last executing test programs: 2m37.672434691s ago: executing program 2 (id=704): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="280000005e000d0025bd7000000000000800000001"], 0x28}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='f2fs\x00', 0x10, &(0x7f0000000100)='barrier') ioctl$USBDEVFS_CONNECTINFO(r2, 0x80045520, &(0x7f0000002a40)) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c00078006000440000000000600054000000000080006"], 0x64}}, 0x0) r3 = socket$kcm(0x10, 0x7, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33) 2m37.636930997s ago: executing program 2 (id=705): r0 = open(&(0x7f00000000c0)='./file1\x00', 0x108843, 0x98) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r1}, './file0\x00'}) fcntl$setlease(r0, 0x400, 0x1) setxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) 2m37.592758851s ago: executing program 2 (id=706): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1a5e00}) capset(&(0x7f00000004c0)={0x20071026}, &(0x7f0000000100)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000180)="b92b13f6b94d", 0x0, 0xfffffffc, 0x0, 0x0, 0x0}) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101202, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x6, &(0x7f0000000140)=[{0x3, 0xf, 0xf8, 0x100}, {0x0, 0x7, 0xf7, 0x6f}, {0x1, 0x5, 0x6, 0x5}, {0x5, 0x1, 0x3, 0xb}, {0x5, 0x9, 0xff, 0x4}, {0x2, 0x4, 0x4, 0x9}]}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x1, 0x1}, {{@in6=@empty, 0x4d4, 0x32}, 0x2, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000080)=0x1) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) close(r6) 2m37.500007333s ago: executing program 2 (id=707): clock_nanosleep(0x9511f3c3a34bb9cc, 0x1, &(0x7f00000004c0), 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x60400, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) (async) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) (async, rerun: 64) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x5af, {0xfeffffffffffffff, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x21, 0x7, 0x1, 0x8000, 0x0, r3, r4, 0x1000003, 0x7d1d}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$FUSE_NOTIFY_RETRIEVE(r6, 0x0, 0x0) (async) dup2(r6, r0) (async) r7 = socket(0xa, 0x3, 0xff) keyctl$get_security(0x11, 0x0, 0x0, 0x0) r8 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000430033"], 0xfe33) (async) r9 = syz_open_dev$sg(&(0x7f0000000100), 0x8001, 0x0) ioctl$SG_BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000200)={'\x00', 0x3, 0xfffff801, 0x4, 0xdb, 0x100000001, r5}) (async) sendmsg$inet6(r7, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x47, @mcast2, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000180)="d61723d7c6012c", 0x7}, {&(0x7f0000000040)="9eb1d91a92dc7c8fff658bb539e2ffb332c90000a7dfe52c1f5121a206f5abff07", 0x21}], 0x2}, 0x20008b88) (async) pwrite64(r0, &(0x7f00000003c0)='@', 0x1, 0x100001) syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) 2m37.499676825s ago: executing program 2 (id=708): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_open_dev$audion(&(0x7f00000000c0), 0x6, 0x361000) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) (async) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) (async) tkill(r5, 0x3c) (async) ptrace$peeksig(0x4209, r5, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000180)=0x1, 0x4) (async) write$tun(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000180"], 0xfdef) (async) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000280)) (async) r6 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x110000000097a9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x21, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875496364ab192cb8b873aa"}) (async) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002600), 0x0, 0x0) ioctl$TCSBRKP(r7, 0x5418, 0x7fffffffffffffff) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x50, &(0x7f0000000240)={&(0x7f0000000400)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0x88}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 2m37.272398951s ago: executing program 2 (id=711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c8f020082395afa4d23edfcbe6d55b57cb15e63c10080000000000000abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000000080)={0x3, 0x566e, 0x5, 0x6, 0x1, 0x6, 0x2, 0xe370}, &(0x7f00000000c0)={0x3, 0x1, 0x7ffc, 0x7c, 0x800000000000, 0x8000000000000001, 0x0, 0xf}, &(0x7f0000000100)={0xffffffff, 0x100000001, 0x21b5b90, 0x8000000000000001, 0xaf5, 0x1, 0xda99, 0x9}, &(0x7f0000000140)) (async) select(0x40, &(0x7f0000000080)={0x3, 0x566e, 0x5, 0x6, 0x1, 0x6, 0x2, 0xe370}, &(0x7f00000000c0)={0x3, 0x1, 0x7ffc, 0x7c, 0x800000000000, 0x8000000000000001, 0x0, 0xf}, &(0x7f0000000100)={0xffffffff, 0x100000001, 0x21b5b90, 0x8000000000000001, 0xaf5, 0x1, 0xda99, 0x9}, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x100, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405668, &(0x7f0000000100)={0x6, 0x2, 0x2, 0x4800}) landlock_restrict_self(r1, 0xe) (async) landlock_restrict_self(r1, 0xe) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000180)={'\x00', 0x7, 0x0, 0x7fffffff}) (async) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000180)={'\x00', 0x7, 0x0, 0x7fffffff}) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000040)=0x30) (async) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000040)=0x30) 2m22.119576374s ago: executing program 32 (id=711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c8f020082395afa4d23edfcbe6d55b57cb15e63c10080000000000000abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000000080)={0x3, 0x566e, 0x5, 0x6, 0x1, 0x6, 0x2, 0xe370}, &(0x7f00000000c0)={0x3, 0x1, 0x7ffc, 0x7c, 0x800000000000, 0x8000000000000001, 0x0, 0xf}, &(0x7f0000000100)={0xffffffff, 0x100000001, 0x21b5b90, 0x8000000000000001, 0xaf5, 0x1, 0xda99, 0x9}, &(0x7f0000000140)) (async) select(0x40, &(0x7f0000000080)={0x3, 0x566e, 0x5, 0x6, 0x1, 0x6, 0x2, 0xe370}, &(0x7f00000000c0)={0x3, 0x1, 0x7ffc, 0x7c, 0x800000000000, 0x8000000000000001, 0x0, 0xf}, &(0x7f0000000100)={0xffffffff, 0x100000001, 0x21b5b90, 0x8000000000000001, 0xaf5, 0x1, 0xda99, 0x9}, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x100, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405668, &(0x7f0000000100)={0x6, 0x2, 0x2, 0x4800}) landlock_restrict_self(r1, 0xe) (async) landlock_restrict_self(r1, 0xe) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000180)={'\x00', 0x7, 0x0, 0x7fffffff}) (async) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000180)={'\x00', 0x7, 0x0, 0x7fffffff}) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000040)=0x30) (async) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000040)=0x30) 17.911777908s ago: executing program 4 (id=1601): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d06}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0xc042) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x13, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x60, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc038563b, &(0x7f0000000040)={0x0, 0xff, 0x300a, 0x1}) 16.977723783s ago: executing program 4 (id=1603): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000007, 0x13, r0, 0x8871a000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1fe, 0x1, 0x0, 0x2000, &(0x7f0000ce9000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d00, 0x0, 0xfff}]}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000280)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x220000, 0x0, 0x2ded5e, 0x200000000000}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x325) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="e4d5dad39024ded087c5593741676110a5533c8c2484792f6c02c040e4175ec5a1bcce2d43929404b3f709c570e7c54105459e1c471d13a9a30acdc6dc60b42d3f1003cad718dd56ab07766df9c7ccdc24920a72c524e9ec90943b109d7ba7c5d3a7e21bb35104e6d84f116a0aa37426466389a3d047456aed269134296b73013a8b0ca4e3a1fa1fab6d9c8d947d83d07d6354b9fa22adb94425ca4dfc5d71", 0x9f, 0x800, &(0x7f0000000000)={0xa, 0x4e21, 0x7fff, @rand_addr=' \x01\x00', 0x8001}, 0x1c) 16.571873613s ago: executing program 4 (id=1604): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000800), 0x0, 0x240080d0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac0000000000000000000000000000000000000000000600", "90be8b1c55080021000c547d03d8a0f4bd00", [0x0, 0x6]}}) 16.535092582s ago: executing program 4 (id=1605): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) (async, rerun: 32) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (rerun: 32) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x7, &(0x7f0000001940)=0x7, 0x4) (async) readv(r1, &(0x7f0000000640)=[{&(0x7f0000000180)=""/130, 0x82}, {&(0x7f0000000240)=""/122, 0x7a}, {&(0x7f00000002c0)=""/67, 0x43}, {&(0x7f0000000340)=""/97, 0x61}, {&(0x7f0000000040)=""/53, 0x35}, {&(0x7f0000000400)=""/251, 0xfb}, {&(0x7f0000000500)=""/138, 0x8a}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000100)=""/33, 0x21}], 0x9) 16.470410625s ago: executing program 4 (id=1606): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = gettid() timer_create(0x4, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000040)=0x5, 0x4) bind$unix(r3, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$inet(0x2, 0x802, 0x1) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040340"], 0x24) r6 = socket$inet6(0xa, 0x3, 0x5) r7 = socket$l2tp6(0xa, 0x2, 0x73) r8 = dup2(r7, r6) setsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000080), 0x4) sendmmsg$inet6(r7, &(0x7f0000002800)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x2, @mcast2, 0x2}, 0x1c, 0x0}}], 0x1, 0x200000c4) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @in6=@remote, 0x4e20, 0x9, 0x4e20, 0x1ff, 0x2, 0x20, 0x10, 0x2f}, {0x9, 0xb, 0x7, 0x2, 0x100, 0x97, 0x2, 0x7fffffff}, {0x7e, 0x4, 0xb2c1, 0x8}, 0x0, 0x6e6bb7, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x4d3, 0xff}, 0x2, @in=@local, 0x3503, 0x1, 0x2, 0x0, 0x5, 0x7, 0x6}}, 0xe8) 16.392116402s ago: executing program 4 (id=1607): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x6, 0x4) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) flistxattr(r4, &(0x7f0000000140)=""/4096, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) sendmsg$sock(r2, &(0x7f0000001780)={&(0x7f0000001180)=@ax25={{0x3, @bcast}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001200)="fc72891afd518730e31e7c54624a6e225741a42c7f7fdba33ca2abdc0c5e40222b8a5f08d8517e164e0acdcd95883bd2b165587e84720d5b2a0fb18f92332576f7093d20d57dae0aebf740307b179496282dce024056a79a0c0c5f54d849c45c08558a26b301a3f506406ab2c9b7f3ddd453152e771c1fec8f8b5943845f69e51ffde297a7fe0dbe71162521dff4", 0x8e}, {&(0x7f00000012c0)}, {&(0x7f0000001300)="286f972ab4c4dedb8b44c9670bc3332bf1c396ee", 0x14}, {&(0x7f0000001340)="dd1ea83f81995a6fdea25eba90a58ca39d426367ef1adc9cb490d48f8a9f98", 0x1f}, {&(0x7f0000001380)="ec21631270a0f12451dd6856eae87915f7a6b5e1162f02f6053503350a6cbfab90afa9a87955fb09febe0c579e643d0ee4198e5fb5c6be5081897e20feefaafac35e90a086c1f0dec5dd360c3a373b8a79eb7a3d1897f03d8964659b8a6142be459c8b31a78394d10fe4386d47399e18ef9e940e719ef0ebf8a92120ca62601afb1cfcb37d5ee3c5de538428b973403fa1e38eb6dff112", 0x97}, {&(0x7f0000001440)="ecbe4c10ab7a3a533bd004f1725a3c1cdd18e60b2adea3c932ae2ceb2e25c54e312748613aecee54ed5969dc6741ba0ed66082b75b950ef281d304fdca6614017f3896ac98071aa8ee081c7a5c03090611ec83ba1d8598d4ca25a22230ff4b845be0cd0ee5c5f92e19b7e148f1d33bd4f0e48e9e529eed102aff143a76a4997015e2473584839b3445f323160a40bd24bcd210216b16d7d03e9207da18454411f3312e73a91906c689934ae6687ab68ef698", 0xb2}, {&(0x7f0000001500)="11d45e7314fca1beb8f1ead216b1fc3de84ebc1850341bfe0e39d82577bbad78dddb4808ff89b24e0e74ed1e53e67b5867f77fa98d531bd3debdc4ae661b6255ca748a196f3c985b344d0f36a2a40ed58baec33bd05a0c71914021ee8f6a291c09bb5c7fc6300dc9c3d9536ae7e5b3a1b319757a9707ab70a133217941d8d7f46d11654cf79789b2e5f0c4facea1b333732a", 0x92}, {&(0x7f00000015c0)="a2063d210eaf0e8b97eb85e2cc77b04492422d5ea6fe0c51563584d47976a91d3ad1994d1f3814e73a1092442edf4d169978eff0e0fa45070aaf7e478723e891822863e53bc424d9c123c1c94d034009274e08ced7abadbdf1ee401455586a9901e67c77ffd4b67fd4ccb50d81f5e0652ffe763d09412d8f6dfbee7e323870e3b4eec60f955941bdff2a11348e049d2f7f361204443c0d2fe37b58098c84f0825484bb4ccd8045bcb723893d8085de", 0xaf}], 0x8, &(0x7f0000001700)=[@timestamping={{0x14, 0x1, 0x25, 0x80000000}}, @timestamping={{0x14, 0x1, 0x25, 0x80000001}}, @txtime={{0x18, 0x1, 0x3d, 0x1ff}}], 0x48}, 0x4000015) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f00000018c0)=0x0, &(0x7f0000001900)=0x4) sendto$packet(r4, &(0x7f00000017c0)="d8a811c1b22183cc9052ae84ec36f896694b544243a439f1f08a0e18c9557a4f903875edb441e2f3d557b95bfba0b46bbbd3fa6e5a9b4266bf350748b535049d6a7a8316f25d8013279dac24d50969f65f9b515f5c4874fc80981c39b7f201baaaffb75bc7bf66458c3a09f6ec8e4d8f77e7bbfcbb86592adc713c0b5c83845111d5e89730770e74d8e9207e0cbb31e5c8fc5ab5848eb991af3b9badc2ae20d1b211f926bc2ec09adb8f5d38841e2a935f7faa3c89f383aeac69d4f8c1468a76cf29010e1e504f912fd9cb16f85c6dc9ff5dc0b17430613d90040a182845bd", 0xdf, 0x10, &(0x7f0000001940)={0x11, 0x5cb460313d0b6cdd, r6, 0x1, 0x7, 0x6, @random="d31b1d782669"}, 0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000001980)) r7 = syz_genetlink_get_family_id$team(&(0x7f0000001a40), r4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000001b00)={'ip6_vti0\x00', &(0x7f0000001a80)={'syztnl1\x00', r6, 0x4, 0xf7, 0x5, 0x18000000, 0x68, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x8, 0x8000, 0x7fff}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001b40)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001b80)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000001bc0)={0x0, @initdev, @empty}, &(0x7f0000001c00)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000002800)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000027c0)={&(0x7f0000001c40)={0xb48, r7, 0x20, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0xc0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r3}, {0x1f0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x2, 0x66, 0x93, 0x73}, {0x8, 0xe7, 0x4, 0x10001}, {0x1, 0x1f, 0x5, 0x2}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe7d}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe1a4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}]}}, {{0x8, 0x1, r6}, {0x270, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x600000}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r6}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf9}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r6}, {0x1ac, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xad00}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x79}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x11560}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r3}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xb88c, 0xc, 0x3, 0xe}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8c}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r6}, {0xc8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x9, 0x27, 0x81, 0x8001}, {0x2, 0x1, 0x0, 0x9}, {0x100, 0x4, 0xd, 0x9}]}}}]}}]}, 0xb48}, 0x1, 0x0, 0x0, 0x2000004}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000002980)={&(0x7f0000002840), 0xc, &(0x7f0000002940)={&(0x7f0000002880)={0x98, r7, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r11}}}]}}]}, 0x98}}, 0x20000000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000029c0)) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000002b00)={'sit0\x00', &(0x7f0000002a80)={'ip_vti0\x00', r3, 0x7852, 0x8, 0x0, 0x2, {{0x17, 0x4, 0x3, 0x16, 0x5c, 0x66, 0x0, 0x6, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@timestamp={0x44, 0x1c, 0xd1, 0x0, 0x2, [0x7, 0x3, 0xffff, 0x0, 0x7, 0x8512]}, @ra={0x94, 0x4}, @cipso={0x86, 0x25, 0x3, [{0x7, 0xc, "242fe3f526f4e2dcb958"}, {0x1, 0x6, "c54d0bc7"}, {0x7, 0x5, "b158f2"}, {0x2, 0x8, "a6a36da0a87a"}]}]}}}}}) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000002b40)=0x0, &(0x7f0000002b80)=0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002bc0)={'bridge_slave_1\x00', 0x0}) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f0000002c00)={@dev, 0x0}, &(0x7f0000002c40)=0x14) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000002c80)={0x0, @local, @local}, &(0x7f0000002cc0)=0xc) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000002d00)={@multicast1, @rand_addr, 0x0}, &(0x7f0000002d40)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r12, &(0x7f00000038c0)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003880)={&(0x7f0000002d80)={0xae4, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r3}, {0x228, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xbf6}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1c1}}}]}}, {{0x8, 0x1, r9}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x995f}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd9}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x4, 0x6, 0x4, 0x6}]}}}]}}, {{0x8, 0x1, r3}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r10}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r11}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x93}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}]}}, {{0x8, 0x1, r17}, {0x230, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r18}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}]}, 0xae4}, 0x1, 0x0, 0x0, 0x4800}, 0x800) 10.518935672s ago: executing program 0 (id=1638): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b09, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x0}, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x2, 0x5b, 0xbd, 0x97, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000f80)={0x34, &(0x7f0000000d40)={0x20, 0xf, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x40, 0x3, 0xc4, {0xc4, 0x10, "5077ece27e1694419744c860a15f9ea5d7045c1560eac47c8dd28f16ebb892bf4e567f857e00a71426d6d9d38b7697c9e08f15bf0fdc54319fe3edc9f17bd279b97159e9a50f52b7018f0d0c347b6351a269eea18a20201ab3be89a1514ff0d488eb37e2328b38eb001b9ac002026050ba0d5535927444d93373642fb7931abd20d639aa004bed54fae1b57d63df0385b859ff835e6ecf69afe09c133535f8c756ba6a547cf6023c8db6b1e2bb063fc3e97d791d5303be633a57c77f2480e97b3200"}}, &(0x7f0000000600)={0x0, 0x3, 0x94, @string={0x94, 0x3, "179e44fd5b6b49212f00d28787cd65ec2766d3f4f0f49b408aee5d3a3d09306e438f95c6abbe1e595fb6426ffd6683a3978070eb66cb55a75082d4ca8f87e10dcb2d5924530760122e50f734bf0417845b5b0df5af8715a7a8adb4ffce07463c350f5448156f2d8a124ca6d349a965f3686dcc3e82a13fb8e5454783d0c9ae2945bfb77a4ec195348a469c24dd710cfb5377"}}}, &(0x7f0000000500)={0x44, &(0x7f0000000240)={0x20, 0x12, 0xc2, "956099f4a897304a22002544962457388315995efea54e8d9930637beb8ca7f82d91f7cfea59baa5dbcbca13916f555dfa5e1c8824c08225f8bfa13e90f41897b9d7797e3db2caa431f2878a97eef5b0898c7eaa8b2d484e30a739da20f81f8ff444a59e3e799cae8ddf3c2b377e287e63867d21940f71f97b33f0f6e51d2d4a307f64d2604ae770bc9c827051153016c89a63b92612af610f5416ba5246cdf6dd487aebe3c8e7dc35ca5a50fa89451b18c37fc4409b181df51f290fd4eb28b81e98"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000003c0)={0x20, 0x81, 0x2, "6eba"}, &(0x7f0000000400)={0x20, 0x82, 0x3, "e3afd2"}, &(0x7f0000000440)={0x20, 0x83, 0x3, "ffc8ea"}, &(0x7f0000000480)={0x20, 0x84, 0x4, "00ff87bb"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "b9630f"}}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b09, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6}}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x0}, 0x0) (async) syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x2, 0x5b, 0xbd, 0x97, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000f80)={0x34, &(0x7f0000000d40)={0x20, 0xf, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x40, 0x3, 0xc4, {0xc4, 0x10, "5077ece27e1694419744c860a15f9ea5d7045c1560eac47c8dd28f16ebb892bf4e567f857e00a71426d6d9d38b7697c9e08f15bf0fdc54319fe3edc9f17bd279b97159e9a50f52b7018f0d0c347b6351a269eea18a20201ab3be89a1514ff0d488eb37e2328b38eb001b9ac002026050ba0d5535927444d93373642fb7931abd20d639aa004bed54fae1b57d63df0385b859ff835e6ecf69afe09c133535f8c756ba6a547cf6023c8db6b1e2bb063fc3e97d791d5303be633a57c77f2480e97b3200"}}, &(0x7f0000000600)={0x0, 0x3, 0x94, @string={0x94, 0x3, "179e44fd5b6b49212f00d28787cd65ec2766d3f4f0f49b408aee5d3a3d09306e438f95c6abbe1e595fb6426ffd6683a3978070eb66cb55a75082d4ca8f87e10dcb2d5924530760122e50f734bf0417845b5b0df5af8715a7a8adb4ffce07463c350f5448156f2d8a124ca6d349a965f3686dcc3e82a13fb8e5454783d0c9ae2945bfb77a4ec195348a469c24dd710cfb5377"}}}, &(0x7f0000000500)={0x44, &(0x7f0000000240)={0x20, 0x12, 0xc2, "956099f4a897304a22002544962457388315995efea54e8d9930637beb8ca7f82d91f7cfea59baa5dbcbca13916f555dfa5e1c8824c08225f8bfa13e90f41897b9d7797e3db2caa431f2878a97eef5b0898c7eaa8b2d484e30a739da20f81f8ff444a59e3e799cae8ddf3c2b377e287e63867d21940f71f97b33f0f6e51d2d4a307f64d2604ae770bc9c827051153016c89a63b92612af610f5416ba5246cdf6dd487aebe3c8e7dc35ca5a50fa89451b18c37fc4409b181df51f290fd4eb28b81e98"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000003c0)={0x20, 0x81, 0x2, "6eba"}, &(0x7f0000000400)={0x20, 0x82, 0x3, "e3afd2"}, &(0x7f0000000440)={0x20, 0x83, 0x3, "ffc8ea"}, &(0x7f0000000480)={0x20, 0x84, 0x4, "00ff87bb"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "b9630f"}}) (async) 7.404779984s ago: executing program 0 (id=1654): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000f00)={0x2c, &(0x7f0000000d40)={0x0, 0x1, 0x1d, {0x1d, 0x2, "98e36207f350a0c9f0120acc6f2a1c58c0a9f599ca21637dc6793f"}}, &(0x7f0000000d80)={0x0, 0x3, 0x8c, @string={0x8c, 0x3, "7010700d17269bc82d9a48798465f70fe78458723e622fedb83bb080ab7cceb26a94c8a0f8320cfcf8507b7f35af06bb10d5802c6c01ec0880f3b1f5b415cd989065c2946436152321f672df263478bf25d7654e52e9a63b8591a8f19ed609880a242311f52313608ff65ea75d141cd30a5a383067af54b0e1f2da198a67952e5204079e86057335abfb"}}, &(0x7f0000000e40)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "b5f4a8da12d6cfe8a34dff92ea0647bc"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x9, 0x2, 0x4}]}}, &(0x7f0000000e80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x3, 0x9, 0xc7, "11742fd5", "d3c62561"}}, &(0x7f0000000ec0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x60, 0x4, 0x2, 0x71, 0x400, 0x200}}}, &(0x7f00000013c0)={0x84, &(0x7f0000000f40)={0x0, 0x14, 0x7d, "ca346cb4df95fac94c8e6090908d8eed8aae5e8fc9763f5d4ee12bd4b39ee6f3f41239393c64e8978ef47eb7ee4ffdea18a387c0f54c71bd58ce2715170a9d0113e0596170aa24d96e1284673dcfebc6a3e50e7b87bbf07cf52c4252fd890f13c74a1ae2df919ca71ce7c1c5adc18e6089f58e9fb904e33e51d1a4207e"}, &(0x7f0000001000)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001040)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001080)={0x20, 0x0, 0x4, {0x5}}, &(0x7f00000010c0)={0x20, 0x0, 0x8, {0x1000, 0x2, [0xf]}}, &(0x7f0000001100)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000001140)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000001180)={0x40, 0xb, 0x2, "4fb3"}, &(0x7f00000011c0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000001200)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001240)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001280)={0x40, 0x19, 0x2, "acb1"}, &(0x7f00000012c0)={0x40, 0x1a, 0x2, 0x7ff}, &(0x7f0000001300)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000001340)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000001380)={0x40, 0x21, 0x1, 0x4}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c10000042000701feffffff00000000037c000004004280241001"], 0x103c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) sendmmsg$inet(r1, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001480)="9344485a4f6c11af068733b3b0f198b22d5ae59bcb233b83e46d3e330b0f7937d31d9dfe2481ce0facfb7983bc9fab6637bc35e1b5ef6ae5bd3b96f12a5c006781916bac566e728e24f583f3b303a166fb07bbb3ceae04769071f34e622d123800f2ade697d47d0368f9995083166ca2affdd2a2ea319c1d3c0ff840a9cdfdde99d278bfa9590bf0562933d288091532aa66f324fe5f26635ed779b942e05ed90141d76b244784f36f85f154da0fda7e96a9d521d76206ea009424c9a040ba864c7f7d188ebee244ec95c0d3e2a8ceaecbe358347ef44fa2af127c6ab65e8147c0bad2a6c3b0e24bd2624608c1f4213a41317c8e27bb6a4f717e5967109aebac19f9d4bd8f6c2353c5701acd9673f0fcf0c21be01d8d6f4f5f0d881a1da5a40dd9731124efeb268eeac0d6e19869e321caed7c29be6851b53886b16cc8014ee682f53b7089cf758712e93b47de2e6000abdd6038cc9af5e1a92253fa163debe9dfda25f5042eef581815b95ea86fcb45b5d6abc5d55b63d55d366dcfb754ab8d8ddd516e0422ea79cb4327705accf0912758a81117bc83ef3bc20bba046bda7a3b873d1bf8a40684947d0467da21dd88b666154cccb58a1e8cb42eab86392cea9979a7b845911b583b1ddc510a61e21895d79cf6a3b882f57e02dd5469a4e947f77f631d2263020af30eaf5a13860838d9eca19c2baec15e7eb29e89d968e3187d9755db0fa08ea6d65efd4e8fb34e531aed3836932aa789f4ec19651ee2c846c7e3e2435fd9fddc38faaba44caf24a9fa4792c0ca59557814735a9a8e83e3796a456b0faa8abb7a76bbbd019bd7d76c3866328a948e6c6a258ebe92c9728002455c9cf902db67bd933d669b5465a9fc98e56158a8b420870a456f9efa749206c99a44e9f8e06add0c30540b6f62bae34ac3bf065d6f07a7b4613551cc5b3471229305ff7f8a4aa8e5bfb6bfbda5d1d581f73b0bcafc1a96f587cb6794ed5ade7a644dad2049b9f3172604b1c1f2dcdbe86b1c92eae2af5868335e851e083f7cea0e96454fafa9d81fb1d5655e7fd693aeeaa3617c49c760e26cc7f13a715f0979b058c6e3b0a131e36f077999b4e67ac253b92c3d158a8e3bfb279d8f493a0d7b243d95a74323192a1ef4961be1c36feb5ab6dafc2e34ac4a7d03f874f394823d2b784ea1d343ae886a3aec", 