last executing test programs: 1m1.693281s ago: executing program 2 (id=4766): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff0007058102000200070502020002000705830340"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002180)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002240)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x4) r4 = fsopen(&(0x7f0000002280)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f00000022c0)='./net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) read(r6, &(0x7f0000002300)=""/1024, 0x400) read$FUSE(r6, &(0x7f0000006180)={0x2020}, 0x2020) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4, 0x0) read$FUSE(r7, &(0x7f00000000c0)={0x2020}, 0x2020) read$FUSE(r7, &(0x7f0000004140)={0x2020}, 0x2020) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22401, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 57.026850092s ago: executing program 2 (id=4817): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x4, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x4000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f0000000000)="ee7524beca7507915d5fdf00a4eacdcb1bc4d1ea7d25268c770bfd6165802242d57e740700682748a22189ffda3093dd45240cfea0394c3c00d1c6") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x1, 0x8001, 0x6}, 0x10) waitid(0x2, 0x0, 0x0, 0x4, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000300)={0x1, 0x1, 0x0, 0x20, 0x63, 0x0}) sendto$inet6(r0, &(0x7f0000001340)='X', 0x34000, 0xe0, &(0x7f0000002440)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000002580)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000002640)=0x80000001, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000025c0)={0x2, 0x20000006}) close(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002680)={0x0, 0x97bf8ea3f80e333a, &(0x7f00000026c0)={&(0x7f0000002700)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x10) syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000180)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f00000001c0)=0x1, 0x12) mkdir(&(0x7f0000000200)='./cgroup/../file0/file0\x00', 0x0) mkdir(&(0x7f0000002700)='./cgroup/../file0/file0/file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002740), 0x200002, 0x0) 52.398213764s ago: executing program 2 (id=4830): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x2, 0x5004) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000097000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50005008200000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000b0ff8500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) timer_create(0x3, &(0x7f0000000300)={0x0, 0x30, 0x1, @tid=r0}, &(0x7f0000000380)=0x0) timer_getoverrun(r3) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000340)="9a02f5", 0x3}, {0x0}], 0x2) 51.989272023s ago: executing program 2 (id=4831): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) syz_ublk_setup_io_uring(0x2d7, &(0x7f0000000080)={0x0, 0x702a, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x213fef83, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000001c0)='.\x00', 0x449) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x80000006) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001a00), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 51.4824495s ago: executing program 2 (id=4832): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000380)="dc", 0x1) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000000440)="e0", 0xfed7) getsockopt$inet_opts(r0, 0x0, 0x400000000000004, &(0x7f0000000400)=""/26, &(0x7f00000004c0)=0x1a) 50.852877772s ago: executing program 2 (id=4834): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="002213927b7c870c0000002a90000beb212189830000000093cdd2f3610b5d8c3dda"], 0x0}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0x4, 0x387181) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000540)={0x0, 0x1, 0xb, 0x8, "2af15ef6983d2e9e4cea7f3567bf701fa00d6a39ad4b3eb72544d4c1ba33b030"}) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x30d802, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0xc4042, 0x22) sendfile(r4, r3, 0x0, 0xfffa83) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a000007090001007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) syz_open_dev$usbmon(&(0x7f00000008c0), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000940), 0x80d02, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000980), 0x40) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f00000009c0)={{0x20}, {0x1b}, 0x8fec, 0x1, 0x7a}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000a40), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f0000000a80)={{}, {0x18}, 0x0, 0x3}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0x6, 0xfa11, 0x2}, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) r7 = syz_clone(0x8000, &(0x7f0000000580)="59815e3dc5804c67e37e76f08ab41956c4ca8009da7aed46dffd8f165eea99c0e08db7e88e1efb1ed2b3d7d498ef784cf64082d148355e8640800d3cc9cdaab73ec09ed400614f03228cbc8aec1613", 0x4f, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)="91b2246039329892b5950ba3ae1643eb4ad883d5626f145cef8e6091213c283191fb2ee163ef162f59d6b65a") sendmsg$AUDIT_SET(r6, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x3e9, 0x800, 0x70bd27, 0x25dfdbfd, {0x39, 0x0, 0x1, r7, 0x4, 0x9, 0x100, 0x5276bf92, 0x0, 0x6169, 0x7f}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)}, 0x1d40) sendmsg$tipc(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="a2", 0x1}], 0x1}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 50.309935347s ago: executing program 3 (id=4837): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x8004e20}, 0x6e) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4000000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="1400000052004f030e789e7ee2ce2fa4ff", 0x11) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) close_range(r3, r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001500), 0x800001d, 0x300) sendto(r0, &(0x7f0000000400)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) 49.279020871s ago: executing program 3 (id=4840): sysinfo(&(0x7f0000000000)=""/67) sysinfo(&(0x7f0000000080)=""/4096) sysinfo(&(0x7f0000001080)=""/111) sysinfo(&(0x7f0000001100)=""/183) sysinfo(&(0x7f00000011c0)=""/37) sysinfo(&(0x7f0000001200)=""/218) sysinfo(&(0x7f0000001300)=""/212) sysinfo(&(0x7f0000001400)=""/177) sysinfo(&(0x7f00000014c0)=""/175) sysinfo(&(0x7f0000001580)=""/99) sysinfo(&(0x7f0000001600)=""/111) sysinfo(&(0x7f0000001680)=""/141) sysinfo(&(0x7f0000001740)) sysinfo(&(0x7f0000001780)=""/65) sysinfo(&(0x7f0000001800)=""/168) sysinfo(&(0x7f00000018c0)=""/130) sysinfo(&(0x7f0000001980)=""/65) sysinfo(&(0x7f0000001a00)=""/219) sysinfo(&(0x7f0000001b00)=""/203) sysinfo(&(0x7f0000001c00)=""/4096) sysinfo(&(0x7f0000002c00)=""/170) sysinfo(&(0x7f0000002cc0)=""/4096) sysinfo(&(0x7f0000003cc0)=""/106) sysinfo(&(0x7f0000003d40)=""/196) sysinfo(&(0x7f0000003e40)=""/4096) sysinfo(&(0x7f0000004e40)=""/55) sysinfo(&(0x7f0000004e80)=""/76) sysinfo(&(0x7f0000004f00)=""/106) sysinfo(&(0x7f0000004f80)=""/50) sysinfo(&(0x7f0000004fc0)=""/12) 49.113083723s ago: executing program 3 (id=4841): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x66000080) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'veth0_vlan\x00', 0x0}) r3 = gettid() sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}}, 0x0) 46.249742583s ago: executing program 3 (id=4848): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1e, 0x1, 0x7, "d30580c9042b7275077bafe6410c2087850000000005000000000080001500", 0x50565559}) 45.915299328s ago: executing program 3 (id=4849): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r0 = syz_ublk_setup_io_uring(0x64d, &(0x7f0000000240)={0x0, 0xd58c, 0x1000, 0x0, 0x37b}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x3, 0x90f, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, 0x0) accept4$tipc(0xffffffffffffffff, &(0x7f00000005c0), &(0x7f0000000600)=0x10, 0x800) 44.160240024s ago: executing program 0 (id=4855): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x8004e20}, 0x6e) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4000000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="1400000052004f030e789e7ee2ce2fa4ff", 0x11) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) close_range(r3, r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f00000014c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) sendto(r0, &(0x7f0000000400)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) 42.941609145s ago: executing program 0 (id=4856): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x8004e20}, 0x6e) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4000000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="1400000052004f030e789e7ee2ce2fa4ff", 0x11) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) close_range(r3, r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001500), 0x800001d, 0x300) sendto(r0, &(0x7f0000000400)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) 42.323713239s ago: executing program 0 (id=4859): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r2, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x4, 0x401, @l2={'eth', 0x3a, 'pimreg0\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x4044800}, 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) close(0x3) 41.883397513s ago: executing program 0 (id=4860): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) syz_ublk_setup_io_uring(0x2d7, &(0x7f0000000080)={0x0, 0x702a, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x213fef83, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000001c0)='.\x00', 0x449) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x80000006) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001a00), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 41.446619241s ago: executing program 0 (id=4861): socket$pppoe(0x18, 0x1, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x80002, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r7, 0x0, 0x0}, 0x20) r8 = dup(r6) syz_ublk_setup_queues(r8, r5, &(0x7f00000003c0)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x21c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20, 0x2, 0x12b}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 39.577822987s ago: executing program 0 (id=4862): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="002213927b7c870c0000002a90000beb212189830000000093cdd2f3610b5d8c3dda"], 0x0}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0x4, 0x387181) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000540)={0x0, 0x1, 0xb, 0x8, "2af15ef6983d2e9e4cea7f3567bf701fa00d6a39ad4b3eb72544d4c1ba33b030"}) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x30d802, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0xc4042, 0x22) sendfile(r4, r3, 0x0, 0xfffa83) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a000007090001007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) syz_open_dev$usbmon(&(0x7f00000008c0), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000940), 0x80d02, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000980), 0x40) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f00000009c0)={{0x20}, {0x1b}, 0x8fec, 0x1, 0x7a}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000a40), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f0000000a80)={{}, {0x18}, 0x0, 0x3}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0x6, 0xfa11, 0x2}, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) r7 = syz_clone(0x8000, &(0x7f0000000580)="59815e3dc5804c67e37e76f08ab41956c4ca8009da7aed46dffd8f165eea99c0e08db7e88e1efb1ed2b3d7d498ef784cf64082d148355e8640800d3cc9cdaab73ec09ed400614f03228cbc8aec1613", 0x4f, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)="91b2246039329892b5950ba3ae1643eb4ad883d5626f145cef8e6091213c283191fb2ee163ef162f59d6b65a") sendmsg$AUDIT_SET(r6, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x3e9, 0x800, 0x70bd27, 0x25dfdbfd, {0x39, 0x0, 0x1, r7, 0x4, 0x9, 0x100, 0x5276bf92, 0x0, 0x6169, 0x7f}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)}, 0x1d40) sendmsg$tipc(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="a2", 0x1}], 0x1}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 39.577410926s ago: executing program 1 (id=4863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="b40000000002010400000000000000000a000007440001802c000180140003000000000000000000000000000000000b54000400ff0100000000100000000000140000010c00028005000100980000000600034000040000180003800c00028005000100890000000600034000040000440002802c00018014000300fe8000000000000000000000000000210a0004000a000000000000000000ffffe00000021400018008000100ffffffff080002000a010102"], 0xb4}}, 0x4) r1 = syz_usb_connect(0x4, 0x3f, &(0x7f0000000b80)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRES32=r0, @ANYRESOCT, @ANYRESOCT=r0, @ANYRESHEX=0x0, @ANYRESHEX=0x0, @ANYRESHEX=r0, @ANYRES32=0xffffffffffffffff, @ANYRESHEX=r0], 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') close(0x3) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000240)=ANY=[@ANYRES16=r3, @ANYRESOCT=r3, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet(0x2, 0x1, 0x0) unshare(0x4040400) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="eec72627f1456b25c467f595f9098b20d4f8605b820191177efc5def8cfaa752982b", @ANYRESDEC=0x0], 0x0) r8 = dup(0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x200400c5) ioctl$SOUND_MIXER_READ_CAPS(r4, 0x80044dfc, &(0x7f0000000280)) r9 = syz_open_dev$cec(&(0x7f0000000940), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x6) ioctl$CEC_S_MODE(r9, 0x40046109, &(0x7f0000000980)=0x21) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'dummy0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x28}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000013000500010000000000000007000000", @ANYRES32=r7, @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r4], 0x4c}}, 0x0) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r12, 0x7d4165c9) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r13, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 38.702102034s ago: executing program 4 (id=4865): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x2b}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @immediate={{0xe}, @void}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="4edb", 0x2}, {0x0}], 0x2) syz_open_dev$vcsa(&(0x7f0000000100), 0xfffffffa, 0x88002) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000580)=0x4, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = dup(0xffffffffffffffff) syz_usb_connect$uac2(0x0, 0xb1, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x8000000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x2, 0x5}}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000800)={0x29f, 0x7d, 0x2, {{0x500, 0xc, 0x0, 0x5000000, {0x96346fe8a85d25a7, 0x0, 0xa}, 0x61400000, 0x0, 0xe5e0, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x9b, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x8f}_\xb9\xb6\x18\xcf\xf1\xe7.\x9f\xde\xec\xd8\xfd\xdeU\xc9\x1e\xe45\xd2\b\xf4\xa6\xe1\xa9\xb0\xd3\x85\b\x012\t2c\xa2\xe4\x1eb\xec-t\x98\b\x16\xbcv\xf3\xdaQ\x968\xdc\xb7\x88d\x86\xc8x\x9f\xaa\x06\xfe\x8c\x168X\x83\x92b\x01y\xcc\xb5\x8fu \xcc\xc5\xd3\xb0\nJ\xfa\xf9RZ\xe1?U\x9d\x88\xe88#<\xc6\xec\x97\xb2\xc6\x00P', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x3e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x00\x00\x00\x00\x00\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x29f) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 38.648066848s ago: executing program 3 (id=4866): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x2, 0x0, 0x3}}, 0x26) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x890) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4003) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a0010000000", 0x28}, {&(0x7f0000000200)="11c9064268e9", 0x6}], 0x2}, 0x40) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c0100000000"], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) r6 = openat$hwrng(0xffffff9c, 0x0, 0x8080, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r7, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x3) write$uinput_user_dev(r7, &(0x7f0000000680)={'syz0\x00', {0x1, 0x400, 0x0, 0x6}, 0x2b, [0x9b, 0x4, 0xbd, 0xffffffff, 0x1000, 0x8, 0x2, 0x9, 0x3, 0x2, 0x2, 0x7fffffff, 0x7, 0x1, 0x80, 0xa, 0x9, 0x4, 0x3897, 0x100, 0xfff, 0x0, 0x1, 0x0, 0x2, 0x1000, 0x8, 0x200, 0xdc, 0x4, 0x9, 0x80, 0x8, 0x8, 0x3, 0x9, 0x0, 0x1, 0xc43, 0x5, 0x6, 0x5, 0xfffffff5, 0x1ff, 0xfffffff9, 0x8, 0x352f, 0x6, 0x0, 0x101, 0xb83, 0x8759, 0x9, 0x3, 0x0, 0x925b, 0x54, 0x7fff, 0x6, 0x7, 0x9, 0xd, 0x6, 0x5], [0x7, 0x2, 0xfffffffa, 0x80000000, 0x4, 0x4988, 0x10000, 0x3, 0x1, 0x6bae, 0xffffffff, 0x4, 0x40, 0x6, 0x2, 0x1, 0x10, 0x1, 0x5, 0x2, 0x9, 0x81, 0x6, 0x1, 0x0, 0x5, 0x4, 0x2e7, 0x2, 0x200, 0x5, 0x200, 0x10000, 0xee9, 0xfff, 0x5, 0x4, 0x9, 0x7, 0xffff8000, 0x8, 0xfff, 0x7, 0x254c, 0x6, 0x3, 0xd, 0x9, 0x0, 0xd, 0x4, 0x2, 0x401, 0x1, 0x9, 0x330a, 0x1, 0x9, 0x1, 0xfffffffe, 0x6, 0x2, 0x7fff, 0x8001], [0x6, 0x7, 0x1000, 0x4, 0x3, 0x4, 0x7fff, 0x200, 0x9167, 0x2, 0x7, 0xb5, 0x10001, 0x7, 0x0, 0x6e, 0x6, 0x67, 0x6, 0x4, 0x1, 0x2, 0x5, 0xa, 0x7, 0x3, 0x9, 0x7, 0x7, 0x5, 0x0, 0xffff, 0xa, 0x7, 0x1, 0x1, 0xffffffff, 0x80, 0x1, 0x8, 0x8, 0x4, 0x63, 0x8, 0x81, 0xc, 0xfffffc01, 0x6fd6, 0xffffffff, 0x10000, 0x1000, 0x7, 0x5, 0x9, 0x2, 0x6, 0x101, 0xe, 0x80000001, 0x6, 0x7f, 0x4, 0x6, 0xdac4], [0x6, 0x40, 0x6, 0x80000001, 0x200, 0x400, 0xd, 0x80000000, 0x8, 0x9, 0xffff, 0x10, 0x9, 0x7, 0x5, 0x3, 0x0, 0x20c, 0x256c, 0x1, 0x7, 0xb, 0x7, 0x10000, 0xfffffffd, 0x0, 0x3, 0x8, 0x5, 0x4, 0x7, 0x9, 0x8, 0x8, 0x7, 0x8, 0x1, 0x3, 0xffffb6de, 0x7f, 0xb7, 0x212, 0x4, 0x5, 0x8, 0x7, 0x80000000, 0xff, 0x7, 0x100, 0x10, 0x1, 0x1, 0x6, 0x1, 0x3ff, 0xffff5c94, 0x3, 0x4, 0x9, 0xffffffb0, 0x200000, 0x2, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r7, 0x5501) write$uinput_user_dev(r7, &(0x7f0000000b00)={'syz0\x00', {0x2, 0x10, 0x2, 0x8003}, 0x8, [0x9, 0x4, 0x401, 0x7, 0x8, 0x5, 0x3c, 0x4, 0x9, 0x5, 0xff, 0x2, 0x4, 0x1, 0x1, 0x2, 0x7ff, 0x8, 0xfffffff2, 0xfffffffb, 0xf4b, 0x0, 0x1, 0x9, 0x2, 0x9, 0x5b, 0xa81, 0x10000, 0x8, 0x1, 0x5, 0xfffffff7, 0x7, 0x6, 0x3, 0x1ff, 0xfffffffa, 0x4, 0x3, 0xc, 0x400, 0xdf1c, 0x10000, 0x1, 0x6, 0x10000, 0xffffff37, 0x81d, 0x4c, 0x16e0000, 0x0, 0x9, 0xffffffff, 0x3, 0x5, 0x5, 0x7, 0x101, 0x9d, 0x7, 0x6, 0x5120, 0xffff8001], [0x10000, 0x2, 0x1, 0x4, 0x4, 0x8, 0x100, 0x5, 0x1, 0x2, 0x4, 0x0, 0xe7f, 0x7, 0x1, 0x1c00, 0x55, 0x8001, 0x744, 0x5, 0x7d0, 0xea8, 0x5, 0x533, 0x4, 0x0, 0x401, 0x0, 0x4, 0x9, 0x5, 0x8, 0x1, 0xe, 0x8, 0x1, 0xfffffff7, 0x43f, 0x401, 0x1e1, 0x6, 0x5, 0x8, 0x8, 0x4, 0x6, 0x1000, 0x7, 0x7, 0x3, 0xc27, 0x6, 0x28d76d5b, 0x4001, 0x3, 0x5, 0x0, 0x8, 0x4, 0x401, 0x9, 0x9, 0x9a37, 0xb3bd2d5], [0x7, 0xff, 0x8de, 0x5, 0x401, 0x0, 0x2, 0x6be2e0ae, 0x50, 0xfffffff8, 0x9, 0x3ff, 0x3, 0x1, 0x0, 0x8, 0x6, 0x3, 0x9, 0xa, 0x6d, 0x8, 0x7, 0x8, 0x4, 0x726, 0x5, 0x4, 0xcad5, 0x8, 0x6, 0x80000000, 0x4, 0x8, 0xc27, 0xffffffff, 0x10000, 0xb6, 0x5, 0x6, 0x9, 0x4, 0xb2, 0x3, 0x4, 0x10001, 0x7fff, 0x3, 0x6, 0xa9, 0x7fff, 0x1b47af25, 0x7fff, 0x300, 0x9, 0x5, 0x4, 0x8926, 0x3, 0x40, 0x7f, 0x3, 0x8, 0x5], [0x61ffd85e, 0x7, 0x1, 0x7, 0x8, 0x5faf, 0xfffffff7, 0x5, 0x7, 0x1, 0x40, 0x2, 0xffff, 0x400, 0x10000, 0x4, 0x4, 0x4c19, 0x2, 0x1ff, 0x401, 0x4, 0x8, 0xf3, 0xea, 0x1, 0x5, 0x51a, 0x10000, 0xde55, 0x4, 0x3, 0x80000000, 0x673, 0x9, 0x2, 0x3, 0xffff, 0x2, 0x5, 0x9, 0x3, 0x5, 0x3, 0x60, 0x1, 0x2, 0x4, 0x7, 0x8000, 0x7, 0x401, 0x400, 0x7ff, 0x5, 0xfff, 0x6, 0x0, 0xd, 0x0, 0x7, 0x6, 0x7dc, 0x1]}, 0x45c) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r6, 0x91) syz_usb_control_io$uac3(r4, 0x0, &(0x7f0000000f80)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_procfs(0x0, &(0x7f0000000fc0)='timers\x00') fsopen(0x0, 0x1) preadv(r8, &(0x7f0000001000)=[{&(0x7f0000001040)=""/122, 0x7a}], 0x1, 0x200000, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000015c0)={{0x14}, [@NFT_MSG_NEWRULE={0x26c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}, @NFT_MSG_DELRULE={0x64, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x27b0, 