last executing test programs: 4m3.374358195s ago: executing program 3 (id=328): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0xfff3}, {}, {0x8, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x26044028}, 0x800) fchmod(r2, 0xa0) 4m3.240501831s ago: executing program 3 (id=329): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 4m3.076268683s ago: executing program 3 (id=330): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000380)={0x0, 0xe, 0x2, '#\t'}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@local, @random="a15cc14e96b3", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}}}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="20079f0000009f061c662e2695ff3f24922cd6d654dbea65d34932b0e4c5a7c457fa10b873b914388046f29f96b474d378b33028332ef80048b49895895e84a3a83948ecedef9baf57b9e37500ebc8b72e6a0a4864124ff273c0060690a371a98a499b35febe4a41654957343f55df204fd25b24b1dcca3354ecc1f0eb50565292a1a89362452ce637d1b4108f0aa7b1019f6cac29234aa5dc1ca740742282cba6c1890192"], &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x812}}, &(0x7f00000001c0)={0x0, 0xf, 0x10, {0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0x0, 0x91, 0xaad1, 0x1}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x10, 0x7, 0x6, "b0017445", "3fe3506f"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xb, 0x18, 0x1, 0x5, 0xbc, 0x0, 0x7}}}, &(0x7f00000007c0)={0x84, &(0x7f00000002c0)={0x0, 0x16, 0x96, "be6e9c2c43113e526be61c475cb77a6167573b84f3e980fcf6584aed0aa41f83b1b10b5478601980c42b49be6b409c3e710d8fe145cd58aad32b6c14921a7e441827202190c265bb0818e6c27b412f7d45d8a5195689cfb16233703401d6fc593ede41eb33593413e3cb8125c292251661914d29f5fb2c3d3fd63db6faa27b350a6a828b99e8aa99c858005b3c54d4f3297f72c852b6"}, &(0x7f0000000400)={0x0, 0xa, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x8, 0x10}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xad2}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0xfb}, &(0x7f0000000580)={0x40, 0xb, 0x2, "aff1"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xc}, &(0x7f0000000600)={0x40, 0x13, 0x6, @local}, &(0x7f0000000640)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000680)={0x40, 0x19, 0x2, "9d97"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0xd}}) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0x13, 0x7c5, 0x1, 0x2800, 0xd59f80, 0x2, 0x5, 0x0, 0x8, 0x0, 0x722, 0x5, 0x7, 0x9, 0x23, 0x8, {0xffff945a, 0x1}, 0x5, 0x2d}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3m59.917502996s ago: executing program 3 (id=353): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c004f8450e4d0364cac1daa2621d037e604c3d013ac1ae09006aa8874638fa94ac3b6a8033f847aa6189f60b9a7415b196dda1040d97da04601839d256a515ba03c89c6eaa190434b08d86d5d50ed001d70124ba9ea4f8e4c32b099ac80ff0a943e75a637e1b4c12e8491930279a11c7f412091756595f7b086026a464910c3cdff63d7b4e8153c81ffce7b08e7a639151c981aaa6ac8b38dc7b943541ffacf0a2862ec6f1dff055f88e4c1a42e16611b57f90b190bcca2a68c908690bea9411dafb1a8af1175c09791d0723e5c7038f60335a6c35daa598dd12200"/230], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x89000) move_mount(r3, &(0x7f0000000100)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYRES8, @ANYBLOB='\x00'/20, @ANYRES32], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r6, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000005c0)={[0x8, 0x8, 0x7, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1041, 0x200200000006, 0x3, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000001, 0x40000000009, 0x8000000000005, 0x800040068], 0x54000, 0x547d1}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9", 0x9, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) mincore(&(0x7f000033a000/0xc00000)=nil, 0xc00000, &(0x7f0000000200)=""/23) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$pokeuser(0x6, r9, 0xd8, 0xfffffffffffffffc) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) syz_open_dev$vim2m(&(0x7f00000001c0), 0xc00000001, 0x2) 3m59.027871961s ago: executing program 3 (id=367): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r0, &(0x7f0000000280)=@abs, &(0x7f00000004c0)=0x6e, 0x800) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_clone3(&(0x7f0000001b40)={0x20001200, &(0x7f0000000000), &(0x7f00000000c0)=0x0, &(0x7f0000000100), {0x2}, &(0x7f0000000140)=""/156, 0x9c, &(0x7f0000000b00)=""/4096, &(0x7f0000001b00)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206e407000000000000000063a80f00000000140007000500150000000000050005000a00adb1b9c1666a5f2ab410deef9b8b540000050001000700000005000400e10000000900020073797a65e400000011000300680000000000000000"], 0x60}}, 0x0) io_uring_setup(0x1028, 0x0) process_vm_writev(r3, &(0x7f0000000500), 0x0, &(0x7f0000002c80)=[{&(0x7f0000000540)=""/19, 0x13}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000000600)=""/102, 0x66}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x4, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0x70000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x10}, {0x6000, 0xd000, 0xc, 0x8, 0x0, 0x3, 0x6, 0xb2, 0x8, 0x7, 0x0, 0xff}, {0x3000, 0x0, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0xe2, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0xd000, 0xd, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x60000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x1000, 0x8000000, 0x0, 0x6, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x4, 0x0, 0x1]}) close(0x5) close(0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) r7 = socket(0x40000000015, 0x5, 0x0) r8 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) r9 = socket$kcm(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r9, 0x1, 0x28, &(0x7f0000000040), 0x4) r10 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r8, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x2, 0x15, 0x4}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/hibernate_compression_threads', 0x101000, 0x11) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r8, 0x40146f2c, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) munlockall() 3m58.403076325s ago: executing program 3 (id=370): munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000055e000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) 3m58.090244565s ago: executing program 32 (id=370): munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000055e000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) 25.253775456s ago: executing program 5 (id=1548): r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) mq_open(&(0x7f0000000180)='eth0\x00', 0x40, 0x59, 0x0) r1 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f00000001c0)) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000100)="580000001400add405000000000000002f6c30933b581e2bf8117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffff2cc3ffffffe7ee0000000000", 0x58}], 0x1) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000200)=@req={0x8, 0x2e6, 0x5, 0xa}, 0x10) syz_usb_connect$uac2(0x2, 0x98, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010200002020392ad43f400001020301090286000301010008080b0001010c2f06090400000001012000092401070004260004112409050603000200f5ffff01000000ff0c2403020104090305"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 24.713859529s ago: executing program 5 (id=1551): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}}, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x41000, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB=',\x00'/12, @ANYRES32, @ANYBLOB="0c5f7fa90b7c8bf9ae6fe65f56316226fb024d1b3de1b515f0cd68ac7f3f23896e2fa59e76424150b44e2c13114850a546322482e6ad43efc984425f4f214f39dd149d881091089fa961b4a9b794ba349fbb48fd76da22bd69c9584f9e2f1adf6aca20f52bfbc67f7bc66a6a81df5b0845c6f182cf1617f779c9fccdeeb9eed0625acf15210d417dd43cf8f272bc237b9ae6750e723c14cd0f2bfa45305ac700e9b97b9cbc6ce76937b5bc05437458eae5d4b4fdfba91aa98ca2d7cc1b21f812ec60562fbe6d6499b00166960e0759631a69c25e53bec52ef2a707f88af6596cf12f2f", @ANYRES64=0x0], 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000001240)='task\x00') prlimit64(0x0, 0xb, &(0x7f0000000240)={0x8, 0x8a}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0xfe, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0xff, 0x1f}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, {0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd, 0x0, 0x1000000}], 0x4000004}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000000)={&(0x7f0000000380)=@bridge_setlink={0x0, 0x13, 0x10, 0x70bd25, 0x25dfdbfb, {0x7, 0x0, 0x0, r8, 0x1020, 0x1}, [@IFLA_VFINFO_LIST={0x0, 0x16, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0x0, 0x7, {0x0, 0x5}}, @IFLA_VF_RATE={0x0, 0x6, {0x4d7c, 0x7, 0x9}}, @IFLA_VF_LINK_STATE={0x0, 0x5, {0x9, 0x400}}, @IFLA_VF_SPOOFCHK={0x0, 0x4, {0x100, 0x7}}]}, {0x0, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0x0, 0x3, {0x80000001, 0x8}}, @IFLA_VF_MAC={0x0, 0x1, {0x1, @random="879dc8a523b2"}}, @IFLA_VF_MAC={0x0, 0x1, {0x7, @remote}}, @IFLA_VF_RATE={0x0, 0x6, {0x7, 0x7fffffff, 0x2}}]}, {0x0, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x0, 0x1, {0x4, @random="850409dea5ab"}}, @IFLA_VF_SPOOFCHK={0x0, 0x4, {0x1, 0x101}}, @IFLA_VF_MAC={0x0, 0x1, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}, @IFLA_VF_IB_PORT_GUID={0x0, 0xb, {0x401, 0x60e6c0b1}}, @IFLA_VF_TX_RATE={0x0, 0x3, {0xe3, 0x1ff}}, @IFLA_VF_RSS_QUERY_EN={0x0, 0x7, {0x8, 0x2}}, @IFLA_VF_VLAN={0x0, 0x2, {0x0, 0x5cd, 0x3}}, @IFLA_VF_VLAN_LIST={0x0, 0xc, 0x0, 0x1, [{0x0, 0x1, {0x4, 0x4dd, 0x1, 0x8100}}, {0x0, 0x1, {0x1, 0xf3e, 0x5, 0x4080}}, {0x0, 0x1, {0x0, 0xa2b, 0x1000, 0x88a8}}, {0x0, 0x1, {0x401, 0xb4b, 0x1, 0x88a8}}, {0x0, 0x1, {0x2, 0x5a9, 0x9, 0x8100}}, {0x0, 0x1, {0x4, 0x382, 0x856, 0x8100}}]}]}, {0x0, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0x0, 0x4, {0xfffffffb, 0x9}}, @IFLA_VF_SPOOFCHK={0x0, 0x4, {0x1, 0x400}}, @IFLA_VF_IB_PORT_GUID]}, {0x0, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0x0, 0x9, {0x4, 0x5}}, @IFLA_VF_TX_RATE={0x0, 0x3, {0x5, 0x1997}}, @IFLA_VF_RSS_QUERY_EN={0x0, 0x7, {0x2a4, 0xe}}, @IFLA_VF_IB_PORT_GUID={0x0, 0xb, {0x308, 0x9}}, @IFLA_VF_VLAN_LIST={0x0, 0xc, 0x0, 0x1, [{0x0, 0x1, {0x4, 0x1d7, 0xbda, 0x88a8}}, {0x0, 0x1, {0xee, 0xf61, 0x2, 0x88a8}}, {0x0, 0x1, {0x5, 0x96e, 0x80000000, 0x88a8}}, {0x0, 0x1, {0xf, 0x4e0, 0x7fff, 0x8100}}, {0x0, 0x1, {0x0, 0x18b, 0x7, 0x8100}}, {0x0, 0x1, {0x8, 0xd30, 0x1, 0x8100}}, {0x0, 0x1, {0x80, 0xc14, 0xace, 0x88a8}}, {0x0, 0x1, {0x7, 0x124, 0x6, 0x88a8}}, {0x0, 0x1, {0x5, 0x29c, 0x401, 0x9a8}}]}, @IFLA_VF_MAC={0x0, 0x1, {0x400, @local}}, @IFLA_VF_IB_NODE_GUID, @IFLA_VF_SPOOFCHK={0x0, 0x4, {0x7ff, 0xd51}}]}, {0x0, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x0, 0x6, {0x0, 0x400, 0x8}}, @IFLA_VF_VLAN={0x0, 0x2, {0x6, 0x377, 0xc7}}, @IFLA_VF_VLAN={0x0, 0x2, {0xfffff801, 0xdaf, 0x6}}]}, {0x0, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x0, 0x2, {0x0, 0x676, 0xe}}, @IFLA_VF_IB_NODE_GUID={0x0, 0xa, {0x3d5, 0x1}}, @IFLA_VF_VLAN={0x0, 0x2, {0x7ff, 0x3c7, 0x2}}, @IFLA_VF_MAC={0x0, 0x1, {0x9, @local}}, @IFLA_VF_VLAN_LIST={0x0, 0xc, 0x0, 0x1, [{0x0, 0x1, {0x0, 0x951, 0x1}}, {0x0, 0x1, {0x6, 0x24d, 0xffff, 0x88a8}}, {0x0, 0x1, {0x1, 0xc78, 0x4, 0x8100}}]}]}]}, @IFLA_IFALIAS={0x0, 0x14, 'batadv0\x00'}, @IFLA_NUM_TX_QUEUES={0x0, 0x1f, 0x101}, @IFLA_AF_SPEC={0x0, 0x1a, 0x0, 0x1, [@AF_INET={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x0, 0x1, [{0x0, 0x6, 0x0, 0x0, 0xe69}, {0x0, 0x9, 0x0, 0x0, 0x1}, {0x0, 0x16, 0x0, 0x0, 0x531b8d45}]}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004003}, 0x0) 24.045498767s ago: executing program 1 (id=1557): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) fstat(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYRES16=r3, @ANYRESHEX=r1, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES64=r1, @ANYRES16=r0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000000200)={0x1, &(0x7f0000000440)}) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000593c437a5692b43a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000ab000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000096b193c0191176f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x85, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r6, 0xc01864b1, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r9 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x46800, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r10, 0xc0045006, &(0x7f0000000180)=0x6f) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f0000000080)=0x80000003) r11 = dup2(r9, r9) read$FUSE(r11, &(0x7f00000063c0)={0x2020}, 0x2020) r12 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 23.403511s ago: executing program 4 (id=1559): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x7c}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000000b03cd000000000000000000020000070900010023255e250000000008000240000000040600010021000000080002400000000008000340000000010800034000000000"], 0x48}, 0x1, 0x0, 0x0, 0xe220f10cc6b0069b}, 0x81) read(0xffffffffffffffff, 0x0, 0x0) 23.189468088s ago: executing program 5 (id=1560): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120162fbf8d18108422cf82a245d8e6e79d3b83587770175fc00050904a3a20006ccf60c"], &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae03, 0xd1) (async) r3 = socket(0x10, 0x803, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002140)=@newtfilter={0x8a8, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x87c, 0x2, [@TCA_U32_POLICE={0x854, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x4, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x803, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x1, 0x10001, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x7fff, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x8, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x7, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x4, 0x2, 0x6, 0x6, 0xaa, 0xffffffff, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x5, 0x4, 0x7, 0x4000000a, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0xebb, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0x80e, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x4, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74db, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb38, 0xb2, 0x4, 0x5, 0x1000, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x7f, 0x8, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x18, 0x7, 0x8000, 0x7e, 0x4, 0x5, 0x7, 0x4, 0x3, 0x400, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf6, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x82, 0x1, 0x5, 0xffff, 0x3, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0xeb, 0xff, 0x6, 0x3c46a60b, 0xd, 0x4, 0x4003, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x0, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x7, 0x1000, 0xb11a, 0x800000, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x806, 0xc4, 0x9, 0x0, 0xee2, 0x2, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x7, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0xb, 0x6, 0x100, 0x1, 0xb5a, 0xa, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x4, 0x9, 0x91e7, 0x6, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x200004, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x2, 0x6, 0x9, 0x7, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x42b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x8a8}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x4}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xfffff800}]}, 0x28}, 0x1, 0x0, 0x0, 0x4840}, 0x40000) (async) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc33}}}, 0x0) (async) syz_usb_control_io$lan78xx(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000010c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f00000008c0)={0x20, 0x0, 0x2, "7c97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r6 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async) accept$alg(r7, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) 23.189039001s ago: executing program 1 (id=1561): bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x13c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000c40)=ANY=[], 0x8) getsockopt$inet6_opts(r4, 0x29, 0x36, 0xffffffffffffffff, &(0x7f00000000c0)=0xfffffffffffffcba) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000340)) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e440f20c0663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0xd, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000080)={0x10000, 0x14000, 0x8}) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x10583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x9, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x800005, 0x6a], 0xeeee8000, 0x1000d6}) (async, rerun: 32) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 32) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000400)={0x0, 0x1, [0xee7, 0xbda, 0xf87, 0x184]}) (async) execve(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040004) (async) r6 = socket(0x1e, 0x1, 0x0) recvmmsg$unix(r6, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, 0x0, 0x18}}], 0x1, 0x121, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a14000000020a010200000000000000000000000000000000020a010300000000000000000000000a140000001100010000000000000000000000000a"], 0x50}}, 0x0) 23.077487622s ago: executing program 4 (id=1562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x8c, 0x2, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x809b}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6006}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9300}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6005}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000000)={0x2c, r4, 0x1, 0x70bd26, 0x25dfdbfc, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @rand_addr=0x64010102, @empty}, 0xc) r6 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x8001) ioctl$SG_GET_ACCESS_COUNT(r6, 0x2289, &(0x7f0000000540)) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x2, 0x7, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8014}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a}, 0x94) ioctl$SG_GET_KEEP_ORPHAN(r6, 0x2288, &(0x7f0000000000)) 23.020558441s ago: executing program 4 (id=1563): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x606d80, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x40000}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x404, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) bind$inet6(r1, &(0x7f0000000340)={0xa, 0x4e21, 0xff, @mcast1}, 0xfdb3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000300)=@add_del={0x2, &(0x7f00000002c0)='veth0_to_team\x00'}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f00000004c0)=[{&(0x7f0000000500)="580000001400192340834b80040d8c560a06ffffff7f070000004001000058000b6a0400945f06009400050038923944000000800000008004000000ff0109000400fff5dd0000000800030206010000418e01400004fcff7cc8d467abeba3b543b1f54b6b16633a0e2aeaf0cafe4fe3634db446359e2fa4d6d913e0d6d2373e24a528", 0x83}, {&(0x7f00000003c0)="02febaa9f4211842e25a4fd7fffe9cda872a4e840c4fc34b514634524e7b2c4886cab1e22bc1a77b7301d071d30a1f385c3ebd3d92d04fd16c1bfa19b23d55fefcea1b2dd3d5d63830cc4bcf5df70996a003e2f649c9803e5045b1781ffd3749b116994098cef73a2893adeee1f36031dcb25502796d7349a231af8527712b7131c452d704168d486447d82ffb36b4fbbbf98065ebb17a20b89cbc5bb9be9e7d5787b22811d3e63fad963b3f76e2bb8d2453ef6752d5d31f48361c6897f0b25f067599e6cdb73f49f3716b2b2677c939062003b0ac2e396b3282648ba9118f5f6d5e07e8f4d46b586e3eca00d6149fafada6230f78", 0xf5}], 0x2) listen(r4, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) 22.888531266s ago: executing program 4 (id=1564): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000001080)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24018000}], 0x1, 0x404c0d1) ppoll(&(0x7f0000000100)=[{r4, 0x780}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}, {[@generic={0x83, 0x2}]}}}}}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000240)={{0xeeee8000, 0x0, 0xf000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x1}, {0x0, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x8080000, 0xeeef0000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0xeeee0000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a}, {0x1, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x80a0000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x4}, {0x0, 0x80a0000, 0x0, 0x82, 0x0, 0x0, 0x4, 0xe}, {0x6000}, {0x5000, 0xfffe}, 0x60000010, 0x0, 0x0, 0x0, 0x1, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x3]}) 22.701346355s ago: executing program 4 (id=1565): r0 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x62, &(0x7f0000000140)=ANY=[], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x9, 0x0, 0x6}, 'syz0\x00', 0x3}) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0xf7) ioctl$UI_DEV_CREATE(r2, 0x5501) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)="0393cd7940b5ad708d2378ff2003df0209", 0x11}], 0x1) 22.556884598s ago: executing program 1 (id=1566): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x10, 0xffffffffffffffff, 0x1a5f7481) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, &(0x7f00000000c0)='Z', &(0x7f0000000100), 0x7, 0x0, 0x7}, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/pids.max\x00', 0x2, 0x61) read$FUSE(r1, &(0x7f00000025c0)={0x2020}, 0x2020) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) syz_open_dev$vim2m(&(0x7f0000000080), 0x57, 0x2) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000000c0)=0xffff6986, 0x4) (async) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000100)={0x7, 0xe, 0x80, "1a23ec720a8937205703ed055a0382a3dcea5abfa2af68bb9dfd2606e3909d11", 0x32344d59}) (async) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000068d000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) (async) r5 = io_uring_setup(0xed, &(0x7f0000000040)={0x0, 0x2050, 0x2000, 0x3, 0xce}) writev(0xffffffffffffffff, 0x0, 0x0) (async) io_uring_enter(r5, 0x2219, 0xcf74, 