0x34c}], 0x10000000000002f3}}], 0x1, 0x20008800) syz_usb_control_io$hid(r0, &(0x7f0000000a80)={0x24, &(0x7f0000000540)={0x40, 0x21, 0x31, {0x31, 0x4f, "c924b4d7e2982cd15736701ddda42e9030dfdc5fa587544a1e6e7ba9d8b7d08ca317f72ed4bbdb48e5e9b3eb50fbe8"}}, &(0x7f0000000940)={0x0, 0x3, 0xa4, @string={0xa4, 0x3, "65c35dc1f2676590b42185e3f82bb612c48e3d4e80474cab43dbfd0cb9af9cd78f2d0a84e071d90d07251a4f7ffd1788dcee764e08197f68f4e7008d77c76a5f48817c5b184b503ebb3713db318f7a0c0de854523b91b8ebe29f57acb6265625156582460a48ca3a36344224dadc2ab398c9ed863db839ec970d09ce5213db73dc8f1d5c5be1706e0ab4fdc09f2b054b0eff0ea46978b3099f6c4e50b45e2d377da7"}}, &(0x7f0000000a00)={0x0, 0x22, 0x15, {[@local=@item_4={0x3, 0x2, 0x3, "08fbd83f"}, @global=@item_4={0x3, 0x1, 0x6, "458c7f51"}, @local=@item_012={0x0, 0x2, 0x1}, @main=@item_4={0x3, 0x0, 0xb, "2ae8a8e7"}, @main=@item_4={0x3, 0x0, 0x8, "18ed6e65"}]}}, &(0x7f0000000a40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x81, 0x1, {0x22, 0x2a2}}}}, &(0x7f0000000d00)={0x2c, &(0x7f0000000ac0)={0x20, 0x13, 0x3f, "0afbfe37e36c7264b31ff85e5e854344b618d195c297702a826c38228db81203958404e9f91f0cdad6e8b6447ddc711fcdb165cf1ea9470ae62cfa0f7b4d28"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x17}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000bc0)={0x20, 0x1, 0xf3, "be18cce3e3c2dd23fa24eab62b83cc7eeee2cfac7ccdf88d1072c7a6374c34e4f4e5983f68ea55be9728843f50abd22a7b4b78a7f29d57e5c69bc48e6fba342592317d74ae5db5c4c6a391f0eb67262cf91e4dcf2e35297fb5da96e26b8e2eafaacc025d5a307f6f8a59ea6f892c8459e87b3fd28dc95c80ffd6cbc8a8018b9442f59919006f265056f70e1481f74f02f39c69ca6aeeeae0b3502778634a12cb3aa25f3a4008d15b6bfd775c6c597df9062a8d621a06c35f36a3857f1b2b65a008220159ebdf5d28ae1b6ddcec9db2fd37b2531797c7a34326355cd7659aab2f66dc3a5a17fdb00966189520dc82f97318d0d4"}, &(0x7f0000000cc0)={0x20, 0x3, 0x1, 0x1}}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x20, 0x2, 0x69, {0x69, 0x1, "542ad13c83920828324a23e9fc80e59af60a47cf56b4586714af73ae71ecef827784fb67dd515ecf159b85969d04fa16f6b3fed0b02760bb9cd1382e0b852aebf75350e9c44fc8b98d05c4e20ecde273cac905a55b1087cf2fdaa45edb74b2fd8fbbebf1689504"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x408}}}, &(0x7f00000008c0)={0x44, &(0x7f00000001c0)={0x0, 0x12, 0xc3, "5473d4cf2f0a99cd4ab33f948c5cf0d0f6c79b79d8bf2e920cb937c32dd5483e845a4b3d386dfddf07dfc0fc4f1047f95e06aab956948c666497c97f421992953d9c71cb98719f68c3110e859c09c071068e7c71ea140daa711b1aef11f60fcf8f6352351f201a8763e55f6573801e92b25df1693a636b4eb891f63b5cdfc14803142118ccec46ba12a6d151bf62db1dfa0fa866b58120e0498c462e0c61f6320204b30d94fa8a5d8e24a7548030ab19463625daa2ff9c8195903e4857df309d978a51"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000340)={0x20, 0x81, 0x3, "f3813e"}, &(0x7f0000000380)={0x20, 0x82, 0x2, "30cc"}, &(0x7f00000003c0)={0x20, 0x83, 0x1, "a4"}, &(0x7f0000000440)={0x20, 0x84, 0x1, 'Z'}, &(0x7f0000000480)={0x20, 0x85, 0x3, "c453a3"}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r3, 0x4) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.346742298s ago: executing program 0 (id=1670): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d06}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0xc042) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x13, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x60, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc038563b, &(0x7f0000000040)={0x0, 0xff, 0x300a, 0x1}) 3.340003535s ago: executing program 0 (id=1675): r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x2000094}, 0x4040800) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0xd) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000001180)=0x2000000) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000005000000000800040001000000", 0x24) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000001040)=0x9) 3.130477976s ago: executing program 0 (id=1677): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040d90455a018000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000000)={0x0, 0x22, 0xfa, {0xfa, 0xc, "bf7aefb1ffdef1a6bb0925c3f55d6b79f1d23bbcf720dbe0ee152404765978f23095d7fa3073b3064f508035cf5d3a751d011a96f80bec53ea68ee46a413ffaa90012e26941b04bb5a8e6572229b441f1b1d5192f8da96ea9e21bc4560b580c9c66d547e8928a412875d9d6ada58fb4986df7e30fd095403a90f8e4c4e491c849f04efa33256afdc99e32c69c2c53b99bb5b32db0e771b16c9db663c40060c2ba9add8ff74add8d6a1c799804a260667b827a9c9f416988468dd4862dc6178d80308c86a02d65c85673c5eed18da429787df06faca756b7c7fb4df47526953675498f2169cf7d63f28b1e9771d04a0a3fcf0d75be9becc6f"}}, &(0x7f0000000100)={0x0, 0x3, 0x97, @string={0x97, 0x3, "294afe6b1fbade7730442c42c3c0f14414a8f63fe637e92e61b4bc52b5e2734955c2185bbc8dada0e83c1bb75b2f5a9d3b988e6841e6c4ca4ec73c960cc2e8186aeb1a2a4a55d7993ad215a402f87342eb8209366e235057018c55ca03cd4c92c6af4f5d4fc7aecaf25789b94b29bca20a59e9530832d13831c1d26ca6bd990472aa30c0d32e8e50c0041ef7cf835a194cf9a0f79d"}}, &(0x7f0000000200)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0x9, "a7"}, @local=@item_4={0x3, 0x2, 0x4, "0aba38a1"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x565a, 0x3, 0x1, {0x22, 0xf13}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)={0x0, 0x17, 0x45, "04e885a356056f91e5839d6595287db879d431787d027e4a282571c64172d422e5f7d61aa81027464d420e1bd69aadf981b132b532721b5ebf298b5ad33c1ad19acc349e26"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000400)=ANY=[@ANYBLOB="20015600000016b37d401dcefa6a155c8d855f377ee88273c5da583aabf52b81e2cbae4891794b0400000000000000622b442eb38f15ae7cb5ed43e7d99897c04cd3c42f904184251f222e49a7485ff0c6c3aafd3fa022990cbecfa6"], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x80}}) 2.835768602s ago: executing program 1 (id=1679): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r0, &(0x7f00000016c0)=[{&(0x7f0000001780)=""/172, 0xac}, {&(0x7f0000001840)=""/215, 0xd7}, {&(0x7f0000000380)=""/84, 0x54}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/161, 0xa1}, {&(0x7f0000000400)=""/94, 0x5e}, {&(0x7f0000000100)}, {&(0x7f0000001580)=""/85, 0x55}, {&(0x7f0000000280)=""/79, 0x4f}, {&(0x7f0000001680)=""/34, 0x22}], 0xa, 0x0, 0x0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, r2) r3 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r3, 0x0, 0x0, 0x1, 0x3000) msgrcv(r3, 0x0, 0x0, 0x2, 0x1000) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x8}, 0x0, 0x0, 0x0, 0x19, 0x5, 0x2bde, 0xffffffffffffff27, 0xc7, 0x2, 0x9}) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f00000004c0)={0x3ff, [{0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "a3baee8e5bc51c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000080)={{r5, 0x7fffffffffffffff, 0xffffffffffffff44, 0x8, 0x49ae, 0x8, 0xfffffffffffffffe, 0x6, 0x2, 0x6, 0x401, 0x8000000000000001, 0x8, 0x881, 0x8}, 0x8, [0x0]}) get_robust_list(0xffffffffffffffff, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r8 = syz_open_dev$video(&(0x7f0000000040), 0x3, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05640, &(0x7f00000002c0)={0x9}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x700}) preadv(r4, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64=r6], 0x161681) 1.841083093s ago: executing program 1 (id=1682): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000181"], 0xfdef) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x26c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x40, 0x7, 0x5, {0x5, 0x21, "0000f1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYRESOCT=r1, @ANYBLOB="075c2d3ad83226157f513cf8a6457c53b6fbf389d6573aad1c759937212f2f3e327a067c99f1996e08eb8393c9fe78c2f09dc65aecebe9e2b969d73b9ab9a40f96f923535dbb7fc933ca310308743b1e2c6d361afcfba3b7ad63fb39903770d59db08a008eaed6af51bb60a39872112f5644bda1", @ANYRESHEX=r1, @ANYRESHEX=r2, @ANYRES16=0x0], 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xd7, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x80, 0x6, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x2, 0xe2, {0x9, 0x21, 0x7f, 0xe, 0x1, {0x22, 0x546}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x0, 0x1c}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0xfa, 0xa}}]}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0xb, 0xbf, 0x8, 0x8, 0x81}, 0x1d, &(0x7f0000000180)={0x5, 0xf, 0x1d, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x5, 0x9, 0x6, 0xb9, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x2, 0x6, 0x1}, @ptm_cap={0x3}]}, 0xa, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x40a}}, {0x70, &(0x7f0000000380)=@string={0x70, 0x3, "1969014b6db53588ff787beaf23c340c95cd89a548d4f8a7ad42ca5006caf71af9af8e71a25e3c9cf6aea273eab5de8973bf4a1fceffaa93c500a0fb3871eb819b8026b570d0617c7ddf52abd31060e2433f2763523ae23b905c4243da7281ff542fabec569a62a93f00e5610760"}}, {0xc3, &(0x7f0000000500)=@string={0xc3, 0x3, "2de7625725018fe1b9d3bd8f06b266462016149fab02bbdaa1b08620cd17a6b6d438ba4b65e9da30e9036e70399e8fec634628901190cf2f3ca0d82cd0fbc353bd6823e208d58ac9022d91c47811c6071a991ff581f00d9fe7cb87296242ad68965b7b9779ecf727e8fbd1751b892b3f92245a606a9de1ee4d3ff1095e30eb8cfab8f2c02930e0ccfa049bb09af470104b5724bb36f8134f107a852407716ec7cb58815c391862cf75a67443dad95c91d4566d1abdcfc2551091c75938a7a1dcd3"}}, {0x94, &(0x7f0000000400)=@string={0x94, 0x3, "aa7b4e357f8f379b54fba225be8861a05a0a9b1bb52858c5d7c6f38ba8a36b089022bf38d70481edb43eead4e5e82c18dae426fd444be621ffbaf08cb2bf372b1be7c5205fd67f13bb511e2147c0e52ba3a303a49fdcfcb7700d1e8e8b2832f7f129f1dc897735bebc97e654e1c85070404655dd644337df5ebc69f87d2b53b127d40da1f3c3e82285466f4e16bd1fcb69cc"}}, {0x74, &(0x7f0000000600)=@string={0x74, 0x3, "be0c4996fe62322fc0dc13bc8088f80903b884a3bc859ea938cada69cce4f5b93549caacddecf354d10dc7db80d88018e88a50decc24065a06e5890521684ba07b2e97f705de75661b69a0e6abe3b5f6c3d07f07b42d12daa2ead60aecc791eed4b19e05bb6180fcc88b7ae3c2783077d999"}}, {0xf4, &(0x7f0000000680)=@string={0xf4, 0x3, "7ceda87c420f4f04fb1f88b284ced886485c5563469aedc841c2c72234a9c031a2e4847b15fc6de49a4f775986bfcc8c966ee32bebf1f55f4495af705d4fc94eb5e5cd8fd17afee84a3e5edb201dccdb85e6cc9edc748f21787ddd267eefef07a5114a9cfc013d6cbb74e61fea21371d59acb28320c85f6397668a4b12045b266a539689dc6e33eb668fa8b32dd1a53bbeaeac239f6d24dfda44052d5fab9e0d34ea9b7dc342a15610afba8dbc5e08ea878469b3ddd73c1e944821ac10d46efd8424014968b3ada97cdb3c47b902af2ddbe4cfe8b797e5e05c6683483016fa5f6673bb516c6ed545f8a42c66db834ba7fed1"}}, {0xa1, &(0x7f0000000780)=@string={0xa1, 0x3, "e21b191444c35f1bcc1edeb7d8b9d4ccd76162669440d14098525cb9a281ddc0eaf96c2fd409a98a0e7f5cac66deccbff439b08a937bb605fa4905b3f9218a4048bef6e04baff3d98a5c58c4f4bcb24a2d06e671821f1689f06e5f611cc4510935849f3a0000dea62d7be0f168ba919ce8e64f43d0b127925b1036340ad5d406be596fb3d1f3cf0963363491d9816413458497217bd7c5c39252863b5ba93b"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x4c0a}}]}) 1.809494634s ago: executing program 3 (id=1683): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d06}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0xc042) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x13, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x60, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc038563b, &(0x7f0000000040)={0x0, 0xff, 0x300a, 0x1}) 1.095874639s ago: executing program 1 (id=1684): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfc, 0x400}, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xeb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0xf4, 0x0, &(0x7f00000004c0)=[@decrefs={0x40046307, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x101}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}, @dead_binder_done, @enter_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0xa, 0x1, 0x15}, @flat=@weak_handle={0x77682a85, 0x10b, 0x1}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000280)={0x0, 0x20, 0x38}}, 0x40}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@fda={0x66646185, 0xa, 0x1, 0x33}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/138, 0x8a, 0x1, 0x20}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000400)={0x0, 0x20, 0x48}}, 0x1000}], 0xae, 0x0, &(0x7f00000005c0)="4f376e3d51caf3ddd7b3067d2cde8e5e2ef1b9e64b13e29ec5f7485eb730662dab8de054d8b81aa9e4e749c48be32104e8005d54a54c23028b5d85c29e10bec124c6e388d0041aab913cefae42f4940735e7479682ca69c0dc13a6387d54d3f51d8d8e410b44ad558b1c6957b99e49393b628d9c7551a04397732ddeb11b4e5930a9dfa13abde98c4bb2b2b6b4eb9c6551b00040d1832ba642ee7a0f2cabd6c1510a93d8615a1a1d609b9a037026"}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xb3) mount$tmpfs(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6e72a99e255614b3bf9412f2bde4b63a17f66d9cdd82c60a59d4b55ead3e98112020a3e901d0480b8a4eb9d5afad7390b30b0dbf"]) 1.095087468s ago: executing program 33 (id=1607): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x6, 0x4) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) flistxattr(r4, &(0x7f0000000140)=""/4096, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) sendmsg$sock(r2, &(0x7f0000001780)={&(0x7f0000001180)=@ax25={{0x3, @bcast}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001200)="fc72891afd518730e31e7c54624a6e225741a42c7f7fdba33ca2abdc0c5e40222b8a5f08d8517e164e0acdcd95883bd2b165587e84720d5b2a0fb18f92332576f7093d20d57dae0aebf740307b179496282dce024056a79a0c0c5f54d849c45c08558a26b301a3f506406ab2c9b7f3ddd453152e771c1fec8f8b5943845f69e51ffde297a7fe0dbe71162521dff4", 0x8e}, {&(0x7f00000012c0)}, {&(0x7f0000001300)="286f972ab4c4dedb8b44c9670bc3332bf1c396ee", 0x14}, {&(0x7f0000001340)="dd1ea83f81995a6fdea25eba90a58ca39d426367ef1adc9cb490d48f8a9f98", 0x1f}, {&(0x7f0000001380)="ec21631270a0f12451dd6856eae87915f7a6b5e1162f02f6053503350a6cbfab90afa9a87955fb09febe0c579e643d0ee4198e5fb5c6be5081897e20feefaafac35e90a086c1f0dec5dd360c3a373b8a79eb7a3d1897f03d8964659b8a6142be459c8b31a78394d10fe4386d47399e18ef9e940e719ef0ebf8a92120ca62601afb1cfcb37d5ee3c5de538428b973403fa1e38eb6dff112", 0x97}, {&(0x7f0000001440)="ecbe4c10ab7a3a533bd004f1725a3c1cdd18e60b2adea3c932ae2ceb2e25c54e312748613aecee54ed5969dc6741ba0ed66082b75b950ef281d304fdca6614017f3896ac98071aa8ee081c7a5c03090611ec83ba1d8598d4ca25a22230ff4b845be0cd0ee5c5f92e19b7e148f1d33bd4f0e48e9e529eed102aff143a76a4997015e2473584839b3445f323160a40bd24bcd210216b16d7d03e9207da18454411f3312e73a91906c689934ae6687ab68ef698", 0xb2}, {&(0x7f0000001500)="11d45e7314fca1beb8f1ead216b1fc3de84ebc1850341bfe0e39d82577bbad78dddb4808ff89b24e0e74ed1e53e67b5867f77fa98d531bd3debdc4ae661b6255ca748a196f3c985b344d0f36a2a40ed58baec33bd05a0c71914021ee8f6a291c09bb5c7fc6300dc9c3d9536ae7e5b3a1b319757a9707ab70a133217941d8d7f46d11654cf79789b2e5f0c4facea1b333732a", 0x92}, {&(0x7f00000015c0)="a2063d210eaf0e8b97eb85e2cc77b04492422d5ea6fe0c51563584d47976a91d3ad1994d1f3814e73a1092442edf4d169978eff0e0fa45070aaf7e478723e891822863e53bc424d9c123c1c94d034009274e08ced7abadbdf1ee401455586a9901e67c77ffd4b67fd4ccb50d81f5e0652ffe763d09412d8f6dfbee7e323870e3b4eec60f955941bdff2a11348e049d2f7f361204443c0d2fe37b58098c84f0825484bb4ccd8045bcb723893d8085de", 0xaf}], 0x8, &(0x7f0000001700)=[@timestamping={{0x14, 0x1, 0x25, 0x80000000}}, @timestamping={{0x14, 0x1, 0x25, 0x80000001}}, @txtime={{0x18, 0x1, 0x3d, 0x1ff}}], 0x48}, 0x4000015) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f00000018c0)=0x0, &(0x7f0000001900)=0x4) sendto$packet(r4, &(0x7f00000017c0)="d8a811c1b22183cc9052ae84ec36f896694b544243a439f1f08a0e18c9557a4f903875edb441e2f3d557b95bfba0b46bbbd3fa6e5a9b4266bf350748b535049d6a7a8316f25d8013279dac24d50969f65f9b515f5c4874fc80981c39b7f201baaaffb75bc7bf66458c3a09f6ec8e4d8f77e7bbfcbb86592adc713c0b5c83845111d5e89730770e74d8e9207e0cbb31e5c8fc5ab5848eb991af3b9badc2ae20d1b211f926bc2ec09adb8f5d38841e2a935f7faa3c89f383aeac69d4f8c1468a76cf29010e1e504f912fd9cb16f85c6dc9ff5dc0b17430613d90040a182845bd", 0xdf, 0x10, &(0x7f0000001940)={0x11, 0x5cb460313d0b6cdd, r6, 0x1, 0x7, 0x6, @random="d31b1d782669"}, 0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000001980)) r7 = syz_genetlink_get_family_id$team(&(0x7f0000001a40), r4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000001b00)={'ip6_vti0\x00', &(0x7f0000001a80)={'syztnl1\x00', r6, 0x4, 0xf7, 0x5, 0x18000000, 0x68, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x8, 0x8000, 0x7fff}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001b40)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001b80)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000001bc0)={0x0, @initdev, @empty}, &(0x7f0000001c00)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000002800)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000027c0)={&(0x7f0000001c40)={0xb48, r7, 0x20, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0xc0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r3}, {0x1f0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x2, 0x66, 0x93, 0x73}, {0x8, 0xe7, 0x4, 0x10001}, {0x1, 0x1f, 0x5, 0x2}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe7d}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe1a4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}]}}, {{0x8, 0x1, r6}, {0x270, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x600000}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r6}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf9}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r6}, {0x1ac, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xad00}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x79}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x11560}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r3}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xb88c, 0xc, 0x3, 0xe}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8c}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r6}, {0xc8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x9, 0x27, 0x81, 0x8001}, {0x2, 0x1, 0x0, 0x9}, {0x100, 0x4, 0xd, 0x9}]}}}]}}]}, 0xb48}, 0x1, 0x0, 0x0, 0x2000004}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000002980)={&(0x7f0000002840), 0xc, &(0x7f0000002940)={&(0x7f0000002880)={0x98, r7, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r11}}}]}}]}, 0x98}}, 0x20000000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000029c0)) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000002b00)={'sit0\x00', &(0x7f0000002a80)={'ip_vti0\x00', r3, 0x7852, 0x8, 0x0, 0x2, {{0x17, 0x4, 0x3, 0x16, 0x5c, 0x66, 0x0, 0x6, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@timestamp={0x44, 0x1c, 0xd1, 0x0, 0x2, [0x7, 0x3, 0xffff, 0x0, 0x7, 0x8512]}, @ra={0x94, 0x4}, @cipso={0x86, 0x25, 0x3, [{0x7, 0xc, "242fe3f526f4e2dcb958"}, {0x1, 0x6, "c54d0bc7"}, {0x7, 0x5, "b158f2"}, {0x2, 0x8, "a6a36da0a87a"}]}]}}}}}) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000002b40)=0x0, &(0x7f0000002b80)=0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002bc0)={'bridge_slave_1\x00', 0x0}) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f0000002c00)={@dev, 0x0}, &(0x7f0000002c40)=0x14) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000002c80)={0x0, @local, @local}, &(0x7f0000002cc0)=0xc) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000002d00)={@multicast1, @rand_addr, 0x0}, &(0x7f0000002d40)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r12, &(0x7f00000038c0)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003880)={&(0x7f0000002d80)={0xae4, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r3}, {0x228, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xbf6}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1c1}}}]}}, {{0x8, 0x1, r9}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x995f}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd9}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x4, 0x6, 0x4, 0x6}]}}}]}}, {{0x8, 0x1, r3}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r10}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r11}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x93}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}]}}, {{0x8, 0x1, r17}, {0x230, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r18}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}]}, 0xae4}, 0x1, 0x0, 0x0, 0x4800}, 0x800) 1.024822013s ago: executing program 1 (id=1686): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffff81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x1) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, r1, 0x400, 0x70bd26, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r3, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x40010) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x120, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x401}, {0x6, 0x11, 0x200}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7f}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xffffed85}, {0x6}}]}, 0x120}, 0x1, 0x0, 0x0, 0x20008090}, 0x8000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r2) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000700)=0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000740)={'wpan1\x00', 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000780)={0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000800)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000840)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000940)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, r4, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_PID={0x8, 0x1c, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_PID={0x8, 0x1c, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x14) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x40, r4, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) ioctl$SIOCRSSCAUSE(r5, 0x89e1, &(0x7f0000000a80)=0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x38, 0x1403, 0x4, 0x70bd26, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r11, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x101, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8084) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r0) sendmsg$NL80211_CMD_ASSOCIATE(r11, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x64, r12, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2b0c, 0x1, 0x7, 0x0, {0xbc9, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x6, 0x800, 0x3}}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0xfc2a, 0x7, 0x101, 0x51d, 0x6, 0x3, 0x400, 0x0, 0x80, 0x401, 0x5, 0x7, 0x0, 0x7fff, 0x821, 0x5]}]}, 0x64}, 0x1, 0x0, 0x0, 0x51ec7ac59cf33d0b}, 0x8000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000e40)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x20, r12, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000001000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r11, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, r12, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004011}, 0x24008000) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000001100)={0x10001, 0x4c0}) sendmsg$DEVLINK_CMD_RATE_NEW(r11, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x28, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x6}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4094) 740.345727ms ago: executing program 3 (id=1687): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f0000000240)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x44, r2, 0xe7816804f9787cab, 0x70b52a, 0x25dfdc03, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x59}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x400420a5) 451.937312ms ago: executing program 1 (id=1688): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r1 = fcntl$dupfd(r0, 0x39c9aca646310778, r0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {r2, 0x18, 0x0, @in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0xa}, 0x6103c58c}}}, 0x90) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f00002ba000/0x1000)=nil, 0x1000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000bbdabbbbbbbbaaaaaaaaaaaa0806"], 