last executing test programs: 7m31.142583459s ago: executing program 1 (id=2900): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904", @ANYRESOCT, @ANYRESOCT], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x151c00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x20, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x20, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) (async) keyctl$clear(0x3, 0xfffffffffffffffd) add_key(&(0x7f00000001c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="e4010000100001000000000000000000fc000000000000000000000000000000000000000000000000ecdf000000000a00000000000000080000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRESDEC=r2], 0x1e4}}, 0x0) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="e4010000100001000000000000000000fc000000000000000000000000000000000000000000000000ecdf000000000a00000000000000080000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRESDEC=r2], 0x1e4}}, 0x0) socket$rds(0x15, 0x5, 0x0) (async) socket$rds(0x15, 0x5, 0x0) request_key(&(0x7f00000019c0)='ceph\x00', &(0x7f0000001a00)={'syz', 0x3}, &(0x7f0000001a40)='{\x00', 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000600)='keyring\x00', &(0x7f0000001a80)={'syz', 0x0}, 0x0, r5) fsopen(&(0x7f0000000140)='hfsplus\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a300000000098ce9a9ff70a010400000000000800000100000008000a400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000009608000600000000220500020089000000380001800c0001006269747769736500280002800800034000000004080001400000001408000240000000120800048004000100040005800900010073797a3000000000140000001100010000000000000000000000000a"], 0x10c}}, 0x0) syz_open_dev$evdev(&(0x7f00000005c0), 0x4, 0x2) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000440)=""/230, 0xe6}, {&(0x7f0000000740)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0xc001}, 0x0) (async) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000440)=""/230, 0xe6}, {&(0x7f0000000740)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0xc001}, 0x0) 7m29.867698021s ago: executing program 1 (id=2904): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 32) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r0 = openat(0xffffffffffffff9c, 0x0, 0x41, 0x48) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r2 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) (async, rerun: 32) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) (async, rerun: 32) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000580)={0x1, 0x1, 0x4a, r10, 0x4}, 0xc) (async, rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) r11 = add_key$user(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), 0x390, 0xfffffffffffffffd) (async) r12 = add_key$user(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, &(0x7f0000000780)="01", 0x1, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000e00)='user\x00', &(0x7f0000000e40)=',(+\x00') (async) keyctl$dh_compute(0x17, &(0x7f00000007c0)={0x0, r11, r12}, 0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={'sha256\x00'}}) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000005c0)=0x0) (async, rerun: 64) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000e80)={0x0, 0x8, 0x4, 0x1}) (rerun: 64) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000001280)={{r9}, r13, 0x1, @unused=[0x0, 0x2, 0x48d, 0x5], @devid=r14}) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000880)={r11, 0x8c, 0xd6}, &(0x7f00000008c0)={'enc=', 'pkcs1', ' hash=', {'sha1_mb\x00'}}, &(0x7f0000000940)="f9e4217198c336c83d51f5290ff200b0edc96e2dc80b0b15bf99155f4aa2f8d5bae1be880697a40d25ca503a433d19f91bfd23cf0c9b89391aeb265f3e70ee00c1d3f975df148411cacfaf971c0185aafd821c680effc440c55e3298a13098db006ebf90a00737f4b1b9b08ae57a9843d90125ba1a6fe43227ab063e101ea2bba890820551b062c6a175c33c", &(0x7f0000000d00)=""/214) (async, rerun: 32) r15 = dup(r8) (rerun: 32) syz_ublk_setup_queues(r15, r7, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r15, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 7m28.005274346s ago: executing program 1 (id=2914): r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r0, &(0x7f0000000040)={{0x108, 0x7, 0x5e, 0x192, 0x222, 0x9, 0x2c9, 0x9}, "dfc5dabb95719232efc29d0fd6226c922084036c51caa570eb7752cd37667b3251b2d9965fe6f96c099fa83baf94e459c0788bad78f4f66d58cefefc9717fb1f66fe1ef7c03d3862e48782d71f95845b62ed9662a1774231d430c2ffe18e34179520c1fee50091db4bf37d883f1da46904c17fc949e1dbb5f8716c8d950e51623a7ab597f0ebadcaf308067910589301b9345b07459855689866a52c6a30712d658fac995328a384fbd1b62c17f14222e524e3de8ab74822182f62f67cf0277d57ba4336184d087c4eaceac9e522d566bd8d7b4fca6fbaa0139c4083fc3a874b957f3fc0880245", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa07) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000a80)=0x2, 0x4) r2 = syz_open_dev$video(&(0x7f0000000c00), 0x7, 0x0) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000ac0)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000b00)=0x7, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000b80)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000bc0)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000c00)=ANY=[], 0xfb5) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x229, 0x0) 7m25.6338686s ago: executing program 1 (id=2926): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000740)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="7800000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000058001a8006000000010000004c0005804800088008000100010000000a000200000000000000000008000300000000000800050000000000080005000000000005000600000000000800070000000000050008"], 0x78}}, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000140)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = syz_open_dev$vim2m(&(0x7f0000000400), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000440)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000580)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000005c0)={0x3, 0x1, 0x4, "3a000000000016c713b40c2a3600000000000000000000020100", 0x38414261}) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x41, 0x48) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000700), 0x440, 0x0) write$rfkill(r6, 0x0, 0xfffffeac) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r7 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) r11 = syz_open_dev$sg(&(0x7f0000000080), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r11, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000ff0f00040a000000"]) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={r13}) syz_ublk_setup_queues(r13, 0x0, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x826, 0x0, 0x0}}, 0x0) r14 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r14, 0x10e, 0xc, &(0x7f0000000600)={0x80000000}, 0x19a) sendmsg$nl_route(r14, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x70bd2a, 0x25dfdbfc, {0x1c, 0x14, 0x0, 0x3, 0x0, 0x2, 0xc8, 0xb}}, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 7m24.730720415s ago: executing program 1 (id=2929): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300031000000000000000000000000200090009000000e40000000000000005000600000000000a00002c09bbfc00fc010000000000000000000000000000000000000000000002000100000000fffffffbfc0000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x400300) 7m23.856576128s ago: executing program 1 (id=2932): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010000305000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="95430200000002002c00128009000100626f6e64000000001c000280000012000900000008000500ff010000e9fd03000800001e"], 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x40800) epoll_create1(0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x318, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) memfd_create(&(0x7f0000000440)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(0xffffffffffffffff, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x1000) r4 = add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x5b) read$watch_queue(r1, &(0x7f0000000640)=""/1, 0x1) keyctl$revoke(0x3, r4) ioctl$OCFS2_IOC_GROUP_EXTEND(r5, 0x40046f01, &(0x7f0000000680)=0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000700)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000740)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000780)={0x0, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @remote}, 0x4, 0x0, 0x0, 0x0, 0x200a, 0x0, 0x200001, 0x1ff, 0x9}) write$tun(r6, &(0x7f0000000800)=ANY=[@ANYBLOB="080000fa"], 0xdc) open(&(0x7f0000000840)='./file0\x00', 0x60840, 0x0) fsopen(&(0x7f0000000880)='nfs4\x00', 0x0) 7m8.439321945s ago: executing program 32 (id=2932): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010000305000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="95430200000002002c00128009000100626f6e64000000001c000280000012000900000008000500ff010000e9fd03000800001e"], 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x40800) epoll_create1(0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x318, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) memfd_create(&(0x7f0000000440)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(0xffffffffffffffff, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x1000) r4 = add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x5b) read$watch_queue(r1, &(0x7f0000000640)=""/1, 0x1) keyctl$revoke(0x3, r4) ioctl$OCFS2_IOC_GROUP_EXTEND(r5, 0x40046f01, &(0x7f0000000680)=0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000700)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000740)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000780)={0x0, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @remote}, 0x4, 0x0, 0x0, 0x0, 0x200a, 0x0, 0x200001, 0x1ff, 0x9}) write$tun(r6, &(0x7f0000000800)=ANY=[@ANYBLOB="080000fa"], 0xdc) open(&(0x7f0000000840)='./file0\x00', 0x60840, 0x0) fsopen(&(0x7f0000000880)='nfs4\x00', 0x0) 2m6.132238883s ago: executing program 3 (id=4809): socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x5e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6008100000282b0000000000000000000000ffffac1414bbfe8000000000000000000000000000aa3a020201"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b37, &(0x7f0000000240)={'wlan1\x00', @random="cbcdcb8d00"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a000100b5000000fbdbdf250a800005001b"], 0x24}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002ac0)={0x18, 0x26, 0x101, 0x70bd25, 0x25dfdbfb, {0x1}, [@typed={0x4, 0x167}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x24008080) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=&(0x7f0000000180)}}) socket$inet(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0}, 0x94) r4 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000300)={0x20, 0x9, 0x2, '$8'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x6}}, [@NFT_MSG_NEWSETELEM={0xf18, 0xc, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x268, 0x3, 0x0, 0x1, [{0x4}, {0x1fc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x138, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x10, 0x1, "259d2a146103017fad365323"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_KEY_END={0xb4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xad, 0x1, "cb0a819f98beada8969d1d307ae7c4e36653454df00343ec6a43c998add6a9fcd697df2fe77a3661b67289cec9902a41b998f892134c0ffae626dba473e7fb39fbf9b860a1ea23aa9453ee45e3c70d4bb16b7884c763395656e0eaf4f765dab9a7f49f45e073689e87543f0fabc6bff0a1d466f17313bf0cb8b4a054bf439388968c05f034ec28b1a61dfd8f668009107abe856fdcdab0f502e8923a858aeb79a883dc8bf05381e286"}]}]}, {0x54, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7ff}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xa68, 0x3, 0x0, 0x1, [{0x4f0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x13, 0x6, 0x1, 0x0, "062e050867f37d729aaf2d24e5eba0"}, @NFTA_SET_ELEM_USERDATA={0x8a, 0x6, 0x1, 0x0, "4174be053a851b44c7d2ef7fd8905200caaa02a5103f7aeb8eec7f61278adc564835cc397a239e746adc9418fde1bc80b88c7c6dc7884dbff656f0c490fd606e1ebbb2dd38b418df42ef950264814d7e38ad46b82070274fe3f2bf3d5295f4a0bf33e0d520a2e5e2d231eeca9c9f85eaa6eea35710c026a94427a5808b24bffb7f87806efae4"}, @NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @dup={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x288, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x84, 0x1, "a23dce67c32b56b0f26ae9fbad2fa87f5566dc3cfeb8176ed80882c0b4a2ad76b3ed1a3a784382dd739cbedcc523b7517b03a9b3e67e47b9fc9d2388ade5f5eabe48725285c0f862ee6797119a5a734435a6adc60157243b1a6f1eebdc26d0d7897464b4b46cacb621241f5ca8db9d6bac6057e45e6794c1ef82269ad8b1bc50"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xda, 0x1, "d52b73044fe4a7513b01f296b53f54d82ff3a2bbb3c03fe6245137d24dc8eedc3a591bd5055ef0ea23271e5e0b5c148413906e4e04f79ec733c300306a2771d853e2e23bdbc0449f583e3bc8cf58b2b4f2163de3e5920a1cca576cfcc4a753947ce0605c6d23fe9cebed60a55582f95249d52334dc98cf50043423f1f810ca0b43c6621c96e1ff2d000957cf0c6f3777158c285a0bcda160381db11faff2662c5abcc9cbae1d38393762acf4c46490aabf3a3ad7d71f3ec4d1fc36a089784c9d992a399c065260005bbfb919ad2614bcefa6287272e7"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x25, 0x1, "8f600da4016a6db5875813e4da44ea97c3668bc150838ff2e8528ea2b88156530c"}, @NFTA_DATA_VALUE={0x7e, 0x1, "4bcf884e9b6aee45f4e726e18798c0307df187991ac0a25668a0e874d33067350744f710a05de37cf98cfcaa2500d5ccf6580d28a7fc9a6fba7f11a614b8c57177eaa5b1f54b31d3d26a62a9d6a565a7fafc1542eee0b1b769e98aba2d2f08158df96e2bb03fd94a6071aa8d4b8e701bf5397a2551fffdbba8a4"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_USERDATA={0x1e, 0x6, 0x1, 0x0, "a5b247a0d61a094224f21b9a7d43d12d4c976f58bcc87a28e794"}, @NFTA_SET_ELEM_KEY_END={0x50, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4c, 0x1, "58aa305b8fc735b45671a05fd70fcfa2fa6093dc03acb81cd8588ff3457b1786b4d035a9645657020eb901477833ac71164bd3298f4188e08a6dfde4ee7d981912c110a020cf0d3f"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xe8, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x58, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x5}]}}}, {0x38, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}]}, {0x8c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xdaa}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPR={0x48, 0x7, 0x0, 0x1, @dup={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}, {0x4e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @counter={{0xc}, @void}}, @NFTA_SET_ELEM_KEY={0x14c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb4, 0x1, "8aa784c683338d6fec63cef96530fe7810a9eab5b30c3a7a72d3fe90de9f503157d5ff7fd9a38b675f76bcb9fd115a42a93059888095f625d9ec2fe71ccfc1dfa706aa9e126e558c9cf14451bc61a7fbc72473c0e801b82b96568dc52feb9ea0caaff126a04bcf0d76d749bbee972d30b6e71570482dc0d2497becfdc6d16457149f8bea1a416e1fbe938c6fde91338e16ee2b6b696bed57901edbbd8dec4e35d01a0bc6645f58b3e5f6f4439f8dbf21"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xbf485e0530a3d730}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x380, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xba}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5c}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x2c8, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2b8, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x2a4, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xda, 0x1, "ef083c78626a0cf9d3e7cd4194ff805bc210047fd60fc56d09db27406abb1d772db994cddd8eeb23e84b6fcf39b01f81801ddc7617b466523968f43aa88e16d38ac16357cbe9ecc215d4e73238e129b6de728e8dbe5ff60241268865ddf58028208fb21b72aff208b2fa93a56e678024cca6837c3b57079a9c32d2907b9a02a14216925bbcd4056ce83b174e26fcbe46e00874cc6cb2a76ee28ba2c5317c8d2e551bb152ac635d45040d1ed8b9e8a58337e10f684f094507201137034f735645dfa8faf16d9bab4a3fc2160e72668c6985f4697f971b"}, @NFTA_DATA_VALUE={0xeb, 0x1, "e46729abd322ded375c99467ed6a168bb77d4577100cb7444bd4c384eb736a59276b8228a2fe59b655bf2bc82f5f3dd09c37cc49ea8e942692a4d92cb866743c2026330e71b03c6fe842fd1cfd28b7e5ce570a534747c45b313de79f09df40b36fc76f409cc19a0d4f8452748c9f54fbe324dfdb9e1c8fd05b52fd71afb96093b0eab3f23e7175c90e5d5a958dc4b1355685fe4134562f459a875a8f840987eb3e6559756631603e2f78c8cf8341b2682fe3d92db122d59b29c6bb5726d375bfe8aa8c05d2c33b674ddb1a69951119c9d825096f178ab586f18360d374f0132775f3740e93fe8d"}, @NFTA_DATA_VALUE={0x36, 0x1, "7500e503099b7bd642b1a37dc1931e8367a3983808bced588bdde89896112598ed602c7799ac9b72701b35f5405bcf863545"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x31, 0x1, "79456a36c55f75ba64d5facfe4db94f23b684bd0597dfbf4933146760242f14cd9d3ca6371b4051bf074fc2bfa"}]}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x3c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_SPNUM={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x210, 0x3, 0x0, 0x1, [{0x20c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x208, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x7f, 0x1, "05525858b3cee08c877cbd4f66c6d21eac74d2aa3e21122c9ef72b013f808a905585de9823eca50d9a96023012f1311fe55e7802279615940437cdba1b1bc640b7273fb2d98fd6f0c78b289ad372fac74373bf255449bb25b3221ca848880b9f849a2d50f6fc450a57a18c735f7fd721557f7ee6d6f38286398a8c"}, @NFTA_DATA_VALUE={0xa4, 0x1, "dced2a605720d96c1f4253cd7cbd9a83802d0f40ae9073101b56f3d5e7e76a7f721455aa41f7966f46d56c365f5a325d006705c63533da544fd05a9e7521fc21603034a525b4aa9a05cb048bb8b275df8d6ca9b34bf926fb4ff0cc82f1bc941f93c06e21238e34242b6f1a3c1edb2746c355677a198e3548cc675f9d30f816e9268b59e3406ef1283771d5ae0c8f83ed756d8e4df429af13bdc11d306f2423a5"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xad92}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x94, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x100000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fffffffffffffff}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x71c278cb2e30f2f7}]}}}]}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x8}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1f79b6cc}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x365b3fe6}]}]}, @NFT_MSG_DELTABLE={0x3f8, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0xad, 0x6, "5d8bb9ca947e7fda2c95684af57428b920b428f813d79c59603d21a717919ff73cea24fba8cde0666e6975bc3128b31fa7baeb8121c675d97e854db0224a1b4e18ab2aeba52141984e7a48f0112a1e677c86d8e3c650ab45d3e4f5a30d0bb3c926f3de5c838eab4213db3743bbe455c7b7a0e20d3c8e9e6e25710b115d1c3e62cda3fdcfe3f6546df308b3e3d3bf9af1893f032a5a1707f35eaab36140f47c107637032dc8c82f9650"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xe8, 0x6, "e0a2ec66c360e5f680ded268309b5deddb2df6bac585dd4cef081a1ab1a132572be2a49b51117b8f3b6041ad151438f4f71bb959369cb147a3a00c9154db518bb86a14d601db9b3a9c435aed1c6386ef2704df4b89e9d3f9d68d4d679c5ef9e560b3969a34293e04b617ddffafdf38d07ea30522a966e50dffb7089ae2312d5ac30e9c5c523b9982592cbc79bfefe0c4ba1f93525ca14812fb38796aca3a168abbcae3cec93f65d52bd0e08ec706d98a22a3176948fbe701a2e5320f2d175aeb184d1f66ffedc88288c51b5738e4d7c10d17737b6b95baebeb50d5b47ac53eb6bb77e7b8"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xec, 0x6, "924da0afd36a352087214af53c3cf468729b7130a3271050ec1cda0b9d79a0ba688e6c201a15e3c5aa4c982e6b45f8b951cc4d95f01aec02dada3bac8ae722cd8d19b2627febee1eb6b0341c8f0efeeede658c6b8db07e4d4cac909574c66847fa5f3b26aa39c59b5a0220c17a600a5e997160443a29a8c2bf0e3584cbf036f485254c66aea67002bcf78883f50d67cfbce801cf70e785a72b70aed94d6b3d14c67f088d415408707b4823a7438ff0dd156cdc917b12a6ff33850bffe3840482f13878acc82941cbe8adf01bc29a53546df78fcf834ca178a3d48c14cb6cc620ea6ee949fe9e99dc"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x89, 0x6, "167d1057cbdc2f4a04f3954a80d8ffcf114c815cfe79f649ff4744b8387263748708eb788e2058c85ccf37bd7c26649de37997b63c1b30299b5d5ad0bae27a92153be408449b27fe6367878183574f2703fb622fbf8d3381db89c92df0e019f8136a61f948dd4eb834258f3ce560685e54db4af5173a17296642476f1561aca85bbb853bb0"}, @NFTA_TABLE_USERDATA={0x99, 0x6, "038ba1db023b61f8b72918ee236c19af001c4ce72f706bf66a7028878e19d9b00f436adfe2af04f918e5bf957eb82ec1f5ee908ac7d82103b92c9421e444ba397bf647d71d2ed2a5fd979ab028be02b96dc71605775e89bd4b4f18a07bc22d6fa87c978697b35e454d711bc4a9a9a3a4fc620d4fc7df5d4ac9986ecc48f4b0f0ea91b6616a43956b43e32a4eb004e05dcc089d1b26"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1494}, 0x1, 0x0, 0x0, 0x8084}, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r3, 0xc0285840, &(0x7f0000000340)={0x4, 0x5, 0x3, 0x0, 0x400, 0x4, 0x0, &(0x7f0000000200)=[{0xc, 0x101}, {0x1c, 0xfe}, {0xd, 0x1ff, 0x6}, {0x1, 0xfe, 0x80}]}) close(r6) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, 0x0, 0x4890) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @multicast}, 0x14) pidfd_getfd(0xffffffffffffffff, r1, 0x0) 2m4.449018719s ago: executing program 3 (id=4820): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xb43, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x40, "", [{{0x9, 0x4, 0x0, 0x10, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x81, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="20003b0000003b0b83efb9302677108120a6ad2a61a54607b71ea9e43d359c479c37f525090000000000000085e8"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m2.448462226s ago: executing program 3 (id=4831): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000) read(r0, &(0x7f0000000500)=""/209, 0xd1) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd70010571fcfb0300120018000180110001006574683a6d6163766c616e3100000000"], 0x2c}, 0x1, 0x300}, 0x8000) mlock(&(0x7f0000653000/0x3000)=nil, 