last executing test programs: 24.140706786s ago: executing program 3 (id=2959): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = open(&(0x7f0000000280)='./file1\x00', 0x1cd142, 0x0) ftruncate(r7, 0x2008001) sendfile(r7, r7, 0x0, 0x5) ioctl$KVM_GET_STATS_FD_vm(r7, 0xaece) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x1c}}, 0x8050) r8 = socket$kcm(0x11, 0x3, 0x0) syz_usb_connect$uac1(0x2, 0xcf, &(0x7f00000010c0)=ANY=[@ANYBLOB="12011001000000206b1d01014000010203010902bd0003010110040904000000010100000a24010000000201020924030204030301080c24020106020201030004010924030405030504870624050340d90924030605010504020904010000010200000904010101010200000a2402015a04090147f308240201000408080905010900020000e60725010100ff7f0904020000010200000904020101010220000f24020201000400001a7dfbbda2f009240202050004000007240106fd01100905820910"], 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003080)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0xffffffff}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x1}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 20.671777729s ago: executing program 3 (id=2967): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet(0x2, 0x80000, 0xfffffffb) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000100)={'raw\x00', 0x2, [{}, {}]}, 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000007c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x2, 0x40800000000000, 0x800000000000000}}, [@algo_comp={0x0, 0x3, {{'deflate\x00'}, 0x0, "2e7e08b4aa0af67661a6aab8060ef55c5b8c181b56f38b569f98a9465916b86ce7876fe69c9729ed3f59c01e840904975a2772ce4ebfeb4a209f32c6126c6ff2bcbe632e37c440c1aeb184ff5de81db4587c3f09024c45c120fbb6f56c6ea2234cb13d553b65fc1646a39eb9f79ff32ab98f19283c5bc1ba108e4c30906135d98354974951fc40cd8caaa794b1dd9562bd99014aecb4de51b83cdbd015f2d27e37f81847ed56b5cbe2d6eb35286d4195c03f6e94bb2dce4df4bf93bfa788c705da4b59aee8c06980ed0633beb9ac4e0ccb8e26e0673d6ce48662bc477c9a075a9a82b0bbce4181ba9cbd42d49d449b15a432c535a5d4958dd397dbfaeba866e82461f2d9e84aa5af47e7f98827d38708b356ebe63120d362ce758cfd9bd3c5999de69c0182d69908dcf776b9d50a334d5d63d4f0d98486dcb5f57b3e1aad267320e25adc8a1eaf415266333742b3c20ae75b1db50ca55f17fd09743c9600381ef198544180791859af406865b36e31dc3e94e1c08cbfc404b34c5d65f835b75832705f06a049e136da12b9e9bf378f2f132166fb4113a0c9d1873513e60cc9cfaf6a81689c29f30ff64842014b33dc42022aab75b76612e8b8d152587cf84727c05fc6502e0a0af3a33a7c5fe7fc6340dee7cc1c2c3443990bd4b823ed4547c796e3d0a0afe80fa642ad9f56c1e2832b655d4409c11aa53849f90693a60d975c1da5c0d879ded68a2adc5554deb0edbe8542f2fdb5ad221c0e18d0a910b7d9bb1e8db31e949dea48237ba90b59f359fdd7607b78ad757c38cdddb3d41bca7497d84c26edd7599f48ffd2f628b95491c9e5fe3a44750091f1354bd31ae98187f189ef0fc8bf021cc0bda8c27a4b8c5d94ab09b3aa340bcfb8f15986c17b6cdb1964ae7b7d57b6ac035e736ae16ffccd1180a53eadc68b9402d50cd8cb552e2a4bed774f9dbf81d44e7a568793fc04c0224cef7384b4e1ea130bac3eaf6fee5629f33f80e6dbb37d588b568a4af7702300b7d98802abf0c41b82f06a0dc11dd6e79576301d186c01cf44b2686a0082a70461982ebc558d39c7e31e7eb5489360ba237ea5316077e5880f342e2e01e7a3589c8c397c06472cca4abd9bfddca5b5c80adff1dbbe1f2d0f2241d78a565fc3a549456e1b5c008171abe0c225a5604df37f871c49ba2e2f18f60fb15019b7df19ca9d82ccc16ce673e0dacde1d0203cb52bd8d8228e1bafd9d92fd3faee70893b4774d641e89364ea364aa65d4e1026fb7b470b3681ce14acaf68125bccafb9387d399e5401de9262f9d9b1858e9570eef3db81c9cc76cde76808441b7e183811a70b2c5b421e99d258ef921e943423b2baa030f3fdcd3b99537311f21da0ca95bed4000ca59fb830a4e8bc827faec9567017e0284c8d279e2d3bd92a44504ce908fb717130b835d3577ac64f76ca52576ee200cae5489d3010261fcae925d662e5cef45c97725f9e59618dab27480f63b863dc6886103bd004c71c83f940e694afd6fb1e1001b839e3db65c4d09d265a8919e51d036ba7c41f4a378307298cb351c491dd6460677811fca3575eb013fdbe8b75fbab97f7104f352fab91bedec2f81ed68ecfb138bef1aad8e3b1c82ba8c9fa936aded3db8865df550051a70efe5bf6c0b8acfd06e189623d2d2640479185a32676aea1279134ef016ad91f5f55ec2e1ff7ca5e6703323b232d9c060ac101b7d3ec5e5edf567b1b6adeaaf2c9cebb6e4a64ffcd852cf2da358d5ef9b92f43395258c352a316a30fc92b7f4dc049fbafc5a6b4e18ffcab06062e586e9b3a60589931f30507b02ade0dc25337ec9e46e266b4acd05ca8dc4fd58fb83f4ec9a265b5cf0f15cbeaf4e4ab851c4b48c73d406687594a2bbdc06fd4dda0d0287c0ae0f3148b12d1fdec4c45654678a287f2b7d63aaa3c328ae29d00801767e4af31f6f5f2544ae877ad402ba43f0109af89f8077c43d86242cdea320c514687e8a2eaf994adfdc05b00c9342f43746d75ed3715ef6a604486682705fa619e9a8e8678407be7db15fdf13ab356e4065a112f0770e7e39414076c02d1d28a15d58b2ec550ad127a3741320635119e26425136d7f8bb80c24915a12278b8efd1ed4516c7a5cc33137935950535013c17323668e28e533655b49cf0559458c1ef3bb4247d78911d82c8f705f0218547918043458db4dc508cd860a0bcfca2f776e9a73e76d56482e769b01bee41f32f83d50c9ea2725b6ec7456fd3b1672b34e5a2b9de1d69b21580e959f9999a192eedb931787c5224cdc1e52977b29bbc3099cf106af282bc82486d43b10268e9a5edcac97e25528d64b3e842d83bec52ed4f65c11366618d8c7ea86709ea6e2c4d37db36be9e080a966636a436658d05cc69cef78fd254185a112563d1a0ab0c24ed51eb521755a4db4e5427f994921207f803189ca5031b7fdba5633c9cad629169d8cea90553205f4a3829eb0beae7d9cace0b4cca42d78e5c4baff5f622c95ffdcf493cd67f51c939f40298d2335c4284a9b7da8e583df45de7e98cf2c06d78214528e2437442f08585fb33281ebe8b515381fa197a123b2fe3537b0a9ba794c045a51689dbd53107145b8a507c9fede9b21846f1fb35ae12dee97f9cdde678f42e9e68a3c41d94a47d955f00c8f287ca281a8911ae4629d5710f078574eff31c3716f2d0a72f8cdff0499287912029f4b66c2e34f462a2309edd2684c0089e3616a20279eebad8b83c68d7ddc80efc76b3e517b2b2931c676322f17bcbd47d6ff1c1ae660dff558d9c0801d120c274089d83e2480aaaeec4c502682539d11410a88d11a42146f3e11d724e6fa9ffa918517ab8a399011e1fa638f3203a2d5c473fbb4262b9ac38d3e3b4d6faf18468fa8c55c17c52662dde37e53d4c2817629c95d9bf4b763bd1096453eb5dc54b834dac74ee33f187bd27c6b701683abce4cea38958f3d4fad584458475f4c28a7982065b6cbb550fe8ab3daa61c052b9b71f201bfad544318b62aece3e13f59ed6b4a8531be135e19f5c9b838581850f84080d6ea73deefed2013511cc04286b65ddc4758dc8342a17f58f0c38d37bc1a4fe01550fa18f632ae8a0718e8eaff4ed40eff4c06b2c033bc211360271f6f6fcb5a72b6269d680540190dbd58c38fb6d4d7f5bb430229047c3d04e0a69bbc6af3fd11ca934d66f5dd7069e3d547827207ad2bbf37232aec59c48265dbc9bf636854e1018c0ad2f6754c4dc9d812507972b3ecf8e977b14be5d36b45482071571bae5df6d17212eb58205317acf5e301066b5327ec266f516776ca1ef99c056b45b1b5679415350d2f551b1c2eb501386b2d9ef539acb635620333a7b98bd228748cb4232eb0d1e49ddaed57c941c943d61d6faaa5312398f724c3ac1ff816dbf1bdc8a978f2425662558ceaca33f1161d78908872150292eb655b01b67acbc2caa82daff699d66312c51195db47368aa561748460bd63e7508d11f0e6b7528e91cde57988589c0a7b9577136ca637ec025cf303d10afff55c6119861497b2b18a464712c5c60af6f380d63d69c8ae4ba66ac00509e97789ffcb42d22fe5d165d361cd435e12c0b6602051f0425cb976cea6a66c2ca54c997cb77b5586955a37688eced359b97d0a25b65378675447c1d0f3dc72778c110f27b846e56b3a17340b8f4c6d7a0085ad734e9bb1098986a6e06d6d4f912437170782e44d2fd19ac5bc66e1c510d47033739d40a356c1c261c149e8dbf84523afd80c2eb21a5ac7e31d33a9545208fe442f4c53898864a05bb6c90cabd8816e14d2ddc5937e66023df0461e2fc5c1b26ad733bcaa4def1253f3206ef95547886116fd6b2d9af6e2a87ca71121d8b3c61a024d71032030a4bdd916ff939ce67291d433cddf3bcdae886ce93776e2b0e82018bd7de9d8ab5e108dc1af13a618677a4fe454536515d2ee2bbbcbca1e001c1613f6d43bbd2f24b574c2bdd3f61e468cd78380790fb1cc84d1415cccf994ba8cb28a74c429064c3f0f5e4a01e572cdf9473aa70a1413bf4bbef2be6fcfde71ee7f819c1c2cedac1ed1274e738094ecef7205b4778ab8fcfefbd16ee94a742aac63554ccc5f804b0d79a96fcb4cc2206616dee298c3d828ee002f30ca4e1b207bd03b13cbb80d5bce5e605b958ac16a65baf95b5d158dcfe61d7c2090c11d9e8d69fdf9f4588fae7d6b9f4b57dc7bf7247e1aeb6626200796e0b7538dba373c163c0445247f544ab8c5ec51b6530c4ccd4ed5f9810b471ca67b91b06895df4ce4e7512e88033ce3cbf10d61a99bf543d38563bf3464a46e18c8bb6195bd7c8b8a3f618a2faa9ba0885fa0402c7781e77ca325f7bae30fbdb6735a4c462c8218c2125ea6fd1f47added1d4553dd7f99a06eddc10896bebb7d68556711fc7e069b17a1d6800c2b25f65a68ef7b849476871b9c263cc01fe538f80ae6a9c96514b5d0fc405f6d4343fcb95923d9b9e871da753eeaac351b9b7a39c487cb984b9dc462c7a5749ed1b9a09d1dc91a8465f1a482417107f05cf41675d9addc5a6007eeda456aa64d6ac24b0437abbc1b4f834a6005e4b19c5e3455ae44d546c2c4cbf7ab1cebe4237f881d8e0d9834bd2dde704226ac65f8f374767ec7f40b3cf51506c09925f71f5ab92c36f784d98fa03f41fb2bcf49cee156ae4121f2d276b4e502b17421e0d2376f8614927a4c6ed45ed92779a9f15269d441d2f70c218e04dabf9ca243927fb87cd86dd72fdd92c9f23fcf5e02de2cacdd01ab8094b47eec019a2b46bb5e924b9fc4598347a27282f6ab9a5ce60dd26a5908b21624915b8655d7c788dfe10fb26b3c8424e7260aaecee22e0803d15b8a0c9010cf26f37204913c031d8b2d3d9adf8c701d64a523c52a31370c3846b6d9c5758fc804c6186c84d99d9c0333d6cb1ee128e9c1e5e5a92efe0e358de351dc3ab1081b2540645efa4a7fb5d1aaa9a10e0cef44418913e4cb2d6499457821a50d691f811a3d156f359b73f36367e6cdaf595c84814cb8539b70b5564ef74ffb591a04f90091eb698815e1daca14d2c8c82d6735d66f9a36272ce4602a8443d3b1de918acb56efe196c19a6bccf0e7971461a09813715252d0aeacfb3b5346f083e49289deb83b869840b4e1478311fae89d11829b2d73d3293af1673901a8d92d2c4f109ca27a3a3b99a2b2ffe1b78c72de02b619eb0a7afe200a26048e120a8ed27229e84aef2c3bef071978d5c6d567f9ad552204720ba5ff1ac42521ebf81747e1d82e6123296041d20d8c4572dbcf1fdd7e44895a8ef39f76c3d8c353bb0316ec0f938a4bfa5efffb4f95fa2795d9f30b2cf5df29d53970886a6206c6441c47d1760fdad5b0a92df40a0ee349db45aa86e89c9fa30714b7dde4fb53c4dae424320961dbadc04175b620fc9c6212465e51afb61ce16fb3e91ac58b6773071e76713d7c9934662dd349d0444e03ccf040ec2abe8883ce52d8e746d1c5e45b0d932894a44f6667599148d2f35aaeff1db9db17636e587ac8936c832b166468a929be045512e259d6daae12480c39186042bfca5c0b77d81462134ca4524a8bce45d60ed7a7efe4399ac24db884478ee3fbaaa1077a14e16b0a4e0af7a481a3d7137a4209a1f073a6d146d523b86d8bbd70cb287aa1e419d5fb9eb91a5eafcce481360110a00fb066ba2855a5e876bff8883ad3359e3919dc8c07fe20f0843325e9c3321f67e3ba123c8d13979fa0a5d18d65351b329fffe2e0392d51c4bd0e50d5728bafb40b28e1b154e018d21fe2bc0c0ef4ef47"}}]}, 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x10000000, 0x0, 0x32315559, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r7 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pread64(r7, &(0x7f00000003c0)=""/159, 0x9f, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bind$tipc(r3, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000000000000000000000000000004e2100400000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d00000000000800220003"], 0x148}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 16.213783076s ago: executing program 3 (id=2978): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xce) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) r4 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000200)) recvmsg(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000440)=""/20, 0x14}, {&(0x7f0000000480)=""/26, 0x1a}, {&(0x7f00000004c0)=""/158, 0x9e}], 0x4}, 0x60002000) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f00000001c0)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 15.441889028s ago: executing program 3 (id=2980): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x10001, 0x0) write$vga_arbiter(r2, &(0x7f0000000080)=@unlock_all, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x17, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.231562839s ago: executing program 1 (id=2989): socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9dc, 0x800) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x32) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$inet6(0x10, 0x3, 0x9) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x16, 0x0, 0x0, 0xfffffffc}]}, 0x10) sendto$inet6(r4, &(0x7f0000000440)="1c000000120005200c100000ec20244b6dae18e9d30049b20002000a", 0x1c, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfcf2, 0x40c0, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg$inet6(r4, &(0x7f0000000600)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0xe}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000180)="37c50b37f8de472d", 0x8}, {&(0x7f0000000240)="2da11f6fdfedf32354b4d2d733268a5e6f8411bf51ded83ed96866889e48ecca67c83013bdfdf88231916166f18ae92dca4d5fe76c8770f32985a67761577f7140cc03a65d0048bde13de2d9e86b5fd88ae2276e7ac2eb5bb7bfd6376497f6254d162e124b8ceab51c91dd2e0b801c9734edc659f2d86d354701fa18b4f76a30ea669438c15dd803149fd4db63418ef07df0369f584f5ac7e12a", 0x9a}], 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="1400000000000000290000004300000006ffed0000000000"], 0x18}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="ccf93ae0598093a37bd183b15deda041c14915972e7f0b28df68e1e640310ac68094b47b34db3b62103f1c57be0ce5026012c14be5375d1abbb1c38c67919c24c1a2b9a813b3f1a024f83d9fae1099bdc0b3a516c6085718d6a7bd191e2b605d5fe8e4ece2f9b400745bce4fdc1640af4eb0f974f0e6b3056d7da8ec431994d6032634ac13f6c573c86dcef7ac5ca79b4a303d7145826f68f371a71da2882d4d1aeef12f6860f51656aba88f7e4d6eb14927d5a0505638a570b4957fb8b1bd9ec7d3", 0xc2}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000000000000001", @ANYRES32=r6, @ANYBLOB="00000000ce38c9a145b39e97b1254db9abb469d4d6d54c8c85f7a91dc6a01f5b14462bfcf8e6c2fd0d01172c7cc43bd9"], 0x28}}], 0x2, 0x408d0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) r9 = socket(0x29, 0x2, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x0, 0xe}, {0x5, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r13 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r13, 0x40345410, &(0x7f0000000300)={{0x0, 0x1, 0xfffffffc, 0x1, 0x100}}) ioctl$SNDRV_TIMER_IOCTL_START(r13, 0x54a0) 10.984472701s ago: executing program 2 (id=2994): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000044c000000280a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380180000800c00018006000100f10300000800034000000001040000802c0000000e0a010200000000000000000a0000000900020073797a3100000000090001"], 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 10.737971573s ago: executing program 2 (id=2995): r0 = io_uring_setup(0x1b7b, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) dup(0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x240000c0}, 0x54) 10.348501406s ago: executing program 2 (id=2996): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x6) connect$unix(r1, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x8a880, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0xfffe) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000066194030000000905000100070000000500010007a3bb0000000000000000009027dc0994eef2cd32ef55671b5645b065eb0a76fc6ef644090034710cb639917776cfdb78bb265b41ddf168c22a"], 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0x4008041) sendmsg$kcm(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x3, 0xfffffe0001000001, 0xfa0d, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYRES8=r2], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) r6 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x4919, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000240), 0xfffffbff7ffffffb, 0x1222e2) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000280)={r9, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x7fffffffffffffff]}}) sendmsg$nl_route_sched(r0, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@deltfilter={0x24, 0x2d, 0x1, 0xfffffffe, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x9, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) 10.208002039s ago: executing program 1 (id=2997): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x6, 0xb, 0x0, 0x7ffffdbf}]}) r4 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000680)={r5, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020, 0x0, 0x0, 0x2], [0x0, 0x2, 0x1], [0x0, 0x0, 0xfffffffffefffff8, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3fb, 0x34325241, 0x0, [r6, 0x0, 0x0, r8], [0x2b8], [], [0x0, 0x0, 0x100000]}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f0000000440)={0x0, 0x3}) ioctl$DRM_IOCTL_PANTHOR_BO_SYNC(0xffffffffffffffff, 0xc010644f, &(0x7f00000002c0)={{0x18, 0x2, &(0x7f0000000300)=[{r8, 0x1, 0x3ff, 0x9}, {r7, 0x0, 0xc, 0x2}]}}) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000480)=ANY=[@ANYRES64], &(0x7f00000001c0)={0x1, 0x2, [0xf74, 0x4e0, 0xe46, 0xa20]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r2) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r9, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, r1, 0x0, 0xfffffffffffffffc, 0x1541}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x0) 8.218945064s ago: executing program 1 (id=2998): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}, 0x1, 0x0, 0x0, 0x2000}, 0x24048800) 6.942776523s ago: executing program 2 (id=3000): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x103802, 0x20) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x8010}}, 0xffffff20) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/143, 0x8f}], 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', &(0x7f0000000200)='syz0\x00', 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000004000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$inet6(0xa, 0xa, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x1e0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x84}}}, 0xb8}}, 0x40000) r4 = openat$cgroup_int(r2, &(0x7f0000000040)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0xfff) 6.267168501s ago: executing program 1 (id=3001): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000000206030000000000000000000000000705000100070000000900020073797a310000000014000780080013000000000008060000000000000000050002000000050004000100000011000300686173683a69702c6d61726b00000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xffffff0000000005, 0xfa11, 0xffffffff}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp6\x00') read$FUSE(r3, &(0x7f0000004100)={0x2020}, 0x2020) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xec}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) read$FUSE(r3, &(0x7f0000002640)={0x2020}, 0x10f) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r8, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 5.871453273s ago: executing program 4 (id=3004): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000044c000000400a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380180000800c00018006000100f10300000800034000000001040000802c0000000e0a010200000000000000000a0000000900020073797a3100000000090001"], 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5.81983468s ago: executing program 0 (id=3005): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0xffffff7f, 0x80000000, 0x34565348, 0x4, 0xc, [{0x9, 0x48256d1d}, {0x3, 0xb}, {0x3ff, 0x120f}, {0x4, 0x9}, {0xa, 0x6}, {0x2, 0x1}, {0x9, 0x9}, {0x3ff, 0x7}], 0xa, 0x3, 0x4, 0x2, 0x6}}) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x9a24, 0x800, 0x100, 0xfffffffe}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x22, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0xfffffffffffffe25, 0x0}, 0x0, 0x2003, 0x0, {0x3}}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)=@multiplanar_overlay={0xffffa190, 0xd, 0x4, 0x800, 0xfffffffd, {}, {0x4, 0xc, 0xa, 0xc, 0x8, 0x1, "26816561"}, 0x9, 0x3, {0x0}, 0x4}) io_uring_enter(r2, 0x1, 0x20, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_route(0x10, 0x3, 0x0) getpid() ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000800)={'macsec0\x00', @broadcast}) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) flock(0xffffffffffffffff, 0x4) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) getpid() r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_CAP_HYPERV_SYNIC2(r10, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_RUN(r10, 0xae80, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0xd8, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xff000000, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x8001, 0x5, 0x5, 0x2}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0xffffff00, 0x0, 0xffffff00], [0x0, 0x0, 0xff000000, 0x1ffffff01], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x34}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x3, 0x5, {0x2000012}}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x1, 0x4}, {0x0, 0x3, 0x4}, {0x4, 0x2, 0x2}, 0x7fff, 0x8000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xffffffffffffff82) 5.680221446s ago: executing program 4 (id=3006): socket(0x24, 0x6, 0x1000) r0 = io_uring_setup(0x1b7b, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100), 0x303040, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r3, 0x40096100, &(0x7f0000000580)={{&(0x7f0000000500)={'GENERAL\x00', {&(0x7f0000000440)=@adf_dec={@normal='NumberDcInstances\x00', {0xc4}, {&(0x7f0000000380)=@adf_hex={@normal='NumberDcInstances\x00', {0xd}, {&(0x7f00000002c0)=@adf_str={@normal='NumberDcInstances\x00', {"2c99b2322f746634f39291bb7ca5747a641aa0003953024b9f08d85555fb90ba308e228fc1f5a1e3aa0f64d7bb68a44ea9a8df58d79ad7f647572b5240a5a32a"}}}}}}}}}, 0x3}) r4 = dup(0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) setsockopt$MRT_DEL_MFC(r4, 0x0, 0xcd, &(0x7f0000000000)={@broadcast, @multicast2, 0x1, "5d52fa1ef9292ab9bf1f0c9480b51cbedb1efa4359b0950a2e73e491fa111d43", 0xff, 0x1, 0x1, 0x1}, 0x3c) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x400000000000004) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) writev(r7, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fed9df020000000008000300", @ANYRES32=r6, @ANYBLOB="0800220118030000"], 0x24}, 0x1, 0x0, 0x0, 0x240000c0}, 0x54) syz_usb_connect(0x5, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12011001d56af3409911aa687923010203010902124001010390fa0904680900ffffffeb5d9ade70f5facc34c39c5e484320dd2a15a3cc9a2106c6c10b4b1aea9d881fcf0db033c470ff2da89639b03556f65e3a38204d2113583077edd7cc9a62a1632cce9b1d4cc24a91d61d2f14a7cde3dc16ccd59047ddee8b12880224df2683b36e3a7593366e6e2e4760a025ea2f09535d8b604d0b7a1ff0b8e19c46486b0fe0befea352338f2c4d6673eea0441a761f1c"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) 5.316492061s ago: executing program 1 (id=3007): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000880)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x2, 0x8, 0x15, @dev={0xfe, 0x80, '\x00', 0x3e}, @ipv4={'\x00', '\xff\xff', @remote}, 0x7800, 0x20, 0x0, 0x1}}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xfe93, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r6, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRESDEC=0x0], 0x24}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880088f74803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000400)=ANY=[@ANYBLOB="64010000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fddbdf250b000000180001801400020067656e657665300000000000000000002c00018008000300020000000800030003000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="200001800800030001000000140002007866726d30000000000000000000000050000180140002006970365f767469300000000000000000140002006261746164765f736c6176655f310000140002007465616d30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000300000000000c00018008000100", @ANYRES32=r4, @ANYBLOB="cb6a01680800010150414591c297315c7a7f62b0bcaf3c22c16957bf6d01643cb64f", @ANYRES32=r6, @ANYBLOB="140002007465616d5f736c6176655f3000000000080003000100000008000300010000003000018008000300030000001400020070696d7265673100000000000000000008000100", @ANYRES32=r8, @ANYBLOB="0800030002000000"], 0x164}, 0x1, 0x0, 0x0, 0xc004800}, 0x20008800) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) socket$inet(0x2, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0xa2040, 0x0) read$FUSE(r9, &(0x7f00000024c0)={0x2020}, 0xfffffec1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x2c, 0x10, 0x10, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a042, 0x41c23}, [@IFLA_LINKINFO={0x0, 0x12, 0x0, 0x1, @macvlan={{}, {0x0, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x0, 0x5, 0x0, 0x1, [{0x0, 0x4, @multicast}, {0x0, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, {0x0, 0x4, @broadcast}]}, @IFLA_MACVLAN_MACADDR_DATA={0x0, 0x5, 0x0, 0x1, [{0x0, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, {0x0, 0x4, @random="87cfc1897235"}, {}]}]}}}, @IFLA_VFINFO_LIST={0x4}]}, 0xfffffffffffffe8b}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r9, 