0x2e) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000a40)=ANY=[@ANYBLOB="40050000110001000000000000000000100000000b0000002b212a3a408100001d050d800c038d80b36f41f90cb41ae8106be2451a256556b0dcbdee095d63b136e8d0fba8ac67423d0a32cd1b32fa58d937139d289513badc7e543b06a414256620860f75992cf62a9325d8cd5364b29fea288b8cf8da6273897caed028accbde368663681b99b9724348001d74a2ed629244ead952de57dcd9f548a0a6dfbd3f75978d63e68de32cbfe1eb0c5e931896f3743312f501b7c739fbcbb4070fcf40a79df6e2a1a7c1e89651d88eb4a10fd229c93007e72e971b433ac08939f25747627550932ff50671e7f679b4d0669a9b53686e71b1df6f6a61b67c7ccbb7483bbc5ad886b81fd53085c4ed02b96d7d09eba238ebbebfe9da2c8d1eae7d224508e9860f929add0e4cf3c8824ca16855fe6c1510285ca8add4f369dc2fb21687b00c14f0ac7f2cff009e7f56771ab780e858924f21cdb9a9f119b5989baba06934d8f43c7a0a2f813a3d9b6a757e06d3fd6833fb8ae8cead23014552ed937724b1f20b306bc4f7012d0b7b432def84959b281f9dc51681ef180873e786b1349a657180a5a3bd6d368957206d43042e4e3cba4b95ad8c6c36c4c6477a9785cb7e878de2b99f40fbcc0c004600ffff0000000000000400ec80f32e4a560435ab5abfb009dafa17bd4aaadb0e7bb61a6793ee669444a6fe74e2dc17d5f8da3c792bbe77e34b27d1a54c57c984f42d9c6347a1390e299df6aaa7bbef4fd9c40e88fab99e39b24b49a2bed120ccfbbd7f5e72dc40fbf5a4d9994edd1150bfd873add97ec553604223c2b8769b294619142c579c877efe60e43fa8ceda61814b239f4fae9b2d15419143d57ae84c1966fce9a56da788b142edaffa2ac7bad81c2e635876bc3ed65761e04882e50a8b6f2d7a16c0803d488f62dacf484e0a4a02cbc004009580d4638b3ec4d5e741bf40b14403172bfa1a82ad570a7f68442d28bda99d0d6e3c7327787ca43595280fd4270da1484aca496a97975d83b0eea8b6bd3ccff036c17421f14d14f07c2c96e86c0ecfb15a0721788a465dc5aedea7ccdd07a97d20c9b55a85f2e8ba3c9e305838953c6e8d10d240f5573412ede27c7888cb1c55eab5ed85ae02df7998c5420400ed80400102800400a080d4a57321364ba3ff92a807efa0f9a0c294b685b324d32b20e3c6db159cb29d52fa6b149dc26b4a57a7ffba24b44ce079df26c853c604e10c4883848ae1e7483296a8d8d097b02f93783968c0e39e766128faabb7360045b0a34ce6d897e1c4db3688a7f8d1722a8deed546496a188d91a65e4915afd308242aebb518519b2cf8bc14a5c3d25b3e90c44016142fd17c7e04fc09dd28ff7f00004704009a800800f700", @ANYRES32=r6, @ANYBLOB="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"], 0x540}], 0x1}, 0x0) 450.985778ms ago: executing program 3 (id=1689): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) setsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000040)=0xe, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) fcntl$lock(r0, 0x26, &(0x7f0000000100)={0x2, 0x3, 0x8000000000000001, 0x3, r2}) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000140)) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, &(0x7f0000000180)={0x8000, 0x4, 0x6, 0x3}) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x17, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) r4 = syz_open_procfs(r3, &(0x7f0000000340)='environ\x00') mknod$loop(&(0x7f0000000380)='./file0\x00', 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000000400)={{0x0, 0x3, 0x10000000000, 0x2, 0x8001, 0x2, 0x9, 0x0, 0x80, 0x1000, 0x100, 0x4, 0x0, 0xffffffffffffffc8, 0xf}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000001400)={{r6, 0x800, 0xb3, 0x10, 0x1ff, 0x1, 0x8, 0x7fff, 0x0, 0x3d, 0x6, 0x2b32, 0xff, 0x7bbd7f2d, 0x81}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendto$inet(r4, &(0x7f00000014c0)="f98755564912d856103d754aa63ae710be9dd526b71b1b10e541721f3fc531a78ef1bb8563ffe3ebc590acbca43a06958abf5d9e56210ee5b99416a4085293f720fa182d51e7589876e83331d794afa9653c93ba18546ab9e815ad52cad6d60fb5e75e1086b602b31ca7cc3e6e5a0d64eee12b1837019897659b3c3e1941ca82429d2c03c1208303c49c8c0519cd9f31ab6daed84d5889f343ae85ffefa28322d6374f08906ce8c915f6419e51e1", 0xae, 0x24008014, &(0x7f0000001580)={0x2, 0x4e21, @local}, 0x10) r8 = memfd_create(&(0x7f00000015c0)='/[@)-\x00', 0x6) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001600)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r9, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x18, 0x1402, 0x100, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000001740), &(0x7f0000001780)=0x6) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f00000017c0)={0x1, [{r6}, {r6}, {r7}, {r7}, {r6}, {r7}, {r6}, {r6}, {r7}, {r6}, {r6}, {r6}, {r6}, {r6}, {r6}, {r7}, {}, {r7}, {r7}, {r6}, {}, {}, {r7}, {r6}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r6}, {r6}, {r6}, {r6}, {r6}, {r7}, {r7}, {r7}, {r6}, {r7}, {r7}, {r6}, {r7}, {r6}, {r7}, {r7}, {r7}, {r7}, {r6}, {r7}, {r6}, {r6}, {r6}, {r7}, {r6}, {r6}, {}, {r7}, {r6}, {r6}, {r7}, {r6}, {r7}, {r7}, {r6}, {r7}, {r6}, {r7}, {r6}, {r7}, {r7}, {r7}, {}, {r7}, {r6}, {r6}, {r6}, {r7}, {r7}, {}, {r7}, {r7}, {r6}, {r7}, {}, {r7}, {r6}, {r6}, {r7}, {r6}, {r7}, {r7}, {}, {r6}, {r7}, {r7}, {r6}, {r7}, {r6}, {r6}, {r7}, {r6}, {r6}, {r6}, {r7}, {r7}, {r6}, {r6}, {r7}, {r6}, {r7}, {r6}, {r6}, {r6}, {r7}, {r6}, {r6}, {r7}, {}, {}, {r7}, {r6}, {r7}, {r7}, {r6}, {r7}, {r6}, {r6}, {r7}, {r7}, {r6}, {r7}, {r7}, {r7}, {r6}, {r7}, {r7}, {r6}, {r6}, {r7}, {r7}, {r7}, {r6}, {r7}, {}, {r6}, {r6}, {r7}, {r6}, {r7}, {r7}, {r7}, {r6}, {r6}, {r6}, {r6}, {r7}, {r7}, {r6}, {r6}, {r7}, {r7}, {r6}, {r7}, {}, {r7}, {r7}, {r6}, {r7, 0x0}, {r7}, {r7}, {r7}, {r6}, {r6}, {r6}, {r7}, {r6}, {r6}, {r6}, {r6}, {r7}, {r7}, {r6}, {r7}, {r7}, {r6}, {r6}, {r7}, {r6}, {r7}, {r6}, {r7}, {r6}, {r7}, {r7}, {r6}, {r6}, {r6}, {r7}, {r6}, {r7}, {r7}, {r6}, {r6}, {r7}, {r7}, {r6}, {r6}, {r7}, {r6}, {r7}, {r7}, {r6}, {r7}, {r7}, {r7}, {r6}, {r7}, {r6}, {r6}, {r7}, {r6}, {r6}, {r6}, {r7}, {r7}, {r6}, {}, {r6}, {r7}, {r6}, {}, {r7}, {r7}, {r6}, {r7}, {r6}, {r6}, {r6}, {r6}, {r7}, {r6}, {r6}, {r7}, {r6}, {r6}, {r7}, {r7}, {r7}, {r7}, {r7}, {r6}, {r6}, {r6}], 0x80, "227572ef1fd226"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f00000027c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r9, 0xd000943e, &(0x7f00000029c0)={0x0, r6, "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", "08ec4f1b6cb74cf53d3984aaa2e5acc135cb9f1c5b1d368ed34db94ad450e7611f7d4041fcb8e29d36a58aabb4a42ee9dbf3a113e5195f48fbc4165cdd0f6f741c1b823374140dcf9048049fd9df217c64781d02727093abf4eb5d3ff25b44a181a7473b0a91606bf786856ad27e625c52a3264c6abf02b05bd16213c558b7eba577e9a66e51daf1914c8c83c0cca0804ba18a05e3953b08828b6d8814912d51193817013d01bffd8eb4ac5277a38607fd8f49ae515995c403d1014bc5eb41e7b9b24cc74dd15e750126ccb6652b897a2e9780b56d1711fd762552bf15265474773f06172eca55de45ec76469bd615dbf677332821ab4006a7027057ca95371800879fcf8e0ff0ea4b11e3988f27bc2fa439dea9a467841737618f328ad9ccf7c9b5e3c99bd85ac7cb1867b8f8e4ec6e4f95d06d45183bc67ef29942eb1ecc3081b0a3983ccc33b561597b77784aecd612f6b1754ab7f383edea78c02d5732f17c4ce955fffb08beea7122bb1e5718bfa4cfc7a408693aa7d3df0a9fbc92d5ac190c2e4489a8847785572950c646976a969842bfc4dcb6cc8d0f890e39cd47310485a1293de94476c365400a18d5ccf9719b905447f550bdd0a7c103f4018cb1ba03580e4756deb3c4291b4b1f1b8e4ec321390d9f1ceb5456fbd50d567f8c7b5da935250f2dcf1b06f00e21a15c6fa8d6c0372ee73ed52703f0ce2a9b37c9e13084ed0173a4c57ad795cca4866968d163b92a9f1773b53f88d7a02489aa287551f4070531d879deff9645ce364d8a4c02a0570b671d79fe1949518cdef40a6f488517df1e01d2331ca3b7aa28e0aae1e0326b8c1d632feb97497474a1ed9af5c361111e2c96ac31bc71941aa6da1867bd1c694572358adc0ba3bcf70c06b8383ce511c45ceb07704d5d8abe44eb7cb0a0ba20135ee8f07f3c9cb4076035bab48619ccb6d4d2ab471592af63ee5a49aba921871399d195386221a533665d774da1b8d69ae5a760474455119381575ddf54e14fc2ce4a073a85273de1a3d60634c5acc8a75f790d7da0e27f95d9f6ffd81de8ae19ba4a3652a7737822b3ceae89e0eec17430a63c64dbaf4346ce213fc6717a323e5a0868c94bd9e09290c7512284b080787175e9b665548d06501224570cd2aa741c42d5f00452565af48ac2028c08b786d6bcfbbfea8f8fed63f4d000e67cae388b5e077a358dfb824060f8ab687f01f99c0d4d7afd7ae1039b5d1d3e2ea20ab685b1aee4924ba41ff472d2e21da0e5041dcdfd56f4735cb4dbf97408cd0c5256dc98b28563e69f75dd111bfe6043535ce0919e51d9b7142d524c0cccaa378f166ec75599328d52ddba204cc6f79376870ea28f7faa84ddc38a7f1c1c1d695cdf04204f33264ef5ce26570477eb8326d86a52c18d91ae7803273b419dcc086c8d8415469a8d29f1b8622028035dbe11ec02fec0f9b8e87e91f87fc81f247143096980630c0c9db238475ad2facac9897a9539bb2df2662400ad1e161444bdbd1f945dc93fb23b62e385dd8d820042f7b9a2ec5edbe01274f7b7633399c3c3379ec4ace3feb0b9ba2a252cd50184d47e21dc50d9df0f023282eca9325c64931f196d514cd5529d9e6baec4d36e3335a83c8fff90ae7bd71ada6d7ebfd48275ac4c2297cb179f46003ba9e568bd8de5eb7157afcbce291a91c85688f2fc30ccd070bf107c359b4e2bb51aec41cf2ebc55bcad1bf8120bc7a8f8b8d3880ae260d8e9bd997f9b23667be9c943b759012e2db9cb0b909c91b10d39b9a207a4320c9684c15bd2fd2945b5d838e2efc7b798be405f305d5b2d3c8ddf13accbd124e5d1abbd9737231a5d1be5ee70cd69d8fb0c29b1cac8a8621d31348fa53a27db198b58c49d7340542f47c8d7b352dcc10c651c99a1da6a2231d03bda85b5ab6aae5bb104d83f064f583427c565ec1488843768450011bfaef3ff884b64f3477cb712d92a451924b8ef94c2493dccb60ce40b908e5608b22adfa3ef7dd21bdf41deaac47f65ef9400d1320e652f814bdd3afb82081d56b5a72e34632f79e64f393b1e77d05f29015c259cd2284f335b7b31c66c7e0d8b7ab07c51c613372a70723873db6d5cff8b5eb0e69c6b8ab5a5aac865f6b6baef740e7f1b57e33d4b8566548509517e91f4823027eb4bd4a068e8856877155fadabb53d72072544af99fe46af2d08b5c98fe97f1a47ff6073c3649a6ce04e4c17e1a7f720a6640b8cead335db104900feeff758ec578b941d26aa02f2f6aa862a05efcc336e0318511fe42d99ea32e03c689313ea335b028813697b9a5db0c4d2f7eecee92da78e841185cb8ea0e9a90d1d5c612b47e31e5ebd100531a813e5720b8adcf041e060521074ca049fed5896baed8cc329cc0b541c2139984db1de41cfa774c9e97298c9440e15d9c02fec1c066e62595990057b6b23b85cfac7a93e38038ea7887c5aab97ee9a4b33bdcae3dd174fe7008be6a65da61a7502dbfe0a7a62788a531b2a5f371a5715878e82d18eba0ebac43c4bfad86a52c5ddb91c4cbb0e14f97d733dd1d034b8f62887929548f9e0f38cf46714dd5654025c4801c8d5569278d21a876a56243d842979cde83a4723e1e9e91b648d1800eea61bda9d8fa00591a5f993384f324186b3527d83544aa5a56c51f2df08b8a36ef91a903c69a521f3fde027d3adf83b2758f5e7e7ed540ab3d89d74f85c0d91f5406bb151703b8d95bbec1d453ad69c5df5458726c73bd2a5c7f5333c131cdae79e41c8c2b8ecbec79dae82b6becb7dea9c26f0e49028dc9c8f4e5fac51c9467d1ec140abcbfa6eeaa5be834cf72236928640e0cdf6289750f1c64811b77cfa2ad989c57d0dbdbb3e65d2a7c6e83b51def467ca920a4c9487f0839c763c7116da1ea5e43779bdef72e93e239b341388c9953ce21ea8e0abe621cda7994c02fa247435120d46c54ba707c41ed78616c93070b8478c26853c2ee35cd02d151f89343ae46842f6ba627ac42734a1cae19e0a4025adce20c0c8f0dc7a9afb20d59ab89c13ff283892bcadcab1008cde4e68d076afe42025e9bf68f25e53ea3848651b76a50cc98fe574b018e3295ecb92e8a13e4069a048c827e4214f0a43ef3cc892087b708c16936f41a8df46532040b6c41a7e7e3056ccd6f1239f3795203a65da9b61f8e8d35f1209441dd371311d57e766c7ce5d072c25b5cec31c415cfd54dfa56cb2ec58d318d9315118588682819918321f806b9a80e40a7127c3e821d39e90d2a89a3a7f167dfa884ce084524bd7090ac2eba6db164802efb98ebfed7083903f7b1b21378834627c783e88e74e2ee23f19ef2495ad4b32ee6b7c7da08bcb0b6ec3c2ef9e10904a0ebc07486c3411c2bcb6f7fd047527b710220c0b1ca77cc35d7168dd34b946641a4b6b30d9cbc33f2fa94721198649a131c5dde23251c4187877ba76b86291837ac8aa0e76cc8e95448d4711b2c65e993448b777cb808fbd19def8414d5accdeb588597530c37ce485ffc5d6bb39db929bbf4f0cc4aeb0dfaabbe8d577bfd4d14b73e58d5b62bed08348e53cdd12eba6b815307ec312975218193e9995c2e1a2ec095718f85b4a242c9379282a78e0ce648e2b7560691fdbe0f4d86c29621e938c27e58e650c70c481b639c3161ca5cc59359eaacbcf69984ab58ee514c6bc06863bb0b1f67ff7c3700c7144b98779faaa8e2fbb821127b8a8bc26ade0d4121ed9b453b7cf7f7f32d600cd0f83260013e684f9795f4752b7a7f42fb5ec775f65daab572094e53db9a67b1a48881bdb130bb4976e2bfd3ff9523cef0d6dc08d0dc0094cf3ac62c17d60059e3fb3e646ee53a7ddc998aa0773fe868302742d8b86ced5139916d5c1b46ae7feb9093e374679b0a82e10e85f8fe3ae38579369048d92289d9d7494255fc3cae0d194e0b1322535ab2df377d863dd4cd8cbb18e2bced017e1c2666451d8bbb96207c07ae430ac30f893e18b64c695b9a90d976b21bf15b8af6c2c25839e59104aa4421a85bdcb224820f440a7d1bd698a98d51f60c3a0ca66bb02b2363167a8bdba0bc9948023c798ae05d52463755c65455d92b8cb120314b23c1c2a59d72827c12dc5de83459d9d748b6d0f52db703b4d2501208960c7094bc436515c7a939b0acc34794e1e696b449118767c34c29d51d1bc7e578b4a3d7ebc59e07e12416185bab8f27b793c87ed7f776e2f4023f43d50443154ab5bef4afeaa6cc429f58388779be49ba8dbe12f4192991e26d2c4327250a25292e5e081f9d3288f382bd051dddd0b35526f0ad0ee39ad9ed77e41983426632bfacf4421fa810c1cf1245d8b9110285f17888eac43f6226ab6b4faaf618d5999b905a629565d6feac65a8f644673febd7e64c5731bdc042e5941e6c16317ebd031b0b0a382b2102a1aa3a667abc0c619d9d1492ace99044e4aa541527dec6c81897ae090094ffa51f6ef848fbe3d611d593e78741b5bf80a4eb09550234c586bab2b2b0380fc3291091433516acbcd79befe71d51b2ece9b120879afd1883b0089cf1a61c388dbe689a50656d94bb629e5bb05bf90e411883a39ef4159ccd6cc30ccf4566cffaa44300e327863515717d9a4d54e91506114b959ab70ffd600bf4700fc75157e4b3f9a411b4d4e4d63ae0629530b7f38cc7acc28383d126aebcb3f9f63b633b0b70ea475bef57f7a15b7d3d899ddcc01f50aa27427d2b81c97f7342a22a58204aa8c52b56d04ee98d4d24a6234b611b6ec5398feb223ce4a0090e51b023a08413cc8f83a137aa115491106dddda31a5a16ee77f26e57f6d68f9630ba93b08e1f72c007adac02cc621d18b1810ec11c6d168f0aa0fc1cfbdffd77d609aaa4999ff9511b9854d86ba90a238ef34b1f4327cdeffa93ac0970ca8f6e4425b97387515f3543cfc3847965085ec7217d2036e8ec5143eeeb64e99116c92cf96d41dcba3ee9b162fa1d0638501c69cd407fc37c5185b56b5c587983dab7dfe3ef9a85e3addca7546477a479241f28b2448d8d8bfa7f023793ed09cca5eef843a8106560b7debc2dadf3f604e66407c68ce32ea1dff83198b20e39b0cfc013c322978739c61e0026fd9e6d9cb840d2155963381c23d15f17e8e05491ea66b72be32d8a3a45257f68509000d9805300f0ecf173b6df13463ad347a1054144e14bffd82527770713d57dff681f35a61fbf66d7a6b18a2975025d0e8f25fbd71e57aa641e8c57dcea9a04438ffa9c7cdc9b7cc6819dcd5293015ab7ef567a3bd43e97ced25452e792a0fa57ca36e4683f8e4f870d8ca0aadb85214171e6e691d8a7b28770303ae341c87ea9a24bae7007a56e899cd4c58c9946b21d695fa4fb4794d0c17bf50d5a99e8bcc62447fd98b551b80bc9537ebfe520043500e079aeef431408"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000039c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000003bc0)={0x401, [{r6}, {r6}, {r7}, {r7}, {r6}, {r6}, {r6}, {r6}, {r7}, {r6}, {r6}, {r7}, {r7}, {r7}, {r7}, {r6}, {r7}, {}, {r6}, {r6}, {r7}, {r6}, {r6}, {r7}, {r6}, {r6}, {r6}, {r7}, {r6}, {r6}, {r7}, {r6}, {r7}, {}, {r7}, {r6}, {r7}, {r6}, {r7}, {r6}, {r6}, {r7}, {r7}, {r6}, {r7}, {r7}, {r6}, {r6}, {r6}, {r7}, {r7}, {r7}, {r7}, {r6}, {r7}, {r7}, {r6}, {r7}, {r6}, {r6}, {r7}, {r7}, {r6}, {r6}, {r7}, {r7}, {r6}, {r6}, {r6}, {r7}, {r6}, {r7}, {r6}, {r6}, {r6}, {r6}, {}, {r7}, {r6}, {r7}, {r6}, {r7}, {r6}, {r7}, {r7}, {r6}, {r7}, {r6}, {}, {r6}, {r7}, {r7}, {r6}, {r6}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {r6}, {r6}, {r6}, {r6}, {r6}, {r6}, {r7}, {r6}, {r7}, {r7}, {r7}, {}, {r7}, {r6}, {r7}, {r6}, {r7}, {r6}, {r7}, {r6}, {r6}, {r7}, {r7}, {r6}, {r6}, {r6}, {r6}, {r7}, {r6}, {r6}, {r7}, {r7}, {r7}, {r6}, {r7}, {r6}, {r6}, {r7}, {r6}, {r6}, {r7}, {r7}, {r7}, {r7}, {r6}, {r7}, {r7}, {r6}, {r7}, {r7}, {r6}, {r6}, {r6}, {r7}, {r6}, {r7}, {r6}, {r6}, {r6}, {}, {r7}, {r7}, {r6}, {r7}, {r6}, {r6}, {r6}, {r7}, {r6}, {r7}, {r7}, {r7}, {r6}, {r6}, {r7}, {r7}, {r7}, {r6}, {r6}, {r7}, {r6}, {r6}, {r7}, {r6}, {r6}, {r6}, {r7}, {r6}, {r6}, {r6}, {r7}, {r7}, {r7}, {r6}, {r6}, {r6}, {r6}, {r6}, {r7}, {r6}, {r7}, {r7}, {r7}, {r7}, {r6}, {r6}, {r6}, {r6}, {r7}, {r7}, {r6}, {r6}, {r7}, {r6}, {r7}, {r7}, {r6}, {r7}, {r6}, {r6}, {r7}, {r6}, {r7}, {r6}, {r7}, {r7}, {r6}, {r6}, {r6}, {r6}, {r7}, {r6}, {r7}, {r7}, {r6}, {r7}, {r6}, {r6}, {r7}, {r6}, {r7}, {r7}, {r6}, {r6}, {r7}, {r6}, {r7}, {r6}, {r7}, {r7}, {r6}, {r7}, {r7}, {r6}, {r6}], 0x5b, "f946869983924b"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000004bc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f0000004dc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000004fc0)={0xe, [{r7}, {r7}, {r6}, {r7}, {r7}, {r7}, {r6}, {r7}, {r6}, {r7}, {r6}, {r7}, {r7}, {r7}, {r7}, {r6}, {r7}, {r6}, {r7}, {r7}, {r7}, {r7}, {r6}, {r6}, {r7}, {r7}, {r7}, {r7}, {r6}, {r7}, {r7}, {r7}, {r6}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r6}, {r7}, {r6}, {r6}, {r7}, {r7}, {r6}, {r7}, {r6}, {r7}, {r6}, {r7}, {r7}, {r7}, {r7}, {r6}, {r7}, {r6}, {r7}, {r7}, {r7}, {r7}, {r6}, {r7}, {r6}, {r7}, {}, {r7}, {r6}, {r7}, {r6}, {r6}, {r7}, {r7}, {r6}, {r7}, {r7}, {r6}, {r7}, {r6}, {r6}, {r6}, {r6}, {r6}, {r7}, {r6}, {r7}, {r6}, {r6}, {r7}, {r6}, {r7}, {r7}, {r7}, {r6}, {r7}, {r7}, {r6}, {}, {}, {r7}, {r7}, {r7}, {r6}, {r6}, {r7}, {r7}, {r7}, {r6}, {r7}, {r7}, {r6}, {}, {r6}, {r6}, {r7}, {r6}, {r6}, {r6}, {r6}, {r7}, {r7}, {r6}, {r7}, {r7}, {r7}, {r7}, {r6}, {}, {r7}, {r7}, {r6}, {r6}, {r6}, {r7}, {r6}, {r7}, {r6}, {r6}, {r6}, {r6}, {r6}, {r7}, {r6}, {r6}, {r6}, {r7}, {r6}, {r6}, {r6}, {r7}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {r6}, {r7}, {r7}, {r7}, {r7}, {r6}, {r7}, {r6}, {r7}, {r7}, {r6}, {r6}, {r6}, {r7, 0x0}, {r6}, {r7}, {r6}, {r6}, {r6}, {r7}, {r6}, {r7}, {r6}, {r6}, {r7}, {r6}, {}, {r7}, {r6}, {r7}, {r7}, {r7}, {r6}, {}, {r6}, {r7}, {r7}, {r6}, {r6}, {r7}, {r6}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {}, {r6}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {r6}, {r7}, {r7}, {r6}, {r6}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r6}, {r7}, {r6}, {r7}, {r6}, {r6}, {r6}, {r7}, {r6}, {r6}, {r7}, {r6}, {r7}, {r7}, {r6}, {r7}, {r6}, {r6}, {r6}, {r6}, {r6}, {r7}, {r7}, {r6}, {r6}, {r7}, {r6}], 0x1d, "64e2af7cdfb14c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000005fc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0xd000943e, &(0x7f00000061c0)={0x0, r7, "42728a7c37113c8a7724d7ba0764593d7b2cc7c3380be2ac8c3100100394449966d06f830cc577221da722a1736a5b5f8e546ad963e6335e9bc619821c3d226e035c759d6025b6dc85c937afcd501581a8811d430c264637e3d7aab6ee8a7c102184e22c985085fc0d27931b85668f007f0a940493876c3da7e017aa1907c57a9fe2172d9785b5566b835a87a93cd9179c7c06b0adb58d83fd81fc950103da1e72102363bbf13193f44cdc43731a8f2ee4096ec6832801edbb62543c1d637c5741626019968c9d928815f358684311745b6977612e6e7fbb604919af705813fd496dffc75ec5b15a1e02fa85e86489034168b393e0c25c91110d6c96d066a1af", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f00000ac800)={0x0, [{r7, r10}, {r6, r11}, {r6, r12}, {0x0, r13}, {r14, r15}, {r6, r16}, {r6, r17}, {r6, r18}, {r6, r19}, {r7}, {r6}, {r7}, {r6}, {r7}, {}, {r6}, {}, {r6}, {r7}, {r7}, {r7}, {r6}, {r7}, {r6}, {r7}, {r6}, {r7}, {}, {}, {r6}, {r6}, {r6}, {}, {r6}, {r6}, {r6}, {r7}, {r6}, {r6}, {r6}, {}, {r7}, {r6}, {}, {r7}, {}, {r6}, {r7}, {r7}, {r6}, {}, {r7}, {}, {r6}, {r6}, {}, {}, {r7}, {r6}, {r7}, {r6}, {}, {}, {r6}, {r6}, {r6}, {}, {}, {r7}, {r6}, {}, {r6}, {r6}, {r7}, {r6}, {r7}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r6}, {r6}, {}, {r7}, {r6}, {r7}, {r6}, {}, {r6}, {r7}, {r6}, {}, {r6}, {}, {r7}, {}, {}, {r7}, {r6}, {r7}, {}, {r6}, {r7}, {r7}, {r7}, {r6}, {}, {r6}, {r7}, {r6}, {}, {r6}, {}, {r7}, {r6}, {r7}, {r7}, {r6}, {r6}, {r7}, {r7}, {r7}, {r7}, {r6}, {r6}, {r7}, {r6}, {r7}, {r6}, {r6}, {r6}, {r7}, {r7}, {r7}, {r7}, {}, {}, {r7}, {r6}, {r6}, {}, {r6}, {r7}, {r7}, {r7}, {r6}, {r6}, {r7}, {r7}, {r6}, {r6}, {r7}, {r7}, {}, {r7}, {r6}, {r6}, {r6}, {r7}, {r6}, {r7}, {r6}, {}, {r6}, {r7}, {r7}, {r7}, {}, {r6}, {r6}, {r7}, {r7}, {r6}, {}, {r7}, {}, {r6}, {r6}, {r6}, {r7}, {r7}, {r6}, {}, {r7}, {r7}, {}, {r7}, {}, {r7}, {}, {r6}, {r6}, {r7}, {}, {}, {r7}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {r6}, {}, {r6}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {}, {r7}, {}, {r7}, {r6}, {}, {r7}, {r6}, {r6}, {}, {r6}, {r7}, {r6}, {r6}, {}, {r6}, {r6}, {}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r7}, {r6}, {}, {}, {r7}, {}, {}, {}, {}, {r7}, {r7}, {r6}, {}, {r6}, {r7}, {r6}, {r7}], 0x7, "1e737c2b8e26a2"}) 388.382558ms ago: executing program 3 (id=1690): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000003080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000001400038008000240f4ff0000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}]}]}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x24040880) socket$inet6_udplite(0xa, 0x2, 0x88) (async) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000003080)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000001400038008000240f4ff0000080001400000000014000000110001"], 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}]}]}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x24040880) (async) 311.039308ms ago: executing program 3 (id=1691): inotify_init1(0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0003110004000000a60c6eec00be00442c2f"], 0xfdef) r3 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000100)=""/200, 0xc8}], 0x1, 0x1000, 0x3f2f0fde) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x17, 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0x80200001}) 45.495206ms ago: executing program 1 (id=1692): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x38) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mlockall(0x7) lseek(r0, 0x8000000000000000, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x0) 43.891462ms ago: executing program 0 (id=1693): r0 = socket$packet(0x11, 0x3, 0x300) setuid(0xffffffffffffffff) ioctl$FIONREAD(0xffffffffffffffff, 0x8020699d, 0x0) r1 = semget(0x0, 0x1, 0x281) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001a00010000000000000000001c"], 0x28}}, 0x0) semctl$GETZCNT(r1, 0x3, 0x7, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xa}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8840}, 0x1) 0s ago: executing program 3 (id=1694): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d06}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0xc042) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x13, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x60, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r6, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc038563b, &(0x7f0000000040)={0x0, 0xff, 0x300a, 0x1}) kernel console output (not intermixed with test programs): the interface descriptor's value: 3 [ 270.234049][ T1215] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 270.243391][ T1215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.259100][ T1215] usb 5-1: Product: syz [ 270.266599][ T1215] usb 5-1: Manufacturer: syz [ 270.271215][ T1215] usb 5-1: SerialNumber: syz [ 270.278067][ T9448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.287863][ T9448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.288541][ T1215] usb 5-1: config 0 descriptor?? [ 270.315314][ T9448] netlink: 'syz.1.1054': attribute type 40 has an invalid length. [ 270.463648][ T9455] ': renamed from dummy0 [ 270.531638][ T9425] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 270.585258][ T9460] netlink: 'syz.3.1060': attribute type 4 has an invalid length. [ 270.660035][ T9462] program syz.3.1061 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 270.802670][ T1215] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 270.832009][ T1215] usb 5-1: USB disconnect, device number 20 [ 271.027617][ T9472] smc: net device wlan0 applied user defined pnetid SYZ0 [ 271.043598][ T9472] smc: net device bond_slave_1 applied user defined pnetid SYZ1 [ 271.141626][ T9481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.158757][ T9481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.213387][ T9481] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1067'. [ 271.632985][ T803] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 271.797634][ T803] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 271.812866][ T803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.831574][ T803] usb 5-1: Product: syz [ 271.836252][ T803] usb 5-1: Manufacturer: syz [ 271.840863][ T803] usb 5-1: SerialNumber: syz [ 271.855250][ T803] usb 5-1: config 0 descriptor?? [ 271.884827][ T50] Bluetooth: hci5: urb ffff8880338ac000 submission failed (2) [ 271.898019][ T9489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.907593][ T9490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.917713][ T9489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.924577][ T9490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.958943][ T9489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.968027][ T9489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.066669][ T54] usb 5-1: USB disconnect, device number 21 [ 272.403626][ T54] usb 4-1: new low-speed USB device number 102 using dummy_hcd [ 272.554325][ T54] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 272.564066][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.574280][ T54] usb 4-1: config 0 descriptor?? [ 272.585299][ T54] asix 4-1:0.0: probe with driver asix failed with error -22 [ 272.711423][ T9500] mkiss: ax0: crc mode is auto. [ 272.720260][ T9500] IPv6: Can't replace route, no match found [ 272.842831][ T54] usb 4-1: USB disconnect, device number 102 [ 272.921948][ T9503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.946570][ T9503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.964779][ T9505] fuse: Bad value for 'group_id' [ 272.970150][ T9505] fuse: Bad value for 'group_id' [ 272.983006][ T9505] netlink: 'syz.4.1075': attribute type 32 has an invalid length. [ 273.062092][ T9507] netlink: 'syz.0.1076': attribute type 21 has an invalid length. [ 273.087257][ T9507] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1076'. [ 273.114643][ T9507] openvswitch: netlink: Unknown key attributes 2 [ 273.322503][ T54] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 273.472439][ T54] usb 5-1: device descriptor read/64, error -71 [ 273.526131][ T9515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.535856][ T9515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.702560][ T5928] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 273.712743][ T54] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 273.842534][ T54] usb 5-1: device descriptor read/64, error -71 [ 273.865382][ T5928] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 273.875039][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 273.883689][ T5928] usb 4-1: Product: syz [ 273.887869][ T5928] usb 4-1: SerialNumber: syz [ 273.894814][ T5928] usb 4-1: config 0 descriptor?? [ 273.902131][ T5928] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 