0x3000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r3, &(0x7f0000000640)='10000', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0) write(r4, &(0x7f0000000740)='0', 0x1) socket$xdp(0x2c, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000780)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m1.364254225s ago: executing program 3 (id=4839): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000f6ffffff8746c13e", @ANYRES32=0x1, @ANYBLOB="0000000000410000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000440)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 2m1.246581991s ago: executing program 3 (id=4840): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e4ffffff0000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0005007e0500000603000003000000fcffffff05010905a10105091901290a150025017501950a8102950175068103c00f2d8eb84f1fa8c3557d8360159e92c0fb3593ed3a964ae4cf679b4ba1a7e3ea60f264d85f"], 0x135) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x9801) move_mount(r1, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0xb) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x3, 0x0, 0x7, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x3ff, 0x56d, 0xe5c7, 0x7}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x6, 0xfe}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x49, 0xff}}}}}]}}]}}, 0x0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xe5) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)=0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000400)={'\x00', 0x6, 0x8, 0x4b8, 0x10001, 0xa6, r4}) write$UHID_INPUT2(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\f\x00\x00\x00g\x000'], 0xc) syz_emit_ethernet(0xb9, &(0x7f0000000080)={@random="e2f4aeef9214", @remote, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@generic={0x3, "5a39d57f8fc894741fde1c7ff691aa91edeff73f2b72370784b06e0abe2a7e72d56babe92787b92eb656a7fe272086345f811e59981359f3197d58be4745d2d10a3efc466d8e7043fafccfff3981fc5a9b703612f6236417aa5a0da9b231389f2c91a11d03c72810466b3100345f15b73471bcaa47526ace0c9460a9c7d7159e086910eb4d4c018122eea3e38a69f8dad2a92418da8d9c265555c5dd311b169de4f8b3ab49d567"}}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x11049100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, r5, 0x0, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048010}, 0x40088d5) 1m51.523253304s ago: executing program 3 (id=4883): socket$packet(0x11, 0x3, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') pread64(r0, &(0x7f0000000040)=""/227, 0xe3, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000500)={0x38, 0x5, 0x8, 0x1, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0x2}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x800) r1 = socket(0x840000000002, 0x3, 0x100) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r3, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) accept(r3, 0x0, 0x0) connect$inet(r1, &(0x7f0000000580)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f00000005c0), 0x4000095, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) io_uring_setup(0x20006d15, &(0x7f00000007c0)={0x0, 0xcc52, 0x200, 0x80001, 0x10c}) r5 = syz_create_resource$binfmt(0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000880)={'#! ', './file1'}, 0xb) close(0xffffffffffffffff) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {0xe, 0xfff, 0x9, 0x1}, 0x15, [0x28, 0x1, 0x81, 0xf0, 0x7b, 0x1, 0x3, 0x6, 0x4, 0x4, 0x3, 0x4, 0x8, 0x311, 0x2c60, 0x0, 0x6, 0x8001, 0xfffff800, 0x800, 0x8001, 0xfffffffa, 0x0, 0x5, 0x1, 0xfe01, 0x5, 0xfd4, 0x0, 0x2, 0x8ffd, 0x1000, 0x9, 0x7, 0x81, 0x8, 0xffffffff, 0x54, 0x9, 0x9, 0x8, 0x649, 0xfffffff7, 0x9, 0xd, 0x9, 0x5, 0xb, 0x2, 0x1, 0x306f, 0x24, 0xffff0001, 0x80000000, 0x6, 0x2, 0x80000001, 0x101, 0x80, 0xc0000000, 0x80, 0x9, 0x1, 0xcdb1], [0x6, 0xc260, 0x1, 0x6, 0x64b, 0x2, 0x9, 0x4, 0x1, 0x4, 0x7, 0x2, 0x93a, 0x4cc, 0x5, 0xd284, 0x7, 0xffff, 0x8, 0x7, 0xfffffff9, 0x3, 0x4, 0x6, 0x8, 0x2b16, 0xffff, 0x4, 0x7ff, 0x464, 0x0, 0x8, 0x6, 0x5, 0x3, 0x6, 0x0, 0xfffffff8, 0x7, 0xe0000000, 0x1c3, 0x80, 0x6, 0x0, 0x1, 0x12b4, 0x7, 0x1, 0x4, 0x3, 0xd, 0xffffffff, 0x49e7, 0x9, 0x3, 0x3, 0x6, 0x0, 0x8, 0x1, 0x9c0, 0x7, 0x8, 0xd], [0x6, 0x46, 0xfffffff9, 0x8001, 0xfffffff8, 0xa, 0x7f, 0x8, 0x6, 0x923, 0xf, 0x7, 0x1, 0x6, 0xf9c2, 0x80000001, 0x0, 0xeb4ef54, 0x5c77, 0x1, 0xb28, 0x7, 0x7f, 0x0, 0x10, 0x7c, 0x8, 0x401, 0x0, 0x4, 0x5, 0x0, 0x0, 0x2, 0x4, 0x0, 0x6, 0x9, 0x2, 0xc3, 0x4, 0x9, 0x4, 0xa0000, 0xfffffffd, 0x0, 0x5, 0xfffffc01, 0x1, 0x5, 0x101, 0x6, 0x7ff, 0x6, 0x2, 0x1d4, 0xffff0001, 0xf, 0x7ff, 0x3a, 0x21, 0x8000, 0x2, 0xfff], [0xeab, 0x8001, 0x200, 0x3, 0x401, 0x6, 0x9, 0x0, 0x7, 0xff, 0xe3f7, 0x246, 0x7ff, 0x8, 0xfffffffe, 0x7ff, 0x5e59efab, 0x1, 0xddd, 0x2, 0x800, 0x4, 0x10001, 0x4, 0x3, 0x4, 0x6, 0x7, 0x1, 0x5, 0x997, 0x401, 0x0, 0x6, 0xfffff61e, 0xfffffffa, 0x80, 0x7, 0x0, 0x8, 0x1, 0x8, 0x934, 0xcd0, 0x1000, 0x1, 0x0, 0x8, 0x8, 0x6, 0x5, 0x80, 0xff, 0x5, 0x6, 0x29ef, 0x6, 0xc2, 0x6, 0x4, 0x8, 0x339c, 0x7, 0x7]}, 0x45c) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) 1m36.284918468s ago: executing program 33 (id=4883): socket$packet(0x11, 0x3, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') pread64(r0, &(0x7f0000000040)=""/227, 0xe3, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000500)={0x38, 0x5, 0x8, 0x1, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0x2}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x800) r1 = socket(0x840000000002, 0x3, 0x100) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r3, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) accept(r3, 0x0, 0x0) connect$inet(r1, &(0x7f0000000580)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f00000005c0), 0x4000095, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) io_uring_setup(0x20006d15, &(0x7f00000007c0)={0x0, 0xcc52, 0x200, 0x80001, 0x10c}) r5 = syz_create_resource$binfmt(0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000880)={'#! ', './file1'}, 0xb) close(0xffffffffffffffff) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {0xe, 0xfff, 0x9, 0x1}, 0x15, [0x28, 0x1, 0x81, 0xf0, 0x7b, 0x1, 0x3, 0x6, 0x4, 0x4, 0x3, 0x4, 0x8, 0x311, 0x2c60, 0x0, 0x6, 0x8001, 0xfffff800, 0x800, 0x8001, 0xfffffffa, 0x0, 0x5, 0x1, 0xfe01, 0x5, 0xfd4, 0x0, 0x2, 0x8ffd, 0x1000, 0x9, 0x7, 0x81, 0x8, 0xffffffff, 0x54, 0x9, 0x9, 0x8, 0x649, 0xfffffff7, 0x9, 0xd, 0x9, 0x5, 0xb, 0x2, 0x1, 0x306f, 0x24, 0xffff0001, 0x80000000, 0x6, 0x2, 0x80000001, 0x101, 0x80, 0xc0000000, 0x80, 0x9, 0x1, 0xcdb1], [0x6, 0xc260, 0x1, 0x6, 0x64b, 0x2, 0x9, 0x4, 0x1, 0x4, 0x7, 0x2, 0x93a, 0x4cc, 0x5, 0xd284, 0x7, 0xffff, 0x8, 0x7, 0xfffffff9, 0x3, 0x4, 0x6, 0x8, 0x2b16, 0xffff, 0x4, 0x7ff, 0x464, 0x0, 0x8, 0x6, 0x5, 0x3, 0x6, 0x0, 0xfffffff8, 0x7, 0xe0000000, 0x1c3, 0x80, 0x6, 0x0, 0x1, 0x12b4, 0x7, 0x1, 0x4, 0x3, 0xd, 0xffffffff, 0x49e7, 0x9, 0x3, 0x3, 0x6, 0x0, 0x8, 0x1, 0x9c0, 0x7, 0x8, 0xd], [0x6, 0x46, 0xfffffff9, 0x8001, 0xfffffff8, 0xa, 0x7f, 0x8, 0x6, 0x923, 0xf, 0x7, 0x1, 0x6, 0xf9c2, 0x80000001, 0x0, 0xeb4ef54, 0x5c77, 0x1, 0xb28, 0x7, 0x7f, 0x0, 0x10, 0x7c, 0x8, 0x401, 0x0, 0x4, 0x5, 0x0, 0x0, 0x2, 0x4, 0x0, 0x6, 0x9, 0x2, 0xc3, 0x4, 0x9, 0x4, 0xa0000, 0xfffffffd, 0x0, 0x5, 0xfffffc01, 0x1, 0x5, 0x101, 0x6, 0x7ff, 0x6, 0x2, 0x1d4, 0xffff0001, 0xf, 0x7ff, 0x3a, 0x21, 0x8000, 0x2, 0xfff], [0xeab, 0x8001, 0x200, 0x3, 0x401, 0x6, 0x9, 0x0, 0x7, 0xff, 0xe3f7, 0x246, 0x7ff, 0x8, 0xfffffffe, 0x7ff, 0x5e59efab, 0x1, 0xddd, 0x2, 0x800, 0x4, 0x10001, 0x4, 0x3, 0x4, 0x6, 0x7, 0x1, 0x5, 0x997, 0x401, 0x0, 0x6, 0xfffff61e, 0xfffffffa, 0x80, 0x7, 0x0, 0x8, 0x1, 0x8, 0x934, 0xcd0, 0x1000, 0x1, 0x0, 0x8, 0x8, 0x6, 0x5, 0x80, 0xff, 0x5, 0x6, 0x29ef, 0x6, 0xc2, 0x6, 0x4, 0x8, 0x339c, 0x7, 0x7]}, 0x45c) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) 5.895172437s ago: executing program 0 (id=5435): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000f6ffffff8746c13e", @ANYRES32=0x1, @ANYBLOB="0000000000000018b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000440)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 5.650136007s ago: executing program 0 (id=5438): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) unshare(0x22020600) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271f, &(0x7f00000025c0)=""/102398, &(0x7f000001b5c0)=0x18ffe) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x7d, &(0x7f0000000280)={0x0, 0xffbffff7, 0xffffffff, 0x1}, 0x10) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1b000000fd3f0000000000000900000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r5, &(0x7f0000000400), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000440)={0x20000014}) epoll_wait(r4, &(0x7f0000000480)=[{}], 0x1, 0x400) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='nv', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001580)=""/4100, 0x1004) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x4000040) r7 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r7, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) 5.20734449s ago: executing program 5 (id=5444): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000ac0)={0x8cb, "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"}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000240)=0x1002, 0x1) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000002000000d00000000000f00183400000a180500000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000440)={0x0, 0xf, 0x1, "ed"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000001080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x8, 0x24200) syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, &(0x7f00000002c0)={0x20, 0x22, 0xeb, {0xeb, 0x21, "5669c367224f441d849f1dc874d6981fdf93c15d2c92ff32d5cc10f4adc572432a2d87ff04cd40d57621525e8808ff4f47dbb374b19616cd22b818503783d70c0071e0083309d691c82459445b4ae80b0da4c02db4abd9286c524ddbca6d6902f01a44fc02971bf57631066ba294f2ad304afc6dcfe7a3395235ee52a3c0cc447f29cad6e5a06e94719807cf01db62e0157bd977d8eeef95e90c88be3c9a09df823b40245d4e6de5c154d31a6482c244bfc244ab8237efebb27ea38d697ba9c9a671622286d7a1acf3abd4b25aa989f8e5bb8308ea55ad48a68637d7a10773f11c45668ebbfd6972ad"}}, &(0x7f0000000480)={0x0, 0x3, 0xd8, @string={0xd8, 0x3, "66fb9b8b4c0742e9f2ccf197843e5b0e385a48bc30bc65f886595bf3aaba89f860ffe0745abb36f20358517ecde72926e5aa1f38bef760a2612a0378360eaff5e797b44ed498a79d088dce469569bb006830f5bb8b11c1907f3ec1afc0e678cf4b39d8efac4c45e0579d49ff14935807bc9ceb43cd0e352ef681cd1a7b45c9e0fcb7f813b730e622688c1fcf1c7da0403a52cd4aed74b53b2abf76f17847224be73a69cbf2e89c78462133be6a9909b9d88a7dafbe96b3aa8cb5117624fef455bcce97f9d22446a214a63e044bbd0af4964e60bc6782"}}}, &(0x7f0000000740)={0x2c, &(0x7f00000005c0)={0x0, 0x30, 0x26, "bb36fefcf5796d5c2c0b06284bfc87f7cde617e7e236fc6b3d6166c8ee7c1237690c9ce40a8d"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000006c0)={0xc0, 0x5, 0x6, "2ea444361736"}, &(0x7f0000000700)={0x40, 0x5, 0x5, "5e75c73377"}}) syz_usb_control_io$printer(r0, 0x0, 0x0) 4.806285729s ago: executing program 2 (id=5446): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300031000000000000000000000000200090009000000e40000000000000005000600000000000a00002c09bbfc00fc010000000000000000ff8000000000000000000000000002000100000000fffffffbfc00000000050005000000000002"], 0x80}, 0x1, 0x7}, 0x0) 4.682595429s ago: executing program 2 (id=5447): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000030000000000000400000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x0) 4.563222318s ago: executing program 2 (id=5448): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00') (async) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0xe00008da) (async, rerun: 32) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./bus\x00') (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x40) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480), 0x140, 0x0) r3 = dup(r2) read(r3, &(0x7f00000004c0)=""/189, 0xbd) fadvise64(r3, 0x3, 0x4000000005, 0x4) (async, rerun: 32) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)=0x20000) (async, rerun: 32) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000280)={0x101, 0x3, 0xfd}) (async) ioctl$MEMREAD(r1, 0xc0404d1a, &(0x7f0000000440)={0x8, 0x63, 0xd7, &(0x7f00000002c0)=""/99, &(0x7f0000000340)=""/215, 0x1, '\x00', {0xc3, 0x886, 0x55}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 32) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x42) (async) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 4.306390787s ago: executing program 2 (id=5449): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 4.227830796s ago: executing program 2 (id=5450): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) unshare(0x22020600) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271f, &(0x7f00000025c0)=""/102398, &(0x7f000001b5c0)=0x18ffe) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000280)={0x0, 0xffbffff7, 0xffffffff, 0x1}, 0x10) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1b000000fd3f0000000000000900000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000003c0), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000400), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000440)={0x20000014}) epoll_wait(r2, &(0x7f0000000480)=[{}], 0x1, 0x400) ppoll(&(0x7f00000004c0)=[{r2, 0x401}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='nv', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$kcm(0x10, 0x2, 0x4) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001580)=""/4100, 0x1004) 3.78564164s ago: executing program 4 (id=5452): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x121002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) keyctl$dh_compute(0x17, &(0x7f0000000980), 0x0, 0x0, &(0x7f00000009c0)={0x0}) r3 = syz_open_dev$sndctrl(&(0x7f0000000a00), 0x84, 0x40) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0485510, &(0x7f0000000a40)={0x0, 0x1, 0x1, 0x0, &(0x7f0000000ac0)=[{}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000b40)=@x86={0x0, 0x9, 0xc, 0x0, 0x6, 0x1, 0x86, 0x2, 0x1, 0x0, 0x2, 0x4, 0x0, 0x7, 0x8004, 0xa, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000b80)='X', 0x34000, 0x0, &(0x7f0000000bc0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000c00)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000cc0)={{0x0, 0xeeee0000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x5, 0x9, 0x10}, {0xffff1000, 0x200000, 0xd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x7}, {0x2000, 0x5000, 0xc, 0xff, 0x4, 0x4, 0x0, 0x0, 0x3, 0xf6, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6, 0xfc}, {0x6000, 0xfffef001, 0x9, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x83}, {0xdddd0000, 0xb000, 0x0, 0x35, 0x3, 0x0, 0x42, 0x0, 0x0, 0x0, 0x3}, {0xeeef0000, 0xe6e31000, 0x8, 0xfe, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4}, {0x30000, 0x2000, 0xf, 0x0, 0x0, 0x1, 0x0, 0xca, 0x26, 0x0, 0x0, 0x1}, {0x80a0000, 0x807}, {0x7000}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0xfffffffffffffffc, 0x0, 0x0, [0x0, 0xe4, 0x1, 0x40]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff6a0af0fff8ffff1971a4f0ff00000000b7060000080000173c640000000000004504040001ffffffc604000001000a00b7040000000100006a0af2fe00000000850000002f000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000d099d9abc1242d9388b72e45ffc2a09f000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d70300000000000000d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df6c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bbfc7824be6195a66d2e17e122040e11e3bd4a69fc6e8a9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2a9e99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8be1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d1a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaa072b5d7f0a349f1a75f01b5c203d4bdde6ff14ae9a3ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a98838156ff00000000000000cdbf91f7582ab314be3e67b8c9459564c856339a80919ecf839560c62e69df8667b274cc53f83f2086cfd2664252471fad9081824d60741d663ee258705c364e162b84a09870acd0a19399103474444f4fa12dcbd10b40195b6088513029b60a34e4161fe48c092693eb07dc8ddcba2eac2efe30b285a877c862c73ff8a60c3d494239884363cc0000005664181c1f28cd2880e6872bae932eaf4b0000000000007b662c0fe22cfd6d4bd7b851ae928cebeec6375b16af342e93c39d97e5d74d"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000740), 0x8, 0x10, &(0x7f0000000780), 0x3f}, 0x16) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r5) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e00), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000e40)={'syzkaller0\x00', 0x1}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000e80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=@newtfilter={0x74, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x1, 0xf}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xf, 0x800, 0x5, 0xf738, {0xb, 0x2, 0x0, 0x2, 0x200, 0x1}, {0x2, 0x1, 0x1, 0x0, 0xffff}, 0xd8, 0xeb}}]}]}}]}, 0x74}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000840)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x8004) 3.41046634s ago: executing program 4 (id=5453): unshare(0x6020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f00000002c0)={0x3, 0x0, 0xfffff3a2}) 3.329747235s ago: executing program 4 (id=5454): socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80001001300100000000000fbdbdf25fc000000000000000000000000000000fc000000000000000000000000000001000000044e2400000a0060203b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0xfffffffffffffdee, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x40000001}, 0x24004000) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000ffffff8000000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x0) 2.555919371s ago: executing program 0 (id=5457): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300031000000000000000000000000200090009000000e40000000000000005000600000000000a00002c09bbfc00fc01000000000000000080ff00000000000000000000000002000100000000fffffffbfc00000000050005000000000002"], 0x80}, 0x1, 0x7}, 0x0) 2.449898227s ago: executing program 0 (id=5459): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000500)='n', 0x1) (async) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000500)='n', 0x1) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001740)={{r0}, r1, 0x18, @inherit={0x98, &(0x7f00000003c0)={0x1, 0xa, 0xef, 0x3, {0x0, 0x7, 0x1, 0x8000000000000000, 0x6}, [0x48c9, 0x4, 0xc010, 0xfffffffffffffffc, 0x1000, 0x5c8d, 0x9, 0x8001, 0x1, 0xff]}}, @subvolid=0x2}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001740)={{r0}, r1, 0x18, @inherit={0x98, &(0x7f00000003c0)={0x1, 0xa, 0xef, 0x3, {0x0, 0x7, 0x1, 0x8000000000000000, 0x6}, [0x48c9, 0x4, 0xc010, 0xfffffffffffffffc, 0x1000, 0x5c8d, 0x9, 0x8001, 0x1, 0xff]}}, @subvolid=0x2}) poll(0x0, 0x0, 0x2) madvise(&(0x7f000048c000/0x1000)=nil, 0x1000, 0xc) (async) madvise(&(0x7f000048c000/0x1000)=nil, 0x1000, 0xc) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044402, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000001c0)={0x0, 0x0, 0x10001, 0x5}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000000700)={0xc, {"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", 0x1000}}, 0x104a) 2.329590713s ago: executing program 6 (id=5461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0002003c0001802c00018014000300fe80000000000000000000000000002014000400ff0100000000000000000000000000010400028005000100010000003c000380"], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a320000000005000400000000000500050002000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000003f0026012bbd700000000000117c00000400fc800c00018055fd0400", @ANYRES32=0x0, @ANYBLOB="0c0002800500230000000000140007000001000000000000000000000000000100009d00", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 2.214928305s ago: executing program 0 (id=5462): syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x8a16, 0x3a10, 0x3, 0x31d}, &(0x7f0000000500), &(0x7f0000000580), &(0x7f0000000180)) syz_clone(0x100111, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)) r0 = eventfd(0x0) io_submit(0x0, 0x2, &(0x7f0000000040)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xc2, r0, &(0x7f0000000140)="0100fd6400000000", 0x8, 0x36, 0x0, 0x0, r0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) 2.214683747s ago: executing program 6 (id=5463): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001701000001e500000000d8936e75a545998a2db3c561ef65a300000000000018000000000000001701000004000000fffbffff00000000"], 0x30, 0x40}], 0x1, 0x40800) 2.176485952s ago: executing program 6 (id=5464): unshare(0x6020400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f00000002c0)={0x3, 0x0, 0xfffff3a2}) 2.137873797s ago: executing program 6 (id=5465): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x204203, 0x0) r1 = io_uring_setup(0x9, 0x0) close(0x3) r2 = mq_open(&(0x7f0000000380)='batadv_slave_1\xbb', 0x8c2, 0x30, 0x0) mq_getsetattr(r2, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf51c, 0x10, 0xffffffff, 0x80000ff, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, 0x0) syz_io_uring_submit(r5, r6, 0x0, &(0x7f0000000ac0)=@IORING_OP_SYMLINKAT={0x26, 0xdb38ed5a1732f8d0, 0x0, r0, &(0x7f0000000b40)='./file0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) unlink(&(0x7f0000000c00)='.