0xb, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xf8}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2a}, @NFTA_SET_EXPRESSIONS={0x2768, 0x12, 0x0, 0x1, [{0x13cc, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x13c0, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_CMP_DATA={0x1200, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x23, 0x1, "0dec06e0707e5f1660f492d5015a553c36d7792b6e6b5f3240470814be8ba1"}, @NFTA_DATA_VALUE={0x86, 0x1, "f18f8a51882d9a422d85d2ba4f4ec777631c7ae9fbc230c53d4f86dbef440d92f6a4d05f9e65c8d5e3b582d982bdae89b3a67ed19d73f2e136460ebefab6fe3da07b471ad6c9a10580081a346ed70c9ce665f1a9ec3444d05bf4d50d308c5a9627d1b784a6ff1633b6a6fd788fcf646492d9448b64989b8f7c1bb5367fa7edf57969"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xb7, 0x1, "4fe0e624a582017ee405415957570adfb241f96bb8db10dd4c4dbfbce99757cafd8bde7eb597cacb7b6e7ada568f566937f6ad7b1ba2f822f2e03aeff7c75258f54f0ac30b2a2dc808b5814838e01d75424dbd642ec095588cba4d4861de3271167423be0028b90774aec4c182dd4b0b77a30b38ab629de06cb119b238728836cc1969a621cbad61e49a3b57c43bd2cec1386b4ce64cc0b01c1f3010b09f4cc77d72f63643babf7d8be573c97938216ac12e75"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x5d, 0x1, "f66d961aeb1102ca59b0a78e1ced7c575a68f953b8df42af932a996433ad66d2cc0b7ee91e63b1fe1360bdbc66f7ed6cf8aef979cf0e3fe12f1f358a173beca61f4b1dbb408526b3bc579bbe18466c16c675225b7c97d54433"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x18, 0x1, "446b9a6c25075e6a10a4475c6b899ce465fb085a"}]}, @NFTA_CMP_DATA={0x1a4, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xc6, 0x1, "67ef093c79ccbb8790427cf37b3ef01679e6defbbdd9f67bfb15ba89b4ca14ec90b0e088aaa1fd6f91aa3bf1a7f2963cb975691a89e1937bd75b3e87d8d12cd6ffa012eebd4335a7b2e0dfcebe41766370e25afad1fa30a18b39610f36c3b6835263a5ee05e30e3fdb1b843e4ca06109aed011c91afba4add694ae0c842338f50da924bca101649f7b58f329203557451ab8121896ac6020a972c5a26d1d60f7fd270b5a3c8ef11a60853a43222ae49ac3ea12149f1e9f5903178683e00ac68f1c23"}, @NFTA_DATA_VALUE={0x99, 0x1, "3b6faad7b388440b87d6dd009a747e92455991b12252d96ec37bc669491c3cde4ed499e13a92040a61a225900dc53c101c3020c5e48357eadd357f96695591e01d794f7bacbd73ea2b629fc57c1b73d68a9434302c43ba1e39b1f5bea6c96594fd9be2391761efebd7c31a6d89c1bbfd199d4cfd7d7ee498d3733d59d85ac95331579e3a340d8f2f37fc7d8da35c42d1ab975f2774"}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x1314, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1304, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DATA={0x12c0, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0xde, 0x1, "652d9af4bcaf2306b23039e86bdf691acb20223b6a69c02f427664260cd36c0e03427b0bba7490fc1dc4ef14eaa462b5a48745d340c7e9d74dc349ce7151e4e0ab9c887866c9859740c883f51410b7edcb358e6449ae8c06d3bdce23c3c2831fe69139d3ca7f456d7aed988709e8dd2fbf3e985ae6a9dd1469f7af2841da10e0b421b1e6f963c2d928eff157023dde007afad83c8903eb5f11b87c44dc7f4a403665af1cd749530acfce47a6f17d7dfff36dc833344cdafed5bccbbb5a63a741d6dc2356aa3984f4bf9ec367ac3b77e8a668cda0a530c61601d0"}, @NFTA_DATA_VALUE={0x5e, 0x1, "5ee3d214278bda6664e67b8bb26baba2880204231bb19e491eeae7c0b21486c952e1723c25d74cbf806931f8ddf71e7b6de105f6324487f532892fdafb5a9dad4f72d3031a382802a5a5e6478106a5663fa5ceb46ccaab53b3a1"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xd1, 0x1, "9fb80b15a1f7591a140f3547e761b673a31c3f5222dc19bebec8ab08ae896ca5e43d91c36d5ac69a3cd2bb9ccc15866c02e01d6ee1ea706d7ee7f954766f1e084caa7bf9e642a4cd79878646ef21dd838aecfc58be06b513ce346d674858b71d2083202c80701274081c00a00654c9ff390ac1abdb1f9e47854ffa10892354cba4183da53637d07845c1125c946d78958462c02b5889fdf9f0211e6b6242adf8044a7a57354a982d704d07f69debd4a8abc273a32ee22d1b2854ce490625694002bbcb4fae7a15d10e1f4c2fcc"}, @NFTA_DATA_VALUE={0x22, 0x1, "410c84eb7dd975a61b5018a21137c23fe45aa2ea5c72fb11f520296a0a26"}, @NFTA_DATA_VALUE={0x1c, 0x1, "c9f366ace0e57e0119cb42d12bec1e3725cb08858b92f214"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_BITWISE_MASK={0x40, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}}}, {0x34, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1a}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x12}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x30, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}]}], {0x14}}, 0x2aa8}}, 0x4048010) sendmsg$nl_route(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)=@setlink={0x3c, 0x13, 0x1, 0x2000000, 0x25dfdbff, {}, [@IFLA_CARRIER={0x5}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 38.315049265s ago: executing program 1 (id=4867): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="300000001c00010401000000fffffff72d000000010000008000000105000100080000000a0002000000000000000000", 0x30) 38.162882552s ago: executing program 1 (id=4868): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x14985, 0x3, 0x3}, 0x18, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x11, &(0x7f0000000000)={0x39, 0x5, 0x5}) r1 = syz_clone3(0x0, 0x0) ptrace$peek(0x1, r1, &(0x7f0000000240)) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) landlock_restrict_self(r0, 0x1) connect$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) r4 = openat$nvram(0xffffff9c, &(0x7f0000000140), 0x84000, 0x0) ioctl$SG_GET_SG_TABLESIZE(r4, 0x227f, &(0x7f0000000180)) 38.10188428s ago: executing program 1 (id=4869): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB="e4000020", @ANYRES16=r3, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r4, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) 38.003846282s ago: executing program 4 (id=4870): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x26020480) unshare(0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)={0x28, r0, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x14014) 37.924961555s ago: executing program 1 (id=4871): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socket(0xa, 0x803, 0x0) (async) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0xa1}}], 0x1, 0x2040000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000001a00)='./cgroup\x00', 0x89901) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000001a40)='./cgroup\x00', 0x100) move_mount(r3, 0x0, r4, 0x0, 0x46) (async) umount2(&(0x7f0000001a80)='./cgroup\x00', 0x9) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000013c0)={[0x3ff, 0x2, 0x3, 0x7fffffffffffffff, 0x58f24867, 0x0, 0x7f, 0x80000002, 0x9, 0x0, 0x6, 0x1, 0x2, 0x4, 0x8, 0x1], 0x54000, 0x100204}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000018c0)={'wlan0\x00', 0x0}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r7, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000001480)=@x86={0x7, 0xc, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x439, 0x6, 0x9, 0x4, 0x8, '\x00', 0x4, 0x4}) (async) r9 = openat$iommufd(0xffffff9c, &(0x7f0000001500), 0x10882, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000001540)={0xc, 0x0}) (async) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r11, &(0x7f0000001680)={0xa, 0xfffd, 0x2, @loopback, 0x6}, 0x1c) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000016c0)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000001700), 0x1000a) (async) sendfile(r11, r12, &(0x7f0000001740)=0x3, 0xffff) (async) ioctl$KVM_SET_CPUID2(r12, 0x4008ae90, &(0x7f0000001780)={0x6, 0x0, [{0x8000001f, 0xffffffff, 0x2, 0xa, 0x41c7800, 0x100, 0xd80}, {0x80000001, 0xb, 0x5, 0xb, 0x8b, 0x100, 0x6}, {0x80000001, 0xf, 0x1, 0x800, 0x4f31, 0x4, 0xffff8000}, {0x80000001, 0x5, 0x3, 0xfffff1a5, 0x4, 0x7fffffff}, {0x80000008, 0x81, 0x2, 0xf2, 0x7, 0x4, 0x7fffffff}, {0xc0000001, 0x1, 0x3, 0x7, 0x1, 0x0, 0x3}]}) ioctl$IOMMU_IOAS_MAP(r9, 0x3b85, &(0x7f0000001640)={0x28, 0x7, r10, 0x0, &(0x7f0000001580)="7566aec228a3772a213c6f12cc3a350f815292d492260eb8a7393ca2f63784d6a75a20880c0e87bb0175ab963b0b4ac6624380636778b059dced47f38f6cef6a9b22b676c4afa5474966d2e4d0cc5d021d49c864782392d19ae315fa8b82173a15f11149390224423c2a9e5c98c089fa022b3ee387528b9e11d6cc08489a006b0986baac1e81c10918b02e530aacf6e026edb591c5b22fc4d72b5c95c9f0572e932c61", 0xa3, 0x10001}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x3, 0x5, 0x48, @loopback, @remote, 0x8000, 0x8000, 0x10, 0x6}}) 37.923756345s ago: executing program 4 (id=4872): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000840), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc2c45512, &(0x7f0000000a00)={{0xb, 0x2, 0x81, 0x5, '\x00', 0xb}, 0x0, [0x2, 0x10e8af, 0x1, 0xcc0, 0xe, 0x101, 0x80, 0xa6da, 0x2, 0x1, 0x10000009, 0x8, 0x8, 0xfffefff7, 0x8, 0x10, 0x10000005, 0x4, 0x40f, 0x1080, 0x962, 0x2, 0x1, 0x400, 0x7fffffff, 0xc360, 0x80000001, 0x1000, 0x60e3, 0x8a81, 0x10000008, 0x10000, 0x7, 0x1, 0x107430, 0x2, 0x2, 0x60a, 0x1, 0x3, 0x8, 0x5, 0x8001, 0x8, 0x9, 0x9, 0x2, 0x0, 0xffff1688, 0x2, 0x0, 0x4, 0x9000, 0xe93, 0x4, 0x7ff, 0x7, 0x81, 0x50a, 0x0, 0x6, 0x7ff, 0x1000, 0xffffffff, 0xfffffffc, 0x5, 0x7a, 0x2, 0x9, 0x2, 0x3, 0x7, 0x1000ac, 0x7, 0x7, 0x4, 0x8000, 0x9, 0x4, 0x7, 0x10, 0x7, 0x5, 0x0, 0x0, 0x40, 0x2, 0x8000, 0xfff, 0x3, 0x3b9, 0x6, 0x100004, 0x4660917f, 0x487d, 0x8000, 0x1, 0x5, 0x3, 0x0, 0x5, 0x4, 0xe, 0x1, 0x2cd, 0x9, 0xc, 0x4, 0x1, 0x2, 0x3ce, 0xa, 0x8, 0x9, 0x0, 0x106, 0xfffffff7, 0xffffbf90, 0x0, 0xf, 0x2, 0x0, 0x7, 0xa, 0x809, 0xffffffff, 0x73938332, 0x7763]}) socket(0x10, 0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x8a000, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x48, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000640)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0xffea, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c00018008000100070001000c0002"], 0x30}}, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000004c0)=0x1a) r7 = epoll_create(0xd) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f0000000500)={0x20000018}) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000540)={0x7, 0x401, 0xc, 0x10000, 0x17, "9cbecf7e982e4b98c96ffb8248ebd8aa24425b"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) r8 = io_uring_setup(0x721c, &(0x7f0000000580)={0x0, 0x94a8, 0x40805, 0x2, 0x1b1, 0x0, r2}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) r10 = add_key(&(0x7f0000000880)='keyring\x00', &(0x7f00000008c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r11 = add_key(&(0x7f0000000900)='asymmetric\x00', 0x0, &(0x7f0000000d00)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r10) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000001280)={r11}, &(0x7f00000012c0)=ANY=[@ANYBLOB='enc=pkcs1 hash=sha3__'], 0x0, 0x0) sync_file_range(r8, 0x0, 0x0, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) sendmsg$nl_route(r4, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000001300)=ANY=[@ANYBLOB="60000000210000022dbd7000fbdbdf250214001500000004040000b90c400000000000000001080017004e204e220c000c4000db5f6e4322926de373c4f7a0b1031b0000000000000e08000200ac1414bb08000200ac1c01010c000c40e00000000000000008000000e00000010000cd74a96c8644a54f82d8d868343afc0c713b749bf1dbffb4b7a61b62b5a70f137c66ef398ace37294aadc51492fe6bb743f843edcbc11b4182d032b954d09f91677db0ae5fa633"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) 37.761490064s ago: executing program 4 (id=4873): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000000c0)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000180)=0x1, 0x4) recvmmsg(r0, &(0x7f00000001c0), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x64) 37.596516961s ago: executing program 4 (id=4874): r0 = openat$cuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) getresgid(&(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = getuid() r6 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x28001, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x2}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@pcr={'pcr', 0x3d, 0x1c}}, {@euid_gt={'euid>', r5}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@pcr={'pcr', 0x3d, 0x18}}, {@context={'context', 0x3d, 'root'}}, {@subj_role={'subj_role', 0x3d, '[\\\xe7'}}, {@obj_user={'obj_user', 0x3d, ']!\x9f\\'}}, {@obj_role={'obj_role', 0x3d, '$'}}]}}, 0x0, 0x0, &(0x7f0000000340)="3f635812cf68987cb51d84c0bfd64781a6c7cbc84f7706b6633495639aac7abe00fd4c2974434af7a1118ab5e7fb6a4fc92bc1805fd5dee2d41bf805790d79130a51") r7 = openat$vga_arbiter(0xffffff9c, &(0x7f00000003c0), 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000400), 0xab1a, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000440)={0x4, 0x0, 0x80, "d876ef7946b804e25854f1aee2fb64d635b3accae95d875f86161fda05f44aed", 0xb5315258}) r9 = signalfd4(r8, &(0x7f0000000480)={[0xec, 0xfd4a]}, 0x8, 0x800) r10 = socket$inet(0x2, 0x80000, 0x7) r11 = syz_open_dev$dri(&(0x7f00000004c0), 0x9, 0x140) quotactl_fd$Q_SETINFO(r11, 0xffffffff80000602, r5, &(0x7f0000000500)={0x1, 0x2, 0x0, 0x7}) ioctl$DVB_DEMUX_DMX_REQBUFS(r9, 0xc0086f3c, &(0x7f0000000540)={0x61b1, 0x8}) read$FUSE(r0, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000025c0)={0x50, 0x0, r12, {0x7, 0x2d, 0x400, 0x800000, 0xfff9, 0x5, 0x4, 0x3, 0x0, 0x0, 0x10, 0x2}}, 0x50) read(r8, &(0x7f0000002640)=""/146, 0x92) write$FUSE_STATFS(r9, &(0x7f0000002700)={0x60, 0x0, r12, {{0x400, 0x9d, 0x8, 0xc, 0xfffffffffffffa6f, 0xb851, 0x82c, 0x6dc03784}}}, 0x60) r15 = landlock_create_ruleset(&(0x7f0000002780)={0x1000, 0x1, 0x2, 0x8, 0xa, 0x3}, 0x30, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000027c0)={0x3, 0x0, [{0x3b3, 0x0, 0xf7}, {0x1a0, 0x0, 0x9}, {0x2ce, 0x0, 0x20}]}) sendmsg$IPSET_CMD_SWAP(r9, &(0x7f00000028c0)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x281300c4}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x1c, 0x6, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) quotactl_fd$Q_QUOTAON(r6, 0xffffffff80000200, r13, &(0x7f0000002900)='./file0\x00') pipe2(&(0x7f0000002940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getdents64(r17, &(0x7f0000002980)=""/103, 0x67) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r16, 0x40106e80, &(0x7f0000002a00)={0x80000000}) fcntl$setpipe(r8, 0x407, 0x100) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000002a80)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000002a40), 0x111, 0x5}}, 0x20) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r16, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18, r8, {r1, r3}}, './file0\x00'}) getresgid(&(0x7f00000030c0), &(0x7f0000003100)=0x0, &(0x7f0000003140)) ioctl$TIOCGPGRP(r16, 0x540f, &(0x7f0000003180)=0x0) sendmmsg$unix(r16, &(0x7f0000006140)=[{{&(0x7f0000002ac0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002d40)=[{&(0x7f0000002b40)="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", 0xfe}, {&(0x7f0000002c40)="f83ab287305cd7f3e45a0231ae6f9842e89a2b5d1a49589f2f95486bf58b96a6de3d2dc72d08242209e2a9dda86a17e265a72e9d55896589", 0x38}, {&(0x7f0000002c80)="74ad945d6fb6380c980157ff36fdc3c342ce731770292dd3f1b63bdfa5c9f6d2314ec4f3", 0x24}, {&(0x7f0000002cc0)="41d2e451d60bb4fc5b317208d6b20845fded91be7142dacfdc2ffe6a1944fe1f2a1ae2806f98734269c0d8e5c0d9104382ccc69bfc4d49f558fe94043c9e97a8390e64b76c943a2a28f9119569c574933b124cd307515b02d266f30729b8be73da8923", 0x63}], 0x4, 0x0, 0x0, 0xd16f8dc6c19dc825}}, {{&(0x7f0000002d80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003040)=[{&(0x7f0000002e00)="a91d35573097b9befdc73274fc391fe95452254bf3be59e13c3251eb1612aeb6118214cd8acb50c3b85dfd86a6b500e8c60c86364c2e0f04357aebc603c6b1c2be136597355abc1876f24fc80b3c5f82f9d381d44a720120706ff96ce4860d92451370fcb7f15c959e7e2d972947f6da52f677d553b66a8705386c5d92e56e4a25c0cc96aa2ad90ef83640f9c1af557a1e3dc5ece5773b9c8d19e46a09d754bf620884657fc97bef980b4608b0bf9de794e0de4d7fb48a7f320fc92e581542133e74a5d11867048b4b0bd3ad07118efa4595e8198ab9e0987ce6a0eb421b786d525ee0f7c6546686a20a3080fa26a2", 0xef}, {&(0x7f0000002f00)="daff151d67538b42", 0x8}, {&(0x7f0000002f40)="861e2781c262937a9b195365c346dfd55133362986b086604fc21518a506de40d5912df75158c39019b2cdc2a590a10c2e0fc7eebfcfbc3310044e8f17d04cbcfdb546131c7ca476c59679f87119fc64bba1cfe6f4de816793daedb0c062d591458b28945713570889feccc1cd5e4b19b205d738d798377cbc2a8e33a844c233e5b092d40fafb0ce8e68f1b761105f42ece8a0f995580e7e45553629418fdf2956f7c16fa9d46ccb23a502ca963e0673ec813168cc2066ca26f819442271d02553e41194283d4d03b7c12280890f002c1cd984e1b18b15fa453bf54187eb7977fee4bf48", 0xe4}], 0x3, &(0x7f0000003300)=[@cred={{0x18, 0x1, 0x2, {r14, r1, r18}}}, @cred={{0x18, 0x1, 0x2, {r14, r1, r19}}}, @cred={{0x18, 0x1, 0x2, {r20, 0x0, r4}}}], 0x48, 0x20000840}}, {{&(0x7f0000003380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003440)=[{&(0x7f0000003400)="36080cfd91036e3ec65bece6a1e59a67ff44ae48363fd354332c8181ac28cd7802fc0ef66ed2558a88cd6037c6", 0x2d}], 0x1, 0x0, 0x0, 0x80}}, {{0x0, 0x0, &(0x7f0000004580)=[{&(0x7f0000003480)="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", 0x1000}, {&(0x7f0000004480)="60238f627a7bcb24e2025fd482c784e331b640efaaf420f1b932289c02f04c6e93c2c99b46039671333c00cd024895960431c90502fce68b22ab6b3ad464cd5fde06417aa4dc6f16de586674e050823a0a8e730cdfd34b7efc029d57ac7e73f1ac790f7526125e40f3297630d479d74194be79f0f6f068f3cd18df7456af74af1c75c3755addcbe0af18955bd7949cfa62c3d613d16ad0dc1841b7235b5a94f4c1c2ef6077af52decb95d9140e11dc83882cd75fbea096e6a52fef46f4d804af123febfb771ba9d696b0d496484960eb2ec2bad424634ff7559737f9cb7e7a", 0xdf}], 0x2}}, {{0x0, 0x0, &(0x7f00000049c0)=[{&(0x7f00000045c0)="68533e38b5054bc6eb0f37d655e06a16d4ac4e37e9db8ed138d5eb776d15622461742c25871353a87243b3", 0x2b}, {&(0x7f0000004600)="1ca3c1afa5d3592aeb5081208153859cd8654391cea75458189a63a17b769e527808402cdb26fc9feaef8ee8ca9923bdb09fd41235bdf578dfb4653f16a7fc7d7d6a461b82b97ba8f13778feba983fcc3b8d61397c7c2590b8c7e7b8357d37f511fcddb4f40a0c7c2dc18c38980411fd3edd5a8f293896b4a5c72873e101f7f6e54cfb867b9c7ca64bcb42203100a627659a101beec4eb1ce42637ebb949bb3de14ae0cf91321476a85175a4ef1feabf86", 0xb1}, {&(0x7f00000046c0)="add9755ec16eef87a8fedf99b7533e6889a50f91f126c157fe4efe00afd3219e2e4690adda13e4c9ffe3e8f05e7329f707bbacf3ae426c3afcf23792262b98cc74783e0f65c9a289b1f2927547b02822fef2789fed5b267c200fd34d8af1dff6975cc459c8f349924730feb0ddb7e7262e05a99e7d32bc8e25648af3fb4e6ceeaea7ffbfc77fe1f7f2a7c49c1861b6aa791a11d4d90244c7b99273215f80c91a9d4a3e5fd9a87868a9afb930", 0xac}, {&(0x7f0000004780)="fd3b6cc894237b9182fe3913a9294efcabb73ca0a3805e8b923a94eb9d20e94895648d06f693ac08a217be700ed53eb26f66cb1eb7b1d93f4eff044b2524683767c76c38ddc95d36ac11cca8fc310bc011a30a0a550b66cb659adf88dd8d9e841e025d4d257b363165e286c9c049d0e89a401e4109f3b4fcd428691fdb19f18a44fa88da846f9d024541af36c6bcf34d3d061997307bdb1acbf89c891d38561adfc04c7cee22a5b49e01cd9b680cf785be6a475263", 0xb5}, {&(0x7f0000004840)="faa0845fcaa22128d9c115d67eb405160f1f97a7ebdc", 0x16}, {&(0x7f0000004880)="5ee30af5646841f3647b44f40acffabb2697828e910054cc6f60bd27c17ad6e2cf002d647c", 0x25}, {&(0x7f00000048c0)="e71d4390c421306feef67429b05ac9fabb2e4b9195c9ff84a58fc5e12f861c0cf99c8b8cb1697ad7d1b3dc8b920f47552b5e529b3cf4fb7e525906e5aaf8eb1f4a133bee781b593529e17410ef2ad8f9e63fd186b386a1b4e3edfcf0a4b0156c2949c1b9f80ebfb51caf873717989f636aacddc6bae82ead569912f3eca4a91366d97caf0c45566336bdc48dd535d52dd4cf918476290c7809e6a4beaba688bc8ffcec17119cc3de701b8f3f81f17f09ebe35c10c3e102c8b836ab3e5c122d5d9ce16753bb4b600e647ad8438a8f0815499f850e9dc4bf562051c3b19199cf16f30787065f053d12e00bd7b938d0a23de69b0d6b1fa29c", 0xf7}], 0x7, &(0x7f0000004a80)=[@cred={{0x18, 0x1, 0x2, {r14, r1, r2}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r7]}}, @rights={{0x18, 0x1, 0x1, [r10, r6, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r8, r7, r17, 0xffffffffffffffff, r17, r8, r9, r15]}}], 0x70}}, {{0x0, 0x0, &(0x7f0000005c80)=[{&(0x7f0000004b00)="e366a1b124a4e5a12da584cbf88664", 0xf}, {&(0x7f0000004b40)="7a9eff2809b9dffad6324f94df10c529ce43f9ac42442b783c5294529c9bda70b945c13a815dbbb054c98d0cd28bd35b6ae2fc5ca7071b27ac6eccd69d69eb66840defaa7dd9dda230054233090da7d2a5bb6e53a24e11944492ab54df79bdb6779a56d5d97fc001", 0x68}, {&(0x7f0000004bc0)="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", 0x1000}, {&(0x7f0000005bc0)="7bdd59b62aa083afddf84fc134e6", 0xe}, {&(0x7f0000005c00)="beb03a90cf1fe753dfdc9dd416214da9b8bd05702aba742a8ce34dedc76614d7cedb4f85ff5f8d04f32fb882f0dc07e544d26e5bb3966c9fa39c01015598988cc43c2ff02ff7a1334ddc7d8745e74578094b9b15645ab2bfb9164bef29ff2dc3aeacccfeb83b0256ed7ff813c5605e8dba", 0x71}], 0x5, 0x0, 0x0, 