has no interface number 0 [ 341.623015][ T122] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 341.638512][ T122] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 341.648038][ T122] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.656243][ T122] usb 4-1: Product: syz [ 341.660574][ T122] usb 4-1: Manufacturer: syz [ 341.665278][ T122] usb 4-1: SerialNumber: syz [ 341.673997][ T122] usb 4-1: config 0 descriptor?? [ 341.698577][ T122] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 341.711872][ T122] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 341.767815][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 341.781164][ T10] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 341.789085][ T10] usb 6-1: can't read configurations, error -71 [ 341.887520][ T122] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 342.088421][ T8800] __nla_validate_parse: 60 callbacks suppressed [ 342.088448][ T8800] netlink: 16 bytes leftover after parsing attributes in process `syz.3.607'. [ 342.343778][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.614'. [ 342.914278][ T122] radio-raremono 4-1:0.35: raremono_cmd_main failed (-71) [ 342.982544][ T122] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 343.009879][ T122] usb 4-1: USB disconnect, device number 41 [ 343.058634][ T8837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.181017][ T122] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 343.829821][ T122] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 344.042161][ T122] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 344.061822][ T122] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.091702][ T122] usb 4-1: config 0 has no interface number 0 [ 344.100018][ T122] usb 4-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 344.124288][ T122] usb 4-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 344.162420][ T122] usb 4-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 344.174902][ T122] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.190147][ T122] usb 4-1: Product: syz [ 344.200491][ T122] usb 4-1: Manufacturer: syz [ 344.207203][ T8848] loop2: detected capacity change from 0 to 7 [ 344.215898][ T8848] Dev loop2: unable to read RDB block 7 [ 344.221874][ T8848] loop2: unable to read partition table [ 344.230181][ T8848] loop2: partition table beyond EOD, truncated [ 344.239844][ T122] usb 4-1: SerialNumber: syz [ 344.244664][ T8848] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 344.259793][ T122] usb 4-1: config 0 descriptor?? [ 344.271947][ T122] HFC-S_USB 4-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 344.483774][ T10] usb 4-1: USB disconnect, device number 42 [ 344.942784][ T5931] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 345.083555][ T8876] input: syz0 as /devices/virtual/input/input15 [ 345.090760][ T8876] input: failed to attach handler leds to device input15, error: -6 [ 345.124252][ T5931] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.135315][ T5931] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 345.150420][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 345.164647][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 345.178473][ T5931] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 345.189894][ T10] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 345.203788][ T5931] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 345.215854][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.223999][ T5931] usb 1-1: Product: syz [ 345.236211][ T5931] usb 1-1: Manufacturer: syz [ 345.242851][ T5931] usb 1-1: SerialNumber: syz [ 345.254667][ T5931] usb 1-1: config 0 descriptor?? [ 345.273354][ T5931] garmin_gps 1-1:0.0: Garmin GPS usb/tty converter detected [ 345.303531][ T5931] garmin_gps ttyUSB0: failed to submit interrupt urb: -90 [ 345.314264][ T5931] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 345.350179][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 345.366419][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.368477][ T8878] loop2: detected capacity change from 0 to 7 [ 345.385626][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.390314][ T8546] Dev loop2: unable to read RDB block 7 [ 345.402358][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 345.402420][ T10] usb 6-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 345.420373][ T8546] loop2: unable to read partition table [ 345.432133][ T8546] loop2: partition table beyond EOD, truncated [ 345.432224][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.448155][ T8878] Dev loop2: unable to read RDB block 7 [ 345.454173][ T8878] loop2: unable to read partition table [ 345.457808][ T10] usb 6-1: config 0 descriptor?? [ 345.461314][ T8878] loop2: partition table beyond EOD, truncated [ 345.476887][ T8878] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 345.477529][ T5931] usb 1-1: USB disconnect, device number 50 [ 345.505738][ T5931] garmin_gps 1-1:0.0: device disconnected [ 345.932235][ T10] hid-u2fzero 0003:10C4:8ACF.000A: unknown main item tag 0x3 [ 345.944592][ T10] hid-u2fzero 0003:10C4:8ACF.000A: unknown main item tag 0x0 [ 345.989897][ T10] hid-u2fzero 0003:10C4:8ACF.000A: item fetching failed at offset 2/5 [ 346.004861][ T10] hid-u2fzero 0003:10C4:8ACF.000A: probe with driver hid-u2fzero failed with error -22 [ 346.038025][ T8883] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 378.712416][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.718892][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.951202][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.910256][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.230178][ T31] INFO: task kworker/1:1:43 blocked for more than 143 seconds. [ 438.237807][ T31] Not tainted 6.17.0-rc1-syzkaller #0 [ 438.243942][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 438.252984][ T31] task:kworker/1:1 state:D stack:21688 pid:43 tgid:43 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 438.265456][ T31] Workqueue: usb_hub_wq hub_event [ 438.270744][ T31] Call Trace: [ 438.274029][ T31] [ 438.276993][ T31] __schedule+0x1798/0x4cc0 [ 438.281895][ T31] ? __pfx___schedule+0x10/0x10 [ 438.287224][ T31] ? schedule+0x91/0x360 [ 438.291955][ T31] schedule+0x165/0x360 [ 438.296184][ T31] schedule_preempt_disabled+0x13/0x30 [ 438.301859][ T31] __mutex_lock+0x7e6/0x1360 [ 438.306776][ T31] ? __mutex_lock+0x5b6/0x1360 [ 438.311685][ T31] ? rfkill_register+0x37/0x8e0 [ 438.316579][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 438.321973][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 438.327583][ T31] ? device_initialize+0x24b/0x440 [ 438.333603][ T31] rfkill_register+0x37/0x8e0 [ 438.338336][ T31] hci_register_dev+0x3f5/0x890 [ 438.343427][ T31] btusb_probe+0x3021/0x3510 [ 438.348144][ T31] ? __pfx_btusb_probe+0x10/0x10 [ 438.353759][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 438.359936][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 438.366389][ T31] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 438.372033][ T31] ? usb_disable_lpm+0x77/0x3e0 [ 438.376916][ T31] usb_probe_interface+0x668/0xc30 [ 438.382595][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 438.388424][ T31] really_probe+0x26d/0x9e0 [ 438.393161][ T31] __driver_probe_device+0x18c/0x2f0 [ 438.398464][ T31] driver_probe_device+0x4f/0x430 [ 438.403654][ T31] __device_attach_driver+0x2ce/0x530 [ 438.409055][ T31] bus_for_each_drv+0x24e/0x2e0 [ 438.414320][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 438.420699][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 438.426658][ T31] __device_attach+0x2b8/0x400 [ 438.431518][ T31] ? __pfx___device_attach+0x10/0x10 [ 438.436925][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 438.442607][ T31] bus_probe_device+0x185/0x260 [ 438.447575][ T31] device_add+0x7b6/0xb50 [ 438.452204][ T31] usb_set_configuration+0x1a87/0x20e0 [ 438.457704][ T31] usb_generic_driver_probe+0x8d/0x150 [ 438.463423][ T31] usb_probe_device+0x1c4/0x390 [ 438.468300][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 