\x00') sendmsg$nl_generic(r7, 0x0, 0xc000) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000c40)=0x12) r8 = syz_open_dev$sndctrl(&(0x7f0000000c80), 0x0, 0x0) read(r8, 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(0x1000000, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) munmap$IORING_OFF_CQ_RING(r9, 0x80000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000cc0)) lseek(r0, 0x0, 0x3) r10 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000001c0)={0x20, 0xd, 0x6a, "d38183dd5fc46c69106cdbbf8f34aa682e971401697cd6b96ec138c5d40c6fbfc20d3da2f70bbabaf24af69727ee61b34a414b167ab835b29b5708fb6f18973de02848439fad61e4cfd4d8c500000000000000000000000000db967f6167c03dc0f5965e4d6248622d92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) r11 = syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xd, 0x2, 0x10, 0x81, 0x80, 0x4}, {0x9, 0x5, 0xe, 0x2, 0x10, 0xd, 0xa, 0x9}, {0x9, 0x5, 0x9, 0x3, 0x20, 0x0, 0x0, 0xfd}}}}}}]}}, 0x0) syz_usb_ep_write(r11, 0x7, 0x9, &(0x7f0000000300)="39151cdff086a4bbcb") 2.034176369s ago: executing program 0 (id=5466): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r2, @ANYBLOB="5c005a80140001800500070001000000050006000100000044000380120001000c"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000000c0)="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") r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x0, 0x3}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffe0f, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r8 = socket$inet6(0xa, 0x2, 0x0) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f0000008880), 0x45b, 0x2, 0x0) unshare(0x62020400) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r9, 0x0, 0x5, &(0x7f0000000240)={@loopback, @multicast2, 0xfffb, "66c5aff8a7eb17f1f6cec2e7780795478c84aea31700", 0x96bf, 0x2, 0x7a, 0x6b}, 0x3c) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000000), 0x4) socket(0x10, 0x3, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000881}, 0x4001010) 1.155757541s ago: executing program 2 (id=5467): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xc0) write(r0, &(0x7f0000000740)='0', 0x1) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\t/'], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000780)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 477.798279ms ago: executing program 5 (id=5468): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000020a09040000000000000000020000000900010073797a3000000000090001e173797a320000000020000000080a05000000000000000000020000000900010073797a30"], 0x74}, 0x1, 0xf5ffffff}, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) 394.904326ms ago: executing program 5 (id=5469): socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x80000000000000a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) epoll_create(0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503e3ffb309180008000a00", @ANYRES32, @ANYBLOB="240012800c0001006d6163766c616e00140002800800070008000000062102000100000008000500", @ANYRES16=r0], 0x54}, 0x1, 0x0, 0x5000000, 0x24004845}, 0x8000002) 394.745351ms ago: executing program 5 (id=5470): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300031000000000000000000000000200090009000000e40000000000000005000600000000000a00002c09bbfc00fc010000000000000000ffffff800000000000000000000002000100000000fffffffbfc00000000050005000000000002"], 0x80}, 0x1, 0x7}, 0x0) 356.905102ms ago: executing program 5 (id=5471): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d040000fffffffd7f000000000000005504000001ed0a002500000017ff2000dd40000000000000730a13fe000000003e04000000000000e5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800d9b3a69b37caa964e4b7000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325a904514d8e90131bfc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f49e4dcc1b7af0b51b9cafeda067b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb860600911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b30e55ac1275e938706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff0492df6b53002514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa250bc93b233a2291b5b10eebc49b6882f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753446de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000010000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468db"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 323.667789ms ago: executing program 5 (id=5472): r0 = syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000500)=ANY=[@ANYBLOB="120110030000004035120182400001020301090286080000003009080b00010107208c0904000000010120000924010040041d000708240a0001ff23030c240302"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="004e82a3adfc8c4409e6f5030400000004034308"], 0x0, 0x0, 0x0}, 0x0) 198.183765ms ago: executing program 4 (id=5473): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'team0\x00', 0x1}, 0x18) close(0x3) r1 = syz_open_dev$sndpcmc(&(0x7f0000000540), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f00000009c0)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000c40)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1c79, &(0x7f0000000d00)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000e40)=0x7) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000070e624618780e663a6ad3f996f37381f72000034ffac913a50583a1a32002695b61efd1b936f36509da3d0b16308fda277e185fc2621ada4e2c7c0ea3590074f764e2edfcc0a89053afde9c9569cef6d0c8a2d21f7a00aad04c51daffce9b81ec0c6d0e7320a99f8588c9a043d73eb0e8e256afa2eada13f068a74c6080b6367b250260100010014fcd19c931e8ff5c21521b1d2dd6c099f45599ce9ef3e9a97d32bfc197e1a82ed773c79c0e7222a0aaed827b1a458b4a6f1b00db798b630b30a0d68a7ab22d2c2fdff79b571a3d3c40274032d59e7ff76bb54b70232c7c80f162556e9d05fdc3d12b6a453e0ea802972966ab2c7d59d7b6e4c127a5ccd88211b30b90f31dd", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000020000008520000004000000184a00000200000000000000000000007c94000010000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, r6, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x80}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2f}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x4}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x4880) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000180)) 152.874153ms ago: executing program 4 (id=5474): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001701000001e500000000d8936e75a545998a2db3c561ef65a300000000000018000000000000001701000004000000fffbffff00000000"], 0x30, 0x40}], 0x1, 0x40800) 95.296514ms ago: executing program 6 (id=5475): unshare(0x6020400) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000200)={0x4004, r0, 0x2}) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, 0x0) 36.62197ms ago: executing program 4 (id=5476): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x12, 0x0, {0xc, 0xd}, {0xc, 0x5}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048810}, 0x2000000) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r0, 0x4068aea3, &(0x7f00000005c0)={0xdf, 0x0, 0x80000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x4, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001b80)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0x270, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) mprotect(&(0x7f0000e15000/0x2000)=nil, 0x2000, 0x2) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000001f80)={'ip6_vti0\x00', &(0x7f0000001fc0)=@ethtool_cmd={0x41, 0x5, 0x3, 0x0, 0x7, 0x0, 0x0, 0xfc, 0x0, 0xfc, 0x0, 0xfffffff9, 0x0, 0xff, 0x0, 0x45, [0x0, 0x6]}}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f0000019100400014000200100011"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000100)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000240)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x1, 0x5f6, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x24}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_open_dev$media(&(0x7f00000003c0), 0x6be, 0xc8683) ioctl$MEDIA_IOC_REQUEST_ALLOC(r10, 0x80047c05, &(0x7f0000000480)) r11 = dup(r9) syz_ublk_setup_queues(r11, r8, &(0x7f0000000340)={0x0, 0x20fb87, 0x1, 0xfffffffd, 0x32c}, &(0x7f0000000700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xba5e, 0x8000, 0x1006, 0x160, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6605, 0x200, 0x10000000, 0x546}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88db, 0x10000, 0x3, 0xfffffffc, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000000, 0x8000, 0x2, 0xbd, 0x0, r3}}], 0x1, &(0x7f0000000540)={0x2e, 0x54, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r7, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) ioctl$MEMREADOOB(r11, 0xc0104d04, &(0x7f0000000500)={0x6, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_modify_offsets$flags(r4, r12, 0x38, 0xfffffffa) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x14) syz_usb_connect(0x3, 0x96d, &(0x7f0000000a80)=ANY=[@ANYBLOB="12010102e21b5140b1134200e8a90102030109025b09040d9720090904320409f073ea09090503002000f80040090504104000"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r11, 0x7b2, &(0x7f0000001b40)={&(0x7f0000000b40)=[0x5, 0xaa4, 0xdb, 0x7, 0xd, 0x800, 0x401, 0xf, 0x4, 0x6, 0x800, 0x40, 0x6, 0x4, 0xfffffffe, 0x40d, 0xff, 0x1, 0xc6, 0x100, 0x6, 0x3, 0x80000001, 0xbfb, 0x2, 0x6, 0x8, 0x6, 0x5, 0x64fe2241, 0x6, 0x5, 0x8, 0x8, 0x8b, 0x2, 0x69, 0x3, 0x6, 0xadb433a, 0x10000, 0xffff96d0, 0x0, 0x0, 0x0, 0x2, 0x1000, 0x401, 0x5, 0x0, 0x8001, 0x400, 0x2, 0x5, 0x80, 0x400, 0x5, 0x9, 0x80000001, 0x10001, 0x9, 0x4, 0x8000, 0x7, 0x1, 0x7, 0xffff8000, 0xfffffff7, 0x5, 0x6, 0x0, 0x1, 0xfffffffc, 0x7, 0x7ff, 0x8000, 0x4, 0x2, 0x6, 0x0, 0x2, 0x2, 0x86b, 0x3, 0x5, 0x65c8049d, 0x8, 0x8, 0x6, 0x2, 0xe1, 0x9, 0x6, 0x4, 0x0, 0x3, 0x5, 0x101, 0x9, 0x3, 0x0, 0x0, 0x2, 0x3, 0x3, 0x80000001, 0x5664, 0x80, 0x75, 0x3, 0x8, 0xee, 0x8000, 0x1, 0x10000, 0x7f, 0xa4c, 0x5, 0x80, 0xb, 0x8, 0xb, 0xd, 0xfffffffe, 0x9, 0x1432, 0x0, 0x0, 0x6, 0x1, 0xdb71, 0xffff, 0x4, 0x101, 0x3, 0xc3b9, 0x1, 0x2, 0xb1e4, 0x9, 0x3, 0xe, 0x80000001, 0x8, 0x401, 0x1, 0x7, 0x2, 0x385, 0xde, 0xab84, 0xde, 0x8001, 0x7, 0x7, 0x8000, 0x9, 0x2, 0x2, 0x9, 0x2, 0x5, 0x9, 0x0, 0x6, 0x2, 0x5, 0x81, 0x1000, 0x7, 0x4, 0x40, 0x2, 0x8, 0x10000, 0x9, 0xfffffffe, 0x2, 0xfffffffb, 0x5, 0x1, 0x1, 0x10, 0x2549, 0x5, 0x200, 0x0, 0xeb2, 0x3, 0x2, 0x2, 0xc, 0x6, 0x3ff, 0xffffe3dc, 0x2, 0x9, 0x8, 0xffffdd5e, 0x80, 0xfff, 0x2, 0x1, 0x0, 0x200, 0xe48d, 0xfffff8ee, 0xb1, 0x81, 0xeb, 0x3, 0x0, 0x1, 0x80000001, 0x5, 0x1ff, 0x7, 0x7, 0x5, 0x2, 0x6a38bf39, 0x6, 0x7ff, 0x1bb800, 0x7, 0x5, 0x4, 0x3ff, 0x81, 0x8000, 0x7f, 0x66, 0xffffffff, 0x80, 0x9, 0x0, 0x226a, 0x8, 0x4, 0x790, 0x0, 0xffff8001, 0x8f, 0xbbf, 0x5, 0xffff, 0x9, 0xb83, 0x5, 0x0, 0x6, 0x4, 0x3b, 0x2, 0x8001, 0x8, 0xb9e, 0x6, 0x3, 0x0, 0x9, 0x6, 0x3, 0xfffffff9, 0x7ff, 0x100, 0x0, 0x81, 0x3ff, 0x8, 0x400, 0x9, 0x4, 0x7, 0x8, 0x6, 0x11, 0x1, 0xfffffffd, 0x5, 0xe7cb, 0x3, 0x5, 0xc, 0xff, 0x400, 0x4, 0xb30, 0xe4, 0x7fffffff, 0x9, 0x7, 0xa, 0x1afa, 0x2, 0x6, 0x2, 0x6, 0x1, 0x5, 0x9, 0x2, 0x8001, 0xe, 0x1, 0xfffffffe, 0x2, 0x0, 0x7, 0x66, 0xfffffffa, 0x5, 0x6, 0xe, 0x4, 0x2, 0xe38, 0x3, 0x80, 0xdb23, 0x1, 0x6456, 0x6000000, 0x8, 0xffff, 0x9, 0x0, 0x8d, 0x56, 0xb, 0x2, 0x4, 0x7ff, 0x8, 0x0, 0x9, 0x2f, 0x7, 0x1, 0x1, 0x3, 0x4, 0x4, 0x80, 0x4, 0x9, 0x3, 0xffffff5b, 0x5, 0x48f, 0x7, 0x0, 0xb753, 0xb7a6, 0xfff, 0x2, 0x9, 0x9, 0x6, 0x3, 0x4, 0x20, 0xe223, 0x80, 0x5, 0xfffffffe, 0x1, 0xfffffffb, 0x100, 0x3, 0x115d, 0xfffffff9, 0x5, 0x2, 0x5, 0x7, 0x6236a69d, 0x1, 0xffffffff, 0x0, 0x0, 0x1, 0x8c, 0x4, 0x8, 0xc, 0x77, 0x9, 0xf, 0x6, 0x1d7, 0x6, 0x9, 0xffffffff, 0x7, 0xf2, 0x5, 0x9, 0x3, 0x3, 0x9, 0x0, 0xc, 0x1, 0x3, 0x1, 0x2, 0x3, 0x1, 0xe0, 0x6, 0x9, 0x9, 0x7, 0x7fff, 0x80000001, 0xa429, 0x6, 0xf20, 0x7fffffff, 0x8, 0x2, 0x0, 0x100, 0x6, 0x7, 0x7, 0x6, 0x7, 0x6, 0x8, 0x8, 0x6, 0x7, 0x0, 0xc06, 0x9, 0xf0, 0x6, 0x7ff, 0xe00, 0x12a4, 0x0, 0x3, 0x8ae0, 0xffffffe7, 0x2, 0x4, 0x9, 0x0, 0x80, 0x10001, 0x7, 0x4, 0x8, 0x4, 0x5, 0x4, 0x4, 0x4, 0xf3, 0xfffffffe, 0x5, 0x0, 0xe22, 0x67, 0x7, 0x0, 0x6, 0x2, 0x1, 0x1, 0x9, 0x4, 0x4d, 0x0, 0x0, 0x55, 0x8000, 0xfd, 0xfffffff7, 0x9, 0x10001, 0x10000, 0x81e, 0xaaa0, 0x3, 0xc60, 0x88, 0x10a6, 0x8, 0xef9f, 0x7, 0x7fff, 0x5, 0x6, 0x8e8, 0x200, 0x0, 0x7ff, 0x0, 0x3, 0x100, 0x1, 0x2, 0x2, 0x0, 0x6, 0x0, 0x5cb6, 0x5, 0x0, 0x7e64, 0x0, 0x3, 0x5, 0x9, 0x254, 0xb86, 0x1ab2e81, 0x30ba, 0xb772, 0xd, 0x6, 0x5, 0x8000, 0x0, 0x0, 0x1, 0x2, 0x67db375a, 0x7fff, 0x80000001, 0x4, 0x9, 0x5, 0x8, 0x3, 0xb00e, 0xf0b, 0x833, 0x5b, 0x3, 0x40, 0x80000001, 0xb, 0x4, 0x2, 0x0, 0x9, 0xf, 0x6, 0x200, 0x1, 0x5, 0x6, 0x7, 0x1ff, 0x8, 0x18, 0xc90, 0x6, 0x0, 0x8, 0x9, 0x800, 0x3, 0x7, 0x1000, 0xc, 0x6, 0x7, 0xfff, 0x9, 0x7fff8000, 0x1, 0xff800000, 0xca, 0x6, 0x3, 0x2, 0x8, 0x5, 0x5, 0xfffffffe, 0x10001, 0x400, 0x3, 0xffffffae, 0x4, 0x3, 0x7, 0x2, 0x9, 0xfffffbff, 0x0, 0x0, 0x4, 0x4, 0x3, 0x5, 0x7, 0x0, 0x1, 0x7, 0x8, 0x7, 0x5, 0x5, 0x404, 0x8, 0x7, 0x9, 0x5, 0x4d1, 0x6, 0x80000000, 0x5, 0x9f, 0x4, 0xfffffff8, 0x7ff, 0x2, 0x40000000, 0xc3, 0xa293, 0x2, 0x9, 0xd, 0x8, 0x3, 0x1fed, 0x8, 0x1, 0x9, 0x3, 0x1, 0xb0, 0x5, 0x42d, 0xfffffff9, 0x4, 0x8001, 0x51, 0x80, 0x6, 0x6, 0x100, 0x0, 0x7, 0x93dd, 0x6, 0x13, 0x81, 0x8, 0x81, 0x2b, 0x0, 0x5, 0x2, 0x2, 0xc3c, 0x4, 0x2, 0x9, 0x4, 0x6, 0x2, 0x8, 0x2, 0x3b, 0x5, 0x0, 0x5, 0x6, 0xf, 0x37, 0xffff, 0xb9, 0xca12, 0x324bc677, 0x0, 0x9, 0xffff, 0xf5, 0x7ff, 0x40, 0x101, 0x0, 0x8, 0x400, 0xbd, 0x0, 0x5, 0x1, 0x3, 0x80, 0x800, 0x4, 0x7f, 0x1, 0x8, 0x7, 0x2, 0x0, 0x6, 0xfffffffa, 0x8, 0xff6, 0x8000000, 0x9, 0x6, 0x8, 0x6, 0x0, 0x4, 0x5, 0x4, 0x0, 0x138a, 0x0, 0x7f, 0x0, 0xfffffff8, 0x1, 0x0, 0x6, 0x2, 0x6, 0x8f, 0x5, 0x3a, 0x8, 0xc0, 0x6a3b, 0x2, 0xffffff86, 0x35, 0x2, 0x8, 0x4, 0xa, 0x2, 0x1, 0x7f000, 0x8, 0x449, 0x9, 0x200, 0x8, 0x86, 0x4, 0x800, 0x4, 0xffff, 0x8, 0x2, 0x5, 0x9, 0x200, 0x6, 0x67, 0xffffffff, 0xfff, 0x3, 0x8, 0x8000, 0x2, 0x12a, 0x8, 0x6, 0x8, 0x25, 0x5, 0x38, 0x5, 0x8, 0x4, 0x39, 0x9745, 0xa2a, 0x81, 0x7, 0x6, 0x4, 0x4, 0xfffffff7, 0x516f, 0x8, 0x1, 0x400, 0x3ff, 0x360, 0x2b0c2d27, 0x0, 0x2, 0x101, 0x12, 0x3, 0xdea, 0x3, 0x6a, 0x1ff, 0x2, 0x6, 0xfffffff8, 0x8001, 0x5, 0x401, 0x2, 0x2, 0x0, 0x1, 0x0, 0x200, 0x10, 0x9, 0x9, 0x3, 0x3, 0x1, 0x3, 0xd, 0x2e0, 0x401, 0x8000, 0x0, 0xae, 0x4, 0x4, 0x6, 0x9f58, 0x9, 0x8, 0x1, 0x2, 0x9, 0x8, 0x2, 0x9, 0x2, 0x20, 0x4, 0xf, 0x401, 0x1, 0x401, 0x3, 0x0, 0x3, 0xc, 0x800, 0x28000000, 0x3, 0x5af9, 0x0, 0xb6c, 0x8, 0xb907, 0x4, 0x7, 0xffff2d21, 0x485, 0x1000, 0x6, 0x4, 0x1, 0x81, 0x2, 0xbd1e, 0x6, 0x33, 0xd, 0x80, 0x8, 0xf9, 0x7fffffff, 0x10001, 0x11, 0x1, 0xe, 0x0, 0x4, 0x9, 0xffffffff, 0x7, 0x9, 0x5, 0x7f1f, 0x7, 0x7, 0x8, 0x3, 0x7, 0xc, 0x7, 0x3, 0x0, 0x2, 0x40, 0xd, 0x9, 0x9, 0x200, 0x40, 0x31cc, 0xffff56d2, 0x20000000, 0xfff, 0x9, 0x5, 0x5, 0xfffffff9, 0x0, 0xff, 0x100, 0x3, 0x6, 0x0, 0x8b, 0x200, 0x80, 0x2, 0xffff, 0x8001, 0xd8c7378, 0x1, 0x4, 0x0, 0x5, 0x3, 0x3, 0x1, 0xdc5e, 0x0, 0x4, 0x3b, 0xffff, 0x1, 0xffffffff, 0xffff, 0x1, 0x400, 0x0, 0x2, 0x5, 0x1000, 0x8000, 0xfffffeff, 0x620a, 0x5, 0x2, 0x0, 0x8, 0x4, 0xdc, 0x2, 0xe, 0x7, 0x140000, 0xfffffff7, 0x1ff, 0x0, 0xb, 0xfd, 0xdd18, 0x0, 0x1, 0x40, 0x5, 0x7c43, 0x4, 0x2c, 0xffff, 0x8, 0x6, 0x200, 0x9, 0xffff, 0x9f, 0x6, 0x3, 0x100, 0x2, 0x9, 0x2, 0x9, 0x1, 0x100, 0x7, 0x5, 0xe, 0x24, 0x8001, 0x6, 0x8000, 0x3, 0xf2, 0x2, 0x1, 0x10001, 0xdeca, 0x4, 0xea, 0x6, 0x3, 0x8, 0x7ff, 0x9, 0x0, 0x8, 0x5b, 0x9, 0x4, 0xff, 0xbf02, 0x2e90a212, 0x40000c, 0x8, 0x20000000, 0x6, 0xffff, 0xfffff801, 0x2], 0x2, 0x400, 0x2}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000b00)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x16b8c5b5213a03b5}) 0s ago: executing program 6 (id=5477): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x2, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000fcffffff0200000005000000030000000a01766c616e30000000000000000000000076657468305f746f5f626f6e6400000064766d7270300000000000000000000064766d727030000000000000000000000000000000000000ffff00000180c200000100ffffffffff000070000000aa000000d80000006d61726b000000000000000000000000000000000000000000000000000000001000000000000000e0ffffff00000000efffffff00000000434c41535349465900000000000000000000000000000000000000000000000008000000000000000f0000000000000003000000000000000a016d6163766c616e30000000000000000070696d3672656700000000000000000073797a6b616c6c65723000000000000064756d6d7930000000000000000000000180c20000000c00000000ffffffffffffffffff0000ff0000007000000070000000b80000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a310000000000000000000000000402000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000feffffff00000000"]}, 0x298) kernel console output (not intermixed with test programs): 684][T10176] usb 5-1: USB disconnect, device number 99 [ 908.965758][ C0] ati_remote 5-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 909.070464][T22751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5136'. [ 909.161943][T22755] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5138'. [ 909.162712][T22753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.163320][T22753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.177159][ T5347] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 909.324873][T22758] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5139'. [ 909.358862][ T5347] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 909.361260][ T5347] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 909.361326][ T5347] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 909.361351][ T5347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 909.361377][ T5347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 909.361405][ T5347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 909.361429][ T5347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 148, setting to 64 [ 909.361455][ T5347] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 909.363562][ T5347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.363585][ T5347] usb 3-1: Product: syz [ 909.363600][ T5347] usb 3-1: Manufacturer: syz [ 909.363615][ T5347] usb 3-1: SerialNumber: syz [ 909.366325][ T5347] usb 3-1: config 0 descriptor?? [ 909.368163][T22749] raw-gadget.9 gadget.2: fail, usb_ep_enable returned -22 [ 909.368338][T22749] raw-gadget.9 gadget.2: fail, usb_ep_enable returned -22 [ 909.388589][T10176] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 909.548110][T10176] usb 5-1: Using ep0 maxpacket: 8 [ 909.548968][T10176] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 909.549946][T10176] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 909.549993][T10176] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 909.550008][T10176] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 909.550036][T10176] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 909.550050][T10176] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 909.550062][T10176] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 909.550085][T10176] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.578880][T10175] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 909.738586][T10175] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 909.741456][T10175] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.741474][T10175] usb 1-1: Product: syz [ 909.741482][T10175] usb 1-1: Manufacturer: syz [ 909.741491][T10175] usb 1-1: SerialNumber: syz [ 909.776147][T10176] usb 5-1: usb_control_msg returned -32 [ 909.776228][T10176] usbtmc 5-1:16.0: can't read capabilities [ 909.823605][T10176] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 909.919759][T22765] FAULT_INJECTION: forcing a failure. [ 909.919759][T22765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 909.919784][T22765] CPU: 0 UID: 0 PID: 22765 Comm: syz.5.5142 Tainted: G L syzkaller #0 PREEMPT(full) [ 909.919799][T22765] Tainted: [L]=SOFTLOCKUP [ 909.919804][T22765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 909.919811][T22765] Call Trace: [ 909.919816][T22765] [ 909.919821][T22765] dump_stack_lvl+0xe8/0x150 [ 909.919841][T22765] should_fail_ex+0x410/0x560 [ 909.919860][T22765] copy_folio_from_iter_atomic+0x45a/0x1a30 [ 909.919879][T22765] ? __folio_batch_add_and_move+0x760/0xc50 [ 909.919902][T22765] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 909.919916][T22765] ? __filemap_get_folio_mpol+0x7c8/0x1000 [ 909.919937][T22765] ? simple_write_begin+0x200/0x4b0 [ 909.919956][T22765] generic_perform_write+0x5c7/0x8f0 [ 909.919974][T22765] ? __pfx_generic_perform_write+0x10/0x10 [ 909.919986][T22765] ? file_update_time_flags+0x3ab/0x440 [ 909.920001][T22765] ? __generic_file_write_iter+0xf9/0x230 [ 909.920012][T22765] ? generic_file_write_iter+0x9a/0x330 [ 909.920025][T22765] generic_file_write_iter+0xae/0x330 [ 909.920038][T22765] vfs_write+0x612/0xba0 [ 909.920055][T22765] ? __pfx_vfs_write+0x10/0x10 [ 909.920072][T22765] ? __fget_files+0x2a/0x420 [ 909.920087][T22765] ksys_write+0x150/0x270 [ 909.920100][T22765] ? __pfx_ksys_write+0x10/0x10 [ 909.920118][T22765] do_syscall_64+0x166/0x520 [ 909.920130][T22765] ? trace_irq_disable+0x3b/0x140 [ 909.920142][T22765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.920154][T22765] ? clear_bhb_loop+0x70/0xc0 [ 909.920167][T22765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.920181][T22765] RIP: 0033:0x7fa407b9e559 [ 909.920192][T22765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 909.920202][T22765] RSP: 002b:00007fa408a67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 909.920215][T22765] RAX: ffffffffffffffda RBX: 00007fa407e25fa0 RCX: 00007fa407b9e559 [ 909.920223][T22765] RDX: 000000000208e24b RSI: 0000200000000200 RDI: 0000000000000005 [ 909.920230][T22765] RBP: 00007fa408a67090 R08: 0000000000000000 R09: 0000000000000000 [ 909.920237][T22765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 909.920244][T22765] R13: 00007fa407e26038 R14: 00007fa407e25fa0 R15: 00007fa407f4fa48 [ 909.920261][T22765] [ 