0x4040010}}, {{&(0x7f0000005cc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005d40), 0x0, &(0x7f0000005d80)=[@cred={{0x18, 0x1, 0x2, {r14, r1, r2}}}], 0x18, 0x41}}, {{&(0x7f0000005dc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005f40)=[{&(0x7f0000005e40)="fd85e5b94ec18b4c2b5bbc2b126dd1a25afcbb17c3e693750d20cc4fd9290f220be79f7cc434bbaec035ac8a2b135e0ab2532e04e5636936799204f3910174e598a91aa377598b530af7b89fa4011eed2a8e97d341f22f42782da81eb1cc40e9c0a6759a1a11d8f482e287191dca8c0e03bea9983bdfaf694c39f013a102e21ce400770400b308250713dafc3f91e3bd22f693a2702a169ea01851aa8b3ace889d412be9703a6991715c54ac0114350179c1b3756cc0434765f155188ea401dcc17c782056cda33921bca62ac96faee3cc933b5e1e2d97", 0xd7}], 0x1, &(0x7f0000006100)=[@cred={{0x18, 0x1, 0x2, {0x0, r13, r2}}}], 0x18, 0x4048040}}], 0x8, 0x0) 37.416640634s ago: executing program 1 (id=4875): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x6) bind(r1, &(0x7f0000000440)=@in={0x2, 0x4908, @loopback}, 0x10) syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000400605014600010000000109022700010100a03209040000030600ff23070581"], 0x0) listen(r1, 0x5) r2 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000640)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f0030e1020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba259f72d3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e468ef469dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000bc0)={r2}, &(0x7f0000000c00)=ANY=[@ANYBLOB="656e633d706b63733120686173683d73686132353600000000000000000000004d1a0000000100"/79], 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000004c0)={0x3a, @dev={0xac, 0x14, 0x14, 0x42}, 0x4e21, 0x0, 'none\x00', 0x1, 0x4, 0x22}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x6) connect(r3, &(0x7f00000005c0)=@in={0x2, 0x15, @loopback}, 0x10) 37.284326175s ago: executing program 4 (id=4876): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r0 = syz_ublk_setup_io_uring(0x64d, &(0x7f0000000240)={0x0, 0xd58c, 0x1000, 0x0, 0x37b}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x3, 0x90f, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, 0x0) accept4$tipc(0xffffffffffffffff, &(0x7f00000005c0), &(0x7f0000000600)=0x10, 0x800) 0s ago: executing program 32 (id=4875): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x6) bind(r1, &(0x7f0000000440)=@in={0x2, 0x4908, @loopback}, 0x10) syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000400605014600010000000109022700010100a03209040000030600ff23070581"], 0x0) listen(r1, 0x5) r2 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000640)="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", 0x559, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000bc0)={r2}, &(0x7f0000000c00)=ANY=[@ANYBLOB="656e633d706b63733120686173683d73686132353600000000000000000000004d1a0000000100"/79], 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000004c0)={0x3a, @dev={0xac, 0x14, 0x14, 0x42}, 0x4e21, 0x0, 'none\x00', 0x1, 0x4, 0x22}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x6) connect(r3, &(0x7f00000005c0)=@in={0x2, 0x15, @loopback}, 0x10) kernel console output (not intermixed with test programs): Number: syz [ 1034.777727][T21704] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1035.045803][T21704] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1035.218632][T12339] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1035.295145][T21704] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1035.369845][T12339] usb 3-1: Using ep0 maxpacket: 16 [ 1035.372734][T12339] usb 3-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1035.396710][T12339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.396734][T12339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.396747][T12339] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1035.396788][T12339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.474593][T12339] usb 3-1: config 0 descriptor?? [ 1035.730313][T12348] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1035.784393][T20419] team0 (unregistering): Port device team_slave_1 removed [ 1035.810494][T20419] team0 (unregistering): Port device team_slave_0 removed [ 1035.888337][T12348] usb 1-1: Using ep0 maxpacket: 16 [ 1035.890978][T12348] usb 1-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1035.895632][T12348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.895660][T12348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.895673][T12348] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1035.895699][T12348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.959383][T15140] Bluetooth: hci2: command tx timeout [ 1035.983477][T12348] usb 1-1: config 0 descriptor?? [ 1036.350468][T12355] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1036.350669][T12355] asix 2-1:2.88: probe with driver asix failed with error -71 [ 1036.384117][ T5295] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1036.404718][T12355] usb 2-1: USB disconnect, device number 57 [ 1036.668270][T15140] Bluetooth: hci3: command tx timeout [ 1037.017254][T12339] usbhid 3-1:0.0: can't add hid device: -71 [ 1037.017377][T12339] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1037.052794][T12339] usb 3-1: USB disconnect, device number 67 [ 1037.226434][ T29] audit: type=1326 audit(1793153726.805:12626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21744 comm="syz.1.4623" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf747ef1c code=0x0 [ 1037.536548][T12348] usbhid 1-1:0.0: can't add hid device: -71 [ 1037.536685][T12348] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1037.552347][T12348] usb 1-1: USB disconnect, device number 100 [ 1037.770215][T20419] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.848218][T21670] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.848452][T21670] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.848661][T21670] bridge_slave_0: entered allmulticast mode [ 1037.857595][T21670] bridge_slave_0: entered promiscuous mode [ 1037.862671][T21670] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.862850][T21670] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.862999][T21670] bridge_slave_1: entered allmulticast mode [ 1037.865989][T21670] bridge_slave_1: entered promiscuous mode [ 1038.027974][T15140] Bluetooth: hci2: command tx timeout [ 1038.050992][T20419] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.112763][T21670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1038.231733][T21670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1038.233150][ T5295] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1038.399591][T21774] IPVS: Scheduler module ip_vs_mh not found [ 1038.401255][T21780] IPVS: length: 4096 != 24 [ 1038.404069][T21779] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1038.453576][T20419] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.549136][T21670] team0: Port device team_slave_0 added [ 1038.647973][T12348] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 1038.706059][T20419] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.748479][T15140] Bluetooth: hci3: command tx timeout [ 1038.801051][T12348] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1038.801591][T12348] usb 2-1: not running at top speed; connect to a high speed hub [ 1038.801623][T12348] usb 2-1: New USB device found: idVendor=0ac8, idProduct=0323, bcdDevice=a7.8f [ 1038.802590][T12348] usb 2-1: config index 0 descriptor too short (expected 28771, got 10) [ 1038.802614][T12348] usb 2-1: config 114 has too many interfaces: 95, using maximum allowed: 32 [ 1038.802635][T12348] usb 2-1: config 114 descriptor has 1 excess byte, ignoring [ 1038.802651][T12348] usb 2-1: config 114 has 0 interfaces, different from the descriptor's value: 95 [ 1038.805711][T12348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.805736][T12348] usb 2-1: Product: syz [ 1038.805751][T12348] usb 2-1: Manufacturer: syz [ 1038.805765][T12348] usb 2-1: SerialNumber: syz [ 1038.807732][T21670] team0: Port device team_slave_1 added [ 1038.885589][T21715] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.885712][T21715] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.885902][T21715] bridge_slave_0: entered allmulticast mode [ 1038.895193][T21715] bridge_slave_0: entered promiscuous mode [ 1039.028197][T21715] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.028328][T21715] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.028497][T21715] bridge_slave_1: entered allmulticast mode [ 1039.037508][T21715] bridge_slave_1: entered promiscuous mode [ 1039.064657][T21779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.065122][T21779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.093253][T21779] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4628'. [ 1039.146133][T21670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1039.146176][T21670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1039.146203][T21670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1039.234234][T21670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1039.234254][T21670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1039.234305][T21670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1039.250183][T21715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1039.286943][T21715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1039.715641][T12348] usb 2-1: USB disconnect, device number 58 [ 1039.795667][T21715] team0: Port device team_slave_0 added [ 1039.936150][T21715] team0: Port device team_slave_1 added [ 1039.955361][T21670] hsr_slave_0: entered promiscuous mode [ 1039.956539][T21670] hsr_slave_1: entered promiscuous mode [ 1039.960796][T21670] debugfs: 'hsr0' already exists in 'hsr' [ 1039.960819][T21670] Cannot create hsr debugfs directory [ 1040.108217][T15140] Bluetooth: hci2: command tx timeout [ 1040.185911][T21819] FAULT_INJECTION: forcing a failure. [ 1040.185911][T21819] name failslab, interval 1, probability 0, space 0, times 0 [ 1040.185935][T21819] CPU: 0 UID: 0 PID: 21819 Comm: syz.0.4635 Tainted: G L syzkaller #0 PREEMPT(full) [ 1040.185951][T21819] Tainted: [L]=SOFTLOCKUP [ 1040.185956][T21819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1040.185964][T21819] Call Trace: [ 1040.185969][T21819] [ 1040.185974][T21819] dump_stack_lvl+0xe8/0x150 [ 1040.185998][T21819] should_fail_ex+0x410/0x560 [ 1040.186017][T21819] should_failslab+0xa8/0x100 [ 1040.186035][T21819] __kmalloc_noprof+0xf9/0x710 [ 1040.186047][T21819] ? tomoyo_encode+0x2ad/0x570 [ 1040.186060][T21819] ? tomoyo_encode+0x2ad/0x570 [ 1040.186077][T21819] tomoyo_encode+0x2ad/0x570 [ 1040.186092][T21819] tomoyo_realpath_from_path+0x5fa/0x640 [ 1040.186111][T21819] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1040.186122][T21819] tomoyo_path_number_perm+0x246/0x5f0 [ 1040.186134][T21819] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1040.186147][T21819] ? __lock_acquire+0x747/0x2de0 [ 1040.186183][T21819] ? __fget_files+0x2a/0x420 [ 1040.186196][T21819] ? __fget_files+0x2a/0x420 [ 1040.186206][T21819] ? __fget_files+0x3a2/0x420 [ 1040.186215][T21819] ? __fget_files+0x2a/0x420 [ 1040.186228][T21819] security_file_ioctl_compat+0xc3/0x2a0 [ 1040.186250][T21819] __ia32_compat_sys_ioctl+0x139/0x950 [ 1040.186266][T21819] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1040.186279][T21819] ? __fget_files+0x3a2/0x420 [ 1040.186289][T21819] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1040.186306][T21819] ? lock_acquire+0x115/0x350 [ 1040.186326][T21819] ? __might_fault+0xaf/0x130 [ 1040.186344][T21819] __do_fast_syscall_32+0x28b/0x6c0 [ 1040.186358][T21819] ? do_fast_syscall_32+0x33/0x70 [ 1040.186370][T21819] ? asm_int80_emulation+0x1a/0x20 [ 1040.186383][T21819] ? do_int80_emulation+0x299/0x500 [ 1040.186397][T21819] ? trace_irq_disable+0x3b/0x140 [ 1040.186414][T21819] do_fast_syscall_32+0x33/0x70 [ 1040.186427][T21819] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1040.186441][T21819] RIP: 0023:0xf73cef1c [ 1040.186453][T21819] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1040.186462][T21819] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1040.186474][T21819] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000008004e500 [ 1040.186482][T21819] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 1040.186489][T21819] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1040.186495][T21819] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1040.186501][T21819] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1040.186517][T21819] [ 1040.186556][T21819] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1040.644854][T20419] bridge_slave_1: left allmulticast mode [ 1040.644884][T20419] bridge_slave_1: left promiscuous mode [ 1040.645104][T20419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.680813][T20419] bridge_slave_0: left allmulticast mode [ 1040.680840][T20419] bridge_slave_0: left promiscuous mode [ 1040.681048][T20419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.851782][T15140] Bluetooth: hci3: command tx timeout [ 1040.947638][T20419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1040.958491][T20419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1040.960934][T20419] bond0 (unregistering): Released all slaves [ 1040.985460][T21715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1040.985477][T21715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.985500][T21715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1040.997123][ T5295] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1041.147940][T21715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1041.147958][T21715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.147984][T21715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1041.367932][T12339] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1041.424246][T21715] hsr_slave_0: entered promiscuous mode [ 1041.424955][T21715] hsr_slave_1: entered promiscuous mode [ 1041.425509][T21715] debugfs: 'hsr0' already exists in 'hsr' [ 1041.425523][T21715] Cannot create hsr debugfs directory [ 1041.554698][T12339] usb 2-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 1041.578958][T12339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.578987][T12339] usb 2-1: Product: syz [ 1041.579001][T12339] usb 2-1: Manufacturer: syz [ 1041.579017][T12339] usb 2-1: SerialNumber: syz [ 1041.650078][ T44] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1041.650179][T20419] hsr_slave_0: left promiscuous mode [ 1041.681289][T20419] hsr_slave_1: left promiscuous mode [ 1041.682113][T20419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1041.682132][T20419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1041.683952][T20419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1041.683967][T20419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1041.729574][T20419] veth1_macvtap: left promiscuous mode [ 1041.729623][T20419] veth0_macvtap: left promiscuous mode [ 1041.729743][T20419] veth1_vlan: left promiscuous mode [ 1041.729817][T20419] veth0_vlan: left promiscuous mode [ 1042.090985][T12355] usb 2-1: USB disconnect, device number 59 [ 1042.515118][T20419] team0 (unregistering): Port device team_slave_1 removed [ 1042.535507][T20419] team0 (unregistering): Port device team_slave_0 removed [ 1042.668744][ T44] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1042.668941][ T44] ath9k_htc: Failed to initialize the device [ 1042.671771][T12355] usb 2-1: ath9k_htc: USB layer deinitialized [ 1042.907983][T15140] Bluetooth: hci3: command tx timeout [ 1043.666479][T21858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4643'. [ 1043.741994][T21858] netlink: 'syz.1.4643': attribute type 5 has an invalid length. [ 1043.742021][T21858] netlink: 'syz.1.4643': attribute type 5 has an invalid length. [ 1044.445548][ T5295] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1044.446528][T21873] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1044.709391][T12344] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 1044.864066][T12344] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1044.864547][T12344] usb 3-1: not running at top speed; connect to a high speed hub [ 1044.864579][T12344] usb 3-1: New USB device found: idVendor=0ac8, idProduct=0323, bcdDevice=a7.8f [ 1044.865549][T12344] usb 3-1: config index 0 descriptor too short (expected 28771, got 10) [ 1044.865574][T12344] usb 3-1: config 114 has too many interfaces: 95, using maximum allowed: 32 [ 1044.865593][T12344] usb 3-1: config 114 descriptor has 1 excess byte, ignoring [ 1044.865610][T12344] usb 3-1: config 114 has 0 interfaces, different from the descriptor's value: 95 [ 1044.867517][T12344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.867546][T12344] usb 3-1: Product: syz [ 1044.867561][T12344] usb 3-1: Manufacturer: syz [ 1044.867576][T12344] usb 3-1: SerialNumber: syz [ 1044.913028][ T44] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1045.054612][T21888] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4648'. [ 1045.064301][T21670] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1045.082382][T21670] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1045.095503][T21873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.100252][T21873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.127970][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 1045.128963][ T44] usb 2-1: New USB device found: idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1045.129194][T21670] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1045.147312][T21873] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4645'. [ 1045.163813][T12344] usb 3-1: USB disconnect, device number 68 [ 1045.171613][ T44] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1045.171644][ T44] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1045.171666][ T44] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.171688][ T44] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1045.171708][ T44] usb 2-1: config 1 has no interface number 0 [ 1045.171753][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.197161][T21670] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1045.206770][T21670] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1045.260739][ T44] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1045.275138][T21670] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1045.309589][T21670] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1045.331187][T21670] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1045.467808][ T44] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 1045.468731][ T44] snd_usb_pod 2-1:1.1: invalid control EP [ 1045.468748][ T44] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 1045.468939][ T44] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1045.469571][ T44] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1045.693027][T12344] usb 2-1: USB disconnect, device number 60 [ 1045.921233][T21670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1045.962103][T21670] 8021q: adding VLAN 0 to HW filter on device team0 [ 1045.975461][ T8243] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.975549][ T8243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1045.978940][ T5701] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1045.996088][ T8253] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.996194][ T8253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1046.128336][ T5701] usb 1-1: Using ep0 maxpacket: 32 [ 1046.129701][ T5701] usb 1-1: New USB device found: idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1046.133276][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.133300][ T5701] usb 1-1: Product: syz [ 1046.133314][ T5701] usb 1-1: Manufacturer: syz [ 1046.133328][ T5701] usb 1-1: SerialNumber: syz [ 1046.136086][ T5701] usb 1-1: config 0 descriptor?? [ 1046.341223][ T5701] airspy 1-1:0.0: usb_control_msg() failed -71 request 09 [ 1046.341251][ T5701] airspy 1-1:0.0: Could not detect board [ 1046.341344][ T5701] airspy 1-1:0.0: probe with driver airspy failed with error -71 [ 1046.382918][ T5701] usb 