0xae78, &(0x7f0000000340)=0x2) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x18, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9d}]}], @echo_reply}}}}}, 0x0) write$USERIO_CMD_REGISTER(r9, &(0x7f0000000100)={0x0, 0x8}, 0x2) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x170, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@TCA_STAB={0x14c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0xd, 0x8001, 0x6591, 0x1, 0xff, 0xf9, 0x8}}, {0x14, 0x2, [0x4, 0x3, 0xf22f, 0x4, 0x7c8, 0x7, 0x4, 0x0]}}, {{0x1c, 0x1, {0x4, 0x6, 0x3, 0x6c2, 0x2, 0xcc9, 0x800, 0x5}}, {0xe, 0x2, [0x3, 0x7fff, 0xfff8, 0x8, 0x3]}}, {{0x1c, 0x1, {0x6, 0x0, 0x81, 0x2, 0x2, 0x8fcd, 0x8, 0xa}}, {0x18, 0x2, [0xd, 0x48f, 0xf6, 0x5, 0x75a1, 0x7fff, 0x0, 0x0, 0x6, 0x5]}}, {{0x1c, 0x1, {0x32, 0x76, 0x7, 0x4, 0x2, 0xa, 0x1ff, 0x2}}, {0x8, 0x2, [0x8001, 0x7ff]}}, {{0x1c, 0x1, {0x0, 0x7, 0x0, 0x3ff, 0x1, 0x1, 0x4}}, {0x4}}, {{0x1c, 0x1, {0x3, 0xf, 0x6, 0xfff, 0x1, 0x0, 0xff, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x4, 0x5b, 0x0, 0x0, 0x2, 0x6, 0x2, 0x8}}, {0x14, 0x2, [0x8, 0xa, 0x4, 0xffff, 0x80, 0x81, 0x4, 0x7]}}, {{0x1c, 0x1, {0x4, 0x8, 0x6, 0x7ff, 0x0, 0x1, 0x6}}, {0x4}}]}]}, 0x170}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 4.785900864s ago: executing program 0 (id=3008): socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x8000, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x2, 0x3, 0xf8) sendto$unix(r3, 0x0, 0xffffffffffffff84, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x4e21, @private=0xa010102}}}, 0xa0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0xfff2, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x90, 0x2c, 0xe27, 0xfffffff9, 0x0, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {}, {0x5, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x60, 0x2, [@TCA_CGROUP_ACT={0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x80000000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0xfffffa3c, 0x3f, 0x4, 0x80000001}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x3f}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x90}}, 0x20040054) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r10 = userfaultfd(0x801) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) 4.177562089s ago: executing program 1 (id=3009): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x6) connect$unix(r1, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x8a880, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0xfffe) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000066194030000000905000100070000000500010007a3bb0000000000000000009027dc0994eef2cd32ef55671b5645b065eb0a76fc6ef644090034710cb639917776cfdb78bb265b41ddf168c22a"], 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0x4008041) sendmsg$kcm(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x3, 0xfffffe0001000001, 0xfa0d, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYRES8=r2], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) r6 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x4919, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000240), 0xfffffbff7ffffffb, 0x1222e2) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000280)={r9, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x7fffffffffffffff]}}) sendmsg$nl_route_sched(r0, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@deltfilter={0x24, 0x2d, 0x1, 0xfffffffe, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x9, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) 3.831664107s ago: executing program 2 (id=3010): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x9, 0xb, 0x0, 0x8004, 0x0, 0xf, 0x42, 0xfe, 0xd, 0x5, 0x0, 0x1000009, 0x7e5, 0x1, 0x1, 0x45, [0x2, 0xff]}}) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a3a440000102030109025c00020100000009040000ee010d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d000009040101"], 0x0) 3.453974522s ago: executing program 3 (id=2983): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) 2.97826791s ago: executing program 0 (id=3011): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x48080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.742448662s ago: executing program 0 (id=3012): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = open(0x0, 0x0, 0x0) fcntl$notify(r7, 0x402, 0x8000003d) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) sendmsg$NFT_BATCH(r0, &(0x7f0000007940)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x880000}, 0xc, &(0x7f0000007900)={&(0x7f0000001780)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x52a8, 0xc, 0xa, 0x3, 0x0, 0x0, {0x8, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3a9c, 0x3, 0x0, 0x1, [{0x14d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x10f4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "89c14054a79a581d8af1262211c9512db4730f4cfe5f22149b6583b5d130ae94b21cc8869c86f164b92d97b4de2c37090c2815143eb45e8a99fdae853be873ff8f85b555588ca4ee419e2029fe1646b4c40c30fd47ca8e3ed90205198b0ab3447bb3e6eeca49a9f5b04d0e4ebe56eafe690f2760bda56a048abf5cb2190c83d0da7edcc1fa2d8114b26c1cb653220ed5ef68da9aa2f76a2ed258800f762cab8045fc411d7bcb6863ba3d1fb68d52c24c73a7cac6cfc096cad1a587641fbe3b8ec708026d4aea1a649c8b3d84fe0135d33a1b2c03d46eb026e6c2bb8b19f31c7afd2a01738fb731a06153cab89363c63af8a4985d464375654bcfa355fa6c98da5b2a457a4a33be09e3bb4e342b11f573a795ac0275d25558f992a6a09d02ce818667329531ce2b7d00b4d68bf6257d37c02df3931ee562597b8a9c7b3d70b20cdcf4e29886e59b9eea07b753beb886f99f3dea2b196e92baacf86916f6c0165190d1b6d5e2ac0c15d909cb02a292d6bceb697199e5ced40bc4aec120ec0eca9b352e106f2e40d48923fb700572db2c8c3014ec4f44b17dacde057064777081eccf1ed634a28f212909770b8f2856b8245b2439f69c922c68b57a3bd504d9cff6366624e34505a9772136991afdac039283323ad11e21bcf5e3f5e8e9d022a23ead507e95e4edf0e79c2895aace92240f3f1ce493dacb63d588d08d8d3285016247227fba6711cfdfffc3c8313de6ac063446d5b0a8763c0fdfc2d3bcc7fb9b69c7224ec8769b793b7fe7732ad5418690f6bafab7f0e4464a20d00ccd2f4149017cf9f3acfc05fa536f0655c07d13a09d5c0d7e15f606ca7545a774c340282f0fbadf9292c6718c1dacd31a7bdf47eecac59f1db53405c0a87b5dbe9d32512789d8b4f00e1fd6338d385c62a04c2317d7c44a434e238ccb6d87d280acede6dabb12e66a44dce9a0bf4aff2e6e7abd2546f9001c1dff31cdfb2c0f919799db9b34d84213043f4687ddb5c3c8fa2cefd839065dc7e288af0a33377de8b227807cde1060f335ffa0366f62ffac3b0bdff792a687ea218d4f1bc23f1c370cd77913690b813a5f5f422e1d12a8861adff4d2750a11e94e7bfddba1848728e7f07974730e36b41f9bc3dad99b1c47d2befcced584f426223727c15ffd3b728d1ef1bc84bbf82e8a6e2185a79eea88a030f57b42a514563af0716a4622125b502d15edfcc7a288c848b510ae3194dc9fd4359cd7a467e107651bca85b05273b87daec97432f8344f836082c05c51e8b4c2b088e7b7cc470ef4822fae17d4d7a011fe30f3cca6e3c934bf2bb5753e253e6473df7af9fd1283b36ea44cb7b415242f910fb617afd5fec90b46a704f71134297097869d4adbf8d314514b8b77e4b508f78b0d6817ccf5225c392d2fa8835a8d530dacf3fcb038e77d4c1574d26423ac8dccc7b07dbc8db1af7825394bac5f628f9e6e8e4577d7f18babe3974e7e8bf4afeb08db2ef42f542475fdd71ea12593f30bf8a54908d34157b8becf830518f4603a7c25038a0b0f270e5d8792e541204200fca09f8c0855d1f70e782b78ba253258c36524cfbe4bbf50690aea449836d91b22429d52313f85c5ef710450a39b709e63f9f32f58a3de56496c237c48fa043fc02e2daf2533caaba290681e17f50cb104e0ab784414efd59fb46d9555b3b19c8d014abbdad0fe35715de9026667948299598b8fd8f43f8b501fd22ff56c1d5cd5563564090389b3c104c294448550fa703a8d59facf07a18aa8ee1830d91fce4f58ab66f081edc9c0ffb0547040670f1f935d408c22873c9714a241dee1d2d3c5c7cc9abbbf7eaaa535cbe2463afec377b0a149b71e796961a76049aa7acce9f265a2117cdf5e58ac7bc0d0c8a510d21c59997f077477c61abe7bbe10f7ecf2e1041024175a2be94d7abf9ebdba33ac0c7ddbffeb4b84ef0ab6fe4658aff7a762d44e734abb2761d5f032d23412ab4d2a59f7bcedf41a5f600bb8d60fa06a4523572015667f653d5385dfb09a39b688fab95cb81d47b871498d19084e0d714f571937e568b57e35f7b110bdc26ba1ad632f8913048fe1ac66053a89d79c036c27003b93f4f3bfc53ba3938aaca436918ecd8b84e86a864a1013ec7757f40d38b13c829c4d7cfeb5b95e808e292e09139bf53b759aafada33eff25efb8e420e1081da5e0f4fbc7d4f34b29c77070f088eb759ccb64c70525ae9c47ff0bb6d28461c28c9a1dcb70c5f5d88b1551a206d95109319833d9188b8854fe1a5d1cb3bcc51909d26684c08c3bed229f6b9dc4b3a35ec09ed6c6d3512399261f014c59a23a51f4b2f177f768865834893a079bff8291c97ec76f312438f3925766281ea3f37362cafe45add82ee311d0ca70dbe66b26e22b258d8dc2c5e66b20d1dd3ab2299a45650eef3ec7ea7505d42e806534b57be8f5312806e83fe2f6a9f39c87c3f00081ba528a54d01d6a56dd25483b67651a309337d24a09325f1fdb85b1e4f6c0bb7db0b7b21528da7931046c64a612185cb5c6b03d529e6a26f4d541daca9614e5b1154699e51e0128028b564d66b93b94ac7dd5338717f4c67b1f338dccc6de20daa6cfed7ac72a70318b845cb143bfee1b8769246dfa6de3f0bcee71715531fd6f211921a3d88b38a96e5bc52bd350235996f5eec058a0de2e01803d71897a6ff97b5d54707886ee7b6c5aff10d053dc9bacd06ae05810e7a1df0407f08d6525a2465d25c8de9ff8c45afd76fb3afc8cf2693e750cc897a9a221c8b663bcea7c4bf9855177db3d858528db04894630049a30b193de487de8bb5d842628c70904ef32b15889dcd871b52bbb9fe9b11de7bd6faf6ce9b5dcd641667d8f8e5ebf853097129c109e8e1210ba153c39deaf1c749af870245fb6f3828011deb3fd2b4f411e7b2e7249507be3b640e3882ec59ef9b6a527454b243bb2da275ab98eba7628a07194f9c3bb875128c3691f5b9369a4c21155378bda16e888809294627f418b690368da2659ee7119eaf7850c4b6d720ad1c7c4e2d8b02762537ba734f0f5044e92bcc2b4a4caa59f7171c55cfe173b5d42637a1f15cdee86232c847293e077b8784030d5309cfcf3810be0429796bdd51f76b150339d132277b033c053065f59eeff0247b5b9480ebf8c6a061baa1a21c059a29b7463a4867535a7c49725b68ca8a8fb64a1b172f5651f26ab58d282b6a2e27dc2d06bc81b53da42dc257fb2bbb55c451799eea70cd65875f985a1b156249f5fd684f932e1974fee6379f582828a37370ed4bbc8b00176126979134573468217b12c4624d752c7a7792f47594c41faf863b67a19d72262c21fa9ea0a5f73bc9d2b22da63d6d9a760df17101a5c74277e12040c1a54ed26a4acbe34073ba65606454c4dc3b3f4b58e99f2fd83b9a3b6e5c50bda3c7eafb935e3c89c73d98119d4b77a1fead92d3e37a47cd8be0a4bbd2aa490475972e3d46f4360ae67e0dde53a9db82158eb65f260123f06b8d7f6c24f3c88dc0c6fe7a28383e4ad9c5447af58a326e4bac94b3116e5761526777631d2298aefd0fe868506fba133d187f788000c4c439177fc56ad8bd0fa18e0dc6ac01cba94c6c5924f143e6918e9f131c225dcc13c106fc33a156075d09b36a79c7b9c5b09210ee620951f67142534156880b5f78f194cd7293d1c6d6846f6cbd05ef023e272e0763c79c460ecb708b82bafd53af8e19666b0c181a5da821cfb845a2c3d3394781213860ffc8bab13cd99863406868d2c33a124cffc0052836a18a056c02f0304967ce45338ebb429e1e9010901bdb464d86948ef59f13de56e7bdd8f3fcc48ae434c99cb0d219bcf60824805bb78cfd9047736ef84ec176b48b80b938b2a3a43e2eaffac80b2108a9ebba427edb03e5fea8fd67479e8fb2e100a63fc6dcb842c3a118d15fcb17268daf150e7f67876f42b0af799db18ec4ac7275e31a848361382dd9844228ed038568dbbf3baceb63d76c50f6844c871d7f13309da960a4acffc2d40310a90f25b904937ef00009096438de52d441ea0cedc11cd216769857f6cfed495eeef1fe8d849922e5becfec6bab8189e4313a86c65fe4349c3e104b7efdcaa46235630a7bc5a5bdf2670142bc8017600057e0d354a05a75bf0ce378ea2460a9ee24173990681cacc9de50756cc3df5139b9137f523da4cb8841a94d7c69b88f1da6450b1a10ca70069a3a22256a32bb0dc287d10f6de954d12d6ccbc00a824f5238c27bec14ffd58e14fdd2ff97184f1aa036cb4408481af02292eed1920729f11ecc27d48e4c2de1c58a5b16a72b50aedbbbcbd260595e02f50ea59c89a4d584742f9c92f02c5175200339c05e3f0d84bdb66c7faa5ca44cfc73d9edffa49f416e11cb8874ad730bf51d396001212b7473107688c6272c1ded0ff161c4a89866116a69756dc1d1965f8e082d5198aa59007cffb5398654dc221b29015cff781b62c05d92e8adb0485d350c7f2053c2016be8dd74337f7b6e9487ffa4c5d20de152ab3229ecaba9eea091a0eb8df62770728373f696471eeaf10c57d9246015600529af021d3af86b065b1fb87871c2ecb5c804c36fb39e533fe1bb535ddb3283b883b4ba97d139bd39f02005e247821f5761092d761a6be87e55473acddc4bcdc5f2c4d9d428e826db68d07566110cc904fd230f8257301aa6506e8fd033dc32c898b1c406f0b5158fe29efd1ff8ad2445fad41813b9650418d4416860490708b5c6505829fcdb7f40d27282db66ec2dc12102dc3ea4644fb437d0da78e270f69b999e259dd4a693955c42a2114e3649f4d606dbfb50dc6619c0b63606e5ead34603f26890e8b201b785e285625373c4a2804f60d3865720fcfa34cf5333747b0091a1d217b27f7b779dec388318b65fdb5f88f346bec21087088860d8d75516626110f88fb92cddaadd67f36abe4456aa9bf00ef641c7367b41da1d832ce3f84fb033da791da5f55482ae3b6acddb8a749be855051d8036a0a2ea54668c35a6268101614a22d44a38e3b20b1a2f1604e14555027eafb139d028e54a2df53eb30e100733d9f25dda44d875c8b29b41aecaa9982fbd5bc1d2825bb2a98f6f4ae5f6c1e6e917f9377a01ebc3d870bf63b74f710a689044fcfe022fb40489f5580af9f8f581185c9639da1f4e8805c9915cb2577c0e8efbd79b924af8dc56f6d2ba69817907084cc60c7953811465146aa889a273acc53525be758173e239f194e1e67e18b40e46924c3e265a45f07ea7e78b872a780943c06c8b690fb0d11b8ec7ba34d4f6c5185511ae9f35ea097320558362264a8ee4855ee8c3deb4f2e2d9b716f83ee8bca69a146b87c0fa61552e4fe11d347759f48c3a7d5437641d78bf2e35a6c5c500aefc30d8419e784a8dfca839aa7797b8590dd54690cce67b2f9f2b2e8047623d771ab784efe15dcbf0d1f47b12e366f768459dbc002bd393e51efa327f542ff0e718fbd2b25194f1017e92470fff5cf373d1b5cf492681b4cc8d29aa144aee91786bd866e2a52a2586be6cf81cf887e858774c9a389f2ecbe20c59e5641b82ff3411578e314818c4f42b28b54da99cb07d50ded0babbf16d6c1d207eea0aada990a46680f8144f49162f6602e94a4768729646841f00d3286175338129acc84cafd765b8de0b110f1765839db110d047a17e6ee254c53ccff446766985cab72330e64ce4cb59411876a77c376669127f03d7871ea057142de5c02ee182ff4c29c96ff3d8698cca8cd3c89a8dce9a0c83d2cf733950b2674faf945f0"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_USERDATA={0x28, 0x6, 0x1, 0x0, "fd7ce1aa9815430a0cac16e6eff26c98e42a24bf14c2cc31f6439cc8d0f50d28a4632cc1"}, @NFTA_SET_ELEM_DATA={0x78, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x73, 0x1, "37d83d8eeb10693b340dac7781fda21fa9c36b185e7e752ca94833cb0c1136c9189529ae2a69eb696450c9e34a111195ef86a62940ebc6065c2a706acb9ce378b0d283bc4144b79a0b1aa6207e1c1cf0516b8191d1dade7c263792a413aacd018ed228fec58ef6bde58bd8332ad588"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x304, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xab, 0x1, "e76ad31f6073be44e29191dda696eb9a8ffca3ee936474100e7cb0e47de68ff50ada52a5befe50839b1f60b4d3551461dcef15f9ae029928dad04ab6677cf604fe5ffeeb661543098fa372bd2a9f8c3f158b4df6076483adfd3fecc40d39536d907b34647ad84bff7bcd94604e5cbd8f6a22121e9f92a35679db6abe12637f93dfacd80ec67e4135e7f05994b6f3224f31e1936578052cb0b4b46a8f4e162f8a903a39ba680276"}, @NFTA_DATA_VALUE={0x90, 0x1, "a7f56330a871caea378866dfc7e927e64d6966e5b1bca238adc2080cf7053e297f6a952035b77449772fa0f57d424be4c0eb918095e7552c437a8675feed967f929754b9f3933e0330cf09347d6c2d7ac0ac030d66ead8be6c862c22318ead5c27bfdb1fabe03ab08764fbbc537b974ee975489c7d14d3e255000b104b0248b026b3cc7eb3b63c46863b7c7b"}, @NFTA_DATA_VALUE={0x53, 0x1, "0ea7cd84bf292310ec9465fb33f9e1c8ee679ad1e7df41568ee2f03a629472498ad130d73ccccfaf59879f45917d77514a65c9dde1aa0eb15ddb15ba65ccd06e2809bc57993137901f38247480021c"}, @NFTA_DATA_VALUE={0xce, 0x1, "7a5f626c59a7051c60e8e966ebf9b18872a0a98fdc76056aa46ab70797ff7212f8f7ed876792f1a85b0329f3054f513436039507dc0b70325ab15a7b9daeca51cbe7d72cf3755b55080dc97ca7b6253d1a73b71b67fbda6cbc4e8c8874f945bad8e985be3e1009073da010b471aa44fec09502aae8b0a4a3c01fd356d10ff4bd00bc321523df1619868f529464fe50e1e2271779fc172a09fbc817d21d57ded4836b54a36bc61984ef8e876c83aba9e39138d3cbc35cf6a81999ee4f6023df7e1247e1732d8c2d126c6a"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0x1104, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1100, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd5, 0x1, "8a2982ebd81dc2aeb4aebc4ee6dd7bd9bf95af3203415ce2752f3549fce171d2d88af12985b9088db12d6ac3c53e0c281e4099f12572ca1b729a5911c70cf73e630ecae759976704ac0a17fdf1caa1585d991786e3416016e9ad13614107482f8a7169c59cfcb64bfb9dea987403a4bc3a89392b46a75b39766bb9bf99428b9b0b1ccb6ec7a9569c4801c0a14cf009d98035e82ad9eb0fdcf4b5211b770d1c32a8a4d409efd8179cdedf29acb6f4d0ebb6d4bcc6e7880a5c8f9043364d4be34a2ff9a30577f82fca75bc879d50d546135a"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}]}, {0x270, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xe8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x46, 0x1, "a51ea55622cb1bc506eb0a2481c8fa57d1a9f438247dfe1f77307739185d839c44322d92951d03f0da415877d1d3462cafca43be13eb86ebb34b3b1edc0b2347207c"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x168, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x175b618932158c01}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x20, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0x50, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}]}}}, {0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", ""]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @inner={{0xa}, @void}}]}, {0x1254, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x24, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x8c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5f, 0x1, "5365d197ac1445063c47a408f56c691ec61e01ba00c2faf6c97569b7bee0c1286e518cc15539eb98aeb8932cb5a40bd34af088a34e78e3dbdac7cdbdf2bf45480445124d4e4b7c474fa1f8791653bfacbf85dddc772de9b3f1c5b2"}, @NFTA_DATA_VALUE={0x18, 0x1, "fd5779359789683d6e229561b12a4c23d3859e13"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x1170, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xc0, 0x1, "6cbdf52ed5989bd9021b754c5caf40f749657e2dcf80fe3eccdebd07de021cbd54e04779ed86f923642cbafca8887f8159ff7edabd05608fa3a4bb308bd7f15ec7c52312e2d680743aac0ee3c96ea6f25740a6ff943c459dc120fea425d4cbadd5847664099cece39881f8a9b2a44722f2d0944d0ef32d327b348e1d15133df9ec2bfea37627725be246524d59de47d718fee803e8cc448a97ffe5e6b9ba0d5322d0df9dce7a5a3a30aa45213b7d952920cef1bd44d723da9e7ab4ba"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x16c4, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}]}, {0x428, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x130, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x91, 0x1, "9b8002a919f9cce024cad39b6f7d7a82e59527ef7042114001b3c560c48736e27a3445d0f515da46b63e18e0a924c5f5bb4dde91d2cb0a45b75242994c430afb0ae59e312af3dc741a5a6b57596cafd2a1ce21aa5e75d8ab3646c7f4d2c3cf6c0b845c5c956a92f7000d3162d307fd078f271d16bc77c72f4cb20c188a1ef6ed297fdfa0b4b66c633d4ec4d6e9"}, @NFTA_DATA_VALUE={0x7, 0x1, "dd3be7"}, @NFTA_DATA_VALUE={0x4b, 0x1, "f744d8bc93c3ed89ab2e5d7a9c37ea2d5a0b46104825a9afa0986373168b9e31d5565807c3a6d473c621e3611fd2f2d19c05a871d601934b694ce0d08caa1b2e7e945c97fa0b80"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x4c, 0x7, 0x0, 0x1, @queue={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x8}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x101}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x36c}, @NFTA_QUEUE_FLAGS={0x6}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xbb9}, @NFTA_SET_ELEM_DATA={0x278, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x42, 0x1, "1f4610329c6c5ae46cd030e2070609ccbe4528d47b028fd10d4970eff8611f0943275e2945e337e9925d508d9c0dfe222d4915dc86f01a2163a9f5d1d3ad"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x84, 0x1, "f4c56292d89326acd220422c27b72918ad9a4c6b793d106138f83d4ad423789088ce8d8004abd47cf2d248626a76eefd76dbc1f202f4a1960b85685165936656e39ef8280d52d585f85f5265d959093c639e868577d918fa068bce4c89b9dc1c4ab057e2450cfa88e1779cfdc86797e816e906c126e6065fd1984ecffbb4c4b5"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xa686}]}, {0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @log={{0x8}, @void}}, @NFTA_SET_ELEM_EXPR={0x40, 0x7, 0x0, 0x1, @fwd={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, {0x121c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPR={0xc8, 0x7, 0x0, 0x1, @bitwise={{0xc}, @val={0xb8, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_BITWISE_DATA={0x94, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1d, 0x1, "80157fa59111a84f5af5fc35c3adbe4993477c0881e0fb7581"}, @NFTA_DATA_VALUE={0x6d, 0x1, "806bd34ea374edcc80ed5e4fe2e6b3dbe698ff8b83d64f3f684dbf77ccf7d1808c32b1ee4fd01f64093f078d764c4295356145512918e8280ea3065082e660c6f67c30f6503767e95b50284dfb03969eec69ae14d0593381356a1889c4c3f8bfdfec7dda4378f6ba1e"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_ELEM_DATA={0x1054, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x16, 0x1, "4a4f14f5877cf4aa4d1c7d6b959dd7a88329"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_KEY_END={0xe8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xc7, 0x1, "6caaef5ab08a97d864f4c3ef731f86c2e8130ff02aaafe7b09616380a94a2d770fa4211ee8615ddb6d468ecdaf0b2d38bd0d0baa8d34c2fb944bd87f4758e4631911a0b98fc60743e66decad4bbf619fb30313ac25d32abf0a628cf31438e4fbe4786b89ec2902bf9224a818db89627d248fc69133c5a8800404f08954e325ecce124eef06154c685bc73f9b788c8df0bc13d716945a24e1d9dac04a3d272f992420bebc42f24e742d212a80cc72cec20988f4c1069e929093caad4996fc04be50b2d9"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x108, 0x3, 0x0, 0x1, [{0xb0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @reject={{0xb}, @void}}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @nat={{0x8}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x64}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x41, 0x6, 0x1, 0x0, "c2d8690e27035e89734840691aae6bafe731206e85f127edaa6527d85e88c9a098cb668c7888d0ee9c1b5c83681e9f7fc8e51ca5d5fe6780766bb22bc8"}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}}, @NFT_MSG_NEWCHAIN={0x198, 0x3, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0x81, 0xc, "1aa5233e6a48b261baf44d097fb6645b33effe078ce32247a1e085e969811eade1276f82822f1266a68ef00484acf83a4a6c55d745e4972a86f41bf9aa9877e9ac399e069127fac4c46d7f389e30a3f5fd481a1eb10543de6f4c79ad1915b6193e3bcf4a38e4397a47a69f7541031fc30b57fbc21185aa959bc7574163"}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5fbaeb4e}]}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xd}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x69}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_CHAIN_HOOK={0x8c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3ca1f3a0}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_batadv\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'dvmrp0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bridge\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'gretap0\x00'}]}]}, @NFT_MSG_NEWSET={0xf4, 0x9, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_USERDATA={0xd8, 0xd, 0x1, 0x0, "ea58a2e241b22c43cc076a6cda4368eb7b470e92a22daa3dd937116b53c8a7d8e98b4b7a6eea8b25fc1662dc630e405b0d9316aa0b8c4ef3f80d1fbb4aeed79d0aa98c148da26e3de6919c71357716aa53cb9ba4d10fe24a9d02ead0cea86b00c93f5a8c03f4f513e0e669fcd4eada8e777bee2b8dd01c9707ab60ff12d83d07c0ebe1e7824e4d3fbc5d12971be1387fda4adb2bb9838d0382512fa97c2bd23e362dd678160e9bf2615dc16ee87bb0e40e370ee5885fa0fa2f65cfa5fb47888c3b3109b34a28e092e5d2830e44e20779b7b81c6e"}]}, @NFT_MSG_NEWSETELEM={0x528, 0xc, 0xa, 0x17701359cc104935, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4d8, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x4c8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9c5}, @NFTA_SET_ELEM_USERDATA={0xca, 0x6, 0x1, 0x0, "4c1218c3a345d7ba48cf5304527574cbb80353258c764ea8dced22c46bf93c842a8c69cb48c60d2a64bcb3ef14ad18b87a76586f421d3230e32b1f4e354e32812dedbdf24b50db7392c9bde5aaa874045e024eabf77d2e7d1bf93bd198697531684f28d90003e40eb7fc3da10d14e8e90df255253d477b6e63e5b707e9812d5ee910b672db9faf56266bb9bdc4822740b3750725c6c499ebd1a5376b61695ebe0cd8f93e2fd555b8159d93000db658588ca95c26e96d4bf06e7a9ade2adc82f5497d2d3282b5"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x3c8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd8, 0x1, "2c521660efac1996b03fc00464786a1f5c101d22d7bb2081d21802ca6d89122a659134b1a58a212421fb793904311d3c92fe150a598c40c7266bb6a32243e3d338918be22781d8addfd9f74d1144f6532c073b0e56538ca3d5b6d77c484dfd820011a2539b0e9702317bd56a84343f5565cf3dc0f60db13ec491e1b961318f2881d7c1754c633f87741c16db24443d9197ca87941e6bc980bf6c15730a05e8eb7b405407a2911f4f84b5d5bcc2cb508830c105b5a6cc90d547e5552313c90281db885fbbb0f3c3930637d2048739aaa1e4ca3f54"}, @NFTA_DATA_VALUE={0x1e, 0x1, "37763c025fd4cc2986d2002cf18c6fa437cda8fe9f81ce03a30b"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x8e, 0x1, "dd8b119efffba771586895e95b0eb6bdde5c2e82a94e3c00787471c82fc5dd6f2866cc4a9d3e6275551a483290b87baa868ff7798c8565598129604920d7f2ec7b05c64097b989b2d302578ebac2b79fd6b9f5fe85d18bc7547d2aaae70329dd33a2532fcf39c5f26a0034a292170b489174922995132c1382dd280d378bf87b5cce8049509d984385ad"}, @NFTA_DATA_VALUE={0x4a, 