910.185833][T22767] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -71 [ 910.195586][T22767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5125'. [ 910.196357][T22767] fuse: Bad value for 'fd' [ 910.242825][T20719] usb 1-1: USB disconnect, device number 108 [ 910.302741][T22772] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5144'. [ 910.302765][T22772] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5144'. [ 910.338071][T10175] net_ratelimit: 686 callbacks suppressed [ 910.338091][T10175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.373550][T22774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.376115][T22774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.382552][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 910.382743][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 910.382824][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 910.394186][T20709] uvcvideo 7-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 910.394252][T20709] uvcvideo 7-1:0.31: Entity type for entity Output 32774 was not initialized! [ 910.394355][T20709] uvcvideo 7-1:0.31: Failed to create links for entity 5 [ 910.394371][T20709] uvcvideo 7-1:0.31: Failed to register entities (-22). [ 910.403695][T20709] usb 7-1: USB disconnect, device number 8 [ 910.441025][ T7784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.610536][T22781] netlink: 'syz.6.5148': attribute type 10 has an invalid length. [ 910.610552][T22781] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5148'. [ 910.612504][ T31] kauditd_printk_skb: 23 callbacks suppressed [ 910.612521][ T31] audit: type=1326 audit(1792036765.555:10960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22779 comm="syz.6.5148" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1c79e559 code=0x7ffc0000 [ 910.612637][ T31] audit: type=1326 audit(1792036765.555:10961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22779 comm="syz.6.5148" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1c79e559 code=0x7ffc0000 [ 910.612829][ T31] audit: type=1326 audit(1792036765.555:10962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22779 comm="syz.6.5148" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1c79e559 code=0x7ffc0000 [ 910.612945][ T31] audit: type=1326 audit(1792036765.555:10963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22779 comm="syz.6.5148" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1c79e559 code=0x7ffc0000 [ 910.613127][ T31] audit: type=1326 audit(1792036765.555:10964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22779 comm="syz.6.5148" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad1c79e559 code=0x7ffc0000 [ 910.613488][ T31] audit: type=1326 audit(1792036765.555:10965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22779 comm="syz.6.5148" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1c79e559 code=0x7ffc0000 [ 910.613702][ T31] audit: type=1326 audit(1792036765.555:10966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22779 comm="syz.6.5148" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1c79e559 code=0x7ffc0000 [ 910.613936][ T31] audit: type=1326 audit(1792036765.555:10967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22779 comm="syz.6.5148" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1c79e559 code=0x7ffc0000 [ 910.614099][ T31] audit: type=1326 audit(1792036765.555:10968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22779 comm="syz.6.5148" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1c79e559 code=0x7ffc0000 [ 910.614240][ T31] audit: type=1326 audit(1792036765.555:10969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22779 comm="syz.6.5148" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad1c79e559 code=0x7ffc0000 [ 910.902126][T10176] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 910.902241][T10176] ath9k_htc: Failed to initialize the device [ 910.902749][T20719] usb 1-1: ath9k_htc: USB layer deinitialized [ 910.965859][T22785] dummy0: entered promiscuous mode [ 910.966344][T22785] macvlan2: entered promiscuous mode [ 910.984816][T22785] dummy0: left promiscuous mode [ 911.108872][T20484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.289750][T20712] usb 5-1: USB disconnect, device number 100 [ 911.349764][T22803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.349918][T22803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.350106][T22803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.461150][T20719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.518010][T10176] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 911.560695][T22809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.568110][T22809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.577580][T22809] FAULT_INJECTION: forcing a failure. [ 911.577580][T22809] name failslab, interval 1, probability 0, space 0, times 0 [ 911.577621][T22809] CPU: 0 UID: 0 PID: 22809 Comm: syz.5.5158 Tainted: G L syzkaller #0 PREEMPT(full) [ 911.577647][T22809] Tainted: [L]=SOFTLOCKUP [ 911.577655][T22809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 911.577667][T22809] Call Trace: [ 911.577675][T22809] [ 911.577684][T22809] dump_stack_lvl+0xe8/0x150 [ 911.577716][T22809] should_fail_ex+0x410/0x560 [ 911.577758][T22809] ? __alloc_skb+0x1db/0x7a0 [ 911.577786][T22809] should_failslab+0xa8/0x100 [ 911.577814][T22809] ? __alloc_skb+0x1db/0x7a0 [ 911.577839][T22809] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 911.577862][T22809] ? __alloc_skb+0x18d/0x7a0 [ 911.577890][T22809] ? __alloc_skb+0x1db/0x7a0 [ 911.577923][T22809] __alloc_skb+0x1db/0x7a0 [ 911.577955][T22809] rtmsg_ifinfo_build_skb+0x7f/0x260 [ 911.577982][T22809] ? ip6_route_dev_notify+0x9a/0x5b0 [ 911.578142][T22809] rtmsg_ifinfo+0x8c/0x1a0 [ 911.578174][T22809] netif_state_change+0x297/0x3a0 [ 911.578234][T22809] ? __pfx___dev_change_flags+0x10/0x10 [ 911.578255][T22809] ? __pfx_netif_state_change+0x10/0x10 [ 911.578283][T22809] ? netdev_work_dequeue+0x225/0x250 [ 911.578306][T22809] ? __local_bh_enable_ip+0xd6/0x140 [ 911.578335][T22809] ? netif_change_flags+0xde/0x1b0 [ 911.578359][T22809] do_setlink+0x3c57/0x4670 [ 911.578379][T22809] ? unwind_get_return_address+0x4d/0x90 [ 911.578417][T22809] ? __pfx_do_setlink+0x10/0x10 [ 911.578438][T22809] ? __lock_acquire+0x747/0x2de0 [ 911.578471][T22809] ? kasan_save_track+0x4f/0x80 [ 911.578493][T22809] ? kasan_save_track+0x3e/0x80 [ 911.578514][T22809] ? __kasan_kmalloc+0x93/0xb0 [ 911.578536][T22809] ? __kmalloc_cache_noprof+0x321/0x600 [ 911.578575][T22809] ? __mutex_trylock_common+0x15f/0x270 [ 911.578609][T22809] ? __pfx___mutex_trylock_common+0x10/0x10 [ 911.578638][T22809] ? rcu_is_watching+0x16/0xb0 [ 911.578664][T22809] ? trace_contention_end+0x3d/0x140 [ 911.578691][T22809] ? __mutex_lock+0x30b/0x1550 [ 911.578725][T22809] ? rtnl_newlink+0xc10/0x1c30 [ 911.578745][T22809] ? __pfx___mutex_lock+0x10/0x10 [ 911.578776][T22809] ? ns_capable+0x89/0xe0 [ 911.578803][T22809] ? rtnl_nets_add+0x16c/0x300 [ 911.578821][T22809] ? refcount_inc+0x46/0x70 [ 911.578849][T22809] rtnl_newlink+0x146f/0x1c30 [ 911.578879][T22809] ? __pfx_rtnl_newlink+0x10/0x10 [ 911.578896][T22809] ? do_syscall_64+0x166/0x520 [ 911.578917][T22809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.578969][T22809] ? kasan_quarantine_put+0xbb/0x1f0 [ 911.578992][T22809] ? lockdep_hardirqs_on+0x7b/0x110 [ 911.579017][T22809] ? nlmon_xmit+0xb0/0x100 [ 911.579042][T22809] ? kmem_cache_free+0x182/0x650 [ 911.579076][T22809] ? __lock_acquire+0x747/0x2de0 [ 911.579106][T22809] ? __local_bh_enable_ip+0xd6/0x140 [ 911.579131][T22809] ? lockdep_hardirqs_on+0x7b/0x110 [ 911.579151][T22809] ? __dev_queue_xmit+0x29b/0x3920 [ 911.579172][T22809] ? __local_bh_enable_ip+0xd6/0x140 [ 911.579205][T22809] ? lock_acquire+0x115/0x350 [ 911.579227][T22809] ? __pfx_rtnl_newlink+0x10/0x10 [ 911.579256][T22809] ? __pfx_rtnl_newlink+0x10/0x10 [ 911.579274][T22809] rtnetlink_rcv_msg+0x802/0xc00 [ 911.579307][T22809] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 911.579335][T22809] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 911.579362][T22809] ? ref_tracker_free+0x689/0x830 [ 911.579392][T22809] ? __pfx_ref_tracker_free+0x10/0x10 [ 911.579429][T22809] netlink_rcv_skb+0x226/0x4a0 [ 911.579454][T22809] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 911.579485][T22809] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 911.579521][T22809] ? netlink_deliver_tap+0x2e/0x1b0 [ 911.579544][T22809] ? netlink_deliver_tap+0x2e/0x1b0 [ 911.579573][T22809] netlink_unicast+0x7bd/0x940 [ 911.579609][T22809] netlink_sendmsg+0x813/0xb40 [ 911.579642][T22809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 911.579673][T22809] ? apparmor_socket_sendmsg+0x98/0x360 [ 911.579701][T22809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 911.579724][T22809] sock_sendmsg_nosec+0x13a/0x180 [ 911.579753][T22809] ____sys_sendmsg+0x54e/0x850 [ 911.579779][T22809] ? __pfx_____sys_sendmsg+0x10/0x10 [ 911.579808][T22809] ? import_iovec+0x73/0xa0 [ 911.579840][T22809] ___sys_sendmsg+0x2a5/0x360 [ 911.579860][T22809] ? __lock_acquire+0x747/0x2de0 [ 911.579885][T22809] ? __pfx____sys_sendmsg+0x10/0x10 [ 911.579939][T22809] ? __fget_files+0x2a/0x420 [ 911.579957][T22809] ? __fget_files+0x3a2/0x420 [ 911.579985][T22809] __x64_sys_sendmsg+0x1b1/0x290 [ 911.580008][T22809] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 911.580049][T22809] do_syscall_64+0x166/0x520 [ 911.580070][T22809] ? trace_irq_disable+0x3b/0x140 [ 911.580092][T22809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.580111][T22809] ? clear_bhb_loop+0x70/0xc0 [ 911.580134][T22809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.580154][T22809] RIP: 0033:0x7fa407b9e559 [ 911.580172][T22809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 911.580190][T22809] RSP: 002b:00007fa408a67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 911.580211][T22809] RAX: ffffffffffffffda RBX: 00007fa407e25fa0 RCX: 00007fa407b9e559 [ 911.580225][T22809] RDX: 0000000004000000 RSI: 0000200000019900 RDI: 0000000000000009 [ 911.580239][T22809] RBP: 00007fa408a67090 R08: 0000000000000000 R09: 0000000000000000 [ 911.580251][T22809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 911.580263][T22809] R13: 00007fa407e26038 R14: 00007fa407e25fa0 R15: 00007fa407f4fa48 [ 911.580294][T22809] [ 911.628095][T10175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.688105][T10176] usb 7-1: Using ep0 maxpacket: 32 [ 911.689647][T10176] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 911.691212][T10176] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 911.691236][T10176] usb 7-1: config 0 has no interface number 0 [ 911.691276][T10176] usb 7-1: config 0 interface 184 has no altsetting 0 [ 911.698332][T10176] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.698356][T10176] usb 7-1: Product: syz [ 911.698371][T10176] usb 7-1: Manufacturer: syz [ 911.698385][T10176] usb 7-1: SerialNumber: syz [ 911.725608][T10176] usb 7-1: config 0 descriptor?? [ 911.847740][T22809] bridge6: left promiscuous mode [ 911.853613][T22809] bond8: left promiscuous mode [ 911.912339][ T5347] rc_core: IR keymap rc-snapstream-firefly not found [ 911.912358][ T5347] Registered IR keymap rc-empty [ 911.913509][ T5347] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 911.929261][T22813] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 912.229484][T11277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.275562][ T5347] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input69 [ 912.291913][ T5347] input: syz syz mouse as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input70 [ 912.320402][ T5347] usb 3-1: USB disconnect, device number 71 [ 912.320534][ C1] ati_remote 3-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 912.641549][T22817] nvme nvme0: rdma connection establishment failed (-104) [ 912.658570][ T5347] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 912.744345][T10176] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 912.811355][ T5347] usb 3-1: unable to get BOS descriptor or descriptor too short [ 912.811419][ T5347] usb 3-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=b0.82 [ 912.813171][ T5347] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 912.815791][ T5347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.815816][ T5347] usb 3-1: Product: syz [ 912.815832][ T5347] usb 3-1: Manufacturer: syz [ 912.815847][ T5347] usb 3-1: SerialNumber: syz [ 912.890064][ T5347] comedi comedi5: Wrong number of endpoints [ 912.890087][ T5347] dt9812 3-1:5.0: driver 'dt9812' failed to auto-configure device. [ 912.948769][T10176] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 912.948802][T10176] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 912.948822][T10176] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 912.948840][T10176] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 912.949086][T10176] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 912.969603][T10176] usb 7-1: USB disconnect, device number 9 [ 913.014209][T20719] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 913.093320][T20709] usb 3-1: USB disconnect, device number 72 [ 913.140145][T20719] usb 5-1: device descriptor read/64, error -71 [ 913.265888][T22828] __nla_validate_parse: 6 callbacks suppressed [ 913.265902][T22828] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5165'. [ 913.377923][T20719] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 913.507914][T10176] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 913.507914][T20719] usb 5-1: device descriptor read/64, error -71 [ 913.618245][T20719] usb usb5-port1: attempt power cycle [ 913.680115][T10176] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 913.683338][T10176] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.683388][T10176] usb 7-1: Product: syz [ 913.683400][T10176] usb 7-1: Manufacturer: syz [ 913.683409][T10176] usb 7-1: SerialNumber: syz [ 913.734557][T10176] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 913.824764][T22834] ªªªªªª: renamed from vlan0 (while UP) [ 913.874416][T22834] nvme nvme0: rdma_resolve_addr failed (-19). [ 913.949270][T22838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5169'. [ 913.954483][T22838] dummy0: entered promiscuous mode [ 913.956451][T22838] macvlan2: entered promiscuous mode [ 913.961282][T22838] dummy0: left promiscuous mode [ 913.985145][T20719] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 914.008502][T20719] usb 5-1: device descriptor read/8, error -71 [ 914.152503][ T5670] usb 7-1: USB disconnect, device number 10 [ 914.248024][T20719] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 914.268404][T20719] usb 5-1: device descriptor read/8, error -71 [ 914.309389][T22845] syz.0.5171: vmalloc error: size 12288, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 914.309438][T22845] CPU: 0 UID: 0 PID: 22845 Comm: syz.0.5171 Tainted: G L syzkaller #0 PREEMPT(full) [ 914.309454][T22845] Tainted: [L]=SOFTLOCKUP [ 914.309458][T22845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 914.309465][T22845] Call Trace: [ 914.309470][T22845] [ 914.309475][T22845] dump_stack_lvl+0xe8/0x150 [ 914.309495][T22845] warn_alloc+0x24d/0x270 [ 914.309512][T22845] ? __pfx_warn_alloc+0x10/0x10 [ 914.309528][T22845] ? alloc_pages_mpol+0x256/0x390 [ 914.309549][T22845] __vmalloc_node_range_noprof+0x11a9/0x1540 [ 914.309575][T22845] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 914.309587][T22845] ? kvm_dev_ioctl+0x12b/0x1770 [ 914.309598][T22845] ? rcu_is_watching+0x16/0xb0 [ 914.309612][T22845] ? kvm_dev_ioctl+0x12b/0x1770 [ 914.309623][T22845] ? rcu_is_watching+0x16/0xb0 [ 914.309638][T22845] ? kvm_dev_ioctl+0x12b/0x1770 [ 914.309648][T22845] __kvmalloc_node_noprof+0x5a1/0x820 [ 914.309666][T22845] ? kvm_dev_ioctl+0x12b/0x1770 [ 914.309679][T22845] ? kvm_dev_ioctl+0x12b/0x1770 [ 914.309693][T22845] kvm_dev_ioctl+0x12b/0x1770 [ 914.309705][T22845] ? __fget_files+0x2a/0x420 [ 914.309717][T22845] ? __fget_files+0x2a/0x420 [ 914.309726][T22845] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 914.309736][T22845] ? __fget_files+0x2a/0x420 [ 914.309748][T22845] ? bpf_lsm_file_ioctl+0x9/0x20 [ 914.309760][T22845] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 914.309771][T22845] __se_sys_ioctl+0xfc/0x170 [ 914.309793][T22845] do_syscall_64+0x166/0x520 [ 914.309806][T22845] ? trace_irq_disable+0x3b/0x140 [ 914.309820][T22845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.309832][T22845] ? clear_bhb_loop+0x70/0xc0 [ 914.309845][T22845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.309857][T22845] RIP: 0033:0x7f334ab9e559 [ 914.309869][T22845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 914.309878][T22845] RSP: 002b:00007f334bab4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 914.309890][T22845] RAX: ffffffffffffffda RBX: 00007f334ae26090 RCX: 00007f334ab9e559 [ 914.309898][T22845] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000009 [ 914.309904][T22845] RBP: 00007f334ac358b0 R08: 0000000000000000 R09: 0000000000000000 [ 914.309911][T22845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 914.309918][T22845] R13: 00007f334ae26128 R14: 00007f334ae26090 R15: 00007f334af4fa48 [ 914.309935][T22845] [ 914.310123][T22845] Mem-Info: [ 914.310136][T22845] active_anon:11547 inactive_anon:31 isolated_anon:0 [ 914.310136][T22845] active_file:7322 inactive_file:45962 isolated_file:0 [ 914.310136][T22845] unevictable:190 dirty:182 writeback:0 [ 914.310136][T22845] slab_reclaimable:8436 slab_unreclaimable:112195 [ 914.310136][T22845] mapped:31434 shmem:4817 pagetables:2320 [ 914.310136][T22845] sec_pagetables:0 bounce:0 [ 914.310136][T22845] kernel_misc_reclaimable:0 [ 914.310136][T22845] free:1266598 free_pcp:9429 free_cma:0 [ 914.310189][T22845] Node 0 active_anon:46188kB inactive_anon:124kB active_file:29288kB inactive_file:183372kB unevictable:760kB isolated(anon):0kB isolated(file):0kB mapped:125464kB dirty:728kB writeback:0kB shmem:19268kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16064kB pagetables:9132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 914.310221][T22845] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:476kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:272kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 914.310259][T22845] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 914.310293][T22845] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 914.310314][T22845] Node 0 DMA32 free:1100680kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:46188kB inactive_anon:124kB active_file:29288kB inactive_file:183372kB unevictable:760kB writepending:728kB zspages:1416kB present:3129332kB managed:2527508kB mlocked:0kB bounce:0kB free_pcp:37716kB local_pcp:21392kB free_cma:0kB [ 914.310347][T22845] lowmem_reserve[]: 0 0 0 0 0 [ 914.310366][T22845] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 914.310395][T22845] lowmem_reserve[]: 0 0 0 0 0 [ 914.310414][T22845] Node 1 Normal free:3950352kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:476kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 914.310447][T22845] lowmem_reserve[]: 0 0 0 0 0 [ 914.310660][T22845] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 914.310752][T22845] Node 0 DMA32: 2271*4kB (UME) 2471*8kB (UME) 1796*16kB (UME) 1165*32kB (UME) 362*64kB (UME) 221*128kB (UME) 74*256kB (UME) 77*512kB (UME) 45*1024kB (UME) 23*2048kB (UM) 196*4096kB (UM) = 1100692kB [ 914.310851][T22845] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 914.310928][T22845] Node 1 Normal: 10*4kB (UM) 17*8kB (UM) 16*16kB (UM) 13*32kB (UM) 17*64kB (UM) 13*128kB (UM) 9*256kB (UM) 8*512kB (UM) 4*1024kB (UM) 6*2048kB (UM) 958*4096kB (M) = 3950352kB [ 914.311013][T22845] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 914.311021][T22845] Node 0 hugepages_total=5 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 914.311261][T22845] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 914.311280][T22845] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 914.311309][T22845] 58136 total pagecache pages [ 914.311318][T22845] 42 pages in swap cache [ 914.311326][T22845] Free swap = 80856kB [ 914.311333][T22845] Total swap = 124996kB [ 914.311344][T22845] 2097051 pages RAM [ 914.311352][T22845] 0 pages HighMem/MovableOnly [ 914.311360][T22845] 433558 pages reserved [ 914.311368][T22845] 0 pages cma reserved [ 914.402511][T20719] usb usb5-port1: unable to enumerate USB device [ 914.839156][T10176] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 914.839329][T10176] ath9k_htc: Failed to initialize the device [ 914.846488][ T5670] usb 7-1: ath9k_htc: USB layer deinitialized [ 915.379995][T10176] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 915.548948][T10176] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 915.550419][T10176] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.563758][T10176] usb 7-1: config 0 descriptor?? [ 915.609325][T20484] net_ratelimit: 8 callbacks suppressed [ 915.609338][T20484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.628017][ T5347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.830008][T22852] xt_hashlimit: size too large, truncated to 1048576 [ 916.465101][T22880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.481801][T22880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.563205][T22884] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5185'. [ 916.612230][T22886] netlink: 