last executing test programs: 32.429761767s ago: executing program 2 (id=163): r0 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x85, &(0x7f0000000100)=@req={0x5, 0x5, 0x0, 0xfffffffa}, 0x10) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000000952301090224000100007e000904"], 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2013040000002c"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd700000000000460000000e0001006e65746464657673696d30000008008e00010000000c008f00fdffffffffffffffebff90000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x40000) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000f01674057a21320dbd0010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000840)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="20c8acc374290776b0e048e2849d0c516d179f6f575ed72bdc2bab629e699cfd3e6feba3b8db4da2bff4d91f6f169eded6920620f485ece4df075fb7386237df37b77df2075d47ab8ff849b9c88308d0b9a5706e94d9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="680000000206010200000000000000000000000a0500010007000000120003006269746d61703a69702c6d6163000000050004000000000005000500020000001c0007800c00028008000240e00000010c00018008000140e0000001090002"], 0x68}, 0x1, 0x0, 0x0, 0x240000d4}, 0x4814) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r5, 0x1, 0x5, &(0x7f00000003c0)=0x1, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000140)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r7, @ANYBLOB="0632da7ad9b16e2465cf9af7d5a7b27f09ac28e2d1c61ec99387be8602b42fc190a72d673eb5a1f6bca8391bac41f217e720ecbbf37897a1968b84f9a463facce6012cfdf13854175d223997838bf3ed7c444f1f7221c4b676823f74c12f", @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101020000000000000000000000000600000004"], 0xfc}}, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x200000, @mcast1, 0x3}, 0x1c) 31.008549225s ago: executing program 2 (id=173): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x58041, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000000000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x200}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x200}) 30.903519198s ago: executing program 2 (id=174): r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x90, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x61, 0x6, "946024968e1a1712fb0889442b6f8a0b358323a82d9d2050744d45be81f49a0fa06ee6d97eb1fcd4bb7391bf432ec3b851f9ede9c3b7d9deba726f8bea4e3c1ae84590d04e52b25dd097e755f75a5b3a82996770501ba3f61be6a8fa87"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x108, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff4a16}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffc}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x600, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_DELSETELEM={0x1204, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x294, 0x3, 0x0, 0x1, [{0x290, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x50, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, @NFTA_SET_ELEM_KEY={0x220, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x29, 0x1, "bb0d8d544303c8d637a481d829c9ddda71553b76e941f51f02f2e7b51a3fc62525db4ec360"}, @NFTA_DATA_VALUE={0x35, 0x1, "8e292ec425b239909bdd75b7f4458c2b1334e9902bcd65d2618efc5c5bff18f94e9b9cddfc7d90da941bf01cd99caa02df"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xd5, 0x1, "b7959c41db5b87b23791b23872b1c385b142c6c5e3d10fff46baf3812d5182211702c463b6859a582fcdc6b275e0f4e56f222a4ab639627d9d9d0e68bf4c379d762df155db36281c6447099a772006bb2aaa54c71a5e60725950d551db06efe970fefaffeae540b823f524d116fc01e9061914ffc70f1abbddc6ef818a9a1785613a97c5a724115a1d22236cd472c4daced5365aa2a0655035897cf7729630d7fd1289810e26e3e51dd136e1bb389459724ec9726d9649d68416c2b3831f3babc53f7b8b6717e4af6974fedfc1362fbec9"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xf2c, 0x3, 0x0, 0x1, [{0x34c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_DATA={0x64, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x25, 0x1, "71c92cae9b3b550cf7b1f9336a9fa5d3db035a6d869a1a339af600b45413106708"}]}, @NFTA_SET_ELEM_KEY_END={0xf8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbd, 