0x1, "95b03e39615f8880fe3fcb0c58a7d3d3885cab917a04bef81c27f4fdff404d93fb0ed465cea0b7f1f77c2081c78bbe7962ab7f3c2b992909d312c941dd45f93ef662166e6dc5"}, @NFTA_DATA_VALUE={0x8b, 0x1, "da6c7992768a7b22bc05a495931d6f6ce02136ade6a52b591190298a6087448ad07bb88589656ea0736496c131dc4289e4b70bb3e4a5aa2ac859b9d0528f5f83b910e02c23baeba1f4b568a1c5840c9100c8ee7441c1aaeff65692bcad8b6d4eda51beaa4d64bc2ca254793ac9e4f453558683bec6029d985d11a90aae7ee64d6000c66a22643d"}, @NFTA_DATA_VALUE={0x42, 0x1, "fdf7e6525f2d6d03647aa80feb87033713511b34b9764998df0c33705284367adbd228799bd048ad50170e102735171c40c04426dc71442b07257f78cc4b"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xc7, 0x1, "738ac3e10395cbd41a2e4b4a014221d2cfdc3e30560f7448cd00b8e0863816ffd438aebfb989559deceab07e64ddcf6d0f214bf4751d08bd7451636ba0dd22b32617f3b333d2e80a9785941e8fcf7e010a7caddc0859851554bc5f50fce86300ad04b7d827554394cd4c4051a70343a76ecc30ac44c92da1a6f791b4587dfc9660a86547473c5471a517982cebae53b7c32b70c0bc207edea41c0a689620de41a7d57082603dd1ccac05644a8524f37f43d7254b81715345b09d93d6372bffdef405b0"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0xbc, 0x9, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_USERDATA={0xa5, 0xd, 0x1, 0x0, "ec675c131a394cffdf190fa6b623fa71eddc7b026d2a2304ade8cd63f3952b3daaf7b1e86f6cb85b4d7937f8f9b450015b43936164e8bb3d2ac07e84b90acd3af25f30bec8b95479fd806e41f6b949c8c7b4ffccf99ab90bee4c95ede847152a8704ae83b606f189b92ed2b9eda5267837ab1781f6447ae6817c3d791b12a1cf5d27f5357148ca60350ad3d035ead963f0772a2a8578ef75b8bf58ad7f5d3b6212"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x5bc0}, 0x1, 0x0, 0x0, 0x14}, 0x2000c040) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r8, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000000)="001036ffbd0a077c617f9c475f9526f9f1ce846e737358f5", 0x18}], 0x1}}], 0x1, 0x4000841) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, &(0x7f00000001c0), 0x4) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x83, 0x20000a2f, 0x401000, 0x1, 0x3, 0x2000000, 0x1, 0x3000000}}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x80, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x1c}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x80}}, 0x0) preadv(r0, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0x50, 0x205) 2.60010076s ago: executing program 4 (id=3013): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0xc4) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.546119707s ago: executing program 4 (id=3014): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, @multicast2, @private}}}}) (async, rerun: 64) r2 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) (rerun: 64) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='source', &(0x7f0000000300)='\\\\\xe9\x838\x9d<\f\x91\b\xab\xe6\xfc\xf8\xbf\x82]\xdf\x12\xb5\xb1\a\xd4$\xae$\x91&6n @\xf4\xd6A\xdb\xd7B\xc5\x13@\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\f\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xae\xc3j\xa4v\xefw\x96\\\\//\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000001500)={'syztnl0\x00', &(0x7f0000000180)={'gre0\x00', r1, 0x20, 0x1, 0x1, 0x8, {{0x5, 0x4, 0x0, 0x10, 0x14, 0x66, 0x0, 0x0, 0x0, 0x0, @loopback, @empty=0xe0}}}}) 2.19313847s ago: executing program 4 (id=3015): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000100001002abd7040fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8111000000000000140003006272696467655f736c6176655f30000008000400d400000004001880"], 0x40}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) unshare(0x8000400) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000380)={'syztnl2\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x80, 0x1, 0x3, 0x2, {{0x19, 0x4, 0x3, 0x2, 0x64, 0x68, 0x0, 0x4, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x32}, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x2c, 0x57, 0x1, 0x9, [{@multicast2, 0x8d}, {@multicast2, 0x3}, {@multicast2, 0xffffff81}, {@private=0xa010101, 0x1}, {@multicast1, 0x800}]}, @timestamp_addr={0x44, 0x1c, 0xee, 0x1, 0x8, [{@private=0xa010101, 0x4}, {@remote, 0x800}, {@private=0xa010102, 0x6}]}, @end]}}}}}) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x38}, r3}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r2, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x80044940, &(0x7f00000010c0)) poll(&(0x7f0000000140)=[{r4, 0x10}], 0x1, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000030000001200000008000300", @ANYRES32=r7, @ANYBLOB="0a00060008021100000000000800a40002000000c96025bdea84caafce68e70517beb2681f7e6b201b7e75751fc6b1070c7f2919c5b9088ca9acafdbd11194ee8bd12a4e305291eb1709dcb21d579d88ef34a93f6603fe230300a76a97b515defc1920fa4f9d1f2a54f5c4ed4fc0df64df002f6572b3b36b86a8004f29e0"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r8, 0x9000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 1.258968463s ago: executing program 4 (id=3016): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000001c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x24) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_DBG_G_CHIP_INFO(r3, 0xc0c85666, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x80805513, 0x0}) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$chown(0x4, r6, 0xffffffffffffffff, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r9 = semget(0x1, 0x1, 0x39c) semctl$SETALL(r9, 0x0, 0x11, &(0x7f0000000140)) r10 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="11110200880035132395d3362000200012800b0001006d61637365630000100002800c0004000100000100", @ANYRES32=r12, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) semctl$IPC_RMID(r9, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) connect$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @mcast1, 0x100}}, 0x24) 758.937685ms ago: executing program 2 (id=3017): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, &(0x7f0000000000)=0xa636, 0x40009, 0x2) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6, &(0x7f0000000040)=0x5, 0x9, 0x2) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000280)='\',-^^^^\x00') syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)={0x1c, r2, 0xd, 0x70bd28, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x40) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0xd}, &(0x7f0000000080)={0x0, 0xa, 0x1, 0x81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r3, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2c, 0x9}) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x2, 0x2, 0x400000000000001}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000004c0)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) lstat(&(0x7f0000000000)='./file0/file0\x00', 0x0) close(r4) 656.53543ms ago: executing program 0 (id=3018): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0x0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x84000002, 0x7, 0x1, 0x80000000, 0x1ff, 0x8, 0x9, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000700006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 529.82µs ago: executing program 0 (id=3020): syz_emit_ethernet(0x101e, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) r0 = creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r3 = dup(r2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0) socket$key(0xf, 0x3, 0x2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$NL80211_CMD_JOIN_OCB(r0, 0x0, 0x20040080) pselect6(0x2a, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x1000000, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 0s ago: executing program 3 (id=3021): socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x8000, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x2, 0x3, 0xf8) sendto$unix(r3, 0x0, 0xffffffffffffff84, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x4e21, @private=0xa010102}}}, 0xa0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x24, 0x2c, 0xe27, 0xfffffff9, 0x0, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {}, {0x5, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x60, 0x2, [@TCA_CGROUP_ACT={0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x80000000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0xfffffa3c, 0x3f, 0x4, 0x80000001}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x3f}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x90}}, 0x20040054) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r10 = userfaultfd(0x801) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) kernel console output (not intermixed with test programs): 5] usb 1-1: bad CDC descriptors [ 724.546712][T12075] usb 1-1: unsupported MDLM descriptors [ 724.593170][T14827] netlink: 'syz.1.2344': attribute type 4 has an invalid length. [ 724.666844][ T9] corsair-cpro 0003:1B1C:0C10.003C: probe with driver corsair-cpro failed with error -110 [ 724.690344][ T9] usb 5-1: USB disconnect, device number 108 [ 724.720189][T14829] syzkaller0: entered promiscuous mode [ 724.753531][T14829] syzkaller0: entered allmulticast mode [ 725.235068][ T5908] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 725.332103][T14839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.341770][T14839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.384975][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 725.392534][ T5908] usb 2-1: config 0 has no interfaces? [ 725.399745][ T5908] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 725.409159][ T5908] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 725.427666][ T5908] usb 2-1: Manufacturer: syz [ 725.436909][T14843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 725.448457][ T5908] usb 2-1: config 0 descriptor?? [ 725.495516][T14843] geneve3: entered promiscuous mode [ 725.500975][T14843] geneve3: entered allmulticast mode [ 725.604996][ T29] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 726.702552][T14853] random: crng reseeded on system resumption [ 726.805487][T14853] loop9: detected capacity change from 0 to 7 [ 726.824786][ C0] blk_print_req_error: 25 callbacks suppressed [ 726.824806][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 726.840636][ C0] buffer_io_error: 25 callbacks suppressed [ 726.840652][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 726.859091][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 726.868737][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 726.891672][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 726.901311][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 726.953512][T10869] usb 1-1: USB disconnect, device number 105 [ 726.997454][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 727.007170][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 727.046907][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 727.056547][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 727.083911][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 727.093556][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 727.117754][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 727.127379][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 727.135286][T14853] ldm_validate_partition_table(): Disk read failed. [ 727.142715][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 727.152367][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 727.160599][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 727.170253][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 727.178797][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 727.188410][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 727.206431][T14853] Dev loop9: unable to read RDB block 0 [ 727.227408][ T30] audit: type=1326 audit(1775533274.374:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14865 comm="syz.4.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07459c819 code=0x7ffc0000 [ 727.265303][T14853] loop9: unable to read partition table [ 727.271712][T14853] loop9: partition table beyond EOD, truncated [ 727.278195][T14853] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 727.380751][ T30] audit: type=1326 audit(1775533274.374:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14865 comm="syz.4.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07459c819 code=0x7ffc0000 [ 727.413627][ T30] audit: type=1326 audit(1775533274.384:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14865 comm="syz.4.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff07459c819 code=0x7ffc0000 [ 727.436650][T14867] IPVS: Scheduler module ip_vs_ not found [ 727.459607][ T30] audit: type=1326 audit(1775533274.384:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14865 comm="syz.4.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07459c819 code=0x7ffc0000 [ 727.565598][T14879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 727.645663][T10869] usb 2-1: USB disconnect, device number 124 [ 727.722876][ T30] audit: type=1326 audit(1775533274.384:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14865 comm="syz.4.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07459c819 code=0x7ffc0000 [ 727.806233][ T30] audit: type=1326 audit(1775533274.384:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14865 comm="syz.4.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff07459c819 code=0x7ffc0000 [ 728.076117][T14885] tipc: Enabling of bearer rejected, failed to enable media [ 728.125902][ T30] audit: type=1326 audit(1775533274.614:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14865 comm="syz.4.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07459c819 code=0x7ffc0000 [ 728.351126][ T30] audit: type=1326 audit(1775533274.614:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14865 comm="syz.4.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07459c819 code=0x7ffc0000 [ 728.407682][ T30] audit: type=1326 audit(1775533275.234:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14886 comm="syz.0.2360" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f464bb9c819 code=0x0 [ 728.462522][ T30] audit: type=1326 audit(1775533275.234:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14886 comm="syz.0.2360" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f464bb9c819 code=0x0 [ 728.574991][T12075] usb 5-1: new full-speed USB device number 110 using dummy_hcd [ 728.627245][T14897] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 728.830137][T12075] usb 5-1: not running at top speed; connect to a high speed hub [ 728.846642][T12075] usb 5-1: config 1 interface 0 altsetting 14 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 728.865193][T12075] usb 5-1: config 1 interface 0 has no altsetting 0 [ 728.876177][T12075] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 728.886461][T12075] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.919759][T12075] usb 5-1: Product: П [ 728.929100][T12075] usb 5-1: Manufacturer: 㐁 [ 728.938108][T12075] usb 5-1: SerialNumber: љ [ 729.474352][T14890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.487598][T14890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.519080][T12075] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 729.535185][T12075] usb 5-1: USB disconnect, device number 110 [ 729.995030][ T980] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 730.155132][ T29] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 730.168734][ T980] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 730.177855][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.189690][ T980] usb 3-1: Product: syz [ 730.193881][ T980] usb 3-1: Manufacturer: syz [ 730.206879][ T980] usb 3-1: SerialNumber: syz [ 730.223045][ T980] usb 3-1: config 0 descriptor?? [ 730.234715][ T980] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 730.307698][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.327168][ T29] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 730.340554][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.354219][ T29] usb 2-1: Product: syz [ 730.362991][ T29] usb 2-1: Manufacturer: syz [ 730.367769][ T29] usb 2-1: SerialNumber: syz [ 730.394621][ T29] usb 2-1: config 0 descriptor?? [ 730.406738][ T29] usb 2-1: bad CDC descriptors [ 730.412392][ T29] usb 2-1: unsupported MDLM descriptors [ 730.475403][T10869] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 730.543642][T14915] netlink: 'syz.3.2368': attribute type 1 has an invalid length. [ 730.568726][T14915] 8021q: adding VLAN 0 to HW filter on device bond3 [ 730.626614][T10869] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 730.637391][T10869] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 730.641865][ T980] gspca_sunplus: reg_w_riv err -71 [ 730.648239][T10869] usb 5-1: config 0 interface 0 has no altsetting 0 [ 730.676002][ T980] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 730.676849][T10869] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 730.695349][T10869] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 730.703687][T10869] usb 5-1: Product: syz [ 730.708326][T10869] usb 5-1: Manufacturer: syz [ 730.712972][T10869] usb 5-1: SerialNumber: syz [ 730.723644][ T980] usb 3-1: USB disconnect, device number 117 [ 730.746237][T10869] usb 5-1: config 0 descriptor?? [ 730.761908][T10869] hub 5-1:0.0: bad descriptor, ignoring hub [ 730.771468][T10869] hub 5-1:0.0: probe with driver hub failed with error -5 [ 730.792257][T10869] usb 5-1: selecting invalid altsetting 0 [ 731.104972][ T9] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 731.254958][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 731.273938][ T9] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 731.292798][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.313046][ T9] usb 1-1: Product: syz [ 731.318260][ T9] usb 1-1: Manufacturer: syz [ 731.323995][ T9] usb 1-1: SerialNumber: syz [ 731.331490][ T9] usb 1-1: config 0 descriptor?? [ 731.343081][ T9] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 731.351382][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 731.357257][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 731.367643][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 731.373405][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 731.399289][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 731.439537][T14931] netlink: 'syz.2.2372': attribute type 4 has an invalid length. [ 731.561080][T14923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.563595][ T9] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 731.577080][T14923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.580626][ T9] usb 1-1: media controller created [ 731.700281][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 731.725874][ T9] usb 1-1: selecting invalid altsetting 3 [ 731.731716][ T9] ttusb2: set interface to alts=3 failed [ 731.773890][ T9] DVB: Unable to find symbol tda10086_attach() [ 731.788031][ T9] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 731.797611][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 731.804792][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 731.818043][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 731.824143][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 731.834571][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 731.860568][ T9] usb 1-1: USB disconnect, device number 106 [ 731.897187][T10869] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 731.950718][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 732.069683][T14941] fuse: Bad value for 'rootmode' [ 732.085287][T10869] usb 3-1: Using ep0 maxpacket: 16 [ 732.092967][T10869] usb 3-1: config 0 has no interfaces? [ 732.102048][T10869] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 732.117194][T10869] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 732.126890][T10869] usb 3-1: Manufacturer: syz [ 732.143061][T10869] usb 3-1: config 0 descriptor?? [ 732.445004][ T980] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 732.661543][T14951] bridge0: port 3(hsr0) entered disabled state [ 732.667971][T14951] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.675287][T14951] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.714320][T12075] usb 2-1: USB disconnect, device number 125 [ 732.799445][ T980] usb 4-1: device descriptor read/64, error -71 [ 733.065439][ T980] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 733.129696][T14951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 733.207981][ T980] usb 4-1: device descriptor read/64, error -71 [ 733.316382][T10869] usb 5-1: USB disconnect, device number 111 [ 733.329486][ T980] usb usb4-port1: attempt power cycle [ 733.415728][T14951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 733.446327][ T30] audit: type=1326 audit(1775533280.604:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14958 comm="syz.4.2380" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff07459c819 code=0x0 [ 733.496023][ T30] audit: type=1326 audit(1775533280.654:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14958 comm="syz.4.2380" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff07459c819 code=0x0 [ 733.534614][T14955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2379'. [ 733.545482][ T49] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.554527][ T49] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.567929][ T49] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.577679][ T49] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.686082][ T980] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 733.718064][ T980] usb 4-1: device descriptor read/8, error -71 [ 733.778254][T14963] binder: BINDER_SET_CONTEXT_MGR already set [ 733.784533][T14963] binder: 14962:14963 ioctl 4018620d 200000002540 returned -16 [ 733.797241][T14963] binder: 14962:14963 ioctl c0306201 200000000140 returned -11 [ 733.955080][ T980] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 733.968310][T14968] netlink: 'syz.1.2383': attribute type 4 has an invalid length. [ 733.977365][ T980] usb 4-1: device descriptor read/8, error -71 [ 734.085672][ T980] usb usb4-port1: unable to enumerate USB device [ 734.115155][T12075] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 734.225748][ T980] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 734.265074][T12075] usb 1-1: Using ep0 maxpacket: 32 [ 734.273820][T12075] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.285345][T12075] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 734.297654][T12075] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 734.307143][T12075] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.318210][T12075] usb 1-1: config 0 descriptor?? [ 734.328603][T12075] hub 1-1:0.0: USB hub found [ 734.365033][ T980] usb 2-1: device descriptor read/64, error -71 [ 734.527404][T12075] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 734.635067][ T980] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 734.729962][T10869] usb 3-1: USB disconnect, device number 118 [ 734.775005][ T980] usb 2-1: device descriptor read/64, error -71 [ 734.897304][ T980] usb usb2-port1: attempt power cycle [ 734.931141][T12075] hid-generic 0003:046D:C31C.003D: item fetching failed at offset 0/1 [ 734.939944][T12075] hid-generic 0003:046D:C31C.003D: probe with driver hid-generic failed with error -22 [ 735.155048][T10869] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 735.193460][T14974] fuse: Bad value for 'rootmode' [ 735.245423][ T980] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 735.265567][ T980] usb 2-1: device descriptor read/8, error -71 [ 735.305189][ T5908] usb 1-1: USB disconnect, device number 107 [ 735.337003][T10869] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 735.351140][T10869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 735.381147][T10869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 