'syz.4.5186': attribute type 1 has an invalid length. [ 916.648013][T22886] 8021q: adding VLAN 0 to HW filter on device bond2 [ 916.660406][T20719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.681384][T22886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5186'. [ 916.730970][T22886] bond2: (slave bridge3): making interface the new active one [ 916.732739][T22886] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 916.758913][ T6082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.798637][ T5347] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 916.959663][ T5347] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 916.965286][ T5347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.965312][ T5347] usb 3-1: Product: syz [ 916.965349][ T5347] usb 3-1: Manufacturer: syz [ 916.965364][ T5347] usb 3-1: SerialNumber: syz [ 917.004587][T20719] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 917.040058][T22893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.040205][T22893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.040360][T22893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.041350][T22893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.041455][T22893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.041515][T22893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.088933][ T5699] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 917.240157][ T5699] usb 5-1: Using ep0 maxpacket: 8 [ 917.242388][ T5699] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 917.243712][ T5699] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 917.247404][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.247419][ T5699] usb 5-1: Product: syz [ 917.247428][ T5699] usb 5-1: Manufacturer: syz [ 917.247435][ T5699] usb 5-1: SerialNumber: syz [ 917.275191][ T5699] usb 5-1: config 0 descriptor?? [ 917.287464][ T5699] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 917.418983][ T5347] usb 3-1: USB disconnect, device number 73 [ 918.043380][T22895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5190'. [ 918.055541][T22895] dummy0: entered promiscuous mode [ 918.056117][T22895] macvlan2: entered promiscuous mode [ 918.061724][T22895] dummy0: left promiscuous mode [ 918.098718][T20719] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 918.098850][T20719] ath9k_htc: Failed to initialize the device [ 918.101909][ T5347] usb 3-1: ath9k_htc: USB layer deinitialized [ 918.185830][ T5670] usb 7-1: USB disconnect, device number 11 [ 918.302866][T22899] FAULT_INJECTION: forcing a failure. [ 918.302866][T22899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 918.302903][T22899] CPU: 0 UID: 0 PID: 22899 Comm: syz.6.5191 Tainted: G L syzkaller #0 PREEMPT(full) [ 918.302930][T22899] Tainted: [L]=SOFTLOCKUP [ 918.302938][T22899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 918.302949][T22899] Call Trace: [ 918.302957][T22899] [ 918.302967][T22899] dump_stack_lvl+0xe8/0x150 [ 918.303003][T22899] should_fail_ex+0x410/0x560 [ 918.303036][T22899] copy_folio_from_iter_atomic+0x45a/0x1a30 [ 918.303065][T22899] ? __folio_batch_add_and_move+0x760/0xc50 [ 918.303086][T22899] ? filemap_get_entry+0xcd/0x3f0 [ 918.303139][T22899] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 918.303166][T22899] ? __filemap_get_folio_mpol+0x7c8/0x1000 [ 918.303203][T22899] ? simple_write_begin+0x18d/0x4b0 [ 918.303237][T22899] generic_perform_write+0x5c7/0x8f0 [ 918.303271][T22899] ? __pfx_generic_perform_write+0x10/0x10 [ 918.303293][T22899] ? file_update_time_flags+0x1e0/0x440 [ 918.303321][T22899] ? __generic_file_write_iter+0xf9/0x230 [ 918.303341][T22899] ? generic_file_write_iter+0x9a/0x330 [ 918.303365][T22899] generic_file_write_iter+0xae/0x330 [ 918.303390][T22899] vfs_write+0x612/0xba0 [ 918.303420][T22899] ? __pfx_vfs_write+0x10/0x10 [ 918.303451][T22899] ? __fget_files+0x2a/0x420 [ 918.303478][T22899] ksys_write+0x150/0x270 [ 918.303500][T22899] ? __pfx_ksys_write+0x10/0x10 [ 918.303531][T22899] do_syscall_64+0x166/0x520 [ 918.303553][T22899] ? trace_irq_disable+0x3b/0x140 [ 918.303574][T22899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.303595][T22899] ? clear_bhb_loop+0x70/0xc0 [ 918.303617][T22899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.303637][T22899] RIP: 0033:0x7fad1c79e559 [ 918.303655][T22899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.303675][T22899] RSP: 002b:00007fad1d70d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 918.303696][T22899] RAX: ffffffffffffffda RBX: 00007fad1ca25fa0 RCX: 00007fad1c79e559 [ 918.303710][T22899] RDX: 000000000208e24b RSI: 0000200000000200 RDI: 0000000000000005 [ 918.303724][T22899] RBP: 00007fad1d70d090 R08: 0000000000000000 R09: 0000000000000000 [ 918.303737][T22899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 918.303749][T22899] R13: 00007fad1ca26038 R14: 00007fad1ca25fa0 R15: 00007fad1cb4fa48 [ 918.303782][T22899] [ 918.616118][T22913] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5197'. [ 918.616154][T22913] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5197'. [ 918.646801][ T31] kauditd_printk_skb: 47 callbacks suppressed [ 918.646818][ T31] audit: type=1326 audit(1792036773.585:11017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22912 comm="syz.0.5196" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f334ab9e559 code=0x7ffc0000 [ 918.650487][ T31] audit: type=1326 audit(1792036773.585:11018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22912 comm="syz.0.5196" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f334ab9e559 code=0x7ffc0000 [ 918.682036][ T31] audit: type=1326 audit(1792036773.625:11019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22912 comm="syz.0.5196" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f334ab9e559 code=0x7ffc0000 [ 918.732900][ T31] audit: type=1326 audit(1792036773.675:11020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22912 comm="syz.0.5196" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f334ab9e559 code=0x7ffc0000 [ 918.735855][ T31] audit: type=1326 audit(1792036773.675:11021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22912 comm="syz.0.5196" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f334ab9e559 code=0x7ffc0000 [ 918.735926][ T31] audit: type=1326 audit(1792036773.675:11022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22912 comm="syz.0.5196" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f334ab9e559 code=0x7ffc0000 [ 918.735966][ T31] audit: type=1326 audit(1792036773.675:11023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22912 comm="syz.0.5196" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f334ab9e559 code=0x7ffc0000 [ 918.736980][ T31] audit: type=1326 audit(1792036773.675:11024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22912 comm="syz.0.5196" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f334ab9e559 code=0x7ffc0000 [ 918.737051][ T31] audit: type=1326 audit(1792036773.675:11025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22912 comm="syz.0.5196" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f334ab9e559 code=0x7ffc0000 [ 918.813925][ T31] audit: type=1326 audit(1792036773.675:11026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22912 comm="syz.0.5196" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f334ab9e559 code=0x7ffc0000 [ 919.134955][T22928] sctp: [Deprecated]: syz.0.5200 (pid 22928) Use of int in maxseg socket option. [ 919.134955][T22928] Use struct sctp_assoc_value instead [ 919.342880][T22907] kobject_uevent: unable to create netlink socket! [ 919.448335][ T5670] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 919.503984][T22934] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5203'. [ 919.517660][T22934] dummy0: entered promiscuous mode [ 919.520090][T22934] macvlan3: entered promiscuous mode [ 919.542436][T22934] dummy0: left promiscuous mode [ 919.619326][ T5670] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 919.622798][ T5670] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.622825][ T5670] usb 7-1: Product: syz [ 919.622841][ T5670] usb 7-1: Manufacturer: syz [ 919.622856][ T5670] usb 7-1: SerialNumber: syz [ 920.226646][T22956] sctp: [Deprecated]: syz.0.5210 (pid 22956) Use of int in maxseg socket option. [ 920.226646][T22956] Use struct sctp_assoc_value instead [ 920.250644][ T5670] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 920.460811][T22930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.461936][T22930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.486562][T22930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.487207][T22930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.519576][T22969] loop5: detected capacity change from 0 to 7 [ 920.539711][T22969] Dev loop5: unable to read RDB block 7 [ 920.539776][T22969] loop5: unable to read partition table [ 920.539986][T22969] loop5: partition table beyond EOD, truncated [ 920.540005][T22969] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 920.738799][T20709] net_ratelimit: 5142 callbacks suppressed [ 920.738821][T20709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.818587][T20719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.992106][ T5699] gspca_zc3xx: reg_r err -71 [ 920.992195][ T5699] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 921.011332][ T5699] usb 5-1: USB disconnect, device number 105 [ 921.189749][T11277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.321124][ T5670] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 921.321181][ T5670] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 921.321931][ T5670] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 921.326325][ T5670] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 921.860514][T20719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.968181][ T5699] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 922.117906][ T5699] usb 5-1: Using ep0 maxpacket: 32 [ 922.119256][ T5699] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 922.120120][ T5699] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 922.120134][ T5699] usb 5-1: config 0 has no interface number 0 [ 922.120157][ T5699] usb 5-1: config 0 interface 12 has no altsetting 0 [ 922.122710][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.122725][ T5699] usb 5-1: Product: syz [ 922.122734][ T5699] usb 5-1: Manufacturer: syz [ 922.122741][ T5699] usb 5-1: SerialNumber: syz [ 922.127377][ T5699] usb 5-1: config 0 descriptor?? [ 922.234776][T22998] SET target dimension over the limit! [ 922.246030][T22998] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5225'. [ 922.246055][T22998] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5225'. [ 922.299552][T11277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.444559][T20719] usb 7-1: USB disconnect, device number 12 [ 922.609763][T23012] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5230'. [ 922.654463][T23013] netlink: 188 bytes leftover after parsing attributes in process `syz.5.5226'. [ 922.675208][T23008] ip6gretap0: entered promiscuous mode [ 922.867916][T20709] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 922.887959][T20719] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 922.905628][ T7783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.030209][T20709] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 923.048664][T20719] usb 7-1: Using ep0 maxpacket: 8 [ 923.049378][T20719] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 923.051406][T20719] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 923.052072][T20709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.052096][T20709] usb 1-1: Product: syz [ 923.052111][T20709] usb 1-1: Manufacturer: syz [ 923.052125][T20709] usb 1-1: SerialNumber: syz [ 923.056244][T20719] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.056289][T20719] usb 7-1: Product: syz [ 923.056303][T20719] usb 7-1: Manufacturer: syz [ 923.056316][T20719] usb 7-1: SerialNumber: syz [ 923.150849][T20719] usb 7-1: config 0 descriptor?? [ 923.197658][T10176] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 923.215983][T20719] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 923.399441][ T6082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.639290][T20712] usb 1-1: USB disconnect, device number 109 [ 923.778651][T20709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.941002][ T942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.259970][T10176] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 924.260135][T10176] ath9k_htc: Failed to initialize the device [ 924.260941][T20712] usb 1-1: ath9k_htc: USB layer deinitialized [ 924.304401][T23022] netlink: 'syz.5.5233': attribute type 32 has an invalid length. [ 924.440958][T23030] loop3: detected capacity change from 0 to 7 [ 924.445511][T23030] Dev loop3: unable to read RDB block 7 [ 924.445560][T23030] loop3: unable to read partition table [ 924.445748][T23030] loop3: partition table beyond EOD, truncated [ 924.445767][T23030] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 924.577451][T23032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5238'. [ 924.577486][T23032] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5238'. [ 924.742219][T23040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.743263][T23040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 925.597922][ T7783] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 925.638502][T23060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5250'. [ 925.642829][T23060] dummy0: entered promiscuous mode [ 925.643136][T23060] macvlan3: entered promiscuous mode [ 925.644937][T23060] dummy0: left promiscuous mode [ 925.728911][ T942] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 925.750300][ T7783] usb 1-1: Using ep0 maxpacket: 32 [ 925.751092][ T7783] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 925.752280][ T7783] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 925.752311][ T7783] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 925.754274][ T7783] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 925.754300][ T7783] usb 1-1: Product: syz [ 925.754315][ T7783] usb 1-1: Manufacturer: syz [ 925.781815][ T7783] hub 1-1:4.0: USB hub found [ 925.820026][ T5699] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 925.820083][ T5699] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 925.820101][ T5699] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 925.820201][ T5699] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 925.846330][ T5699] usb 5-1: USB disconnect, device number 106 [ 925.878820][ T942] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 925.879956][ T942] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 925.879989][ T942] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 925.880003][ T942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 925.880017][ T942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 925.880050][ T942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 925.880063][ T942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 148, setting to 64 [ 925.880076][ T942] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 925.884557][ T942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.884591][ T942] usb 3-1: Product: syz [ 925.884599][ T942] usb 3-1: Manufacturer: syz [ 925.884621][ T942] usb 3-1: SerialNumber: syz [ 925.886977][ T942] usb 3-1: config 0 descriptor?? [ 925.887648][T23056] raw-gadget.10 gadget.2: fail, usb_ep_enable returned -22 [ 925.897070][T23056] raw-gadget.10 gadget.2: fail, usb_ep_enable returned -22 [ 925.934561][T23064] loop9: detected capacity change from 0 to 7 [ 925.940360][ C1] blk_print_req_error: 30 callbacks suppressed [ 925.940380][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 925.940468][ C1] buffer_io_error: 30 callbacks suppressed [ 925.940479][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 925.941774][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 925.941851][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 925.942020][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 925.942093][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 925.942267][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 925.942333][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 925.942552][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 925.942610][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 925.942790][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 925.942867][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 925.943015][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 925.943085][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 925.943143][T23064] ldm_validate_partition_table(): Disk read failed. [ 925.943234][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 925.943302][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 925.943448][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 925.943515][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 925.943699][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 925.943755][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 925.944035][T23064] Dev loop9: unable to read RDB block 0 [ 925.944814][T23064] loop9: unable to read partition table [ 925.945067][T23064] loop9: partition table beyond EOD, truncated [ 925.945084][T23064] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 925.985186][ T7783] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 926.020325][ T7784] net_ratelimit: 4 callbacks suppressed [ 926.020342][ T7784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.033952][ T7783] usb 1-1: USB disconnect, device number 110 [ 926.161322][T23056] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5248'. [ 926.224806][T23066] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5253'. [ 926.224846][T23066] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5253'. [ 926.456625][T23074] netlink: 'syz.4.5257': attribute type 1 has an invalid length. [ 926.484199][T23074] 8021q: adding VLAN 0 to HW filter on device bond3 [ 926.496669][T23074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5257'. [ 926.498896][ T7783] usb 1-1: new full-speed USB device number 111 using dummy_hcd [ 926.531817][T23074] bond3: (slave bridge4): making interface the new active one [ 926.532987][T23074] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 926.660764][ T7783] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 926.661918][ T7783] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 926.661936][ T7783] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 926.663386][ T7783] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 926.663410][ T7783] usb 1-1: Product: syz [ 926.663420][ T7783] usb 1-1: Manufacturer: syz [ 926.675278][ T7783] hub 1-1:4.0: USB hub found [ 926.711843][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.819797][T20712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.887910][ T5347] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 926.966724][T20719] gspca_zc3xx: reg_r err -71 [ 926.966777][T20719] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 926.980869][T20719] usb 7-1: USB disconnect, device number 13 [ 927.049908][ T5347] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 927.053908][ T5347] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 927.053925][ T5347] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 927.058372][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.066304][ T5347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.066330][ T5347] usb 5-1: Product: syz [ 927.066344][ T5347] usb 5-1: Manufacturer: syz [ 927.066359][ T5347] usb 5-1: SerialNumber: syz [ 927.362058][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 927.396962][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 927.411202][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 927.425660][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 927.427685][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 927.810589][ T6216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.101562][ T7784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.189994][T16299] bond2: (slave syz_tun): Removing an active aggregator [ 928.190470][T16299] bond2: (slave syz_tun): Releasing backup interface [ 928.214217][ T942] rc_core: IR keymap rc-snapstream-firefly not found [ 928.214229][ T942] Registered IR keymap rc-empty [ 928.215982][ T942] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 928.253682][ T942] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input71 [ 928.284057][T10176] usb 6-1: USB disconnect, device number 12 [ 928.323878][ T942] input: syz syz mouse as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input72 [ 928.375955][ T942] usb 3-1: USB disconnect, device number 74 [ 928.376035][ C1] ati_remote 3-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 928.599872][T23108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5267'. [ 928.599907][T23108] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5267'. [ 928.613100][T23085] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.613269][T23085] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.613651][T23085] bridge_slave_0: entered allmulticast mode [ 928.615350][T23085] bridge_slave_0: entered promiscuous mode [ 928.618769][T23085] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.618869][T23085] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.618999][T23085] bridge_slave_1: entered allmulticast mode [ 928.621298][T23085] bridge_slave_1: entered promiscuous mode [ 928.668127][T20712] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 928.713463][T23085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 928.722420][T23085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 928.748268][ T7783] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 928.800011][ T7783] usb 1-1: USB disconnect, device number 111 [ 928.822206][T20712] usb 7-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 928.823289][T20712] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.873378][T20712] usb-storage 7-1:1.0: USB Mass Storage device detected [ 928.876779][T23085] team0: Port device team_slave_0 added [ 928.897554][T23085] team0: Port device team_slave_1 added [ 928.918505][ T6082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.938748][ T5347] usb 5-1: 0:1 : does not exist [ 928.940485][ T5347] usb 5-1: unit 9 not found! [ 928.940506][ T5347] usb 5-1: unit 0 not found! [ 929.048805][ T5347] usb 5-1: USB disconnect, device number 107 [ 929.073075][T20712] scsi host1: usb-storage 7-1:1.0 [ 929.075924][T23085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 929.075940][T23085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 929.075967][T23085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 929.141554][ T7783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.176248][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 929.197183][T23085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 929.197200][T23085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 929.197226][T23085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 929.279139][T20712] usb 7-1: USB disconnect, device number 14 [ 929.319142][T23085] hsr_slave_0: entered promiscuous mode [ 929.319924][T23085] hsr_slave_1: entered promiscuous mode [ 929.320346][T23085] debugfs: 'hsr0' already exists in 'hsr' [ 929.320365][T23085] Cannot create hsr debugfs directory [ 929.438218][T10176] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 929.540365][T15111] Bluetooth: hci4: command tx timeout [ 929.546751][ T5670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.584545][T23085] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 929.584582][T23085] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.629283][T10176] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 929.630408][T10176] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 929.630451][T10176] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 929.630477][T10176] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 929.630503][T10176] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 929.630528][T10176] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 929.630553][T10176] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 148, setting to 64 [ 929.630578][T10176] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 929.639241][T10176] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.639265][T10176] usb 1-1: Product: syz [ 929.639279][T10176] usb 1-1: Manufacturer: syz [ 929.639292][T10176] usb 1-1: SerialNumber: syz [ 929.643707][T10176] usb 1-1: config 0 descriptor?? [ 929.644423][T23117] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 929.644548][T23117] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 929.855787][T23085] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 929.855823][T23085] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.869345][ T5670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.893773][T23117] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5269'. [ 930.202662][T23085] team0: Port device netdevsim1 removed [ 930.206406][T23085] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 930.206439][T23085] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.390916][T23132] FAULT_INJECTION: forcing a failure. [ 930.390916][T23132] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 930.390941][T23132] CPU: 1 UID: 0 PID: 23132 Comm: syz.2.5275 Tainted: G L syzkaller #0 PREEMPT(full) [ 930.390957][T23132] Tainted: [L]=SOFTLOCKUP [ 930.390961][T23132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 930.390968][T23132] Call Trace: [ 930.390973][T23132] [ 930.390978][T23132] dump_stack_lvl+0xe8/0x150 [ 930.390998][T23132] should_fail_ex+0x410/0x560 [ 930.391024][T23132] prepare_alloc_pages+0x223/0x600 [ 930.391042][T23132] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 930.391059][T23132] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 930.391074][T23132] ? __pfx_policy_nodemask+0x10/0x10 [ 930.391095][T23132] alloc_pages_mpol+0x21e/0x390 [ 930.391113][T23132] alloc_pages_noprof+0xb1/0x2b0 [ 930.391129][T23132] folio_alloc_noprof+0x1e/0x30 [ 930.391144][T23132] filemap_alloc_folio_noprof+0x111/0x460 [ 930.391176][T23132] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 930.391204][T23132] __filemap_get_folio_mpol+0x402/0x1000 [ 930.391225][T23132] simple_write_begin+0x65/0x4b0 [ 930.391244][T23132] generic_perform_write+0x2d5/0x8f0 [ 930.391262][T23132] ? __pfx_generic_perform_write+0x10/0x10 [ 930.391274][T23132] ? file_update_time_flags+0x3ab/0x440 [ 930.391289][T23132] ? __generic_file_write_iter+0xf9/0x230 [ 930.391299][T23132] ? generic_file_write_iter+0x9a/0x330 [ 930.391312][T23132] generic_file_write_iter+0xae/0x330 [ 930.391326][T23132] vfs_write+0x612/0xba0 [ 930.391342][T23132] ? __pfx_vfs_write+0x10/0x10 [ 930.391359][T23132] ? __fget_files+0x2a/0x420 [ 930.391374][T23132] ksys_write+0x150/0x270 [ 930.391387][T23132] ? __pfx_ksys_write+0x10/0x10 [ 930.391404][T23132] do_syscall_64+0x166/0x520 [ 930.391417][T23132] ? trace_irq_disable+0x3b/0x140 [ 930.391429][T23132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.391440][T23132] ? clear_bhb_loop+0x70/0xc0 [ 930.391453][T23132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.391464][T23132] RIP: 0033:0x7f5d2479e559 [ 930.391475][T23132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 930.391484][T23132] RSP: 002b:00007f5d2565f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 930.391496][T23132] RAX: ffffffffffffffda RBX: 00007f5d24a25fa0 RCX: 00007f5d2479e559 [ 930.391507][T23132] RDX: 000000000208e24b RSI: 0000200000000200 RDI: 0000000000000005 [ 930.391517][T23132] RBP: 00007f5d2565f090 R08: 0000000000000000 R09: 0000000000000000 [ 930.391524][T23132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 930.391530][T23132] R13: 00007f5d24a26038 R14: 00007f5d24a25fa0 R15: 00007f5d24b4fa48 [ 930.391548][T23132] [ 930.777144][T23085] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 930.777170][T23085] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.791984][T23135] loop5: detected capacity change from 0 to 7 [ 930.792786][T23135] Dev loop5: unable to read RDB block 7 [ 930.792824][T23135] loop5: unable to read partition table [ 930.793004][T23135] loop5: partition table beyond EOD, truncated [ 930.793020][T23135] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 930.946949][T23139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5278'. [ 930.968095][T23139] macvlan2: entered promiscuous mode [ 930.968119][T23139] bond0: entered promiscuous mode [ 930.968133][T23139] bond_slave_0: entered promiscuous mode [ 930.968342][T23139] bond_slave_1: entered promiscuous mode [ 930.971812][T23139] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 930.972542][T23139] bond0: left promiscuous mode [ 931.067501][ T942] bond_slave_0: left promiscuous mode [ 931.067529][ T942] bond_slave_1: left promiscuous mode [ 931.200699][T11277] net_ratelimit: 2 callbacks suppressed [ 931.200713][T11277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.222559][ T942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.486972][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.487009][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.618059][T15111] Bluetooth: hci4: command tx timeout [ 931.763935][T23085] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 931.790593][T23085] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 931.793443][T23085] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 931.818448][T20712] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 931.820660][T23085] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 931.823230][T23085] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 931.867358][T23085] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 931.876420][T23085] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 931.904131][T23085] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 931.948085][T10176] rc_core: IR keymap rc-snapstream-firefly not found [ 931.948107][T10176] Registered IR keymap rc-empty [ 931.949372][T10176] rc rc0: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 931.955343][T10176] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input73 [ 931.981086][T20712] usb 3-1: Using ep0 maxpacket: 8 [ 931.984071][T20712] usb 3-1: New USB device found, idVendor=1bc7, idProduct=10d0, bcdDevice=5d.9a [ 932.011618][T20712] usb 3-1: config 0 interface 0 altsetting 107 has an invalid descriptor for endpoint zero, skipping [ 932.011720][T20712] usb 3-1: config 0 interface 0 altsetting 107 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 932.011750][T20712] usb 3-1: config 0 interface 0 altsetting 107 bulk endpoint 0xE has invalid maxpacket 1024 [ 932.011776][T20712] usb 3-1: config 0 interface 0 has no altsetting 0 [ 932.015109][T20712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.015249][T20712] usb 3-1: Product: syz [ 932.015265][T20712] usb 3-1: Manufacturer: syz [ 932.015280][T20712] usb 3-1: SerialNumber: syz [ 932.085924][T10176] input: syz syz mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input74 [ 932.106856][T20712] usb 3-1: config 0 descriptor?? [ 932.111223][T23151] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 932.111570][T23151] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 932.150941][T10176] usb 1-1: USB disconnect, device number 112 [ 932.151047][ C0] ati_remote 1-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 932.179524][ T4966] ati_remote 1-1:0.0: ati_remote_open: usb_submit_urb failed! [ 932.259482][ T942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.314173][T19100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.424908][T23085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 932.428661][T20712] usb 3-1: USB disconnect, device number 75 [ 932.474232][T23085] 8021q: adding VLAN 0 to HW filter on device team0 [ 932.493097][T20484] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.493194][T20484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 932.511729][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.511851][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 932.626160][T23085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 932.691897][T23085] veth0_vlan: entered promiscuous mode [ 932.699421][T23085] veth1_vlan: entered promiscuous mode [ 932.723923][T23085] veth0_macvtap: entered promiscuous mode [ 932.727457][T23085] veth1_macvtap: entered promiscuous mode [ 932.740418][T23085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 932.762821][T23085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 932.778244][T10176] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 932.870826][T20484] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.871005][ T6216] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.871042][ T6216] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.871075][ T6216] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.912332][T20711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.941662][T10176] usb 7-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 932.944273][T10176] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 932.944305][T10176] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 932.944320][T10176] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 932.944334][T10176] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 932.944348][T10176] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 932.944361][T10176] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 148, setting to 64 [ 932.944374][T10176] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 932.946266][T10176] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.946288][T10176] usb 7-1: Product: syz [ 932.946296][T10176] usb 7-1: Manufacturer: syz [ 932.946304][T10176] usb 7-1: SerialNumber: syz [ 932.949977][T10176] usb 7-1: config 0 descriptor?? [ 932.981285][T23168] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 932.981400][T23168] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 933.023019][ T6216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.023041][ T6216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.166986][ T6216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.167009][ T6216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.236392][T23168] netlink: 168 bytes leftover after parsing attributes in process `syz.6.5285'. [ 933.304330][ T5347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.419037][T20484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.538457][ T942] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 933.637540][T23174] atomic_op ffff88807e2ad9e0 conn xmit_atomic 0000000000000000 [ 933.688198][ T942] usb 1-1: Using ep0 maxpacket: 8 [ 933.688859][ T942] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 933.689023][ T5347] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 933.689992][ T942] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 933.690016][ T942] usb 1-1: config 0 has no interface number 0 [ 933.691860][ T942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.691885][ T942] usb 1-1: Product: syz [ 933.691899][ T942] usb 1-1: Manufacturer: syz [ 933.691914][ T942] usb 1-1: SerialNumber: syz [ 933.693721][ T942] usb 1-1: config 0 descriptor?? [ 933.698074][T20713] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 933.698203][T15111] Bluetooth: hci4: command tx timeout [ 933.868614][T20713] usb 6-1: device descriptor read/64, error -71 [ 933.869401][ T5347] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 933.870577][ T5347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 933.870607][ T5347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 933.870668][ T5347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.874974][ T5347] usb 5-1: config 0 descriptor?? [ 933.923299][T23179] gre0: left promiscuous mode [ 933.925126][T23179] ip6tnl0: left promiscuous mode [ 933.996129][T10175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.007559][T23179] bridge1: left promiscuous mode [ 934.009423][T23179] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 934.123687][T20713] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 934.267935][T20713] usb 6-1: device descriptor read/64, error -71 [ 934.361367][ T5347] savu 0003:1E7D:2D5A.002B: unknown main item tag 0x0 [ 934.361406][ T5347] savu 0003:1E7D:2D5A.002B: unknown main item tag 0x0 [ 934.361432][ T5347] savu 0003:1E7D:2D5A.002B: unknown main item tag 0x0 [ 934.361482][ T5347] savu 0003:1E7D:2D5A.002B: unknown main item tag 0x0 [ 934.361508][ T5347] savu 0003:1E7D:2D5A.002B: unknown main item tag 0x0 [ 934.361532][ T5347] savu 0003:1E7D:2D5A.002B: unknown main item tag 0x0 [ 934.361558][ T5347] savu 0003:1E7D:2D5A.002B: unknown main item tag 0x0 [ 934.361583][ T5347] savu 0003:1E7D:2D5A.002B: unknown main item tag 0x0 [ 934.361633][ T5347] savu 0003:1E7D:2D5A.002B: unknown main item tag 0x0 [ 934.361659][ T5347] savu 0003:1E7D:2D5A.002B: unknown main item tag 0x0 [ 934.375349][ T7783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.388254][T20713] usb usb6-port1: attempt power cycle [ 934.398736][ T5347] savu 0003:1E7D:2D5A.002B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 934.617167][ T5347] usb 5-1: USB disconnect, device number 108 [ 934.748367][T20713] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 934.769727][T20713] usb 6-1: device descriptor read/8, error -71 [ 935.007984][T20713] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 935.030267][T20713] usb 6-1: device descriptor read/8, error -71 [ 935.138438][T20713] usb usb6-port1: unable to enumerate USB device [ 935.258110][T10176] rc_core: IR keymap rc-snapstream-firefly not found [ 935.258130][T10176] Registered IR keymap rc-empty [ 935.259954][T10176] rc rc0: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 935.291420][T10176] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input75 [ 935.341958][T10176] input: syz syz mouse as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input76 [ 935.375460][T10176] usb 7-1: USB disconnect, device number 15 [ 935.375537][ C0] ati_remote 7-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 935.396112][ T4966] ati_remote 7-1:0.0: ati_remote_open: usb_submit_urb failed! [ 935.549127][T23228] netlink: 'syz.4.5301': attribute type 1 has an invalid length. [ 935.552609][T23228] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5301'. [ 935.787990][T15111] Bluetooth: hci4: command tx timeout [ 936.376767][ T942] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 936.376839][ T942] uvcvideo 1-1:0.31: Entity type for entity Output 32774 was not initialized! [ 936.376954][ T942] uvcvideo 1-1:0.31: Failed to create links for entity 5 [ 936.376971][ T942] uvcvideo 1-1:0.31: Failed to register entities (-22). [ 936.402711][ T942] usb 1-1: USB disconnect, device number 113 [ 936.418594][ T5347] net_ratelimit: 5 callbacks suppressed [ 936.418612][ T5347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.505731][T23241] FAULT_INJECTION: forcing a failure. [ 936.505731][T23241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 936.505755][T23241] CPU: 1 UID: 0 PID: 23241 Comm: syz.2.5305 Tainted: G L syzkaller #0 PREEMPT(full) [ 936.505771][T23241] Tainted: [L]=SOFTLOCKUP [ 936.505775][T23241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 936.505782][T23241] Call Trace: [ 936.505787][T23241] [ 936.505792][T23241] dump_stack_lvl+0xe8/0x150 [ 936.505812][T23241] should_fail_ex+0x410/0x560 [ 936.505831][T23241] copy_folio_from_iter_atomic+0x45a/0x1a30 [ 936.505847][T23241] ? __folio_batch_add_and_move+0x760/0xc50 [ 936.505869][T23241] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 936.505884][T23241] ? __filemap_get_folio_mpol+0x7c8/0x1000 [ 936.505919][T23241] ? simple_write_begin+0x200/0x4b0 [ 936.505952][T23241] generic_perform_write+0x5c7/0x8f0 [ 936.505991][T23241] ? __pfx_generic_perform_write+0x10/0x10 [ 936.506012][T23241] ? file_update_time_flags+0x1e0/0x440 [ 936.506039][T23241] ? __generic_file_write_iter+0xf9/0x230 [ 936.506050][T23241] ? generic_file_write_iter+0x9a/0x330 [ 936.506063][T23241] generic_file_write_iter+0xae/0x330 [ 936.506077][T23241] vfs_write+0x612/0xba0 [ 936.506093][T23241] ? __pfx_vfs_write+0x10/0x10 [ 936.506110][T23241] ? __fget_files+0x2a/0x420 [ 936.506125][T23241] ksys_write+0x150/0x270 [ 936.506138][T23241] ? __pfx_ksys_write+0x10/0x10 [ 936.506156][T23241] do_syscall_64+0x166/0x520 [ 936.506168][T23241] ? trace_irq_disable+0x3b/0x140 [ 936.506180][T23241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.506191][T23241] ? clear_bhb_loop+0x70/0xc0 [ 936.506205][T23241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.506216][T23241] RIP: 0033:0x7f5d2479e559 [ 936.506227][T23241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 936.506237][T23241] RSP: 002b:00007f5d2565f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 936.506250][T23241] RAX: ffffffffffffffda RBX: 00007f5d24a25fa0 RCX: 00007f5d2479e559 [ 936.506258][T23241] RDX: 000000000208e24b RSI: 0000200000000200 RDI: 0000000000000005 [ 936.506266][T23241] RBP: 00007f5d2565f090 R08: 0000000000000000 R09: 0000000000000000 [ 936.506273][T23241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 936.506279][T23241] R13: 00007f5d24a26038 R14: 00007f5d24a25fa0 R15: 00007f5d24b4fa48 [ 936.506298][T23241] [ 936.750255][T20484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.840495][T23240] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5303'. [ 936.858296][ T942] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 937.008210][ T942] usb 1-1: Using ep0 maxpacket: 32 [ 937.009149][ T942] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 937.010141][ T942] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 937.010168][ T942] usb 1-1: config 0 has no interface number 0 [ 937.010209][ T942] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 937.012879][ T942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.012903][ T942] usb 1-1: Product: syz [ 937.012917][ T942] usb 1-1: Manufacturer: syz [ 937.012927][ T942] usb 1-1: SerialNumber: syz [ 937.092171][ T942] usb 1-1: config 0 descriptor?? [ 937.092876][T23244] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 937.129628][ T31] kauditd_printk_skb: 57 callbacks suppressed [ 937.129650][ T31] audit: type=1326 audit(1792036792.065:11084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23232 comm="syz.4.5302" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26e79e559 code=0x7ffc0000 [ 937.129694][ T31] audit: type=1326 audit(1792036792.065:11085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23232 comm="syz.4.5302" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26e79e559 