0x1, "879dc3147ec50cdf35ce64bbdd210bdf57178c35b26f2aad3137d5d6ed5b9bac7c2581da20e387f8e6d231d54cc24293d57633a5d12a1472f53085cac17815df0124aaa05146144f7b8037b6390e5fa43bd03990d561f61438f58b90485b5eb8eeb54a40fbfb314ce8cb71e45a0c8b7aa2658940815cd0877682b6fa6cc311111566e08023effefc0845911d44f0ab5684b3b47e2ba3e38f7613efd1e715659f5dc734b730c9e0c07c6e0b3dc9a9d13b898a8d813c3b4e402a"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x13c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x85, 0x1, "58c28461e2a7e19df7d349ab92ce4980dcf7cabde264a466a52921bfef9c1d7a90d69d4030211c6794bb210e7846b730d7718c0ccffd49cab9a286fe2d2bca29261f31d97c5a7dd02ab65032df3348a4f990c770252920df219c7550e21d536d7815510d8c481dc40232b01c413e788caf68757d253588ff0b5c2493f286e4a0ee"}, @NFTA_DATA_VALUE={0x9d, 0x1, "0d889b1e8988ffd6d89e4da17f0ff2842cf49e4af1be7946f1bf8f129381c022f56cdd5538b4ebf696914dbf1e41e60e72735fec07fba6c23f9a1d830a30387a22c869ae16fd02735df900f575012cef3536b7eef55d6181e84c309b4db6984465b8f824a8d4112b37f7f862b565d282c9bbbb49ff6aa8023569059bef91de9718a83d19a7c7138ecc4e47069fb86e2c0971afd7a97796ebff"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x88, 0xb, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0xd, 0x2, 0x1, 0x0, '/dev/sg#\x00'}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x800}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x7f}, @NFTA_LOG_SNAPLEN={0x8}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x14}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LOG_FLAGS={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}]}, {0x534, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY_END={0x1c8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd, 0x1, "400d5a5a6c82b528db"}, @NFTA_DATA_VALUE={0x9, 0x1, "1dcd5394ba"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xb1, 0x1, "f59066141f597fd4bb55dd7d5988367486998faf204c7076044da57d580e99e374fa1d74c7ede4870f5d89fd6d4e609479ebb5072ebe57f08351540e585f86767e57b6ff6b0d3ab0e35b3b90b07255d8acea9d2c5352a580793e144b4a165781253187e83904fb9d6bf0968643a9df84b67d7b38b662ffc9f85aa7303a20930d7bd5beb8427f4395b4a8c08feede45f1046120b58e5510d6328c05f672f9eda95ec040cf06a3f4f22227559780"}, @NFTA_DATA_VALUE={0xa1, 0x1, "5a4d1622c3809ebd03a708e39c3baf1b05626d61c0c6fdfc49328fb1148c575f66069e07ee4e8838041b80a34605a75e97e359435a54757da4b2ca89a4357c500e8bcddbabe844b2107b3c2f28742ef8ba57e1d9f32d06775275960402da730b607a7a7d94779adc9367ac00bb5819cf636e7978aa9e7d4d839a0f632f532cb5e241e89046d62e099b162cbd516eff52662b01ae884c07bb14ec480120"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x270, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xed, 0x1, "7d9c6a23ee8fc18227c3c755e8a34d0ee87ec480ae99efedfae4316aa37b77f22ffdf5d4aea189fa985399c163d99ee688448a94f01d20c5e74c051cd56b2a28158f72da2d361427740d08d71aa5284be883438dea6ecf08876c88993bcdee3330a7045f7d90c3fe24ec984593b1cf6266fd188a997c7553cd0ab3d9a028bb5d2f4c34d3c4c1674842fd043c387f2acac89b3c7c686255bef226dba277df43213110390b6fa42434a17520a26012135155ef6e7ecd2ab19fe507157daebca30b0e4195940556d92f53bba37d040f025ec3fcbfe6bf929a99afedb52f95b424a84bcd018feb473585d5"}, @NFTA_DATA_VALUE={0x35, 0x1, "4e9957e22609836e805cd35ab84e6993cf56638c3211e44da3fa80c8a73aa2f954779f7c58f1d5155f1e6e117c21aadde5"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x2d, 0x1, "35f42d63ba4bf949e96a0b9efae2beba22d039440430bc8e9729953af21cea8e82aa9d1157c87d4917"}, @NFTA_DATA_VALUE={0xd1, 0x1, "6d8b41f25f316ceba6198cf71c34eae2fec89c8c9a361a39e41e068464d412dcf9428cbb7e039e2a63b3ada5e9e9fc09b48ad8f9d2fc664ca8d287dee7af7f60efa7a3355ba70c7dc5459d30801e4282b15ef7e453870c636f3ff7fbef35493587afa4a07093790f38cea6881fc360cfd9fd22b6ff513d63e241de7be73b31afdef74b1e9d03a7441fbb2115b019abf6970ec747f4f5de9dfb7ee15a53bbc4cb7599a725e20e008f04fbdfb31b4afda55b4f8681c0d0b57d83a54b6d0b5af088b74316d2c50fa81cd7c2b19dca"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0xb4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @queue={{0xa}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80000000}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x3a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x220, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb5, 