1-1: USB disconnect, device number 101 [ 1046.611199][T21715] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1046.622847][T21715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1046.625585][T21715] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1046.644798][T21715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1046.652593][T21715] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1046.664515][T21715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1046.666499][T21715] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1046.681516][T21715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1046.695413][T21670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1046.985430][T21670] veth0_vlan: entered promiscuous mode [ 1047.014861][T21670] veth1_vlan: entered promiscuous mode [ 1047.204244][T21670] veth0_macvtap: entered promiscuous mode [ 1047.250391][T21715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1047.261490][T21670] veth1_macvtap: entered promiscuous mode [ 1047.383816][T21715] 8021q: adding VLAN 0 to HW filter on device team0 [ 1047.418320][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.418433][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1047.428182][T12348] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1047.463398][T21670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1047.538129][ T8243] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.538198][ T8243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1047.545444][T21670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1047.599617][T21957] syzkaller1: entered promiscuous mode [ 1047.599636][T21957] syzkaller1: entered allmulticast mode [ 1047.601074][T12348] usb 1-1: Using ep0 maxpacket: 16 [ 1047.603780][T12348] usb 1-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1047.606530][T12348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1047.606561][T12348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1047.606584][T12348] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1047.606623][T12348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.694484][T12348] usb 1-1: config 0 descriptor?? [ 1047.939939][T20419] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.940259][T20419] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.940445][T20419] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.099783][ T8250] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.200401][T21715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1048.334436][T20419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1048.334459][T20419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1048.483086][T21715] veth0_vlan: entered promiscuous mode [ 1048.562989][T20419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1048.563012][T20419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1048.591275][T21715] veth1_vlan: entered promiscuous mode [ 1048.774222][T21715] veth0_macvtap: entered promiscuous mode [ 1048.803328][T21715] veth1_macvtap: entered promiscuous mode [ 1048.916391][T21715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1049.016429][T21715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1049.068964][ T8243] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.070502][T21803] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.071219][T21803] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.071424][T21803] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.257015][T21983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4660'. [ 1049.257037][T21983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4660'. [ 1049.428000][T12348] usbhid 1-1:0.0: can't add hid device: -71 [ 1049.428123][T12348] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1049.455727][T12348] usb 1-1: USB disconnect, device number 102 [ 1049.473751][T21803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1049.473772][T21803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1049.610650][T21803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1049.610673][T21803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1049.888545][T12344] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1050.041755][T12344] usb 2-1: Using ep0 maxpacket: 16 [ 1050.042448][T12344] usb 2-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1050.045680][T12344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1050.045711][T12344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1050.045734][T12344] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1050.045776][T12344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.109596][T12344] usb 2-1: config 0 descriptor?? [ 1050.275045][T22009] IPVS: Scheduler module ip_vs_mh not found [ 1050.285305][T22015] IPVS: length: 4096 != 24 [ 1050.327614][T22016] qrtr: Invalid version 0 [ 1050.410112][T22016] xfrm0: entered allmulticast mode [ 1050.688184][T12339] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1050.849009][T12339] usb 5-1: Using ep0 maxpacket: 8 [ 1050.851373][T12339] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1050.853643][T12339] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1050.853674][T12339] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1050.853727][T12339] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1050.853752][T12339] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1050.853775][T12339] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1050.853804][T12339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.058023][T12355] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1051.124841][T12339] usb 5-1: usb_control_msg returned -32 [ 1051.124892][T12339] usbtmc 5-1:16.0: can't read capabilities [ 1051.217991][T12355] usb 3-1: Using ep0 maxpacket: 16 [ 1051.218732][T12355] usb 3-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1051.223016][T12355] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1051.223054][T12355] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1051.223066][T12355] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1051.223092][T12355] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.246777][T12355] usb 3-1: config 0 descriptor?? [ 1051.534732][T22016] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 1051.545217][T12352] usb 5-1: USB disconnect, device number 91 [ 1051.998479][T12344] usbhid 2-1:0.0: can't add hid device: -71 [ 1051.998575][T12344] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1052.026805][T12344] usb 2-1: USB disconnect, device number 61 [ 1052.699786][T12355] usbhid 3-1:0.0: can't add hid device: -71 [ 1052.707049][T12355] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1052.717047][T12355] usb 3-1: USB disconnect, device number 69 [ 1052.857924][T12344] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1052.989552][T12344] usb 1-1: device descriptor read/64, error -71 [ 1053.228808][T12344] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1053.370385][T12344] usb 1-1: device descriptor read/64, error -71 [ 1053.404945][T22082] netlink: 'syz.2.4674': attribute type 21 has an invalid length. [ 1053.404969][T22082] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4674'. [ 1053.405048][T22082] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4674'. [ 1053.478373][T12344] usb usb1-port1: attempt power cycle [ 1053.796848][T22086] IPVS: Scheduler module ip_vs_mh not found [ 1053.811251][T22088] IPVS: length: 4096 != 24 [ 1053.828140][T12344] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1053.851207][T12344] usb 1-1: device descriptor read/8, error -71 [ 1053.897692][T22080] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.042779][T22080] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.098019][T12344] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1054.120258][T12344] usb 1-1: device descriptor read/8, error -71 [ 1054.180349][T22080] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.241568][T12344] usb usb1-port1: unable to enumerate USB device [ 1054.345912][T22080] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.372463][T22110] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1054.510298][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.510357][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.630940][T12352] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 1054.775031][T22125] FAULT_INJECTION: forcing a failure. [ 1054.775031][T22125] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.775065][T22125] CPU: 1 UID: 0 PID: 22125 Comm: syz.1.4682 Tainted: G L syzkaller #0 PREEMPT(full) [ 1054.775091][T22125] Tainted: [L]=SOFTLOCKUP [ 1054.775099][T22125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1054.775112][T22125] Call Trace: [ 1054.775120][T22125] [ 1054.775129][T22125] dump_stack_lvl+0xe8/0x150 [ 1054.775165][T22125] should_fail_ex+0x410/0x560 [ 1054.775193][T22125] ? __alloc_skb+0x1db/0x7a0 [ 1054.775219][T22125] should_failslab+0xa8/0x100 [ 1054.775248][T22125] ? __alloc_skb+0x1db/0x7a0 [ 1054.775274][T22125] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 1054.775296][T22125] ? __alloc_skb+0x18d/0x7a0 [ 1054.775323][T22125] ? __alloc_skb+0x1db/0x7a0 [ 1054.775357][T22125] __alloc_skb+0x1db/0x7a0 [ 1054.775390][T22125] alloc_skb_with_frags+0xc6/0x760 [ 1054.775423][T22125] sock_alloc_send_pskb+0xc69/0xd90 [ 1054.775463][T22125] ? __lock_acquire+0x747/0x2de0 [ 1054.775488][T22125] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1054.775528][T22125] tun_get_user+0x9c8/0x4470 [ 1054.775568][T22125] ? aa_file_perm+0x18b/0x15f0 [ 1054.775598][T22125] ? aa_file_perm+0x4ed/0x15f0 [ 1054.775623][T22125] ? __pfx_tun_get_user+0x10/0x10 [ 1054.775650][T22125] ? __lock_acquire+0x747/0x2de0 [ 1054.775679][T22125] ? kstrtoull+0x137/0x1d0 [ 1054.775704][T22125] ? ref_tracker_alloc+0x172/0x530 [ 1054.775733][T22125] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1054.775761][T22125] ? lock_acquire+0x115/0x350 [ 1054.775783][T22125] ? tun_get+0x1c/0x2f0 [ 1054.775810][T22125] ? tun_get+0x1c/0x2f0 [ 1054.775838][T22125] ? tun_get+0x1c/0x2f0 [ 1054.775866][T22125] tun_chr_write_iter+0x113/0x200 [ 1054.775893][T22125] vfs_write+0x612/0xba0 [ 1054.775923][T22125] ? __pfx_vfs_write+0x10/0x10 [ 1054.775949][T22125] ? __fget_files+0x3a2/0x420 [ 1054.775969][T22125] ? __fget_files+0x2a/0x420 [ 1054.775993][T22125] ? fdget+0x1ac/0x250 [ 1054.776019][T22125] ksys_write+0x150/0x270 [ 1054.776043][T22125] ? __pfx_ksys_write+0x10/0x10 [ 1054.776067][T22125] ? __might_fault+0xaf/0x130 [ 1054.776101][T22125] __do_fast_syscall_32+0x28b/0x6c0 [ 1054.776127][T22125] ? do_fast_syscall_32+0x33/0x70 [ 1054.776150][T22125] ? asm_int80_emulation+0x1a/0x20 [ 1054.776169][T22125] ? do_int80_emulation+0x299/0x500 [ 1054.776192][T22125] ? trace_irq_disable+0x3b/0x140 [ 1054.776225][T22125] do_fast_syscall_32+0x33/0x70 [ 1054.776249][T22125] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1054.776273][T22125] RIP: 0023:0xf747ef1c [ 1054.776291][T22125] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1054.776307][T22125] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1054.776328][T22125] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000600 [ 1054.776342][T22125] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000000 [ 1054.776354][T22125] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1054.776366][T22125] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1054.776378][T22125] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1054.776407][T22125] [ 1054.790052][T12352] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1054.790778][T12352] usb 3-1: not running at top speed; connect to a high speed hub [ 1054.790808][T12352] usb 3-1: New USB device found: idVendor=0ac8, idProduct=0323, bcdDevice=a7.8f [ 1054.791961][T12352] usb 3-1: config index 0 descriptor too short (expected 28771, got 10) [ 1054.791983][T12352] usb 3-1: config 114 has too many interfaces: 95, using maximum allowed: 32 [ 1054.792003][T12352] usb 3-1: config 114 descriptor has 1 excess byte, ignoring [ 1054.792021][T12352] usb 3-1: config 114 has 0 interfaces, different from the descriptor's value: 95 [ 1054.795393][T12352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.795415][T12352] usb 3-1: Product: syz [ 1054.795430][T12352] usb 3-1: Manufacturer: syz [ 1054.795444][T12352] usb 3-1: SerialNumber: syz [ 1054.846398][T12339] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1054.988944][T12339] usb 4-1: device descriptor read/64, error -71 [ 1055.017636][T22110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.025748][T22110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.081399][T12352] usb 3-1: USB disconnect, device number 70 [ 1055.118933][T22110] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4680'. [ 1055.230311][T12339] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1055.358452][T12339] usb 4-1: device descriptor read/64, error -71 [ 1055.475285][T12339] usb usb4-port1: attempt power cycle [ 1055.698502][T12352] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1055.719493][ T44] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1055.746176][T22148] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4687'. [ 1055.752399][T22148] netlink: 'syz.2.4687': attribute type 39 has an invalid length. [ 1055.808033][T12339] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1055.828888][T12339] usb 4-1: device descriptor read/8, error -71 [ 1055.864253][ T44] usb 5-1: device descriptor read/64, error -71 [ 1055.865792][T12352] usb 1-1: New USB device found: idVendor=1199, idProduct=68a3, bcdDevice=0.00 [ 1055.867038][T12352] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 1055.867087][T12352] usb 1-1: config 1 has no interface number 0 [ 1055.867125][T12352] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87 [ 1055.867149][T12352] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1023 [ 1055.867191][T12352] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 64 [ 1055.873163][T12352] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.873189][T12352] usb 1-1: Product: syz [ 1055.873202][T12352] usb 1-1: Manufacturer: syz [ 1055.873215][T12352] usb 1-1: SerialNumber: syz [ 1055.889446][T22136] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1055.889591][T22136] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1056.069493][T12339] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1056.098049][ T44] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1056.100065][T12339] usb 4-1: device descriptor read/8, error -71 [ 1056.101524][T12352] usb 1-1: Error in usbnet_get_endpoints (-71) [ 1056.139595][T12352] usb 1-1: USB disconnect, device number 107 [ 1056.209139][T12339] usb usb4-port1: unable to enumerate USB device [ 1056.227939][ T44] usb 5-1: device descriptor read/64, error -71 [ 1056.338766][ T44] usb usb5-port1: attempt power cycle [ 1056.441189][T22159] ip6gre1: entered promiscuous mode [ 1056.441213][T22159] ip6gre1: entered allmulticast mode [ 1056.501281][T22160] input: syz0 as /devices/virtual/input/input176 [ 1056.677980][ T44] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1056.699277][ T44] usb 5-1: device descriptor read/8, error -71 [ 1056.742519][ T29] audit: type=1800 audit(1793153746.325:12627): pid=22165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4693" name="file0" dev="tmpfs" ino=230 res=0 errno=-22 [ 1056.938774][ T44] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1056.959549][ T44] usb 5-1: device descriptor read/8, error -71 [ 1057.033547][T22173] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4695'. [ 1057.069307][ T44] usb usb5-port1: unable to enumerate USB device [ 1057.319361][T12339] usb 1-1: new full-speed USB device number 108 using dummy_hcd [ 1057.474700][T12339] usb 1-1: New USB device found: idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1057.494237][T12339] usb 1-1: too many endpoints for config 128 interface 0 altsetting 0: 32, using maximum allowed: 30 [ 1057.494269][T12339] usb 1-1: config 128 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1057.494294][T12339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.643555][T22177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4696'. [ 1057.779863][T22179] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1058.018403][ T44] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 1058.174249][ T44] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1058.175445][ T44] usb 4-1: not running at top speed; connect to a high speed hub [ 1058.175466][ T44] usb 4-1: New USB device found: idVendor=0ac8, idProduct=0323, bcdDevice=a7.8f [ 1058.177266][ T44] usb 4-1: config index 0 descriptor too short (expected 28771, got 10) [ 1058.177281][ T44] usb 4-1: config 114 has too many interfaces: 95, using maximum allowed: 32 [ 1058.177293][ T44] usb 4-1: config 114 descriptor has 1 excess byte, ignoring [ 1058.177303][ T44] usb 4-1: config 114 has 0 interfaces, different from the descriptor's value: 95 [ 1058.211694][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.211725][ T44] usb 4-1: Product: syz [ 1058.211740][ T44] usb 4-1: Manufacturer: syz [ 1058.211755][ T44] usb 4-1: SerialNumber: syz [ 1058.256449][T22170] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4694'. [ 1058.445538][T22179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1058.455361][T22179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1058.479005][ T44] usb 4-1: USB disconnect, device number 92 [ 1058.524333][T22179] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4698'. [ 1059.099384][T22192] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1059.101822][T22192] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1059.216439][T22197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4704'. [ 1059.217548][T22194] IPVS: Scheduler module ip_vs_mh not found [ 1059.230481][T22198] IPVS: length: 4096 != 24 [ 1059.230731][T22197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4704'. [ 1059.239123][T22197] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4704'. [ 1059.239170][T22197] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4704'. [ 1059.734312][T22210] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1059.768300][T12341] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1059.918545][T12341] usb 5-1: Using ep0 maxpacket: 16 [ 1059.919277][T12341] usb 5-1: New USB device found: idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1059.923649][T12341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.956986][T12341] usb 5-1: config 0 descriptor?? [ 1059.973609][T12341] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1060.828747][T12339] usb 1-1: string descriptor 0 read error: -71 [ 1060.896233][T12353] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1060.929057][T12339] usb 1-1: selecting invalid altsetting 3 [ 1060.929075][T12339] comedi comedi5: could not set alternate setting 3 in high speed [ 1060.929090][T12339] usbduxsigma 1-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 1060.940169][T12339] usbduxsigma 1-1:128.0: probe with driver usbduxsigma failed with error -22 [ 1060.961412][T12339] usb 1-1: USB disconnect, device number 108 [ 1061.068249][T12353] usb 3-1: Using ep0 maxpacket: 16 [ 1061.069677][T12353] usb 3-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1061.073639][T12353] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1061.073672][T12353] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1061.073693][T12353] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1061.073727][T12353] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.082102][T12353] usb 3-1: config 0 descriptor?? [ 1061.453074][ T8253] IPVS: starting estimator thread 0... [ 1061.538039][T22230] IPVS: using max 51 ests per chain, 122400 per kthread [ 1061.939478][T22232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4714'. [ 1061.995999][T22232] netlink: 'syz.1.4714': attribute type 39 has an invalid length. [ 1062.543700][T12341] gspca_sonixj: reg_r err -110 [ 1062.543879][T12341] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 1062.858927][T12353] usbhid 