438.474269][ T31] really_probe+0x26d/0x9e0 [ 438.478777][ T31] __driver_probe_device+0x18c/0x2f0 [ 438.484379][ T31] driver_probe_device+0x4f/0x430 [ 438.489524][ T31] __device_attach_driver+0x2ce/0x530 [ 438.495019][ T31] bus_for_each_drv+0x24e/0x2e0 [ 438.500389][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 438.506312][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 438.512021][ T31] __device_attach+0x2b8/0x400 [ 438.516940][ T31] ? __pfx___device_attach+0x10/0x10 [ 438.522375][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 438.527660][ T31] bus_probe_device+0x185/0x260 [ 438.532915][ T31] device_add+0x7b6/0xb50 [ 438.537294][ T31] usb_new_device+0xa39/0x16f0 [ 438.542276][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 438.547601][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 438.552922][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.558322][ T31] hub_event+0x2958/0x4a20 [ 438.563453][ T31] ? __pfx_hub_event+0x10/0x10 [ 438.568272][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 438.574248][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 438.579561][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 438.585470][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 438.591597][ T31] process_scheduled_works+0xade/0x17b0 [ 438.597192][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 438.603331][ T31] worker_thread+0x8a0/0xda0 [ 438.608128][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 438.614916][ T31] ? __kthread_parkme+0x7b/0x200 [ 438.620398][ T31] kthread+0x70e/0x8a0 [ 438.624506][ T31] ? __pfx_worker_thread+0x10/0x10 [ 438.629827][ T31] ? __pfx_kthread+0x10/0x10 [ 438.634724][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 438.640063][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.645329][ T31] ? __pfx_kthread+0x10/0x10 [ 438.650579][ T31] ret_from_fork+0x3f9/0x770 [ 438.655300][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 438.660517][ T31] ? __switch_to_asm+0x39/0x70 [ 438.665597][ T31] ? __switch_to_asm+0x33/0x70 [ 438.670709][ T31] ? __pfx_kthread+0x10/0x10 [ 438.675348][ T31] ret_from_fork_asm+0x1a/0x30 [ 438.680540][ T31] [ 438.683735][ T31] INFO: task kworker/0:4:5863 blocked for more than 143 seconds. [ 438.691658][ T31] Not tainted 6.17.0-rc1-syzkaller #0 [ 438.698530][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 438.707393][ T31] task:kworker/0:4 state:D stack:24936 pid:5863 tgid:5863 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 438.720139][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 438.727131][ T31] Call Trace: [ 438.730497][ T31] [ 438.733449][ T31] __schedule+0x1798/0x4cc0 [ 438.737988][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 438.744640][ T31] ? __pfx___schedule+0x10/0x10 [ 438.749518][ T31] ? schedule+0x91/0x360 [ 438.754217][ T31] schedule+0x165/0x360 [ 438.758576][ T31] schedule_preempt_disabled+0x13/0x30 [ 438.764253][ T31] __mutex_lock+0x7e6/0x1360 [ 438.769012][ T31] ? __mutex_lock+0x5b6/0x1360 [ 438.773943][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 438.781777][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 438.786861][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 438.792908][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 438.799107][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 438.805237][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 438.811256][ T31] process_scheduled_works+0xade/0x17b0 [ 438.817020][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 438.823166][ T31] worker_thread+0x8a0/0xda0 [ 438.827775][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 438.834197][ T31] ? __kthread_parkme+0x7b/0x200 [ 438.839253][ T31] kthread+0x70e/0x8a0 [ 438.843534][ T31] ? __pfx_worker_thread+0x10/0x10 [ 438.848714][ T31] ? __pfx_kthread+0x10/0x10 [ 438.853547][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 438.859047][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.864318][ T31] ? __pfx_kthread+0x10/0x10 [ 438.869103][ T31] ret_from_fork+0x3f9/0x770 [ 438.874080][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 438.879364][ T31] ? __switch_to_asm+0x39/0x70 [ 438.884393][ T31] ? __switch_to_asm+0x33/0x70 [ 438.889304][ T31] ? __pfx_kthread+0x10/0x10 [ 438.894375][ T31] ret_from_fork_asm+0x1a/0x30 [ 438.899293][ T31] [ 438.902480][ T31] INFO: task syz.4.413:7959 blocked for more than 144 seconds. [ 438.910057][ T31] Not tainted 6.17.0-rc1-syzkaller #0 [ 438.916025][ T31] Blocked by coredump. [ 438.920673][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 438.929467][ T31] task:syz.4.413 state:D stack:24904 pid:7959 tgid:7957 ppid:5882 task_flags:0x40044c flags:0x00004006 [ 438.941638][ T31] Call Trace: [ 438.944933][ T31] [ 438.947886][ T31] __schedule+0x1798/0x4cc0 [ 438.952892][ T31] ? __pfx___schedule+0x10/0x10 [ 438.957885][ T31] ? schedule+0x91/0x360 [ 438.962221][ T31] schedule+0x165/0x360 [ 438.966426][ T31] schedule_preempt_disabled+0x13/0x30 [ 438.972038][ T31] __mutex_lock+0x7e6/0x1360 [ 438.976652][ T31] ? __mutex_lock+0x5b6/0x1360 [ 438.981485][ T31] ? rfkill_unregister+0xc8/0x220 [ 438.986561][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 438.991828][ T31] ? __pfx_device_del+0x10/0x10 [ 438.996885][ T31] rfkill_unregister+0xc8/0x220 [ 439.001860][ T31] nfc_unregister_device+0x96/0x2a0 [ 439.007091][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 439.012980][ T31] virtual_ncidev_close+0x56/0x90 [ 439.018033][ T31] __fput+0x449/0xa70 [ 439.022110][ T31] task_work_run+0x1d4/0x260 [ 439.026815][ T31] ? __pfx_task_work_run+0x10/0x10 [ 439.032081][ T31] do_exit+0x6b5/0x2300 [ 439.036335][ T31] ? do_raw_spin_lock+0x121/0x290 [ 439.041617][ T31] ? __pfx_do_exit+0x10/0x10 [ 439.046238][ T31] do_group_exit+0x21c/0x2d0 [ 439.050940][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.056169][ T31] get_signal+0x1286/0x1340 [ 439.061041][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 439.066618][ T31] ? count_memcg_event_mm+0x21/0x260 [ 439.072011][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 439.078222][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 439.083887][ T31] exit_to_user_mode_loop+0x75/0x110 [ 439.089289][ T31] do_syscall_64+0x2bd/0x3b0 [ 439.094152][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.099362][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.105644][ T31] ? clear_bhb_loop+0x60/0xb0 [ 439.110634][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.116547][ T31] RIP: 0033:0x7faf7d18ebe9 [ 439.121099][ T31] RSP: 002b:00007faf7df6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 439.129542][ T31] RAX: 0000000000010106 RBX: 00007faf7d3b6090 RCX: 00007faf7d18ebe9 [ 439.137765][ T31] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 439.145967][ T31] RBP: 00007faf7d211e19 R08: 0000000000000000 R09: 0000000000000000 [ 439.154058][ T31] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 439.162081][ T31] R13: 00007faf7d3b6128 R14: 00007faf7d3b6090 R15: 00007faf7d4dfa28 [ 439.170261][ T31] [ 439.173307][ T31] [ 439.173307][ T31] Showing all locks held in the system: [ 439.181078][ T31] 1 lock held by khungtaskd/31: [ 439.185931][ T31] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 439.195865][ T31] 6 locks held by kworker/1:1/43: [ 439.201177][ T31] #0: ffff8880216b9148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 439.213048][ T31] #1: ffffc90000b37bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 439.225057][ T31] #2: ffff8881443c6198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 439.234107][ T31] #3: ffff888027a49198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 439.243388][ T31] #4: ffff88802404c160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 439.252871][ T31] #5: ffffffff8f8117c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 439.263060][ T31] 4 locks held by kworker/0:3/983: [ 439.268189][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 439.279371][ T31] #1: ffffc9000395fbc0 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 439.290411][ T31] #2: ffffffff8f8117c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x4c/0x180 [ 439.300263][ T31] #3: ffff88807ac0b100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 439.310289][ T31] 2 locks held by getty/5628: [ 439.315129][ T31] #0: ffff88814db760a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 439.324969][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 439.335425][ T31] 3 locks held by kworker/0:4/5863: [ 439.340824][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 439.352123][ T31] #1: ffffc90003fefbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 439.366132][ T31] #2: ffffffff8f8117c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 439.377715][ T31] 1 lock held by syz.4.40/6157: [ 439.382754][ T31] #0: ffffffff8f8117c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 439.392960][ T31] 2 locks held by syz.4.413/7959: [ 439.397990][ T31] #0: ffff88807ac0b100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 439.408025][ T31] #1: ffffffff8f8117c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 439.418391][ T31] 2 locks held by syz-executor/8209: [ 439.423712][ T31] #0: ffff88801e722118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 439.433824][ T31] #1: ffffffff8f8117c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 439.443907][ T31] 1 lock held by syz.5.627/8873: [ 439.448843][ T31] #0: ffffffff8e9c1308 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 439.457332][ T31] 2 locks held by syz.1.630/8882: [ 439.462404][ T31] #0: ffffffff8e9c1308 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 439.470942][ T31] #1: ffffffff8f8117c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 439.481104][ T31] 1 lock held by syz.1.630/8883: [ 439.486218][ T31] #0: ffffffff8e9c1308 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 439.494755][ T31] 1 lock held by syz.0.631/8886: [ 439.499733][ T31] #0: ffffffff8e9c1308 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 439.508276][ T31] 1 lock held by syz.3.633/8891: [ 439.513246][ T31] #0: ffffffff8e9c1308 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 439.522016][ T31] [ 439.524343][ T31] ============================================= [ 439.524343][ T31] [ 439.532899][ T31] NMI backtrace for cpu 1 [ 439.532922][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 439.532943][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 439.532953][ T31] Call Trace: [ 439.532959][ T31] [ 439.532966][ T31] dump_stack_lvl+0x189/0x250 [ 439.532992][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.533011][ T31] ? __pfx__printk+0x10/0x10 [ 439.533042][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 439.533063][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 439.533082][ T31] ? __pfx__printk+0x10/0x10 [ 439.533107][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 439.533135][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 439.533157][ T31] watchdog+0xf93/0xfe0 [ 439.533184][ T31] ? watchdog+0x1de/0xfe0 [ 439.533212][ T31] kthread+0x70e/0x8a0 [ 439.533236][ T31] ? __pfx_watchdog+0x10/0x10 [ 439.533258][ T31] ? __pfx_kthread+0x10/0x10 [ 439.533280][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 439.533302][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.533322][ T31] ? __pfx_kthread+0x10/0x10 [ 439.533343][ T31] ret_from_fork+0x3f9/0x770 [ 439.533365][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 439.533390][ T31] ? __switch_to_asm+0x39/0x70 [ 439.533412][ T31] ? __switch_to_asm+0x33/0x70 [ 439.533432][ T31] ? __pfx_kthread+0x10/0x10 [ 439.533454][ T31] ret_from_fork_asm+0x1a/0x30 [ 439.533491][ T31] [ 439.533497][ T31] Sending NMI from CPU 1 to CPUs 0: [ 439.681035][ C0] NMI backtrace for cpu 0 [ 439.681052][ C0] CPU: 0 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 439.681074][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 439.681085][ C0] Workqueue: bat_events batadv_nc_worker [ 439.681114][ C0] RIP: 0010:mark_lock+0x3c/0x190 [ 439.681130][ C0] Code: 00 03 00 83 f9 01 bb 09 00 00 00 83 db 