0x1, "9c668180943534491d385454d80479ce52db48be9f33af5f941fceff58619993d3831cd7b8809da1ad9fd8907dfdb68f51a009314ec4d036bbfd448cddc51bc6cdb6e5fef18cdb3471a7945083f237b9038df5464ab82510979db946e95c9338ce64cbbd0d80bccf467d64344b89bb792f4dad33a0b24a36aefc6e3c61b131a890adb1a518c3f99115b94ec91f44d18c29098f109124cf0de61657d50d970158751e8cf6bc63bcfd28bb610e6f1e68059a"}, @NFTA_DATA_VALUE={0xd9, 0x1, "9fd9840f2eee05f7c79090178ef651719692618d1e954c4cb06e4dcabbff2415243092cb8dd87b1a3fe640cddc3de5a8493a3841d77d2e1e13e0ffbb8f4c9414988c65cd575407ce8bbf53efb54e8bb9b470567d27aa618ece22b9f0fb3156c29701fd608225a5490d0b04c8017bcde20bd55f5febe467a370210b8e0d2fcfc6586fed3fb2a3840b388ae57d88cbb431fc86a226c4abdc9667cef0f0b9d332523862aec7407d15b29804b90b1df31a12a959fe49bfc033fb51ceba007333e9f91e6315aa63583381769cd8e5780cdc751f14491542"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x41, 0x1, "935a6908a7c66a3ca70dc3778a2f6851e62a7823a1d43c0bc1ae10c53bbc82aed9d8ab9847f841bd2f11fc938ce9d5a01b267ea38af2aad637c010685a"}]}, @NFTA_SET_ELEM_KEY={0x180, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xa5, 0x1, "cb6a172b62d997201d09ec637d0a515ff782f4c1c38c9eae15cdd58a5e668da3662cd96be4c74cc39051b8eab525c74b7c4083fed66fe62be69dc18b8d32cd4f7085ee077b6f70b7029f45f6e404734c77ab50a27aa6c928fda1215ac6cfd4eb91b8f4d18ba7be3ca627610fc3d217a509333ddc12311d59d5f2078d595900ac2ad60b866b2683e15fecae9b4531821f5c7984365fd3997f3f3dbc6443e1f97a1f"}, @NFTA_DATA_VALUE={0xc5, 0x1, "6c80eda3273c221e91844d6ffa0071d2bb7cf40b9bb037731be2c0d1bc09a0e9b61a056e49afcbdecc1b53d3e0d321d3d983e66facf1bd16cdb3eb74b990b5a536ae8a44e6a924ae7181cac1e80733d233d2406f73f31738351db91314a65dd4d421e8b11e4864b8bc5dca8e2c50936c63adf68506a2644b1e3b35679d0bfdc5e08692fbf39d3f654833b3c0ee04712d191be45987757578b700cbcc3cb347c5645291fe505aafecbe4ba2dcb19f7d6dd13928458e04f0093c4df27833ad4f0528"}]}]}, {0x4}, {0x2b8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x51, 0x6, 0x1, 0x0, "6f92a53afc4085084a74b2d5491d44dc5850473955d5021bed0b73a5ac198b88188c8d26b8e74c58672d50670ef9f235d5600242810afa0949646be22c2f0099d73569e76b437426db40fa77b4"}, @NFTA_SET_ELEM_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_KEY_END={0x170, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x89, 0x1, "2bb1eb2d0aa7fb27713ae6900c35befd0112784f813bc1466068ca22fcd30905af3ecadb3debc28593f891e74e522b2f124f6ad6eb24a08287fb369cf485fe3a76af431217d26eb894f0b9798b067468358f12ab8101899787096d314087a97c0b127e138b47b260ddbcd66403776a5d5928375dd7ec459c555440aacaf5d74d3a1771421d"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x49, 0x1, "48a3eeec8d13ec7a1fcb10d9bd5edbc6922b6282895315100ec04b20fa8f5fa919f8aef563d23582c347e64793da6c297416d2def67d76d8ddb9e61acb9a856c016792513c"}]}, @NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_ELEM_USERDATA={0x59, 0x6, 0x1, 0x0, "0117441eac5bf63a713d876bd7ae9e2aa5ab0c5b7aeeb2da52ee01f9cd22c92977076f6112504879f0e2e9a6adfd20cf9faef9b7eb972d90686a4d985f6fd15d129a1dbf11c7587fb3fc052b3268a17fe38e92a1b2"}, @NFTA_SET_ELEM_USERDATA={0x31, 0x6, 0x1, 0x0, "d5510775ae1b7e730779aa2791452089999b3ce61e74b53d518f175dc662cefef921a4f087123d282d0cee3b34"}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x142c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) 30.335247517s ago: executing program 2 (id=180): ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, &(0x7f0000000180)}, 0x10) r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c464a030103060000000000000002000600040000003e03000038000000af01000097700000fe03200001000700080008000000000003"], 0x558) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000080)) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) writev(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000800)="da142299e765", 0x6}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[0x1ffc9380, 0x1000000000, 0x8, 0x41, 0x2000000, 0x2000000, 0x2004cb, 0xffffffffeffffffd, 0xa1d, 0x2, 0x4, 0x0, 0x3, 0x2, 0x2, 0xfffffffffffffffd], 0xffe9c000, 0x202}) r5 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f0000000000)={0x5, 0x1, 0x5}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000400)=@arm64={0x3e, 