3-1:0.0: can't add hid device: -71 [ 1062.859052][T12353] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1062.891936][T12353] usb 3-1: USB disconnect, device number 71 [ 1063.077452][T22249] IPVS: Scheduler module ip_vs_mh not found [ 1063.077517][T22252] IPVS: length: 4096 != 24 [ 1063.366895][T12353] usb 5-1: USB disconnect, device number 96 [ 1063.697956][ T44] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1063.849099][ T44] usb 2-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1063.850878][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.877655][ T44] usb 2-1: config 0 descriptor?? [ 1064.099414][ T44] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1064.397658][ T44] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 1064.397677][ T44] [drm] Initialized udl on minor 1 [ 1064.901724][T22282] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1065.025100][T22286] vlan0: entered promiscuous mode [ 1065.160540][T12348] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 1065.198640][T22291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4732'. [ 1065.212426][ T8243] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.332603][T12348] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1065.333679][T12348] usb 5-1: not running at top speed; connect to a high speed hub [ 1065.333709][T12348] usb 5-1: New USB device found: idVendor=0ac8, idProduct=0323, bcdDevice=a7.8f [ 1065.336131][T12348] usb 5-1: config index 0 descriptor too short (expected 28771, got 10) [ 1065.336156][T12348] usb 5-1: config 114 has too many interfaces: 95, using maximum allowed: 32 [ 1065.336177][T12348] usb 5-1: config 114 descriptor has 1 excess byte, ignoring [ 1065.336194][T12348] usb 5-1: config 114 has 0 interfaces, different from the descriptor's value: 95 [ 1065.354407][T12348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.354435][T12348] usb 5-1: Product: syz [ 1065.354450][T12348] usb 5-1: Manufacturer: syz [ 1065.354476][T12348] usb 5-1: SerialNumber: syz [ 1065.600993][T22282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.604291][T22282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.630819][T12348] usb 5-1: USB disconnect, device number 97 [ 1065.644579][T22282] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4728'. [ 1065.657274][ T8243] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.830548][ T8243] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.964948][T13726] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1065.982511][T13726] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1065.986104][T13726] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1066.007452][T13726] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1066.018350][T13726] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1066.100565][T22296] IPVS: Scheduler module ip_vs_mh not found [ 1066.100618][T22300] IPVS: length: 4096 != 24 [ 1066.245633][ T8243] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.577696][T22313] netlink: 'syz.3.4739': attribute type 1 has an invalid length. [ 1067.047513][ T8243] bridge_slave_1: left allmulticast mode [ 1067.047541][ T8243] bridge_slave_1: left promiscuous mode [ 1067.047934][ T8243] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.092641][ T8243] bridge_slave_0: left allmulticast mode [ 1067.092690][ T8243] bridge_slave_0: left promiscuous mode [ 1067.092949][ T8243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.145483][T22311] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4737'. [ 1067.757958][T12339] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1067.907927][T12339] usb 5-1: Using ep0 maxpacket: 8 [ 1067.908804][T12339] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1067.910263][T12339] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1067.910313][T12339] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1067.910335][T12339] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1067.910385][T12339] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1067.910407][T12339] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1067.910448][T12339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.949381][T21803] IPVS: starting estimator thread 0... [ 1068.037950][T22343] IPVS: using max 49 ests per chain, 117600 per kthread [ 1068.108099][T13726] Bluetooth: hci1: command tx timeout [ 1068.123615][T12339] usb 5-1: GET_CAPABILITIES returned 0 [ 1068.123660][T12339] usbtmc 5-1:16.0: can't read capabilities [ 1068.171185][ T8243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1068.203518][ T8243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1068.223481][ T8243] bond0 (unregistering): Released all slaves [ 1068.735684][T22350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.736229][T22350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.773705][T22350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.794824][T22350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.043726][T22350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.046554][T22350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.103648][ T5295] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1069.283223][ T8243] hsr_slave_0: left promiscuous mode [ 1069.295335][ T8243] hsr_slave_1: left promiscuous mode [ 1069.296201][ T8243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1069.296230][ T8243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1069.297504][ T8243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1069.297524][ T8243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1069.363645][ T8243] veth1_macvtap: left promiscuous mode [ 1069.363691][ T8243] veth0_macvtap: left promiscuous mode [ 1069.363961][ T8243] veth1_vlan: left promiscuous mode [ 1069.364042][ T8243] veth0_vlan: left promiscuous mode [ 1069.548714][ T44] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 1069.549195][ T44] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1069.580083][ T44] usb 2-1: USB disconnect, device number 62 [ 1070.074124][T22370] IPVS: Scheduler module ip_vs_mh not found [ 1070.074198][T22372] IPVS: length: 4096 != 24 [ 1070.188733][T13726] Bluetooth: hci1: command tx timeout [ 1070.403579][T22380] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1070.590458][T12352] usb 5-1: USB disconnect, device number 98 [ 1070.658609][T12341] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 1070.812704][T12341] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1070.813242][T12341] usb 2-1: not running at top speed; connect to a high speed hub [ 1070.813274][T12341] usb 2-1: New USB device found: idVendor=0ac8, idProduct=0323, bcdDevice=a7.8f [ 1070.814246][T12341] usb 2-1: config index 0 descriptor too short (expected 28771, got 10) [ 1070.814262][T12341] usb 2-1: config 114 has too many interfaces: 95, using maximum allowed: 32 [ 1070.814274][T12341] usb 2-1: config 114 descriptor has 1 excess byte, ignoring [ 1070.814283][T12341] usb 2-1: config 114 has 0 interfaces, different from the descriptor's value: 95 [ 1070.817509][T12341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.817524][T12341] usb 2-1: Product: syz [ 1070.817532][T12341] usb 2-1: Manufacturer: syz [ 1070.817540][T12341] usb 2-1: SerialNumber: syz [ 1071.162659][T22380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.163209][T22380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.180915][ T8243] team0 (unregistering): Port device team_slave_1 removed [ 1071.201735][T12341] usb 2-1: USB disconnect, device number 63 [ 1071.222520][T22380] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4749'. [ 1071.279362][ T8243] team0 (unregistering): Port device team_slave_0 removed [ 1071.581045][ T29] audit: type=1326 audit(1793153761.165:12628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22383 comm="syz.4.4750" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4f1c code=0x7ffc0000 [ 1071.581233][ T29] audit: type=1326 audit(1793153761.165:12629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22383 comm="syz.4.4750" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4f1c code=0x7ffc0000 [ 1071.594703][T22384] fuse: Bad value for 'group_id' [ 1071.594724][T22384] fuse: Bad value for 'group_id' [ 1071.598229][ T5295] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1071.661841][ T29] audit: type=1326 audit(1793153761.165:12630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22383 comm="syz.4.4750" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4f1c code=0x7ffc0000 [ 1071.661898][ T29] audit: type=1326 audit(1793153761.165:12631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22383 comm="syz.4.4750" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fc4f1c code=0x7ffc0000 [ 1071.661941][ T29] audit: type=1326 audit(1793153761.175:12632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22383 comm="syz.4.4750" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fc4f1c code=0x7ffc0000 [ 1071.661982][ T29] audit: type=1326 audit(1793153761.175:12633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22383 comm="syz.4.4750" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4f1c code=0x7ffc0000 [ 1071.662023][ T29] audit: type=1326 audit(1793153761.175:12634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22383 comm="syz.4.4750" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4f1c code=0x7ffc0000 [ 1071.662063][ T29] audit: type=1326 audit(1793153761.245:12635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22383 comm="syz.4.4750" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4f1c code=0x7ffc0000 [ 1071.664284][ T29] audit: type=1326 audit(1793153761.245:12636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22383 comm="syz.4.4750" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4f1c code=0x7ffc0000 [ 1071.664340][ T29] audit: type=1326 audit(1793153761.245:12637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22383 comm="syz.4.4750" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4f1c code=0x7ffc0000 [ 1071.908325][T12344] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 1072.040987][T12344] usb 5-1: device descriptor read/64, error -71 [ 1072.062375][T22403] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1072.162286][T22303] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.162347][T22303] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.162471][T22303] bridge_slave_0: entered allmulticast mode [ 1072.163422][T22303] bridge_slave_0: entered promiscuous mode [ 1072.176856][T22303] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.176966][T22303] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.177135][T22303] bridge_slave_1: entered allmulticast mode [ 1072.188138][T22303] bridge_slave_1: entered promiscuous mode [ 1072.268188][T13726] Bluetooth: hci1: command tx timeout [ 1072.278597][T12344] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 1072.296896][T22303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1072.305697][T22303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1072.349697][T12341] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1072.417960][T12344] usb 5-1: device descriptor read/64, error -71 [ 1072.428687][T22303] team0: Port device team_slave_0 added [ 1072.431523][T22303] team0: Port device team_slave_1 added [ 1072.467677][ T8243] IPVS: stop unused estimator thread 0... [ 1072.508008][T12341] usb 2-1: Using ep0 maxpacket: 16 [ 1072.514883][T12341] usb 2-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1072.522505][T12341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.522539][T12341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1072.522561][T12341] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1072.522607][T12341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.529705][T12344] usb usb5-port1: attempt power cycle [ 1072.533644][T12341] usb 2-1: config 0 descriptor?? [ 1072.609628][T22303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1072.609648][T22303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1072.609674][T22303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1072.624077][T22303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1072.624095][T22303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1072.624122][T22303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1072.890793][T12344] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 1072.904222][T22303] hsr_slave_0: entered promiscuous mode [ 1072.909631][T12344] usb 5-1: device descriptor read/8, error -71 [ 1072.926194][T22303] hsr_slave_1: entered promiscuous mode [ 1073.160375][T12344] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 1073.183659][T12344] usb 5-1: device descriptor read/8, error -71 [ 1073.322190][T12344] usb usb5-port1: unable to enumerate USB device [ 1073.363829][T15140] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1073.365653][T15140] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1073.385184][T15140] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1073.396192][T15140] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1073.402323][T15140] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1073.565217][ T8243] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.745454][T12341] usbhid 2-1:0.0: can't add hid device: -71 [ 1073.745530][T12341] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1073.748439][T12341] usb 2-1: USB disconnect, device number 64 [ 1073.847344][ T5295] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1073.984761][ T8243] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.136230][ T8243] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.272692][ T8243] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.351358][T13726] Bluetooth: hci1: command tx timeout [ 1075.103333][ T8243] bridge_slave_1: left allmulticast mode [ 1075.103369][ T8243] bridge_slave_1: left promiscuous mode [ 1075.103571][ T8243] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.114104][T22464] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1075.135996][ T8243] bridge_slave_0: left allmulticast mode [ 1075.136014][ T8243] bridge_slave_0: left promiscuous mode [ 1075.136138][ T8243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.353583][T12341] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 1075.437646][ T8243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1075.450234][ T8243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1075.451521][ T8243] bond0 (unregistering): Released all slaves [ 1075.471237][T13726] Bluetooth: hci3: command tx timeout [ 1075.506483][T12341] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1075.507122][T12341] usb 5-1: not running at top speed; connect to a high speed hub [ 1075.507152][T12341] usb 5-1: New USB device found: idVendor=0ac8, idProduct=0323, bcdDevice=a7.8f [ 1075.509363][T12341] usb 5-1: config index 0 descriptor too short (expected 28771, got 10) [ 1075.509387][T12341] usb 5-1: config 114 has too many interfaces: 95, using maximum allowed: 32 [ 1075.509405][T12341] usb 5-1: config 114 descriptor has 1 excess byte, ignoring [ 1075.509421][T12341] usb 5-1: config 114 has 0 interfaces, different from the descriptor's value: 95 [ 1075.511330][T12341] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.511352][T12341] usb 5-1: Product: syz [ 1075.511365][T12341] usb 5-1: Manufacturer: syz [ 1075.511379][T12341] usb 5-1: SerialNumber: syz [ 1075.671134][ T5295] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1075.776294][T22464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.776875][T22464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.791613][T12341] usb 5-1: USB disconnect, device number 103 [ 1075.884881][T22464] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4764'. [ 1076.233268][T22425] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.233402][T22425] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.233550][T22425] bridge_slave_0: entered allmulticast mode [ 1076.261062][T22425] bridge_slave_0: entered promiscuous mode [ 1076.314978][T22425] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.315039][T22425] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.315154][T22425] bridge_slave_1: entered allmulticast mode [ 1076.316125][T22425] bridge_slave_1: entered promiscuous mode [ 1076.412431][ T8243] hsr_slave_0: left promiscuous mode [ 1076.413703][ T8243] hsr_slave_1: left promiscuous mode [ 1076.414652][ T8243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1076.414672][ T8243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1076.419025][ T8243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1076.419047][ T8243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1076.474068][ T8243] veth1_macvtap: left promiscuous mode [ 1076.474095][ T8243] veth0_macvtap: left promiscuous mode [ 1076.474177][ T8243] veth1_vlan: left promiscuous mode [ 1076.555064][T15140] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1076.568857][T15140] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1076.569914][T15140] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1076.570973][T15140] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1076.571488][T15140] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1076.589772][T12348] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1076.748104][T12348] usb 2-1: Using ep0 maxpacket: 16 [ 1076.748927][T12348] usb 2-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1076.750017][T12348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1076.750047][T12348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1076.750070][T12348] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1076.750111][T12348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.752043][T12348] usb 2-1: config 0 descriptor?? [ 1076.980484][ T8243] team0 (unregistering): Port device team_slave_1 removed [ 1077.015430][ T8243] team0 (unregistering): Port device team_slave_0 removed [ 1077.261717][T22425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1077.439790][T22425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1077.567428][T15140] Bluetooth: hci3: command tx timeout [ 1077.671290][T22425] team0: Port device team_slave_0 added [ 1077.731016][T22425] team0: Port device team_slave_1 added [ 1077.961590][T22303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1077.984986][T22303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1077.985941][T22303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1078.021603][T22303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1078.286060][T22425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1078.286112][T22425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1078.286137][T22425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1078.287325][T22303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1078.356331][T22303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1078.357340][T22303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1078.386043][T22303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1078.388996][T22425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1078.389022][T22425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1078.389132][T22425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1078.398301][ T8243] IPVS: stop unused estimator thread 0... [ 1078.556082][T12348] usbhid 2-1:0.0: can't add hid device: -71 [ 1078.556196][T12348] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1078.568671][T12348] usb 2-1: USB disconnect, device number 65 [ 1078.668358][T15140] Bluetooth: hci0: command tx timeout [ 1078.726553][T22425] hsr_slave_0: entered promiscuous mode [ 1078.727748][T22425] hsr_slave_1: entered promiscuous mode [ 1078.742746][T22425] debugfs: 'hsr0' already exists in 'hsr' [ 1078.742773][T22425] Cannot create hsr debugfs directory [ 1078.894176][ T8243] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.038022][T12348] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1079.105634][ T8243] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.210427][T12348] usb 5-1: Using ep0 