00 83 fa 08 0f 45 da bd 01 00 00 00 89 d9 d3 e5 25 ff 1f 00 00 48 0f a3 05 74 78 0a 12 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 10 03 49 93 eb 48 83 3d db 07 [ 439.681144][ C0] RSP: 0018:ffffc9000210f8b8 EFLAGS: 00000003 [ 439.681157][ C0] RAX: 0000000000000007 RBX: 0000000000000009 RCX: 0000000000000009 [ 439.681167][ C0] RDX: 0000000000000008 RSI: ffff88801a5ca940 RDI: ffff88801a5c9e00 [ 439.681178][ C0] RBP: 0000000000000200 R08: 0000000000000000 R09: ffffffff8b46c172 [ 439.681188][ C0] R10: dffffc0000000000 R11: ffffffff8b46c0a0 R12: 00000000ffffff05 [ 439.681200][ C0] R13: 0000000000000001 R14: ffff88801a5ca940 R15: ffff88801a5ca960 [ 439.681211][ C0] FS: 0000000000000000(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 439.681224][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 439.681234][ C0] CR2: 0000562461214168 CR3: 000000000df36000 CR4: 00000000003526f0 [ 439.681249][ C0] Call Trace: [ 439.681256][ C0] [ 439.681264][ C0] __lock_acquire+0x6a8/0xd20 [ 439.681288][ C0] ? batadv_nc_worker+0xd2/0x610 [ 439.681303][ C0] lock_acquire+0x120/0x360 [ 439.681322][ C0] ? batadv_nc_worker+0xd2/0x610 [ 439.681341][ C0] ? batadv_nc_worker+0xd2/0x610 [ 439.681357][ C0] ? batadv_nc_worker+0xd2/0x610 [ 439.681374][ C0] batadv_nc_worker+0xef/0x610 [ 439.681390][ C0] ? batadv_nc_worker+0xd2/0x610 [ 439.681407][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 439.681422][ C0] process_scheduled_works+0xade/0x17b0 [ 439.681451][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 439.681476][ C0] worker_thread+0x8a0/0xda0 [ 439.681493][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 439.681514][ C0] ? __kthread_parkme+0x7b/0x200 [ 439.681533][ C0] kthread+0x70e/0x8a0 [ 439.681552][ C0] ? __pfx_worker_thread+0x10/0x10 [ 439.681566][ C0] ? __pfx_kthread+0x10/0x10 [ 439.681583][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 439.681600][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.681618][ C0] ? __pfx_kthread+0x10/0x10 [ 439.681635][ C0] ret_from_fork+0x3f9/0x770 [ 439.681651][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 439.681668][ C0] ? __switch_to_asm+0x39/0x70 [ 439.681686][ C0] ? __switch_to_asm+0x33/0x70 [ 439.681704][ C0] ? __pfx_kthread+0x10/0x10 [ 439.681721][ C0] ret_from_fork_asm+0x1a/0x30 [ 439.681744][ C0] [ 439.682095][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 439.953780][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 439.964186][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 439.974241][ T31] Call Trace: [ 439.977536][ T31] [ 439.980549][ T31] dump_stack_lvl+0x99/0x250 [ 439.985141][ T31] ? __asan_memcpy+0x40/0x70 [ 439.989816][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.995013][ T31] ? __pfx__printk+0x10/0x10 [ 439.999616][ T31] vpanic+0x281/0x750 [ 440.003605][ T31] ? __pfx_vpanic+0x10/0x10 [ 440.008276][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 440.013814][ T31] ? preempt_schedule+0xae/0xc0 [ 440.019093][ T31] ? preempt_schedule_common+0x83/0xd0 [ 440.024896][ T31] panic+0xb9/0xc0 [ 440.028697][ T31] ? __pfx_panic+0x10/0x10 [ 440.033103][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 440.038581][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 440.044832][ T31] watchdog+0xfd2/0xfe0 [ 440.049030][ T31] ? watchdog+0x1de/0xfe0 [ 440.053353][ T31] kthread+0x70e/0x8a0 [ 440.057417][ T31] ? __pfx_watchdog+0x10/0x10 [ 440.062188][ T31] ? __pfx_kthread+0x10/0x10 [ 440.066933][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 440.072136][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 440.077507][ T31] ? __pfx_kthread+0x10/0x10 [ 440.082092][ T31] ret_from_fork+0x3f9/0x770 [ 440.086762][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 440.091867][ T31] ? __switch_to_asm+0x39/0x70 [ 440.096712][ T31] ? __switch_to_asm+0x33/0x70 [ 440.101487][ T31] ? __pfx_kthread+0x10/0x10 [ 440.106173][ T31] ret_from_fork_asm+0x1a/0x30 [ 440.110941][ T31] [ 440.114264][ T31] Kernel Offset: disabled [ 440.118579][ T31] Rebooting in 86400 seconds..