0x16, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00006f100001042abd7000fddbdf2500040000cff05e9fcdfdf0f5ce6aa1c962ee9afc8ed116018dd1ef3eb936a132f77746f7e7c62d96072bc105e77cb91e10e7717c4c08b37e26f0d8cb9b49d485d1cc512a294d4a049f3ebe5d966d07f37891615e6a20e9c4ef607932cbf5a1283b3ea5763f4eb99668b5d6ec6a4e24c34a74d173a571b2e0ee2bfcc52b89c5e4", @ANYRES16=r3, @ANYRES64=r5], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x24040824) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000ac0), &(0x7f00000005c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x15~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) 22.431493292s ago: executing program 2 (id=1567): ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xfffffff8, 0x0, 0x7, 0x10000, 'syz1\x00', 0x5}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x10, 0x9]}}) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000"], 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="75016a009cdc14"], 0xdd12}], 0x1, 0x0, 0x0, 0x8887}, 0x4048820) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f00000003c0)=0x246, 0x4) r3 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16a", 0x5, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r7, 0x0, 0x0, 0x800, 0x0, 0x0) recvfrom(r7, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0xa000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 22.19345472s ago: executing program 2 (id=1568): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 22.129256976s ago: executing program 2 (id=1569): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000002500)={&(0x7f0000001500)=[0x2, 0x4, 0xfffffffa, 0x9, 0x1, 0x40, 0x935f, 0x8b, 0x0, 0x7, 0x7, 0x52d, 0x1, 0x7, 0x2, 0xa, 0x800000, 0x2, 0x8, 0xf, 0x8001, 0x0, 0xff, 0x5, 0x2, 0x3, 0x8, 0xc1, 0x7fffffff, 0x3, 0x5, 0x0, 0xf314, 0x551, 0x4, 0xd8f6, 0x5, 0x6, 0x1c33, 0x5, 0xe0c5, 0x0, 0x6, 0x38, 0x9, 0x46b, 0x1, 0x2, 0x6, 0x1, 0xff, 0x99e, 0xae8, 0x5, 0x8, 0x25, 0x2, 0x5, 0x8, 0xff, 0x2, 0x2, 0x81, 0x8, 0x9, 0xa, 0x1, 0xfffffff8, 0x0, 0x3, 0x1, 0x8, 0x1, 0x6, 0x1, 0x3f, 0x7, 0x10, 0x2ff, 0x8, 0x816a, 0x100, 0x6, 0x6, 0x8, 0x80, 0xfffff29a, 0x5, 0x1, 0x7, 0xf6d, 0x7, 0x3, 0x1, 0xe4b, 0x9, 0x81, 0x2, 0xf78, 0x7, 0x3, 0x1, 0x80000001, 0x2, 0xf, 0x4, 0x5, 0x5, 0x4, 0xf, 0x2, 0xf, 0xfffffff8, 0x3, 0x4, 0x9, 0x0, 0x7, 0xcf9, 0xfffffff7, 0x327, 0x2, 0x3, 0x8, 0x6, 0xffffffff, 0x6, 0x9, 0x4, 0x0, 0x22, 0xfffffffc, 0x9, 0x0, 0x4, 0x0, 0x2, 0x3, 0x5, 0x4, 0x7, 0x9, 0x0, 0x3, 0x7fff, 0x4, 0x2, 0x0, 0x80000000, 0x1, 0x7, 0x8, 0x8, 0xe9b8, 0x3, 0x7, 0x6507, 0x3, 0x800, 0x2, 0x80, 0x8, 0x0, 0x3, 0x9, 0xe3db, 0x4, 0x2000007, 0xbaba, 0xc3, 0x8, 0x0, 0x0, 0xf, 0xfffffffa, 0x1, 0x0, 0x7f, 0x3, 0x3, 0xfffffffb, 0x0, 0x2c0, 0x3, 0x3, 0xfffffffc, 0x4, 0x9, 0x50d, 0x5, 0xccf, 0x2, 0xcd00, 0x4, 0x7fff, 0x7, 0xd, 0x221b, 0xffff289d, 0x2, 0x7ff, 0x4, 0x7, 0x7fff, 0x4, 0xf, 0x4521, 0x2, 0x0, 0x8, 0x546c, 0x4, 0x4, 0x2, 0x9, 0x4, 0xfff, 0x7ff, 0x3, 0x8d7, 0x4, 0x5, 0x2, 0xff, 0x8, 0x4, 0x5, 0x8, 0x5, 0x68e8d10f, 0x6, 0x4, 0x1, 0x7ff, 0xfff, 0x7, 0x5, 0x3, 0xffff, 0x7, 0x0, 0xfffffffe, 0x3, 0x1, 0x1, 0x7, 0x3ff, 0x1, 0xab3b, 0xf, 0x7fffffff, 0x7f, 0x6, 0x2, 0x6, 0x6, 0x1, 0xf, 0x6, 0x7fffffff, 0x230, 0x5, 0x800, 0xf, 0x6, 0xfffffffb, 0x3, 0x5, 0x3, 0xe1, 0x3ff, 0x8000, 0x5, 0xfffffffc, 0x7, 0x2, 0xfffff851, 0x3, 0x4, 0x401, 0x401, 0xa, 0x5, 0x7, 0x9, 0xfffffff7, 0x3, 0x10, 0x4, 0x400, 0x4, 0x6, 0x3, 0x401, 0x3, 0xcc5, 0x3, 0x9, 0x7, 0x3, 0x8bf3, 0xb, 0x4, 0x3, 0x306d, 0x6, 0x10001, 0x4, 0x4, 0x4, 0xfffffff9, 0xe, 0xffff8000, 0x5b8, 0x5, 0x3, 0x2, 0x7fffffff, 0x1, 0x4, 0x0, 0x9, 0x7, 0x9, 0x8, 0xfffffff8, 0x5, 0xbda7, 0x2, 0x8, 0x2, 0x2dd7, 0x4, 0x3012c672, 0x10001, 0xff, 0xd8, 0xd, 0x3, 0xfff, 0x7, 0x8, 0x400, 0x6, 0x6cf, 0x4b1ff6f, 0x3, 0x0, 0x0, 0x1, 0x2, 0x6, 0x9, 0x2, 0x8, 0xc1, 0x4, 0x6, 0x8, 0x3ff, 0x5, 0x6, 0x20a, 0x2, 0x9, 0x9, 0x5, 0xe, 0x40, 0x2, 0x7, 0x20000000, 0x6, 0x738, 0x200, 0x2, 0x6f1, 0x6, 0x9, 0x9, 0x4, 0xffffff80, 0x9, 0x6, 0x5, 0x9, 0x8001, 0x1, 0x8, 0x400, 0xfffff15d, 0xbb, 0x8, 0x2a, 0xffffffff, 0x1000000, 0x6, 0x6, 0x8001, 0x1, 0x72, 0x4, 0x2, 0x2, 0xfffffff8, 0x0, 0x3, 0x5, 0x4, 0x7, 0x2, 0x8, 0x6, 0x8, 0x8, 0x13f, 0x40, 0x5, 0xf2, 0x101, 0x0, 0x3ff, 0xa, 0x4, 0x5, 0x3, 0x1, 0xfffff77a, 0x1, 0x101, 0x0, 0x0, 0x6, 0x3, 0x9, 0x10, 0x4, 0xc, 0x40, 0x7f, 0x835, 0x7, 0x7, 0x9, 0x2, 0x9, 0xffffffff, 0x401, 0x5, 0x4, 0x7fff, 0xffff, 0x3, 0xfffffffc, 0x6, 0xc32, 0x8000, 0x5, 0x1, 0xdca0, 0x5, 0x1, 0x4, 0x7f, 0x7, 0xfffffff9, 0x0, 0x403, 0x8, 0x4, 0xfffff000, 0x5, 0x172, 0xc5, 0x3, 0x7, 0x9, 0x1000, 0x6, 0x0, 0xfffffffe, 0x3ff, 0x4, 0x2, 0x0, 0x7ff, 0x1000, 0x5, 0xb6, 0x7, 0x61e0, 0x1, 0x2, 0x4, 0x7fff, 0xfffffff7, 0x1, 0x40, 0x800, 0xff, 0x40, 0x1, 0x4, 0xfffffffb, 0x7, 0x3, 0x8001, 0x9, 0x7, 0x0, 0x961a, 0xc17, 0x8000, 0x0, 0x2, 0x9, 0x7fffffff, 0x7f, 0x5, 0x5, 0x0, 0x1, 0x10001, 0xb, 0x10000, 0x80000001, 0x4007ff, 0x2, 0x3, 0x7, 0x6, 0x7, 0x1ff, 0x8, 0x400, 0x9, 0x87, 0x2, 0x0, 0x5, 0xa0d, 0x1ff, 0xf2, 0x1, 0x7, 0x4, 0x7, 0x3, 0x5, 0x4, 0x1, 0x7fff, 0x6, 0xfffffffc, 0x5, 0x8, 0xfffff145, 0x1, 0x0, 0xcaa, 0x9, 0x9, 0x8, 0x6, 0x8, 0x4, 0x0, 0x3, 0x3, 0x0, 0x8, 0x7, 0xed, 0x2, 0x1000, 0xa, 0xb4d, 0x5, 0x4, 0xfffffff8, 0x3, 0x8, 0x9, 0x3789, 0x4, 0x6, 0x9, 0x9, 0x9, 0xd4, 0x8, 0x3, 0x80000000, 0x10000, 0x5, 0x80000001, 0x6, 0x3, 0x90, 0x9, 0x73, 0x3, 0x4, 0x9, 0x4, 0x5, 0xb, 0x8be, 0x0, 0x5, 0x1e, 0x7fff, 0x9, 0x3, 0x66a4, 0x4, 0x668, 0x9df, 0x0, 0x6, 0x1ff, 0x10000, 0x5, 0x2, 0x401, 0x200, 0x1, 0x3, 0x4, 0xe5a, 0x7, 0x5, 0x9, 0xfffff73e, 0x4, 0x3, 0xe, 0x6, 0x2, 0xc, 0x3, 0x2, 0x100, 0x8, 0x80, 0x6, 0x4, 0x5, 0x6000000, 0xfffffffa, 0x1d8, 0x6, 0x0, 0x3, 0x9, 0x4, 0xcad, 0x200, 0x1, 0x0, 0x6, 0x200, 0x2, 0xfff, 0x8, 0x3, 0x7, 0x0, 0x8, 0x80000000, 0x6e9, 0x4, 0x6, 0x800, 0x5, 0x8, 0x6, 0x24b, 0xc0, 0x4, 0xfff, 0x8, 0x7fffffff, 0x6, 0xa78, 0x3, 0x8, 0x80000000, 0x5c3, 0x3, 0x9, 0x6, 0x69, 0x4, 0x2, 0x1, 0x401, 0x9, 0x6, 0x5, 0x7f, 0x0, 0xef, 0x8, 0x401, 0xf, 0x4, 0x4, 0x7, 0x6, 0x0, 0x10, 0x7, 0x69c, 0x5c0, 0xffffff11, 0xd, 0x7, 0x10, 0x0, 0x8, 0x0, 0xffffffff, 0xfffffff9, 0x4, 0x5, 0x6, 0x7, 0x79d5, 0x200, 0xf, 0x100, 0x41e, 0xffffff9d, 0x7f, 0x5, 0x2, 0xfffffff8, 0xd, 0x9, 0xff, 0x0, 0x2, 0x6, 0x0, 0xfffff83d, 0x0, 0x9, 0x200, 0x5d92, 0x6, 0x4, 0x1000, 0x8, 0xfffffff9, 0x3, 0x62, 0x1, 0x46f, 0x4, 0x2, 0xfffffffb, 0x800, 0xd, 0x3, 0x8, 0x4, 0x2, 0x200, 0xebf1, 0x97ca, 0x8, 0xa, 0x2, 0x7, 0x8, 0xc2, 0xff, 0x8, 0x5b, 0x40000, 0x0, 0x2, 0x1, 0x4fe9, 0x3, 0x1, 0x80000001, 0x7d, 0xff, 0x5, 0xfffffff8, 0x7, 0x80f, 0x40, 0x91f, 0x6, 0x8, 0x8, 0xfffff5c3, 0x6, 0x3268, 0x9, 0x7, 0x5, 0x10, 0x4, 0x2f2f2cfb, 0x3, 0x8000, 0xdb21, 0xfffffffd, 0x3, 0x1000, 0x2, 0xff, 0x2, 0x10001, 0x2, 0x8b, 0x9, 0x2786, 0xffffffff, 0x5, 0x3, 0x10, 0x5, 0x10001, 0xba000000, 0x1, 0x7, 0x7fffffff, 0x9f, 0x2, 0xed, 0x1, 0x80000000, 0x74e, 0x6, 0xffffffff, 0x2, 0xb, 0x2, 0x4, 0x9, 0x2, 0x6, 0x0, 0x200, 0x9, 0xbece, 0x8, 0x3, 0x1, 0xd, 0x5, 0x3, 0x4, 0xac30, 0x6, 0x91, 0x0, 0x600000, 0x7, 0x10a, 0x5, 0x3ff, 0x10000, 0x4, 0x9, 0x2, 0x0, 0x209, 0x8bf5, 0x0, 0x4, 0x8, 0xfffffffb, 0x400, 0xfffffe00, 0x9, 0x5, 0x0, 0x3, 0x6, 0x7, 0x4, 0xf, 0x2, 0x4, 0xfffff48c, 0x1ff, 0xe, 0x34, 0x4, 0x4, 0x1, 0x8000, 0x7, 0x160f, 0x0, 0x1, 0x2, 0x7, 0x81, 0x8, 0x4, 0x6, 0x0, 0xfffffff7, 0x2, 0x32, 0x3, 0x6, 0x4, 0x0, 0x800, 0x0, 0x9, 0x0, 0x1, 0x4, 0x9, 0x9, 0x1, 0x3, 0x7, 0x7, 0x2, 0x10, 0x7fff, 0x7, 0x9, 0x2, 0x25, 0xffff0000, 0x3ff, 0x4, 0x502e, 0x5, 0x8, 0x1, 0x4, 0xfffffffb, 0x80, 0x0, 0x1, 0x5, 0x7, 0x3ff, 0x6, 0x7, 0x0, 0x0, 0x3, 0xffffffff, 0x7, 0x3, 0x2, 0xfffffffa, 0x5, 0x4, 0xcf, 0xfffffff8, 0xffb, 0x7, 0x8, 0x10000, 0x80000000, 0x5, 0x5, 0x2f, 0x5, 0x1, 0x4245, 0x8, 0x7ff, 0x3, 0x8, 0x40, 0x5, 0x7, 0x8, 0x1, 0x0, 0x9, 0x2, 0x4, 0x3, 0x9, 0x1, 0x1000, 0x80000000, 0x2, 0x0, 0x7, 0x40000000, 0x9, 0xfff, 0xa, 0x4, 0x1, 0x1, 0x7, 0x1ff, 0x8, 0x3, 0x6, 0x5, 0x8001, 0x0, 0x92f2, 0x1, 0x5, 0x7, 0x0, 0x10001, 0x40000, 0x7, 0x40, 0xff, 0x5, 0xcacd, 0x9], 0x1, 0x400, 0x8}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) close(r1) 22.022074316s ago: executing program 2 (id=1570): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac000000000000000000000100", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 21.841602218s ago: executing program 2 (id=1571): modify_ldt$write(0x1, &(0x7f0000000040)={0x401, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000900), 0x1, 0x2200) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x4, 0x2014}) modify_ldt$write2(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x4000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0xb3c57692686b139c) modify_ldt$write2(0x11, &(0x7f0000000080)={0x4, 0xffffffffffffffff, 0x400, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) (async) modify_ldt$write2(0x11, &(0x7f0000000080)={0x4, 0xffffffffffffffff, 0x400, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) 21.698063469s ago: executing program 1 (id=1572): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r1], 0xf8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f800000016000100000000000000000000000000000000000000ffffffffffffff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000000000000001000000003300000000000000000000000000ffffac14142900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00"], 0xf8}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0xf, 0x0, 0xffffefff}, {0x6}]}, 0x10) r4 = gettid() timer_create(0x1, &(0x7f0000000100)={0x0, 0x11, 0x4, @tid=r4}, &(0x7f0000000000)=0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x5) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r8, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = socket$netlink(0x10, 0x3, 0x4) write(r9, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f0000000240)=0x9, 0x1, 0x2, 0x0, 0x0, 0xfffffffc) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) timer_gettime(r5, &(0x7f0000000080)) r10 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) keyctl$update(0x2, r10, 0x0, 0x0) 21.465348475s ago: executing program 1 (id=1573): socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x75) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000540)={0x12, {{0x29, 0x2, 0x43040001, @mcast1, 0x1}}}, 0xfd87) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010001ffffcffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000100000000002c0012800b00010067726574617000001c00028006000e000200000006000f000700000008000700ac14142808000a00", @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000240)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) setpriority(0x0, r4, 0x80000000) (async) r5 = socket$igmp(0x2, 0x3, 0x2) (async) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x403, 0xfffffffe, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_PROTOCOL={0x6, 0x8, 0x8100}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) (async) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 21.385996442s ago: executing program 1 (id=1574): socket$kcm(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000330700ff020000000000000000000000000001"], 0xfdef) 21.385802152s ago: executing program 2 (id=1575): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x38}}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0xbb, 0x7e, 0x0, 0x8, 0xeb1, 0x7007, 0x204, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x2, 0x10, 0x7, "", [{{0x9, 0x4, 0x19, 0x2, 0x0, 0x7d, 0x9a, 0xa, 0x80}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) 21.17213209s ago: executing program 4 (id=1576): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, 0xffffffffffffffff, &(0x7f0000000000)=0x26) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000010001020d24060000030800000031cc21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001", @ANYRESHEX=0x0], 0x0) io_uring_enter(0xffffffffffffffff, 0x234f, 0xb1e6, 0x234f, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0xcc003, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) epoll_create1(0x0) ioctl$OCFS2_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x1, 0x2, 0x6767, 0x0, 0x1000}) readv(r2, &(0x7f0000001f40)=[{0x0}, {&(0x7f00000004c0)=""/36, 0x24}, {&(0x7f0000000540)=""/35, 0x23}, {0x0, 0x2400}, {0x0}], 0x5) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="00e6ff000200000065727370616f00000800028004001200aa160000000000004c3d36d1f1094cd8f0655622d86603d15e83e606e68d14ec"], 0x40}}, 0x0) 20.153698489s ago: executing program 5 (id=1582): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904dfba1c762aaf44abf12f890c5504eefc3b182454b6bbbbd55f3c85e5"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)={0x20, 0x23}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 18.827154063s ago: executing program 5 (id=1584): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x408, 0x3}, 0x30, 0x3) landlock_restrict_self(r0, 0x1) r1 = fsopen(&(0x7f00000003c0)='tmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x37, &(0x7f0000000500)={0x3f, 0x401, 0x401}) fsmount(r1, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 18.745927161s ago: executing program 5 (id=1585): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x2c, 0x20, 0xf4db158ec847dc81, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x10012}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0xfffffff8}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x337}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x44004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200030000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 18.396730829s ago: executing program 0 (id=1586): socket$kcm(0x2, 0x5, 0x84) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = memfd_create(&(0x7f0000000100)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x0, 0x2, 0xffff) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xc, 0x12, r0, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="200f11000000", @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15.364803555s ago: executing program 0 (id=1587): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd0000008019000000000000000000000000000000000000000300", [0x8, 0xffffffff9673e35d]}}) 15.269596502s ago: executing program 0 (id=1588): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000feffffff000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000008b7030000000000008500000007000000bf09200000000000a5090100ffffff80bf00200000000000ad980000000000005e080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) 15.269185094s ago: executing program 0 (id=1589): socket$nl_generic(0x10, 0x3, 0x10) 15.260680926s ago: executing program 0 (id=1590): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 15.204173352s ago: executing program 0 (id=1591): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) syz_open_dev$usbfs(0x0, 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r2) epoll_pwait2(r1, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f0000000340), &(0x7f0000000380)={[0x3]}, 0x8) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, 0x0, 0x0, 0xfffffffffffffffc, 0x1541}) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000000440)={0x2, 0x85, "0fa4a89fec5607c373c005ab881d5f8ea3fbb0d42f9a29d71e9c7a126a2030ffa6198a7abd7d4afd8ee2492ed26893d3694cc1f8368289fc77a2946ac9436e91e2c7c7ca4391a2d2bba4e0ef352610105e4b6dc28de909f20ea9d4bbeb646a34f50a448f4ec33f37e4d94039022a52178fce2fb6ddfa42649ba168631ef7dc7c411620dd88"}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, &(0x7f0000000200)={0x6, &(0x7f0000000400)=[{0x40, 0x3, 0x7, 0x103}, {0x3, 0x2, 0x0, 0x9}, {0xd8, 0x2, 0x2, 0x6}, {0x8, 0x40, 0x34, 0x4}, {0x7ff, 0x5, 0x35, 0x6}, {0xb9e, 0x6, 0x9, 0x6}]}) close_range(r5, 0xffffffffffffffff, 0x0) 6.003792607s ago: executing program 33 (id=1574): socket$kcm(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000330700ff020000000000000000000000000001"], 0xfdef) 5.962041221s ago: executing program 34 (id=1575): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x38}}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0xbb, 0x7e, 0x0, 0x8, 0xeb1, 0x7007, 0x204, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x2, 0x10, 0x7, "", [{{0x9, 0x4, 0x19, 0x2, 0x0, 0x7d, 0x9a, 0xa, 0x80}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) 5.902592596s ago: executing program 35 (id=1576): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, 0xffffffffffffffff, &(0x7f0000000000)=0x26) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000010001020d24060000030800000031cc21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001", @ANYRESHEX=0x0], 0x0) io_uring_enter(0xffffffffffffffff, 0x234f, 0xb1e6, 0x234f, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0xcc003, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) epoll_create1(0x0) ioctl$OCFS2_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x1, 0x2, 0x6767, 0x0, 0x1000}) readv(r2, &(0x7f0000001f40)=[{0x0}, {&(0x7f00000004c0)=""/36, 0x24}, {&(0x7f0000000540)=""/35, 0x23}, {0x0, 0x2400}, {0x0}], 0x5) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="00e6ff000200000065727370616f00000800028004001200aa160000000000004c3d36d1f1094cd8f0655622d86603d15e83e606e68d14ec"], 0x40}}, 0x0) 3.505186659s ago: executing program 36 (id=1585): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x2c, 0x20, 0xf4db158ec847dc81, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x10012}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0xfffffff8}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x337}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x44004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200030000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 0s ago: executing program 37 (id=1591): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) syz_open_dev$usbfs(0x0, 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r2) epoll_pwait2(r1, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f0000000340), &(0x7f0000000380)={[0x3]}, 0x8) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, 0x0, 0x0, 0xfffffffffffffffc, 0x1541}) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000000440)={0x2, 0x85, "0fa4a89fec5607c373c005ab881d5f8ea3fbb0d42f9a29d71e9c7a126a2030ffa6198a7abd7d4afd8ee2492ed26893d3694cc1f8368289fc77a2946ac9436e91e2c7c7ca4391a2d2bba4e0ef352610105e4b6dc28de909f20ea9d4bbeb646a34f50a448f4ec33f37e4d94039022a52178fce2fb6ddfa42649ba168631ef7dc7c411620dd88"}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, &(0x7f0000000200)={0x6, &(0x7f0000000400)=[{0x40, 0x3, 0x7, 0x103}, {0x3, 0x2, 0x0, 0x9}, {0xd8, 0x2, 0x2, 0x6}, {0x8, 0x40, 0x34, 0x4}, {0x7ff, 0x5, 0x35, 0x6}, {0xb9e, 0x6, 0x9, 0x6}]}) close_range(r5, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 3F0 pid 0x6C17 [ 304.301903][T11019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.332457][T11019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.395080][ T9895] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 304.792149][T11052] syz.1.1354 (11052): /proc/11051/oom_adj is deprecated, please use /proc/11051/oom_score_adj instead. [ 305.036607][T11068] loop4: detected capacity change from 0 to 7 [ 305.052549][T11068] loop4: [ 305.057313][T11068] loop4: partition table partially beyond EOD, truncated [ 305.198645][ T7972] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 305.381005][ T7972] usb 1-1: unable to get BOS descriptor or descriptor too short [ 305.389863][ T7972] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.400094][ T7972] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 305.411052][ T7972] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 305.420309][ T7972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.428548][ T7972] usb 1-1: Product: syz [ 305.432735][ T7972] usb 1-1: Manufacturer: syz [ 305.437373][ T7972] usb 1-1: SerialNumber: syz [ 305.446106][ T7972] usb 1-1: selecting invalid altsetting 1 [ 305.453758][ T7972] usb 1-1: unit 6 not found! [ 305.646158][ T7972] usb 1-1: 2:0: failed to get current value for ch 0 (-32) [ 305.720351][ T7972] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 305.802673][ T9895] usb 1-1: USB disconnect, device number 66 [ 305.854427][ T5627] udevd[5627]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 305.880658][T11080] netlink: 'syz.0.1361': attribute type 1 has an invalid length. [ 305.914956][T11080] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 306.006169][T11089] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 306.083681][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1365'. [ 306.135297][T11092] bond1: option ad_actor_sys_prio: invalid value (0) [ 306.149794][T11092] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 306.172888][T11092] bond1 (unregistering): Released all slaves [ 306.223331][T11097] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1365'. [ 306.255557][T11099] syz.2.1366: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 306.296652][T11099] CPU: 1 UID: 0 PID: 11099 Comm: syz.2.1366 Tainted: G L syzkaller #0 PREEMPT(full) [ 306.296692][T11099] Tainted: [L]=SOFTLOCKUP [ 306.296698][T11099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 306.296706][T11099] Call Trace: [ 306.296712][T11099] [ 306.296717][T11099] dump_stack_lvl+0xe8/0x150 [ 306.296742][T11099] warn_alloc+0x24c/0x270 [ 306.296772][T11099] ? __se_sys_ioctl+0x47/0x170 [ 306.296794][T11099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.296816][T11099] ? __pfx_warn_alloc+0x10/0x10 [ 306.296845][T11099] __vmalloc_node_range_noprof+0x12c/0x1730 [ 306.296864][T11099] ? __mutex_trylock_common+0x15f/0x270 [ 306.296879][T11099] ? __pfx___mutex_trylock_common+0x10/0x10 [ 306.296901][T11099] ? trace_contention_end+0x3d/0x140 [ 306.296925][T11099] ? __mutex_lock+0x30d/0x1550 [ 306.296944][T11099] ? lock_release+0x4b/0x3c0 [ 306.296961][T11099] ? kfree+0x1c5/0x640 [ 306.296992][T11099] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 306.297011][T11099] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 306.297027][T11099] ? tomoyo_path_number_perm+0x219/0x5f0 [ 306.297047][T11099] ? dvb_demux_do_ioctl+0x320/0x540 [ 306.297074][T11099] ? __pfx___mutex_lock+0x10/0x10 [ 306.297094][T11099] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 306.297121][T11099] vmalloc_noprof+0xb2/0xe0 [ 306.297146][T11099] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 306.297163][T11099] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 306.297180][T11099] dvb_demux_do_ioctl+0x45d/0x540 [ 306.297197][T11099] dvb_usercopy+0x199/0x2e0 [ 