maxpacket: 16 [ 1079.227024][T12348] usb 5-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1079.229151][T12348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1079.229183][T12348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1079.229205][T12348] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1079.229244][T12348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.234233][T12348] usb 5-1: config 0 descriptor?? [ 1079.482192][ T8243] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.546720][ T5295] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1079.630721][T15140] Bluetooth: hci3: command tx timeout [ 1079.716091][T22524] fuse: Unknown parameter 'allow_othe$' [ 1079.729987][ T8243] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.189038][T22303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1080.671408][T12348] usbhid 5-1:0.0: can't add hid device: -71 [ 1080.671491][T12348] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1080.681000][T12348] usb 5-1: USB disconnect, device number 104 [ 1080.748104][T15140] Bluetooth: hci0: command tx timeout [ 1080.807778][T22303] 8021q: adding VLAN 0 to HW filter on device team0 [ 1080.957228][ T1488] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.957340][ T1488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1081.051122][T22481] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.051211][T22481] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.051356][T22481] bridge_slave_0: entered allmulticast mode [ 1081.055585][T22481] bridge_slave_0: entered promiscuous mode [ 1081.063763][ T8253] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.063861][ T8253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1081.067325][T22481] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.067437][T22481] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.069560][T22481] bridge_slave_1: entered allmulticast mode [ 1081.071650][T22481] bridge_slave_1: entered promiscuous mode [ 1081.107969][ T5701] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1081.135520][T22481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1081.176478][T22481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1081.226500][ T8243] bridge_slave_1: left allmulticast mode [ 1081.226520][ T8243] bridge_slave_1: left promiscuous mode [ 1081.226669][ T8243] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.249631][ T8243] bridge_slave_0: left allmulticast mode [ 1081.249650][ T8243] bridge_slave_0: left promiscuous mode [ 1081.249779][ T8243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.278971][ T5701] usb 2-1: New USB device found: idVendor=0b48, idProduct=1008, bcdDevice=1.00 [ 1081.281400][ T5701] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1081.281449][ T5701] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1081.281490][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.509235][ T5701] dvbdev: DVB: registering new adapter (DEC2000-t) [ 1081.533529][ T5701] usb 2-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 1081.582610][ T8243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1081.585291][ T8243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1081.586701][ T8243] bond0 (unregistering): Released all slaves [ 1081.599031][ T8243] bond1 (unregistering): Released all slaves [ 1081.714211][T15140] Bluetooth: hci3: command tx timeout [ 1081.715668][T22549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1081.733564][T22549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1081.751076][T22481] team0: Port device team_slave_0 added [ 1081.771823][T22481] team0: Port device team_slave_1 added [ 1081.924419][T22481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1081.924438][T22481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1081.924464][T22481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1081.926552][T22481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1081.926567][T22481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1081.926592][T22481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1082.055284][T22481] hsr_slave_0: entered promiscuous mode [ 1082.064468][T22481] hsr_slave_1: entered promiscuous mode [ 1082.065223][T22481] debugfs: 'hsr0' already exists in 'hsr' [ 1082.065244][T22481] Cannot create hsr debugfs directory [ 1082.158654][T12348] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1082.275637][ T5701] ttusb_dec_send_command: command bulk message failed: error -71 [ 1082.293976][ T5701] usb 2-1: USB disconnect, device number 66 [ 1082.309107][T12348] usb 5-1: Using ep0 maxpacket: 16 [ 1082.310239][T12348] usb 5-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 1082.312615][T12348] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.312661][T12348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1082.312691][T12348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1082.312730][T12348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1082.312751][T12348] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1082.312799][T12348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.411400][T12348] usb 5-1: config 0 descriptor?? [ 1082.552136][T12348] rc_core: IR keymap rc-hauppauge not found [ 1082.552156][T12348] Registered IR keymap rc-empty [ 1082.552525][T12348] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1082.571779][T12348] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1082.592009][T12348] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1082.595627][T12348] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input178 [ 1082.624206][ T8243] hsr_slave_0: left promiscuous mode [ 1082.625738][ T8243] hsr_slave_1: left promiscuous mode [ 1082.626777][T12348] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1082.629988][ T8243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1082.630010][ T8243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1082.635116][ T8243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1082.635135][ T8243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1082.656571][ T8243] veth1_macvtap: left promiscuous mode [ 1082.656606][ T8243] veth0_macvtap: left promiscuous mode [ 1082.656911][ T8243] veth1_vlan: left promiscuous mode [ 1082.656979][ T8243] veth0_vlan: left promiscuous mode [ 1082.671569][T12348] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1082.691828][T12348] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1082.710831][T12348] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1082.727988][T12348] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1082.748090][T12348] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1082.773315][T12348] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1082.787998][T12348] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1082.807975][T12348] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1082.833004][T15140] Bluetooth: hci0: command tx timeout [ 1082.833505][T12348] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1082.852344][T12348] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1082.871669][T12348] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1082.871719][T12348] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1082.909294][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 1082.909315][ T29] audit: type=1326 audit(1793153772.485:12670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22555 comm="syz.4.4778" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4f1c code=0x7ffc0000 [ 1082.909358][ T29] audit: type=1326 audit(1793153772.495:12671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22555 comm="syz.4.4778" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4f1c code=0x7ffc0000 [ 1082.914268][ T29] audit: type=1326 audit(1793153772.495:12672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22555 comm="syz.4.4778" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf7fc4f1c code=0x7ffc0000 [ 1082.914401][ T29] audit: type=1326 audit(1793153772.495:12673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22555 comm="syz.4.4778" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4f1c code=0x7ffc0000 [ 1082.914862][ T29] audit: type=1326 audit(1793153772.495:12674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22555 comm="syz.4.4778" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=325 compat=1 ip=0xf7fc4f1c code=0x7ffc0000 [ 1082.914931][ T29] audit: type=1326 audit(1793153772.495:12675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22555 comm="syz.4.4778" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4f1c code=0x7ffc0000 [ 1082.916940][ T29] audit: type=1326 audit(1793153772.495:12676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22555 comm="syz.4.4778" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc4f1c code=0x7ffc0000 [ 1082.917135][ T29] audit: type=1326 audit(1793153772.495:12677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22555 comm="syz.4.4778" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4f1c code=0x7ffc0000 [ 1082.917286][ T29] audit: type=1326 audit(1793153772.495:12678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22555 comm="syz.4.4778" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4f1c code=0x7ffc0000 [ 1082.918439][ T29] audit: type=1326 audit(1793153772.495:12679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22555 comm="syz.4.4778" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fc4f1c code=0x7ffc0000 [ 1083.520876][ T8243] team0 (unregistering): Port device team_slave_1 removed [ 1083.547748][ T8243] team0 (unregistering): Port device team_slave_0 removed [ 1083.712598][ T5295] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1083.770657][T12352] usb 5-1: USB disconnect, device number 105 [ 1084.045865][T22303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1084.093100][T22425] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1084.123965][T22425] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1084.125270][T22425] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1084.160773][T22425] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1084.187576][T22425] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1084.208463][T22425] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1084.209170][T22425] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1084.237092][T22425] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1084.727250][T22303] veth0_vlan: entered promiscuous mode [ 1084.778014][T12348] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1084.912437][T15140] Bluetooth: hci0: command tx timeout [ 1084.928564][T12348] usb 5-1: Using ep0 maxpacket: 16 [ 1084.929245][T12348] usb 5-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1084.930279][T12348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1084.930305][T12348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1084.930327][T12348] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1084.930374][T12348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.937443][T12348] usb 5-1: config 0 descriptor?? [ 1085.013921][T22303] veth1_vlan: entered promiscuous mode [ 1085.353208][T22303] veth0_macvtap: entered promiscuous mode [ 1085.410635][T22303] veth1_macvtap: entered promiscuous mode [ 1085.504324][T22303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1085.543607][T22425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1085.571258][T22303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1085.629817][ T8250] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.630001][ T8250] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.630125][ T8250] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.630390][ T8250] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.695738][T22425] 8021q: adding VLAN 0 to HW filter on device team0 [ 1085.797217][ T8253] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.797327][ T8253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1085.867262][ T8253] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.867356][ T8253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1086.477611][ T8253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.477636][ T8253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.581189][T12348] usbhid 5-1:0.0: can't add hid device: -71 [ 1086.581300][T12348] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1086.605722][T12348] usb 5-1: USB disconnect, device number 106 [ 1086.743205][ T8253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.743228][ T8253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.758008][T22481] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1086.782499][T22481] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1086.785191][T22481] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1086.813607][T22481] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1086.831413][T22481] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1086.850509][T22481] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1086.893247][T22481] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1086.912366][T22481] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1087.035354][T22425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1087.097985][T12344] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1087.248887][T12344] usb 2-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1087.249895][T12344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.256497][T12344] usb 2-1: config 0 descriptor?? [ 1087.301285][T22425] veth0_vlan: entered promiscuous mode [ 1087.343758][T22425] veth1_vlan: entered promiscuous mode [ 1087.407734][T22481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1087.497550][T22481] 8021q: adding VLAN 0 to HW filter on device team0 [ 1087.505017][T12344] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1087.560716][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.560821][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1087.593366][T22425] veth0_macvtap: entered promiscuous mode [ 1087.647542][T22425] veth1_macvtap: entered promiscuous mode [ 1087.682026][T21803] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.682116][T21803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1087.727152][T12344] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 1087.727179][T12344] [drm] Initialized udl on minor 1 [ 1087.882201][T22425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1087.924226][T22425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1087.998739][T22481] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1088.318068][ T8250] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.367675][T22481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1088.702555][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1088.702577][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1088.800105][ T42] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.800952][ T42] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.801288][ T42] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.971319][T20419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1088.971342][T20419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.018585][T12348] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1089.170164][T12348] usb 1-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1089.170780][T12348] usb 1-1: config 0 has no interfaces? [ 1089.177533][T12348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.177558][T12348] usb 1-1: Product: syz [ 1089.177573][T12348] usb 1-1: Manufacturer: syz [ 1089.177587][T12348] usb 1-1: SerialNumber: syz [ 1089.241588][T12348] usb 1-1: config 0 descriptor?? [ 1089.368652][T22687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1089.369114][T22687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1089.396165][T22687] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4792'. [ 1089.422190][T22689] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4792'. [ 1089.601933][T22481] veth0_vlan: entered promiscuous mode [ 1089.727837][T22481] veth1_vlan: entered promiscuous mode [ 1089.856977][T22704] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4794'. [ 1089.876278][T22704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4794'. [ 1089.913414][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1089.913439][ T29] audit: type=1326 audit(1793153779.495:12682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22703 comm="syz.3.4794" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742ef1c code=0x7ffc0000 [ 1089.915628][ T29] audit: type=1326 audit(1793153779.495:12683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22703 comm="syz.3.4794" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742ef1c code=0x7ffc0000 [ 1089.916659][ T29] audit: type=1326 audit(1793153779.495:12684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22703 comm="syz.3.4794" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf742ef1c code=0x7ffc0000 [ 1089.916927][ T29] audit: type=1326 audit(1793153779.495:12685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22703 comm="syz.3.4794" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742ef1c code=0x7ffc0000 [ 1089.917680][ T29] audit: type=1326 audit(1793153779.495:12686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22703 comm="syz.3.4794" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf742ef1c code=0x7ffc0000 [ 1089.949581][ T29] audit: type=1326 audit(1793153779.535:12687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22703 comm="syz.3.4794" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742ef1c code=0x7ffc0000 [ 1089.949615][ T29] audit: type=1326 audit(1793153779.535:12688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22703 comm="syz.3.4794" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742ef1c code=0x7ffc0000 [ 1090.004009][ T29] audit: type=1326 audit(1793153779.585:12689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22703 comm="syz.3.4794" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf742ef1c code=0x7ffc0000 [ 1090.004045][ T29] audit: type=1326 audit(1793153779.585:12690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22703 comm="syz.3.4794" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742ef1c code=0x7ffc0000 [ 1090.004084][ T29] audit: type=1326 audit(1793153779.585:12691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22703 comm="syz.3.4794" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742ef1c code=0x7ffc0000 [ 1090.270619][T22674] veth0_vlan: left promiscuous mode [ 1090.312088][T12348] usb 1-1: USB disconnect, device number 109 [ 1090.590820][ T42] bridge_slave_1: left allmulticast mode [ 1090.590871][ T42] bridge_slave_1: left promiscuous mode [ 1090.591019][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.641179][ T42] bridge_slave_0: left allmulticast mode [ 1090.641201][ T42] bridge_slave_0: left promiscuous mode [ 1090.641397][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.111086][T20419] IPVS: starting estimator thread 0... [ 1091.208047][T22720] IPVS: using max 50 ests per chain, 120000 per kthread [ 1092.355482][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1092.403813][T13726] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1092.422481][T13726] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1092.426290][T13726] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1092.455748][T13726] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1092.456235][T13726] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1092.506332][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1092.536685][ T42] bond0 (unregistering): Released all slaves [ 1092.609325][T22481] veth0_macvtap: entered promiscuous mode [ 1092.695569][T22481] veth1_macvtap: entered promiscuous mode [ 1092.767508][T12344] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 