0x6, 0x5, '\x00', 0xe15}) r7 = fsopen(&(0x7f0000001240)='gfs2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000280)='port', &(0x7f00000002c0)='0', 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000440)={{0x0, 0x8080000, 0x6, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xb000, 0xc, 0x0, 0xfc, 0x1, 0x0, 0x0, 0x3, 0x7}, {0x200000, 0x7000, 0x1f, 0x0, 0x7, 0x4, 0xa2, 0xfd, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0xe, 0xa, 0x80, 0xfe, 0x1, 0x0, 0xf4, 0xfc, 0x9, 0x10}, {0xeeee8000, 0x8000000, 0x4, 0x1, 0x4, 0x8, 0x4, 0x3, 0xfc, 0x3c}, {0xd5623b482348b50e, 0x8000000, 0xf, 0xfd, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x30000, 0xa, 0xfe, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x1}, {0x3000, 0x26000, 0x19, 0xfd, 0x0, 0x1, 0x0, 0xca, 0x4, 0x0, 0x0, 0x3}, {0x80a0000, 0x4}, {0xdddd1000, 0xc}, 0xddf8fffb, 0x0, 0x7000, 0x50, 0x0, 0xf801, 0x3000, [0x80000000, 0x0, 0x1]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500020000070100000048272d7061d328b9000000fff5dd00000010000100090808004149004001040800", 0x42}], 0x1) 29.875970331s ago: executing program 2 (id=183): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendto$inet(r5, 0x0, 0x0, 0x20008004, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_fuse_handle_req(r1, &(0x7f0000008280)="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", 0x2000, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRES64=r6, @ANYRESDEC=r0, @ANYRESHEX=r3, @ANYRESDEC=0x0, @ANYBLOB="b94a63152c9e033c106c951892f7f9213aba5c34850f69b08a97", @ANYRES64=r2, @ANYRESDEC=r3, @ANYRESDEC=r0, @ANYRES8=r0, @ANYRES8=r2, @ANYRESDEC=r2, @ANYBLOB="9d2de2e3c43027114ea8c27cbc0c36f72afc310547bf9b82e4cee7232d4e9bc5d64a0043e943566053b973bd9fc4225eb02518c3401914a847612ddf939b69a508512ea5b8543c39153065ae9b955776f19538d47342f0c145"]) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[], 0x2d) 28.726752407s ago: executing program 2 (id=194): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x48}}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x80) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0xc0, 0x3b, 0x63, 0x10, 0x16c0, 0x5df, 0x2b48, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x6, 0x10, 0x4, "", [{{0x9, 0x4, 0x7f, 0x7, 0x0, 0x3, 0x0, 0x0, 0x9}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200"]}, {0x0, 0x0}]}) 28.178494056s ago: executing program 32 (id=194): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x48}}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x80) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0xc0, 0x3b, 0x63, 0x10, 0x16c0, 0x5df, 0x2b48, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x6, 0x10, 0x4, "", [{{0x9, 0x4, 0x7f, 0x7, 0x0, 0x3, 0x0, 0x0, 0x9}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200"]}, {0x0, 0x0}]}) 4.198192232s ago: executing program 4 (id=195): getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x400, 0x1, [0x2]}, &(0x7f0000000040)=0xa) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={r0, @in6={{0xa, 0x4e24, 0x6, @local, 0x3}}, [0x100000001, 0x1, 0x4415, 0x7, 0xdda, 0x1ff, 0x4b5, 0x4, 0x40, 0x80000000, 0x4, 0x9, 0x7, 0x3, 0x9]}, &(0x7f0000000180)=0x100) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000200)={0x1, 0xa}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000240)={r1, @in={{0x2, 0x4e20, @private=0xa010101}}, 0x5, 0x7, 0x10, 0x662, 0x34, 0x9, 0x3}, 0x9c) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x4) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, 0x2, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TUPLE_REPLY={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x42}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10040000}, 0x44890) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000500)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000540)="dfedbc5eef693e604e9eaecb0539d9bc1a18d593f2093d8aad54d4dab867d950dcda16bc59181a2017c13f07aa31186074f008f8238bbeea") r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000580)={r1, 0x3, 0x5, 0x0, 0xb, 