code=0x7ffc0000 [ 937.153847][ T31] audit: type=1326 audit(1792036792.095:11086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23232 comm="syz.4.5302" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe26e79e559 code=0x7ffc0000 [ 937.153918][ T31] audit: type=1326 audit(1792036792.095:11087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23232 comm="syz.4.5302" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26e79e559 code=0x7ffc0000 [ 937.153957][ T31] audit: type=1326 audit(1792036792.095:11088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23232 comm="syz.4.5302" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26e79e559 code=0x7ffc0000 [ 937.285467][T23233] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5302'. [ 937.315257][T23233] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5302'. [ 937.329068][T23244] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 937.458697][ T5347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.542222][ T942] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 937.542368][ T942] asix 1-1:0.188: probe with driver asix failed with error -61 [ 937.793954][T23244] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 937.846260][T23260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 937.851102][T23244] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 937.860110][ T6216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.219498][ T942] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 938.368517][T20711] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 938.379483][ T942] usb 5-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00 [ 938.385072][ T942] usb 5-1: too many endpoints for config 0 interface 0 altsetting 5: 66, using maximum allowed: 30 [ 938.385116][ T942] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.385142][ T942] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 66 [ 938.385167][ T942] usb 5-1: config 0 interface 0 has no altsetting 0 [ 938.385199][ T942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.403190][ T942] usb 5-1: config 0 descriptor?? [ 938.500485][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.531151][T20711] usb 7-1: unable to get BOS descriptor or descriptor too short [ 938.531201][T20711] usb 7-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 938.532603][T20711] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 938.535705][T20711] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.535730][T20711] usb 7-1: Product: syz [ 938.535745][T20711] usb 7-1: Manufacturer: syz [ 938.535759][T20711] usb 7-1: SerialNumber: syz [ 938.872277][ T942] input: HID 0738:1709 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0738:1709.002C/input/input77 [ 938.983426][T20713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.984813][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.021289][ T942] saitek 0003:0738:1709.002C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0738:1709] on usb-dummy_hcd.4-1/input0 [ 939.139344][T10176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.217505][ T5699] usb 5-1: USB disconnect, device number 109 [ 939.316877][T23286] fido_id[23286]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 939.538789][ T942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.833401][T20711] usb 7-1: unable to issue vendor read request (ret = -71) [ 939.834785][T20711] usb 7-1: unable to issue vendor read request (ret = -71) [ 939.836806][T20711] usb 7-1: unable to issue vendor read request (ret = -71) [ 939.863665][T20709] usb 1-1: USB disconnect, device number 114 [ 940.028468][T20711] usb 7-1: USB disconnect, device number 16 [ 940.104522][T23301] loop9: detected capacity change from 0 to 7 [ 940.113989][ C0] blk_print_req_error: 10 callbacks suppressed [ 940.114010][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 940.114081][ C0] buffer_io_error: 10 callbacks suppressed [ 940.114093][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 940.129798][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 940.129890][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 940.139714][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 940.139783][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 940.140964][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 940.141049][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 940.171111][T23302] loop5: detected capacity change from 0 to 7 [ 940.179617][T23302] Dev loop5: unable to read RDB block 7 [ 940.179660][T23302] loop5: unable to read partition table [ 940.179862][T23302] loop5: partition table beyond EOD, truncated [ 940.179880][T23302] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 940.270180][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 940.270280][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 940.270587][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 940.270682][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 940.273040][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 940.273082][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 940.274230][T23301] ldm_validate_partition_table(): Disk read failed. [ 940.274471][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 940.274571][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 940.288782][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 940.288852][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 940.288999][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 940.289056][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 940.289262][T23301] Dev loop9: unable to read RDB block 0 [ 940.293103][T23301] loop9: unable to read partition table [ 940.293299][T23301] loop9: partition table beyond EOD, truncated [ 940.293331][T23301] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 940.378842][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 940.833739][T23309] netlink: 'syz.4.5316': attribute type 1 has an invalid length. [ 940.873154][ T942] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 940.931499][T23313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5316'. [ 940.974212][T20709] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 940.984847][T23309] 8021q: adding VLAN 0 to HW filter on device bond4 [ 941.038771][ T942] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 941.039954][ T942] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 941.039995][ T942] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 941.041067][ T942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 941.041084][ T942] usb 1-1: SerialNumber: syz [ 941.046583][ T942] hub 1-1:1.0: bad descriptor, ignoring hub [ 941.046599][ T942] hub 1-1:1.0: probe with driver hub failed with error -5 [ 941.143804][T20709] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 941.148095][T20709] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 941.148120][T20709] usb 7-1: config 0 has no interface number 0 [ 941.148160][T20709] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 941.148183][T20709] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 941.150984][T20709] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.151009][T20709] usb 7-1: Product: syz [ 941.151023][T20709] usb 7-1: Manufacturer: syz [ 941.151037][T20709] usb 7-1: SerialNumber: syz [ 941.154206][T20709] usb 7-1: config 0 descriptor?? [ 941.155027][T23308] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 941.157234][T20709] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 941.323797][T20709] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 941.388938][T23309] bond4: (slave bridge5): making interface the new active one [ 941.396414][T23309] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 941.441911][T23308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.442317][T23308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.488853][T23304] net_ratelimit: 4 callbacks suppressed [ 941.488875][T23304] socket: no more sockets [ 941.619396][ T5347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.696393][T20713] usb 7-1: USB disconnect, device number 17 [ 941.751429][T20713] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 941.795366][T20713] cyberjack 7-1:0.69: device disconnected [ 942.022693][ T5699] usb 1-1: USB disconnect, device number 115 [ 942.065361][T20709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.183511][T23333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.183628][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.348375][ T6216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.660198][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.513036][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.699631][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.100312][T23356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.178203][ T5699] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 944.328190][ T5699] usb 5-1: Using ep0 maxpacket: 16 [ 944.333983][ T5699] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 944.335416][ T5699] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 944.335441][ T5699] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 944.335460][ T5699] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 944.335479][ T5699] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 944.335498][ T5699] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 944.335518][ T5699] usb 5-1: config 0 has no interface number 0 [ 944.335557][ T5699] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 944.335584][ T5699] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 944.335605][ T5699] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 944.335637][ T5699] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 944.335663][ T5699] usb 5-1: config 0 interface 125 has no altsetting 0 [ 944.335681][ T5699] usb 5-1: config 0 interface 125 has no altsetting 2 [ 944.344251][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.344276][ T5699] usb 5-1: Product: syz [ 944.344290][ T5699] usb 5-1: Manufacturer: syz [ 944.344306][ T5699] usb 5-1: SerialNumber: syz [ 944.493078][ T5699] usb 5-1: config 0 descriptor?? [ 944.510379][ T5699] usb 5-1: selecting invalid altsetting 2 [ 944.580728][T23386] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5338'. [ 944.600252][T23386] macvlan2: entered promiscuous mode [ 944.600277][T23386] bond0: entered promiscuous mode [ 944.600292][T23386] bond_slave_0: entered promiscuous mode [ 944.600507][T23386] bond_slave_1: entered promiscuous mode [ 944.602299][T23386] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 944.602996][T23386] bond0: left promiscuous mode [ 944.670896][T20709] bond_slave_0: left promiscuous mode [ 944.670925][T20709] bond_slave_1: left promiscuous mode [ 944.705769][ C1] usb 5-1: async_complete: urb error -71 [ 944.705939][ C1] usb 5-1: async_complete: urb error -71 [ 944.706033][ C1] usb 5-1: async_complete: urb error -71 [ 944.706131][ C1] usb 5-1: async_complete: urb error -71 [ 944.734247][ T5699] get_1284_register: usb error -71 [ 944.758476][ T5699] usb 5-1: USB disconnect, device number 110 [ 944.877320][ T6082] IPVS: starting estimator thread 0... [ 944.878333][T20713] usb 3-1: new low-speed USB device number 76 using dummy_hcd [ 944.959495][T23396] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[23085] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ     rr @  @       rr s     5 %½p ûÛß% \x07 gF- [ 944.977176][T23398] IPVS: using max 52 ests per chain, 124800 per kthread [ 945.080487][T20713] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 945.081420][T20713] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 945.081444][T20713] usb 3-1: config 0 has no interface number 0 [ 945.081483][T20713] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 945.081502][T20713] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 945.081516][T20713] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 945.081529][T20713] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 945.081542][T20713] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 945.081556][T20713] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 945.081578][T20713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.083524][T20713] usb 3-1: config 0 descriptor?? [ 945.085822][T23388] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 945.085955][T23388] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 945.136157][T20713] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 945.208444][T20711] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 945.322965][T23388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.324405][T23388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.346808][T20713] usb 3-1: USB disconnect, device number 76 [ 945.360819][T20713] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 945.370070][T20711] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 945.374725][T20711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.374750][T20711] usb 6-1: Product: syz [ 945.374764][T20711] usb 6-1: Manufacturer: syz [ 945.374777][T20711] usb 6-1: SerialNumber: syz [ 945.470747][T20711] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 945.594510][T23414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.594987][T23414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.829101][ T5347] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 945.943182][T23396] netlink: 'syz.5.5342': attribute type 12 has an invalid length. [ 945.988565][ T5347] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 945.992801][ T5347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.017221][ T5347] usb 5-1: config 0 descriptor?? [ 946.051935][T20713] usb 6-1: USB disconnect, device number 17 [ 946.225788][ T5347] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 946.335243][T15111] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 946.409415][ T31] audit: type=1326 audit(1792036801.355:11089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23430 comm="syz.0.5354" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f334ab9e559 code=0x0 [ 946.453406][T23434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.453812][T23434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 946.478495][ T5347] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 946.478521][ T5347] [drm] Initialized udl on minor 1 [ 946.511254][T20711] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 946.511393][T20711] ath9k_htc: Failed to initialize the device [ 946.512766][T20713] usb 6-1: ath9k_htc: USB layer deinitialized [ 946.638099][ T5699] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 946.667087][ T5347] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 946.667357][ T5347] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 946.690902][ T942] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 946.691180][ T5347] usb 5-1: USB disconnect, device number 111 [ 946.703732][ T942] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 946.703924][ T942] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 946.808076][ T5699] usb 3-1: Using ep0 maxpacket: 32 [ 946.810562][ T5699] usb 3-1: unable to get BOS descriptor or descriptor too short [ 946.810610][ T5699] usb 3-1: New USB device found, idVendor=0005, idProduct=0000, bcdDevice=a1.d4 [ 946.810644][ T5699] usb 3-1: too many configurations: 227, using maximum allowed: 8 [ 946.815229][ T5699] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 946.815266][ T5699] usb 3-1: can't read configurations, error -61 [ 946.820173][ T7783] net_ratelimit: 347 callbacks suppressed [ 946.820189][ T7783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.901697][T23442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.901795][T23442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.901910][T23442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.938185][ T5699] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 946.979089][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.087915][ T5699] usb 3-1: Using ep0 maxpacket: 32 [ 947.090954][ T5699] usb 3-1: unable to get BOS descriptor or descriptor too short [ 947.090996][ T5699] usb 3-1: New USB device found, idVendor=0005, idProduct=0000, bcdDevice=a1.d4 [ 947.091017][ T5699] usb 3-1: too many configurations: 227, using maximum allowed: 8 [ 947.094982][ T5699] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 947.095004][ T5699] usb 3-1: can't read configurations, error -61 [ 947.096287][ T5699] usb usb3-port1: attempt power cycle [ 947.428155][ T5699] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 947.451066][ T5699] usb 3-1: Using ep0 maxpacket: 32 [ 947.455092][ T5699] usb 3-1: unable to get BOS descriptor or descriptor too short [ 947.455143][ T5699] usb 3-1: New USB device found, idVendor=0005, idProduct=0000, bcdDevice=a1.d4 [ 947.455177][ T5699] usb 3-1: too many configurations: 227, using maximum allowed: 8 [ 947.474553][ T5699] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 947.474591][ T5699] usb 3-1: can't read configurations, error -61 [ 947.628335][ T5699] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 947.648900][ T5699] usb 3-1: Using ep0 maxpacket: 32 [ 947.653296][ T5699] usb 3-1: unable to get BOS descriptor or descriptor too short [ 947.653343][ T5699] usb 3-1: New USB device found, idVendor=0005, idProduct=0000, bcdDevice=a1.d4 [ 947.653376][ T5699] usb 3-1: too many configurations: 227, using maximum allowed: 8 [ 947.655981][ T5699] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 947.656015][ T5699] usb 3-1: can't read configurations, error -61 [ 947.656366][ T5699] usb usb3-port1: unable to enumerate USB device [ 947.870547][ T5347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.978064][ T5699] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 948.102364][ T6216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.138797][ T5699] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 948.144126][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.144156][ T5699] usb 5-1: Product: syz [ 948.144171][ T5699] usb 5-1: Manufacturer: syz [ 948.144186][ T5699] usb 5-1: SerialNumber: syz [ 948.200209][T20711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.317959][ T5347] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 948.403043][T23457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 948.417281][T23457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 948.469009][ T5347] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 948.471014][ T5347] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 948.471123][ T5347] usb 6-1: config 0 has no interface number 0 [ 948.474363][ T5347] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.474388][ T5347] usb 6-1: Product: syz [ 948.474404][ T5347] usb 6-1: Manufacturer: syz [ 948.474419][ T5347] usb 6-1: SerialNumber: syz [ 948.503780][ T5347] usb 6-1: config 0 descriptor?? [ 948.584336][T23470] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5365'. [ 948.584373][T23470] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5365'. [ 948.633846][ T5699] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 948.633935][ T5699] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 948.738196][T20711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.781395][T23475] syzkaller0: entered promiscuous mode [ 948.781417][T23475] syzkaller0: entered allmulticast mode [ 948.784721][T23477] tipc: Started in network mode [ 948.784750][T23477] tipc: Node identity 9e96098dd7b2, cluster identity 4711 [ 948.784892][T23477] tipc: Enabled bearer , priority 0 [ 948.869160][ T5347] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 948.885944][ T5347] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 948.886386][ T5347] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 948.886455][ T5347] usb 6-1: media controller created [ 948.935172][ T5347] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 949.778386][T20709] tipc: Node number set to 1227098509 [ 949.783597][T23471] cgroup: fork rejected by pids controller in /syz5 [ 949.818000][ T5347] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 949.967884][ T5347] usb 3-1: Using ep0 maxpacket: 8 [ 949.968975][ T5347] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 949.972300][ T5347] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 949.972344][ T5347] usb 3-1: config 0 has no interface number 0 [ 949.977396][ T5347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.977423][ T5347] usb 3-1: Product: syz [ 949.977462][ T5347] usb 3-1: Manufacturer: syz [ 949.977477][ T5347] usb 3-1: SerialNumber: syz [ 950.039138][ T5347] usb 3-1: config 0 descriptor?? [ 950.265718][ T5699] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 950.279566][ T5699] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 950.312870][ T5699] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 950.342308][T15111] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 950.342470][T15111] Bluetooth: hci0: Injecting HCI hardware error event [ 950.345275][T15111] Bluetooth: hci0: hardware error 0x00 [ 950.377028][ T5699] usb 5-1: USB disconnect, device number 112 [ 951.007919][T20711] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 951.189058][T20711] usb 7-1: Using ep0 maxpacket: 8 [ 951.191522][T20711] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 951.194308][T20711] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 