1092.780275][T12344] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1092.858589][T22481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1092.950673][T22481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1093.018217][T20419] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.018273][T20419] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.018309][T20419] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.018342][T20419] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.931124][ T42] hsr_slave_0: left promiscuous mode [ 1093.932018][ T42] hsr_slave_1: left promiscuous mode [ 1093.932706][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1093.932721][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1093.937535][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1093.937549][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1094.019476][ T42] veth1_macvtap: left promiscuous mode [ 1094.019519][ T42] veth0_macvtap: left promiscuous mode [ 1094.019647][ T42] veth1_vlan: left promiscuous mode [ 1094.019711][ T42] veth0_vlan: left promiscuous mode [ 1094.522530][T15140] Bluetooth: hci2: command tx timeout [ 1095.023687][ T42] team0 (unregistering): Port device team_slave_1 removed [ 1095.099536][ T42] team0 (unregistering): Port device team_slave_0 removed [ 1095.342718][T12352] usb 2-1: USB disconnect, device number 67 [ 1095.756813][ T1488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1095.756837][ T1488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1095.996495][ T8253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1095.996518][ T8253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.588868][T15140] Bluetooth: hci2: command tx timeout [ 1096.906320][T22783] FAULT_INJECTION: forcing a failure. [ 1096.906320][T22783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1096.906358][T22783] CPU: 0 UID: 0 PID: 22783 Comm: syz.0.4807 Tainted: G L syzkaller #0 PREEMPT(full) [ 1096.906387][T22783] Tainted: [L]=SOFTLOCKUP [ 1096.906396][T22783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1096.906409][T22783] Call Trace: [ 1096.906418][T22783] [ 1096.906427][T22783] dump_stack_lvl+0xe8/0x150 [ 1096.906463][T22783] should_fail_ex+0x410/0x560 [ 1096.906496][T22783] _copy_from_user+0x2d/0xb0 [ 1096.906525][T22783] __se_sys_epoll_ctl+0xbd/0x230 [ 1096.906555][T22783] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 1096.906585][T22783] ? __might_fault+0xaf/0x130 [ 1096.906619][T22783] __do_fast_syscall_32+0x28b/0x6c0 [ 1096.906646][T22783] ? do_fast_syscall_32+0x33/0x70 [ 1096.906669][T22783] ? asm_int80_emulation+0x1a/0x20 [ 1096.906689][T22783] ? do_int80_emulation+0x299/0x500 [ 1096.906712][T22783] ? trace_irq_disable+0x3b/0x140 [ 1096.906744][T22783] do_fast_syscall_32+0x33/0x70 [ 1096.906769][T22783] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1096.906793][T22783] RIP: 0023:0xf7f04f1c [ 1096.906812][T22783] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1096.906830][T22783] RSP: 002b:00000000f53b650c EFLAGS: 00000206 ORIG_RAX: 00000000000000ff [ 1096.906853][T22783] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000001 [ 1096.906866][T22783] RDX: 0000000000000003 RSI: 0000000080000300 RDI: 0000000000000000 [ 1096.906879][T22783] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1096.906892][T22783] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1096.906904][T22783] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1096.906933][T22783] [ 1097.071763][T17389] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1097.256314][T17389] usb 3-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00 [ 1097.275687][T17389] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1097.275737][T17389] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.593811][T17389] qmi_wwan 3-1:1.0: cdc-wdm0: USB WDM device [ 1097.657711][T17389] wwan wwan0: port wwan0qmi0 attached [ 1097.727751][T22794] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1097.791383][ C0] qmi_wwan 3-1:1.0: nonzero urb status received: -71 [ 1097.791476][ C0] qmi_wwan 3-1:1.0: wdm_int_callback - 0 bytes [ 1097.791669][ C0] qmi_wwan 3-1:1.0: nonzero urb status received: -71 [ 1097.791681][ C0] qmi_wwan 3-1:1.0: wdm_int_callback - 0 bytes [ 1097.791868][ C0] qmi_wwan 3-1:1.0: nonzero urb status received: -71 [ 1097.791878][ C0] qmi_wwan 3-1:1.0: wdm_int_callback - 0 bytes [ 1097.792074][ C0] qmi_wwan 3-1:1.0: nonzero urb status received: -71 [ 1097.792099][ C0] qmi_wwan 3-1:1.0: wdm_int_callback - 0 bytes [ 1097.792285][ C0] qmi_wwan 3-1:1.0: nonzero urb status received: -71 [ 1097.792295][ C0] qmi_wwan 3-1:1.0: wdm_int_callback - 0 bytes [ 1097.792470][ C0] qmi_wwan 3-1:1.0: nonzero urb status received: -71 [ 1097.792480][ C0] qmi_wwan 3-1:1.0: wdm_int_callback - 0 bytes [ 1097.792646][ C0] qmi_wwan 3-1:1.0: nonzero urb status received: -71 [ 1097.792656][ C0] qmi_wwan 3-1:1.0: wdm_int_callback - 0 bytes [ 1097.792822][ C0] qmi_wwan 3-1:1.0: nonzero urb status received: -71 [ 1097.792833][ C0] qmi_wwan 3-1:1.0: wdm_int_callback - 0 bytes [ 1097.793005][ C0] qmi_wwan 3-1:1.0: nonzero urb status received: -71 [ 1097.793015][ C0] qmi_wwan 3-1:1.0: wdm_int_callback - 0 bytes [ 1097.793203][ C0] qmi_wwan 3-1:1.0: nonzero urb status received: -71 [ 1097.793213][ C0] qmi_wwan 3-1:1.0: wdm_int_callback - 0 bytes [ 1098.022465][T12352] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 1098.206046][T12352] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1098.207177][T12352] usb 2-1: not running at top speed; connect to a high speed hub [ 1098.207210][T12352] usb 2-1: New USB device found: idVendor=0ac8, idProduct=0323, bcdDevice=a7.8f [ 1098.218488][T12352] usb 2-1: config index 0 descriptor too short (expected 28771, got 10) [ 1098.218516][T12352] usb 2-1: config 114 has too many interfaces: 95, using maximum allowed: 32 [ 1098.218535][T12352] usb 2-1: config 114 descriptor has 1 excess byte, ignoring [ 1098.218553][T12352] usb 2-1: config 114 has 0 interfaces, different from the descriptor's value: 95 [ 1098.229969][T12352] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.229995][T12352] usb 2-1: Product: syz [ 1098.230009][T12352] usb 2-1: Manufacturer: syz [ 1098.230023][T12352] usb 2-1: SerialNumber: syz [ 1098.322156][T17389] qmi_wwan 3-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, 9a:61:3c:75:9e:46 [ 1098.327596][T17389] usb 3-1: USB disconnect, device number 72 [ 1098.327702][ C0] qmi_wwan 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1098.390737][T17389] qmi_wwan 3-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device [ 1098.467038][T22796] netlink: 'syz.0.4811': attribute type 10 has an invalid length. [ 1098.539751][T12341] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1098.577107][T22794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.593526][T22794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.622494][T12352] usb 2-1: USB disconnect, device number 68 [ 1098.668480][T15140] Bluetooth: hci2: command tx timeout [ 1098.704191][T22794] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4810'. [ 1098.719004][T12341] usb 4-1: Using ep0 maxpacket: 16 [ 1098.738727][T12341] usb 4-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1098.743161][T12341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1098.743191][T12341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1098.743211][T12341] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1098.743252][T12341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.806538][T12341] usb 4-1: config 0 descriptor?? [ 1098.872722][T22732] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.878016][T22732] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.878206][T22732] bridge_slave_0: entered allmulticast mode [ 1098.880239][T17389] wwan wwan0: port wwan0qmi0 disconnected [ 1098.932275][T22732] bridge_slave_0: entered promiscuous mode [ 1098.946879][T22732] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.947044][T22732] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.947200][T22732] bridge_slave_1: entered allmulticast mode [ 1098.972363][T22732] bridge_slave_1: entered promiscuous mode [ 1099.301995][T22732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1099.332439][T22732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1099.540741][T22732] team0: Port device team_slave_0 added [ 1099.547781][T22798] nvme nvme0: failed to connect socket: -512 [ 1099.580555][T22732] team0: Port device team_slave_1 added [ 1100.004574][T22732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1100.004588][T22732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1100.004613][T22732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1100.055840][T22732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1100.055859][T22732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1100.055886][T22732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1100.351789][T22732] hsr_slave_0: entered promiscuous mode [ 1100.360695][T22732] hsr_slave_1: entered promiscuous mode [ 1100.373436][T22732] debugfs: 'hsr0' already exists in 'hsr' [ 1100.373473][T22732] Cannot create hsr debugfs directory [ 1100.413546][T12341] usbhid 4-1:0.0: can't add hid device: -71 [ 1100.413664][T12341] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1100.436339][T12341] usb 4-1: USB disconnect, device number 93 [ 1100.506568][T22832] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4815'. [ 1100.709249][T17387] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1100.748177][T15140] Bluetooth: hci2: command tx timeout [ 1100.859444][T17387] usb 2-1: Using ep0 maxpacket: 16 [ 1100.860631][T17387] usb 2-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1100.882536][T17387] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1100.882571][T17387] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1100.882592][T17387] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1100.882906][T17387] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.934568][T17387] usb 2-1: config 0 descriptor?? [ 1101.171036][T12339] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1101.321243][T12339] usb 4-1: Using ep0 maxpacket: 16 [ 1101.323965][T12339] usb 4-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1101.326065][T12339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.326101][T12339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1101.326124][T12339] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1101.326155][T12339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.366221][T12339] usb 4-1: config 0 descriptor?? [ 1101.403793][T22732] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1101.431681][T22732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1101.437435][T22732] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1101.469657][T22732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1101.473089][T22732] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1101.521542][T22732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1101.542495][T22732] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1101.566563][T22732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1101.975378][T22732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1102.065683][T22732] 8021q: adding VLAN 0 to HW filter on device team0 [ 1102.096994][ T8253] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.097078][ T8253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1102.155884][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.155999][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1102.599792][T22732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1102.636716][T17387] usbhid 2-1:0.0: can't add hid device: -71 [ 1102.636839][T17387] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1102.667484][T17387] usb 2-1: USB disconnect, device number 69 [ 1102.802526][T22732] veth0_vlan: entered promiscuous mode [ 1102.827473][T22732] veth1_vlan: entered promiscuous mode [ 1102.901558][T22732] veth0_macvtap: entered promiscuous mode [ 1102.924442][T22732] veth1_macvtap: entered promiscuous mode [ 1102.982977][T22732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1103.037638][T12339] usbhid 4-1:0.0: can't add hid device: -71 [ 1103.037712][T12339] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1103.063553][T22732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1103.081907][T12339] usb 4-1: USB disconnect, device number 94 [ 1103.213672][ T8253] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.213707][ T8253] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.213727][ T8253] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.218342][ T8253] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.448136][T22862] kvm: debugfs: duplicate directory 22862-9 [ 1103.463418][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1103.463433][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.532935][ T42] IPVS: starting estimator thread 0... [ 1103.539025][T12339] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1103.576806][ T8253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1103.576822][ T8253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.622388][T22863] IPVS: using max 51 ests per chain, 122400 per kthread [ 1103.691123][T12339] usb 2-1: New USB device found: idVendor=10c4, idProduct=ea90, bcdDevice=0.80 [ 1103.692419][T12339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1103.692438][T12339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1103.692460][T12339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.700553][T12339] usb 2-1: config 0 descriptor?? [ 1104.164369][T12339] hid_parser_main: 26 callbacks suppressed [ 1104.164388][T12339] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x0 [ 1104.164408][T12339] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x0 [ 1104.164424][T12339] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x0 [ 1104.164439][T12339] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x0 [ 1104.164454][T12339] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x0 [ 1104.164468][T12339] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x0 [ 1104.164483][T12339] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x0 [ 1104.173485][T12339] cp2112 0003:10C4:EA90.0027: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1104.277980][T12351] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1104.370706][T12339] cp2112 0003:10C4:EA90.0027: Part Number: 0x82 Device Version: 0xFE [ 1104.434241][T12351] usb 4-1: New USB device found: idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1104.457649][T12351] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1104.457678][T12351] usb 4-1: Product: syz [ 1104.458474][T12351] usb 4-1: SerialNumber: syz [ 1104.485628][T12351] usb 4-1: config 0 descriptor?? [ 1104.501295][T12351] hso 4-1:0.0: Not our interface [ 1104.749123][T12348] usb 4-1: USB disconnect, device number 95 [ 1104.894138][T22872] netlink: 'syz.4.4798': attribute type 1 has an invalid length. [ 1104.932697][T22872] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4798'. [ 1105.299102][T22888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.300828][T22888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.308176][T22886] FAULT_INJECTION: forcing a failure. [ 1105.308176][T22886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1105.308209][T22886] CPU: 0 UID: 0 PID: 22886 Comm: syz.4.4827 Tainted: G L syzkaller #0 PREEMPT(full) [ 1105.308237][T22886] Tainted: [L]=SOFTLOCKUP [ 1105.308246][T22886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1105.308257][T22886] Call Trace: [ 1105.308266][T22886] [ 1105.308274][T22886] dump_stack_lvl+0xe8/0x150 [ 1105.308309][T22886] should_fail_ex+0x410/0x560 [ 1105.308342][T22886] _copy_to_user+0x31/0xb0 [ 1105.308372][T22886] simple_read_from_buffer+0xe1/0x170 [ 1105.308399][T22886] proc_fail_nth_read+0x1bb/0x230 [ 1105.308427][T22886] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1105.308455][T22886] ? rw_verify_area+0x24a/0x4c0 [ 1105.308477][T22886] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1105.308501][T22886] vfs_read+0x213/0xa80 [ 1105.308535][T22886] ? __pfx___mutex_lock+0x10/0x10 [ 1105.308557][T22886] ? __pfx_vfs_read+0x10/0x10 [ 1105.308579][T22886] ? __fget_files+0x2a/0x420 [ 1105.308598][T22886] ? __fget_files+0x3a2/0x420 [ 1105.308615][T22886] ? __fget_files+0x2a/0x420 [ 1105.308635][T22886] ? fdget+0x1ac/0x250 [ 1105.308658][T22886] ksys_read+0x150/0x270 [ 1105.308679][T22886] ? __pfx_ksys_read+0x10/0x10 [ 1105.308701][T22886] ? asm_int80_emulation+0x1a/0x20 [ 1105.308724][T22886] do_int80_emulation+0x198/0x500 [ 1105.308744][T22886] ? trace_irq_disable+0x3b/0x140 [ 1105.308766][T22886] ? asm_int80_emulation+0x1a/0x20 [ 1105.308781][T22886] ? clear_bhb_loop+0x70/0xc0 [ 1105.308798][T22886] ? clear_bhb_loop+0x70/0xc0 [ 1105.308817][T22886] asm_int80_emulation+0x1a/0x20 [ 1105.308836][T22886] RIP: 0023:0xf71b77ab [ 1105.308854][T22886] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1105.308870][T22886] RSP: 002b:00000000f54764bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1105.308890][T22886] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f54765d0 [ 1105.308904][T22886] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1105.308917][T22886] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1105.308928][T22886] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1105.308939][T22886] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1105.308967][T22886] [ 1105.488073][T12351] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1105.690833][T12351] usb 1-1: Using ep0 maxpacket: 16 [ 1105.691764][T12351] usb 1-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1105.716728][T12351] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1105.716764][T12351] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1105.716786][T12351] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1105.716852][T12351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.782797][T12351] usb 1-1: config 0 descriptor?? [ 1106.477967][T17387] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1106.632768][T17387] usb 5-1: New USB device found: idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1106.671109][T17387] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1106.671130][T17387] usb 5-1: Product: syz [ 1106.671138][T17387] usb 5-1: SerialNumber: syz [ 1106.705970][T17387] usb 5-1: config 0 descriptor?? [ 1106.724224][T17387] hso 5-1:0.0: Not our interface [ 1106.920147][T12339] cp2112 0003:10C4:EA90.0027: error requesting SMBus config [ 1106.925195][T12339] cp2112 0003:10C4:EA90.0027: probe with driver cp2112 failed with error -71 [ 1106.974386][T12339] usb 2-1: USB disconnect, device number 70 [ 1107.071912][T12355] usb 5-1: USB disconnect, device number 107 [ 1107.296910][T12351] usbhid 1-1:0.0: can't add hid device: -71 [ 1107.297005][T12351] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1107.327184][T12351] usb 1-1: USB disconnect, device number 110 [ 1107.807280][ T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.153565][T22917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4838'. [ 1108.206698][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 1108.206720][ T29] audit: type=1326 audit(1793153797.775:12704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22911 comm="syz.4.4838" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3f1c code=0x7ffc0000 [ 1108.206778][ T29] audit: type=1326 audit(1793153797.775:12705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22911 comm="syz.4.4838" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3f1c code=0x7ffc0000 [ 1108.229477][ T29] audit: type=1326 audit(1793153797.815:12706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22911 comm="syz.4.4838" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc3f1c code=0x7ffc0000 [ 1108.230076][ T29] audit: type=1326 audit(1793153797.815:12707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22911 comm="syz.4.4838" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3f1c code=0x7ffc0000 [ 1108.230534][ T29] audit: type=1326 audit(1793153797.815:12708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22911 comm="syz.4.4838" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3f1c