735.391902][T10869] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 735.405177][T10869] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 735.414244][T10869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.509479][T10869] usb 3-1: config 0 descriptor?? [ 735.544993][ T980] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 735.575912][ T980] usb 2-1: device descriptor read/8, error -71 [ 735.665179][T12075] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 735.695511][ T980] usb usb2-port1: unable to enumerate USB device [ 735.824967][T12075] usb 1-1: Using ep0 maxpacket: 32 [ 735.847198][T12075] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.859233][T12075] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.869870][T12075] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 735.879723][T12075] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.893489][T12075] usb 1-1: config 0 descriptor?? [ 735.906759][T12075] hub 1-1:0.0: USB hub found [ 735.955468][T10869] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 736.113454][T12075] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 736.124641][T12075] usbhid 1-1:0.0: can't add hid device: -71 [ 736.155089][T12075] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 736.195739][T12075] usb 1-1: USB disconnect, device number 108 [ 736.475005][ T980] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 736.635742][ T980] usb 4-1: Using ep0 maxpacket: 32 [ 736.643193][ T980] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 736.652995][ T980] usb 4-1: config 0 has no interface number 0 [ 736.661353][T12075] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 736.673816][ T980] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 736.683552][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.698836][ T980] usb 4-1: Product: syz [ 736.703036][ T980] usb 4-1: Manufacturer: syz [ 736.713608][ T980] usb 4-1: SerialNumber: syz [ 736.724563][ T980] usb 4-1: config 0 descriptor?? [ 736.760935][T10869] usb 3-1: USB disconnect, device number 119 [ 736.878620][T12075] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.903529][T12075] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 736.913157][T12075] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.923123][T12075] usb 5-1: Product: syz [ 736.928653][T12075] usb 5-1: Manufacturer: syz [ 736.949942][T12075] usb 5-1: SerialNumber: syz [ 736.957135][ T980] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 736.985351][ T980] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 737.000358][T12075] usb 5-1: config 0 descriptor?? [ 737.011611][T12075] usb 5-1: bad CDC descriptors [ 737.023727][T12075] usb 5-1: unsupported MDLM descriptors [ 737.141848][ T980] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 737.167234][ T980] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 737.221380][T14986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.231399][T14986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.671840][ T5908] usb 4-1: USB disconnect, device number 122 [ 737.732587][T15018] syzkaller0: entered promiscuous mode [ 737.751219][T15018] syzkaller0: entered allmulticast mode [ 737.826459][T15018] tipc: Enabled bearer , priority 10 [ 737.837629][T15017] tipc: Resetting bearer [ 737.902995][T15017] tipc: Disabling bearer [ 738.023774][ T30] audit: type=1326 audit(1775533285.174:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15023 comm="syz.0.2399" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f464bb9c819 code=0x0 [ 738.073223][ T30] audit: type=1326 audit(1775533285.224:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15023 comm="syz.0.2399" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f464bb9c819 code=0x0 [ 738.182162][T15034] netlink: 'syz.3.2402': attribute type 11 has an invalid length. [ 738.755319][T15062] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 739.059386][T15069] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 739.085208][T15069] geneve4: entered promiscuous mode [ 739.090577][T15069] geneve4: entered allmulticast mode [ 739.315328][T12075] usb 5-1: USB disconnect, device number 112 [ 740.147092][T15100] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2418'. [ 740.165110][ T5908] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 740.991358][ T5908] usb 4-1: unable to get BOS descriptor or descriptor too short [ 741.003616][ T5908] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 741.036998][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.055038][ T5908] usb 4-1: Product: syz [ 741.065256][ T5908] usb 4-1: Manufacturer: syz [ 741.080267][ T5908] usb 4-1: SerialNumber: syz [ 741.355061][T10869] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 741.425023][ T980] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 741.474733][ T5908] snd-usb-us122l 4-1:1.1: usb_set_interface error [ 741.492490][ T5908] snd-usb-us122l 4-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 741.522673][ T5908] usb 4-1: USB disconnect, device number 123 [ 741.529220][T10869] usb 1-1: Using ep0 maxpacket: 32 [ 741.539718][T10869] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 741.555043][ T29] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 741.562989][T10869] usb 1-1: config 0 has no interface number 0 [ 741.573834][T15128] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 741.585208][T10869] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 741.621306][T15128] geneve4: entered promiscuous mode [ 741.626784][T15128] geneve4: entered allmulticast mode [ 741.633259][ T980] usb 2-1: Using ep0 maxpacket: 32 [ 741.637058][T10869] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 741.665130][T10869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.667629][ T980] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 741.683847][ T980] usb 2-1: config 0 has no interface number 0 [ 741.696089][ T980] usb 2-1: config 0 interface 12 has no altsetting 0 [ 741.717629][T10869] usb 1-1: Product: syz [ 741.726745][ T980] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 741.728542][T10869] usb 1-1: Manufacturer: syz [ 741.736796][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.741034][ T29] usb 3-1: config 4 has an invalid interface number: 88 but max is 0 [ 741.749234][ T980] usb 2-1: Product: syz [ 741.761440][ T29] usb 3-1: config 4 has no interface number 0 [ 741.768223][T10869] usb 1-1: SerialNumber: syz [ 741.775003][ T29] usb 3-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping [ 741.781532][ T980] usb 2-1: Manufacturer: syz [ 741.787250][T10869] usb 1-1: config 0 descriptor?? [ 741.790737][ T980] usb 2-1: SerialNumber: syz [ 741.796957][ T29] usb 3-1: config 4 interface 88 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 741.812490][T15106] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 741.820307][ T29] usb 3-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 741.858523][ T980] usb 2-1: config 0 descriptor?? [ 741.925217][ T29] usb 3-1: config 4 interface 88 has no altsetting 0 [ 741.944489][ T29] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 741.962557][ T29] usb 3-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3 [ 741.981115][ T29] usb 3-1: Manufacturer: syz [ 741.991175][ T29] usb 3-1: SerialNumber: syz [ 742.005046][ T5908] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 742.016267][T15112] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 742.035945][T15106] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 742.172306][ T5908] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 742.181838][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.190528][ T5908] usb 4-1: Product: syz [ 742.196434][ T5908] usb 4-1: Manufacturer: syz [ 742.201173][ T5908] usb 4-1: SerialNumber: syz [ 742.216521][ T5908] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 742.243063][ T29] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 742.301665][ T5908] usb 3-1: USB disconnect, device number 120 [ 742.333283][T10869] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 742.385333][T10869] asix 1-1:0.188: probe with driver asix failed with error -71 [ 742.418635][T10869] usb 1-1: USB disconnect, device number 109 [ 742.474779][T15109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.486822][T15109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.531960][T15134] fuse: Bad value for 'fd' [ 742.635021][ T980] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: d8 failed: -71 [ 742.643420][ T980] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 742.662067][T15127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.671534][T15126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.676005][T15127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.726294][T15126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.137636][ T980] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 743.137747][ T5908] usb 4-1: USB disconnect, device number 124 [ 743.145451][ T980] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 743.370529][ T29] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 743.395008][ T980] usb 2-1: USB disconnect, device number 4 [ 743.420504][ T29] ath9k_htc: Failed to initialize the device [ 743.459036][ T5908] usb 4-1: ath9k_htc: USB layer deinitialized [ 743.550712][ T30] audit: type=1326 audit(1775533290.704:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15151 comm="syz.1.2434" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b4f99c819 code=0x0 [ 743.600123][ T30] audit: type=1326 audit(1775533290.754:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15151 comm="syz.1.2434" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b4f99c819 code=0x0 [ 743.773976][T15162] trusted_key: encrypted_key: master key parameter '' is invalid [ 744.135044][ T980] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 744.247599][T15173] random: crng reseeded on system resumption [ 744.269385][T15173] loop9: detected capacity change from 0 to 7 [ 744.285361][ C0] blk_print_req_error: 10 callbacks suppressed [ 744.285385][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 744.301239][ C0] buffer_io_error: 10 callbacks suppressed [ 744.301251][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 744.335862][ T980] usb 4-1: Using ep0 maxpacket: 32 [ 744.365844][ T980] usb 4-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 744.377993][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 744.387635][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 744.403796][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 744.413437][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 744.506471][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 744.516130][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 744.524213][ T980] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 744.551099][ T980] usb 4-1: New USB device found, idVendor=0e41, idProduct=4141, bcdDevice= 0.40 [ 744.562021][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.570261][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 744.580010][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 744.588179][ T980] usb 4-1: Product: syz [ 744.589091][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 744.601972][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 744.620986][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 744.630631][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 744.632512][ T980] usb 4-1: Manufacturer: syz [ 744.643269][T15173] ldm_validate_partition_table(): Disk read failed. [ 744.698667][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 744.708422][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 744.915656][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 744.925305][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 744.937204][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 744.946856][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 744.955269][T15173] Dev loop9: unable to read RDB block 0 [ 744.962155][T15173] loop9: unable to read partition table [ 744.969735][T15173] loop9: partition table beyond EOD, truncated [ 744.976040][T15173] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 745.036523][ T980] usb 4-1: SerialNumber: syz [ 745.196205][ T30] audit: type=1326 audit(1775533292.354:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15176 comm="syz.4.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07459c819 code=0x7ffc0000 [ 745.219768][ T30] audit: type=1326 audit(1775533292.374:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15176 comm="syz.4.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07459c819 code=0x7ffc0000 [ 745.260660][ T30] audit: type=1326 audit(1775533292.404:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15176 comm="syz.4.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff07459c819 code=0x7ffc0000 [ 745.276347][T15166] mmap: syz.3.2439 (15166): VmData 37457920 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 745.296366][ T30] audit: type=1326 audit(1775533292.404:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15176 comm="syz.4.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07459c819 code=0x7ffc0000 [ 745.329354][ T30] audit: type=1326 audit(1775533292.404:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15176 comm="syz.4.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07459c819 code=0x7ffc0000 [ 745.356690][ T980] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 745.384182][ T30] audit: type=1326 audit(1775533292.524:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15176 comm="syz.4.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7ff07459c819 code=0x7ffc0000 [ 745.407023][ T980] usb 4-1: 0:2 : does not exist [ 745.426405][ T30] audit: type=1326 audit(1775533292.524:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15176 comm="syz.4.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff07459c819 code=0x7ffc0000 [ 745.507575][ T980] usb 4-1: USB disconnect, device number 125 [ 745.541736][ T30] audit: type=1326 audit(1775533292.524:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15176 comm="syz.4.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7ff07459c819 code=0x7ffc0000 [ 745.999271][T15186] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2443'. [ 747.132142][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.138542][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.591797][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 748.591815][ T30] audit: type=1326 audit(1775533295.744:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.2.2456" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e06d9c819 code=0x0 [ 748.665904][ T30] audit: type=1326 audit(1775533295.744:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.2.2456" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e06d9c819 code=0x0 [ 748.700107][T15242] netlink: 'syz.3.2457': attribute type 6 has an invalid length. [ 749.055036][ T5908] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 749.125909][ T29] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 749.206294][ T5908] usb 1-1: Using ep0 maxpacket: 8 [ 749.215423][ T5908] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 749.223896][ T5908] usb 1-1: config 0 has no interface number 0 [ 749.236823][ T5908] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 749.256969][ T5908] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 749.281461][ T5908] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 749.293489][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 749.305627][ T5908] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 749.320826][ T29] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.332774][ T5908] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 749.343008][ T29] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.354886][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.364539][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 749.385923][ T5908] usb 1-1: config 0 descriptor?? [ 749.392844][ T29] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 749.408726][ T5908] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 749.423501][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.458996][ T29] usb 5-1: config 0 descriptor?? [ 749.976095][ T5908] usb 1-1: USB disconnect, device number 110 [ 749.976233][ C0] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 749.999805][T15248] ldusb: No device or device unplugged -19 [ 749.999803][ T5908] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 750.643386][ T29] usbhid 5-1:0.0: can't add hid device: -71 [ 750.669632][ T29] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 750.713472][ T29] usb 5-1: USB disconnect, device number 113 [ 750.937105][T15266] x_tables: duplicate underflow at hook 1 [ 750.953243][T15266] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2463'. [ 751.072059][T15283] netlink: 'syz.0.2467': attribute type 4 has an invalid length. [ 751.437578][T15287] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2469'. [ 751.611878][T15289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2470'. [ 751.822812][T15295] openvswitch: netlink: Multiple metadata blocks provided [ 752.225015][ T980] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 752.418894][ T980] usb 5-1: config 1 interface 0 has no altsetting 0 [ 752.618047][ T980] usb 5-1: string descriptor 0 read error: -22 [ 752.624433][ T980] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.40 [ 752.633942][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.064737][ T980] greenasia 0003:0E8F:0012.003F: unknown main item tag 0x0 [ 753.085043][ T980] greenasia 0003:0E8F:0012.003F: unknown main item tag 0x0 [ 753.092306][ T980] greenasia 0003:0E8F:0012.003F: unknown main item tag 0x0 [ 753.103227][ T980] greenasia 0003:0E8F:0012.003F: unknown main item tag 0x0 [ 753.111196][ T980] greenasia 0003:0E8F:0012.003F: unknown main item tag 0x0 [ 753.118937][ T980] greenasia 0003:0E8F:0012.003F: unknown main item tag 0x0 [ 753.126494][ T980] greenasia 0003:0E8F:0012.003F: unknown main item tag 0x0 [ 753.156530][ T980] greenasia 0003:0E8F:0012.003F: unknown main item tag 0x0 [ 753.173822][ T980] greenasia 0003:0E8F:0012.003F: unknown main item tag 0x0 [ 753.181417][ T9] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 753.194548][ T980] greenasia 0003:0E8F:0012.003F: unknown main item tag 0x0 [ 753.275036][ T29] usb 1-1: new low-speed USB device number 111 using dummy_hcd [ 753.310302][ T980] greenasia 0003:0E8F:0012.003F: hidraw0: USB HID vff.7f Device [HID 0e8f:0012] on usb-dummy_hcd.4-1/input0 [ 753.343909][ T980] greenasia 0003:0E8F:0012.003F: no inputs found [ 753.368274][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 753.378507][ T5908] usb 5-1: USB disconnect, device number 114 [ 753.384772][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.413312][ T9] usb 4-1: config 0 descriptor?? [ 753.430506][ T9] cp210x 4-1:0.0: cp210x converter detected [ 753.437494][ T29] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 753.474061][ T29] usb 1-1: config 0 has no interface number 0 [ 753.557420][ T29] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 753.577868][T15320] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2479'. [ 753.592549][ T30] audit: type=1326 audit(1775533300.744:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15326 comm="syz.4.2481" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff07459c819 code=0x0 [ 753.625091][ T30] audit: type=1326 audit(1775533300.774:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15326 comm="syz.4.2481" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff07459c819 code=0x0 [ 753.625098][ T29] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 753.625128][ T29] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 753.725058][ T29] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 753.745037][ T29] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 753.775910][ T30] audit: type=1326 audit(1775533300.864:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15326 comm="syz.4.2481" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff07459c819 code=0x0 [ 753.854160][ T29] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 753.946915][ T29] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 753.965079][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.985465][T15311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2478'. [ 754.015874][ T29] usb 1-1: config 0 descriptor?? [ 754.021696][T15315] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 754.068484][T15315] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 754.116699][ T9] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 754.275260][ T9] usb 4-1: cp210x converter now attached to ttyUSB0 [ 754.403735][ T29] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 754.610768][ T29] usb 4-1: USB disconnect, device number 126 [ 754.628500][ T29] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 754.671768][ T29] cp210x 4-1:0.0: device disconnected [ 754.740861][ T1225] usb 1-1: USB disconnect, device number 111 [ 754.769612][ T1225] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 754.774671][T15339] netlink: 'syz.2.2484': attribute type 1 has an invalid length. [ 754.969325][T15353] netlink: 'syz.1.2483': attribute type 4 has an invalid length. [ 755.385018][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 755.745018][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 755.752233][ T9] usb 2-1: config 0 has no interfaces? [ 755.897897][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 755.990204][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 756.048390][ T9] usb 2-1: Manufacturer: syz [ 756.114326][ T9] usb 2-1: config 0 descriptor?? [ 756.286500][ T980] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 756.485156][ T980] usb 1-1: Using ep0 maxpacket: 16 [ 756.516921][ T980] usb 1-1: unable to get BOS descriptor or descriptor too short [ 756.557271][ T980] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 756.631912][ T980] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 9509, setting to 1024 [ 756.712273][ T980] usb 1-1: config 1 interface 2 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 756.753478][ T980] usb 1-1: New USB device found, idVendor=0582, idProduct=0047, bcdDevice= 0.40 [ 756.787966][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.826738][ T980] usb 1-1: Product: syz [ 756.848435][ T980] usb 1-1: Manufacturer: syz [ 756.871758][ T980] usb 1-1: SerialNumber: syz [ 757.150467][ T980] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 757.315238][ T980] usb 1-1: USB disconnect, device number 112 [ 757.425275][ T29] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 757.457564][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 758.118059][T15406] random: crng reseeded on system resumption [ 758.395079][ T5908] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 758.721003][ T980] usb 2-1: USB disconnect, device number 5 [ 758.761230][ T5908] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.796030][ T5908] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 758.894988][ T9] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 759.020413][ T5908] usb 5-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 759.049113][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.065015][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 759.074052][ T5908] usb 5-1: Product: syz [ 759.075404][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 759.090765][ T5908] usb 5-1: Manufacturer: syz [ 759.094499][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 759.117083][ T5908] usb 5-1: SerialNumber: syz [ 759.131799][ T9] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 759.146412][ T5908] usb 5-1: config 0 descriptor?? [ 759.162687][T15427] fuse: Bad value for 'fd' [ 759.172817][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.212029][ T9] usb 3-1: Product: syz [ 759.243693][ T9] usb 3-1: Manufacturer: syz [ 759.252353][ T9] usb 3-1: SerialNumber: syz [ 759.513407][T15431] netlink: 'syz.3.2505': attribute type 21 has an invalid length. [ 759.521590][T15431] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2505'. [ 759.561865][T15431] netlink: 'syz.3.2505': attribute type 5 has an invalid length. [ 759.572991][ T9] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 759.589682][T15431] netlink: 'syz.3.2505': attribute type 6 has an invalid length. [ 759.599839][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 759.609288][T15431] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2505'. [ 759.755697][ T5908] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 759.946689][ T5908] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 759.975129][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.989644][ T5908] usb 2-1: Product: syz [ 759.994281][ T5908] usb 2-1: Manufacturer: syz [ 759.999980][ T5908] usb 2-1: SerialNumber: syz [ 760.022020][ T5908] usb 2-1: config 0 descriptor?? [ 760.035040][ T29] usb 4-1: device descriptor read/64, error -71 [ 760.047045][ T5908] hub 2-1:0.0: bad descriptor, ignoring hub [ 760.053110][ T5908] hub 2-1:0.0: probe with driver hub failed with error -5 [ 760.239640][ T5908] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 760.276291][ T29] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 760.298006][ T5908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 760.308868][ T5908] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 760.324157][ T5908] usb 2-1: media controller created [ 760.349630][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 760.418339][ T29] usb 4-1: device descriptor read/64, error -71 [ 760.462085][ T5908] DVB: Unable to find symbol dib7000p_attach() [ 760.475070][ T5908] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 760.536565][ T29] usb usb4-port1: attempt power cycle [ 760.594997][ T5908] rc_core: IR keymap rc-dib0700-rc5 not found [ 760.601818][ T5908] Registered IR keymap rc-empty [ 760.609454][ T5908] dvb-usb: could not initialize remote control. [ 760.625652][ T5908] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 760.885381][ T29] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 760.919945][ T29] usb 4-1: device descriptor read/8, error -71 [ 761.175046][ T29] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 761.195816][ T29] usb 4-1: device descriptor read/8, error -71 [ 761.305986][ T29] usb usb4-port1: unable to enumerate USB device [ 762.532481][T15443] loop5: detected capacity change from 0 to 7 [ 762.548497][T15443] Dev loop5: unable to read RDB block 7 [ 762.563374][T15443] loop5: unable to read partition table [ 762.571002][T15443] loop5: partition table beyond EOD, truncated [ 762.585891][T15443] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 762.739907][ T10] usb 5-1: USB disconnect, device number 115 [ 762.834301][ T5908] usb 2-1: USB disconnect, device number 6 [ 762.966278][ T5908] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 763.060744][ T10] IPVS: starting estimator thread 0... [ 763.165035][T15458] IPVS: using max 58 ests per chain, 139200 per kthread [ 763.536006][ T5908] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 763.573074][T15468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2515'. [ 763.589559][T15468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2515'. [ 763.665098][ T29] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 763.700632][ T5908] usb 2-1: Using ep0 maxpacket: 32 [ 763.740540][ T5908] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.786155][ T5908] usb 2-1: too many endpoints for config 0 interface 0 altsetting 11: 36, using maximum allowed: 30 [ 763.818314][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 763.845054][ T1225] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 763.857519][ T5908] usb 2-1: config 0 interface 0 altsetting 11 bulk endpoint 0x6 has invalid maxpacket 255 [ 763.884804][ T29] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 763.920859][ T5908] usb 2-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 36 [ 763.934456][ T29] usb 5-1: config 0 has no interface number 0 [ 763.944281][ T29] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 763.970355][ T5908] usb 2-1: config 0 interface 0 has no altsetting 0 [ 763.990439][ T29] usb 5-1: config 0 interface 85 has no altsetting 0 [ 764.011427][ T5908] usb 2-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 764.028102][ T29] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 764.048308][ T1225] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 764.063595][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.075219][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.090778][ T1225] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 764.106487][ T5908] usb 2-1: Product: syz [ 764.115162][ T29] usb 5-1: Product: syz [ 764.119344][ T29] usb 5-1: Manufacturer: syz [ 764.134641][ T5908] usb 2-1: Manufacturer: syz [ 764.146218][ T1225] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 764.164811][ T5908] usb 2-1: SerialNumber: syz [ 764.169899][ T29] usb 5-1: SerialNumber: syz [ 764.180089][ T1225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 764.196749][ T5908] usb 2-1: config 0 descriptor?? [ 764.202860][ T29] usb 5-1: config 0 descriptor?? [ 764.233102][ T1225] usb 1-1: SerialNumber: syz [ 764.285021][T15461] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 764.531259][ T30] audit: type=1800 audit(1775533311.684:225): pid=15479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2514" name="bus" dev="tmpfs" ino=2559 res=0 errno=0 [ 764.635024][ T10] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 764.805180][ T10] usb 4-1: device descriptor read/64, error -71 [ 765.055145][ T10] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 765.121576][ T29] appletouch 5-1:0.85: Geyser mode initialized. [ 765.156568][ T29] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input64 [ 765.205000][ T10] usb 4-1: device descriptor read/64, error -71 [ 765.365409][T15492] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2519'. [ 765.386774][ T10] usb usb4-port1: attempt power cycle [ 765.747778][ T10] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 765.793552][ T10] usb 4-1: device descriptor read/8, error -71 [ 766.055008][ T10] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 766.095593][ T10] usb 4-1: device descriptor read/8, error -71 [ 766.218547][ T10] usb usb4-port1: unable to enumerate USB device [ 766.447827][ T10] usb 5-1: USB disconnect, device number 116 [ 766.485227][ T10] appletouch 5-1:0.85: input: appletouch disconnected [ 766.836236][T15508] syzkaller0: entered promiscuous mode [ 766.855061][T15508] syzkaller0: entered allmulticast mode [ 766.893556][T15508] tipc: Enabled bearer , priority 0 [ 766.912117][T15507] tipc: Resetting bearer [ 766.980846][T15507] tipc: Disabling bearer [ 767.395310][T15523] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 767.561287][T15527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2531'. [ 767.725900][T15538] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2532'. [ 767.793828][T15540] netlink: 'syz.3.2533': attribute type 4 has an invalid length. [ 768.175157][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 768.365663][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 768.379168][ T10] usb 4-1: config 0 has no interfaces? [ 768.400291][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 768.424940][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 768.453769][ T10] usb 4-1: Manufacturer: syz [ 768.481034][ T10] usb 4-1: config 0 descriptor?? [ 769.186824][T15554] tipc: Enabling of bearer rejected, failed to enable media [ 769.403109][T15556] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2537'. [ 769.454832][T15560] netlink: 'syz.2.2537': attribute type 9 has an invalid length. [ 769.489167][T15560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2537'. [ 769.627671][T15562] syzkaller0: entered promiscuous mode [ 769.656365][T15562] syzkaller0: entered allmulticast mode [ 769.817948][T15562] tipc: Enabled bearer , priority 0 [ 769.847196][T15558] tipc: Resetting bearer [ 769.933824][T15558] tipc: Disabling bearer [ 771.465333][ T980] usb 4-1: USB disconnect, device number 9 [ 772.455814][T15588] random: crng reseeded on system resumption [ 772.515371][T15591] loop9: detected capacity change from 0 to 7 [ 772.538304][ C0] blk_print_req_error: 10 callbacks suppressed [ 772.538317][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 772.554060][ C0] buffer_io_error: 10 callbacks suppressed [ 772.554081][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 772.585008][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 772.594590][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 772.625497][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 772.635111][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 772.645011][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 772.654592][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 772.662716][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 772.672296][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 772.680657][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 772.690242][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 772.699856][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 772.709419][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 772.728241][T15591] ldm_validate_partition_table(): Disk read failed. [ 772.728493][T15584] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2544'. [ 772.744860][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 772.754524][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 772.764857][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 772.774544][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 772.794960][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 772.804550][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 772.815081][T15591] Dev loop9: unable to read RDB block 0 [ 772.824319][T15591] loop9: unable to read partition table [ 772.832937][T15591] loop9: partition table beyond EOD, truncated [ 772.839964][T15591] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 773.810527][T15603] SET target dimension over the limit! [ 773.828783][T15603] netdevsim netdevsim2: Direct firmware load for / [ 773.828783][T15603] failed with error -2 [ 773.876091][T15603] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 773.876091][T15603] [ 775.450988][T15618] fuse: Bad value for 'fd' [ 776.077765][ T30] audit: type=1326 audit(1775533323.234:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15625 comm="syz.3.2552" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c0599c819 code=0x0 [ 776.173283][ T30] audit: type=1326 audit(1775533323.254:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15625 comm="syz.3.2552" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c0599c819 code=0x0 [ 776.248501][ T30] audit: type=1326 audit(1775533323.284:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15625 comm="syz.3.2552" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c0599c819 code=0x0 [ 776.451952][T15629] kvm: pic: non byte write [ 777.275025][T10869] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 777.425088][T10869] usb 5-1: Using ep0 maxpacket: 16 [ 777.455550][T10869] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 777.481073][T10869] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 777.521324][T10869] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 777.546808][T10869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.586579][T10869] usb 5-1: Product: syz [ 777.590785][T10869] usb 5-1: Manufacturer: syz [ 777.635029][T10869] usb 5-1: SerialNumber: syz [ 777.798335][T15642] syzkaller0: entered promiscuous mode [ 777.803820][T15642] syzkaller0: entered allmulticast mode [ 778.248851][T15645] tipc: Enabled bearer , priority 0 [ 778.259160][T15641] tipc: Resetting bearer [ 778.292114][T15641] tipc: Disabling bearer [ 778.686845][T15658] netdevsim netdevsim0: Direct firmware load for / [ 778.686845][T15658] failed with error -2 [ 778.710557][T15658] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 778.710557][T15658] [ 778.752156][T15656] SET target dimension over the limit! [ 778.914598][T15663] netlink: 'syz.3.2558': attribute type 4 has an invalid length. [ 779.265162][ T29] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 779.425110][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 779.432295][ T29] usb 4-1: config 0 has no interfaces? [ 779.441278][ T29] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 779.456647][ T29] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 779.528051][ T29] usb 4-1: Manufacturer: syz [ 779.648650][ T29] usb 4-1: config 0 descriptor?? [ 779.765964][T15657] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2562'. [ 781.783461][T15699] random: crng reseeded on system resumption [ 781.826993][ T29] usb 4-1: USB disconnect, device number 10 [ 782.361722][T15710] ip6t_srh: unknown srh invflags 4000 [ 784.408776][T15728] netlink: 'syz.3.2581': attribute type 4 has an invalid length. [ 784.785600][ T5830] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 784.942856][T15740] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 784.956578][T15740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2585'. [ 784.967447][ T5830] usb 4-1: Using ep0 maxpacket: 16 [ 784.981513][ T5830] usb 4-1: config 0 has no interfaces? [ 784.991770][ T5830] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 785.007908][ T5830] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 785.016570][ T5830] usb 4-1: Manufacturer: syz [ 785.040126][ T5830] usb 4-1: config 0 descriptor?? [ 787.400116][T15774] SET target dimension over the limit! [ 787.475882][T15774] netdevsim netdevsim4: Direct firmware load for / [ 787.475882][T15774] failed with error -2 [ 787.529788][T15774] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 787.529788][T15774] [ 787.978726][ T795] usb 4-1: USB disconnect, device number 11 [ 788.600560][ T30] audit: type=1800 audit(1775533335.754:229): pid=15786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2600" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 789.291112][T15800] netlink: 'syz.0.2603': attribute type 4 has an invalid length. [ 791.232579][T15823] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2610'. [ 791.554984][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 791.754456][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 791.769724][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.805065][ T10] usb 4-1: Product: syz [ 791.809277][ T10] usb 4-1: Manufacturer: syz [ 791.813873][ T10] usb 4-1: SerialNumber: syz [ 792.883259][ T10] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 793.445155][ T10] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 793.828855][ T10] usb 4-1: USB disconnect, device number 12 [ 793.848445][ T10] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 793.995864][T15857] netlink: 'syz.1.2622': attribute type 4 has an invalid length. [ 794.112515][T15865] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2623'. [ 794.346022][T15868] netlink: 'syz.4.2623': attribute type 10 has an invalid length. [ 794.384234][T15868] team0: Port device dummy0 added [ 794.855060][T12075] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 795.271392][T12075] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.622598][T12075] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 795.686167][T12075] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.753358][T12075] usb 4-1: Product: syz [ 795.794229][T12075] usb 4-1: Manufacturer: syz [ 795.835944][T12075] usb 4-1: SerialNumber: syz [ 795.964240][T12075] usb 4-1: config 0 descriptor?? [ 795.992263][T12075] usb 4-1: bad CDC descriptors [ 796.063253][T12075] usb 4-1: unsupported MDLM descriptors [ 796.337764][T15878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.447863][T15878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.633761][T15913] fuse: Bad value for 'fd' [ 798.783026][T15941] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2637'. [ 798.865342][T15933] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 800.719413][T15969] netlink: 'syz.0.2643': attribute type 4 has an invalid length. [ 803.148996][ T10] usb 4-1: USB disconnect, device number 13 [ 803.866061][T15992] fuse: Bad value for 'fd' [ 804.801493][T16005] fuse: Unknown parameter 'fd0x0000000000000003' [ 805.105045][ T10] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 805.137095][T16009] bond3: Removing last arp target with arp_interval on [ 805.160226][T16009] bond3: entered promiscuous mode [ 805.176846][T16009] bond3: entered allmulticast mode [ 805.182356][T16009] 8021q: adding VLAN 0 to HW filter on device bond3 [ 805.276696][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 805.301639][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 805.322920][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 805.344949][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 805.376248][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 805.404983][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 805.413018][ T10] usb 4-1: Manufacturer: syz [ 805.446879][T16018] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 805.459234][ T10] usb 4-1: config 0 descriptor?? [ 805.806037][ T10] rc_core: IR keymap rc-hauppauge not found [ 805.826968][ T10] Registered IR keymap rc-empty [ 805.847122][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 805.905107][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 805.948505][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 805.999462][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input65 [ 806.076712][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 806.126213][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 806.195373][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 806.265137][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 806.295060][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 806.355067][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 806.455073][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 806.520735][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 806.571439][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 806.615089][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 806.657587][ T10] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 806.905000][ T10] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 806.927478][ T10] usb 4-1: USB disconnect, device number 14 [ 807.505762][ T30] audit: type=1326 audit(1775533354.664:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.0.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464bb9c819 code=0x7ffc0000 [ 807.517627][T16043] netlink: 'syz.0.2659': attribute type 1 has an invalid length. [ 807.612957][ T30] audit: type=1326 audit(1775533354.674:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.0.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464bb9c819 code=0x7ffc0000 [ 807.679046][ T30] audit: type=1326 audit(1775533354.674:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.0.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f464bb9c819 code=0x7ffc0000 [ 807.726098][ T30] audit: type=1326 audit(1775533354.674:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.0.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464bb9c819 code=0x7ffc0000 [ 807.773501][ T30] audit: type=1326 audit(1775533354.674:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.0.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f464bb9c819 code=0x7ffc0000 [ 807.833622][ T30] audit: type=1326 audit(1775533354.674:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.0.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464bb9c819 code=0x7ffc0000 [ 807.883723][ T30] audit: type=1326 audit(1775533354.674:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.0.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f464bb9c819 code=0x7ffc0000 [ 807.955727][ T30] audit: type=1326 audit(1775533354.674:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.0.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464bb9c819 code=0x7ffc0000 [ 808.004743][ T30] audit: type=1326 audit(1775533354.674:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.0.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f464bb9c819 code=0x7ffc0000 [ 808.054257][ T30] audit: type=1326 audit(1775533354.694:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.0.