0x800}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@text32={0x20, &(0x7f00000005c0)="660f38806845b96e020000b800900000ba000000000f30660f38818b00000000f466ba210066b8000866ef0f231a0f01bf000000003e0f005f00b805000000b90b0000000f01d9f4", 0x48}], 0x1, 0x40, &(0x7f0000000680), 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000006c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f00000007c0)=0xe8) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000901, r6, &(0x7f0000000800)) getsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, &(0x7f0000000880), &(0x7f00000008c0)=0x4) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000900)={{0x2c, @remote, 0x4e23, 0x0, 'lblcr\x00', 0x4, 0x7, 0x2d}, {@multicast2, 0x4e24, 0x1, 0x8, 0x1, 0xfffffffd}}, 0x44) pipe2$watch_queue(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r7, 0xf50f, 0x0) syz_ublk_add_dev(r4, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x2e, 0x40, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000009c0)=@new_dev={0x2, 0x3d1, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x20}}}, &(0x7f0000000a80)) copy_file_range(r9, &(0x7f0000000ac0)=0x4, r2, &(0x7f0000000b00), 0x7, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000b40)={r0, 0x8}, &(0x7f0000000b80)=0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000c00)={&(0x7f0000000bc0)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r11, 0x4048ae9b, &(0x7f0000000c40)={0x80001, 0x0, {[0x7fffffffffffffff, 0x5, 0x3, 0x94, 0xa, 0x3, 0x2, 0x1]}}) ioctl$IOMMU_IOAS_IOVA_RANGES(r4, 0x3b84, &(0x7f0000000d00)={0x20, 0x0, 0x2, 0x0, &(0x7f0000000cc0)=[{}, {}]}) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x2) syz_kvm_setup_cpu$x86(r12, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000d80)=[@text64={0x40, &(0x7f0000000d40)="c46195e1f0f30fc7b500780000f340aa0f01b401e15a4fa60f35c441835a040b3e660f38803dd78700006566f3420fc73410b8010000000f01d9660f6b4b19", 0x3f}], 0x1, 0xa, &(0x7f0000000dc0)=[@dstype3={0x7, 0x3}], 0x1) ioctl$VIDIOC_QBUF(r8, 0xc058560f, &(0x7f0000000f00)=@multiplanar_userptr={0x8, 0x2, 0x4, 0x8, 0x10000, {0x77359400}, {0x0, 0xc, 0x55, 0x0, 0x0, 0x8, "80d48bf7"}, 0x9, 0x2, {&(0x7f0000000e80)=[{0x80, 0x400, {&(0x7f0000000e00)}, 0x8}, {0x4, 0xff, {&(0x7f0000000e40)}, 0x21c9}]}, 0xd7f6, 0x0, r11}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000f80)={r10, 0x2}, &(0x7f0000000fc0)=0x8) 4.035415076s ago: executing program 4 (id=284): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x4}, {0x6, 0x24, 0x1a, 0x80, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x6, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xd}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000040)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x9, 0x4d3, 0x9, 0x101, 0x1, 0x2, 0x7, 0x8000, 0x8001, 0x1, 0x3, 0x4}}, 0x0, 0x0, 0x0, 0x0}) 3.32060096s ago: executing program 3 (id=290): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x202080) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000540), &(0x7f0000000580)=0x4) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x1, 0x2, 0xff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r3, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r5) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r3, r4], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) close_range(r0, 0xffffffffffffffff, 0x0) 3.318603573s ago: executing program 1 (id=291): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=@polexpire={0xcc, 0x1b, 0x1, 0x70bd25, 0x25dfdbfd, {{{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x4e23, 0x4, 0xa, 0x0, 0x80, 0x32}, {0x800, 0x80, 0xfffffffffffffff8, 0x1ff, 0x1, 0x9, 0x9, 0x1158000000000}, {0x2, 0x1, 0xfd, 0x20000000000004}, 0x7, 0x0, 0x0, 0x0, 0x2, 0x3}, 0x29}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=@polexpire={0xcc, 0x1b, 0x1, 0x70bd25, 0x25dfdbfd, {{{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x4e23, 0x4, 0xa, 0x0, 0x80, 0x32}, {0x800, 0x80, 0xfffffffffffffff8, 0x1ff, 0x1, 0x9, 0x9, 0x1158000000000}, {0x2, 0x1, 0xfd, 0x20000000000004}, 0x7, 0x0, 0x0, 0x0, 0x2, 0x3}, 0x29}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) (async) 3.232137912s ago: executing program 1 (id=292): socket$netlink(0x10, 0x3, 