273.913720][ T5928] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 273.926295][ T5928] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 273.952679][ T54] usb usb5-port1: attempt power cycle [ 274.117490][ T5928] usb 4-1: USB disconnect, device number 103 [ 274.148568][ T9517] binder: 9516:9517 ioctl 4018620d 0 returned -22 [ 274.312271][ T54] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 274.334882][ T54] usb 5-1: device descriptor read/8, error -71 [ 274.341380][ T9521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.425117][ T9523] netlink: 'syz.1.1083': attribute type 21 has an invalid length. [ 274.582581][ T54] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 274.612993][ T54] usb 5-1: device descriptor read/8, error -71 [ 274.667580][ T9530] netlink: 620 bytes leftover after parsing attributes in process `syz.3.1086'. [ 274.735389][ T9533] syz.3.1087: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 274.736060][ T54] usb usb5-port1: unable to enumerate USB device [ 274.752299][ T9533] CPU: 0 UID: 0 PID: 9533 Comm: syz.3.1087 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.752326][ T9533] Tainted: [L]=SOFTLOCKUP [ 274.752331][ T9533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 274.752342][ T9533] Call Trace: [ 274.752349][ T9533] [ 274.752356][ T9533] dump_stack_lvl+0xe8/0x150 [ 274.752385][ T9533] warn_alloc+0x249/0x340 [ 274.752412][ T9533] ? stack_trace_save+0xa9/0x100 [ 274.752433][ T9533] ? __pfx_warn_alloc+0x10/0x10 [ 274.752457][ T9533] ? kasan_save_track+0x4f/0x80 [ 274.752473][ T9533] ? kasan_save_track+0x3e/0x80 [ 274.752487][ T9533] ? __kasan_kmalloc+0x93/0xb0 [ 274.752503][ T9533] ? __kmalloc_cache_noprof+0x31c/0x660 [ 274.752519][ T9533] ? xskq_create+0x56/0x170 [ 274.752540][ T9533] ? xsk_setsockopt+0x54c/0x990 [ 274.752559][ T9533] ? do_sock_setsockopt+0x17c/0x1b0 [ 274.752580][ T9533] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 274.752600][ T9533] ? do_syscall_64+0x14d/0xf80 [ 274.752618][ T9533] __vmalloc_node_range_noprof+0x132/0x1730 [ 274.752662][ T9533] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 274.752686][ T9533] ? __kasan_kmalloc+0x93/0xb0 [ 274.752708][ T9533] vmalloc_user_noprof+0xad/0xe0 [ 274.752726][ T9533] ? xskq_create+0xbf/0x170 [ 274.752747][ T9533] xskq_create+0xbf/0x170 [ 274.752772][ T9533] xsk_init_queue+0x8a/0xe0 [ 274.752794][ T9533] xsk_setsockopt+0x54c/0x990 [ 274.752817][ T9533] ? __pfx_xsk_setsockopt+0x10/0x10 [ 274.752838][ T9533] ? __pfx_aa_sk_perm+0x10/0x10 [ 274.752865][ T9533] ? aa_sock_opt_perm+0xff/0x1a0 [ 274.752890][ T9533] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 274.752907][ T9533] ? __pfx_xsk_setsockopt+0x10/0x10 [ 274.752930][ T9533] do_sock_setsockopt+0x17c/0x1b0 [ 274.752955][ T9533] __x64_sys_setsockopt+0x13d/0x1b0 [ 274.752982][ T9533] do_syscall_64+0x14d/0xf80 [ 274.752996][ T9533] ? trace_irq_disable+0x3b/0x150 [ 274.753017][ T9533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.753035][ T9533] ? clear_bhb_loop+0x40/0x90 [ 274.753055][ T9533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.753072][ T9533] RIP: 0033:0x7f26acf9c629 [ 274.753088][ T9533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.753101][ T9533] RSP: 002b:00007f26adf39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 274.753119][ T9533] RAX: ffffffffffffffda RBX: 00007f26ad215fa0 RCX: 00007f26acf9c629 [ 274.753131][ T9533] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 274.753141][ T9533] RBP: 00007f26ad032b39 R08: 0000000000000004 R09: 0000000000000000 [ 274.753151][ T9533] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.753161][ T9533] R13: 00007f26ad216038 R14: 00007f26ad215fa0 R15: 00007ffcf0e1a1e8 [ 274.753188][ T9533] [ 274.753206][ T9533] Mem-Info: [ 274.932122][ T54] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 274.952187][ T9533] active_anon:25814 inactive_anon:0 isolated_anon:0 [ 274.952187][ T9533] active_file:18312 inactive_file:40108 isolated_file:0 [ 274.952187][ T9533] unevictable:768 dirty:34 writeback:0 [ 274.952187][ T9533] slab_reclaimable:11628 slab_unreclaimable:95875 [ 274.952187][ T9533] mapped:36198 shmem:20656 pagetables:1384 [ 274.952187][ T9533] sec_pagetables:0 bounce:0 [ 274.952187][ T9533] kernel_misc_reclaimable:0 [ 274.952187][ T9533] free:1254083 free_pcp:43722 free_cma:0 [ 275.091645][ T9533] Node 0 active_anon:103256kB inactive_anon:0kB active_file:36160kB inactive_file:160232kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144792kB dirty:136kB writeback:0kB shmem:81088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12572kB pagetables:5404kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 275.124144][ T9533] Node 1 active_anon:0kB inactive_anon:0kB active_file:37088kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 275.154594][ T54] usb 5-1: device descriptor read/64, error -71 [ 275.154646][ T9533] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 275.193362][ T9533] lowmem_reserve[]: 0 2480 2482 2482 2482 [ 275.199374][ T9533] Node 0 DMA32 free:1134236kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:103256kB inactive_anon:0kB active_file:36160kB inactive_file:160232kB unevictable:1536kB writepending:136kB zspages:0kB present:3129332kB managed:2540540kB mlocked:0kB bounce:0kB free_pcp:132416kB local_pcp:41588kB free_cma:0kB [ 275.233922][ T9533] lowmem_reserve[]: 0 0 1 1 1 [ 275.238726][ T9533] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1676kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 275.269812][ T9533] lowmem_reserve[]: 0 0 0 0 0 [ 275.277538][ T9533] Node 1 Normal free:3866408kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:37088kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:42648kB local_pcp:13312kB free_cma:0kB [ 275.313796][ T9533] lowmem_reserve[]: 0 0 0 0 0 [ 275.318535][ T9533] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 275.333154][ T9533] Node 0 DMA32: 955*4kB (UME) 750*8kB (UME) 242*16kB (UME) 144*32kB (UME) 315*64kB (UME) 54*128kB (UME) 19*256kB (UME) 5*512kB (UME) 16*1024kB (UME) 4*2048kB (UM) 258*4096kB (UM) = 1134140kB [ 275.353230][ T9533] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 275.364826][ T9533] Node 1 Normal: 15*4kB (UME) 80*8kB (UM) 42*16kB (ME) 104*32kB (M) 80*64kB (UME) 74*128kB (UME) 74*256kB (UME) 11*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 932*4096kB (UM) = 3866460kB [ 275.382981][ T9533] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 275.392562][ T9533] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 275.401830][ T9533] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 275.402041][ T54] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 275.411449][ T9533] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 275.428487][ T9533] 79072 total pagecache pages [ 275.433261][ T9533] 0 pages in swap cache [ 275.437416][ T9533] Free swap = 124996kB [ 275.441564][ T9533] Total swap = 124996kB [ 275.445823][ T9533] 2097051 pages RAM [ 275.449610][ T9533] 0 pages HighMem/MovableOnly [ 275.454545][ T9533] 429882 pages reserved [ 275.458700][ T9533] 0 pages cma reserved [ 275.552525][ T54] usb 5-1: device descriptor read/64, error -71 [ 275.662350][ T54] usb usb5-port1: attempt power cycle [ 275.888836][ T9542] netlink: 'syz.1.1089': attribute type 10 has an invalid length. [ 275.900974][ T9542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.909824][ T9542] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 275.921108][ T9542] netlink: 'syz.1.1089': attribute type 10 has an invalid length. [ 275.929337][ T9542] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1089'. [ 275.938671][ T9542] batadv0: entered promiscuous mode [ 275.944503][ T9542] batadv0: entered allmulticast mode [ 275.951506][ T9542] bond0: (slave batadv0): Releasing backup interface [ 275.960417][ T9542] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 276.002861][ T54] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 276.023803][ T54] usb 5-1: device descriptor read/8, error -71 [ 276.242015][ T9555] netlink: 620 bytes leftover after parsing attributes in process `syz.1.1095'. [ 276.328892][ T9551] vcan0: entered allmulticast mode [ 276.344830][ T9561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.367295][ T9561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.023067][ T9571] tipc: Started in network mode [ 277.031627][ T9571] tipc: Node identity 7a1180c148f5, cluster identity 4711 [ 277.049282][ T9571] tipc: Enabled bearer , priority 0 [ 277.067587][ T9571] syzkaller0: entered promiscuous mode [ 277.077414][ T9571] syzkaller0: entered allmulticast mode [ 277.084126][ T9536] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 277.097979][ T9537] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 277.110119][ T9575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.122188][ T9571] tipc: Resetting bearer [ 277.128254][ T9575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.174338][ T9571] tipc: Disabling bearer [ 277.500918][ T9586] netlink: 620 bytes leftover after parsing attributes in process `syz.0.1105'. [ 277.583352][ T9588] netlink: 'syz.3.1106': attribute type 6 has an invalid length. [ 277.599312][ T9588] netlink: 'syz.3.1106': attribute type 7 has an invalid length. [ 277.633475][ T9590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.656780][ T9590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.742002][ T803] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 277.743350][ T9595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.759283][ T9595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.774599][ T9595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.783642][ T9595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.871530][ T803] usb 5-1: device descriptor read/64, error -71 [ 278.121505][ T803] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 278.261497][ T803] usb 5-1: device descriptor read/64, error -71 [ 278.372960][ T803] usb usb5-port1: attempt power cycle [ 278.375368][ T9598] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1110'. [ 278.448024][ T9605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.456837][ T9605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.616851][ T9610] (syz.3.1114,9610,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 278.664330][ T9612] netlink: 620 bytes leftover after parsing attributes in process `syz.3.1115'. [ 278.711440][ T803] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 278.732432][ T803] usb 5-1: device descriptor read/8, error -71 [ 278.783797][ T9614] comedi comedi3: pcl730: I/O port conflict (0xd,4) [ 278.971381][ T803] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 279.011984][ T803] usb 5-1: device descriptor read/8, error -71 [ 279.029458][ T9618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.041801][ T9618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.121736][ T803] usb usb5-port1: unable to enumerate USB device [ 279.846927][ T9636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.857966][ T9636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.608872][ T9641] netlink: 620 bytes leftover after parsing attributes in process `syz.3.1124'. [ 280.711944][ T9645] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 280.720918][ T9645] overlayfs: missing 'lowerdir' [ 280.780831][ T9649] "syz.3.1128" (9649) uses obsolete ecb(arc4) skcipher [ 280.881366][ T5818] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 281.051029][ T5818] usb 5-1: Using ep0 maxpacket: 32 [ 281.058974][ T5818] usb 5-1: config 7 has an invalid interface number: 199 but max is 0 [ 281.067421][ T5818] usb 5-1: config 7 has no interface number 0 [ 281.075778][ T5818] usb 5-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=5a.a6 [ 281.085130][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.093174][ T5818] usb 5-1: Product: syz [ 281.097401][ T5818] usb 5-1: Manufacturer: syz [ 281.101127][ T5877] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 281.102056][ T5818] usb 5-1: SerialNumber: syz [ 281.261008][ T5877] usb 4-1: Using ep0 maxpacket: 16 [ 281.268177][ T5877] usb 4-1: config 4 has an invalid interface number: 51 but max is 0 [ 281.276361][ T5877] usb 4-1: config 4 has no interface number 0 [ 281.282605][ T5877] usb 4-1: config 4 interface 51 has no altsetting 0 [ 281.292131][ T5877] usb 4-1: New USB device found, idVendor=0409, idProduct=0063, bcdDevice=83.4b [ 281.301325][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.309353][ T5877] usb 4-1: Product: syz [ 281.313622][ T5877] usb 4-1: Manufacturer: syz [ 281.318224][ T5877] usb 4-1: SerialNumber: syz [ 281.331573][ T5877] upd78f0730 4-1:4.51: upd78f0730 converter detected [ 281.342835][ T5877] usb 4-1: upd78f0730 converter now attached to ttyUSB0 [ 281.397978][ T5818] ums-cypress 5-1:7.199: USB Mass Storage device detected [ 281.478093][ T5818] usb 5-1: USB disconnect, device number 34 [ 281.528359][ T5877] usb 4-1: USB disconnect, device number 104 [ 281.544097][ T5877] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 281.553591][ T5877] upd78f0730 4-1:4.51: device disconnected [ 282.126886][ T9664] binder: 9663:9664 ioctl c0306201 2000000001c0 returned -22 [ 282.221159][ T9673] netlink: 620 bytes leftover after parsing attributes in process `syz.3.1135'. [ 282.620995][ T5877] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 282.740820][ T54] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 282.770782][ T5877] usb 5-1: Invalid ep0 maxpacket: 64 [ 282.886464][ T9686] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 282.903797][ T5877] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 282.915804][ T54] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 282.925742][ T54] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.934168][ T54] usb 4-1: Product: syz [ 282.944563][ T54] usb 4-1: Manufacturer: syz [ 282.949201][ T54] usb 4-1: SerialNumber: syz [ 282.958145][ T54] usb 4-1: config 0 descriptor?? [ 282.967810][ T54] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 283.021383][ T9690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.032199][ T9690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.060825][ T5877] usb 5-1: Invalid ep0 maxpacket: 64 [ 283.067973][ T5877] usb usb5-port1: attempt power cycle [ 283.411019][ T5877] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 283.431421][ T5877] usb 5-1: Invalid ep0 maxpacket: 64 [ 283.560761][ T5877] usb 5-1: new low-speed USB device number 38 using dummy_hcd [ 283.581739][ T5877] usb 5-1: Invalid ep0 maxpacket: 64 [ 283.590970][ T5877] usb usb5-port1: unable to enumerate USB device [ 283.628390][ T9700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.638800][ T9700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.177900][ T54] gspca_stk1135: reg_w 0xd err -71 [ 284.185524][ T54] gspca_stk1135: serial bus timeout: status=0x00 [ 284.192185][ T54] gspca_stk1135: Sensor write failed [ 284.197663][ T54] gspca_stk1135: serial bus timeout: status=0x00 [ 284.205743][ T54] gspca_stk1135: Sensor write failed [ 284.212109][ T54] gspca_stk1135: serial bus timeout: status=0x00 [ 284.219524][ T54] gspca_stk1135: Sensor read failed [ 284.226566][ T54] gspca_stk1135: serial bus timeout: status=0x00 [ 284.232994][ T54] gspca_stk1135: Sensor read failed [ 284.238206][ T54] gspca_stk1135: Detected sensor type unknown (0x0) [ 284.244992][ T54] gspca_stk1135: serial bus timeout: status=0x00 [ 284.252199][ T54] gspca_stk1135: Sensor read failed [ 284.257427][ T54] gspca_stk1135: serial bus timeout: status=0x00 [ 284.263986][ T54] gspca_stk1135: Sensor read failed [ 284.269220][ T54] gspca_stk1135: serial bus timeout: status=0x00 [ 284.275694][ T54] gspca_stk1135: Sensor write failed [ 284.281030][ T54] gspca_stk1135: serial bus timeout: status=0x00 [ 284.287358][ T54] gspca_stk1135: Sensor write failed [ 284.292757][ T54] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 284.303006][ T54] usb 4-1: USB disconnect, device number 105 [ 284.929729][ T9716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.938788][ T9716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.948540][ T9716] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1147'. [ 284.950585][ T54] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 285.090569][ T54] usb 4-1: device descriptor read/64, error -71 [ 285.329045][ T9718] netlink: 'syz.4.1148': attribute type 8 has an invalid length. [ 285.339057][ T9718] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1148'. [ 285.362256][ T54] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 285.500561][ T54] usb 4-1: device descriptor read/64, error -71 [ 285.514503][ T9724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.524174][ T9724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.535717][ T9724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.544487][ T9724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.610780][ T54] usb usb4-port1: attempt power cycle [ 285.960527][ T54] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 285.980999][ T54] usb 4-1: device descriptor read/8, error -71 [ 286.081967][ T9726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.091287][ T9726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.220577][ T54] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 286.258428][ T54] usb 4-1: device descriptor read/8, error -71 [ 286.319202][ T9730] input: syz1 as /devices/virtual/input/input36 [ 286.370658][ T54] usb usb4-port1: unable to enumerate USB device [ 286.662967][ T5877] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 286.801036][ T5877] usb 5-1: device descriptor read/64, error -71 [ 286.833274][ T9744] nft_compat: unsupported protocol 5 [ 286.899982][ T9748] team0: mtu less than device minimum [ 286.955266][ T9749] netlink: 'syz.1.1157': attribute type 2 has an invalid length. [ 286.972652][ T9749] netlink: 'syz.1.1157': attribute type 9 has an invalid length. [ 286.980635][ T9749] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1157'. [ 287.061451][ T5877] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 287.135114][ T9755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.156172][ T9755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.210333][ T5877] usb 5-1: device descriptor read/64, error -71 [ 287.320571][ T5877] usb usb5-port1: attempt power cycle [ 287.660376][ T5877] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 287.683996][ T5877] usb 5-1: device descriptor read/8, error -71 [ 287.930352][ T5877] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 287.962083][ T5877] usb 5-1: device descriptor read/8, error -71 [ 288.011748][ T9764] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1164'. [ 288.085597][ T5877] usb usb5-port1: unable to enumerate USB device [ 288.137082][ T9764] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1164'. [ 288.150770][ T9769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.163611][ T9769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.250950][ T5877] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 288.402109][ T5877] usb 4-1: unable to get BOS descriptor or descriptor too short [ 288.410878][ T5877] usb 4-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 288.423324][ T5877] usb 4-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 288.432467][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.440603][ T5877] usb 4-1: Product: syz [ 288.444745][ T5877] usb 4-1: Manufacturer: syz [ 288.449312][ T5877] usb 4-1: SerialNumber: syz [ 288.661879][ T5877] ati_remote2 4-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 288.676007][ T5877] usb 4-1: USB disconnect, device number 110 [ 288.777442][ T9778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.787890][ T9778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.194797][ T9782] loop5: detected capacity change from 0 to 7 [ 289.207718][ T6478] Dev loop5: unable to read RDB block 7 [ 289.213611][ T6478] loop5: unable to read partition table [ 289.219411][ T6478] loop5: partition table beyond EOD, truncated [ 289.226679][ T9782] Dev loop5: unable to read RDB block 7 [ 289.232485][ T9782] loop5: unable to read partition table [ 289.238259][ T9782] loop5: partition table beyond EOD, truncated [ 289.244857][ T9782] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 289.626665][ T9807] loop5: detected capacity change from 0 to 7 [ 289.634956][ T9807] Dev loop5: unable to read RDB block 7 [ 289.641423][ T9807] loop5: unable to read partition table [ 289.647746][ T9807] loop5: partition table beyond EOD, truncated [ 289.654350][ T9807] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 289.705160][ T9809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.715410][ T9809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.086375][ T9811] netlink: 'syz.4.1179': attribute type 33 has an invalid length. [ 290.098447][ T9811] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1179'. [ 290.109445][ T9811] `: renamed from team0 (while UP) [ 290.232503][ T50] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 290.319200][ T9821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.338959][ T9821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.798556][ T9833] loop5: detected capacity change from 0 to 7 [ 290.807181][ T9833] Dev loop5: unable to read RDB block 7 [ 290.813546][ T9833] loop5: unable to read partition table [ 290.819351][ T9833] loop5: partition table beyond EOD, truncated [ 290.829946][ T9833] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 290.954849][ T9835] ÿÿÿÿÿÿظ: renamed from bridge_slave_1 (while UP) [ 290.964920][ T9835] bad cache= option: none’[()bvتr [ 290.964920][ T9835] ÜÙŸ »9Š;Ñ^Š¬dÈ!å/™ê­7u\“—ÀÝ´ßMÙDÿÒ¥eYÿoî ˜–“­PÙ50œeÂB>KÜX’/¤æÆTJ*Ÿ)—J¨ý(ÔÅ)Õ€¶˜‘Kœ’¼÷™óµÌfË5&‹˜€Lq¾¼q£2ÞWµhWd¸çÂ0 [ 290.964920][ T9835] [ 290.986694][ T9835] CIFS: VFS: bad cache= option: none’[()bvتr [ 290.986694][ T9835] ÜÙŸ »9Š;Ñ^Š¬dÈ!