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464bb9c819 code=0x7ffc0000 [ 808.128124][T16050] geneve4: entered promiscuous mode [ 808.143669][T16050] geneve4: entered allmulticast mode [ 808.572672][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.584243][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.647918][T16061] fuse: Bad value for 'fd' [ 808.865487][T16054] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2657'. [ 813.389592][T16131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2681'. [ 813.719334][T16144] netlink: 'syz.3.2682': attribute type 4 has an invalid length. [ 814.100069][ T5830] hid_parser_main: 4007 callbacks suppressed [ 814.100085][ T5830] hid-generic 0006:0006:0005.0040: unknown main item tag 0x0 [ 814.125127][ T980] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 814.247015][ T5830] hid-generic 0006:0006:0005.0040: unknown main item tag 0x0 [ 814.254444][ T5830] hid-generic 0006:0006:0005.0040: unknown main item tag 0x0 [ 814.296076][ T980] usb 4-1: Using ep0 maxpacket: 16 [ 814.376556][ T980] usb 4-1: config 0 has no interfaces? [ 814.388396][ T980] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 814.405085][ T980] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 814.423080][ T980] usb 4-1: Manufacturer: syz [ 814.436930][ T980] usb 4-1: config 0 descriptor?? [ 814.509113][ T5830] hid-generic 0006:0006:0005.0040: unknown main item tag 0x0 [ 814.516774][ T5830] hid-generic 0006:0006:0005.0040: unknown main item tag 0x0 [ 814.988477][ T5830] hid-generic 0006:0006:0005.0040: unknown main item tag 0x0 [ 815.020754][ T5830] hid-generic 0006:0006:0005.0040: unknown main item tag 0x0 [ 815.032053][ T5830] hid-generic 0006:0006:0005.0040: unknown main item tag 0x0 [ 815.040321][ T5830] hid-generic 0006:0006:0005.0040: unknown main item tag 0x0 [ 815.048604][ T5830] hid-generic 0006:0006:0005.0040: unknown main item tag 0x0 [ 815.454311][ T5830] hid-generic 0006:0006:0005.0040: hidraw0: VIRTUAL HID v7fffff.ff Device [syz1] on syz1 [ 815.527806][T16159] fido_id[16159]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 815.747830][T16168] netlink: 'syz.4.2686': attribute type 1 has an invalid length. [ 816.634717][T16182] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2688'. [ 816.674890][T16182] tipc: Failed to remove unknown binding: 66,1,1/4294246401:2491250667/2491250669 [ 816.731902][ T29] usb 4-1: USB disconnect, device number 15 [ 819.208112][T16217] binder: 16213:16217 ioctl c0306201 200000000640 returned -22 [ 819.415616][T16224] netlink: 'syz.3.2701': attribute type 29 has an invalid length. [ 819.424588][T16224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2701'. [ 819.770525][T16239] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2704'. [ 819.817189][T16237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2704'. [ 819.835703][T16239] vlan0: entered allmulticast mode [ 819.843324][T16237] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2704'. [ 819.879371][T16239] erspan0: entered allmulticast mode [ 820.105068][ T29] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 820.306929][ T29] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 820.543257][ T29] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 820.956128][ T29] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 821.034045][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.069297][ T29] usb 4-1: Product: syz [ 821.096705][ T29] usb 4-1: Manufacturer: syz [ 821.117548][ T29] usb 4-1: SerialNumber: syz [ 824.684139][T16308] netlink: 'syz.3.2723': attribute type 4 has an invalid length. [ 825.076582][T16319] FAULT_INJECTION: forcing a failure. [ 825.076582][T16319] name failslab, interval 1, probability 0, space 0, times 0 [ 825.101528][T16319] CPU: 0 UID: 0 PID: 16319 Comm: syz.0.2726 Tainted: G L syzkaller #0 PREEMPT(full) [ 825.101550][T16319] Tainted: [L]=SOFTLOCKUP [ 825.101555][T16319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 825.101562][T16319] Call Trace: [ 825.101567][T16319] [ 825.101573][T16319] dump_stack_lvl+0xe8/0x150 [ 825.101593][T16319] should_fail_ex+0x412/0x560 [ 825.101612][T16319] should_failslab+0xa8/0x100 [ 825.101627][T16319] __kmalloc_noprof+0xe8/0x760 [ 825.101640][T16319] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 825.101658][T16319] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 825.101676][T16319] genl_family_rcv_msg_doit+0xd9/0x330 [ 825.101690][T16319] ? __asan_memcpy+0x40/0x70 [ 825.101702][T16319] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 825.101719][T16319] ? apparmor_capable+0x126/0x170 [ 825.101732][T16319] ? bpf_lsm_capable+0x9/0x20 [ 825.101747][T16319] ? security_capable+0x7e/0x2c0 [ 825.101764][T16319] genl_rcv_msg+0x61c/0x7a0 [ 825.101780][T16319] ? __pfx_genl_rcv_msg+0x10/0x10 [ 825.101793][T16319] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 825.101806][T16319] ? __lock_acquire+0x6b5/0x2cf0 [ 825.101825][T16319] netlink_rcv_skb+0x232/0x4b0 [ 825.101836][T16319] ? __pfx_genl_rcv_msg+0x10/0x10 [ 825.101850][T16319] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 825.101869][T16319] ? down_read+0x272/0x2e0 [ 825.101883][T16319] ? genl_rcv+0xd/0x40 [ 825.101896][T16319] genl_rcv+0x28/0x40 [ 825.101908][T16319] netlink_unicast+0x80f/0x9b0 [ 825.101927][T16319] ? __pfx_netlink_unicast+0x10/0x10 [ 825.101943][T16319] ? netlink_sendmsg+0x650/0xb40 [ 825.101954][T16319] ? skb_put+0x11b/0x210 [ 825.101968][T16319] netlink_sendmsg+0x813/0xb40 [ 825.101984][T16319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 825.101996][T16319] ? aa_sock_msg_perm+0xf1/0x1b0 [ 825.102012][T16319] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 825.102026][T16319] ____sys_sendmsg+0x972/0x9f0 [ 825.102044][T16319] ? __pfx_____sys_sendmsg+0x10/0x10 [ 825.102062][T16319] ? import_iovec+0x73/0xa0 [ 825.102076][T16319] ___sys_sendmsg+0x2a5/0x360 [ 825.102091][T16319] ? __pfx____sys_sendmsg+0x10/0x10 [ 825.102121][T16319] ? __fget_files+0x2a/0x420 [ 825.102130][T16319] ? __fget_files+0x3a0/0x420 [ 825.102144][T16319] __x64_sys_sendmsg+0x1bd/0x2a0 [ 825.102159][T16319] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 825.102177][T16319] ? __pfx_ksys_write+0x10/0x10 [ 825.102200][T16319] do_syscall_64+0x14d/0xf80 [ 825.102214][T16319] ? trace_irq_disable+0x3b/0x150 [ 825.102223][T16319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.102234][T16319] ? clear_bhb_loop+0x40/0x90 [ 825.102247][T16319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.102257][T16319] RIP: 0033:0x7f464bb9c819 [ 825.102268][T16319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 825.102277][T16319] RSP: 002b:00007f464c9ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 825.102289][T16319] RAX: ffffffffffffffda RBX: 00007f464be15fa0 RCX: 00007f464bb9c819 [ 825.102296][T16319] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 825.102302][T16319] RBP: 00007f464c9ff090 R08: 0000000000000000 R09: 0000000000000000 [ 825.102308][T16319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 825.102314][T16319] R13: 00007f464be16038 R14: 00007f464be15fa0 R15: 00007f464bf3fa48 [ 825.102330][T16319] [ 827.454868][T16355] syzkaller0: entered promiscuous mode [ 827.464484][T16355] syzkaller0: entered allmulticast mode [ 827.487543][T16355] tipc: Enabled bearer , priority 0 [ 827.639537][T16354] tipc: Resetting bearer [ 827.674296][T16354] tipc: Disabling bearer [ 828.856731][T16367] tipc: Enabling of bearer rejected, failed to enable media [ 829.107319][T16372] random: crng reseeded on system resumption [ 829.178539][T16371] loop9: detected capacity change from 0 to 7 [ 829.197730][ C1] blk_print_req_error: 10 callbacks suppressed [ 829.197750][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 829.213565][ C1] buffer_io_error: 10 callbacks suppressed [ 829.213582][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 829.229612][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 829.239273][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 829.274012][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 829.283621][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 829.296000][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 829.306585][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 829.317094][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 829.326677][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 829.334815][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 829.344411][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 829.353491][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 829.363078][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 829.373896][T16371] ldm_validate_partition_table(): Disk read failed. [ 829.387191][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 829.396793][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 829.432077][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 829.441703][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 829.463721][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 829.473379][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 829.489487][T16371] Dev loop9: unable to read RDB block 0 [ 829.513017][T16371] loop9: unable to read partition table [ 829.536174][T16371] loop9: partition table beyond EOD, truncated [ 829.570409][T16371] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 832.660341][T16409] random: crng reseeded on system resumption [ 832.745218][T16409] loop9: detected capacity change from 0 to 7 [ 832.752456][T16412] x_tables: duplicate underflow at hook 1 [ 832.767363][T16409] ldm_validate_partition_table(): Disk read failed. [ 832.787836][T16409] Dev loop9: unable to read RDB block 0 [ 832.830088][T16409] loop9: unable to read partition table [ 832.861654][T16409] loop9: partition table beyond EOD, truncated [ 832.868461][T16409] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 835.226284][T16410] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2750'. [ 836.408683][T16445] netdevsim netdevsim2: Direct firmware load for / [ 836.408683][T16445] failed with error -2 [ 836.437386][T16445] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 836.437386][T16445] [ 837.338840][T16457] netlink: 'syz.3.2762': attribute type 2 has an invalid length. [ 837.381963][T16457] netlink: 'syz.3.2762': attribute type 2 has an invalid length. [ 837.950357][T16464] fuse: Bad value for 'fd' [ 838.001627][T16466] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2765'. [ 838.191856][T16466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2765'. [ 840.155486][T16498] netlink: 'syz.0.2774': attribute type 4 has an invalid length. [ 842.765419][T16514] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 842.788088][T16514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2777'. [ 843.673283][T16531] random: crng reseeded on system resumption [ 843.791118][T16536] loop9: detected capacity change from 0 to 7 [ 843.798868][ C1] blk_print_req_error: 30 callbacks suppressed [ 843.798880][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 843.814625][ C1] buffer_io_error: 30 callbacks suppressed [ 843.814634][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 843.842230][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 843.851847][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 843.871174][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 843.880813][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 843.902722][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 843.912347][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 843.925961][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 843.935573][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 843.948923][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 843.958638][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 843.971169][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 843.980774][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 843.988709][T16536] ldm_validate_partition_table(): Disk read failed. [ 843.996184][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 844.005849][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 844.019014][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 844.028795][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 844.037952][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 844.047619][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 844.057542][T16536] Dev loop9: unable to read RDB block 0 [ 844.092030][T16536] loop9: unable to read partition table [ 844.112202][T16536] loop9: partition table beyond EOD, truncated [ 844.119323][T16536] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 844.368988][T16541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2786'. [ 844.634888][T16549] tipc: Enabling of bearer rejected, failed to enable media [ 847.307412][T16594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 847.574256][T16597] tipc: Enabling of bearer rejected, failed to enable media [ 847.632537][T16598] geneve3: entered promiscuous mode [ 847.644583][T16598] geneve3: entered allmulticast mode [ 848.971108][T16604] syzkaller0: entered promiscuous mode [ 848.988835][T16604] syzkaller0: entered allmulticast mode [ 849.777240][T16627] tipc: Enabling of bearer rejected, failed to enable media [ 851.659389][T16665] loop2: detected capacity change from 0 to 7 [ 851.676707][T14244] Dev loop2: unable to read RDB block 7 [ 851.691326][T14244] loop2: AHDI p2 p3 [ 851.706271][T14244] loop2: partition table partially beyond EOD, truncated [ 851.723604][T14244] loop2: p3 start 335544320 is beyond EOD, truncated [ 851.744273][T16665] Dev loop2: unable to read RDB block 7 [ 851.762663][T16665] loop2: AHDI p2 p3 [ 851.774329][T16665] loop2: partition table partially beyond EOD, truncated [ 851.789770][T16665] loop2: p3 start 335544320 is beyond EOD, truncated [ 851.920039][T16668] tipc: Enabling of bearer rejected, failed to enable media [ 852.833958][T16682] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 853.153996][T16680] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 854.045842][T16693] program syz.4.2827 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 854.734126][T16709] tipc: Enabling of bearer rejected, failed to enable media [ 855.162005][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 855.162025][ T30] audit: type=1326 audit(1775533402.314:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16720 comm="syz.2.2835" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e06d9c819 code=0x0 [ 855.213305][T16721] kvm: emulating exchange as write [ 855.287814][T16731] netlink: 'syz.2.2835': attribute type 8 has an invalid length. [ 855.296038][T16731] netlink: 'syz.2.2835': attribute type 4 has an invalid length. [ 857.425948][T16744] random: crng reseeded on system resumption [ 858.902292][T16761] netlink: 'syz.3.2845': attribute type 4 has an invalid length. [ 860.637836][T16769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2847'. [ 860.656796][T16769] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2847'. [ 860.686685][T16769] vlan1: entered allmulticast mode [ 860.696259][T16769] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 861.485023][ T30] audit: type=1800 audit(1775533408.624:256): pid=16781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2849" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 861.706760][T16789] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 862.332989][T16795] tipc: Enabling of bearer rejected, failed to enable media [ 864.190599][T16833] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2866'. [ 864.308770][T16834] batman_adv: batadv0: Adding interface: macsec1 [ 864.327756][T16834] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 864.353496][T16834] batman_adv: batadv0: Interface activated: macsec1 [ 864.476746][T16841] tipc: Enabling of bearer rejected, failed to enable media [ 865.123401][T16848] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2867'. [ 865.392484][T16853] sg_write: data in/out 435164/162 bytes for SCSI command 0x0-- guessing data in; [ 865.392484][T16853] program syz.2.2872 not setting count and/or reply_len properly [ 866.557390][T16876] tipc: Enabling of bearer rejected, failed to enable media [ 866.752698][T16883] syzkaller0: entered promiscuous mode [ 866.772982][T16883] syzkaller0: entered allmulticast mode [ 866.940459][T16883] tipc: Enabled bearer , priority 0 [ 867.025088][T16882] tipc: Resetting bearer [ 867.146006][T16882] tipc: Disabling bearer [ 867.826285][T16906] random: crng reseeded on system resumption [ 867.893849][T16906] loop9: detected capacity change from 0 to 7 [ 867.905424][ C0] blk_print_req_error: 10 callbacks suppressed [ 867.905436][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 867.921349][ C0] buffer_io_error: 10 callbacks suppressed [ 867.921365][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 867.936065][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 867.945671][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 867.963770][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 867.973377][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 867.982157][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 867.991977][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 868.004944][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 868.014545][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 868.023239][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 868.032825][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 868.041146][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 868.050812][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 868.058756][T16906] ldm_validate_partition_table(): Disk read failed. [ 868.065955][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 868.075601][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 868.093648][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 868.103313][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 868.118578][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 868.128214][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 868.139923][T16906] Dev loop9: unable to read RDB block 0 [ 868.158203][T16906] loop9: unable to read partition table [ 868.171513][T16906] loop9: partition table beyond EOD, truncated [ 868.178744][T16906] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 869.043593][T16923] FAULT_INJECTION: forcing a failure. [ 869.043593][T16923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 869.085100][T16923] CPU: 1 UID: 0 PID: 16923 Comm: syz.2.2892 Tainted: G L syzkaller #0 PREEMPT(full) [ 869.085131][T16923] Tainted: [L]=SOFTLOCKUP [ 869.085138][T16923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 869.085150][T16923] Call Trace: [ 869.085158][T16923] [ 869.085167][T16923] dump_stack_lvl+0xe8/0x150 [ 869.085197][T16923] should_fail_ex+0x412/0x560 [ 869.085230][T16923] _copy_from_iter+0x1d3/0x1670 [ 869.085253][T16923] ? rcu_is_watching+0x15/0xb0 [ 869.085283][T16923] ? __pfx__copy_from_iter+0x10/0x10 [ 869.085310][T16923] ? netlink_sendmsg+0x650/0xb40 [ 869.085330][T16923] ? skb_put+0x11b/0x210 [ 869.085354][T16923] netlink_sendmsg+0x6c0/0xb40 [ 869.085383][T16923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 869.085406][T16923] ? aa_sock_msg_perm+0xf1/0x1b0 [ 869.085443][T16923] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 869.085467][T16923] ____sys_sendmsg+0x972/0x9f0 [ 869.085499][T16923] ? __pfx_____sys_sendmsg+0x10/0x10 [ 869.085530][T16923] ? import_iovec+0x73/0xa0 [ 869.085555][T16923] ___sys_sendmsg+0x2a5/0x360 [ 869.085586][T16923] ? __pfx____sys_sendmsg+0x10/0x10 [ 869.085640][T16923] ? __fget_files+0x2a/0x420 [ 869.085657][T16923] ? __fget_files+0x3a0/0x420 [ 869.085682][T16923] __x64_sys_sendmsg+0x1bd/0x2a0 [ 869.085709][T16923] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 869.085745][T16923] ? __pfx_ksys_write+0x10/0x10 [ 869.085777][T16923] do_syscall_64+0x14d/0xf80 [ 869.085800][T16923] ? trace_irq_disable+0x3b/0x150 [ 869.085817][T16923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.085835][T16923] ? clear_bhb_loop+0x40/0x90 [ 869.085858][T16923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.085876][T16923] RIP: 0033:0x7f3e06d9c819 [ 869.085894][T16923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 869.085910][T16923] RSP: 002b:00007f3e07c31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 869.085936][T16923] RAX: ffffffffffffffda RBX: 00007f3e07015fa0 RCX: 00007f3e06d9c819 [ 869.085949][T16923] RDX: 0000000000000054 RSI: 0000200000000280 RDI: 0000000000000003 [ 869.085960][T16923] RBP: 00007f3e07c31090 R08: 0000000000000000 R09: 0000000000000000 [ 869.085969][T16923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 869.085979][T16923] R13: 00007f3e07016038 R14: 00007f3e07015fa0 R15: 00007f3e0713fa48 [ 869.086007][T16923] [ 870.011613][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.018122][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.416692][T16939] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2896'. [ 870.735976][T16940] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2891'. [ 872.372243][T16965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2905'. [ 872.699380][T16969] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 872.731889][T16969] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 872.741036][T16969] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 872.761373][T16969] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 872.771967][T16969] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 873.088108][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.100400][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.204767][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.226777][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.318708][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.332492][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.466968][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 873.477675][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.572181][T16971] chnl_net:caif_netlink_parms(): no params data found [ 873.842520][ T49] bridge_slave_1: left allmulticast mode [ 873.849094][ T49] bridge_slave_1: left promiscuous mode [ 873.857922][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.877205][ T49] bridge_slave_0: left allmulticast mode [ 873.882942][ T49] bridge_slave_0: left promiscuous mode [ 873.889455][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.207814][ T49] gretap0 (unregistering): left promiscuous mode [ 874.245540][ T49] bond1 (unregistering): (slave gretap1): Releasing active interface [ 874.403909][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 874.417110][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 874.434468][ T49] bond0 (unregistering): Released all slaves [ 874.448315][ T49] bond1 (unregistering): Released all slaves [ 874.462201][ T49] bond2 (unregistering): Released all slaves [ 874.543284][T16971] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.584559][T16971] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.594426][T16971] bridge_slave_0: entered allmulticast mode [ 874.616289][T16971] bridge_slave_0: entered promiscuous mode [ 874.648022][T16971] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.665233][T16971] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.672861][T16971] bridge_slave_1: entered allmulticast mode [ 874.697130][T16971] bridge_slave_1: entered promiscuous mode [ 874.709194][ T49] tipc: Left network mode [ 874.783037][T16971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.805139][ T5839] Bluetooth: hci5: command tx timeout [ 874.836482][T16971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 875.022368][T16971] team0: Port device team_slave_0 added [ 875.047741][T16971] team0: Port device team_slave_1 added [ 875.105920][T16971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.134400][T16971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.174952][T16971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.220685][T16971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.251946][T16971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.320680][T16971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.772066][T16971] hsr_slave_0: entered promiscuous mode [ 875.793566][T16971] hsr_slave_1: entered promiscuous mode [ 875.824303][T16971] debugfs: 'hsr0' already exists in 'hsr' [ 875.858015][T16971] Cannot create hsr debugfs directory [ 875.967523][ T49] macvlan1: left promiscuous mode [ 876.028874][ T49] hsr_slave_0: left promiscuous mode [ 876.047781][ T49] hsr_slave_1: left promiscuous mode [ 876.071511][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 876.111154][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 876.154273][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 876.186650][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 876.223468][ T49] batman_adv: batadv0: Removing interface: ipvlan2 [ 876.268341][ T49] veth1_to_batadv: left promiscuous mode [ 876.297708][ T49] veth1_macvtap: left promiscuous mode [ 876.320284][ T49] veth0_macvtap: left promiscuous mode [ 876.341565][ T49] veth1_vlan: left allmulticast mode [ 876.360388][ T49] veth1_vlan: left promiscuous mode [ 876.381527][ T49] veth0_vlan: left promiscuous mode [ 876.688550][ T49] pim6reg (unregistering): left allmulticast mode [ 876.888192][ T5839] Bluetooth: hci5: command tx timeout [ 877.379305][ T49] team0 (unregistering): Port device team_slave_1 removed [ 877.435846][ T49] team0 (unregistering): Port device team_slave_0 removed [ 878.409655][ T49] IPVS: stop unused estimator thread 0... [ 878.978022][ T5839] Bluetooth: hci5: command tx timeout [ 881.045109][ T5839] Bluetooth: hci5: command tx timeout [ 881.057682][T16971] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 881.070851][T16971] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 881.090163][T16971] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 881.103903][T16971] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 881.358205][T16971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 881.366278][T17107] SET target dimension over the limit! [ 881.409637][T16971] 8021q: adding VLAN 0 to HW filter on device team0 [ 881.446007][T17107] netdevsim netdevsim0: Direct firmware load for / [ 881.446007][T17107] failed with error -2 [ 881.469976][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.477178][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 