951.194340][T20711] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 951.194364][T20711] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 951.194387][T20711] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 951.194427][T20711] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.296177][T23543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.310798][T23543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 951.464655][T20711] usb 7-1: usb_control_msg returned -71 [ 951.464704][T20711] usbtmc 7-1:16.0: can't read capabilities [ 951.477718][T20711] usb 7-1: USB disconnect, device number 18 [ 951.532294][T20713] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 951.678351][T20713] usb 5-1: Using ep0 maxpacket: 16 [ 951.679097][T20713] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 951.682109][T20713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.682136][T20713] usb 5-1: Product: syz [ 951.682151][T20713] usb 5-1: Manufacturer: syz [ 951.682165][T20713] usb 5-1: SerialNumber: syz [ 951.684583][T20713] usb 5-1: config 0 descriptor?? [ 951.797212][T20711] usb 6-1: USB disconnect, device number 18 [ 952.020053][ T5699] net_ratelimit: 13 callbacks suppressed [ 952.020111][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.088589][T20713] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 952.092008][T20713] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 952.092786][T20713] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 952.092835][T20713] usb 5-1: media controller created [ 952.114047][T20713] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 952.230133][T20711] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 952.342128][T23548] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 952.358621][T20709] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 952.377853][T20711] usb 6-1: Using ep0 maxpacket: 16 [ 952.378564][T20711] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 952.379678][T20711] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 952.379730][T20711] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.382449][T20711] usb 6-1: config 0 descriptor?? [ 952.424278][T15111] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 952.487916][T20709] usb 7-1: device descriptor read/64, error -71 [ 952.558350][T11277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.577601][ T5347] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 952.577648][ T5347] uvcvideo 3-1:0.31: Entity type for entity Output 32774 was not initialized! [ 952.577919][ T5347] uvcvideo 3-1:0.31: Failed to create links for entity 5 [ 952.577937][ T5347] uvcvideo 3-1:0.31: Failed to register entities (-22). [ 952.592487][ T5347] usb 3-1: USB disconnect, device number 81 [ 952.670151][T20713] zl10353_read_register: readreg error (reg=127, ret==0) [ 952.670231][T20713] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 952.670245][T20713] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 952.670496][T23543] dtv5100: wlen = 0, aborting. [ 952.767974][T20709] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 952.807624][T20711] mcp2221 0003:04D8:00DD.002D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 952.911484][T20709] usb 7-1: device descriptor read/64, error -71 [ 953.018701][T20709] usb usb7-port1: attempt power cycle [ 953.058089][ T5347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.437927][T20709] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 953.444368][T20713] usb 6-1: USB disconnect, device number 19 [ 953.476428][T23562] tipc: New replicast peer: 255.255.255.255 [ 953.477137][T23562] tipc: Enabled bearer , priority 10 [ 953.504322][T20709] usb 7-1: device descriptor read/8, error -71 [ 953.682214][ T6216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.737935][T20709] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 953.760681][T20709] usb 7-1: device descriptor read/8, error -71 [ 953.868875][T20709] usb usb7-port1: unable to enumerate USB device [ 954.099437][ T5699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.161775][T20713] usb 5-1: USB disconnect, device number 113 [ 954.338310][T20709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.365308][T20713] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 954.427599][ T31] audit: type=1326 audit(1792036809.365:11090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23572 comm="syz.0.5387" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f334ab9e559 code=0x0 [ 954.589295][ T5699] tipc: Node number set to 3078987327 [ 954.653656][T23586] fuse: Unknown parameter '-­#Ú0âDŠo»ßxìê<ðºæ~ÝN¬±‘ƒªÌvV] wait_for_completion_timeout+0x265/0x610 [ 966.581579][ C0] WARNING: kernel/sched/core.c:9191 at __might_sleep+0x92/0xf0, CPU#0: kworker/0:10/20712 [ 966.611870][ C0] Modules linked in: [ 966.615759][ C0] CPU: 0 UID: 0 PID: 20712 Comm: kworker/0:10 Tainted: G L syzkaller #0 PREEMPT(full) [ 966.626874][ C0] Tainted: [L]=SOFTLOCKUP [ 966.631206][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 966.641284][ C0] Workqueue: usb_hub_wq hub_event [ 966.646398][ C0] RIP: 0010:__might_sleep+0xac/0xf0 [ 966.651641][ C0] Code: 00 00 48 89 3c 24 41 89 f5 4c 8d 35 9e c1 e6 0f 43 80 3c 3c 00 74 08 48 89 df e8 af 3f a2 00 48 8b 0b 4c 89 f7 89 ee 48 89 ca <67> 48 0f b9 3a 44 89 ee 48 8b 3c 24 eb b5 44 89 f1 80 e1 07 80 c1 [ 966.660106][ T5347] usb 6-1: unable to get BOS descriptor or descriptor too short [ 966.660154][ T5347] usb 6-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 966.661242][ T5347] usb 6-1: config index 0 descriptor too short (expected 2182, got 134) [ 966.661267][ T5347] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 966.661287][ T5347] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 966.661304][ T5347] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 966.723294][ C0] RSP: 0018:ffffc90000007c08 EFLAGS: 00010246 [ 966.729387][ C0] RAX: 0000000000000000 RBX: ffff888076b418b0 RCX: ffffffff8be9ff95 [ 966.737397][ C0] RDX: ffffffff8be9ff95 RSI: 0000000000000002 RDI: ffffffff917d7290 [ 966.745410][ C0] RBP: 0000000000000002 R08: 0000000000000100 R09: 1ffffffff22f4e6f [ 966.753404][ C0] R10: dffffc0000000000 R11: fffffbfff22f4e70 R12: 1ffff1100ed68316 [ 966.761407][ C0] R13: 00000000000011d1 R14: ffffffff917d7290 R15: dffffc0000000000 [ 966.769408][ C0] FS: 0000000000000000(0000) GS:ffff888123abf000(0000) knlGS:0000000000000000 [ 966.778352][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 966.784919][ C0] CR2: 000055557950da38 CR3: 000000007e8c8000 CR4: 00000000003526f0 [ 966.792922][ C0] Call Trace: [ 966.796193][ C0] [ 966.799075][ C0] __cancel_work_sync+0x6d/0x110 [ 966.804021][ C0] mmc_free_host+0x19/0x40 [ 966.808551][ C0] call_timer_fn+0x18d/0x5f0 [ 966.813152][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 966.819923][ C0] ? call_timer_fn+0xd5/0x5f0 [ 966.824598][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 966.829793][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 966.834993][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 966.841699][ C0] __run_timer_base+0x652/0x8b0 [ 966.846564][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 966.851958][ C0] ? ktime_get+0x1f5/0x220 [ 966.856369][ C0] ? lapic_next_event+0x11/0x20 [ 966.861249][ C0] run_timer_softirq+0xb7/0x170 [ 966.866104][ C0] handle_softirqs+0x226/0x860 [ 966.870890][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 966.875665][ C0] __irq_exit_rcu+0xcb/0x220 [ 966.880279][ C0] irq_exit_rcu+0x9/0x30 [ 966.884529][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 966.890169][ C0] [ 966.893111][ C0] [ 966.896033][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 966.902049][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 966.908509][ C0] Code: f7 e8 7d a0 b8 f5 f7 c3 00 02 00 00 74 05 e8 70 ef e4 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b4 9d a9 f5 65 48 8b 05 0c a0 aa 08 48 85 c0 74 18 5b 41 5e e9 [ 966.928161][ C0] RSP: 0018:ffffc9000dbde708 EFLAGS: 00000206 [ 966.934250][ C0] RAX: 0000000000000006 RBX: 0000000000000287 RCX: 8000000000000001 [ 966.942250][ C0] RDX: 0000000000000006 RSI: ffffffff8e4697c1 RDI: 0000000000000001 [ 966.950235][ C0] RBP: dffffc0000000000 R08: ffffffff917a737f R09: 1ffffffff22f4e6f [ 966.958230][ C0] R10: dffffc0000000000 R11: fffffbfff22f4e70 R12: ffff8880b8426100 [ 966.966190][ C0] R13: 0000000000000000 R14: ffff8880b8426100 R15: 0000000000000287 [ 966.974200][ C0] __mod_timer+0xb53/0xed0 [ 966.978660][ C0] schedule_timeout+0x14d/0x2c0 [ 966.983527][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 966.988908][ C0] ? __pfx_process_timeout+0x10/0x10 [ 966.994210][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 966.999419][ C0] wait_for_completion_timeout+0x2cf/0x610 [ 967.005231][ C0] ? wait_for_completion_timeout+0x265/0x610 [ 967.011276][ C0] ? __pfx_wait_for_completion_timeout+0x10/0x10 [ 967.017606][ C0] usb_start_wait_urb+0x1e9/0x5b0 [ 967.022718][ C0] ? trace_kmalloc+0x2a/0xf0 [ 967.027318][ C0] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 967.032906][ C0] usb_control_msg+0x234/0x3e0 [ 967.037687][ C0] hdpvr_config_call+0xcf/0x1b0 [ 967.042658][ C0] hdpvr_s_ctrl+0x299/0xa90 [ 967.047152][ C0] ? __v4l2_ctrl_handler_setup+0x40f/0x710 [ 967.053042][ C0] __v4l2_ctrl_handler_setup+0x61d/0x710 [ 967.058718][ C0] v4l2_ctrl_handler_setup+0x5b/0x90 [ 967.064006][ C0] hdpvr_register_videodev+0x573/0x760 [ 967.069497][ C0] hdpvr_probe+0x6ed/0x930 [ 967.073923][ C0] ? __pfx_hdpvr_probe+0x10/0x10 [ 967.078863][ C0] ? __pm_runtime_set_status+0x994/0xc80 [ 967.084609][ C0] usb_probe_interface+0x788/0xe50 [ 967.089752][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 967.095381][ C0] ? sysfs_do_create_link_sd+0xe0/0x110 [ 967.101009][ C0] ? driver_sysfs_add+0x1fe/0x210 [ 967.106065][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 967.111707][ C0] really_probe+0x254/0xae0 [ 967.116221][ C0] __driver_probe_device+0x1e8/0x360 [ 967.121546][ C0] driver_probe_device+0x4f/0x240 [ 967.126573][ C0] __device_attach_driver+0x270/0x410 [ 967.131964][ C0] bus_for_each_drv+0x258/0x2f0 [ 967.136891][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 967.142803][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 967.148226][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 967.154042][ C0] __device_attach+0x2c4/0x450 [ 967.158853][ C0] ? __pfx___device_attach+0x10/0x10 [ 967.164135][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 967.169278][ C0] ? _raw_spin_unlock+0x28/0x50 [ 967.174131][ C0] device_initial_probe+0xa1/0xd0 [ 967.179184][ C0] bus_probe_device+0x12a/0x220 [ 967.184038][ C0] device_add+0x7d7/0xb80 [ 967.188394][ C0] usb_set_configuration+0x1bb5/0x2260 [ 967.193877][ C0] usb_generic_driver_probe+0x8d/0x150 [ 967.199418][ C0] usb_probe_device+0x1c3/0x3b0 [ 967.204268][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 967.209668][ C0] really_probe+0x254/0xae0 [ 967.214175][ C0] __driver_probe_device+0x1e8/0x360 [ 967.219470][ C0] driver_probe_device+0x4f/0x240 [ 967.224506][ C0] __device_attach_driver+0x270/0x410 [ 967.229902][ C0] bus_for_each_drv+0x258/0x2f0 [ 967.234770][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 967.240683][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 967.246062][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 967.251899][ C0] __device_attach+0x2c4/0x450 [ 967.256665][ C0] ? __pfx___device_attach+0x10/0x10 [ 967.261968][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 967.267079][ C0] ? _raw_spin_unlock+0x28/0x50 [ 967.271948][ C0] device_initial_probe+0xa1/0xd0 [ 967.276992][ C0] bus_probe_device+0x12a/0x220 [ 967.281887][ C0] device_add+0x7d7/0xb80 [ 967.286226][ C0] usb_new_device+0x9aa/0x1690 [ 967.291016][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 967.296218][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 967.301499][ C0] hub_event+0x28e8/0x4d30 [ 967.305914][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 967.311101][ C0] ? __pfx_hub_event+0x10/0x10 [ 967.315893][ C0] ? rcu_is_watching+0x16/0xb0 [ 967.320708][ C0] ? process_scheduled_works+0x97a/0x1630 [ 967.326438][ C0] process_scheduled_works+0xc3d/0x1630 [ 967.332029][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 967.338054][ C0] ? assign_work+0x3cf/0x5d0 [ 967.342647][ C0] worker_thread+0xa47/0xfb0 [ 967.347269][ C0] kthread+0x38b/0x480 [ 967.351384][ C0] ? __pfx_worker_thread+0x10/0x10 [ 967.356496][ C0] ? __pfx_kthread+0x10/0x10 [ 967.361112][ C0] ret_from_fork+0x514/0xb70 [ 967.365710][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 967.370843][ C0] ? __switch_to+0xc89/0x1420 [ 967.375517][ C0] ? __pfx_kthread+0x10/0x10 [ 967.380137][ C0] ret_from_fork_asm+0x1a/0x30 [ 967.384899][ C0] [ 967.387935][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 967.395204][ C0] CPU: 0 UID: 0 PID: 20712 Comm: kworker/0:10 Tainted: G L syzkaller #0 PREEMPT(full) [ 967.406412][ C0] Tainted: [L]=SOFTLOCKUP [ 967.410744][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 967.420899][ C0] Workqueue: usb_hub_wq hub_event [ 967.425929][ C0] Call Trace: [ 967.429206][ C0] [ 967.432047][ C0] vpanic+0x56d/0xa60 [ 967.436035][ C0] ? __pfx__printk+0x10/0x10 [ 967.440631][ C0] ? __pfx_vpanic+0x10/0x10 [ 967.445130][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 967.450415][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 967.455627][ C0] panic+0xc5/0xd0 [ 967.459353][ C0] ? __pfx_panic+0x10/0x10 [ 967.463783][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 967.468709][ C0] __warn+0x315/0x4c0 [ 967.472683][ C0] ? __might_sleep+0x92/0xf0 [ 967.477315][ C0] ? __might_sleep+0x92/0xf0 [ 967.481914][ C0] __report_bug+0x276/0x570 [ 967.486482][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 967.491284][ C0] ? __might_sleep+0x92/0xf0 [ 967.495978][ C0] ? __pfx___report_bug+0x10/0x10 [ 967.500994][ C0] ? wait_for_completion_timeout+0x265/0x610 [ 967.506971][ C0] ? wait_for_completion_timeout+0x265/0x610 [ 967.512962][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 967.518192][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 967.524002][ C0] ? debug_object_assert_init+0x20d/0x380 [ 967.529778][ C0] report_bug_entry+0x19b/0x290 [ 967.534637][ C0] ? __might_sleep+0xac/0xf0 [ 967.539225][ C0] ? __might_sleep+0xb1/0xf0 [ 967.543823][ C0] handle_bug+0xce/0x200 [ 967.548075][ C0] exc_invalid_op+0x1a/0x50 [ 967.552574][ C0] asm_exc_invalid_op+0x1a/0x20 [ 967.557416][ C0] RIP: 0010:__might_sleep+0xac/0xf0 [ 967.562628][ C0] Code: 00 00 48 89 3c 24 41 89 f5 4c 8d 35 9e c1 e6 0f 43 80 3c 3c 00 74 08 48 89 df e8 af 3f a2 00 48 8b 0b 4c 89 f7 89 ee 48 89 ca <67> 48 0f b9 3a 44 89 ee 48 8b 3c 24 eb b5 44 89 f1 80 e1 07 80 c1 [ 967.582241][ C0] RSP: 0018:ffffc90000007c08 EFLAGS: 00010246 [ 967.588303][ C0] RAX: 0000000000000000 RBX: ffff888076b418b0 RCX: ffffffff8be9ff95 [ 967.596276][ C0] RDX: ffffffff8be9ff95 RSI: 0000000000000002 RDI: ffffffff917d7290 [ 967.604230][ C0] RBP: 0000000000000002 R08: 0000000000000100 R09: 1ffffffff22f4e6f [ 967.612198][ C0] R10: dffffc0000000000 R11: fffffbfff22f4e70 R12: 1ffff1100ed68316 [ 967.620170][ C0] R13: 00000000000011d1 R14: ffffffff917d7290 R15: dffffc0000000000 [ 967.628159][ C0] ? wait_for_completion_timeout+0x265/0x610 [ 967.634150][ C0] ? wait_for_completion_timeout+0x265/0x610 [ 967.640135][ C0] __cancel_work_sync+0x6d/0x110 [ 967.645066][ C0] mmc_free_host+0x19/0x40 [ 967.649477][ C0] call_timer_fn+0x18d/0x5f0 [ 967.654087][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 967.660789][ C0] ? call_timer_fn+0xd5/0x5f0 [ 967.665480][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 967.670614][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 967.675806][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 967.682489][ C0] __run_timer_base+0x652/0x8b0 [ 967.687364][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 967.692754][ C0] ? ktime_get+0x1f5/0x220 [ 967.697189][ C0] ? lapic_next_event+0x11/0x20 [ 967.702042][ C0] run_timer_softirq+0xb7/0x170 [ 967.706895][ C0] handle_softirqs+0x226/0x860 [ 967.711680][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 967.716449][ C0] __irq_exit_rcu+0xcb/0x220 [ 967.721035][ C0] irq_exit_rcu+0x9/0x30 [ 967.725280][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 967.730932][ C0] [ 967.733888][ C0] [ 967.736809][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 967.742796][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 967.749217][ C0] Code: f7 e8 7d a0 b8 f5 f7 c3 00 02 00 00 74 05 e8 70 ef e4 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b4 9d a9 f5 65 48 8b 05 0c a0 aa 08 48 85 c0 74 18 5b 41 5e e9 [ 967.768822][ C0] RSP: 0018:ffffc9000dbde708 EFLAGS: 00000206 [ 967.774884][ C0] RAX: 0000000000000006 RBX: 0000000000000287 RCX: 8000000000000001 [ 967.782856][ C0] RDX: 0000000000000006 RSI: ffffffff8e4697c1 RDI: 0000000000000001 [ 967.790816][ C0] RBP: dffffc0000000000 R08: ffffffff917a737f R09: 1ffffffff22f4e6f [ 967.798793][ C0] R10: dffffc0000000000 R11: fffffbfff22f4e70 R12: ffff8880b8426100 [ 967.806756][ C0] R13: 0000000000000000 R14: ffff8880b8426100 R15: 0000000000000287 [ 967.814739][ C0] __mod_timer+0xb53/0xed0 [ 967.819156][ C0] schedule_timeout+0x14d/0x2c0 [ 967.824023][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 967.829412][ C0] ? __pfx_process_timeout+0x10/0x10 [ 967.834693][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 967.839885][ C0] wait_for_completion_timeout+0x2cf/0x610 [ 967.845685][ C0] ? wait_for_completion_timeout+0x265/0x610 [ 967.851679][ C0] ? __pfx_wait_for_completion_timeout+0x10/0x10 [ 967.858014][ C0] usb_start_wait_urb+0x1e9/0x5b0 [ 967.863073][ C0] ? trace_kmalloc+0x2a/0xf0 [ 967.867689][ C0] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 967.873260][ C0] usb_control_msg+0x234/0x3e0 [ 967.878048][ C0] hdpvr_config_call+0xcf/0x1b0 [ 967.882926][ C0] hdpvr_s_ctrl+0x299/0xa90 [ 967.887441][ C0] ? __v4l2_ctrl_handler_setup+0x40f/0x710 [ 967.893262][ C0] __v4l2_ctrl_handler_setup+0x61d/0x710 [ 967.898915][ C0] v4l2_ctrl_handler_setup+0x5b/0x90 [ 967.904210][ C0] hdpvr_register_videodev+0x573/0x760 [ 967.909668][ C0] hdpvr_probe+0x6ed/0x930 [ 967.914092][ C0] ? __pfx_hdpvr_probe+0x10/0x10 [ 967.919063][ C0] ? __pm_runtime_set_status+0x994/0xc80 [ 967.924745][ C0] usb_probe_interface+0x788/0xe50 [ 967.929887][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 967.935527][ C0] ? sysfs_do_create_link_sd+0xe0/0x110 [ 967.941079][ C0] ? driver_sysfs_add+0x1fe/0x210 [ 967.946121][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 967.951759][ C0] really_probe+0x254/0xae0 [ 967.956260][ C0] __driver_probe_device+0x1e8/0x360 [ 967.961587][ C0] driver_probe_device+0x4f/0x240 [ 967.966631][ C0] __device_attach_driver+0x270/0x410 [ 967.972015][ C0] bus_for_each_drv+0x258/0x2f0 [ 967.976886][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 967.982781][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 967.988163][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 967.993972][ C0] __device_attach+0x2c4/0x450 [ 967.998740][ C0] ? __pfx___device_attach+0x10/0x10 [ 968.004027][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 968.009144][ C0] ? _raw_spin_unlock+0x28/0x50 [ 968.014001][ C0] device_initial_probe+0xa1/0xd0 [ 968.019024][ C0] bus_probe_device+0x12a/0x220 [ 968.023872][ C0] device_add+0x7d7/0xb80 [ 968.028208][ C0] usb_set_configuration+0x1bb5/0x2260 [ 968.033690][ C0] usb_generic_driver_probe+0x8d/0x150 [ 968.039156][ C0] usb_probe_device+0x1c3/0x3b0 [ 968.043999][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 968.049376][ C0] really_probe+0x254/0xae0 [ 968.053894][ C0] __driver_probe_device+0x1e8/0x360 [ 968.059166][ C0] driver_probe_device+0x4f/0x240 [ 968.064215][ C0] __device_attach_driver+0x270/0x410 [ 968.069579][ C0] bus_for_each_drv+0x258/0x2f0 [ 968.074424][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 968.080325][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 968.085684][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 968.091480][ C0] __device_attach+0x2c4/0x450 [ 968.096240][ C0] ? __pfx___device_attach+0x10/0x10 [ 968.101523][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 968.106650][ C0] ? _raw_spin_unlock+0x28/0x50 [ 968.111489][ C0] device_initial_probe+0xa1/0xd0 [ 968.116518][ C0] bus_probe_device+0x12a/0x220 [ 968.121379][ C0] device_add+0x7d7/0xb80 [ 968.125703][ C0] usb_new_device+0x9aa/0x1690 [ 968.130463][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 968.135649][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 968.140830][ C0] hub_event+0x28e8/0x4d30 [ 968.145244][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 968.150373][ C0] ? __pfx_hub_event+0x10/0x10 [ 968.155140][ C0] ? rcu_is_watching+0x16/0xb0 [ 968.159910][ C0] ? process_scheduled_works+0x97a/0x1630 [ 968.165637][ C0] process_scheduled_works+0xc3d/0x1630 [ 968.171192][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 968.177169][ C0] ? assign_work+0x3cf/0x5d0 [ 968.181781][ C0] worker_thread+0xa47/0xfb0 [ 968.186387][ C0] kthread+0x38b/0x480 [ 968.190441][ C0] ? __pfx_worker_thread+0x10/0x10 [ 968.195542][ C0] ? __pfx_kthread+0x10/0x10 [ 968.200174][ C0] ret_from_fork+0x514/0xb70 [ 968.204759][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 968.209859][ C0] ? __switch_to+0xc89/0x1420 [ 968.214527][ C0] ? __pfx_kthread+0x10/0x10 [ 968.219137][ C0] ret_from_fork_asm+0x1a/0x30 [ 968.223921][ C0] [ 968.227081][ C0] Kernel Offset: disabled [ 968.231407][ C0] Rebooting in 86400 seconds..