å/™ê­7u\“—ÀÝ´ßMÙDÿÒ¥eYÿoî ˜–“­PÙ50œeÂB>KÜX’/¤æÆTJ*Ÿ)—J¨ý(ÔÅ)Õ€¶˜‘Kœ’¼÷™óµÌfË5&‹˜€Lq¾¼q£2ÞWµhWd¸çÂ0 [ 291.076886][ T9839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.092642][ T9839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.410000][ T5877] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 291.581774][ T5877] usb 5-1: unable to get BOS descriptor or descriptor too short [ 291.592255][ T5877] usb 5-1: config 64 has an invalid interface number: 227 but max is 0 [ 291.609950][ T5877] usb 5-1: config 64 has no interface number 0 [ 291.616158][ T5877] usb 5-1: config 64 interface 227 altsetting 9 endpoint 0x4 is Bulk; changing to Interrupt [ 291.639982][ T5877] usb 5-1: config 64 interface 227 altsetting 9 endpoint 0xC has an invalid bInterval 226, changing to 4 [ 291.659965][ T5877] usb 5-1: config 64 interface 227 altsetting 9 endpoint 0xC has invalid maxpacket 512, setting to 0 [ 291.699943][ T5877] usb 5-1: config 64 interface 227 has no altsetting 0 [ 291.709606][ T5877] usb 5-1: string descriptor 0 read error: -22 [ 291.730063][ T5877] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=cc.bf [ 291.736353][ T9855] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1193'. [ 291.739337][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.783225][ T9845] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 291.795597][ T5877] imon_raw 5-1:64.227: IR endpoint missing [ 291.973941][ T9863] loop5: detected capacity change from 0 to 7 [ 291.981885][ T6478] Dev loop5: unable to read RDB block 7 [ 291.987553][ T6478] loop5: unable to read partition table [ 291.993757][ T6478] loop5: partition table beyond EOD, truncated [ 292.010571][ T9863] Dev loop5: unable to read RDB block 7 [ 292.016680][ T9863] loop5: unable to read partition table [ 292.024731][ T9863] loop5: partition table beyond EOD, truncated [ 292.025124][ T9845] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1190'. [ 292.040056][ T9863] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 292.056187][ T9845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.110351][ T9845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.122551][ T54] usb 5-1: USB disconnect, device number 43 [ 292.278882][ T9871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.292650][ T9871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.316025][ T9871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.324834][ T9871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.903462][ T9898] loop5: detected capacity change from 0 to 7 [ 292.911013][ T9898] Dev loop5: unable to read RDB block 7 [ 292.916683][ T9898] loop5: unable to read partition table [ 292.923312][ T9898] loop5: partition table beyond EOD, truncated [ 292.929500][ T9898] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 293.213824][ T9914] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1210'. [ 293.225445][ T9914] IPv4: Oversized IP packet from 127.202.26.0 [ 293.295591][ T9922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.304808][ T9922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.370170][ T9924] loop5: detected capacity change from 0 to 7 [ 293.378667][ T9924] Dev loop5: unable to read RDB block 7 [ 293.384849][ T9924] loop5: unable to read partition table [ 293.392094][ T9924] loop5: partition table beyond EOD, truncated [ 293.398255][ T9924] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 293.779855][ T5877] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 293.838125][ T9933] sg_write: data in/out 44713/8 bytes for SCSI command 0xcf-- guessing data in; [ 293.838125][ T9933] program syz.1.1217 not setting count and/or reply_len properly [ 293.860009][ T5818] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 293.898945][ T9938] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1218'. [ 293.942172][ T5877] usb 4-1: config 0 has no interfaces? [ 293.947705][ T5877] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 293.957337][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.977569][ T5877] usb 4-1: config 0 descriptor?? [ 293.991739][ T5818] usb 5-1: device descriptor read/64, error -71 [ 294.005526][ T9942] syzkaller0: entered promiscuous mode [ 294.011930][ T9942] syzkaller0: entered allmulticast mode [ 294.184828][ T9929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.193766][ T9929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.202189][ T5897] usb 4-1: USB disconnect, device number 111 [ 294.229888][ T5818] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 294.359910][ T5818] usb 5-1: device descriptor read/64, error -71 [ 294.470175][ T5818] usb usb5-port1: attempt power cycle [ 294.649841][ T5897] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 294.682736][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1224'. [ 294.799990][ T5897] usb 4-1: Using ep0 maxpacket: 16 [ 294.809851][ T5818] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 294.812167][ T5897] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 294.831475][ T9958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1226'. [ 294.843913][ T5897] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 294.850861][ T5818] usb 5-1: device descriptor read/8, error -71 [ 294.855373][ T5897] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 294.868268][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.876311][ T5897] usb 4-1: Product: syz [ 294.889448][ T5897] usb 4-1: Manufacturer: syz [ 294.900209][ T5897] usb 4-1: SerialNumber: syz [ 295.090428][ T5818] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 295.133153][ T5818] usb 5-1: device descriptor read/8, error -71 [ 295.240453][ T5818] usb usb5-port1: unable to enumerate USB device [ 295.325378][ T5897] usb 4-1: 0:2 : does not exist [ 295.483453][ T9970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1230'. [ 295.673734][ T9976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.684407][ T9976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.725626][ T9929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.738647][ T9929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.754120][ T9929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.765598][ T9929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.805200][ T5897] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 295.836118][ T5897] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 295.863061][ T5897] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 295.912962][ T5897] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 295.982637][ T5897] usb 4-1: USB disconnect, device number 112 [ 296.231392][ T9987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.250489][ T9987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.864599][T10002] netlink: 'syz.3.1242': attribute type 21 has an invalid length. [ 296.875010][T10002] IPv6: NLM_F_CREATE should be specified when creating new route [ 296.886180][ T50] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 296.887920][T10002] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 296.902460][T10002] IPv6: NLM_F_CREATE should be set when creating new route [ 296.909721][T10002] IPv6: NLM_F_CREATE should be set when creating new route [ 296.916946][T10002] IPv6: NLM_F_CREATE should be set when creating new route [ 297.020564][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 297.020580][ T29] audit: type=1326 audit(2000000171.104:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10010 comm="syz.3.1243" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f26acf9c629 code=0x0 [ 297.055678][T10012] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 297.059908][ T5897] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 297.215126][T10023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.225661][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 297.236900][ T5897] usb 5-1: config 0 has an invalid interface number: 74 but max is 1 [ 297.247883][T10023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.256139][ T5897] usb 5-1: config 0 has no interface number 1 [ 297.265077][ T5897] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 297.279561][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.287728][ T5897] usb 5-1: Product: syz [ 297.292987][ T5897] usb 5-1: Manufacturer: syz [ 297.297615][ T5897] usb 5-1: SerialNumber: syz [ 297.321339][ T5897] usb 5-1: config 0 descriptor?? [ 297.359716][ T5928] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 297.425776][ T5897] snd-usb-audio 5-1:0.74: probe with driver snd-usb-audio failed with error -22 [ 297.436518][T10033] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 297.446836][T10033] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 297.455929][T10033] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 297.469743][T10033] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 297.484538][ T6478] udevd[6478]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.74/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.529878][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 297.538639][ T5928] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 297.542924][ T9992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.556152][ T9992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.564002][ T5928] usb 4-1: config 0 has no interface number 0 [ 297.568587][ T5897] usb 5-1: USB disconnect, device number 48 [ 297.579724][ T5928] usb 4-1: config 0 interface 119 has no altsetting 0 [ 297.592824][ T5928] usb 4-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=da.f9 [ 297.611406][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.619465][ T5928] usb 4-1: Product: syz [ 297.624070][T10041] binder: BINDER_SET_CONTEXT_MGR already set [ 297.627734][ T5928] usb 4-1: Manufacturer: syz [ 297.627752][ T5928] usb 4-1: SerialNumber: syz [ 297.630592][ T5928] usb 4-1: config 0 descriptor?? [ 297.645789][T10041] binder: 10040:10041 ioctl 4018620d 200000004a80 returned -16 [ 297.660635][T10041] binder_alloc: 10040: binder_alloc_buf, no vma [ 297.832701][ T29] audit: type=1326 audit(2000000171.914:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10040 comm="syz.0.1249" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f935c19c629 code=0x0 [ 298.047621][T10047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.057492][T10047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.071050][ T5928] mos7840 4-1:0.119: required endpoints missing [ 298.085201][ T5928] usb 4-1: USB disconnect, device number 113 [ 298.094057][T10047] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1250'. [ 298.105739][T10047] openvswitch: netlink: Flow key attr not present in new flow. [ 298.683922][T10074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.701767][T10074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.897712][T10080] fuse: Bad value for 'user_id' [ 298.903026][T10080] fuse: Bad value for 'user_id' [ 299.273556][T10095] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1264'. [ 299.296927][T10095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.305745][T10095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.314742][ T5818] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 299.481644][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 299.491448][ T5818] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 299.501698][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 299.511491][ T5818] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 299.521697][ T5818] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 299.530757][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.540856][ T5818] usb 4-1: config 0 descriptor?? [ 299.689512][ T5928] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 299.785703][ T5818] hdpvr 4-1:0.0: unexpected answer of status request, len -71 [ 299.793564][ T5818] hdpvr 4-1:0.0: device init failed [ 299.798950][ T5818] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 299.823261][ T5818] usb 4-1: USB disconnect, device number 114 [ 299.853080][ T5928] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 299.864109][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.884043][ T5928] usb 5-1: Product: syz [ 299.888787][ T5928] usb 5-1: Manufacturer: syz [ 299.899492][ T5928] usb 5-1: SerialNumber: syz [ 299.906112][T10111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.912078][ T5928] usb 5-1: config 0 descriptor?? [ 299.924637][T10111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.129294][ T5928] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 301.547584][T10103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.556419][T10103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.571713][ T5928] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 301.583558][ T5928] usb 5-1: USB disconnect, device number 49 [ 301.957407][T10128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.966381][T10128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.469404][ T54] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 302.629403][ T54] usb 5-1: Using ep0 maxpacket: 32 [ 302.635988][ T54] usb 5-1: config 0 has an invalid interface number: 136 but max is 0 [ 302.644978][ T54] usb 5-1: config 0 has no interface number 0 [ 302.652335][ T54] usb 5-1: config 0 interface 136 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 302.662280][ T54] usb 5-1: config 0 interface 136 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 302.672223][ T54] usb 5-1: config 0 interface 136 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 302.684024][ T54] usb 5-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=d1.d2 [ 302.693344][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.701569][ T54] usb 5-1: Product: syz [ 302.705733][ T54] usb 5-1: Manufacturer: syz [ 302.710581][ T54] usb 5-1: SerialNumber: syz [ 302.717045][ T54] usb 5-1: config 0 descriptor?? [ 302.723103][T10138] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 302.733648][ T54] vmk80xx 5-1:0.136: driver 'vmk80xx' failed to auto-configure device. [ 302.743257][ T54] vmk80xx 5-1:0.136: probe with driver vmk80xx failed with error -22 [ 302.893492][T10111] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 303.039090][T10146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.049915][T10146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.080558][T10147] 8021q: VLANs not supported on syzkaller1 [ 303.095380][T10146] 8021q: VLANs not supported on syzkaller1 [ 303.234249][T10157] sg_write: data in/out 458975/136 bytes for SCSI command 0xc7-- guessing data in; [ 303.234249][T10157] program syz.3.1279 not setting count and/or reply_len properly [ 303.336020][T10163] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1282'. [ 303.345178][T10161] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 303.357233][T10161] kernel profiling enabled (shift: 9) [ 303.461649][T10167] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1283'. [ 303.522432][T10171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.532752][T10171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.596241][T10173] syzkaller1: entered promiscuous mode [ 303.602747][T10173] syzkaller1: entered allmulticast mode [ 303.793883][T10179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1287'. [ 304.309755][ T54] usb 4-1: new low-speed USB device number 115 using dummy_hcd [ 304.459295][ T54] usb 4-1: Invalid ep0 maxpacket: 16 [ 304.609315][ T54] usb 4-1: new low-speed USB device number 116 using dummy_hcd [ 304.769300][ T54] usb 4-1: Invalid ep0 maxpacket: 16 [ 304.774876][ T54] usb usb4-port1: attempt power cycle [ 304.848407][T10193] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 305.129525][ T54] usb 4-1: new low-speed USB device number 117 using dummy_hcd [ 305.149861][ T54] usb 4-1: Invalid ep0 maxpacket: 16 [ 305.185853][ T5818] usb 5-1: USB disconnect, device number 50 [ 305.279693][ T54] usb 4-1: new low-speed USB device number 118 using dummy_hcd [ 305.307545][T10198] tipc: Enabling of bearer rejected, failed to enable media [ 305.317271][ T54] usb 4-1: Invalid ep0 maxpacket: 16 [ 305.328560][ T54] usb usb4-port1: unable to enumerate USB device [ 305.397338][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.413417][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.426392][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.433610][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.443101][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.450224][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.457090][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.464459][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.471449][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.478341][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.485474][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.492586][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.499562][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.506470][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.513490][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.521994][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.528856][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.536074][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.543035][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.550215][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.557076][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.564273][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.571395][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.578298][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.586175][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.593208][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.600546][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.607477][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.614563][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.622297][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.629063][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.636280][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.643280][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.650453][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.657230][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.664633][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.671608][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.678497][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.686019][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.693187][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.700520][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.707424][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.714438][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.722083][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.728848][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.736218][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.743194][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.750290][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.757057][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.764690][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.771758][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.778673][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.785902][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.793202][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.800251][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.807185][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.814274][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.821414][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.828697][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.835926][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.850510][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.857417][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.859263][T10193] comedi comedi3: reset error (fatal) [ 305.864742][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.880446][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.887128][T10201] binder: 10199:10201 ioctl 400c620e 0 returned -14 [ 305.933406][T10204] loop5: detected capacity change from 0 to 7 [ 305.941011][T10204] Dev loop5: unable to read RDB block 7 [ 305.947549][T10204] loop5: unable to read partition table [ 305.954705][T10204] loop5: partition table beyond EOD, truncated [ 305.960978][T10204] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 306.319345][ T5818] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 306.420798][T10218] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1301'. [ 306.431218][T10218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1301'. [ 306.440948][T10218] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1301'. [ 306.454381][T10218] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 306.472185][ T5818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.486510][ T5818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.496792][ T5818] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 306.509889][ T5818] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 306.518950][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.534300][ T5818] usb 5-1: config 0 descriptor?? [ 306.884514][T10224] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1303'. [ 307.023083][ T5818] usbhid 5-1:0.0: can't add hid device: -71 [ 307.030681][ T5818] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 307.041247][ T5818] usb 5-1: USB disconnect, device number 51 [ 307.450624][T10228] loop5: detected capacity change from 0 to 7 [ 307.457817][T10228] Dev loop5: unable to read RDB block 7 [ 307.465194][T10228] loop5: unable to read partition table [ 307.472131][T10228] loop5: partition table beyond EOD, truncated [ 307.478606][T10228] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 307.480423][ T5928] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 307.581984][T10232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.592611][T10232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.613786][T10232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.622664][T10232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.669312][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 307.679583][ T5928] usb 4-1: config 0 has an invalid interface number: 244 but max is 0 [ 307.688738][ T5928] usb 4-1: config 0 has no interface number 0 [ 307.693941][T10234] macsec0: entered promiscuous mode [ 307.695313][ T5928] usb 4-1: config 0 interface 244 altsetting 17 bulk endpoint 0x82 has invalid maxpacket 32 [ 307.700354][T10234] macsec0: entered allmulticast mode [ 307.710982][ T5928] usb 4-1: config 0 interface 244 has no altsetting 0 [ 307.715827][T10234] veth1_macvtap: entered allmulticast mode [ 307.730482][ T5928] usb 4-1: New USB device found, idVendor=0f12, idProduct=1210, bcdDevice=53.be [ 307.739595][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.747638][ T5928] usb 4-1: Product: syz [ 307.752256][ T5928] usb 4-1: Manufacturer: syz [ 307.756858][ T5928] usb 4-1: SerialNumber: syz [ 307.770396][ T5928] usb 4-1: config 0 descriptor?? [ 307.777208][T10226] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 307.912174][T10240] program syz.4.1310 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 307.986165][T10226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.995184][T10226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.005268][ T5818] usb 4-1: USB disconnect, device number 119 [ 308.291838][T10254] loop5: detected capacity change from 0 to 7 [ 308.300395][ T6478] Dev loop5: unable to read RDB block 7 [ 308.306054][ T6478] loop5: unable to read partition table [ 308.312024][ T6478] loop5: partition table beyond EOD, truncated [ 308.327504][T10254] Dev loop5: unable to read RDB block 7 [ 308.333232][T10254] loop5: unable to read partition table [ 308.338978][T10254] loop5: partition table beyond EOD, truncated [ 308.345238][T10254] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 308.403759][T10256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.412861][T10256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.421894][T10256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.431307][T10256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.687450][T10264] overlayfs: overlapping lowerdir path [ 308.701327][T10264] binder: 10263:10264 ioctl c018620c 200000000580 returned -22 [ 308.900170][T10272] netlink: 774 bytes leftover after parsing attributes in process `syz.4.1322'. [ 308.910425][T10272] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1322'. [ 308.939883][T10272] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3642988519 (466302530432 ns) > initial count (459226025088 ns). Using initial count to start timer. [ 308.999272][ T5818] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 309.027666][T10276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.036430][T10276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.160701][ T5818] usb 4-1: config 0 has an invalid interface number: 156 but max is 0 [ 309.168928][ T5818] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.179190][ T5818] usb 4-1: config 0 has no interface number 0 [ 309.185321][ T5818] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 253, changing to 11 [ 309.196750][ T5818] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 309.207278][ T5818] usb 4-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 309.220435][ T5818] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 309.229570][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.239527][ T5818] usb 4-1: config 0 descriptor?? [ 309.249313][ T5818] gspca_main: spca561-2.14.0 probing abcd:cdee [ 309.453994][ T5818] spca561 4-1:0.156: probe with driver spca561 failed with error -22 [ 309.462885][ T5818] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 309.470664][ T5818] usb 4-1: MIDIStreaming interface descriptor not found [ 309.561473][ T5818] usb 4-1: USB disconnect, device number 120 [ 309.647691][T10282] loop5: detected capacity change from 0 to 7 [ 309.654833][T10282] Dev loop5: unable to read RDB block 7 [ 309.661587][T10282] loop5: unable to read partition table [ 309.667433][T10282] loop5: partition table beyond EOD, truncated [ 309.675086][T10282] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 309.726575][ T29] audit: type=1326 audit(2000000183.804:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cacb9c629 code=0x7fc00000 [ 309.765735][ T29] audit: type=1326 audit(2000000183.804:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1cacb9c629 code=0x7fc00000 [ 309.793194][ T29] audit: type=1326 audit(2000000183.804:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cacb9c629 code=0x7fc00000 [ 309.816168][ T29] audit: type=1326 audit(2000000183.804:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cacb9c629 code=0x7fc00000 [ 309.839717][ T29] audit: type=1326 audit(2000000183.804:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cacb9c629 code=0x7fc00000 [ 309.862420][ T29] audit: type=1326 audit(2000000183.804:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cacb9c629 code=0x7fc00000 [ 309.866519][T10289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.886190][ T29] audit: type=1326 audit(2000000183.804:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cacb9c629 code=0x7fc00000 [ 309.917954][ T29] audit: type=1326 audit(2000000183.804:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cacb9c629 code=0x7fc00000 [ 309.931413][T10289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.942832][ T29] audit: type=1326 audit(2000000183.804:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cacb9c629 