881.500417][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.507577][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 881.516736][T17107] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 881.516736][T17107] [ 881.593313][T16971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 881.695891][T16971] veth0_vlan: entered promiscuous mode [ 881.724229][T16971] veth1_vlan: entered promiscuous mode [ 881.760404][T16971] veth0_macvtap: entered promiscuous mode [ 881.782620][T16971] veth1_macvtap: entered promiscuous mode [ 881.816438][T16971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 881.851770][T16971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 881.864634][T17112] tipc: Enabled bearer , priority 0 [ 881.883099][ T3561] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.208967][ T3561] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.217958][ T3561] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.291380][T17111] tipc: Disabling bearer [ 882.329755][ T3561] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.466214][ T3561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.484271][ T3561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.581636][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.599809][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.781197][T17144] libceph: resolve '0..' (ret=-3): failed [ 883.240085][T17152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2927'. [ 883.254823][T17152] team_slave_0 (unregistering): left allmulticast mode [ 883.263318][T17152] team0: Port device team_slave_0 removed [ 884.102629][T17163] netlink: 'syz.4.2929': attribute type 4 has an invalid length. [ 887.267357][T17186] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2934'. [ 887.451193][T17189] random: crng reseeded on system resumption [ 887.570088][T17190] loop9: detected capacity change from 0 to 7 [ 887.603080][ C1] blk_print_req_error: 10 callbacks suppressed [ 887.603092][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 887.618946][ C1] buffer_io_error: 10 callbacks suppressed [ 887.618958][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 887.633810][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 887.643469][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 887.653254][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 887.662862][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 887.673189][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 887.682784][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 887.695684][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 887.705287][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 887.714526][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 887.724126][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 887.732696][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 887.742288][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 887.750945][T14244] ldm_validate_partition_table(): Disk read failed. [ 887.765382][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 887.775003][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 887.786039][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 887.795656][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 887.803811][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 887.813400][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 887.822407][T14244] Dev loop9: unable to read RDB block 0 [ 887.832682][T14244] loop9: unable to read partition table [ 887.840873][T14244] loop9: partition table beyond EOD, truncated [ 887.885279][T17190] ldm_validate_partition_table(): Disk read failed. [ 887.922442][T17190] Dev loop9: unable to read RDB block 0 [ 887.960698][T17190] loop9: unable to read partition table [ 887.979050][T17190] loop9: partition table beyond EOD, truncated [ 887.998430][T17190] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 889.489386][T17212] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2939'. [ 889.504781][T17214] tipc: New replicast peer: 0.0.0.0 [ 889.523131][T17214] tipc: Enabled bearer , priority 10 [ 890.525276][T17223] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 891.144888][T17230] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 895.846711][T17257] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2955'. [ 895.997921][ T30] audit: type=1800 audit(1775533443.154:257): pid=17263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2956" name="bus" dev="tmpfs" ino=3104 res=0 errno=0 [ 896.842040][T17270] syzkaller0: entered promiscuous mode [ 896.867916][T17270] syzkaller0: entered allmulticast mode [ 897.057223][T17277] tipc: Started in network mode [ 897.064771][T17277] tipc: Node identity 26576ae28ecf, cluster identity 4711 [ 897.089728][T17277] tipc: Enabled bearer , priority 0 [ 897.185718][T17267] tipc: Resetting bearer [ 897.247258][ T30] audit: type=1326 audit(1775533444.404:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17286 comm="syz.1.2964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4f99c819 code=0x7ffc0000 [ 897.386442][T17267] tipc: Disabling bearer [ 898.184560][ T30] audit: type=1326 audit(1775533444.424:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17286 comm="syz.1.2964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4f99c819 code=0x7ffc0000 [ 898.235087][ T30] audit: type=1326 audit(1775533444.424:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17286 comm="syz.1.2964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4f99c819 code=0x7ffc0000 [ 898.284564][ T30] audit: type=1326 audit(1775533444.424:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17286 comm="syz.1.2964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4b4f99c819 code=0x7ffc0000 [ 898.335035][ T30] audit: type=1326 audit(1775533444.424:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17286 comm="syz.1.2964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4f99c819 code=0x7ffc0000 [ 898.391281][ T30] audit: type=1326 audit(1775533444.424:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17286 comm="syz.1.2964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4f99c819 code=0x7ffc0000 [ 898.465256][ T30] audit: type=1326 audit(1775533444.424:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17286 comm="syz.1.2964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4f99c819 code=0x7ffc0000 [ 898.515109][ T30] audit: type=1326 audit(1775533444.424:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17286 comm="syz.1.2964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4f99c819 code=0x7ffc0000 [ 898.569286][ T30] audit: type=1326 audit(1775533444.424:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17286 comm="syz.1.2964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4f99c819 code=0x7ffc0000 [ 900.793646][T17308] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2968'. [ 903.556472][T17324] netlink: 'syz.2.2972': attribute type 10 has an invalid length. [ 903.615369][T17320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2973'. [ 903.894382][T17324] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 904.415812][T17338] random: crng reseeded on system resumption [ 904.515454][T17338] loop9: detected capacity change from 0 to 7 [ 904.563384][ C0] blk_print_req_error: 25 callbacks suppressed [ 904.563397][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 904.579159][ C0] buffer_io_error: 25 callbacks suppressed [ 904.579171][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 904.602765][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 904.612417][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 904.629557][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 904.639250][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 904.672789][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 904.682439][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 904.690915][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 904.700539][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 904.718101][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 904.727702][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 904.765795][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 904.775412][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 904.817495][T17338] ldm_validate_partition_table(): Disk read failed. [ 905.060698][T17347] random: crng reseeded on system resumption [ 905.105800][T17346] binder: 17341:17346 ioctl c018620c 200000000000 returned -1 [ 905.333685][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 905.343339][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 905.430455][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 905.440108][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 905.473586][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 905.483207][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 905.739340][T17355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2981'. [ 905.773670][T17338] Dev loop9: unable to read RDB block 0 [ 905.789077][T17355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2981'. [ 905.840180][T17355] macvtap1: entered promiscuous mode [ 905.861456][T17355] dummy0: entered promiscuous mode [ 905.879846][T17355] macvtap1: entered allmulticast mode [ 905.897885][T17355] dummy0: entered allmulticast mode [ 906.157437][T17338] loop9: unable to read partition table [ 906.334109][T17338] loop9: partition table beyond EOD, truncated [ 906.347972][T17338] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 906.521603][T16969] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 906.543442][T16969] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 906.602463][T16969] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 906.885394][T16969] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 907.050938][T16969] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 907.989146][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 908.217113][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 908.341477][T17373] geneve2: entered promiscuous mode [ 908.742583][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 908.763533][T17382] C: renamed from team_slave_0 (while UP) [ 908.777835][T17382] netlink: 'syz.4.2987': attribute type 1 has an invalid length. [ 908.785838][T17382] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2987'. [ 908.797936][T17382] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 908.886773][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 908.927232][T17394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2990'. [ 909.178603][T17369] chnl_net:caif_netlink_parms(): no params data found [ 909.197080][ T49] bridge_slave_1: left allmulticast mode [ 909.203975][ T49] bridge_slave_1: left promiscuous mode [ 909.211186][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.265707][ T49] bridge_slave_0: left allmulticast mode [ 909.271460][ T49] bridge_slave_0: left promiscuous mode [ 909.279910][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.366858][ T5833] Bluetooth: hci4: command tx timeout [ 909.384685][ T49] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 909.592367][ T49] gretap0 (unregistering): left promiscuous mode [ 910.152008][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 910.198733][ T49] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 910.230097][ T49] bond0 (unregistering): Released all slaves [ 910.264329][ T49] bond1 (unregistering): Released all slaves [ 910.334621][ T49] bond2 (unregistering): Released all slaves [ 910.432334][ T49] bond3 (unregistering): Released all slaves [ 910.763166][ T49] tipc: Left network mode [ 910.779824][T17435] random: crng reseeded on system resumption [ 911.066605][T17442] loop9: detected capacity change from 0 to 7 [ 911.098170][ C0] blk_print_req_error: 10 callbacks suppressed [ 911.098188][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 911.113969][ C0] buffer_io_error: 10 callbacks suppressed [ 911.113989][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 911.152143][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 911.161778][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 911.179765][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 911.189406][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 911.198487][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 911.208107][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 911.245267][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 911.254950][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 911.265070][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 911.274691][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 911.295005][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 911.304610][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 911.312691][T17442] ldm_validate_partition_table(): Disk read failed. [ 911.343008][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 911.352657][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 911.360894][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 911.370508][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 911.385109][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 911.394692][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 911.403921][T17442] Dev loop9: unable to read RDB block 0 [ 911.429522][T17442] loop9: unable to read partition table [ 911.447711][T17442] loop9: partition table beyond EOD, truncated [ 911.457382][T17442] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 911.475274][ T5833] Bluetooth: hci4: command tx timeout [ 911.581164][T17369] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.595778][T17369] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.637796][T17369] bridge_slave_0: entered allmulticast mode [ 911.650154][T17369] bridge_slave_0: entered promiscuous mode [ 911.689938][T17369] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.724316][T17369] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.755100][T17448] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 911.779185][T17369] bridge_slave_1: entered allmulticast mode [ 911.816778][T17369] bridge_slave_1: entered promiscuous mode [ 912.007836][T17369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 912.339413][T17369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 912.710311][T17369] team0: Port device team_slave_0 added [ 912.732109][T17369] team0: Port device team_slave_1 added [ 912.830518][T17369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 912.864189][T17369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 912.926913][T17369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 912.981547][ T49] hsr_slave_0: left promiscuous mode [ 913.017786][T17461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2998'. [ 913.029832][ T49] hsr_slave_1: left promiscuous mode [ 913.068384][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 913.116999][ T49] team0 (unregistering): Port device batadv1 removed [ 913.518625][ T49] team0 (unregistering): Port device team_slave_1 removed [ 913.535439][ T5833] Bluetooth: hci4: command tx timeout [ 913.554818][ T49] team0 (unregistering): Port device team_slave_0 removed [ 913.860879][T17369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 913.912751][T17369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 913.986330][T17369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 914.100443][T17369] hsr_slave_0: entered promiscuous mode [ 914.108362][T17369] hsr_slave_1: entered promiscuous mode [ 914.129830][T17369] debugfs: 'hsr0' already exists in 'hsr' [ 914.164499][T17369] Cannot create hsr debugfs directory [ 914.743675][T17475] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3001'. [ 914.826494][T17479] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3002'. [ 915.435565][T17369] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 915.456932][T17369] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 915.479145][T17369] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 915.503055][T17369] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 915.605512][ T5833] Bluetooth: hci4: command tx timeout [ 915.729420][T17369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 915.754137][T17510] bond0: (slave bond_slave_1): Releasing backup interface [ 915.810417][T17369] 8021q: adding VLAN 0 to HW filter on device team0 [ 915.843783][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.850891][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 915.919459][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.926585][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 916.150770][T17369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 916.242291][T17369] veth0_vlan: entered promiscuous mode [ 916.316330][T17369] veth1_vlan: entered promiscuous mode [ 916.408485][T17369] veth0_macvtap: entered promiscuous mode [ 916.440649][T17369] veth1_macvtap: entered promiscuous mode [ 916.493853][T17369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 916.567575][T17369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 916.637109][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.678255][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.705967][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.755707][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.918307][T17533] random: crng reseeded on system resumption [ 916.935990][ T3561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.945351][ T3561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.101739][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.115357][T17533] loop9: detected capacity change from 0 to 7 [ 917.130977][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.162819][ C1] blk_print_req_error: 10 callbacks suppressed [ 917.162832][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 917.178642][ C1] buffer_io_error: 10 callbacks suppressed [ 917.178652][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 917.197054][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 917.206674][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 917.221628][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 917.231239][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 917.239448][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 917.249029][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 917.257557][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 917.267168][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 917.275621][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 917.285212][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 917.293784][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 917.303426][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 917.311757][T14244] ldm_validate_partition_table(): Disk read failed. [ 917.319968][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 917.329567][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 917.338600][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 917.348244][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 917.358957][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 917.368677][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 917.377276][T14244] Dev loop9: unable to read RDB block 0 [ 917.419698][T14244] loop9: unable to read partition table [ 917.425681][T14244] loop9: partition table beyond EOD, truncated [ 917.486517][T17533] ldm_validate_partition_table(): Disk read failed. [ 917.596979][T17533] Dev loop9: unable to read RDB block 0 [ 917.707351][T17533] loop9: unable to read partition table [ 917.771836][T17533] loop9: partition table beyond EOD, truncated [ 917.800254][T17533] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 918.622363][T17562] netdevsim netdevsim0: Direct firmware load for / [ 918.622363][T17562] failed with error -2 [ 918.956585][T17562] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 918.956585][T17562] [ 919.834716][T17585] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3016'. [ 920.326502][T17593] syzkaller0: entered promiscuous mode [ 920.346349][T17593] syzkaller0: entered allmulticast mode [ 920.454949][T17593] tipc: Enabled bearer , priority 0 [ 920.554683][T17592] tipc: Resetting bearer [ 920.710631][T17592] tipc: Disabling bearer [ 921.845542][ T31] INFO: task kworker/1:3:1225 blocked for more than 143 seconds. [ 921.858308][ T31] Tainted: G L syzkaller #0 [ 921.876951][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 921.899105][ T31] task:kworker/1:3 state:D stack:21000 pid:1225 tgid:1225 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 921.912592][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 921.934388][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 921.942453][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 921.952319][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 921.959675][ T31] Workqueue: usb_hub_wq hub_event [ 921.988837][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 921.998584][ T31] Call Trace: [ 922.003668][ T31] [ 922.070121][ T31] __schedule+0x15dd/0x52d0 [ 922.074726][ T31] ? sysfs_do_create_link_sd+0x83/0x110 [ 922.141838][ T31] ? driver_sysfs_add+0xec/0x210 [ 922.195157][ T31] ? really_probe+0x14f/0xaf0 [ 922.199875][ T31] ? __driver_probe_device+0x18c/0x320 [ 922.236554][ T31] ? __pfx___schedule+0x10/0x10 [ 922.241536][ T31] ? schedule+0x90/0x360 [ 922.265241][ T31] schedule+0x164/0x360 [ 922.315451][ T31] schedule_preempt_disabled+0x13/0x30 [ 922.321065][ T31] __mutex_lock+0x7fe/0x1300 [ 922.355072][ T31] ? __mutex_lock+0x5ac/0x1300 [ 922.359913][ T31] ? usb_audio_probe+0x82e/0x2330 [ 922.385065][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 922.390157][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 922.414979][ T31] usb_audio_probe+0x82e/0x2330 [ 922.419897][ T31] ? __pfx_usb_audio_probe+0x10/0x10 [ 922.445359][ T31] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 922.451228][ T31] usb_probe_interface+0x668/0xc90 [ 922.464996][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 922.470692][ T31] really_probe+0x267/0xaf0 [ 922.484960][ T31] __driver_probe_device+0x18c/0x320 [ 922.490299][ T31] driver_probe_device+0x4f/0x240 [ 922.504960][ T31] __device_attach_driver+0x279/0x430 [ 922.510382][ T31] bus_for_each_drv+0x258/0x2f0 [ 922.524975][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 922.530926][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 922.555005][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 922.560263][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 922.575031][ T31] __device_attach+0x2c5/0x450 [ 922.579844][ T31] ? __pfx___device_attach+0x10/0x10 [ 922.605157][ T31] ? _raw_spin_unlock+0x28/0x50 [ 922.610074][ T31] device_initial_probe+0xa1/0xd0 [ 922.624978][ T31] bus_probe_device+0x12a/0x220 [ 922.629873][ T31] ? device_add+0x726/0xb70 [ 922.634395][ T31] device_add+0x7b6/0xb70 [ 922.644970][ T31] usb_set_configuration+0x1a87/0x2110 [ 922.650493][ T31] usb_generic_driver_probe+0x8d/0x150 [ 922.674991][ T31] usb_probe_device+0x1c4/0x3b0 [ 922.679892][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 922.694950][ T31] really_probe+0x267/0xaf0 [ 922.699502][ T31] __driver_probe_device+0x18c/0x320 [ 922.704778][ T31] driver_probe_device+0x4f/0x240 [ 922.725195][ T31] __device_attach_driver+0x279/0x430 [ 922.730612][ T31] bus_for_each_drv+0x258/0x2f0 [ 922.744957][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 922.750876][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 922.764947][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 922.770164][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 922.784951][ T31] __device_attach+0x2c5/0x450 [ 922.789748][ T31] ? __pfx___device_attach+0x10/0x10 [ 922.804954][ T31] ? _raw_spin_unlock+0x28/0x50 [ 922.809832][ T31] device_initial_probe+0xa1/0xd0 [ 922.814879][ T31] bus_probe_device+0x12a/0x220 [ 922.824994][ T31] ? device_add+0x726/0xb70 [ 922.829532][ T31] device_add+0x7b6/0xb70 [ 922.833873][ T31] usb_new_device+0xa08/0x16f0 [ 922.840009][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 922.845693][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 922.850909][ T31] hub_event+0x2a1c/0x4f30 [ 922.855719][ T31] ? __update_load_avg_cfs_rq+0x6f6/0xc10 [ 922.861497][ T31] ? __pfx_hub_event+0x10/0x10 [ 922.866566][ T31] ? process_scheduled_works+0xa8d/0x18c0 [ 922.872305][ T31] ? process_scheduled_works+0xa8d/0x18c0 [ 922.878505][ T31] process_scheduled_works+0xb6e/0x18c0 [ 922.884095][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 922.890431][ T31] ? assign_work+0x3d5/0x5e0 [ 922.897019][ T31] worker_thread+0xa53/0xfc0 [ 922.901654][ T31] kthread+0x388/0x470 [ 922.906106][ T31] ? __pfx_worker_thread+0x10/0x10 [ 922.911228][ T31] ? __pfx_kthread+0x10/0x10 [ 922.916277][ T31] ret_from_fork+0x51e/0xb90 [ 922.920884][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 922.927550][ T31] ? __switch_to+0xc7d/0x1450 [ 922.932248][ T31] ? __pfx_kthread+0x10/0x10 [ 922.937292][ T31] ret_from_fork_asm+0x1a/0x30 [ 922.942886][ T31] [ 922.946470][ T31] INFO: task kworker/1:6:5908 blocked for more than 144 seconds. [ 922.954193][ T31] Tainted: G L syzkaller #0 [ 922.961696][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 922.970755][ T31] task:kworker/1:6 state:D stack:21704 pid:5908 tgid:5908 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 923.030840][ T31] Workqueue: usb_hub_wq hub_event [ 923.037848][ T31] Call Trace: [ 923.041142][ T31] [ 923.045618][ T31] __schedule+0x15dd/0x52d0 [ 923.050176][ T31] ? sysfs_do_create_link_sd+0x83/0x110 [ 923.055846][ T31] ? driver_sysfs_add+0xec/0x210 [ 923.060800][ T31] ? really_probe+0x14f/0xaf0 [ 923.065684][ T31] ? __driver_probe_device+0x18c/0x320 [ 923.071161][ T31] ? __pfx___schedule+0x10/0x10 [ 923.076126][ T31] ? schedule+0x90/0x360 [ 923.080380][ T31] schedule+0x164/0x360 [ 923.084546][ T31] schedule_preempt_disabled+0x13/0x30 [ 923.090188][ T31] __mutex_lock+0x7fe/0x1300 [ 923.094810][ T31] ? __mutex_lock+0x5ac/0x1300 [ 923.099763][ T31] ? usb_audio_probe+0x82e/0x2330 [ 923.104830][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 923.110044][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 923.115469][ T31] usb_audio_probe+0x82e/0x2330 [ 923.120348][ T31] ? __pfx_usb_audio_probe+0x10/0x10 [ 923.125847][ T31] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 923.131675][ T31] usb_probe_interface+0x668/0xc90 [ 923.139783][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 923.147695][ T31] really_probe+0x267/0xaf0 [ 923.152242][ T31] __driver_probe_device+0x18c/0x320 [ 923.157741][ T31] driver_probe_device+0x4f/0x240 [ 923.162792][ T31] __device_attach_driver+0x279/0x430 [ 923.168329][ T31] bus_for_each_drv+0x258/0x2f0 [ 923.173205][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 923.179227][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 923.184627][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 923.190056][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 923.196004][ T31] __device_attach+0x2c5/0x450 [ 923.200793][ T31] ? __pfx___device_attach+0x10/0x10 [ 923.206861][ T31] ? _raw_spin_unlock+0x28/0x50 [ 923.211743][ T31] device_initial_probe+0xa1/0xd0 [ 923.216942][ T31] bus_probe_device+0x12a/0x220 [ 923.221804][ T31] ? device_add+0x726/0xb70 [ 923.229961][ T31] device_add+0x7b6/0xb70 [ 923.234332][ T31] usb_set_configuration+0x1a87/0x2110 [ 923.240003][ T31] usb_generic_driver_probe+0x8d/0x150 [ 923.247556][ T31] usb_probe_device+0x1c4/0x3b0 [ 923.253274][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 923.259959][ T31] really_probe+0x267/0xaf0 [ 923.264501][ T31] __driver_probe_device+0x18c/0x320 [ 923.269975][ T31] driver_probe_device+0x4f/0x240 [ 923.275168][ T31] __device_attach_driver+0x279/0x430 [ 923.280559][ T31] bus_for_each_drv+0x258/0x2f0 [ 923.285546][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 923.291454][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 923.297337][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 923.302547][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 923.308744][ T31] __device_attach+0x2c5/0x450 [ 923.313549][ T31] ? __pfx___device_attach+0x10/0x10 [ 923.318971][ T31] ? _raw_spin_unlock+0x28/0x50 [ 923.323836][ T31] device_initial_probe+0xa1/0xd0 [ 923.329046][ T31] bus_probe_device+0x12a/0x220 [ 923.333907][ T31] ? device_add+0x726/0xb70 [ 923.338590][ T31] device_add+0x7b6/0xb70 [ 923.342953][ T31] usb_new_device+0xa08/0x16f0 [ 923.347931][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 923.354046][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 923.361261][ T31] hub_event+0x2a1c/0x4f30 [ 923.368565][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 923.373770][ T31] ? __pfx_hub_event+0x10/0x10 [ 923.378642][ T31] ? process_scheduled_works+0xa8d/0x18c0 [ 923.384371][ T31] ? process_scheduled_works+0xa8d/0x18c0 [ 923.390287][ T31] process_scheduled_works+0xb6e/0x18c0 [ 923.396124][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 923.402126][ T31] ? assign_work+0x3d5/0x5e0 [ 923.406887][ T31] worker_thread+0xa53/0xfc0 [ 923.411516][ T31] kthread+0x388/0x470 [ 923.415671][ T31] ? __pfx_worker_thread+0x10/0x10 [ 923.420795][ T31] ? __pfx_kthread+0x10/0x10 [ 923.425605][ T31] ret_from_fork+0x51e/0xb90 [ 923.430211][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 923.435427][ T31] ? __switch_to+0xc7d/0x1450 [ 923.440116][ T31] ? __pfx_kthread+0x10/0x10 [ 923.444710][ T31] ret_from_fork_asm+0x1a/0x30 [ 923.449733][ T31] [ 923.456404][ T31] INFO: task kworker/1:0:10869 blocked for more than 144 seconds. [ 923.464278][ T31] Tainted: G L syzkaller #0 [ 923.472991][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 923.483136][ T31] task:kworker/1:0 state:D stack:22336 pid:10869 tgid:10869 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 923.495397][ T31] Workqueue: usb_hub_wq hub_event [ 923.500488][ T31] Call Trace: [ 923.503775][ T31] [ 923.506805][ T31] __schedule+0x15dd/0x52d0 [ 923.511347][ T31] ? sysfs_do_create_link_sd+0x83/0x110 [ 923.535027][ T31] ? driver_sysfs_add+0xec/0x210 [ 923.540013][ T31] ? really_probe+0x14f/0xaf0 [ 923.544694][ T31] ? __driver_probe_device+0x18c/0x320 [ 923.575135][ T31] ? __pfx___schedule+0x10/0x10 [ 923.580055][ T31] ? schedule+0x90/0x360 [ 923.584321][ T31] schedule+0x164/0x360 [ 923.608416][ T31] schedule_preempt_disabled+0x13/0x30 [ 923.613932][ T31] __mutex_lock+0x7fe/0x1300 [ 923.618794][ T31] ? __mutex_lock+0x5ac/0x1300 [ 923.623582][ T31] ? usb_audio_probe+0x82e/0x2330 [ 923.645034][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 923.650121][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 923.665005][ T31] usb_audio_probe+0x82e/0x2330 [ 923.669917][ T31] ? __pfx_usb_audio_probe+0x10/0x10 [ 923.684991][ T31] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 923.690866][ T31] usb_probe_interface+0x668/0xc90 [ 923.705373][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 923.711063][ T31] really_probe+0x267/0xaf0 [ 923.725047][ T31] __driver_probe_device+0x18c/0x320 [ 923.730392][ T31] driver_probe_device+0x4f/0x240 [ 923.755267][ T31] __device_attach_driver+0x279/0x430 [ 923.765243][ T31] bus_for_each_drv+0x258/0x2f0 [ 923.770150][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 923.805024][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 923.810454][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 923.830335][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 923.836498][ T31] __device_attach+0x2c5/0x450 [ 923.843946][ T31] ? __pfx___device_attach+0x10/0x10 [ 923.849369][ T31] ? _raw_spin_unlock+0x28/0x50 [ 923.854250][ T31] device_initial_probe+0xa1/0xd0 [ 923.859499][ T31] bus_probe_device+0x12a/0x220 [ 923.864985][ T31] ? device_add+0x726/0xb70 [ 923.869513][ T31] device_add+0x7b6/0xb70 [ 923.873855][ T31] usb_set_configuration+0x1a87/0x2110 [ 923.879485][ T31] usb_generic_driver_probe+0x8d/0x150 [ 923.885068][ T31] usb_probe_device+0x1c4/0x3b0 [ 923.889938][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 923.895417][ T31] really_probe+0x267/0xaf0 [ 923.899943][ T31] __driver_probe_device+0x18c/0x320 [ 923.905543][ T31] driver_probe_device+0x4f/0x240 [ 923.910592][ T31] __device_attach_driver+0x279/0x430 [ 923.916436][ T31] bus_for_each_drv+0x258/0x2f0 [ 923.921307][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 923.927548][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 923.932932][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 923.938493][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 923.944314][ T31] __device_attach+0x2c5/0x450 [ 923.949426][ T31] ? __pfx___device_attach+0x10/0x10 [ 923.954735][ T31] ? _raw_spin_unlock+0x28/0x50 [ 923.960038][ T31] device_initial_probe+0xa1/0xd0 [ 923.965864][ T31] bus_probe_device+0x12a/0x220 [ 923.970735][ T31] ? device_add+0x726/0xb70 [ 923.975723][ T31] device_add+0x7b6/0xb70 [ 923.980072][ T31] usb_new_device+0xa08/0x16f0 [ 923.984851][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 923.990537][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 923.996083][ T31] hub_event+0x2a1c/0x4f30 [ 924.000565][ T31] ? __pfx_hub_event+0x10/0x10 [ 924.005767][ T31] ? process_scheduled_works+0xa8d/0x18c0 [ 924.011503][ T31] ? process_scheduled_works+0xa8d/0x18c0 [ 924.017493][ T31] process_scheduled_works+0xb6e/0x18c0 [ 924.023077][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 924.029433][ T31] ? assign_work+0x3d5/0x5e0 [ 924.034389][ T31] worker_thread+0xa53/0xfc0 [ 924.039871][ T31] kthread+0x388/0x470 [ 924.043961][ T31] ? __pfx_worker_thread+0x10/0x10 [ 924.049420][ T31] ? __pfx_kthread+0x10/0x10 [ 924.054024][ T31] ret_from_fork+0x51e/0xb90 [ 924.058983][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 924.064104][ T31] ? __switch_to+0xc7d/0x1450 [ 924.069765][ T31] ? __pfx_kthread+0x10/0x10 [ 924.074380][ T31] ret_from_fork_asm+0x1a/0x30 [ 924.079568][ T31] [ 924.085298][ T5833] Bluetooth: hci0: command tx timeout [ 924.100529][ T31] [ 924.100529][ T31] Showing all locks held in the system: [ 924.113706][ T31] 6 locks held by kworker/0:0/9: [ 924.121321][ T31] 3 locks held by kworker/u8:0/12: [ 924.126758][ T31] #0: ffff88813fe54148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 924.138825][ T31] #1: ffffc90000117c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 924.150483][ T31] #2: ffffffff8fbd0888 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 924.159892][ T31] 6 locks held by kworker/1:1/29: [ 924.165299][ T31] #0: ffff888021ac6548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 924.177549][ T31] #1: ffffc90000a47c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 924.204999][ T31] #2: ffff88802ac121e0 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 924.213946][ T31] #3: ffff88802ac6c1e0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 924.245075][ T31] #4: ffff8880268661a8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 924.254895][ T31] #5: ffffffff8fb38408 (register_mutex#6){+.+.}-{4:4}, at: usb_audio_probe+0x82e/0x2330 [ 924.285043][ T31] 1 lock held by khungtaskd/31: [ 924.289927][ T31] #0: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 924.314973][ T31] 4 locks held by kworker/u8:3/49: [ 924.320121][ T31] #0: ffff88801bade948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 924.346712][ T31] #1: ffffc90000b97c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 924.364971][ T31] #2: ffffffff8fbc2110 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 924.374308][ T31] #3: ffffffff8fbd0888 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x200 [ 924.385045][ T31] 6 locks held by kworker/1:3/1225: [ 924.390259][ T31] #0: ffff888021ac6548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 924.401920][ T31] #1: ffffc90005d8fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 924.414360][ T31] #2: ffff88802a63c1e0 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 924.423558][ T31] #3: ffff88802af571e0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 924.433147][ T31] #4: ffff88802b4641a8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 924.442802][ T31] #5: ffffffff8fb38408 (register_mutex#6){+.+.}-{4:4}, at: usb_audio_probe+0x82e/0x2330 [ 924.452967][ T31] 2 locks held by getty/5582: [ 924.457871][ T31] #0: ffff8880376480a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 924.468273][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 924.479304][ T31] 4 locks held by udevd/5831: [ 924.483985][ T31] #0: ffff88803171b2f0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 924.493196][ T31] #1: ffff88807500f488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 924.502949][ T31] #2: ffff88807e51ef08 (kn->active#24){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 924.512738][ T31] #3: ffff88807774e1e0 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 924.522408][ T31] 6 locks held by kworker/1:6/5908: [ 924.527964][ T31] #0: ffff888021ac6548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 924.539598][ T31] #1: ffffc90005027c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 924.551738][ T31] #2: ffff88802a76f1e0 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 924.561501][ T31] #3: ffff88802a7d11e0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 924.571053][ T31] #4: ffff88802af551a8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 924.581904][ T31] #5: ffffffff8fb38408 (register_mutex#6){+.+.}-{4:4}, at: usb_audio_probe+0x82e/0x2330 [ 924.592494][ T31] 4 locks held by udevd/5990: [ 924.597430][ T31] #0: ffff88802b798e80 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 924.606518][ T31] #1: ffff88807c6c0888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 924.616295][ T31] #2: ffff888056675b48 (kn->active#27){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 924.626067][ T31] #3: ffff88802af571e0 (&dev->mutex){....}-{4:4}, at: serial_show+0x26/0xa0 [ 924.634880][ T31] 4 locks held by udevd/6195: [ 924.639834][ T31] #0: ffff88807b1d28b8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 924.649453][ T31] #1: ffff888025de4c88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 924.659181][ T31] #2: ffff88804834ce18 (kn->active#24){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 924.669024][ T31] #3: ffff88802a7d11e0 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 924.678734][ T31] 4 locks held by udevd/7343: [ 924.683947][ T31] #0: ffff88802ba068b8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 924.693275][ T31] #1: ffff88807c185c88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 924.703219][ T31] #2: ffff88803579df08 (kn->active#24){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 924.713127][ T31] #3: ffff8880588041e0 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 924.722886][ T31] 4 locks held by udevd/7345: [ 924.727943][ T31] #0: ffff888029bd6e80 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 924.737143][ T31] #1: ffff8880590ec888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 924.746920][ T31] #2: ffff888032fff008 (kn->active#24){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 924.756710][ T31] #3: ffff88802ac6c1e0 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 924.766544][ T31] 6 locks held by kworker/1:0/10869: [ 924.771848][ T31] #0: ffff888021ac6548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 924.783620][ T31] #1: ffffc9000541fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 924.796760][ T31] #2: ffff88802ac271e0 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 924.807328][ T31] #3: ffff8880588041e0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 924.816914][ T31] #4: ffff8880772581a8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 924.826496][ T31] #5: ffffffff8fb38408 (register_mutex#6){+.+.}-{4:4}, at: usb_audio_probe+0x82e/0x2330 [ 924.836680][ T31] 2 locks held by syz.4.1488/11532: [ 924.841874][ T31] #0: ffffffff8fbd0888 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 924.851276][ T31] #1: ffffffff8e7648b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 924.862623][ T31] 1 lock held by syz.4.1513/11623: [ 924.868012][ T31] #0: ffffffff8fbd0888 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 924.877323][ T31] 3 locks held by syz.2.3017/17589: [ 924.882523][ T31] #0: ffff8880719e8ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 924.893734][ T31] #1: ffff8880719e80c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 924.903719][ T31] #2: ffffffff8fd5dca8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 924.914464][ T31] 5 locks held by syz-executor/17597: [ 924.921061][ T31] #0: ffff8880713fcec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 924.932070][ T31] #1: ffff8880713fc0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 924.942028][ T31] #2: ffffffff8fd5dca8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 924.952381][ T31] #3: ffff8880567e4b00 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570 [ 924.962091][ T31] #4: ffffffff8e7648b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 924.973281][ T31] 1 lock held by syz.3.3021/17602: [ 924.978748][ T31] #0: ffffffff8e764780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 924.988932][ T31] 1 lock held by syz.0.3020/17610: [ 924.994741][ T31] #0: ffffffff8fbd0888 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 925.004232][ T31] [ 925.008005][ T31] ============================================= [ 925.008005][ T31] [ 925.017344][ T31] NMI backtrace for cpu 1 [ 925.017370][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 925.017391][ T31] Tainted: [L]=SOFTLOCKUP [ 925.017396][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 925.017406][ T31] Call Trace: [ 925.017413][ T31] [ 925.017419][ T31] dump_stack_lvl+0xe8/0x150 [ 925.017447][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 925.017467][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 925.017493][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 925.017514][ T31] sys_info+0x135/0x170 [ 925.017539][ T31] watchdog+0xfd9/0x1030 [ 925.017561][ T31] ? watchdog+0x21a/0x1030 [ 925.017584][ T31] kthread+0x388/0x470 [ 925.017603][ T31] ? __pfx_watchdog+0x10/0x10 [ 925.017617][ T31] ? __pfx_kthread+0x10/0x10 [ 925.017636][ T31] ret_from_fork+0x51e/0xb90 [ 925.017662][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 925.017684][ T31] ? __switch_to+0xc7d/0x1450 [ 925.017707][ T31] ? __pfx_kthread+0x10/0x10 [ 925.017726][ T31] ret_from_fork_asm+0x1a/0x30 [ 925.017765][ T31] [ 925.017774][ T31] Sending NMI from CPU 1 to CPUs 0: [ 925.134700][ C0] NMI backtrace for cpu 0 [ 925.134720][ C0] CPU: 0 UID: 0 PID: 3561 Comm: kworker/u8:10 Tainted: G L syzkaller #0 PREEMPT(full) [ 925.134741][ C0] Tainted: [L]=SOFTLOCKUP [ 925.134747][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 925.134757][ C0] Workqueue: events_unbound toggle_allocation_gate [ 925.134782][ C0] RIP: 0010:__lock_acquire+0x46/0x2cf0 [ 925.134803][ C0] Code: 24 e0 00 00 00 65 48 8b 05 4f 25 7b 11 48 89 44 24 08 31 ed 83 3d f9 6e 70 0e 00 0f 84 ef 13 00 00 45 89 cf 49 89 f9 48 8b 07 <48> 3d 20 94 e0 93 0f 84 da 13 00 00 41 89 cd 41 89 d6 8b 0d b2 2b [ 925.134815][ C0] RSP: 0018:ffffc9000e28f4e8 EFLAGS: 00000002 [ 925.134828][ C0] RAX: ffffffff9a2c4c40 RBX: 0000000000000246 RCX: 0000000000000002 [ 925.134838][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e75e5a0 [ 925.134848][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8e75e5a0 [ 925.134858][ C0] R10: dffffc0000000000 R11: fffff94000011221 R12: 0000000000000002 [ 925.134869][ C0] R13: ffffffff8e75e5a0 R14: 0000000000000000 R15: 0000000000000000 [ 925.134879][ C0] FS: 0000000000000000(0000) GS:ffff888125454000(0000) knlGS:0000000000000000 [ 925.134891][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 925.134902][ C0] CR2: 0000559df971c950 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 925.134918][ C0] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951 [ 925.134926][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 925.134935][ C0] Call Trace: [ 925.134943][ C0] [ 925.134950][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 925.134970][ C0] ? inat_get_opcode_attribute+0xc/0x50 [ 925.134986][ C0] ? insn_get_opcode+0xb12/0x11b0 [ 925.135006][ C0] lock_acquire+0xf0/0x2e0 [ 925.135024][ C0] ? __pte_offset_map+0x29/0x240 [ 925.135040][ C0] ? __kmalloc_cache_noprof+0xa0/0x660 [ 925.135057][ C0] __pte_offset_map+0x45/0x240 [ 925.135070][ C0] ? __pte_offset_map+0x29/0x240 [ 925.135083][ C0] ? pte_offset_map_lock+0x2d/0x210 [ 925.135096][ C0] ? __kmalloc_cache_noprof+0xa0/0x660 [ 925.135113][ C0] pte_offset_map_lock+0x46/0x210 [ 925.135127][ C0] ? __kmalloc_cache_noprof+0xa0/0x660 [ 925.135144][ C0] ? __kmalloc_cache_noprof+0xa0/0x660 [ 925.135160][ C0] __text_poke+0x2d3/0x9a0 [ 925.135176][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 925.135190][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 925.135208][ C0] ? __kmalloc_cache_noprof+0xa0/0x660 [ 925.135223][ C0] ? __pfx___text_poke+0x10/0x10 [ 925.135240][ C0] smp_text_poke_batch_finish+0xd36/0x1160 [ 925.135259][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 925.135276][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 925.135297][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 925.135315][ C0] static_key_enable_cpuslocked+0x128/0x240 [ 925.135337][ C0] static_key_enable+0x1a/0x20 [ 925.135357][ C0] toggle_allocation_gate+0xab/0x290 [ 925.135376][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 925.135397][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 925.135415][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 925.135433][ C0] process_scheduled_works+0xb6e/0x18c0 [ 925.135461][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 925.135481][ C0] ? assign_work+0x3d5/0x5e0 [ 925.135500][ C0] worker_thread+0xa53/0xfc0 [ 925.135527][ C0] kthread+0x388/0x470 [ 925.135541][ C0] ? __pfx_worker_thread+0x10/0x10 [ 925.135558][ C0] ? __pfx_kthread+0x10/0x10 [ 925.135573][ C0] ret_from_fork+0x51e/0xb90 [ 925.135599][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 925.135617][ C0] ? __switch_to+0xc7d/0x1450 [ 925.135634][ C0] ? __pfx_kthread+0x10/0x10 [ 925.135649][ C0] ret_from_fork_asm+0x1a/0x30 [ 925.135675][ C0] [ 925.505054][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 925.511943][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 925.522639][ T31] Tainted: [L]=SOFTLOCKUP [ 925.526971][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 925.537032][ T31] Call Trace: [ 925.540298][ T31] [ 925.543217][ T31] vpanic+0x56c/0xa60 [ 925.547193][ T31] ? __pfx___schedule+0x10/0x10 [ 925.552033][ T31] ? __pfx_vpanic+0x10/0x10 [ 925.556531][ T31] ? __pfx_console_unlock+0x10/0x10 [ 925.561723][ T31] panic+0xc5/0xd0 [ 925.565433][ T31] ? __pfx_panic+0x10/0x10 [ 925.569843][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 925.575224][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 925.581366][ T31] watchdog+0x1023/0x1030 [ 925.585683][ T31] ? watchdog+0x21a/0x1030 [ 925.590087][ T31] kthread+0x388/0x470 [ 925.594140][ T31] ? __pfx_watchdog+0x10/0x10 [ 925.598797][ T31] ? __pfx_kthread+0x10/0x10 [ 925.603370][ T31] ret_from_fork+0x51e/0xb90 [ 925.607953][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 925.613053][ T31] ? __switch_to+0xc7d/0x1450 [ 925.617733][ T31] ? __pfx_kthread+0x10/0x10 [ 925.622312][ T31] ret_from_fork_asm+0x1a/0x30 [ 925.627086][ T31] [ 925.630506][ T31] Kernel Offset: disabled [ 925.634816][ T31] Rebooting in 86400 seconds..