code=0x7ffc0000 [ 1108.312831][ T29] audit: type=1326 audit(1793153797.895:12709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22911 comm="syz.4.4838" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf7fc3f1c code=0x7ffc0000 [ 1108.382861][ T29] audit: type=1326 audit(1793153797.965:12710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22911 comm="syz.4.4838" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3f1c code=0x7ffc0000 [ 1108.382965][ T29] audit: type=1326 audit(1793153797.965:12711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22911 comm="syz.4.4838" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3f1c code=0x7ffc0000 [ 1108.458582][ T29] audit: type=1326 audit(1793153798.015:12712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22911 comm="syz.4.4838" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=49 compat=1 ip=0xf7fc3f1c code=0x7ffc0000 [ 1108.458643][ T29] audit: type=1326 audit(1793153798.015:12713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22911 comm="syz.4.4838" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3f1c code=0x7ffc0000 [ 1108.526765][T22917] sctp: [Deprecated]: syz.4.4838 (pid 22917) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1108.526765][T22917] Use struct sctp_sack_info instead [ 1108.733068][T13726] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1108.747580][T13726] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1108.757284][T13726] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1108.774146][T13726] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1108.774687][T13726] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1109.367369][ T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.640782][T12339] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1109.718036][T12348] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1109.786255][T22948] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1109.817000][T12339] usb 4-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1109.818802][T12339] usb 4-1: config 0 has no interfaces? [ 1109.857564][T12339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.857593][T12339] usb 4-1: Product: syz [ 1109.857607][T12339] usb 4-1: Manufacturer: syz [ 1109.857621][T12339] usb 4-1: SerialNumber: syz [ 1109.876346][T12339] usb 4-1: config 0 descriptor?? [ 1109.899510][T12348] usb 2-1: Using ep0 maxpacket: 16 [ 1109.904967][T12348] usb 2-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1109.924940][T12348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1109.924970][T12348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1109.925008][T12348] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1109.925044][T12348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.976627][T12348] usb 2-1: config 0 descriptor?? [ 1110.048869][T12341] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 1110.107418][ T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.201983][T12341] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1110.203107][T12341] usb 5-1: not running at top speed; connect to a high speed hub [ 1110.203141][T12341] usb 5-1: New USB device found: idVendor=0ac8, idProduct=0323, bcdDevice=a7.8f [ 1110.228873][T12341] usb 5-1: config index 0 descriptor too short (expected 28771, got 10) [ 1110.228894][T12341] usb 5-1: config 114 has too many interfaces: 95, using maximum allowed: 32 [ 1110.228905][T12341] usb 5-1: config 114 descriptor has 1 excess byte, ignoring [ 1110.228916][T12341] usb 5-1: config 114 has 0 interfaces, different from the descriptor's value: 95 [ 1110.283453][T12341] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.283483][T12341] usb 5-1: Product: syz [ 1110.283515][T12341] usb 5-1: Manufacturer: syz [ 1110.283523][T12341] usb 5-1: SerialNumber: syz [ 1110.520639][ T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.564634][T22948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1110.565766][T22948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1110.687064][T12341] usb 5-1: USB disconnect, device number 108 [ 1110.908039][T13726] Bluetooth: hci0: command tx timeout [ 1111.246925][T12351] usb 4-1: USB disconnect, device number 96 [ 1111.348313][T12355] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1111.512872][T12355] usb 1-1: Using ep0 maxpacket: 16 [ 1111.524093][T12355] usb 1-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1111.534295][T12355] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1111.534330][T12355] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1111.534351][T12355] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1111.534392][T12355] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.650397][T12355] usb 1-1: config 0 descriptor?? [ 1112.191940][T12348] usbhid 2-1:0.0: can't add hid device: -71 [ 1112.192037][T12348] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1112.226262][T12348] usb 2-1: USB disconnect, device number 71 [ 1112.998901][T13726] Bluetooth: hci0: command tx timeout [ 1113.174766][T12355] usbhid 1-1:0.0: can't add hid device: -71 [ 1113.174850][T12355] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1113.199822][T12355] usb 1-1: USB disconnect, device number 111 [ 1113.625130][ T42] bridge_slave_1: left allmulticast mode [ 1113.625151][ T42] bridge_slave_1: left promiscuous mode [ 1113.625299][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.670885][ T42] bridge_slave_0: left allmulticast mode [ 1113.670906][ T42] bridge_slave_0: left promiscuous mode [ 1113.671069][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.067728][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1115.080614][T13726] Bluetooth: hci0: command tx timeout [ 1115.179165][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1115.206658][ T42] bond0 (unregistering): Released all slaves [ 1115.496870][T22927] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.497108][T22927] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.497271][T22927] bridge_slave_0: entered allmulticast mode [ 1115.498564][T22927] bridge_slave_0: entered promiscuous mode [ 1115.540312][T22927] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.540414][T22927] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.540536][T22927] bridge_slave_1: entered allmulticast mode [ 1115.541500][T22927] bridge_slave_1: entered promiscuous mode [ 1115.953443][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.953504][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.061684][ T5295] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1116.079453][T22927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1116.099977][T22927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1116.226319][T23019] tipc: Enabling of bearer rejected, failed to enable media [ 1116.226610][T23015] netlink: 'syz.4.4858': attribute type 10 has an invalid length. [ 1116.309160][T22927] team0: Port device team_slave_0 added [ 1116.353843][T23019] pim6reg: entered allmulticast mode [ 1116.564670][T22927] team0: Port device team_slave_1 added [ 1116.928000][ T42] hsr_slave_0: left promiscuous mode [ 1116.941435][ T42] hsr_slave_1: left promiscuous mode [ 1116.959622][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1116.959649][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1116.965064][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1116.965080][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1117.047631][ T42] veth1_macvtap: left promiscuous mode [ 1117.047659][ T42] veth0_macvtap: left promiscuous mode [ 1117.047720][ T42] veth1_vlan: left promiscuous mode [ 1117.047761][ T42] veth0_vlan: left promiscuous mode [ 1117.148099][T13726] Bluetooth: hci0: command tx timeout [ 1117.459883][T23016] nvme_tcp: queue 0: failed to receive icresp, error -104 [ 1117.980843][ T42] team0 (unregistering): Port device team_slave_1 removed [ 1118.011127][ T42] team0 (unregistering): Port device team_slave_0 removed [ 1118.395899][T22927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1118.395919][T22927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1118.395946][T22927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1118.397601][T22927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1118.397612][T22927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1118.397627][T22927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1118.602957][ T5295] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1118.714863][T22927] hsr_slave_0: entered promiscuous mode [ 1118.725089][T22927] hsr_slave_1: entered promiscuous mode [ 1118.725847][T22927] debugfs: 'hsr0' already exists in 'hsr' [ 1118.726047][T22927] Cannot create hsr debugfs directory [ 1118.823853][T23045] syz_tun: entered allmulticast mode [ 1119.770637][T23065] netlink: 'syz.3.4866': attribute type 10 has an invalid length. [ 1119.847726][T15140] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1119.870126][T15140] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1119.871150][T15140] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1119.871997][T15140] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1119.872502][T15140] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1119.969164][ T8253] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.068060][T12339] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1120.104651][T23065] team0: Port device dummy0 added [ 1120.155902][ T8253] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.230866][T12339] usb 4-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1120.231920][T12339] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1120.231948][T12339] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.231967][T12339] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1120.232980][T12339] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1120.233003][T12339] usb 4-1: Manufacturer: syz [ 1120.252039][T12339] usb 4-1: config 0 descriptor?? [ 1120.402735][ T8253] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.465203][T23083] netlink: 'syz.1.4871': attribute type 11 has an invalid length. [ 1120.674882][ T8253] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.853177][T23066] input: syz0 as /devices/virtual/input/input181 [ 1121.218239][T12351] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 1121.369360][T12351] usb 2-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00 [ 1121.373270][T12351] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1121.373322][T12351] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1121.373345][T12351] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1121.373385][T12351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.435167][T22927] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1121.459795][T22927] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1121.610125][T23105] IPVS: set_ctl: invalid protocol: 58 172.20.20.66:20001 [ 1121.869787][T22927] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1121.951443][T15140] Bluetooth: hci1: command tx timeout [ 1121.984791][T22927] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1121.999797][T22927] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1122.070647][T22927] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1122.181377][T22927] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1122.292505][T22927] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1122.643025][ T8253] bridge_slave_1: left allmulticast mode [ 1122.643062][ T8253] bridge_slave_1: left promiscuous mode [ 1122.643301][ T8253] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.696209][ T8253] bridge_slave_0: left allmulticast mode [ 1122.696239][ T8253] bridge_slave_0: left promiscuous mode [ 1122.719148][ T8253] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.868507][T15140] Bluetooth: hci4: command 0x0406 tx timeout [ 1124.286616][T15140] Bluetooth: hci1: command tx timeout [ 1125.196832][ T8253] pim6reg: left allmulticast mode [ 1127.196726][T15140] Bluetooth: hci1: command tx timeout [ 1129.280735][T13726] Bluetooth: hci1: command tx timeout [ 1130.717160][ C0] sched: DL replenish lagged too much [ 1135.175487][T12351] usb 2-1: string descriptor 0 read error: -71 [ 1158.830678][T12351] pegasus 2-1:1.0: Missing or invalid endpoints [ 1178.554031][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.562721][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1200.605311][T15140] Bluetooth: hci3: command 0x0406 tx timeout [ 1239.040791][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.048390][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1251.323579][T15140] Bluetooth: hci2: command tx timeout [ 1251.323620][T15140] Bluetooth: hci0: command 0x0406 tx timeout [ 1253.524799][T15140] Bluetooth: hci1: command 0x0406 tx timeout [ 1280.615381][ T31] INFO: task kworker/u8:8:1488 blocked for more than 149 seconds. [ 1280.615424][ T31] Tainted: G L syzkaller #0 [ 1280.615436][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1280.615446][ T31] task:kworker/u8:8 state:D stack:21544 pid:1488 tgid:1488 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1280.615499][ T31] Workqueue: events_unbound linkwatch_event [ 1280.615532][ T31] Call Trace: [ 1280.615540][ T31] [ 1280.615555][ T31] __schedule+0x17dd/0x5820 [ 1280.615600][ T31] ? __lock_acquire+0x747/0x2de0 [ 1280.615632][ T31] ? __pfx___schedule+0x10/0x10 [ 1280.615662][ T31] ? schedule+0x90/0x2b0 [ 1280.615686][ T31] schedule+0x164/0x2b0 [ 1280.615710][ T31] schedule_preempt_disabled+0x13/0x30 [ 1280.615730][ T31] __mutex_lock+0x7c4/0x15a0 [ 1280.615760][ T31] ? __mutex_lock+0x5cd/0x15a0 [ 1280.615787][ T31] ? linkwatch_event+0xe/0x60 [ 1280.615815][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1280.615838][ T31] ? lock_acquire+0x115/0x350 [ 1280.615871][ T31] ? rcu_is_watching+0x16/0xb0 [ 1280.615901][ T31] ? process_scheduled_works+0x97a/0x1630 [ 1280.615930][ T31] linkwatch_event+0xe/0x60 [ 1280.615955][ T31] process_scheduled_works+0xc3d/0x1630 [ 1280.616014][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1280.616050][ T31] ? assign_work+0x3cf/0x5d0 [ 1280.616083][ T31] worker_thread+0xa47/0xfb0 [ 1280.616139][ T31] kthread+0x38b/0x480 [ 1280.616163][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1280.616190][ T31] ? __pfx_kthread+0x10/0x10 [ 1280.616215][ T31] ret_from_fork+0x514/0xb70 [ 1280.616241][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1280.616265][ T31] ? __switch_to+0xc78/0x1410 [ 1280.616297][ T31] ? __pfx_kthread+0x10/0x10 [ 1280.616322][ T31] ret_from_fork_asm+0x1a/0x30 [ 1280.616360][ T31] [ 1280.616440][ T31] INFO: task dhcpcd:5295 blocked for more than 149 seconds. [ 1280.616459][ T31] Tainted: G L syzkaller #0 [ 1280.616470][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1280.616479][ T31] task:dhcpcd state:D stack:20616 pid:5295 tgid:5295 ppid:5294 task_flags:0x400140 flags:0x00080000 [ 1280.616524][ T31] Call Trace: [ 1280.616531][ T31] [ 1280.616544][ T31] __schedule+0x17dd/0x5820 [ 1280.616590][ T31] ? __pfx___schedule+0x10/0x10 [ 1280.616671][ T31] ? schedule+0x90/0x2b0 [ 1280.616696][ T31] schedule+0x164/0x2b0 [ 1280.616718][ T31] schedule_preempt_disabled+0x13/0x30 [ 1280.616739][ T31] __mutex_lock+0x7c4/0x15a0 [ 1280.616766][ T31] ? __mutex_lock+0x5cd/0x15a0 [ 1280.616793][ T31] ? inet6_rtm_newaddr+0x669/0xe10 [ 1280.616824][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1280.616868][ T31] inet6_rtm_newaddr+0x669/0xe10 [ 1280.616906][ T31] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 1280.616965][ T31] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 1280.616993][ T31] rtnetlink_rcv_msg+0x802/0xc00 [ 1280.617019][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1280.617040][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1280.617061][ T31] ? __lock_acquire+0x747/0x2de0 [ 1280.617100][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1280.617129][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1280.617153][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1280.617191][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1280.617218][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1280.617250][ T31] netlink_unicast+0x8ef/0xa80 [ 1280.617299][ T31] netlink_sendmsg+0x7f0/0xb20 [ 1280.617335][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1280.617366][ T31] ? aa_sock_msg_perm+0x144/0x210 [ 1280.617396][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 1280.617427][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1280.617454][ T31] sock_sendmsg_nosec+0x14e/0x190 [ 1280.617485][ T31] ____sys_sendmsg+0x54e/0x850 [ 1280.617514][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1280.617545][ T31] ? import_iovec+0x73/0xa0 [ 1280.617577][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1280.617598][ T31] ? __asan_memcpy+0x40/0x70 [ 1280.617624][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1280.617668][ T31] ? vfs_read+0x804/0xa80 [ 1280.635259][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 1280.635306][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1280.635353][ T31] do_syscall_64+0x166/0x520 [ 1280.635376][ T31] ? trace_irq_disable+0x3b/0x140 [ 1280.635404][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.635425][ T31] ? clear_bhb_loop+0x70/0xc0 [ 1280.635451][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.635472][ T31] RIP: 0033:0x7f1d4b2b0407 [ 1280.635492][ T31] RSP: 002b:00007ffc91010690 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 1280.635514][ T31] RAX: ffffffffffffffda RBX: 00007f1d4b226780 RCX: 00007f1d4b2b0407 [ 1280.635531][ T31] RDX: 0000000000000000 RSI: 00007ffc91024870 RDI: 0000000000000004 [ 1280.635545][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1280.635557][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc91034aa0 [ 1280.635571][ T31] R13: 00007f1d4b226708 R14: 0000000000000048 R15: 00007ffc91024870 [ 1280.635604][ T31] [ 1280.635632][ T31] INFO: task kworker/u8:9:8243 blocked for more than 149 seconds. [ 1280.635652][ T31] Tainted: G L syzkaller #0 [ 1280.635664][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1280.635673][ T31] task:kworker/u8:9 state:D stack:21544 pid:8243 tgid:8243 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1280.635722][ T31] Workqueue: ipv6_addrconf addrconf_dad_work [ 1280.635755][ T31] Call Trace: [ 1280.635763][ T31] [ 1280.635776][ T31] __schedule+0x17dd/0x5820 [ 1280.635818][ T31] ? stack_trace_save+0xa9/0x100 [ 1280.635847][ T31] ? __pfx___schedule+0x10/0x10 [ 1280.635877][ T31] ? schedule+0x90/0x2b0 [ 1280.635901][ T31] schedule+0x164/0x2b0 [ 1280.635924][ T31] schedule_preempt_disabled+0x13/0x30 [ 1280.635945][ T31] __mutex_lock+0x7c4/0x15a0 [ 1280.635973][ T31] ? __mutex_lock+0x5cd/0x15a0 [ 1280.636001][ T31] ? addrconf_dad_work+0x116/0x15c0 [ 1280.636027][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1280.636071][ T31] addrconf_dad_work+0x116/0x15c0 [ 1280.636106][ T31] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1280.636139][ T31] ? rcu_is_watching+0x16/0xb0 [ 1280.636171][ T31] ? process_scheduled_works+0x97a/0x1630 [ 1280.636202][ T31] process_scheduled_works+0xc3d/0x1630 [ 1280.636261][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1280.636297][ T31] ? assign_work+0x3cf/0x5d0 [ 1280.636331][ T31] worker_thread+0xa47/0xfb0 [ 1280.636387][ T31] kthread+0x38b/0x480 [ 1280.636411][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1280.636438][ T31] ? __pfx_kthread+0x10/0x10 [ 1280.636463][ T31] ret_from_fork+0x514/0xb70 [ 1280.636489][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1280.636511][ T31] ? load_gs_index+0x97/0xc0 [ 1280.636540][ T31] ? __switch_to+0xc78/0x1410 [ 1280.636573][ T31] ? __pfx_kthread+0x10/0x10 [ 1280.636597][ T31] ret_from_fork_asm+0x1a/0x30 [ 1280.636636][ T31] [ 1280.636653][ T31] INFO: task kworker/0:14:12348 blocked for more than 149 seconds. [ 1280.636670][ T31] Tainted: G L syzkaller #0 [ 1280.636682][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1280.636692][ T31] task:kworker/0:14 state:D stack:21072 pid:12348 tgid:12348 ppid:2 task_flags:0x4208060 flags:0x00080000