code=0x7fc00000 [ 309.971300][ T29] audit: type=1326 audit(2000000183.804:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cacb9c629 code=0x7fc00000 [ 310.017046][T10289] overlay: Unknown parameter 'defcontext' [ 310.136833][T10297] 9p: Bad value for 'rfdno' [ 310.643144][T10307] loop5: detected capacity change from 0 to 7 [ 310.650944][ T6478] Dev loop5: unable to read RDB block 7 [ 310.656505][ T6478] loop5: unable to read partition table [ 310.662729][ T6478] loop5: partition table beyond EOD, truncated [ 310.670086][T10307] Dev loop5: unable to read RDB block 7 [ 310.675980][T10307] loop5: unable to read partition table [ 310.682166][T10307] loop5: partition table beyond EOD, truncated [ 310.688474][T10307] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 310.763536][T10309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.775475][T10309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.806891][T10309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.820472][T10309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.005919][T10322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1340'. [ 311.239222][ T5818] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 311.390748][ T5818] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 311.399820][ T5818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.411042][ T5818] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 311.420236][ T5818] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 311.428228][ T5818] usb 5-1: Manufacturer: syz [ 311.434993][ T5818] usb 5-1: config 0 descriptor?? [ 311.489150][ T5818] rc_core: IR keymap rc-hauppauge not found [ 311.495230][ T5818] Registered IR keymap rc-empty [ 311.501284][ T5818] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 311.516127][ T5818] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input37 [ 311.635329][T10332] loop5: detected capacity change from 0 to 7 [ 311.645024][ C1] igorplugusb 5-1:0.0: Error: urb status = -32 [ 311.652066][T10332] Dev loop5: unable to read RDB block 7 [ 311.657871][T10332] loop5: unable to read partition table [ 311.659981][ T5897] usb 5-1: USB disconnect, device number 52 [ 311.665720][T10332] loop5: partition table beyond EOD, truncated [ 311.675872][T10332] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 311.810159][T10341] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1346'. [ 311.825290][T10341] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 311.905637][T10345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.935249][T10345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.209309][ T5897] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 312.402549][ T5897] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 312.429110][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.437100][ T5897] usb 4-1: Product: syz [ 312.441763][ T5897] usb 4-1: Manufacturer: syz [ 312.446361][ T5897] usb 4-1: SerialNumber: syz [ 312.472364][ T5897] usb 4-1: config 0 descriptor?? [ 312.484969][ T5897] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 312.499164][ T803] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 312.660728][ T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.671678][ T803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.682978][ T803] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 312.692382][ T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.709805][ T803] usb 5-1: config 0 descriptor?? [ 313.123547][ T803] hid-led 0003:0FC5:B080.0009: unknown main item tag 0x0 [ 313.520535][T10349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.529500][T10349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.538602][ T803] hid-led 0003:0FC5:B080.0009: probe with driver hid-led failed with error -71 [ 313.552266][ T803] usb 5-1: USB disconnect, device number 53 [ 314.162979][T10355] loop5: detected capacity change from 0 to 7 [ 314.175835][T10355] Dev loop5: unable to read RDB block 7 [ 314.182114][T10355] loop5: unable to read partition table [ 314.188347][T10355] loop5: partition table beyond EOD, truncated [ 314.195617][T10357] netlink: 'syz.4.1353': attribute type 10 has an invalid length. [ 314.203916][T10357] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1353'. [ 314.212898][T10355] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 314.240357][T10357] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 314.311169][T10361] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 314.345074][T10361] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 314.548948][T10373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.557908][T10373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.568231][T10347] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 314.575957][T10347] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 314.590472][T10347] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 314.598134][T10347] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 314.621300][ T5897] gspca_stk1135: reg_w 0x203 err -71 [ 314.630619][ T5897] gspca_stk1135: serial bus timeout: status=0x00 [ 314.637030][ T5897] gspca_stk1135: Sensor write failed [ 314.642888][ T5897] gspca_stk1135: serial bus timeout: status=0x00 [ 314.649281][ T5897] gspca_stk1135: Sensor write failed [ 314.654672][ T5897] gspca_stk1135: serial bus timeout: status=0x00 [ 314.661238][ T5897] gspca_stk1135: Sensor read failed [ 314.666520][ T5897] gspca_stk1135: serial bus timeout: status=0x00 [ 314.673181][ T5897] gspca_stk1135: Sensor read failed [ 314.678439][ T5897] gspca_stk1135: Detected sensor type unknown (0x0) [ 314.686087][ T5897] gspca_stk1135: serial bus timeout: status=0x00 [ 314.692506][ T5897] gspca_stk1135: Sensor read failed [ 314.697718][ T5897] gspca_stk1135: serial bus timeout: status=0x00 [ 314.704738][ T5897] gspca_stk1135: Sensor read failed [ 314.710093][ T5897] gspca_stk1135: serial bus timeout: status=0x00 [ 314.716417][ T5897] gspca_stk1135: Sensor write failed [ 314.725710][ T5897] gspca_stk1135: serial bus timeout: status=0x00 [ 314.732112][ T5897] gspca_stk1135: Sensor write failed [ 314.737473][ T5897] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 314.745465][ T5877] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 314.754894][ T5897] usb 4-1: USB disconnect, device number 121 [ 314.911327][ T5877] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 314.919845][ T5877] usb 5-1: config 0 has an invalid descriptor of length 89, skipping remainder of the config [ 314.932208][ T5877] usb 5-1: config 0 has no interface number 0 [ 314.938516][ T5877] usb 5-1: config 0 interface 20 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 314.955549][ T5877] usb 5-1: New USB device found, idVendor=01e6, idProduct=000b, bcdDevice= 1.00 [ 314.965065][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.973147][ T5877] usb 5-1: Product: syz [ 314.977730][ T5877] usb 5-1: Manufacturer: syz [ 314.983348][ T5877] usb 5-1: SerialNumber: syz [ 314.992524][ T5877] usb 5-1: config 0 descriptor?? [ 315.066372][ T1215] IPVS: starting estimator thread 0... [ 315.067179][T10384] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 315.123184][T10390] loop5: detected capacity change from 0 to 7 [ 315.130359][T10390] Dev loop5: unable to read RDB block 7 [ 315.135977][T10390] loop5: unable to read partition table [ 315.143138][T10390] loop5: partition table beyond EOD, truncated [ 315.150127][T10390] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 315.159664][T10388] IPVS: using max 54 ests per chain, 129600 per kthread [ 315.216894][ T5877] usb 5-1: USB disconnect, device number 54 [ 315.303374][T10395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.312265][T10395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.322224][T10395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.331173][T10395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.345375][T10395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.355174][T10395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.364684][T10395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1363'. [ 315.519122][ T803] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 315.670835][ T803] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.680677][ T803] usb 4-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 315.689894][ T803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.700408][ T803] usb 4-1: config 0 descriptor?? [ 315.989057][ T5818] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 316.083530][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.125687][ T803] waltop 0003:172F:0502.000A: hidraw0: USB HID v0.00 Device [HID 172f:0502] on usb-dummy_hcd.3-1/input0 [ 316.143881][ T5818] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 316.171700][ T5818] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 316.189898][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.197960][ T5818] usb 5-1: Product: syz [ 316.202294][ T5818] usb 5-1: Manufacturer: syz [ 316.207013][ T5818] usb 5-1: SerialNumber: syz [ 316.319954][ T803] usb 4-1: USB disconnect, device number 122 [ 316.418349][ T5818] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 316.425251][ T5818] cdc_ncm 5-1:1.0: bind() failure [ 316.434054][ T5818] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 316.440916][ T5818] cdc_ncm 5-1:1.1: bind() failure [ 316.622860][T10397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.631690][T10397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.646688][ T5818] usb 5-1: USB disconnect, device number 55 [ 316.981789][T10403] netlink: 'syz.3.1366': attribute type 10 has an invalid length. [ 316.993128][T10403] team0 (unregistering): Port device team_slave_0 removed [ 317.007086][T10403] team0 (unregistering): Port device team_slave_1 removed [ 317.508701][T10420] loop5: detected capacity change from 0 to 7 [ 317.517053][T10420] Dev loop5: unable to read RDB block 7 [ 317.522751][T10420] loop5: unable to read partition table [ 317.528771][T10420] loop5: partition table beyond EOD, truncated [ 317.535566][T10420] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 317.839089][ T5818] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 317.989103][ T803] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 318.012755][ T5818] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 318.022004][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.030118][ T5818] usb 5-1: Product: syz [ 318.034316][ T5818] usb 5-1: Manufacturer: syz [ 318.038951][ T5818] usb 5-1: SerialNumber: syz [ 318.139096][ T803] usb 4-1: Using ep0 maxpacket: 16 [ 318.146165][ T803] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 318.156509][ T803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.167346][ T803] usb 4-1: config 0 descriptor?? [ 318.180648][ T803] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 318.380342][T10426] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1373'. [ 318.519788][ T5818] rtl8150 5-1:1.0: couldn't reset the device [ 318.539599][ T5818] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 318.554062][ T5818] usb 5-1: USB disconnect, device number 56 [ 318.623167][ T803] usb 4-1: Detected FT232A [ 318.639228][ T803] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 318.666598][ T803] usb 4-1: USB disconnect, device number 123 [ 318.677595][ T803] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 318.690082][ T803] ftdi_sio 4-1:0.0: device disconnected [ 318.793563][T10448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.807216][T10448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.426902][T10475] dns_resolver: Unsupported content type (3) [ 319.465172][T10475] blktrace: Concurrent blktraces are not allowed on sg0 [ 319.604168][T10479] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 319.616117][T10479] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 319.626848][T10479] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 319.636579][T10479] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 319.646628][T10479] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 319.656438][T10479] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 319.666539][T10479] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 319.676245][T10479] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 319.686325][T10479] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 320.086166][T10494] ptrace attach of "./syz-executor exec"[8489] was attempted by ""[10494] [ 320.667138][T10501] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1394'. [ 320.949815][ T5897] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 321.029018][ T5877] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 321.099008][ T5897] usb 5-1: Using ep0 maxpacket: 8 [ 321.107604][ T5897] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 321.117586][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.127769][ T5897] usb 5-1: Product: syz [ 321.132586][ T5897] usb 5-1: Manufacturer: syz [ 321.137266][ T5897] usb 5-1: SerialNumber: syz [ 321.144059][ T5897] usb 5-1: config 0 descriptor?? [ 321.180531][ T5877] usb 4-1: config 0 has an invalid interface number: 123 but max is 0 [ 321.188803][ T5877] usb 4-1: config 0 has no interface number 0 [ 321.195220][ T5877] usb 4-1: config 0 interface 123 has no altsetting 0 [ 321.206956][ T5877] usb 4-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=f1.19 [ 321.216395][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.227358][ T5877] usb 4-1: config 0 descriptor?? [ 321.352986][ T5897] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 321.442398][ T5877] usb 4-1: string descriptor 0 read error: -71 [ 321.451331][ T5877] gspca_main: spca501-2.14.0 probing 0497:c001 [ 321.459991][ T5877] gspca_spca501: reg write: error -71 [ 321.465392][ T5877] spca501 4-1:0.123: Reg write failed for 0x02,0x07,0x05 [ 321.472800][ T5877] spca501 4-1:0.123: probe with driver spca501 failed with error -22 [ 321.487045][ T5877] usb 4-1: USB disconnect, device number 124 [ 321.865990][T10511] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 322.138480][T10520] netlink: 'syz.3.1403': attribute type 46 has an invalid length. [ 322.150696][T10520] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 322.293310][T10526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.303733][T10526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.459163][ T803] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 322.588969][ T803] usb 4-1: device descriptor read/64, error -71 [ 322.839101][ T803] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 322.857148][T10531] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.1406'. [ 322.882967][T10531] Bluetooth: MGMT ver 1.23 [ 322.999057][ T803] usb 4-1: device descriptor read/64, error -71 [ 323.109366][ T803] usb usb4-port1: attempt power cycle [ 323.173749][ T5897] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 323.186250][ T5897] usb 5-1: USB disconnect, device number 57 [ 323.437954][T10543] netlink: 608 bytes leftover after parsing attributes in process `syz.1.1409'. [ 323.449000][ T803] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 323.478364][ T803] usb 4-1: device descriptor read/8, error -71 [ 323.491134][T10545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.501183][T10545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.732104][ T803] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 323.760215][ T803] usb 4-1: device descriptor read/8, error -71 [ 323.869280][ T803] usb usb4-port1: unable to enumerate USB device [ 323.959919][ T5928] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 324.110879][ T5928] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 324.119357][ T5928] usb 5-1: config 0 has no interface number 0 [ 324.128984][ T5928] usb 5-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 324.140797][ T5928] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 324.151984][ T5928] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0xA has an invalid bInterval 255, changing to 11 [ 324.166314][ T5928] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0xA has invalid maxpacket 59391, setting to 1024 [ 324.179973][ T5928] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 324.189268][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.197366][ T5928] usb 5-1: Product: syz [ 324.201692][ T5928] usb 5-1: Manufacturer: syz [ 324.206312][ T5928] usb 5-1: SerialNumber: syz [ 324.213013][ T5928] usb 5-1: config 0 descriptor?? [ 324.218547][T10551] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 324.231568][ T50] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 324.386259][T10557] FAULT_INJECTION: forcing a failure. [ 324.386259][T10557] name failslab, interval 1, probability 0, space 0, times 0 [ 324.406792][T10557] CPU: 0 UID: 0 PID: 10557 Comm: syz.1.1413 Tainted: G L syzkaller #0 PREEMPT(full) [ 324.406831][T10557] Tainted: [L]=SOFTLOCKUP [ 324.406837][T10557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 324.406848][T10557] Call Trace: [ 324.406854][T10557] [ 324.406861][T10557] dump_stack_lvl+0xe8/0x150 [ 324.406889][T10557] should_fail_ex+0x412/0x560 [ 324.406917][T10557] should_failslab+0xa8/0x100 [ 324.406939][T10557] __kmalloc_cache_noprof+0x88/0x660 [ 324.406956][T10557] ? lockdep_hardirqs_on+0x7a/0x110 [ 324.406982][T10557] ? __request_module+0x2d0/0x660 [ 324.407008][T10557] __request_module+0x2d0/0x660 [ 324.407034][T10557] ? __pfx___request_module+0x10/0x10 [ 324.407067][T10557] ? security_capable+0x7e/0x2c0 [ 324.407098][T10557] ? dev_load+0x21/0x1f0 [ 324.407117][T10557] dev_load+0x190/0x1f0 [ 324.407137][T10557] dev_ioctl+0x837/0x1150 [ 324.407160][T10557] sock_ioctl+0x75f/0x7f0 [ 324.407180][T10557] ? __pfx_sock_ioctl+0x10/0x10 [ 324.407199][T10557] ? __fget_files+0x3a0/0x420 [ 324.407221][T10557] ? __fget_files+0x2a/0x420 [ 324.407245][T10557] ? bpf_lsm_file_ioctl+0x9/0x20 [ 324.407266][T10557] ? __pfx_sock_ioctl+0x10/0x10 [ 324.407284][T10557] __se_sys_ioctl+0xfc/0x170 [ 324.407302][T10557] do_syscall_64+0x14d/0xf80 [ 324.407315][T10557] ? trace_irq_disable+0x3b/0x150 [ 324.407336][T10557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.407353][T10557] ? clear_bhb_loop+0x40/0x90 [ 324.407371][T10557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.407389][T10557] RIP: 0033:0x7f937959c629 [ 324.407406][T10557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.407421][T10557] RSP: 002b:00007f937a384028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 324.407438][T10557] RAX: ffffffffffffffda RBX: 00007f9379815fa0 RCX: 00007f937959c629 [ 324.407449][T10557] RDX: 00002000000005c0 RSI: 00000000000089f3 RDI: 0000000000000003 [ 324.407458][T10557] RBP: 00007f937a384090 R08: 0000000000000000 R09: 0000000000000000 [ 324.407467][T10557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.407475][T10557] R13: 00007f9379816038 R14: 00007f9379815fa0 R15: 00007fff4f463118 [ 324.407497][T10557] [ 324.852069][T10573] netlink: 608 bytes leftover after parsing attributes in process `syz.1.1418'. [ 325.363714][T10590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.377386][T10590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.844164][T10608] netlink: 608 bytes leftover after parsing attributes in process `syz.4.1427'. [ 326.198223][T10620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.209303][T10621] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.240107][T10621] kvm: kvm [10619]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x3 [ 326.259477][T10620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.311564][T10620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.401632][T10620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.483764][T10620] tipc: Started in network mode [ 326.488695][T10620] tipc: Node identity ac14140f, cluster identity 4711 [ 326.561067][T10620] tipc: New replicast peer: 100.1.1.1 [ 326.611863][T10620] tipc: Enabled bearer , priority 10 [ 326.667442][T10631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1432'. [ 326.963806][T10644] netlink: 608 bytes leftover after parsing attributes in process `syz.4.1436'. [ 327.493110][T10667] "syz.3.1443" (10667) uses obsolete ecb(arc4) skcipher [ 327.552289][T10674] pim6reg1: entered promiscuous mode [ 327.565631][T10674] pim6reg1: entered allmulticast mode [ 327.707884][T10680] netlink: 608 bytes leftover after parsing attributes in process `syz.3.1445'. [ 327.743602][ T5877] tipc: Node number set to 2886997007 [ 327.834779][T10686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.868789][T10686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.918661][T10686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.959744][T10686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.968544][T10686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.999591][T10686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.045388][T10698] [U] ë [ 328.067582][T10686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.092142][T10686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.119668][T10686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.130953][T10686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.147514][T10686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.159275][T10686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.598381][T10720] program syz.3.1452 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 328.614029][T10720] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 329.113718][T10743] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1455'. [ 329.202988][T10745] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 329.658985][ T1215] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 329.841757][ T1215] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 329.871084][ T1215] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x7A, changing to 0xA [ 329.872898][T10758] Failed to get privilege flags for destination (handle=0x2:0x0) [ 329.883598][ T1215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 329.905722][ T1215] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 329.927504][ T1215] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 329.942078][T10760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.950896][ T1215] usb 4-1: Manufacturer: syz [ 329.961538][ T1215] usb 4-1: config 0 descriptor?? [ 329.969062][T10760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.985079][ T1215] igorplugusb 4-1:0.0: endpoint incorrect [ 331.702204][T10809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.723542][T10809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.738599][T10814] blk_print_req_error: 54 callbacks suppressed [ 331.738701][T10814] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 331.777326][T10814] buffer_io_error: 54 callbacks suppressed [ 331.777344][T10814] Buffer I/O error on dev nbd0, logical block 0, async page read [ 331.789885][T10816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.807085][T10816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.820232][T10814] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 331.838364][T10814] Buffer I/O error on dev nbd0, logical block 1, async page read [ 331.853993][T10814] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 331.881783][T10814] Buffer I/O error on dev nbd0, logical block 2, async page read [ 331.889960][T10814] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 331.900346][T10814] Buffer I/O error on dev nbd0, logical block 3, async page read [ 331.908451][T10814] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 331.918291][T10814] Buffer I/O error on dev nbd0, logical block 0, async page read [ 331.927208][T10814] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 331.937126][T10814] Buffer I/O error on dev nbd0, logical block 1, async page read [ 331.945273][T10814] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 331.954965][T10814] Buffer I/O error on dev nbd0, logical block 2, async page read [ 331.963309][T10814] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 331.973062][T10814] Buffer I/O error on dev nbd0, logical block 3, async page read [ 331.982410][T10814] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 331.992007][T10814] Buffer I/O error on dev nbd0, logical block 0, async page read [ 332.000077][T10814] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 332.009705][T10814] Buffer I/O error on dev nbd0, logical block 1, async page read [ 332.020068][T10814] ldm_validate_partition_table(): Disk read failed. [ 332.027827][T10814] Dev nbd0: unable to read RDB block 0 [ 332.034680][T10814] nbd0: unable to read partition table [ 332.170188][T10827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1473'. [ 332.546981][ T1215] usb 4-1: USB disconnect, device number 3 [ 332.840828][T10847] tmpfs: Bad