306.297220][T11099] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 306.297246][T11099] ? __pfx_dvb_usercopy+0x10/0x10 [ 306.297274][T11099] ? __fget_files+0x3a2/0x420 [ 306.297298][T11099] ? __fget_files+0x2a/0x420 [ 306.297316][T11099] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 306.297331][T11099] dvb_demux_ioctl+0x29/0x40 [ 306.297347][T11099] __se_sys_ioctl+0xfc/0x170 [ 306.297366][T11099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.297387][T11099] do_syscall_64+0x174/0x580 [ 306.297404][T11099] ? trace_irq_disable+0x3b/0x140 [ 306.297433][T11099] ? clear_bhb_loop+0x40/0x90 [ 306.297453][T11099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.297465][T11099] RIP: 0033:0x7fb5a4f9ce59 [ 306.297477][T11099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.297492][T11099] RSP: 002b:00007fb5a5d8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 306.297507][T11099] RAX: ffffffffffffffda RBX: 00007fb5a5215fa0 RCX: 00007fb5a4f9ce59 [ 306.297522][T11099] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 306.297537][T11099] RBP: 00007fb5a5032e6f R08: 0000000000000000 R09: 0000000000000000 [ 306.297550][T11099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.297562][T11099] R13: 00007fb5a5216038 R14: 00007fb5a5215fa0 R15: 00007fb5a533fa48 [ 306.297584][T11099] [ 306.588666][T11099] Mem-Info: [ 306.592081][T11099] active_anon:8567 inactive_anon:0 isolated_anon:0 [ 306.592081][T11099] active_file:0 inactive_file:59118 isolated_file:0 [ 306.592081][T11099] unevictable:768 dirty:177 writeback:0 [ 306.592081][T11099] slab_reclaimable:8543 slab_unreclaimable:97198 [ 306.592081][T11099] mapped:30973 shmem:1314 pagetables:1825 [ 306.592081][T11099] sec_pagetables:0 bounce:0 [ 306.592081][T11099] kernel_misc_reclaimable:0 [ 306.592081][T11099] free:1302778 free_pcp:10464 free_cma:0 [ 306.637343][T11099] Node 0 active_anon:34268kB inactive_anon:0kB active_file:0kB inactive_file:236264kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123892kB dirty:704kB writeback:0kB shmem:3720kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14668kB pagetables:7176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 306.671940][T11099] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 306.678495][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 306.704900][T11099] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 306.743423][T11099] lowmem_reserve[]: 0 2492 2492 2492 2492 [ 306.749261][T11099] Node 0 DMA32 free:1244740kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34268kB inactive_anon:0kB active_file:0kB inactive_file:236264kB unevictable:1536kB writepending:704kB zspages:0kB present:3129332kB managed:2551992kB mlocked:0kB bounce:0kB free_pcp:41576kB local_pcp:28808kB free_cma:0kB [ 306.782358][T11099] lowmem_reserve[]: 0 0 0 0 0 [ 306.787102][T11099] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:644kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 306.816662][T11099] lowmem_reserve[]: 0 0 0 0 0 [ 306.821470][T11099] Node 1 Normal free:3951012kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:252kB local_pcp:0kB free_cma:0kB [ 306.853420][T11099] lowmem_reserve[]: 0 0 0 0 0 [ 306.858154][T11099] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 306.870919][T11099] Node 0 DMA32: 839*4kB (UME) 201*8kB (UME) 546*16kB (UME) 1061*32kB (UME) 383*64kB (UME) 125*128kB (UME) 62*256kB (UME) 26*512kB (UM) 19*1024kB (UM) 5*2048kB (M) 268*4096kB (UME) = 1244772kB [ 306.896891][T11099] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 306.908685][T11099] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 1*16kB (M) 4*32kB (UM) 10*64kB (UM) 5*128kB (UM) 2*256kB (M) 3*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 962*4096kB (M) = 3951012kB [ 306.969555][ T7972] usb 5-1: USB disconnect, device number 69 [ 306.976789][ T7972] usblp0: removed [ 307.074627][T11099] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 307.106288][T11107] loop4: detected capacity change from 0 to 7 [ 307.115942][T11099] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 307.127178][T11107] loop4: [ 307.130741][T11107] loop4: partition table partially beyond EOD, truncated [ 307.148038][T11099] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 307.159263][T11099] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 307.184952][T11111] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1366'. [ 307.244812][T11099] 61201 total pagecache pages [ 307.298128][T11099] 0 pages in swap cache [ 307.319401][T11118] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 307.368618][T11099] Free swap = 124996kB [ 307.377338][T11115] bridge_slave_0: left allmulticast mode [ 307.392748][T11099] Total swap = 124996kB [ 307.400121][T11115] bridge_slave_0: left promiscuous mode [ 307.412842][T11099] 2097051 pages RAM [ 307.427522][T11099] 0 pages HighMem/MovableOnly [ 307.442336][T11115] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.458417][T11099] 427277 pages reserved [ 307.474953][T11099] 0 pages cma reserved [ 307.668562][ T7974] usb 2-1: new low-speed USB device number 72 using dummy_hcd [ 307.683731][T11115] bridge_slave_1: left allmulticast mode [ 307.715214][T11115] bridge_slave_1: left promiscuous mode [ 307.748003][T11115] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.772183][T11115] bond0: (slave bond_slave_0): Releasing backup interface [ 307.792658][T11115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.800746][T11115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.811135][T11115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.819887][T11115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.830106][T11115] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 307.846969][T11125] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1373'. [ 307.859277][ T7974] usb 2-1: unable to get BOS descriptor or descriptor too short [ 307.871514][ T7974] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xD is Bulk; changing to Interrupt [ 307.883248][T11129] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 307.902911][ T7982] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 307.922978][ T7974] usb 2-1: string descriptor 0 read error: -22 [ 307.932260][ T7974] usb 2-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice= 0.40 [ 307.946176][ T7974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.995789][T11121] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 308.015037][ T7974] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 308.085567][ T7974] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 308.098616][ T7982] usb 3-1: Using ep0 maxpacket: 16 [ 308.107038][ T7982] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 308.120509][ T7982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 308.136806][ T7982] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 308.146548][ T7982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.154883][ T7982] usb 3-1: Product: syz [ 308.159459][ T7982] usb 3-1: Manufacturer: syz [ 308.164300][ T7982] usb 3-1: SerialNumber: syz [ 308.170513][ T7982] usb 3-1: config 0 descriptor?? [ 308.181322][ T7982] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 308.192975][ T7982] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 308.211204][ T7974] usb 2-1: USB disconnect, device number 72 [ 308.780975][ T7982] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 308.809136][ T7982] em28xx 3-1:0.0: Config register raw data: 0x41 [ 309.010097][T11127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.021651][T11127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.043341][T11127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.060075][T11127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.082310][T11127] ip6tnl2: entered allmulticast mode [ 309.098590][ T5358] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 309.101259][T11127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.149744][T11127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.191837][ T9895] usb 3-1: USB disconnect, device number 94 [ 309.200880][ T9895] em28xx 3-1:0.0: Disconnecting em28xx [ 309.218630][ T9895] em28xx 3-1:0.0: Freeing device [ 309.245869][T11157] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 309.251941][ T5358] usb 2-1: device descriptor read/64, error -71 [ 309.260586][T11157] syzkaller1: linktype set to 785 [ 309.269379][T11157] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1381'. [ 309.498633][ T5358] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 309.618555][ T7982] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 309.638548][ T5358] usb 2-1: device descriptor read/64, error -71 [ 309.758849][ T5358] usb usb2-port1: attempt power cycle [ 309.778562][ T7982] usb 5-1: Using ep0 maxpacket: 8 [ 309.792946][ T7982] usb 5-1: config 8 has an invalid interface number: 188 but max is 0 [ 309.814575][ T7982] usb 5-1: config 8 has no interface number 0 [ 309.830893][ T7982] usb 5-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 309.862174][ T7982] usb 5-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 309.889603][ T7982] usb 5-1: config 8 interface 188 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 309.916644][ T7982] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 309.936337][ T7982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.955701][ T7982] usb 5-1: Product: syz [ 309.965875][ T7982] usb 5-1: Manufacturer: syz [ 309.978355][ T7982] usb 5-1: SerialNumber: syz [ 310.108546][ T5358] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 310.129563][ T5358] usb 2-1: device descriptor read/8, error -71 [ 310.212012][ T7982] vmk80xx 5-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 310.229713][ T7982] vmk80xx 5-1:8.188: probe with driver vmk80xx failed with error -22 [ 310.250616][ T7982] usb 5-1: USB disconnect, device number 70 [ 310.379971][ T5358] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 310.408959][ T5358] usb 2-1: device descriptor read/8, error -71 [ 310.438523][ T9895] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 310.528799][ T5358] usb usb2-port1: unable to enumerate USB device [ 310.601465][ T9895] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 310.612779][ T9895] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 310.622893][ T9895] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 310.632046][ T9895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.642293][T11173] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 310.652427][ T9895] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 310.924658][ T7974] usb 1-1: USB disconnect, device number 67 [ 310.980768][ T7982] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 311.138613][ T7982] usb 5-1: Using ep0 maxpacket: 16 [ 311.145055][ T7982] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 311.159190][ T7982] usb 5-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 311.168387][ T7982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.178010][ T7982] usb 5-1: config 0 descriptor?? [ 311.537621][T11187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1390'. [ 311.546717][T11187] openvswitch: netlink: Actions may not be safe on all matching packets [ 311.603740][ T7982] hid (null): bogus close delimiter [ 311.613253][ T7982] nzxt-kraken2 0003:1E71:170E.001C: bogus close delimiter [ 311.624065][ T7982] nzxt-kraken2 0003:1E71:170E.001C: item 0 0 2 10 parsing failed [ 311.634478][ T7982] nzxt-kraken2 0003:1E71:170E.001C: hid parse failed with -22 [ 311.642236][ T7982] nzxt-kraken2 0003:1E71:170E.001C: probe with driver nzxt-kraken2 failed with error -22 [ 311.728654][ T9895] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 311.816691][ T7972] usb 5-1: USB disconnect, device number 71 [ 311.880895][T11205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1396'. [ 311.897088][T11205] 8021q: adding VLAN 0 to HW filter on device bond4 [ 311.905800][ T9895] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.916545][ T9895] usb 3-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=9e.06 [ 311.925883][ T9895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.934155][T11205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1396'. [ 311.945150][ T9895] usb 3-1: config 0 descriptor?? [ 311.954146][ T9895] gspca_main: kinect-2.14.0 probing 045e:02bf [ 311.963252][T11205] vlan2: entered promiscuous mode [ 311.969019][T11205] hsr0: entered promiscuous mode [ 311.975780][T11205] vlan2: entered allmulticast mode [ 311.978753][ T7982] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 311.981055][T11205] hsr0: entered allmulticast mode [ 311.993720][T11205] hsr_slave_0: entered allmulticast mode [ 312.000634][T11205] hsr_slave_1: entered allmulticast mode [ 312.064083][T11205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1396'. [ 312.074933][T11205] hsr_slave_0: left promiscuous mode [ 312.080924][T11205] hsr_slave_1: left promiscuous mode [ 312.115524][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 312.115545][ T29] audit: type=1326 audit(1782105418.896:16764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11204 comm="syz.1.1396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489199ce59 code=0x7ffc0000 [ 312.118601][ T7982] usb 1-1: device descriptor read/64, error -71 [ 312.123896][ T29] audit: type=1326 audit(1782105418.896:16765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11204 comm="syz.1.1396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489199ce59 code=0x7ffc0000 [ 312.181892][ T29] audit: type=1326 audit(1782105418.906:16766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11204 comm="syz.1.1396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489199ce59 code=0x7ffc0000 [ 312.196384][ T7972] usb 3-1: USB disconnect, device number 95 [ 312.206807][ T29] audit: type=1326 audit(1782105418.906:16767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11204 comm="syz.1.1396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489199ce59 code=0x7ffc0000 [ 312.229937][ T2366] pvrusb2: request_firmware fatal error with code=-110 [ 312.245664][ T29] audit: type=1326 audit(1782105418.906:16768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11204 comm="syz.1.1396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f489199ce59 code=0x7ffc0000 [ 312.260503][ T2366] pvrusb2: Failure uploading firmware1 [ 312.270958][ T29] audit: type=1326 audit(1782105418.906:16769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11204 comm="syz.1.1396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489199ce59 code=0x7ffc0000 [ 312.302004][ T29] audit: type=1326 audit(1782105418.906:16770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11204 comm="syz.1.1396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f489195d68e code=0x7ffc0000 [ 312.327097][ T29] audit: type=1326 audit(1782105418.906:16771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11204 comm="syz.1.1396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489199ce59 code=0x7ffc0000 [ 312.351793][ T2366] pvrusb2: Device initialization was not successful. [ 312.365181][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 312.383364][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 312.392860][ T29] audit: type=1326 audit(1782105418.936:16772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11204 comm="syz.1.1396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489199ce59 code=0x7ffc0000 [ 312.392876][ T938] pvrusb2: Device being rendered inoperable [ 312.392906][ T29] audit: type=1326 audit(1782105418.936:16773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11204 comm="syz.1.1396" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489199ce59 code=0x7ffc0000 [ 312.417687][ T7982] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 312.598949][ T7982] usb 1-1: device descriptor read/64, error -71 [ 312.719807][ T7982] usb usb1-port1: attempt power cycle [ 312.748665][ T938] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 312.808567][ T9895] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 312.817569][T11231] syzkaller1: entered promiscuous mode [ 312.824333][T11231] syzkaller1: entered allmulticast mode [ 312.834814][T11231] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 312.878637][ T938] usb 6-1: device descriptor read/64, error -71 [ 312.971708][ T9895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.983364][ T9895] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 312.993691][ T9895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.003472][ T9895] usb 5-1: config 0 descriptor?? [ 313.058723][ T7982] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 313.079213][ T7982] usb 1-1: device descriptor read/8, error -71 [ 313.106648][T11239] netlink: 'syz.2.1405': attribute type 13 has an invalid length. [ 313.118556][ T938] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 313.126923][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 313.158782][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 313.170150][ T7249] bond4: (slave gretap0): failed to get link speed/duplex [ 313.213933][ T9895] usbhid 5-1:0.0: can't add hid device: -71 [ 313.221328][ T9895] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 313.232611][ T9895] usb 5-1: USB disconnect, device number 72 [ 313.258949][ T938] usb 6-1: device descriptor read/64, error -71 [ 313.288579][ T7210] bond4: (slave gretap0): failed to get link speed/duplex [ 313.318544][ T7982] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 313.338982][ T7982] usb 1-1: device descriptor read/8, error -71 [ 313.368749][ T938] usb usb6-port1: attempt power cycle [ 313.408548][ T7249] bond4: (slave gretap0): failed to get link speed/duplex [ 313.459515][ T7982] usb usb1-port1: unable to enumerate USB device [ 313.518692][ T7249] bond4: (slave gretap0): failed to get link speed/duplex [ 313.644323][ T7249] bond4: (slave gretap0): failed to get link speed/duplex [ 313.669025][ T9895] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 313.718574][ T938] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 313.739198][ T938] usb 6-1: device descriptor read/8, error -71 [ 313.758618][ T7241] bond4: (slave gretap0): failed to get link speed/duplex [ 313.830461][ T9895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.853787][ T9895] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 313.868778][ T7241] bond4: (slave gretap0): failed to get link speed/duplex [ 313.884706][ T9895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.911282][ T9895] usb 5-1: config 0 descriptor?? [ 313.978620][ T938] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 313.998755][ T7210] bond4: (slave gretap0): failed to get link speed/duplex [ 314.007214][ T938] usb 6-1: device descriptor read/8, error -71 [ 314.129144][ T938] usb usb6-port1: unable to enumerate USB device [ 314.541597][T11218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.562327][T11218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.575615][T11263] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1411'. [ 314.587325][T11263] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1411'. [ 314.609044][T11218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.629222][T11218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.650383][T11278] ip6gretap0: left allmulticast mode [ 315.670379][T11278] macsec1: left promiscuous mode [ 315.689392][T11278] macsec1: left allmulticast mode [ 315.706811][ T9895] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 315.724115][ T7249] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.753528][ T9895] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input32 [ 315.807538][ T7249] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.849712][ T7249] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.873463][ T9895] usb 5-1: USB disconnect, device number 73 [ 315.879502][ C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 315.882927][ T7249] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.081324][T11295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1420'. [ 316.328304][T11306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1423'. [ 316.347042][T11305] kernel read not supported for file / œ7³ÏüâW)«s“§Ç!Qöì¥fsõ‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 11305 comm: syz.2.1421) [ 316.388105][T11306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1423'. [ 316.508987][T11310] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1424'. [ 317.076834][T11312] dvmrp8: entered allmulticast mode [ 317.083628][T11324] loop2: detected capacity change from 0 to 7 [ 317.112617][T11324] loop2: [ 317.119093][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 317.119112][ T29] audit: type=1326 audit(1782105423.906:16877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11303 comm="syz.4.1423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f056575d68e code=0x7ffc0000 [ 317.151380][T11324] loop2: partition table partially beyond EOD, truncated [ 317.293297][ T29] audit: type=1326 audit(1782105424.076:16878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11303 comm="syz.4.1423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f056579ce59 code=0x7ffc0000 [ 317.350918][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.358789][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.369547][ T9895] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 317.398560][ T29] audit: type=1326 audit(1782105424.126:16879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11303 comm="syz.4.1423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f056579ce59 code=0x7ffc0000 [ 317.538775][ T9895] usb 6-1: Using ep0 maxpacket: 32 [ 317.553997][ T9895] usb 6-1: unable to get BOS descriptor or descriptor too short [ 317.578027][ T9895] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 317.633832][ T9895] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 317.653353][ T9895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.677620][ T9895] usb 6-1: Product: syz [ 317.695412][ T9895] usb 6-1: Manufacturer: syz [ 317.706440][ T9895] usb 6-1: SerialNumber: syz [ 318.018638][ T7974] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 318.048598][ T7966] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 318.148783][ T5358] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 318.168599][ T7250] net_ratelimit: 28 callbacks suppressed [ 318.168621][ T7250] bond4: (slave gretap0): failed to get link speed/duplex [ 318.191122][ T7974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 318.208523][ T7966] usb 2-1: Using ep0 maxpacket: 16 [ 318.216087][ T7966] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 318.218009][ T7974] usb 1-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 318.233821][ T7966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.247041][ T7974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.248520][ T7974] usb 1-1: config 0 descriptor?? [ 318.257002][ T9895] usb 6-1: Cannot retrieve CPort count: -110 [ 318.266978][ T9895] usb 6-1: Cannot retrieve CPort count: -110 [ 318.278400][ T9895] es2_ap_driver 6-1:7.0: probe with driver es2_ap_driver failed with error -110 [ 318.287994][ T7966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.298342][T11326] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 318.305606][ T7252] bond4: (slave gretap0): failed to get link speed/duplex [ 318.315504][ T7966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 318.328779][ T5358] usb 5-1: Using ep0 maxpacket: 16 [ 318.334885][ T7966] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 318.358345][ T5358] usb 5-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 318.371778][ T5358] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.382522][ T7966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.390868][ T5358] usb 5-1: Product: syz [ 318.395740][ T5358] usb 5-1: Manufacturer: syz [ 318.401386][ T7966] usb 2-1: config 0 descriptor?? [ 318.406603][ T5358] usb 5-1: SerialNumber: syz [ 318.417023][ T5358] usb 5-1: config 0 descriptor?? [ 318.422177][ T7241] bond4: (slave gretap0): failed to get link speed/duplex [ 318.432587][ T5358] gspca_main: spca508-2.14.0 probing 041e:4018 [ 318.538597][ T7241] bond4: (slave gretap0): failed to get link speed/duplex [ 318.608557][ T7982] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 318.639039][ T5358] gspca_spca508: reg_read err -32 [ 318.644874][ T5358] gspca_spca508: reg_read err -32 [ 318.650806][ T5358] gspca_spca508: reg_read err -32 [ 318.656485][ T5358] gspca_spca508: reg_read err -32 [ 318.658556][ T7241] bond4: (slave gretap0): failed to get link speed/duplex [ 318.670964][T11333] vivid-000: ================= START STATUS ================= [ 318.679150][T11333] vivid-000: Test Pattern: 75% Colorbar [ 318.684769][T11333] vivid-000: Fill Percentage of Frame: 100 [ 318.690779][T11333] vivid-000: Horizontal Movement: No Movement [ 318.697073][T11333] vivid-000: Vertical Movement: No Movement [ 318.703317][T11333] vivid-000: OSD Text Mode: All [ 318.708282][T11333] vivid-000: Show Border: false [ 318.713677][T11333] vivid-000: Show Square: false [ 318.718656][T11333] vivid-000: Sensor Flipped Horizontally: false [ 318.725067][T11333] vivid-000: Sensor Flipped Vertically: false [ 318.733513][T11334] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 318.739223][ T7974] asus 0003:0B05:1ABE.001D: unknown main item tag 0x0 [ 318.744278][T11333] vivid-000: Insert SAV Code in Image: [ 318.747822][T11334] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 318.748250][ T7974] asus 0003:0B05:1ABE.001D: unknown main item tag 0x0 [ 318.753592][T11333] false [ 318.761880][ T7974] asus 0003:0B05:1ABE.001D: unknown main item tag 0x0 [ 318.768767][T11333] [ 318.770928][ T7974] asus 0003:0B05:1ABE.001D: unknown main item tag 0x0 [ 318.777602][T11333] vivid-000: Insert EAV Code in Image: [ 318.780002][ T7982] usb 3-1: Using ep0 maxpacket: 32 [ 318.786974][T11333] false [ 318.792578][ T7241] bond4: (slave gretap0): failed to get link speed/duplex [ 318.798059][T11333] [ 318.801088][ T7974] asus 0003:0B05:1ABE.001D: unknown main item tag 0x0 [ 318.808281][T11333] vivid-000: Insert Video Guard Band: [ 318.811606][ T7974] asus 0003:0B05:1ABE.001D: unknown main item tag 0x0 [ 318.817308][T11333] false [ 318.823704][ T7974] asus 0003:0B05:1ABE.001D: unknown main item tag 0x0 [ 318.830258][T11333] [ 318.833174][ T7982] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 318.849709][ T7966] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.001E/input/input33 [ 318.861883][ T7974] asus 0003:0B05:1ABE.001D: unknown main item tag 0x0 [ 318.867029][T11333] vivid-000: Reduced Framerate: [ 318.868965][ T7982] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 318.868995][ T7982] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 318.869041][ T7982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 318.869064][ T7982] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 318.869090][ T7982] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 318.869132][ T7982] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 318.869155][ T7982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.870649][ T7982] usb 3-1: config 0 descriptor?? [ 318.881397][T11333] false [ 318.883444][ T7974] asus 0003:0B05:1ABE.001D: unknown main item tag 0x0 [ 318.904926][T11333] [ 318.911632][ T7250] bond4: (slave gretap0): failed to get link speed/duplex [ 318.925057][T11333] vivid-000: HDMI 000-0 Is Connected To: [ 318.935596][ T7974] asus 0003:0B05:1ABE.001D: unknown main item tag 0x0 [ 318.950071][T11333] Test Pattern Generator [ 318.996873][ T7966] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.001E/input/input34 [ 319.006645][ T7974] asus 0003:0B05:1ABE.001D: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.0-1/input0 [ 319.036769][T11333] [ 319.040587][T11333] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 319.042471][ T7250] bond4: (slave gretap0): failed to get link speed/duplex [ 319.050670][T11333] vivid-000: Enable Capture Cropping: [ 319.076002][ T7974] usb 1-1: USB disconnect, device number 72 [ 319.082986][T11333] true [ 319.096764][ T7966] kye 0003:0458:5013.001E: input,hiddev0,hidraw1: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 319.120835][T11333] [ 319.129007][T11333] vivid-000: Enable Capture Composing: true [ 319.136447][T11333] vivid-000: Enable Capture Scaler: true [ 319.164971][T11333] vivid-000: Timestamp Source: End of Frame [ 319.168563][ T7250] bond4: (slave gretap0): failed to get link speed/duplex [ 319.172057][ T5358] gspca_spca508: reg_read err -110 [ 319.194510][ T7982] usblp 3-1:0.0: usblp1: USB Bidirectional printer dev 96 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 319.200129][ T7966] usb 2-1: USB disconnect, device number 77 [ 319.212690][T11333] vivid-000: Colorspace: Rec. 709 [ 319.218006][ T5358] gspca_spca508: reg write: error -32 [ 319.227272][ T7982] usb 3-1: USB disconnect, device number 96 [ 319.240169][ T5358] spca508 5-1:0.0: probe with driver spca508 failed with error -32 [ 319.245700][ T7982] usblp1: removed [ 319.249665][T11333] vivid-000: Transfer Function: Default [ 319.270775][T11333] vivid-000: Y'CbCr Encoding: Default [ 319.288553][ T7241] bond4: (slave gretap0): failed to get link speed/duplex [ 319.289466][T11333] vivid-000: HSV Encoding: Hue 0-179 [ 319.332218][T11333] vivid-000: Quantization: Default [ 319.337463][T11333] vivid-000: Apply Alpha To Red Only: false [ 319.343780][T11333] vivid-000: Standard Aspect Ratio: 4x3 [ 319.349496][T11333] vivid-000: DV Timings Signal Mode: Current DV Timings [ 319.356602][T11333] vivid-000: DV Timings: 640x480p59 inactive [ 319.362696][T11333] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 319.370327][T11333] vivid-000: Maximum EDID Blocks: 2 [ 319.375615][T11333] vivid-000: Limited RGB Range (16-235): true [ 319.382362][T11333] vivid-000: Rx RGB Quantization Range: Automatic [ 319.388887][T11333] vivid-000: Power Present: 0x00000001 [ 319.398810][T11333] tpg source WxH: 1280x720 (R'G'B) [ 319.404381][T11333] tpg field: 1 [ 319.407817][T11333] tpg crop: (0,0)/64x64 [ 319.413195][T11333] tpg compose: (0,0)/16x16 [ 319.417717][T11333] tpg colorspace: 3 [ 319.421828][T11333] tpg transfer function: 0/1 [ 319.426542][T11333] tpg quantization: 0/2 [ 319.430775][T11333] tpg RGB range: 0/1 [ 319.435021][T11333] vivid-000: ================== END STATUS ================== [ 319.450006][ T5358] usb 5-1: USB disconnect, device number 74 [ 319.536705][ T7974] usb 6-1: USB disconnect, device number 36 [ 319.601187][ T7250] dvmrp8: left allmulticast mode [ 319.710003][ T7982] usb 3-1: new low-speed USB device number 97 using dummy_hcd [ 319.742803][T11350] netlink: 'syz.1.1437': attribute type 1 has an invalid length. [ 319.774025][T11350] bond5: entered promiscuous mode [ 319.779677][T11350] 8021q: adding VLAN 0 to HW filter on device bond5 [ 319.840674][T11357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1439'. [ 319.850281][T11357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1439'. [ 319.879336][ T7982] usb 3-1: Invalid ep0 maxpacket: 16 [ 319.958591][ T7974] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 320.013373][ T7982] usb 3-1: new low-speed USB device number 98 using dummy_hcd [ 320.028634][ T938] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 320.082544][ T29] audit: type=1326 audit(1782105426.866:16880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11356 comm="syz.0.1439" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53959ce59 code=0x7ffc0000 [ 320.138622][ T7974] usb 6-1: Using ep0 maxpacket: 8 [ 320.143837][ T29] audit: type=1326 audit(1782105426.866:16881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11356 comm="syz.0.1439" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53959ce59 code=0x7ffc0000 [ 320.180116][ T29] audit: type=1326 audit(1782105426.886:16882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11356 comm="syz.0.1439" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53959ce59 code=0x7ffc0000 [ 320.204869][ T7974] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.217990][ T7982] usb 3-1: Invalid ep0 maxpacket: 16 [ 320.228715][ T7974] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 320.241348][ T7982] usb usb3-port1: attempt power cycle [ 320.247995][ T938] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 320.257251][ T7974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.268687][ T938] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 320.276867][ T29] audit: type=1326 audit(1782105426.886:16883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11356 comm="syz.0.1439" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53959ce59 code=0x7ffc0000 [ 320.302256][ T938] usb 2-1: Product: syz [ 320.307082][ T7974] usb 6-1: config 0 descriptor?? [ 320.316562][ T7974] uvcvideo 6-1:0.0: probe with driver uvcvideo failed with error -22 [ 320.325830][ T938] usb 2-1: config 0 descriptor?? [ 320.334791][ T29] audit: type=1326 audit(1782105426.886:16884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11356 comm="syz.0.1439" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fc53959ce59 code=0x7ffc0000 [ 320.360636][ T938] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 320.369472][ T938] usb 2-1: Detected FT232H [ 320.374611][ T29] audit: type=1326 audit(1782105426.926:16885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11356 comm="syz.0.1439" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53959ce59 code=0x7ffc0000 [ 320.403102][ T29] audit: type=1326 audit(1782105426.926:16886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11356 comm="syz.0.1439" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53959ce59 code=0x7ffc0000 [ 320.520537][ T7974] usb 6-1: USB disconnect, device number 37 [ 320.578606][ T7982] usb 3-1: new low-speed USB device number 99 using dummy_hcd [ 320.609094][ T7982] usb 3-1: Invalid ep0 maxpacket: 16 [ 320.736810][T11350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1437'. [ 320.759304][T11350] bond5: entered allmulticast mode [ 320.796907][ T7982] usb 3-1: new low-speed USB device number 100 using dummy_hcd [ 320.818928][T11350] bond5: (slave bridge2): making interface the new active one [ 320.830821][ T7982] usb 3-1: Invalid ep0 maxpacket: 16 [ 320.836451][ T7982] usb usb3-port1: unable to enumerate USB device [ 320.841014][T11350] bridge2: entered promiscuous mode [ 320.849003][T11350] bridge2: entered allmulticast mode [ 320.864643][T11350] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 320.897142][ T938] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 320.912016][ T938] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 320.925484][ T938] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 320.938096][ T938] usb 2-1: USB disconnect, device number 78 [ 320.962354][ T938] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 320.973491][ T938] ftdi_sio 2-1:0.0: device disconnected [ 321.238616][ T5358] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 321.318697][ T7982] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 321.398618][ T5358] usb 1-1: Using ep0 maxpacket: 32 [ 321.413922][ T5358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.431647][ T5358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.447033][ T5358] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 321.457192][ T5358] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.469292][ T5358] usb 1-1: config 0 descriptor?? [ 321.473862][ T7982] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.476690][ T5358] hub 1-1:0.0: USB hub found [ 321.497618][T11385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1447'. [ 321.504668][ T7982] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 321.507183][ T7966] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 321.522111][ T7982] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 321.535300][T11385] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 321.537188][ T7982] usb 6-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 321.555032][ T7982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.563250][ T7982] usb 6-1: Product: syz [ 321.567575][ T7982] usb 6-1: Manufacturer: syz [ 321.572585][ T7982] usb 6-1: SerialNumber: syz [ 321.676899][T11389] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig [ 321.687553][T11389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1448'. [ 321.700073][ T7966] usb 5-1: Using ep0 maxpacket: 16 [ 321.720072][ T7966] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 321.751852][ T7966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.768839][ T7966] usb 5-1: Product: syz [ 321.773520][ T7966] usb 5-1: Manufacturer: syz [ 321.797608][ T7966] usb 5-1: SerialNumber: syz [ 321.803939][ T7982] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 321.825936][ T7982] usb 6-1: 0:2 : does not exist [ 321.874623][ T7982] usb 6-1: USB disconnect, device number 38 [ 321.887878][ T5358] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 321.934136][T11402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1452'. [ 321.945458][T11402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1452'. [ 322.025148][T11381] syzkaller0: entered promiscuous mode [ 322.030946][T11381] syzkaller0: entered allmulticast mode [ 322.058643][ T7974] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 322.147936][ T7966] usb 5-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 322.166919][ T7966] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 322.175202][ T5358] usbhid 1-1:0.0: can't add hid device: -71 [ 322.184674][ T7966] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 322.192392][ T5358] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 322.204397][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 322.204418][ T29] audit: type=1326 audit(1782105428.986:17028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11401 comm="syz.1.1452" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489199ce59 code=0x7ffc0000 [ 322.210560][ T7974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 322.222043][ T29] audit: type=1326 audit(1782105428.986:17029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11401 comm="syz.1.1452" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489199ce59 code=0x7ffc0000 [ 322.281982][ T7974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 322.290347][ T5358] usb 1-1: USB disconnect, device number 73 [ 322.302474][ T7966] usb 5-1: USB disconnect, device number 75 [ 322.306441][ T7974] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 322.333665][ T6022] udevd[6022]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 322.348580][ T29] audit: type=1326 audit(1782105428.986:17030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11401 comm="syz.1.1452" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489199ce59 code=0x7ffc0000 [ 322.369858][ T7974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.380102][ T29] audit: type=1326 audit(1782105428.986:17031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11401 comm="syz.1.1452" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f489199ce59 code=0x7ffc0000 [ 322.420477][ T7974] usb 3-1: Product: syz [ 322.424190][T11408] loop2: detected capacity change from 0 to 7 [ 322.432765][ T7974] usb 3-1: Manufacturer: syz [ 322.438194][T11408] loop2: [ 322.441514][T11408] loop2: partition table partially beyond EOD, truncated [ 322.442026][ T7974] usb 3-1: SerialNumber: syz [ 322.463765][ T29] audit: type=1326 audit(1782105428.986:17032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11401 comm="syz.1.1452" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489199ce59 code=0x7ffc0000 [ 322.500311][ T7974] usb 3-1: config 0 descriptor?? [ 322.524435][ T7974] usb 3-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress 01 [ 322.545405][ T29] audit: type=1326 audit(1782105429.056:17033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11401 comm="syz.1.1452" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f489195d68e code=0x7ffc0000 [ 322.581664][T11410] syzkaller0: entered promiscuous mode [ 322.599044][T11410] syzkaller0: entered allmulticast mode [ 322.599504][ T29] audit: type=1326 audit(1782105429.056:17034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11401 comm="syz.1.1452" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f489195d68e code=0x7ffc0000 [ 322.614484][T11410] tipc: Started in network mode [ 322.634849][T11410] tipc: Node identity 0e0f8979fe44, cluster identity 4711 [ 322.642926][T11410] tipc: Enabled bearer , priority 0 [ 322.648559][ T29] audit: type=1326 audit(1782105429.056:17035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11401 comm="syz.1.1452" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f489195d68e code=0x7ffc0000 [ 322.709491][ T29] audit: type=1326 audit(1782105429.056:17036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11401 comm="syz.1.1452" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f489195d68e code=0x7ffc0000 [ 322.734972][ T29] audit: type=1326 audit(1782105429.056:17037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11401 comm="syz.1.1452" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f489195d68e code=0x7ffc0000 [ 322.813012][T11413] tipc: Resetting bearer [ 322.850123][ T5626] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 322.926725][T11418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1457'. [ 323.012931][ T7974] usb 3-1: USB disconnect, device number 101 [ 323.081272][T11418] bond6: entered promiscuous mode [ 323.128423][T11418] 8021q: adding VLAN 0 to HW filter on device bond6 [ 323.184141][T11422] 8021q: adding VLAN 0 to HW filter on device bond6 [ 323.207863][T11422] bond6: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 323.231867][T11422] bond6: (slave ip6gre4): Error -95 calling set_mac_address [ 323.279129][ T7241] net_ratelimit: 30 callbacks suppressed [ 323.279153][ T7241] bond4: (slave gretap0): failed to get link speed/duplex [ 323.365940][T11409] tipc: Resetting bearer [ 323.387764][T11409] tipc: Disabling bearer [ 323.420549][ T7246] bond4: (slave gretap0): failed to get link speed/duplex [ 323.548687][ T7249] bond4: (slave gretap0): failed to get link speed/duplex [ 323.658560][ T7250] bond4: (slave gretap0): failed to get link speed/duplex [ 323.746970][T11449] loop2: detected capacity change from 0 to 7 [ 323.766789][T11449] loop2: [ 323.774248][T11449] loop2: partition table partially beyond EOD, truncated [ 323.784117][ T7250] bond4: (slave gretap0): failed to get link speed/duplex [ 323.829313][ T7966] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 323.888857][ T5358] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 323.908774][ T7250] bond4: (slave gretap0): failed to get link speed/duplex [ 324.048687][ T7250] bond4: (slave gretap0): failed to get link speed/duplex [ 324.058560][ T9895] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 324.066197][ T7966] usb 6-1: Using ep0 maxpacket: 16 [ 324.071454][ T5358] usb 2-1: Using ep0 maxpacket: 16 [ 324.080316][ T5358] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 119, changing to 10 [ 324.093858][ T7966] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 324.103303][ T5358] usb 2-1: config 0 interface 0 has no altsetting 0 [ 324.110136][ T7966] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.118318][ T5358] usb 2-1: New USB device found, idVendor=056a, idProduct=0302, bcdDevice= 0.00 [ 324.127575][ T7966] usb 6-1: Product: syz [ 324.133859][ T7966] usb 6-1: Manufacturer: syz [ 324.138952][ T5358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.147728][ T7966] usb 6-1: SerialNumber: syz [ 324.158585][ T7250] bond4: (slave gretap0): failed to get link speed/duplex [ 324.158882][ T7966] usb 6-1: config 0 descriptor?? [ 324.172025][ T5358] usb 2-1: config 0 descriptor?? [ 324.218546][ T9895] usb 5-1: Using ep0 maxpacket: 16 [ 324.230497][ T9895] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 324.248673][ T9895] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.269240][ T9895] usb 5-1: config 1 has no interface number 0 [ 324.275610][ T9895] usb 5-1: config 1 interface 105 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 324.286872][ T9895] usb 5-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 324.300217][ T9895] usb 5-1: config 1 interface 105 has no altsetting 0 [ 324.308647][ T7250] bond4: (slave gretap0): failed to get link speed/duplex [ 324.310223][ T9895] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 324.325509][ T9895] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 324.336150][ T9895] usb 5-1: Product: syz [ 324.341636][ T9895] usb 5-1: Manufacturer: syz [ 324.347405][ T9895] usb 5-1: SerialNumber: syz [ 324.418585][ T7246] bond4: (slave gretap0): failed to get link speed/duplex [ 324.570865][ T9895] aqc111 5-1:1.105: probe with driver aqc111 failed with error -22 [ 324.582056][ T7966] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 324.591137][ T5358] hid (null): unknown global tag 0xe [ 324.601731][ T7966] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 324.613401][ T5358] hid_parser_main: 461 callbacks suppressed [ 324.613418][ T5358] wacom 0003:056A:0302.001F: unknown main item tag 0x0 [ 324.633781][ T7966] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 324.642820][ T5358] wacom 0003:056A:0302.001F: unknown main item tag 0x0 [ 324.650143][ T7966] usb 6-1: media controller created [ 324.655569][ T5358] wacom 0003:056A:0302.001F: unknown main item tag 0x0 [ 324.670088][ T7966] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 324.678662][ T5358] wacom 0003:056A:0302.001F: unknown main item tag 0x0 [ 324.685582][ T5358] wacom 0003:056A:0302.001F: unknown main item tag 0x0 [ 324.699525][ T5358] wacom 0003:056A:0302.001F: unknown main item tag 0x0 [ 324.709415][T11467] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1468'. [ 324.718792][ T5358] wacom 0003:056A:0302.001F: unknown main item tag 0x0 [ 324.725819][ T5358] wacom 0003:056A:0302.001F: unknown global tag 0xe [ 324.732967][ T5358] wacom 0003:056A:0302.001F: item 0 0 1 14 parsing failed [ 324.740809][ T5358] wacom 0003:056A:0302.001F: parse failed [ 324.746644][ T5358] wacom 0003:056A:0302.001F: probe with driver wacom failed with error -22 [ 324.782875][T11442] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1460'. [ 324.802784][ T7966] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 324.815611][ T7966] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 324.828665][ T5358] usb 2-1: USB disconnect, device number 79 [ 325.016961][ T7968] usb 6-1: USB disconnect, device number 39 [ 325.036531][ T7968] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 325.208599][ T5358] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 325.262477][T11482] __nla_validate_parse: 2 callbacks suppressed [ 325.262492][T11482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1472'. [ 325.306048][T11482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1472'. [ 325.333553][T11481] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1472'. [ 325.357492][T11481] 0·: renamed from hsr0 [ 325.372382][T11481] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 325.396650][T11481] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.422445][ T5358] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 325.433415][ T5358] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 325.446040][T11481] 0·: entered allmulticast mode [ 325.464247][ T5358] usb 2-1: config 0 has no interface number 0 [ 325.474677][T11481] hsr_slave_0: entered allmulticast mode [ 325.493323][ T5358] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 325.507863][T11481] hsr_slave_1: entered allmulticast mode [ 325.522806][ T5358] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 325.542886][ T5358] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 325.607694][T11485] fuse: Unknown parameter 'euid>00000000000000049663' [ 325.656592][ T5358] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 325.718602][ T5358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.767464][ T5358] usb 2-1: config 0 descriptor?? [ 325.779256][T11475] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 326.048524][ T5358] usb 2-1: USB disconnect, device number 80 [ 326.868607][ T5626] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 326.877110][ T5626] Bluetooth: hci1: Injecting HCI hardware error event [ 326.884155][ T5630] Bluetooth: hci1: hardware error 0x00 [ 327.015976][T11518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1480'. [ 327.286459][T11521] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 327.321958][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 327.321971][ T29] audit: type=1326 audit(1782105434.106:17104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11520 comm="syz.2.1481" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb5a4f9ce59 code=0x0 [ 327.441988][ T5358] usb 5-1: USB disconnect, device number 76 [ 327.537133][T11527] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 327.998760][ T7974] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 328.159955][ T7974] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.159983][ T7974] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 328.160847][ T7974] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 328.160871][ T7974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 328.160884][ T7974] usb 1-1: SerialNumber: syz [ 328.318832][ T7249] net_ratelimit: 34 callbacks suppressed [ 328.318853][ T7249] bond4: (slave gretap0): failed to get link speed/duplex [ 328.393486][ T7974] usb 1-1: 0:2 : does not exist [ 328.399328][ T7968] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 328.431919][T11549] loop9: detected capacity change from 0 to 7 [ 328.456304][ T7974] usb 1-1: USB disconnect, device number 74 [ 328.477872][T11549] Dev loop9: unable to read RDB block 7 [ 328.483933][ T7250] bond4: (slave gretap0): failed to get link speed/duplex [ 328.510005][T11549] loop9: unable to read partition table [ 328.522470][ T6022] udevd[6022]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 328.544834][T11549] loop9: partition table beyond EOD, truncated [ 328.556461][T11549] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 328.566494][ T7968] usb 3-1: Using ep0 maxpacket: 16 [ 328.595820][ T7968] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 328.612952][ T7968] usb 3-1: config 0 has no interface number 0 [ 328.620684][ T7246] bond4: (slave gretap0): failed to get link speed/duplex [ 328.649970][ T7968] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 328.677459][ T7968] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 328.710083][ T7968] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 328.725563][ T7968] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 328.745415][ T7968] usb 3-1: Product: syz [ 328.748668][ T7246] bond4: (slave gretap0): failed to get link speed/duplex [ 328.754013][ T7968] usb 3-1: SerialNumber: syz [ 328.774893][ T7968] usb 3-1: config 0 descriptor?? [ 328.807172][ T7968] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 328.845570][ T7968] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input36 [ 328.898645][ T7249] bond4: (slave gretap0): failed to get link speed/duplex [ 328.948524][ T5630] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 329.008722][ T7249] bond4: (slave gretap0): failed to get link speed/duplex [ 329.075820][T11539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1486'. [ 329.105650][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 329.105877][ T938] usb 3-1: USB disconnect, device number 102 [ 329.112652][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 329.149002][ T7246] bond4: (slave gretap0): failed to get link speed/duplex [ 329.174398][ T938] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 329.277552][ T7246] bond4: (slave gretap0): failed to get link speed/duplex [ 329.292425][ T7968] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 329.328700][ T7974] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 329.400518][ T7249] bond4: (slave gretap0): failed to get link speed/duplex [ 329.448540][ T7982] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 329.488563][ T7974] usb 1-1: Using ep0 maxpacket: 32 [ 329.498562][ T7968] usb 5-1: device descriptor read/64, error -71 [ 329.506874][ T7974] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 329.515431][ T7249] bond4: (slave gretap0): failed to get link speed/duplex [ 329.515743][ T7974] usb 1-1: config 0 has no interface number 0 [ 329.547638][ T7974] usb 1-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 329.568645][ T7974] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 329.591748][ T7974] usb 1-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 329.608665][ T7982] usb 2-1: Using ep0 maxpacket: 16 [ 329.627958][ T7974] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 329.646136][ T7974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.705943][ T7974] usb 1-1: Product: syz [ 329.717629][ T7974] usb 1-1: Manufacturer: syz [ 329.732514][ T7974] usb 1-1: SerialNumber: syz [ 329.738552][ T7968] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 329.769286][ T7974] usb 1-1: config 0 descriptor?? [ 329.786447][T11570] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 329.868802][ T7968] usb 5-1: device descriptor read/64, error -71 [ 329.998854][ T7968] usb usb5-port1: attempt power cycle [ 330.217480][T11598] loop2: detected capacity change from 0 to 7 [ 330.241812][T11598] loop2: p1 [ 330.250768][T11598] loop2: partition table partially beyond EOD, truncated [ 330.267841][T11598] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 330.312386][ T6022] udevd[6022]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 330.348526][ T7968] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 330.389906][ T7968] usb 5-1: device descriptor read/8, error -71 [ 330.398600][ T5358] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 330.413520][T11600] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1501'. [ 330.570128][ T5358] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 330.588817][ T5358] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 330.599397][ T5358] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 330.608865][ T5358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.628713][ T7968] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 330.638331][T11578] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 330.655325][ T5358] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 330.669159][ T7968] usb 5-1: device descriptor read/8, error -71 [ 330.754385][ T7974] usb-storage 1-1:0.20: USB Mass Storage device detected [ 330.785897][ T7974] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 330.798942][ T7968] usb usb5-port1: unable to enumerate USB device [ 330.808170][ T7974] scsi host1: usb-storage 1-1:0.20 [ 330.829595][ T7974] usb 1-1: USB disconnect, device number 75 [ 330.930067][ T938] usb 3-1: USB disconnect, device number 103 [ 331.208573][ T7974] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 331.358706][ T7974] usb 1-1: Using ep0 maxpacket: 32 [ 331.366374][ T7974] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 331.376930][ T7974] usb 1-1: config 0 has no interface number 0 [ 331.383576][ T7974] usb 1-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 331.394654][ T7974] usb 1-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 331.406752][ T7974] usb 1-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 331.418425][ T7974] usb 1-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 331.439970][ T7974] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 331.458688][ T7974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.472163][ T7974] usb 1-1: Product: syz [ 331.502945][ T7974] usb 1-1: Manufacturer: syz [ 331.515898][ T7974] usb 1-1: SerialNumber: syz [ 331.544609][ T7974] usb 1-1: config 0 descriptor?? [ 331.559606][T11608] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 331.574133][ T7974] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input37 [ 331.599195][ T4975] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 331.756761][T11618] xt_hashlimit: size too large, truncated to 1048576 [ 331.778604][ T7968] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 331.807462][ T5358] usb 1-1: USB disconnect, device number 76 [ 331.843002][T11620] pim6reg: entered allmulticast mode [ 331.854600][T11620] pim6reg: left allmulticast mode [ 331.960755][ T7968] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 331.972437][ T7968] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.986326][ T7968] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 332.000593][ T7968] usb 6-1: config 1 has no interface number 0 [ 332.013862][ T7968] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 332.034121][ T7968] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 332.049542][ T7968] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 332.059059][ T7968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.067286][ T7968] usb 6-1: Product: syz [ 332.076961][ T7968] usb 6-1: Manufacturer: syz [ 332.107480][ T7968] usb 6-1: SerialNumber: syz [ 332.137989][ T7968] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 332.152447][ T7968] cdc_ncm 6-1:1.1: bind() failure [ 332.152647][T11628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1509'. [ 332.202218][ T7982] usb 2-1: unable to get BOS descriptor or descriptor too short [ 332.216211][ T7982] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 332.226598][ T7982] usb 2-1: can't read configurations, error -71 [ 332.280202][T11630] loop2: detected capacity change from 0 to 7 [ 332.292269][T11630] loop2: p1 [ 332.296133][T11630] loop2: partition table partially beyond EOD, truncated [ 332.304026][T11630] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 332.331793][ T6022] udevd[6022]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 332.419411][T11637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.437386][T11637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.459072][ T7974] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 332.476489][ T7968] usb 6-1: USB disconnect, device number 40 [ 332.539427][T11644] team_slave_1: Caught tx_queue_len zero misconfig [ 332.589081][ T7972] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 332.620161][ T7974] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 332.635141][ T7974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.652985][ T7974] usb 5-1: config 0 descriptor?? [ 332.668092][ T7974] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 332.718562][ T938] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 332.750296][ T7972] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.780034][ T7972] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.811040][ T7972] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 332.842698][ T7972] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 332.853303][ T7982] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 332.876261][ T7972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.885632][ T938] usb 1-1: Using ep0 maxpacket: 16 [ 332.902427][ T938] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 332.923920][ T938] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.947335][ T938] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 332.971050][ T938] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= e.89 [ 332.992720][ T938] usb 1-1: New USB device strings: Mfr=221, Product=0, SerialNumber=3 [ 333.017334][ T938] usb 1-1: Manufacturer: syz [ 333.028861][ T7968] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 333.038134][ T7982] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 333.046602][ T938] usb 1-1: SerialNumber: syz [ 333.054793][ T7982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.070160][ T7982] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 333.080082][ T938] usb 1-1: config 0 descriptor?? [ 333.085138][ T7982] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 333.093794][ T7982] usb 2-1: Manufacturer: syz [ 333.101290][ T938] usb 1-1: 0:2 : does not exist [ 333.111044][ T7982] usb 2-1: config 0 descriptor?? [ 333.125929][ T7972] logitech 0003:046D:C29C.0020: unknown main item tag 0x0 [ 333.153072][ T7972] logitech 0003:046D:C29C.0020: unknown main item tag 0x0 [ 333.198021][ T7972] logitech 0003:046D:C29C.0020: unknown main item tag 0x0 [ 333.222721][ T7972] logitech 0003:046D:C29C.0020: unknown main item tag 0x0 [ 333.242471][ T7972] logitech 0003:046D:C29C.0020: unknown main item tag 0x0 [ 333.253056][ T7968] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.276207][ T7972] logitech 0003:046D:C29C.0020: unknown main item tag 0x0 [ 333.291109][ T7968] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 333.291220][ T7972] logitech 0003:046D:C29C.0020: unknown main item tag 0x0 [ 333.315725][T11641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.324176][ T7982] rc_core: IR keymap rc-hauppauge not found [ 333.335676][ T7982] Registered IR keymap rc-empty [ 333.361831][T11641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.369717][T11649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.378865][ T7241] net_ratelimit: 32 callbacks suppressed [ 333.378911][ T7241] bond4: (slave gretap0): failed to get link speed/duplex [ 333.379205][ T7982] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 333.402157][ T7972] logitech 0003:046D:C29C.0020: unknown main item tag 0x0 [ 333.410038][T11649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.419192][ T7972] logitech 0003:046D:C29C.0020: unknown main item tag 0x0 [ 333.427584][ T938] usb 1-1: USB disconnect, device number 77 [ 333.438337][T11635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.450083][ T7972] logitech 0003:046D:C29C.0020: unknown main item tag 0x0 [ 333.461466][ T7968] usb 6-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 333.472140][ T7968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.491107][ T7968] usb 6-1: Product: syz [ 333.496243][T11649] xt_hashlimit: size too large, truncated to 1048576 [ 333.508223][ T7982] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input38 [ 333.520707][ T7972] logitech 0003:046D:C29C.0020: hidraw0: USB HID vff.fd Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0 [ 333.540755][T11635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.555117][ T7968] usb 6-1: Manufacturer: syz [ 333.560628][ T7249] bond4: (slave gretap0): failed to get link speed/duplex [ 333.575784][ T7968] usb 6-1: SerialNumber: syz [ 333.603108][ T7968] usb 6-1: config 0 descriptor?? [ 333.637250][T11635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.668637][ T7241] bond4: (slave gretap0): failed to get link speed/duplex [ 333.702320][T11635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.778584][ T7246] bond4: (slave gretap0): failed to get link speed/duplex [ 333.792523][ T7974] gspca_cpia1: usb_control_msg 01, error -71 [ 333.814553][ T7974] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 333.848733][ T7974] usb 5-1: USB disconnect, device number 81 [ 333.910659][ T7246] bond4: (slave gretap0): failed to get link speed/duplex [ 333.945434][T11656] loop2: detected capacity change from 0 to 7 [ 333.977332][ T7972] logitech 0003:046D:C29C.0020: no inputs found [ 333.995157][T11656] loop2: [ 334.010355][T11656] loop2: partition table partially beyond EOD, truncated [ 334.031533][ T7972] usb 3-1: USB disconnect, device number 104 [ 334.041506][ T7246] bond4: (slave gretap0): failed to get link speed/duplex [ 334.168618][ T7246] bond4: (slave gretap0): failed to get link speed/duplex [ 334.216969][T11661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.239020][T11661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.298658][ T7246] bond4: (slave gretap0): failed to get link speed/duplex [ 334.418554][ T7246] bond4: (slave gretap0): failed to get link speed/duplex [ 334.478568][ T7968] usb 5-1: new low-speed USB device number 82 using dummy_hcd [ 334.528638][ T7241] bond4: (slave gretap0): failed to get link speed/duplex [ 334.650263][ T7968] usb 5-1: No LPM exit latency info found, disabling LPM. [ 334.670317][ T7968] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 334.697767][ T7968] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 334.725485][ T7968] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 334.756145][ T7968] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 334.773095][ T7968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.796280][ T7968] usb 5-1: Product: У [ 334.811109][ T7968] usb 5-1: Manufacturer: Ч [ 334.828350][ T7968] usb 5-1: SerialNumber: 䩾镊狙憓ꆵ핯⃘䌞鷀⤙ᰡ绘’鼰甖䃑婢顚í‡à¸’ᗑ쪾핾ç²äœ”ã믽ì‘립è€ï¶›ä¦¦âžè¬‚è´ã‹¸êª€ì±²ã·‹ë³ªë¾—ã©»å¿â¼äŽ¿é„˜ï©‚짋ȟ期婢ㄲì„ëµì µè®¨è˜¯äŽ•æ¿Šîœ€ì»©ç¢©æµ¿å—®çœ‹ë½¥é¿½ë„°æºá°’쓳蚔᚟䑿쳇榉窱䖕这溉緈귩옕ᄃ㵩鴮늜ᗲ얪㷾èžé±³ä³„à®é”‚Ⱊ⪿ᆔꅻೀ똑äŸè¿‹á³¸è®¢ê“‚ᶹ⻉틇 [ 334.937472][T11662] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 335.171243][ T7968] cdc_ncm 5-1:1.0: bind() failure [ 335.210838][ T7968] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 335.236174][ T7968] cdc_ncm 5-1:1.1: bind() failure [ 335.267053][ T7968] usb 5-1: USB disconnect, device number 82 [ 335.359138][T11677] loop2: detected capacity change from 0 to 7 [ 335.368676][T11677] loop2: p1 [ 335.372305][T11677] loop2: partition table partially beyond EOD, truncated [ 335.381441][T11677] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 335.462710][ T7974] usb 2-1: USB disconnect, device number 82 [ 335.477631][ T6022] udevd[6022]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 335.695084][ T7968] usb 6-1: USB disconnect, device number 41 [ 335.811084][T11689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1526'. [ 335.878553][ T7974] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 336.078674][ T7974] usb 2-1: Using ep0 maxpacket: 32 [ 336.087135][ T7974] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 336.095948][ T7974] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 336.107204][ T7974] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.124338][ T7974] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 336.139273][ T7974] usb 2-1: config 1 has no interface number 0 [ 336.149687][ T7974] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 336.160956][ T7982] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 336.171610][ T7974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.191546][ T7974] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 336.328557][ T7982] usb 1-1: Using ep0 maxpacket: 8 [ 336.339836][ T7982] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 336.353344][ T7982] usb 1-1: config 179 has no interface number 0 [ 336.360671][ T7982] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 336.372017][ T7982] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 336.383997][ T7982] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 336.395722][ T7982] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 336.422394][ T7974] snd_usb_pod 2-1:1.1: set_interface failed [ 336.431646][ T7982] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 336.445477][ T7974] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 336.453409][ T7974] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 336.462488][ T7982] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 336.473820][ T7974] usb 2-1: USB disconnect, device number 83 [ 336.479861][ T7982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.494050][T11694] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 336.741751][ T7974] usb 1-1: USB disconnect, device number 78 [ 336.747824][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 336.747872][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 336.774197][T11707] loop4: detected capacity change from 0 to 7 [ 336.789626][T11707] loop4: [ 336.795805][T11707] loop4: partition table partially beyond EOD, truncated [ 336.872167][T11710] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1533'. [ 337.336584][T11728] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 337.362157][T11728] syzkaller1: linktype set to 805 [ 337.849262][T11745] ip6tnl0: Caught tx_queue_len zero misconfig [ 338.138559][ T7982] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 338.310710][ T7982] usb 3-1: unable to get BOS descriptor or descriptor too short [ 338.320536][ T7982] usb 3-1: not running at top speed; connect to a high speed hub [ 338.360772][ T7982] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.382914][ T7982] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 338.392555][ T7249] net_ratelimit: 30 callbacks suppressed [ 338.392573][ T7249] bond4: (slave gretap0): failed to get link speed/duplex [ 338.502972][ T7982] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 338.532049][ T7249] bond4: (slave gretap0): failed to get link speed/duplex [ 338.620924][ T7982] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 338.659029][ T7249] bond4: (slave gretap0): failed to get link speed/duplex [ 338.685787][ T7982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.758968][ T7982] usb 3-1: Product: syz [ 338.784972][ T7982] usb 3-1: Manufacturer: syz [ 338.788612][ T7249] bond4: (slave gretap0): failed to get link speed/duplex [ 338.801484][ T7982] usb 3-1: SerialNumber: syz [ 338.919247][ T7241] bond4: (slave gretap0): failed to get link speed/duplex [ 339.039995][ T7241] bond4: (slave gretap0): failed to get link speed/duplex [ 339.096350][ T7982] usb 3-1: USB disconnect, device number 105 [ 339.148351][ T6686] udevd[6686]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.181994][ T7241] bond4: (slave gretap0): failed to get link speed/duplex [ 339.202907][T11758] fuse: Bad value for 'fd' [ 339.329335][ T7241] bond4: (slave gretap0): failed to get link speed/duplex [ 339.450520][ T7241] bond4: (slave gretap0): failed to get link speed/duplex [ 339.569798][ T7241] bond4: (slave gretap0): failed to get link speed/duplex [ 339.939099][ T7982] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 340.099466][ T7974] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 340.110021][ T7982] usb 3-1: Using ep0 maxpacket: 32 [ 340.140494][ T7982] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 340.156666][ T7982] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 340.209988][ T7982] usb 3-1: config 0 interface 0 has no altsetting 0 [ 340.222336][ T7982] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 340.238964][ T7982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.267683][ T7982] usb 3-1: Product: syz [ 340.274464][ T7982] usb 3-1: Manufacturer: syz [ 340.282987][ T7974] usb 6-1: Using ep0 maxpacket: 32 [ 340.289990][ T7982] usb 3-1: SerialNumber: syz [ 340.297932][ T7974] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 340.309323][ T7974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.317846][ T7982] usb 3-1: config 0 descriptor?? [ 340.332488][ T7974] usb 6-1: Product: syz [ 340.355135][ T7974] usb 6-1: Manufacturer: syz [ 340.376784][ T7974] usb 6-1: SerialNumber: syz [ 340.397477][ T7974] usb 6-1: config 0 descriptor?? [ 340.419994][ T7974] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 340.437006][ T7974] dvb-usb: bulk message failed: -22 (4/0) [ 340.466508][ T7974] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 340.505619][T11799] fuse: Unknown parameter '€0x0000000000000004€' [ 340.522332][ T7974] dvb-usb: bulk message failed: -22 (5/0) [ 340.524984][T11799] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 340.543268][ T7974] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 340.572868][ T7974] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 340.597118][ T7974] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 340.612167][ T7974] usb 6-1: media controller created [ 340.646917][ T7974] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 340.681420][ T7974] usb 6-1: selecting invalid altsetting 3 [ 340.692987][ T7974] ttusb2: set interface to alts=3 failed [ 340.734740][ T7974] DVB: Unable to find symbol tda10086_attach() [ 340.746622][ T7982] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 340.756013][ T7974] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 340.777272][ T7974] dvb-usb: bulk message failed: -22 (4/0) [ 340.793608][ T7974] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 340.812573][ T7974] dvb-usb: bulk message failed: -22 (5/0) [ 340.819004][ T7972] usb 1-1: new low-speed USB device number 79 using dummy_hcd [ 340.830601][ T7974] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 340.846502][ T7974] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 340.858387][ T7974] usb 6-1: USB disconnect, device number 42 [ 340.884153][ T7974] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 340.978883][ T7972] usb 1-1: Invalid ep0 maxpacket: 16 [ 341.118927][ T7972] usb 1-1: new low-speed USB device number 80 using dummy_hcd [ 341.149176][ T7982] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 341.278899][ T7972] usb 1-1: Invalid ep0 maxpacket: 16 [ 341.284819][ T7972] usb usb1-port1: attempt power cycle [ 341.569779][ T7982] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 341.593188][ T7974] usb 3-1: USB disconnect, device number 106 [ 341.639713][ T7972] usb 1-1: new low-speed USB device number 81 using dummy_hcd [ 341.671543][ T7972] usb 1-1: Invalid ep0 maxpacket: 16 [ 341.750104][ T7982] usb 6-1: Using ep0 maxpacket: 8 [ 341.760860][ T7982] usb 6-1: unable to get BOS descriptor or descriptor too short [ 341.779131][ T7982] usb 6-1: too many configurations: 211, using maximum allowed: 8 [ 341.800717][ T7982] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 341.809189][ T7972] usb 1-1: new low-speed USB device number 82 using dummy_hcd [ 341.827303][ T7982] usb 6-1: can't read configurations, error -61 [ 341.849401][ T7972] usb 1-1: Invalid ep0 maxpacket: 16 [ 341.859955][ T7972] usb usb1-port1: unable to enumerate USB device [ 341.968957][ T7982] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 342.078990][ T7974] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 342.141692][ T7982] usb 6-1: Using ep0 maxpacket: 8 [ 342.151038][ T7982] usb 6-1: unable to get BOS descriptor or descriptor too short [ 342.159603][ T7982] usb 6-1: too many configurations: 211, using maximum allowed: 8 [ 342.174166][ T7982] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 342.190089][ T7982] usb 6-1: can't read configurations, error -61 [ 342.197123][ T7982] usb usb6-port1: attempt power cycle [ 342.231252][ T7974] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 342.241876][ T7972] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 342.258320][ T7974] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 342.268100][ T7974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.277384][ T7974] usb 5-1: Product: syz [ 342.284373][ T7974] usb 5-1: Manufacturer: syz [ 342.289646][ T7974] usb 5-1: SerialNumber: syz [ 342.305557][ T7974] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 342.354261][T11859] loop2: detected capacity change from 0 to 7 [ 342.366683][T11859] loop2: p1 [ 342.375285][T11859] loop2: partition table partially beyond EOD, truncated [ 342.383199][T11859] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 342.399431][ T7972] usb 2-1: Using ep0 maxpacket: 16 [ 342.412559][ T7972] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 342.433880][ T7972] usb 2-1: config 1 has no interface number 0 [ 342.441355][ T5627] udevd[5627]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 342.456887][ T7972] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 342.469554][ T7972] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 342.480699][ T7972] usb 2-1: config 1 interface 105 has no altsetting 0 [ 342.490664][ T7972] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 342.500313][ T7972] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 342.516070][ T7972] usb 2-1: Product: syz [ 342.521268][ T7972] usb 2-1: Manufacturer: syz [ 342.525945][ T7972] usb 2-1: SerialNumber: syz [ 342.533820][T11842] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 342.541487][ T7982] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 342.551542][T11842] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 342.572452][T11863] loop2: detected capacity change from 0 to 7 [ 342.579706][ T7982] usb 6-1: Using ep0 maxpacket: 8 [ 342.585809][T11863] loop2: p1 [ 342.589771][T11863] loop2: partition table partially beyond EOD, truncated [ 342.597479][T11863] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 342.605411][ T7982] usb 6-1: unable to get BOS descriptor or descriptor too short [ 342.613591][ T7982] usb 6-1: too many configurations: 211, using maximum allowed: 8 [ 342.623565][ T7982] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 342.631915][ T7982] usb 6-1: can't read configurations, error -61 [ 342.673178][ T5627] udevd[5627]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 342.710345][T11836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.727266][T11836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.727511][ T7974] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 342.752724][ T7974] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 342.753197][T11836] input: syz0 as /devices/virtual/input/input39 [ 342.768142][ T7974] usb 5-1: media controller created [ 342.779223][ T7982] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 342.820039][ T7972] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 342.830974][ T7982] usb 6-1: Using ep0 maxpacket: 8 [ 342.843306][ T7982] usb 6-1: unable to get BOS descriptor or descriptor too short [ 342.856615][ T7972] usb 2-1: USB disconnect, device number 84 [ 342.864267][ T7982] usb 6-1: too many configurations: 211, using maximum allowed: 8 [ 342.873276][ T7974] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 342.889851][ T7982] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 342.906910][ T7982] usb 6-1: can't read configurations, error -61 [ 342.915745][ T7982] usb usb6-port1: unable to enumerate USB device [ 342.972441][ T7974] usb 5-1: USB disconnect, device number 83 [ 343.086562][T11878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1573'. [ 343.097786][T11878] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 343.176208][T11885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.220708][T11885] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 343.230045][T11885] veth1_vlan: left promiscuous mode [ 343.235928][T11885] veth0_vlan: left promiscuous mode [ 343.242023][T11885] veth0_vlan: entered promiscuous mode [ 343.249673][T11885] veth1_vlan: entered promiscuous mode [ 343.257857][T11885] veth1_macvtap: left promiscuous mode [ 343.264359][T11885] veth0_macvtap: left promiscuous mode [ 343.270955][T11885] veth0_macvtap: entered promiscuous mode [ 343.277366][T11885] veth1_macvtap: entered promiscuous mode [ 343.286239][T11885] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 343.399432][ T7241] net_ratelimit: 39 callbacks suppressed [ 343.399456][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 343.429479][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 343.448841][ T7966] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 343.456662][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 343.478650][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 343.508606][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 343.528761][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 343.549054][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 343.570277][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 343.619210][ T7982] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 343.619664][ T7966] usb 3-1: Using ep0 maxpacket: 8 [ 343.632356][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 343.642746][ T7966] usb 3-1: unable to get BOS descriptor or descriptor too short [ 343.652149][ T7966] usb 3-1: config 4 has an invalid interface number: 25 but max is 0 [ 343.660485][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 343.668626][ T7966] usb 3-1: config 4 has no interface number 0 [ 343.674860][ T7966] usb 3-1: config 4 interface 25 has no altsetting 0 [ 343.686098][ T7966] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.04 [ 343.696649][ T7966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.704971][ T7966] usb 3-1: Product: syz [ 343.709497][ T7966] usb 3-1: Manufacturer: syz [ 343.714270][ T7966] usb 3-1: SerialNumber: syz [ 343.719830][T11895] loop2: detected capacity change from 0 to 7 [ 343.735425][T11895] loop2: p1 [ 343.739474][T11895] loop2: partition table partially beyond EOD, truncated [ 343.746684][T11895] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 343.769257][ T7982] usb 5-1: Using ep0 maxpacket: 16 [ 343.782603][ T7982] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 343.786597][ T5627] udevd[5627]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 343.800170][ T7982] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 343.827887][ T7982] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 343.846682][ T7982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.856536][ T7982] usb 5-1: Product: syz [ 343.861495][ T7982] usb 5-1: Manufacturer: syz [ 343.866203][ T7982] usb 5-1: SerialNumber: syz [ 343.890755][ T7982] usb 5-1: 0:2 : does not exist [ 343.913538][T11899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1581'. [ 344.142438][T11901] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1576'. [ 344.738943][ T7972] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 344.909035][ T7972] usb 6-1: Using ep0 maxpacket: 32 [ 344.915636][ T7972] usb 6-1: config 0 has an invalid interface number: 223 but max is 0 [ 344.924492][ T7972] usb 6-1: config 0 has no interface number 0 [ 344.931097][ T7972] usb 6-1: config 0 interface 223 altsetting 186 has 0 endpoint descriptors, different from the interface descriptor's value: 28 [ 344.944898][ T7972] usb 6-1: config 0 interface 223 has no altsetting 0 [ 344.952254][ T7972] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 344.961756][ T7972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.971818][ T7972] usb 6-1: config 0 descriptor?? [ 345.018600][ T5358] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 345.181521][ T5358] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 345.190167][ T5358] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 345.199495][ T7972] usb 6-1: string descriptor 0 read error: -71 [ 345.204533][ T5358] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 345.207915][ T7972] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 345.219125][ T5358] usb 1-1: config 220 has no interface number 2 [ 345.230075][ T5358] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 345.230681][ T7972] gspca_vc032x: reg_r err -71 [ 345.243543][ T5358] usb 1-1: config 220 interface 0 has no altsetting 0 [ 345.243594][ T5358] usb 1-1: config 220 interface 76 has no altsetting 0 [ 345.243614][ T5358] usb 1-1: config 220 interface 1 has no altsetting 0 [ 345.245407][ T5358] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 345.249657][ T7972] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.256042][ T5358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.263516][ T7972] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.272151][ T5358] usb 1-1: Product: syz [ 345.280218][ T7972] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.285130][ T5358] usb 1-1: Manufacturer: syz [ 345.293709][ T7972] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.298894][ T5358] usb 1-1: SerialNumber: syz [ 345.324944][ T7972] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.331042][ T7972] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.336473][ T7972] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.342451][ T7972] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.347903][ T7972] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.355889][ T7972] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.361805][ T7972] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.367156][ T7972] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.372941][ T7972] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.378292][ T7972] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.384159][ T7972] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.390032][ T7972] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.395374][ T7972] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.401492][ T7972] gspca_vc032x: I2c Bus Busy Wait 00 [ 345.406831][ T7972] gspca_vc032x: Unknown sensor... [ 345.412424][ T7972] vc032x 6-1:0.223: probe with driver vc032x failed with error -22 [ 345.423517][ T7972] usb 6-1: USB disconnect, device number 47 [ 345.513696][T11905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.523870][T11905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.538169][ T5358] usb 1-1: selecting invalid altsetting 0 [ 345.544563][ T5358] usb 1-1: selecting invalid altsetting 0 [ 345.551004][ T5358] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 345.558412][ T5358] uvcvideo 1-1:220.0: No valid video chain found. [ 345.570691][ T5358] usb 1-1: selecting invalid altsetting 0 [ 345.576602][ T5358] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 345.588861][ T5358] usb 1-1: USB disconnect, device number 83 [ 346.430573][ T5358] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 346.608617][ T5358] usb 1-1: device descriptor read/64, error -71 [ 346.848617][ T5358] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 346.978695][ T5358] usb 1-1: device descriptor read/64, error -71 [ 347.098977][ T5358] usb usb1-port1: attempt power cycle [ 347.438575][ T5358] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 347.459238][ T5358] usb 1-1: device descriptor read/8, error -71 [ 347.718729][ T5358] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 347.739237][ T5358] usb 1-1: device descriptor read/8, error -71 [ 347.858943][ T5358] usb usb1-port1: unable to enumerate USB device [ 348.418641][ T7251] net_ratelimit: 216 callbacks suppressed [ 348.418727][ T7251] bond4: (slave gretap0): link status up again after 0 ms [ 348.448965][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 348.468951][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 348.498595][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 348.518575][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 348.538626][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 348.568947][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 348.588890][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 348.608877][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 348.628748][ T7251] bond4: (slave gretap0): link status up again after 0 ms [ 348.794654][ T7966] go7007 3-1:4.25: probe with driver go7007 failed with error -12 [ 348.951852][ T7982] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 348.963686][ T7982] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 348.975561][ T7982] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 348.987447][ T7982] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 349.004075][ T7982] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 349.191255][T11917] loop4: detected capacity change from 0 to 7 [ 349.198068][T11917] loop4: [ 349.201602][T11917] loop4: partition table partially beyond EOD, truncated [ 349.291711][T11923] loop2: detected capacity change from 0 to 7 [ 349.298410][T11923] loop2: p1 [ 349.301997][T11923] loop2: partition table partially beyond EOD, truncated [ 349.310535][T11923] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 349.340026][ T6022] udevd[6022]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 349.611374][T11928] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 353.428627][ T7251] net_ratelimit: 231 callbacks suppressed [ 353.428645][ T7251] bond4: (slave gretap0): link status up again after 0 ms [ 353.458963][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 353.478601][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 353.498685][ T7251] bond4: (slave gretap0): link status up again after 0 ms [ 353.518867][ T7251] bond4: (slave gretap0): link status up again after 0 ms [ 353.538879][ T7251] bond4: (slave gretap0): link status up again after 0 ms [ 353.558629][ T7251] bond4: (slave gretap0): link status up again after 0 ms [ 353.578691][ T7251] bond4: (slave gretap0): link status up again after 0 ms [ 353.598904][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 353.618911][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 358.459026][ T7249] net_ratelimit: 230 callbacks suppressed [ 358.459055][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 358.488913][ T7251] bond4: (slave gretap0): link status up again after 0 ms [ 358.508887][ T7251] bond4: (slave gretap0): link status up again after 0 ms [ 358.528876][ T7251] bond4: (slave gretap0): link status up again after 0 ms [ 358.548556][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 358.593159][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 358.628624][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 358.681105][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 358.728556][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 358.758900][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 363.479009][ T7210] net_ratelimit: 225 callbacks suppressed [ 363.479035][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 363.509127][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 363.528897][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 363.548890][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 363.568865][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 363.588919][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 363.608921][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 363.628913][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 363.648919][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 363.668671][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 368.488905][ T7251] net_ratelimit: 227 callbacks suppressed [ 368.488922][ T7251] bond4: (slave gretap0): link status up again after 0 ms [ 368.518954][ T7251] bond4: (slave gretap0): link status up again after 0 ms [ 368.538921][ T7250] bond4: (slave gretap0): link status up again after 0 ms [ 368.558884][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 368.578891][ T7251] bond4: (slave gretap0): link status up again after 0 ms [ 368.598828][ T7251] bond4: (slave gretap0): link status up again after 0 ms [ 368.618907][ T7251] bond4: (slave gretap0): link status up again after 0 ms [ 368.638968][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 368.659464][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 368.678627][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 373.508899][ T7249] net_ratelimit: 230 callbacks suppressed [ 373.508926][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 373.538927][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 373.558626][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 373.578646][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 373.598877][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 373.619021][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 373.638650][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 373.658618][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 373.678886][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 373.698918][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 378.528612][ T63] net_ratelimit: 232 callbacks suppressed [ 378.528638][ T63] bond4: (slave gretap0): link status up again after 0 ms [ 378.558573][ T63] bond4: (slave gretap0): link status up again after 0 ms [ 378.578581][ T63] bond4: (slave gretap0): link status up again after 0 ms [ 378.608910][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 378.628877][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 378.658607][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 378.678571][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 378.708634][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 378.728996][ T7250] bond4: (slave gretap0): link status up again after 0 ms [ 378.748808][ T7250] bond4: (slave gretap0): link status up again after 0 ms [ 378.789479][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.795882][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.548826][ T7250] net_ratelimit: 230 callbacks suppressed [ 383.548844][ T7250] bond4: (slave gretap0): link status up again after 0 ms [ 383.578859][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 383.598605][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 383.618575][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 383.638551][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 383.658968][ T63] bond4: (slave gretap0): link status up again after 0 ms [ 383.678942][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 383.698624][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 383.718854][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 383.738889][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 388.558912][ T7250] net_ratelimit: 232 callbacks suppressed [ 388.558938][ T7250] bond4: (slave gretap0): link status up again after 0 ms [ 388.588994][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 388.608881][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 388.628633][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 388.648872][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 388.668656][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 388.688567][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 388.708817][ T63] bond4: (slave gretap0): link status up again after 0 ms [ 388.728870][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 388.748596][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 393.578939][ T7249] net_ratelimit: 231 callbacks suppressed [ 393.578966][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 393.608868][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 393.628843][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 393.648865][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 393.668855][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 393.688941][ T7250] bond4: (slave gretap0): link status up again after 0 ms [ 393.708689][ T7250] bond4: (slave gretap0): link status up again after 0 ms [ 393.728861][ T7250] bond4: (slave gretap0): link status up again after 0 ms [ 393.748524][ T7250] bond4: (slave gretap0): link status up again after 0 ms [ 393.768898][ T7250] bond4: (slave gretap0): link status up again after 0 ms [ 398.598592][ T7249] net_ratelimit: 236 callbacks suppressed [ 398.598617][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 398.628593][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 398.648660][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 398.668621][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 398.688614][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 398.708954][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 398.728921][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 398.748604][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 398.768717][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 398.788713][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 403.618936][ T7250] net_ratelimit: 236 callbacks suppressed [ 403.618961][ T7250] bond4: (slave gretap0): link status up again after 0 ms [ 403.648874][ T7250] bond4: (slave gretap0): link status up again after 0 ms [ 403.668587][ T7250] bond4: (slave gretap0): link status up again after 0 ms [ 403.688900][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 403.708622][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 403.728914][ T63] bond4: (slave gretap0): link status up again after 0 ms [ 403.749120][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 403.768585][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 403.788727][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 403.808863][ T63] bond4: (slave gretap0): link status up again after 0 ms [ 408.638633][ T7250] net_ratelimit: 234 callbacks suppressed [ 408.638662][ T7250] bond4: (slave gretap0): link status up again after 0 ms [ 408.668838][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 408.688884][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 408.708934][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 408.728609][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 408.748644][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 408.768684][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 408.788691][ T63] bond4: (slave gretap0): link status up again after 0 ms [ 408.808616][ T63] bond4: (slave gretap0): link status up again after 0 ms [ 408.838612][ T63] bond4: (slave gretap0): link status up again after 0 ms [ 413.648660][ T63] net_ratelimit: 227 callbacks suppressed [ 413.648687][ T63] bond4: (slave gretap0): link status up again after 0 ms [ 413.688649][ T63] bond4: (slave gretap0): link status up again after 0 ms [ 413.708622][ T63] bond4: (slave gretap0): link status up again after 0 ms [ 413.739455][ T63] bond4: (slave gretap0): link status up again after 0 ms [ 413.758823][ T63] bond4: (slave gretap0): link status up again after 0 ms [ 413.778909][ T63] bond4: (slave gretap0): link status up again after 0 ms [ 413.808637][ T63] bond4: (slave gretap0): link status up again after 0 ms [ 413.828985][ T63] bond4: (slave gretap0): link status up again after 0 ms [ 413.848932][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 413.868786][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 418.658681][ T7249] net_ratelimit: 228 callbacks suppressed [ 418.658708][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 418.688601][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 418.708574][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 418.738849][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 418.758591][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 418.789028][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 418.808590][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 418.828632][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 418.848611][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 418.868976][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 423.678870][ T7210] net_ratelimit: 226 callbacks suppressed [ 423.678889][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 423.708914][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 423.728883][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 423.748718][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 423.768642][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 423.788945][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 423.808912][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 423.828654][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 423.848614][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 423.868605][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 428.688910][ T7210] net_ratelimit: 234 callbacks suppressed [ 428.688936][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 428.718893][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 428.738969][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 428.758877][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 428.778878][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 428.808887][ T63] bond4: (slave gretap0): link status up again after 0 ms [ 428.828873][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 428.848572][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 428.868676][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 428.888589][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 433.698874][ T63] net_ratelimit: 228 callbacks suppressed [ 433.698900][ T63] bond4: (slave gretap0): link status up again after 0 ms [ 433.728555][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 433.748557][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 433.768598][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 433.788669][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 433.808567][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 433.828681][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 433.848619][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 433.868682][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 433.888850][ T63] bond4: (slave gretap0): link status up again after 0 ms [ 438.719473][ T7210] net_ratelimit: 234 callbacks suppressed [ 438.719491][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 438.748889][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 438.768849][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 438.788970][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 438.809201][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 438.828886][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 438.848605][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 438.868736][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 438.888874][ T63] bond4: (slave gretap0): link status up again after 0 ms [ 438.908568][ T63] bond4: (slave gretap0): link status up again after 0 ms [ 440.229359][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.235732][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.738955][ T7241] net_ratelimit: 235 callbacks suppressed [ 443.738979][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 443.768891][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 443.789072][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 443.808643][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 443.828580][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 443.848642][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 443.868597][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 443.888890][ T63] bond4: (slave gretap0): link status up again after 0 ms [ 443.908911][ T63] bond4: (slave gretap0): link status up again after 0 ms [ 443.928874][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 448.748626][ T7249] net_ratelimit: 238 callbacks suppressed [ 448.748652][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 448.788728][ T63] bond4: (slave gretap0): link status up again after 0 ms [ 448.808615][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 448.828608][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 448.848874][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 448.868605][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 448.888892][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 448.908885][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 448.928948][ T63] bond4: (slave gretap0): link status up again after 0 ms [ 448.948594][ T63] bond4: (slave gretap0): link status up again after 0 ms [ 453.768631][ T7249] net_ratelimit: 235 callbacks suppressed [ 453.768724][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 453.798587][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 453.818687][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 453.838611][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 453.858609][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 453.878919][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 453.898953][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 453.918871][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 453.938753][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 453.958601][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 458.788571][ T7249] net_ratelimit: 239 callbacks suppressed [ 458.788597][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 458.818904][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 458.838929][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 458.858867][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 458.878564][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 458.898651][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 458.918602][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 458.938644][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 458.958577][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 458.978551][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 463.808845][ T7210] net_ratelimit: 231 callbacks suppressed [ 463.808870][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 463.838909][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 463.858575][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 463.878875][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 463.908710][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 463.928649][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 463.948643][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 463.968569][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 463.988574][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 464.008585][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 468.818851][ T63] net_ratelimit: 230 callbacks suppressed [ 468.818869][ T63] bond4: (slave gretap0): link status up again after 0 ms [ 468.848865][ T63] bond4: (slave gretap0): link status up again after 0 ms [ 468.868871][ T63] bond4: (slave gretap0): link status up again after 0 ms [ 468.888830][ T63] bond4: (slave gretap0): link status up again after 0 ms [ 468.909115][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 468.928592][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 468.948784][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 468.968635][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 468.988632][ T63] bond4: (slave gretap0): link status up again after 0 ms [ 469.008845][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 473.828818][ T7210] net_ratelimit: 228 callbacks suppressed [ 473.828844][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 473.858795][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 473.878875][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 473.898932][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 473.918609][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 473.938693][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 473.958623][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 473.978680][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 473.998859][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 474.018885][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 478.838912][ T7210] net_ratelimit: 230 callbacks suppressed [ 478.838937][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 478.868898][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 478.888857][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 478.908606][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 478.928888][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 478.948606][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 478.968835][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 478.988827][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 479.008829][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 479.028641][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 483.848896][ T7210] net_ratelimit: 231 callbacks suppressed [ 483.848914][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 483.888898][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 483.908796][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 483.928841][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 483.948866][ T7241] bond4: (slave gretap0): link status up again after 0 ms [ 483.968958][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 483.988663][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 484.008650][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 484.028582][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 484.048575][ T7210] bond4: (slave gretap0): link status up again after 0 ms [ 486.949115][ T30] INFO: task kworker/u8:22:7246 blocked for more than 143 seconds. [ 486.957425][ T30] Tainted: G L syzkaller #0 [ 486.964786][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 486.973972][ T30] task:kworker/u8:22 state:D stack:22160 pid:7246 tgid:7246 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 486.986526][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 486.993043][ T30] Call Trace: [ 486.996468][ T30] [ 486.999847][ T30] __schedule+0x17d9/0x56c0 [ 487.004479][ T30] ? __pfx___schedule+0x10/0x10 [ 487.009797][ T30] ? rcu_is_watching+0x15/0xb0 [ 487.014621][ T30] ? rcu_is_watching+0x15/0xb0 [ 487.019800][ T30] ? lock_release+0x4b/0x3c0 [ 487.024436][ T30] ? wq_worker_sleeping+0x66/0x250 [ 487.030198][ T30] schedule+0x164/0x360 [ 487.034437][ T30] schedule_preempt_disabled+0x13/0x30 [ 487.040367][ T30] __mutex_lock+0x7bf/0x1550 [ 487.045020][ T30] ? __mutex_lock+0x5d4/0x1550 [ 487.050269][ T30] ? addrconf_dad_work+0x116/0x15c0 [ 487.055490][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 487.060910][ T30] ? __perf_event_task_sched_in+0x189b/0x1a90 [ 487.067017][ T30] ? perf_cgroup_switch+0xe6/0x920 [ 487.072945][ T30] ? sched_clock+0x3f/0x60 [ 487.077492][ T30] ? __perf_event_task_sched_in+0xf7/0x1a90 [ 487.083977][ T30] addrconf_dad_work+0x116/0x15c0 [ 487.089749][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 487.095199][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 487.101121][ T30] ? rcu_is_watching+0x15/0xb0 [ 487.105903][ T30] ? lock_acquire+0x5f/0x350 [ 487.111149][ T30] ? rcu_is_watching+0x15/0xb0 [ 487.115970][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 487.122162][ T30] process_scheduled_works+0xa8e/0x14e0 [ 487.127733][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 487.134221][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 487.139712][ T30] ? assign_work+0x3cf/0x5d0 [ 487.144332][ T30] worker_thread+0xa47/0xfb0 [ 487.149382][ T30] kthread+0x388/0x470 [ 487.153557][ T30] ? __pfx_worker_thread+0x10/0x10 [ 487.159188][ T30] ? __pfx_kthread+0x10/0x10 [ 487.163831][ T30] ret_from_fork+0x514/0xb70 [ 487.168915][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 487.174060][ T30] ? __switch_to+0xc89/0x1420 [ 487.179313][ T30] ? __pfx_kthread+0x10/0x10 [ 487.184101][ T30] ret_from_fork_asm+0x1a/0x30 [ 487.189598][ T30] [ 487.192708][ T30] INFO: task kworker/u8:28:7252 blocked for more than 143 seconds. [ 487.201134][ T30] Tainted: G L syzkaller #0 [ 487.207644][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 487.216806][ T30] task:kworker/u8:28 state:D stack:22776 pid:7252 tgid:7252 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 487.228952][ T30] Workqueue: events_unbound linkwatch_event [ 487.235069][ T30] Call Trace: [ 487.238360][ T30] [ 487.241826][ T30] __schedule+0x17d9/0x56c0 [ 487.246345][ T30] ? __pfx___schedule+0x10/0x10 [ 487.251683][ T30] ? rcu_is_watching+0x15/0xb0 [ 487.256671][ T30] ? rcu_is_watching+0x15/0xb0 [ 487.262060][ T30] ? lock_release+0x4b/0x3c0 [ 487.266673][ T30] ? wq_worker_sleeping+0x66/0x250 [ 487.272581][ T30] schedule+0x164/0x360 [ 487.276801][ T30] schedule_preempt_disabled+0x13/0x30 [ 487.282835][ T30] __mutex_lock+0x7bf/0x1550 [ 487.287460][ T30] ? __mutex_lock+0x5d4/0x1550 [ 487.292752][ T30] ? linkwatch_event+0xe/0x60 [ 487.297468][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 487.302929][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 487.309219][ T30] ? rcu_is_watching+0x15/0xb0 [ 487.314024][ T30] ? rcu_is_watching+0x15/0xb0 [ 487.319230][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 487.324979][ T30] linkwatch_event+0xe/0x60 [ 487.330017][ T30] process_scheduled_works+0xa8e/0x14e0 [ 487.335616][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 487.342265][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 487.347486][ T30] ? assign_work+0x3cf/0x5d0 [ 487.352556][ T30] worker_thread+0xa47/0xfb0 [ 487.357179][ T30] ? __kthread_parkme+0x71/0x1f0 [ 487.362550][ T30] kthread+0x388/0x470 [ 487.366818][ T30] ? __pfx_worker_thread+0x10/0x10 [ 487.372922][ T30] ? __pfx_kthread+0x10/0x10 [ 487.378344][ T30] ret_from_fork+0x514/0xb70 [ 487.383984][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 487.389502][ T30] ? __switch_to+0xc89/0x1420 [ 487.394188][ T30] ? __pfx_kthread+0x10/0x10 [ 487.399268][ T30] ret_from_fork_asm+0x1a/0x30 [ 487.404055][ T30] [ 487.407151][ T30] INFO: task kworker/0:15:7968 blocked for more than 143 seconds. [ 487.415569][ T30] Tainted: G L syzkaller #0 [ 487.422570][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 487.431640][ T30] task:kworker/0:15 state:D stack:24136 pid:7968 tgid:7968 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 487.444011][ T30] Workqueue: events netdev_rx_mode_work [ 487.450143][ T30] Call Trace: [ 487.453430][ T30] [ 487.456357][ T30] __schedule+0x17d9/0x56c0 [ 487.461417][ T30] ? kasan_save_track+0x3e/0x80 [ 487.466678][ T30] ? kasan_save_free_info+0x40/0x50 [ 487.472484][ T30] ? __kasan_slab_free+0x5c/0x80 [ 487.477561][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 487.483054][ T30] ? __pfx___schedule+0x10/0x10 [ 487.487946][ T30] ? rcu_is_watching+0x15/0xb0 [ 487.493272][ T30] ? rcu_is_watching+0x15/0xb0 [ 487.498166][ T30] ? lock_release+0x4b/0x3c0 [ 487.503155][ T30] ? rcu_is_watching+0x15/0xb0 [ 487.507927][ T30] ? schedule+0x90/0x360 [ 487.512648][ T30] ? trace_irq_enable+0x3b/0x140 [ 487.517651][ T30] schedule+0x164/0x360 [ 487.522238][ T30] schedule_preempt_disabled+0x13/0x30 [ 487.527712][ T30] __mutex_lock+0x7bf/0x1550 [ 487.532705][ T30] ? __mutex_lock+0x5d4/0x1550 [ 487.537468][ T30] ? netdev_rx_mode_work+0x18/0x3c0 [ 487.542726][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 487.547768][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 487.553207][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 487.559349][ T30] ? rcu_is_watching+0x15/0xb0 [ 487.564146][ T30] ? lock_acquire+0x5f/0x350 [ 487.569294][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 487.575154][ T30] netdev_rx_mode_work+0x18/0x3c0 [ 487.580733][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 487.586931][ T30] process_scheduled_works+0xa8e/0x14e0 [ 487.593158][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 487.599683][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 487.604736][ T30] ? assign_work+0x3cf/0x5d0 [ 487.609756][ T30] worker_thread+0xa47/0xfb0 [ 487.614705][ T30] ? __kthread_parkme+0x71/0x1f0 [ 487.620149][ T30] kthread+0x388/0x470 [ 487.624255][ T30] ? __pfx_worker_thread+0x10/0x10 [ 487.630044][ T30] ? __pfx_kthread+0x10/0x10 [ 487.634997][ T30] ret_from_fork+0x514/0xb70 [ 487.640043][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 487.645181][ T30] ? __switch_to+0xc89/0x1420 [ 487.650549][ T30] ? __pfx_kthread+0x10/0x10 [ 487.655246][ T30] ret_from_fork_asm+0x1a/0x30 [ 487.660629][ T30] [ 487.663771][ T30] INFO: task syz.1.1574:11883 blocked for more than 144 seconds. [ 487.672164][ T30] Tainted: G L syzkaller #0 [ 487.679183][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 487.688130][ T30] task:syz.1.1574 state:D stack:27608 pid:11883 tgid:11882 ppid:5642 task_flags:0x400140 flags:0x00080002 [ 487.700562][ T30] Call Trace: [ 487.704045][ T30] [ 487.707015][ T30] __schedule+0x17d9/0x56c0 [ 487.712446][ T30] ? __pfx___schedule+0x10/0x10 [ 487.717576][ T30] ? rcu_is_watching+0x15/0xb0 [ 487.722808][ T30] ? rcu_is_watching+0x15/0xb0 [ 487.727614][ T30] ? lock_release+0x4b/0x3c0 [ 487.732806][ T30] ? rcu_is_watching+0x15/0xb0 [ 487.737604][ T30] schedule+0x164/0x360 [ 487.742207][ T30] schedule_preempt_disabled+0x13/0x30 [ 487.747708][ T30] __mutex_lock+0x7bf/0x1550 [ 487.752743][ T30] ? __mutex_lock+0x5d4/0x1550 [ 487.757512][ T30] ? devinet_ioctl+0x2fb/0x1c50 [ 487.762846][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 487.767877][ T30] ? bpf_lsm_capable+0x9/0x20 [ 487.772991][ T30] ? security_capable+0x7e/0x2c0 [ 487.778074][ T30] devinet_ioctl+0x2fb/0x1c50 [ 487.783177][ T30] ? lock_release+0x4b/0x3c0 [ 487.787843][ T30] ? __might_fault+0xaf/0x130 [ 487.793127][ T30] ? __pfx_devinet_ioctl+0x10/0x10 [ 487.798328][ T30] ? get_user_ifreq+0x12b/0x180 [ 487.803780][ T30] inet_ioctl+0x42a/0x560 [ 487.808132][ T30] ? __pfx_inet_ioctl+0x10/0x10 [ 487.813437][ T30] ? lock_release+0x4b/0x3c0 [ 487.818055][ T30] ? kfree+0x1c5/0x640 [ 487.822891][ T30] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 487.830334][ T30] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 487.835425][ T30] ? packet_ioctl+0x26b/0x350 [ 487.840694][ T30] sock_do_ioctl+0x101/0x320 [ 487.845319][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 487.850855][ T30] ? hook_file_ioctl+0x1f0/0x5f0 [ 487.855859][ T30] sock_ioctl+0x57a/0x7e0 [ 487.860623][ T30] ? lock_release+0x4b/0x3c0 [ 487.865215][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 487.870177][ T30] ? __fget_files+0x2a/0x420 [ 487.874814][ T30] ? __fget_files+0x3a2/0x420 [ 487.879542][ T30] ? __fget_files+0x2a/0x420 [ 487.884159][ T30] ? bpf_lsm_file_ioctl+0x9/0x20 [ 487.889920][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 487.894884][ T30] __se_sys_ioctl+0xfc/0x170 [ 487.899872][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.905969][ T30] do_syscall_64+0x174/0x580 [ 487.911021][ T30] ? trace_irq_disable+0x3b/0x140 [ 487.916052][ T30] ? clear_bhb_loop+0x40/0x90 [ 487.921165][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.927092][ T30] RIP: 0033:0x7f489199ce59 [ 487.931969][ T30] RSP: 002b:00007f48928ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 487.941158][ T30] RAX: ffffffffffffffda RBX: 00007f4891c15fa0 RCX: 00007f489199ce59 [ 487.949624][ T30] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 0000000000000005 [ 487.957623][ T30] RBP: 00007f4891a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 487.966154][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.974554][ T30] R13: 00007f4891c16038 R14: 00007f4891c15fa0 R15: 00007f4891d3fa48 [ 487.983008][ T30] [ 487.986171][ T30] INFO: task syz.2.1575:11885 blocked for more than 144 seconds. [ 487.994714][ T30] Tainted: G L syzkaller #0 [ 488.001632][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 488.010815][ T30] task:syz.2.1575 state:D stack:22648 pid:11885 tgid:11884 ppid:5639 task_flags:0x400140 flags:0x00080002 [ 488.023234][ T30] Call Trace: [ 488.026523][ T30] [ 488.029862][ T30] __schedule+0x17d9/0x56c0 [ 488.034486][ T30] ? __pfx___schedule+0x10/0x10 [ 488.039937][ T30] ? rcu_is_watching+0x15/0xb0 [ 488.044833][ T30] ? rcu_is_watching+0x15/0xb0 [ 488.050043][ T30] ? lock_release+0x4b/0x3c0 [ 488.054735][ T30] ? rcu_is_watching+0x15/0xb0 [ 488.060228][ T30] schedule+0x164/0x360 [ 488.064687][ T30] schedule_preempt_disabled+0x13/0x30 [ 488.070882][ T30] __mutex_lock+0x7bf/0x1550 [ 488.075510][ T30] ? __mutex_lock+0x5d4/0x1550 [ 488.080729][ T30] ? __ethtool_get_link_ksettings+0x109/0x250 [ 488.087074][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 488.092641][ T30] ? igmp_group_added+0x238/0x910 [ 488.097966][ T30] ? igmpv3_del_delrec+0x204/0x710 [ 488.103506][ T30] __ethtool_get_link_ksettings+0x109/0x250 [ 488.109793][ T30] bond_netdev_event+0x643/0xf80 [ 488.114816][ T30] ? __pfx_bond_netdev_event+0x10/0x10 [ 488.120714][ T30] ? __pfx_inetdev_event+0x10/0x10 [ 488.125835][ T30] ? ipmr_device_event+0x1f6/0x220 [ 488.131410][ T30] notifier_call_chain+0x1a5/0x3d0 [ 488.136603][ T30] __dev_notify_flags+0x1aa/0x310 [ 488.142129][ T30] ? __pfx___dev_notify_flags+0x10/0x10 [ 488.147691][ T30] ? __dev_change_flags+0x5f1/0x820 [ 488.153896][ T30] ? __pfx___dev_change_flags+0x10/0x10 [ 488.159940][ T30] ? __kmalloc_cache_noprof+0x318/0x660 [ 488.165526][ T30] netif_change_flags+0xde/0x1b0 [ 488.170988][ T30] dev_change_flags+0x128/0x260 [ 488.175888][ T30] vlan_device_event+0x1b4e/0x1f00 [ 488.181573][ T30] ? packet_notifier+0xf1b/0xf70 [ 488.186722][ T30] ? br_device_event+0x282/0x9c0 [ 488.191760][ T30] ? __pfx_phonet_device_notify+0x10/0x10 [ 488.197498][ T30] ? __pfx_vlan_device_event+0x10/0x10 [ 488.203256][ T30] ? bcm_notifier+0xa9/0x890 [ 488.208061][ T30] ? raw_notifier+0x9d/0x7d0 [ 488.213120][ T30] ? cgw_notifier+0x314/0x380 [ 488.217825][ T30] notifier_call_chain+0x1a5/0x3d0 [ 488.223370][ T30] __dev_notify_flags+0x1aa/0x310 [ 488.228835][ T30] ? __pfx___dev_notify_flags+0x10/0x10 [ 488.234442][ T30] ? __dev_change_flags+0x5f1/0x820 [ 488.240087][ T30] ? __pfx___dev_change_flags+0x10/0x10 [ 488.245710][ T30] ? rtnl_af_lookup+0x20/0x250 [ 488.250990][ T30] netif_change_flags+0xde/0x1b0 [ 488.256306][ T30] do_setlink+0xdd6/0x4670 [ 488.261256][ T30] ? trace_sched_exit_tp+0x3a/0x130 [ 488.266630][ T30] ? __schedule+0x17ef/0x56c0 [ 488.271946][ T30] ? __pfx_do_setlink+0x10/0x10 [ 488.276996][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 488.282562][ T30] ? rcu_is_watching+0x15/0xb0 [ 488.287355][ T30] ? rcu_is_watching+0x15/0xb0 [ 488.292591][ T30] ? rcu_is_watching+0x15/0xb0 [ 488.297537][ T30] ? rcu_is_watching+0x15/0xb0 [ 488.302886][ T30] ? trace_irq_enable+0x3b/0x140 [ 488.307864][ T30] ? __mutex_lock+0x1092/0x1550 [ 488.313132][ T30] ? __mutex_lock+0x5d4/0x1550 [ 488.317901][ T30] ? rtnl_newlink+0x8a3/0x1bd0 [ 488.323070][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 488.329226][ T30] ? ns_capable+0x89/0xe0 [ 488.333608][ T30] ? rtnl_link_get_net_capable+0xd3/0x310 [ 488.339789][ T30] rtnl_newlink+0x148e/0x1bd0 [ 488.344498][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 488.349981][ T30] ? unwind_next_frame+0x8f/0x2550 [ 488.355216][ T30] ? rcu_is_watching+0x15/0xb0 [ 488.360424][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 488.365733][ T30] ? rcu_is_watching+0x15/0xb0 [ 488.371012][ T30] ? unwind_next_frame+0x8f/0x2550 [ 488.376149][ T30] ? rcu_is_watching+0x15/0xb0 [ 488.381361][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 488.386574][ T30] ? rcu_is_watching+0x15/0xb0 [ 488.391830][ T30] ? rcu_is_watching+0x15/0xb0 [ 488.396634][ T30] ? lock_release+0x4b/0x3c0 [ 488.401794][ T30] ? lock_release+0x4b/0x3c0 [ 488.406440][ T30] ? is_bpf_text_address+0x292/0x2b0 [ 488.412422][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 488.417935][ T30] ? kernel_text_address+0xa5/0xe0 [ 488.423591][ T30] ? __kernel_text_address+0xd/0x30 [ 488.429221][ T30] ? unwind_get_return_address+0x4d/0x90 [ 488.434868][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 488.441717][ T30] ? arch_stack_walk+0xfb/0x150 [ 488.446578][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 488.452156][ T30] ? rcu_is_watching+0x15/0xb0 [ 488.456942][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 488.462493][ T30] ? rcu_is_watching+0x15/0xb0 [ 488.467279][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 488.472899][ T30] ? lock_release+0x4b/0x3c0 [ 488.477525][ T30] ? bpf_lsm_capable+0x9/0x20 [ 488.482837][ T30] ? security_capable+0x7e/0x2c0 [ 488.487823][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 488.493287][ T30] rtnetlink_rcv_msg+0x802/0xc00 [ 488.498232][ T30] ? kasan_save_track+0x3e/0x80 [ 488.505275][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 488.510495][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 488.515973][ T30] ? __netlink_lookup+0xc6/0x8b0 [ 488.520997][ T30] ? rcu_is_watching+0x15/0xb0 [ 488.525782][ T30] netlink_rcv_skb+0x226/0x4a0 [ 488.530927][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 488.536391][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 488.542125][ T30] ? net_generic+0x1e/0x240 [ 488.546652][ T30] ? net_generic+0x1e/0x240 [ 488.551675][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 488.556904][ T30] netlink_unicast+0x7bb/0x940 [ 488.562087][ T30] netlink_sendmsg+0x813/0xb40 [ 488.566871][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.572614][ T30] ? futex_unqueue+0x22/0x240 [ 488.577417][ T30] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 488.584517][ T30] ? lock_release+0x4b/0x3c0 [ 488.589587][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.594927][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 488.600482][ T30] ____sys_sendmsg+0x54e/0x850 [ 488.605277][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 488.611083][ T30] ? lock_release+0x4b/0x3c0 [ 488.615703][ T30] ? import_iovec+0x73/0xa0 [ 488.620789][ T30] ___sys_sendmsg+0x2a5/0x360 [ 488.625661][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 488.631369][ T30] ? futex_wait+0x2a2/0x390 [ 488.636077][ T30] ? __fget_files+0x2a/0x420 [ 488.641111][ T30] ? __fget_files+0x3a2/0x420 [ 488.645810][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 488.651189][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 488.656677][ T30] ? rcu_is_watching+0x15/0xb0 [ 488.661877][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.668299][ T30] do_syscall_64+0x174/0x580 [ 488.673636][ T30] ? trace_irq_disable+0x3b/0x140 [ 488.679241][ T30] ? clear_bhb_loop+0x40/0x90 [ 488.684051][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.690406][ T30] RIP: 0033:0x7fb5a4f9ce59 [ 488.694929][ T30] RSP: 002b:00007fb5a5d8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.703926][ T30] RAX: ffffffffffffffda RBX: 00007fb5a5215fa0 RCX: 00007fb5a4f9ce59 [ 488.712585][ T30] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 488.721028][ T30] RBP: 00007fb5a5032e6f R08: 0000000000000000 R09: 0000000000000000 [ 488.729520][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.737697][ T30] R13: 00007fb5a5216038 R14: 00007fb5a5215fa0 R15: 00007fb5a533fa48 [ 488.746136][ T30] [ 488.749761][ T30] INFO: lockdep is turned off. [ 488.754594][ T30] NMI backtrace for cpu 1 [ 488.754615][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 488.754641][ T30] Tainted: [L]=SOFTLOCKUP [ 488.754648][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 488.754659][ T30] Call Trace: [ 488.754667][ T30] [ 488.754676][ T30] dump_stack_lvl+0xe8/0x150 [ 488.754703][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 488.754806][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 488.754829][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 488.754854][ T30] sys_info+0x135/0x170 [ 488.754877][ T30] watchdog+0xfd7/0x1030 [ 488.754907][ T30] ? watchdog+0x1c7/0x1030 [ 488.754935][ T30] kthread+0x388/0x470 [ 488.754954][ T30] ? __pfx_watchdog+0x10/0x10 [ 488.754980][ T30] ? __pfx_kthread+0x10/0x10 [ 488.754999][ T30] ret_from_fork+0x514/0xb70 [ 488.755021][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 488.755040][ T30] ? __switch_to+0xc89/0x1420 [ 488.755067][ T30] ? __pfx_kthread+0x10/0x10 [ 488.755086][ T30] ret_from_fork_asm+0x1a/0x30 [ 488.755111][ T30] [ 488.755116][ T30] Sending NMI from CPU 1 to CPUs 0: [ 488.858710][ T7250] net_ratelimit: 233 callbacks suppressed [ 488.858733][ T7250] bond4: (slave gretap0): link status up again after 0 ms [ 488.888582][ T7249] bond4: (slave gretap0): link status up again after 0 ms [ 488.891422][ C0] NMI backtrace for cpu 0 [ 488.891440][ C0] CPU: 0 UID: 0 PID: 7249 Comm: kworker/u8:25 Tainted: G L syzkaller #0 PREEMPT(full) [ 488.891463][ C0] Tainted: [L]=SOFTLOCKUP [ 488.891469][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 488.891480][ C0] Workqueue: bond4 bond_mii_monitor [ 488.891557][ C0] RIP: 0010:wq_watchdog_touch+0xf9/0x160 [ 488.891580][ C0] Code: 48 c7 c6 ce bd 22 8e 67 48 0f b9 3a 49 c1 ec 02 4d 01 ec 4c 89 e6 48 29 ee 31 ff e8 b1 1e 38 00 49 39 ec 78 07 e8 c7 19 38 00 31 e8 c0 19 38 00 48 c7 c0 80 f2 60 8e 48 c1 e8 03 42 80 3c 38 [ 488.891603][ C0] RSP: 0018:ffffc90004ff7198 EFLAGS: 00000093 [ 488.891618][ C0] RAX: ffffffff818e1ae9 RBX: ffffffff8e28f7d0 RCX: ffff88802c913e00 [ 488.891630][ C0] RDX: 0000000000000000 RSI: 00000000000005d5 RDI: 0000000000000000 [ 488.891640][ C0] RBP: 0000000100004902 R08: ffff888025c48237 R09: 1ffff11004b89046 [ 488.891652][ C0] R10: dffffc0000000000 R11: ffffffff8bad06a0 R12: 0000000100004ed7 [ 488.891664][ C0] R13: 000000010000412b R14: ffff8880b86240c8 R15: dffffc0000000000 [ 488.891677][ C0] FS: 0000000000000000(0000) GS:ffff888125253000(0000) knlGS:0000000000000000 [ 488.891691][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 488.891702][ C0] CR2: 00005614c4a17168 CR3: 000000007f8e0000 CR4: 00000000003526f0 [ 488.891718][ C0] Call Trace: [ 488.891726][ C0] [ 488.891734][ C0] wait_for_lsr+0x151/0x2f0 [ 488.891803][ C0] serial8250_console_write+0x1373/0x1bd0 [ 488.891839][ C0] ? rcu_is_watching+0x15/0xb0 [ 488.891860][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 488.891876][ C0] ? rcu_is_watching+0x15/0xb0 [ 488.891893][ C0] ? lock_acquire+0x5f/0x350 [ 488.891910][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 488.891930][ C0] ? console_flush_all+0x123/0xaf0 [ 488.891950][ C0] console_flush_all+0x6ea/0xaf0 [ 488.891970][ C0] ? console_flush_all+0x123/0xaf0 [ 488.891991][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 488.892012][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 488.892036][ C0] console_unlock+0xd1/0x1c0 [ 488.892054][ C0] ? __pfx_console_unlock+0x10/0x10 [ 488.892071][ C0] ? vprintk_emit+0x260/0x560 [ 488.892089][ C0] ? vprintk_emit+0x455/0x560 [ 488.892107][ C0] ? vprintk_emit+0x2cf/0x560 [ 488.892123][ C0] ? vprintk_emit+0x2cf/0x560 [ 488.892141][ C0] vprintk_emit+0x485/0x560 [ 488.892158][ C0] ? rcu_is_watching+0x15/0xb0 [ 488.892196][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 488.892217][ C0] _printk+0xdd/0x130 [ 488.892252][ C0] ? __pfx__printk+0x10/0x10 [ 488.892275][ C0] ? __netdev_printk+0x36f/0x480 [ 488.892297][ C0] netdev_info+0x11e/0x180 [ 488.892319][ C0] ? __pfx_netdev_info+0x10/0x10 [ 488.892341][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 488.892384][ C0] ? ___ratelimit+0x584/0x8e0 [ 488.892407][ C0] bond_mii_monitor+0x9fc/0x3260 [ 488.892427][ C0] ? rcu_is_watching+0x15/0xb0 [ 488.892447][ C0] ? bond_mii_monitor+0x16e/0x3260 [ 488.892467][ C0] ? timerqueue_linked_add+0x287/0x2e0 [ 488.892486][ C0] ? __pfx_bond_mii_monitor+0x10/0x10 [ 488.892506][ C0] ? hrtimer_start_range_ns_common+0x812/0xb90 [ 488.892526][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 488.892546][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 488.892566][ C0] ? rcu_is_watching+0x15/0xb0 [ 488.892583][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 488.892602][ C0] ? rcu_is_watching+0x15/0xb0 [ 488.892619][ C0] ? lock_acquire+0x5f/0x350 [ 488.892634][ C0] ? rcu_is_watching+0x15/0xb0 [ 488.892652][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 488.892671][ C0] process_scheduled_works+0xa8e/0x14e0 [ 488.892699][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 488.892719][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 488.892741][ C0] ? assign_work+0x3cf/0x5d0 [ 488.892761][ C0] worker_thread+0xa47/0xfb0 [ 488.892798][ C0] kthread+0x388/0x470 [ 488.892814][ C0] ? __pfx_worker_thread+0x10/0x10 [ 488.892833][ C0] ? __pfx_kthread+0x10/0x10 [ 488.892849][ C0] ret_from_fork+0x514/0xb70 [ 488.892866][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 488.892882][ C0] ? __switch_to+0xc89/0x1420 [ 488.892904][ C0] ? __pfx_kthread+0x10/0x10 [ 488.892920][ C0] ret_from_fork_asm+0x1a/0x30 [ 488.892944][ C0] [ 488.895402][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 488.895436][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 488.895464][ T30] Tainted: [L]=SOFTLOCKUP [ 488.895473][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 488.895485][ T30] Call Trace: [ 488.895496][ T30] [ 488.895505][ T30] vpanic+0x56c/0xa60 [ 488.895535][ T30] ? __pfx___schedule+0x10/0x10 [ 488.895563][ T30] ? __pfx_vpanic+0x10/0x10 [ 488.895587][ T30] panic+0xc5/0xd0 [ 488.895607][ T30] ? __pfx_panic+0x10/0x10 [ 488.895627][ T30] ? preempt_schedule_common+0x82/0xd0 [ 488.895653][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 488.895680][ T30] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 488.895707][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 488.895732][ T30] watchdog+0x1030/0x1030 [ 488.895762][ T30] ? watchdog+0x1c7/0x1030 [ 488.895789][ T30] kthread+0x388/0x470 [ 488.895810][ T30] ? __pfx_watchdog+0x10/0x10 [ 488.895834][ T30] ? __pfx_kthread+0x10/0x10 [ 488.895852][ T30] ret_from_fork+0x514/0xb70 [ 488.895874][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 488.895894][ T30] ? __switch_to+0xc89/0x1420 [ 488.895921][ T30] ? __pfx_kthread+0x10/0x10 [ 488.895940][ T30] ret_from_fork_asm+0x1a/0x30 [ 488.895967][ T30] [ 488.898977][ T30] Kernel Offset: disabled