value for 'mpol' [ 332.846794][T10847] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.1479'. [ 332.856718][T10847] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 332.874121][T10849] tmpfs: Bad value for 'mpol' [ 333.024767][T10858] netlink: 'syz.3.1482': attribute type 83 has an invalid length. [ 333.082016][T10861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.094808][T10861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.314291][T10871] loop5: detected capacity change from 0 to 7 [ 333.321448][T10871] Dev loop5: unable to read RDB block 7 [ 333.327057][T10871] loop5: unable to read partition table [ 333.333391][T10871] loop5: partition table beyond EOD, truncated [ 333.351566][T10871] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 333.718954][ T1215] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 333.872287][ T1215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.885020][ T1215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.896989][ T1215] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 333.907001][ T1215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.930167][ T1215] usb 4-1: config 0 descriptor?? [ 334.142180][T10880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.153216][T10880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.366398][ T1215] arvo 0003:1E7D:30D4.000B: item fetching failed at offset 5/7 [ 334.375467][ T1215] arvo 0003:1E7D:30D4.000B: parse failed [ 334.381572][ T1215] arvo 0003:1E7D:30D4.000B: probe with driver arvo failed with error -22 [ 334.567172][T10896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.576965][T10880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.585997][T10896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.594650][T10880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.616618][ T5897] usb 4-1: USB disconnect, device number 4 [ 334.769426][T10903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1494'. [ 334.944103][T10903] 8021q: VLANs not supported on syzkaller1 [ 334.967166][T10906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.968904][ T5897] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 334.979223][T10906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.996034][T10906] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1495'. [ 335.008482][T10906] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1495'. [ 335.130981][ T5897] usb 4-1: config 128 has an invalid interface number: 148 but max is 0 [ 335.140371][ T5897] usb 4-1: config 128 has no interface number 0 [ 335.146662][ T5897] usb 4-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 335.156717][ T5897] usb 4-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 335.169588][ T5897] usb 4-1: config 128 interface 148 has no altsetting 0 [ 335.179350][ T5897] usb 4-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 335.188425][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.196461][ T5897] usb 4-1: Product: syz [ 335.200764][ T5897] usb 4-1: Manufacturer: syz [ 335.205395][ T5897] usb 4-1: SerialNumber: syz [ 335.430743][ T5897] usb 4-1: USB disconnect, device number 5 [ 335.779054][ T5897] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 335.928878][ T5897] usb 4-1: Using ep0 maxpacket: 8 [ 335.935591][ T5897] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 335.943965][ T5897] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 335.953845][ T5897] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 335.963712][ T5897] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 9 [ 335.973861][ T5897] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 335.986990][ T5897] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 335.996134][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.212323][ T5897] usb 4-1: GET_CAPABILITIES returned 0 [ 336.217879][ T5897] usbtmc 4-1:16.0: can't read capabilities [ 336.416074][T10900] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 336.432009][ T1215] usb 4-1: USB disconnect, device number 6 [ 336.662716][T10919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.671779][T10919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.987766][ T50] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 337.947949][T10927] x_tables: duplicate underflow at hook 1 [ 338.418987][ T1215] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 338.578942][ T1215] usb 4-1: Using ep0 maxpacket: 32 [ 338.586482][ T1215] usb 4-1: config 0 interface 0 has no altsetting 0 [ 338.595751][ T1215] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 338.604944][ T1215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.613029][ T1215] usb 4-1: Product: syz [ 338.617348][ T1215] usb 4-1: Manufacturer: syz [ 338.622196][ T1215] usb 4-1: SerialNumber: syz [ 338.629677][ T1215] usb 4-1: config 0 descriptor?? [ 338.839742][T10934] sctp: [Deprecated]: syz.3.1505 (pid 10934) Use of int in maxseg socket option. [ 338.839742][T10934] Use struct sctp_assoc_value instead [ 339.060362][T10934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.082642][T10934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.094451][ T1215] gs_usb 4-1:0.0: Configuring for 242 interfaces [ 339.296052][ T1215] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 339.305018][ T1215] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 339.500314][ T1215] usb 4-1: USB disconnect, device number 7 [ 339.625640][ T54] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 339.667058][ T54] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 339.829520][T10964] fido_id[10964]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 340.258730][T10982] cgroup: name respecified [ 340.360541][ T5877] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 340.518883][ T5877] usb 4-1: Using ep0 maxpacket: 32 [ 340.531060][ T5877] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 340.539849][ T5877] usb 4-1: config 0 has no interface number 0 [ 340.545964][ T5877] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 340.557282][ T5877] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 340.569052][ T5877] usb 4-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 340.580434][ T5877] usb 4-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 340.590740][ T5877] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 340.608169][ T5877] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 340.617416][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.625570][ T5877] usb 4-1: Product: syz [ 340.629834][ T5877] usb 4-1: Manufacturer: syz [ 340.634442][ T5877] usb 4-1: SerialNumber: syz [ 340.642261][ T5877] usb 4-1: config 0 descriptor?? [ 340.648075][T10980] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 340.660916][ T5877] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input39 [ 340.671669][ T5184] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 340.685822][ C0] bcm5974 4-1:0.119: trackpad urb failed: -1 [ 340.866486][ T5877] usb 4-1: USB disconnect, device number 8 [ 341.307126][T10995] support for the xor transformation has been removed. [ 341.466161][T11007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.477303][T11007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.790617][T11015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1529'. [ 341.801941][T11015] netlink: 'syz.3.1529': attribute type 23 has an invalid length. [ 342.312417][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 342.468895][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 342.478959][ T9] usb 4-1: config 0 has an invalid interface number: 163 but max is 0 [ 342.487132][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.498384][ T9] usb 4-1: config 0 has no interface number 0 [ 342.504561][ T9] usb 4-1: config 0 interface 163 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 342.515509][ T9] usb 4-1: config 0 interface 163 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 342.526522][ T9] usb 4-1: config 0 interface 163 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 342.545541][ T9] usb 4-1: New USB device found, idVendor=0586, idProduct=0102, bcdDevice=39.b6 [ 342.554833][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.562908][ T9] usb 4-1: Product: syz [ 342.567076][ T9] usb 4-1: Manufacturer: syz [ 342.571734][ T9] usb 4-1: SerialNumber: syz [ 342.581645][ T9] usb 4-1: config 0 descriptor?? [ 342.590780][ T9] HFC-S_USB 4-1:0.163: probe with driver HFC-S_USB failed with error -5 [ 342.794621][ T5897] usb 4-1: USB disconnect, device number 9 [ 342.903078][T11053] loop5: detected capacity change from 0 to 7 [ 342.911606][T11053] Dev loop5: unable to read RDB block 7 [ 342.917338][T11053] loop5: unable to read partition table [ 342.926406][T11053] loop5: partition table beyond EOD, truncated [ 342.934069][T11053] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 343.176803][T11062] ieee802154 phy0 wpan0: encryption failed: -22 [ 343.187237][T11062] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1537'. [ 343.517067][ T5897] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 343.524928][ T5897] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 343.532455][ T5897] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 343.544741][ T5897] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 343.552242][ T5897] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 343.560138][ T5897] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 343.567587][ T5897] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 343.575186][ T5897] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 343.583166][ T5897] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 343.605432][ T5897] hid-generic 0000:0000:0000.000D: hidraw0: HID v5c0000.00 Device [syz1] on [ 343.712014][T11085] loop5: detected capacity change from 0 to 7 [ 343.719903][T11085] Dev loop5: unable to read RDB block 7 [ 343.726489][T11085] loop5: unable to read partition table [ 343.735349][T11085] loop5: partition table beyond EOD, truncated [ 343.742210][T11085] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 343.750031][T11080] fido_id[11080]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 343.897701][T11089] cgroup: Invalid name [ 344.177930][T11101] netlink: 'syz.1.1549': attribute type 29 has an invalid length. [ 344.197210][T11101] netlink: 'syz.1.1549': attribute type 29 has an invalid length. [ 344.231034][T11101] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1549'. [ 344.787362][T11117] loop5: detected capacity change from 0 to 7 [ 344.796344][T11117] Dev loop5: unable to read RDB block 7 [ 344.802619][T11117] loop5: unable to read partition table [ 344.809084][T11117] loop5: partition table beyond EOD, truncated [ 344.815521][T11117] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 344.880916][ T5928] iguanair 5-1:0.255: failed to get version [ 344.893818][ T5928] iguanair 5-1:0.255: probe with driver iguanair failed with error -110 [ 344.911931][ T5928] usb 5-1: USB disconnect, device number 58 [ 344.962693][T11119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.989161][T11119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.011830][T11119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.022803][T11119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.115486][T11121] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 345.192100][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1556'. [ 345.242124][ T5928] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 345.412215][ T5928] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 345.421389][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.429729][ T5928] usb 5-1: Product: syz [ 345.434456][ T5928] usb 5-1: Manufacturer: syz [ 345.439327][ T5928] usb 5-1: SerialNumber: syz [ 345.450706][ T5928] hub 5-1:24.0: bad descriptor, ignoring hub [ 345.456716][ T5928] hub 5-1:24.0: probe with driver hub failed with error -5 [ 345.488945][ T5927] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 345.639001][ T5927] usb 4-1: Using ep0 maxpacket: 16 [ 345.646087][ T5927] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 345.655178][ T5927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.659674][T11135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.674934][T11135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.676843][ T5927] usb 4-1: config 0 has no interface number 0 [ 345.691573][ T5927] usb 4-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 345.703549][ T5927] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 345.715066][ T5927] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 345.726246][ T5927] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 345.736178][ T5927] usb 4-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 345.749510][ T5927] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 345.758552][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.769675][ T5927] usb 4-1: config 0 descriptor?? [ 345.775569][T11124] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 345.786589][ T5927] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 345.992103][ T5877] usb 4-1: USB disconnect, device number 10 [ 346.093619][T11140] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1562'. [ 346.103172][T11140] Unknown options in mask b7f2 [ 346.134273][T11140] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1562'. [ 346.146422][T11140] Unknown options in mask b7f2 [ 346.201895][T11147] loop5: detected capacity change from 0 to 7 [ 346.210685][ T6612] Dev loop5: unable to read RDB block 7 [ 346.216273][ T6612] loop5: unable to read partition table [ 346.222626][ T6612] loop5: partition table beyond EOD, truncated [ 346.239069][T11147] Dev loop5: unable to read RDB block 7 [ 346.244669][T11147] loop5: unable to read partition table [ 346.265387][T11147] loop5: partition table beyond EOD, truncated [ 346.273516][T11147] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 346.395998][T11153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.405046][T11153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.419104][T11155] netlink: 'syz.1.1566': attribute type 10 has an invalid length. [ 346.429224][T11155] hsr0: entered promiscuous mode [ 346.447573][T11155] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 346.459277][T11155] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 346.473838][T11155] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 346.551596][T11161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.634419][T11163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.651079][T11163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.853308][T11178] netlink: 'syz.3.1574': attribute type 16 has an invalid length. [ 346.934762][T11180] xt_l2tp: v2 tid > 0xffff: 2031748 [ 346.965891][T11182] netlink: 620 bytes leftover after parsing attributes in process `syz.0.1576'. [ 347.024716][T11180] /dev/nullb0: Can't open blockdev [ 347.439095][T11203] netlink: 'syz.1.1582': attribute type 58 has an invalid length. [ 347.506500][T11208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.515229][T11207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.517122][T11208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.548512][T11207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.707628][T11216] netlink: 620 bytes leftover after parsing attributes in process `syz.4.1585'. [ 348.262563][T11227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.279595][T11227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.397391][T11234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.409472][T11234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.852318][T11237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.863628][T11237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.878908][ T5149] Bluetooth: hci4: command 0x0406 tx timeout [ 348.988437][T11241] netlink: 620 bytes leftover after parsing attributes in process `syz.4.1594'. [ 349.068258][T11243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.078774][T11243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.516554][T11248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1597'. [ 349.619288][T11250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.639325][T11250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.677992][T11253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.696197][T11253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.479480][ T5928] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 350.520974][ T5928] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 350.532613][ T5928] dib0700: firmware download failed at 7 with -22 [ 350.868931][ T5928] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 351.020503][ T5928] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 351.029062][ T5928] usb 4-1: config 150 has no interface number 0 [ 351.035324][ T5928] usb 4-1: config 150 interface 204 has no altsetting 0 [ 351.042475][ T5928] usb 4-1: config 150 interface 1 has no altsetting 0 [ 351.051158][ T5928] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 351.060294][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.068324][ T5928] usb 4-1: Product: syz [ 351.072540][ T5928] usb 4-1: Manufacturer: syz [ 351.077137][ T5928] usb 4-1: SerialNumber: syz [ 351.289066][ T5928] xr_serial 4-1:150.204: xr_serial converter detected [ 351.305660][ T5928] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 351.312442][ T5928] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 351.325478][ T5928] usb 4-1: USB disconnect, device number 11 [ 351.334831][ T5928] xr_serial 4-1:150.204: device disconnected [ 351.591869][T11269] loop5: detected capacity change from 0 to 7 [ 351.599305][T11269] Dev loop5: unable to read RDB block 7 [ 351.604922][T11269] loop5: unable to read partition table [ 351.611966][T11269] loop5: partition table beyond EOD, truncated [ 351.618137][T11269] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 351.734864][ T50] Bluetooth: hci4: unexpected event 0x03 length: 33 > 11 [ 352.158893][ T54] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 352.325277][ T54] usb 4-1: config 1 has an invalid interface number: 188 but max is 0 [ 352.335407][ T54] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.346063][ T54] usb 4-1: config 1 has no interface number 0 [ 352.353883][ T54] usb 4-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 352.367574][ T54] usb 4-1: config 1 interface 188 has no altsetting 0 [ 352.378766][ T54] usb 4-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.6b [ 352.388390][ T54] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.396912][ T54] usb 4-1: Product: syz [ 352.403785][ T54] usb 4-1: Manufacturer: syz [ 352.408476][ T54] usb 4-1: SerialNumber: syz [ 352.693479][T11279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.702490][T11279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.779663][ T54] usb 4-1: unknown interface protocol 0xc1, assuming v1 [ 352.786650][ T54] usb 4-1: 188:0 : does not exist [ 352.882621][ T54] usb 4-1: USB disconnect, device number 12 [ 352.924072][ T6478] udevd[6478]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.188/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 353.213409][T11296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1611'. [ 353.235283][T11298] 9pnet_virtio: no channels available for device syz [ 353.380568][T11302] loop5: detected capacity change from 0 to 7 [ 353.403314][T11302] Dev loop5: unable to read RDB block 7 [ 353.428309][T11302] loop5: unable to read partition table [ 353.449993][T11302] loop5: partition table beyond EOD, truncated [ 353.460807][T11302] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 353.664474][T11315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.679130][T11315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.470296][T11324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.485457][T11324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.119024][ T5877] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 355.281236][ T5877] usb 4-1: config index 0 descriptor too short (expected 917, got 766) [ 355.294632][ T5877] usb 4-1: config 0 has an invalid interface number: 26 but max is 0 [ 355.308671][ T5877] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 355.319780][ T5877] usb 4-1: config 0 has an invalid descriptor of length 202, skipping remainder of the config [ 355.347681][ T5877] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 355.356945][ T5877] usb 4-1: config 0 has no interface number 0 [ 355.363505][ T5877] usb 4-1: config 0 has no interface number 1 [ 355.370097][ T5877] usb 4-1: config 0 interface 26 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 355.381268][ T5877] usb 4-1: config 0 interface 26 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 355.398868][ T5877] usb 4-1: config 0 interface 26 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 355.414153][ T5877] usb 4-1: config 0 interface 26 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 355.427357][ T5877] usb 4-1: config 0 interface 26 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 355.444363][ T5877] usb 4-1: config 0 interface 26 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 355.459274][ T5877] usb 4-1: too many endpoints for config 0 interface 88 altsetting 252: 179, using maximum allowed: 30 [ 355.470971][ T5877] usb 4-1: config 0 interface 88 altsetting 252 has an invalid descriptor for endpoint zero, skipping [ 355.482603][ T5877] usb 4-1: config 0 interface 88 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 179 [ 355.496484][ T5877] usb 4-1: config 0 interface 88 has no altsetting 0 [ 355.505799][ T5877] usb 4-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice=bc.29 [ 355.515230][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.531798][ T5877] usb 4-1: Product: syz [ 355.536297][ T5877] usb 4-1: Manufacturer: syz [ 355.541318][ T5877] usb 4-1: SerialNumber: syz [ 355.548600][ T5877] usb 4-1: config 0 descriptor?? [ 355.807351][T11344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.825363][T11344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.838476][T11344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.847596][T11344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.863060][T11344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.875397][T11344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.884635][T11344] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 356.463689][T11347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.484102][T11347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.942946][T11361] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1632'. [ 357.351287][ T5877] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 357.373555][ T5877] snd-usb-audio 4-1:0.26: probe with driver snd-usb-audio failed with error -2 [ 357.407265][ T5877] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 357.541330][ T5877] snd-usb-audio 4-1:0.88: probe with driver snd-usb-audio failed with error -2 [ 357.565804][ T5877] usb 4-1: USB disconnect, device number 13 [ 357.623863][ T6478] udevd[6478]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 357.654966][T11374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.697975][T11374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.882482][ T29] kauditd_printk_skb: 301 callbacks suppressed [ 357.882501][ T29] audit: type=1326 audit(2000000487.964:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11381 comm="syz.3.1639" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f26acf9c629 code=0x0 [ 358.321766][T11390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1640'. [ 358.338597][T11390] 9p: Unknown access argument Š: -22 [ 359.009311][ T50] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 359.738874][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 359.908925][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 359.916669][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 359.924948][ T9] usb 4-1: can't read configurations, error -61 [ 360.058902][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 360.228927][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 360.240877][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 360.253243][ T9] usb 4-1: can't read configurations, error -61 [ 360.266438][ T9] usb usb4-port1: attempt power cycle [ 360.353349][T11440] could not allocate digest TFM handle cryptd(blake2b-160) [ 360.415916][T11449] netlink: 'syz.1.1652': attribute type 21 has an invalid length. [ 360.423885][T11449] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1652'. [ 360.433868][T11449] netlink: 'syz.1.1652': attribute type 5 has an invalid length. [ 360.441922][T11449] netlink: 'syz.1.1652': attribute type 6 has an invalid length. [ 360.450066][T11449] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1652'. [ 360.506211][T11451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.517202][T11451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.531624][T11451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.541728][T11451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.621106][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 360.659464][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 360.671184][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 360.678759][ T9] usb 4-1: can't read configurations, error -61 [ 360.849643][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 360.869553][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 360.877349][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 360.886615][ T9] usb 4-1: can't read configurations, error -61 [ 360.893576][ T9] usb usb4-port1: unable to enumerate USB device [ 361.117892][T11455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.127925][T11455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.141558][T11455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.150609][T11455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.918015][T11479] loop5: detected capacity change from 0 to 7 [ 362.925807][ T6478] Dev loop5: unable to read RDB block 7 [ 362.932457][ T6478] loop5: unable to read partition table [ 362.938317][ T6478] loop5: partition table beyond EOD, truncated [ 362.953883][T11479] Dev loop5: unable to read RDB block 7 [ 362.969522][T11479] loop5: unable to read partition table [ 362.986053][T11479] loop5: partition table beyond EOD, truncated [ 363.006083][T11479] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 363.147446][T11485] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1664'. [ 364.036433][T11510] loop5: detected capacity change from 0 to 7 [ 364.060562][T11510] Dev loop5: unable to read RDB block 7 [ 364.066351][T11510] loop5: unable to read partition table [ 364.072811][T11510] loop5: partition table beyond EOD, truncated [ 364.082649][T11510] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 364.188856][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 364.341589][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 364.350237][ T9] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 364.363571][ T9] usb 4-1: config 2 has no interface number 0 [ 364.376390][ T9] usb 4-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 364.396269][ T9] usb 4-1: config 2 interface 88 has no altsetting 0 [ 364.415144][ T9] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 364.431652][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.448225][ T9] usb 4-1: Product: syz [ 364.460434][ T9] usb 4-1: Manufacturer: syz [ 364.469531][ T9] usb 4-1: SerialNumber: syz [ 364.485512][T11506] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 364.708649][T11505] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 365.006810][ T9] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 365.017762][ T9] asix 4-1:2.88: probe with driver asix failed with error -71 [ 365.116785][ T9] usb 4-1: USB disconnect, device number 18 [ 365.301580][T11526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1678'. [ 365.362929][T11528] netlink: 'syz.3.1678': attribute type 10 has an invalid length. [ 366.413806][T11540] syzkaller1: entered promiscuous mode [ 366.419377][T11540] syzkaller1: entered allmulticast mode [ 366.450169][T11540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.469515][T11540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.479876][T11540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.495265][T11540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.508435][T11540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.518596][T11540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.111680][T11547] syzkaller1: left promiscuous mode [ 367.116922][T11547] syzkaller1: left allmulticast mode [ 367.207706][ T5149] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 367.218139][ T5149] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 367.227562][ T5149] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 367.236325][ T5149] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 367.244280][ T5149] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 367.657765][T11548] chnl_net:caif_netlink_parms(): no params data found [ 367.830580][T11570] netlink: 'syz.1.1688': attribute type 13 has an invalid length. [ 367.950877][T11579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1691'. [ 367.988286][ T87] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.030893][T11548] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.038208][T11548] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.045552][T11548] bridge_slave_0: entered allmulticast mode [ 368.050106][ T54] usb 5-1: USB disconnect, device number 59 [ 368.056090][T11548] bridge_slave_0: entered promiscuous mode [ 368.122190][ T87] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.175015][T11548] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.201556][T11548] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.214751][T11583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.219763][T11548] bridge_slave_1: entered allmulticast mode [ 368.233244][T11548] bridge_slave_1: entered promiscuous mode [ 368.234229][T11583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.272370][ T87] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.313442][T11548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.340740][ T87] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.363161][T11548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.419098][T11548] team0: Port device team_slave_0 added [ 368.432939][T11548] team0: Port device team_slave_1 added [ 368.482884][T11548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.490429][T11548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.516950][T11548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.531000][T11548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.537955][T11548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.564173][ T30] INFO: task syz.2.711:8254 blocked for more than 143 seconds. [ 368.571795][T11548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 368.571806][ T30] Tainted: G L syzkaller #0 [ 368.571819][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 368.598036][ T30] task:syz.2.711 state:D stack:25152 pid:8254 tgid:8254 ppid:5829 task_flags:0x400040 flags:0x00080002 [ 368.610926][ T30] Call Trace: [ 368.614228][ T30] [ 368.617177][ T30] __schedule+0x1585/0x5340 [ 368.622047][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 368.627019][ T30] ? __pfx___schedule+0x10/0x10 [ 368.632204][ T30] ? schedule+0x90/0x360 [ 368.636469][ T30] schedule+0x164/0x360 [ 368.641218][ T30] schedule_timeout+0xc3/0x2c0 [ 368.646011][ T30] ? finish_task_switch+0x240/0x920 [ 368.652639][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 368.668932][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 368.674349][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 368.708902][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 368.714157][ T30] ? wait_for_completion+0x274/0x5e0 [ 368.722324][ T30] wait_for_completion+0x2cc/0x5e0 [ 368.727498][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 368.733656][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 368.738707][ T30] restrict_one_thread_callback+0x320/0x570 [ 368.745134][ T30] task_work_run+0x1d9/0x270 [ 368.750165][ T30] ? __pfx_task_work_run+0x10/0x10 [ 368.755380][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 368.769176][ T30] get_signal+0x11eb/0x1330 [ 368.773733][ T30] ? __free_object+0x442/0x5e0 [ 368.778521][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 368.823532][ T30] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 368.848865][ T30] arch_do_signal_or_restart+0xbc/0x830 [ 368.849368][ T5927] usb 2-1: USB disconnect, device number 29 [ 368.854462][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 368.883060][ T30] ? futex_wait_restart+0x1f5/0x470 [ 368.888340][ T30] exit_to_user_mode_loop+0x86/0x480 [ 368.906659][ T30] ? rcu_is_watching+0x15/0xb0 [ 368.919081][ T30] do_syscall_64+0x32d/0xf80 [ 368.923721][ T30] ? trace_irq_disable+0x3b/0x150 [ 368.935193][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.941785][ T30] ? clear_bhb_loop+0x40/0x90 [ 368.946489][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.952689][ T30] RIP: 0033:0x7f04ccf9c629 [ 368.957096][ T30] RSP: 002b:00007fff0e268058 EFLAGS: 00000246 ORIG_RAX: 00000000000000db [ 368.966068][ T30] RAX: fffffffffffffdfc RBX: 0000000000033b64 RCX: 00007f04ccf9c629 [ 368.974280][ T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f04cd21609c [ 368.982359][ T30] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 368.990389][ T30] R10: 00007fff0e268160 R11: 0000000000000246 R12: 00007fff0e268180 [ 368.998360][ T30] R13: 00007f04cd21609c R14: 0000000000033b96 R15: 00007fff0e268160 [ 369.006472][ T30] [ 369.009698][ T30] INFO: task syz.2.711:8255 blocked for more than 143 seconds. [ 369.017254][ T30] Tainted: G L syzkaller #0 [ 369.023980][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 369.032702][ T30] task:syz.2.711 state:D stack:25976 pid:8255 tgid:8254 ppid:5829 task_flags:0x400140 flags:0x00080006 [ 369.044882][ T30] Call Trace: [ 369.048161][ T30] [ 369.051303][ T30] __schedule+0x1585/0x5340 [ 369.055845][ T30] ? register_lock_class+0x31/0x2e0 [ 369.061170][ T30] ? __pfx___schedule+0x10/0x10 [ 369.066054][ T30] ? schedule+0x90/0x360 [ 369.070362][ T30] schedule+0x164/0x360 [ 369.074549][ T30] schedule_timeout+0xc3/0x2c0 [ 369.079346][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 369.084370][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 369.089779][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 369.094813][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 369.100082][ T30] ? wait_for_completion+0x274/0x5e0 [ 369.105378][ T30] wait_for_completion+0x2cc/0x5e0 [ 369.110550][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 369.116203][ T30] landlock_restrict_sibling_threads+0xe16/0x1190 [ 369.122681][ T30] ? landlock_restrict_sibling_threads+0x261/0x1190 [ 369.129326][ T30] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 369.136206][ T30] ? landlock_put_ruleset+0x10/0xb0 [ 369.141541][ T30] __se_sys_landlock_restrict_self+0x540/0x810 [ 369.147715][ T30] do_syscall_64+0x14d/0xf80 [ 369.152380][ T30] ? trace_irq_disable+0x3b/0x150 [ 369.157414][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.163691][ T30] ? clear_bhb_loop+0x40/0x90 [ 369.168384][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.174335][ T30] RIP: 0033:0x7f04ccf9c629 [ 369.178763][ T30] RSP: 002b:00007f04cdefd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 369.187470][ T30] RAX: ffffffffffffffda RBX: 00007f04cd215fa0 RCX: 00007f04ccf9c629 [ 369.195530][ T30] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000000004 [ 369.203692][ T30] RBP: 00007f04cd032b39 R08: 0000000000000000 R09: 0000000000000000 [ 369.211732][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.219756][ T30] R13: 00007f04cd216038 R14: 00007f04cd215fa0 R15: 00007fff0e267ef8 [ 369.227742][ T30] [ 369.230835][ T30] INFO: task syz.2.711:8257 blocked for more than 144 seconds. [ 369.238728][ T30] Tainted: G L syzkaller #0 [ 369.269052][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 369.277846][ T30] task:syz.2.711 state:D stack:25640 pid:8257 tgid:8254 ppid:5829 task_flags:0x400140 flags:0x00080006 [ 369.290049][ T5149] Bluetooth: hci5: command tx timeout [ 369.297050][ T30] Call Trace: [ 369.300633][ T30] [ 369.303588][ T30] __schedule+0x1585/0x5340 [ 369.308136][ T30] ? rcu_is_watching+0x15/0xb0 [ 369.313579][ T30] ? register_lock_class+0x31/0x2e0 [ 369.319002][ T30] ? __pfx___schedule+0x10/0x10 [ 369.323880][ T30] ? schedule+0x90/0x360 [ 369.328143][ T30] schedule+0x164/0x360 [ 369.334407][ T30] schedule_timeout+0xc3/0x2c0 [ 369.339453][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 369.344492][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 369.350382][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 369.355428][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 369.361224][ T30] ? wait_for_completion+0x274/0x5e0 [ 369.366532][ T30] wait_for_completion+0x2cc/0x5e0 [ 369.373900][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 369.379834][ T30] landlock_restrict_sibling_threads+0xe16/0x1190 [ 369.386272][ T30] ? landlock_restrict_sibling_threads+0x261/0x1190 [ 369.393398][ T30] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 369.400567][ T30] ? landlock_put_ruleset+0x10/0xb0 [ 369.405781][ T30] __se_sys_landlock_restrict_self+0x540/0x810 [ 369.412481][ T30] do_syscall_64+0x14d/0xf80 [ 369.417169][ T30] ? trace_irq_disable+0x3b/0x150 [ 369.422659][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.428742][ T30] ? clear_bhb_loop+0x40/0x90 [ 369.433759][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.441407][ T30] RIP: 0033:0x7f04ccf9c629 [ 369.445834][ T30] RSP: 002b:00007f04cdedc028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 369.458808][ T30] RAX: ffffffffffffffda RBX: 00007f04cd216090 RCX: 00007f04ccf9c629 [ 369.466795][ T30] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000000004 [ 369.499026][ T30] RBP: 00007f04cd032b39 R08: 0000000000000000 R09: 0000000000000000 [ 369.507052][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.528949][ T30] R13: 00007f04cd216128 R14: 00007f04cd216090 R15: 00007fff0e267ef8 [ 369.536976][ T30] [ 369.550964][ T30] INFO: task syz.2.711:8261 blocked for more than 144 seconds. [ 369.558533][ T30] Tainted: G L syzkaller #0 [ 369.590617][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 369.609192][ T30] task:syz.2.711 state:D stack:28832 pid:8261 tgid:8254 ppid:5829 task_flags:0x400040 flags:0x00080002 [ 369.628885][ T30] Call Trace: [ 369.632202][ T30] [ 369.635144][ T30] __schedule+0x1585/0x5340 [ 369.649211][ T30] ? __schedule+0x159b/0x5340 [ 369.653929][ T30] ? __pfx___schedule+0x10/0x10 [ 369.679075][ T30] ? schedule+0x90/0x360 [ 369.683381][ T30] schedule+0x164/0x360 [ 369.687556][ T30] schedule_timeout+0xc3/0x2c0 [ 369.701900][ T30] ? futex_unqueue+0x22/0x240 [ 369.706621][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 369.728906][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 369.733988][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 369.739360][ T30] ? wait_for_completion+0x274/0x5e0 [ 369.744758][ T30] wait_for_completion+0x2cc/0x5e0 [ 369.750018][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 369.755670][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 369.760942][ T30] restrict_one_thread_callback+0x320/0x570 [ 369.766870][ T30] task_work_run+0x1d9/0x270 [ 369.771575][ T30] ? __pfx_task_work_run+0x10/0x10 [ 369.776695][ T30] ? __pfx_futex_wait+0x10/0x10 [ 369.781627][ T30] get_signal+0x11eb/0x1330 [ 369.786143][ T30] ? poll_select_finish+0x56b/0x630 [ 369.791404][ T30] ? do_futex+0x333/0x420 [ 369.795755][ T30] arch_do_signal_or_restart+0xbc/0x830 [ 369.801783][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 369.807974][ T30] exit_to_user_mode_loop+0x86/0x480 [ 369.813335][ T30] ? rcu_is_watching+0x15/0xb0 [ 369.818119][ T30] do_syscall_64+0x32d/0xf80 [ 369.822841][ T30] ? trace_irq_disable+0x3b/0x150 [ 369.827884][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.834037][ T30] ? clear_bhb_loop+0x40/0x90 [ 369.838726][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.850851][ T30] RIP: 0033:0x7f04ccf9c629 [ 369.855310][ T30] RSP: 002b:00007f04cdebb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 369.863824][ T30] RAX: fffffffffffffe00 RBX: 00007f04cd216188 RCX: 00007f04ccf9c629 [ 369.871861][ T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f04cd216188 [ 369.879946][ T30] RBP: 00007f04cd216180 R08: 0000000000000000 R09: 0000000000000000 [ 369.887930][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.896157][ T30] R13: 00007f04cd216218 R14: 00007fff0e267e10 R15: 00007fff0e267ef8 [ 369.904219][ T30] [ 369.907333][ T30] [ 369.907333][ T30] Showing all locks held in the system: [ 369.920677][ T30] 2 locks held by ksoftirqd/1/23: [ 369.925847][ T30] #0: ffff8880b853ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 369.935893][ T30] #1: ffff8880b8524588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 369.944853][ T30] 1 lock held by khungtaskd/30: [ 369.949768][ T30] #0: ffffffff8e9602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 369.959692][ T30] 6 locks held by kworker/u8:5/87: [ 369.964804][ T30] #0: ffff88801be8e948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x855/0x1650 [ 369.975199][ T30] #1: ffffc9000215fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x87c/0x1650 [ 369.985189][ T30] #2: ffffffff8fde1f30 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 369.994642][ T30] #3: ffff88807b0d20e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x117/0x3f0 [ 370.004729][ T30] #4: ffff88807b0d1250 (&devlink->lock_key#5){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x3f0 [ 370.015655][ T30] #5: ffffffff8fdf0d48 (rtnl_mutex){+.+.}-{4:4}, at: nsim_create+0x839/0x1100 [ 370.027898][ T30] 3 locks held by kworker/1:2/1215: [ 370.033218][ T30] #0: ffff88813ff47548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x855/0x1650 [ 370.043789][ T30] #1: ffffc90004c1fc40 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x87c/0x1650 [ 370.053558][ T30] #2: ffffffff8e966578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 370.064550][ T30] 2 locks held by dhcpcd/5494: [ 370.069386][ T30] #0: ffff8880267ef6f0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe4/0xe80 [ 370.079014][ T30] #1: ffffffff8fdf0d48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 370.087851][ T30] 2 locks held by getty/5589: [ 370.092611][ T30] #0: ffff888032ed90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 370.102445][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 370.112678][ T30] 1 lock held by syz.0.379/7139: [ 370.117616][ T30] #0: ffffffff8fdf0d48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 370.126713][ T30] 1 lock held by syz.1.377/7144: [ 370.131730][ T30] #0: ffffffff8fdf0d48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 370.140787][ T30] 4 locks held by kworker/u8:12/9085: [ 370.146155][ T30] #0: ffff88813fe04148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x855/0x1650 [ 370.169097][ T30] #1: ffffc9000619fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x87c/0x1650 [ 370.185372][ T30] #2: ffffffff8fdf0d48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 370.194936][ T30] #3: ffffffff8e966578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 370.206160][ T30] 1 lock held by syz.1.1570/11165: [ 370.211593][ T30] #0: ffffffff8fdf0d48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 370.220662][ T30] 2 locks held by syz-executor/11548: [ 370.226019][ T30] #0: ffffffff90358d58 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 370.235561][ T30] #1: ffffffff8fdf0d48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 370.244762][ T30] 1 lock held by syz.3.1694/11590: [ 370.249901][ T30] #0: ffffffff8fdf0d48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 370.258946][ T30] [ 370.266928][ T30] ============================================= [ 370.266928][ T30] [ 370.279197][ T30] NMI backtrace for cpu 0 [ 370.279215][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 370.279239][ T30] Tainted: [L]=SOFTLOCKUP [ 370.279245][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 370.279256][ T30] Call Trace: [ 370.279263][ T30] [ 370.279271][ T30] dump_stack_lvl+0xe8/0x150 [ 370.279299][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 370.279322][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 370.279346][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 370.279369][ T30] sys_info+0x135/0x170 [ 370.279387][ T30] watchdog+0xfd9/0x1030 [ 370.279413][ T30] ? watchdog+0x21a/0x1030 [ 370.279439][ T30] kthread+0x388/0x470 [ 370.279453][ T30] ? __pfx_watchdog+0x10/0x10 [ 370.279471][ T30] ? __pfx_kthread+0x10/0x10 [ 370.279486][ T30] ret_from_fork+0x51e/0xb90 [ 370.279506][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 370.279523][ T30] ? __switch_to+0xc7d/0x1450 [ 370.279542][ T30] ? __pfx_kthread+0x10/0x10 [ 370.279557][ T30] ret_from_fork_asm+0x1a/0x30 [ 370.279589][ T30] [ 370.279595][ T30] Sending NMI from CPU 0 to CPUs 1: [ 370.395592][ C1] NMI backtrace for cpu 1 [ 370.395611][ C1] CPU: 1 UID: 0 PID: 9089 Comm: kworker/u8:16 Tainted: G L syzkaller #0 PREEMPT(full) [ 370.395633][ C1] Tainted: [L]=SOFTLOCKUP [ 370.395639][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 370.395650][ C1] Workqueue: events_unbound toggle_allocation_gate [ 370.395674][ C1] RIP: 0010:__pick_eevdf+0x9e/0xc30 [ 370.395693][ C1] Code: 80 3c 28 00 74 08 4c 89 f7 e8 ae ac 96 00 4c 89 74 24 48 4c 8b 73 58 48 89 1c 24 4c 8d 7b 10 4c 89 f8 48 c1 e8 03 0f b6 04 28 <84> c0 0f 85 c2 0a 00 00 41 83 3f 01 75 2d 4d 85 f6 74 20 49 8d 5e [ 370.395706][ C1] RSP: 0018:ffffc90006207530 EFLAGS: 00000806 [ 370.395718][ C1] RAX: 0000000000000000 RBX: ffff8880b853ae40 RCX: 0000000000000002 [ 370.395729][ C1] RDX: ffffc900062079a0 RSI: 0000000000000001 RDI: ffff8880b853ae90 [ 370.395739][ C1] RBP: dffffc0000000000 R08: ffffffff9033c9b7 R09: 1ffffffff2067936 [ 370.395750][ C1] R10: dffffc0000000000 R11: fffffbfff2067937 R12: ffff88802972bd00 [ 370.395760][ C1] R13: ffff88801dad8090 R14: ffff888079910080 R15: ffff8880b853ae50 [ 370.395772][ C1] FS: 0000000000000000(0000) GS:ffff8881250ff000(0000) knlGS:0000000000000000 [ 370.395784][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 370.395795][ C1] CR2: 00007ffc97568158 CR3: 000000000e74c000 CR4: 00000000003526f0 [ 370.395809][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 370.395819][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 370.395829][ C1] Call Trace: [ 370.395836][ C1] [ 370.395849][ C1] pick_task_fair+0xcb/0x2a0 [ 370.395873][ C1] pick_next_task_fair+0x182/0x1710 [ 370.395900][ C1] ? update_load_avg+0xcc1/0x1ec0 [ 370.395935][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 370.395950][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 370.395973][ C1] __pick_next_task+0xe6/0x480 [ 370.395991][ C1] __schedule+0x799/0x5340 [ 370.396010][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 370.396037][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 370.396052][ C1] ? __pfx___schedule+0x10/0x10 [ 370.396076][ C1] ? schedule+0x90/0x360 [ 370.396096][ C1] schedule+0x164/0x360 [ 370.396116][ C1] toggle_allocation_gate+0x17c/0x290 [ 370.396132][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 370.396148][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 370.396168][ C1] ? process_one_work+0x87c/0x1650 [ 370.396186][ C1] ? process_one_work+0x87c/0x1650 [ 370.396202][ C1] process_one_work+0x949/0x1650 [ 370.396228][ C1] ? __pfx_process_one_work+0x10/0x10 [ 370.396244][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 370.396266][ C1] worker_thread+0xb46/0x1140 [ 370.396287][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 370.396313][ C1] kthread+0x388/0x470 [ 370.396327][ C1] ? __pfx_worker_thread+0x10/0x10 [ 370.396345][ C1] ? __pfx_kthread+0x10/0x10 [ 370.396360][ C1] ret_from_fork+0x51e/0xb90 [ 370.396379][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 370.396397][ C1] ? __switch_to+0xc7d/0x1450 [ 370.396415][ C1] ? __pfx_kthread+0x10/0x10 [ 370.396429][ C1] ret_from_fork_asm+0x1a/0x30 [ 370.396456][ C1] [ 370.396772][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 370.396790][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 370.396816][ T30] Tainted: [L]=SOFTLOCKUP [ 370.396824][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 370.396835][ T30] Call Trace: [ 370.396844][ T30] [ 370.396853][ T30] vpanic+0x56c/0xa60 [ 370.396880][ T30] ? __pfx___schedule+0x10/0x10 [ 370.396904][ T30] ? __pfx_vpanic+0x10/0x10 [ 370.396936][ T30] panic+0xc5/0xd0 [ 370.396959][ T30] ? __pfx_panic+0x10/0x10 [ 370.396984][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 370.397009][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 370.397034][ T30] watchdog+0x1023/0x1030 [ 370.397064][ T30] ? watchdog+0x21a/0x1030 [ 370.397094][ T30] kthread+0x388/0x470 [ 370.397112][ T30] ? __pfx_watchdog+0x10/0x10 [ 370.397135][ T30] ? __pfx_kthread+0x10/0x10 [ 370.397153][ T30] ret_from_fork+0x51e/0xb90 [ 370.397177][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 370.397198][ T30] ? __switch_to+0xc7d/0x1450 [ 370.397221][ T30] ? __pfx_kthread+0x10/0x10 [ 370.397240][ T30] ret_from_fork_asm+0x1a/0x30 [ 370.397277][ T30] [ 370.818675][ T30] Kernel Offset: disabled [ 370.822980][ T30] Rebooting in 86400 seconds..