0xc) unshare(0x100000) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x40) getdents64(r0, &(0x7f0000000340)=""/56, 0x38) (async) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c000000120007ab9a3fe3d86e17aa0a076b876c1d0048007ea6f063160af3650400010038001500", 0x28}, {&(0x7f0000000180)="83d2ff5f0000319fd2898a0cc6d6703b87eb29037b09bc7e64f918fa3be4664d327d90424d550300"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) dup(r7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) (async) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_ublk_setup_queues(r9, r6, &(0x7f0000000480)={0x0, 0x18e2, 0x10000, 0x0, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x200, 0x5, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x2, 0x19b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x1, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r5, '\x00', {0x3, 0xb66, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(r1, r6, &(0x7f0000000200)={0x0, 0x1463, 0x10f00, 0x2, 0xb6, 0x0, r10}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x2000, 0x1, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x68ea, 0x2000, 0x0, 0x90, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x16e7, 0x20, 0x2, 0x40021a, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r5, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 3.208389204s ago: executing program 3 (id=293): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x3, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) (async, rerun: 64) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSWINSZ(r2, 0x5414, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (rerun: 64) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io(r1, 0x0, 0x0) (rerun: 32) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000ec0)={0x1c, &(0x7f0000000500)={0x40, 0xb}, &(0x7f0000000a40)={0xa1, 0x1, 0x400, "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"}, 0x0}) (async, rerun: 64) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async, rerun: 32) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000000)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = fsopen(&(0x7f0000000040)='ubifs\x00', 0x0) fcntl$lock(r3, 0x25, &(0x7f00000000c0)={0x2, 0x1, 0xca43, 0x7fffffff, 0xffffffffffffffff}) (async) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="18001a800c0002"], 0x38}], 0x1}, 0x0) 3.142448576s ago: executing program 0 (id=294): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1412, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x4004000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.052151317s ago: executing program 1 (id=295): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000002c0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000300)={"f4957dbb165076477195b2f0d21f16cd", r1, r2, {0x7, 0x100}, {0x4, 0x3}, 0x100000000, [0x1473, 0x1, 0x3, 0x6, 0xe, 0xa92, 0x96d, 0xd, 0x2, 0x0, 0x9d, 0x100, 0xa, 0x6, 0x4]}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) write(r3, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d000000", 0x24) 3.015407398s ago: executing program 1 (id=296): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f74821a89db066d6f64653d30303030303030303030303030303030303031303022302c757365d112f06b9e56db39c297d09514398cf1e2cab4975a1162f5f620e63e19d2f4bcf6e37f4d01a3e14ac27b2988f709ebc2c51f6274d907cc56a54bb3dd89cd1ec4c33c7ab978dd47d1847cd7367c37f994a807c4c2827d5b7539f0a1eda00e530099ed68934cd6744314701d119206010b40105d34f4369adbd9290ceb28cbc2dea0262be41a5f67ef0fe080fbcf122110c543b2f79accd4819b143e0bb159e7470dfe0a7ad13c976f4852a7cc011c481836b2cd9620fd05f3e300"/243, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) r1 = syz_clone(0x400, &(0x7f00000000c0)="72bb4c22b46ca3435d4b5208e97830bb8ddb1fc71d21b821f1c9860cb5fef470dc14adbe98308f145129a9560560edb43b2e2dae3b2b6dc6910580c440d5e5e3311d56065738f3e3e4212031c9689756f0daef976a8e36572705a178423b8b5a30b0a98967a25403e80311bcc9a9d193e4d06b54b6957617bfc8003f7c9b3b8c9ae21c242505b837506eac34856e12633b6c668665643c", 0x97, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f00000004c0)="d44003458332a07fb59b249d9ea2d6b8dbf70287b352b4090cfc4fb3765372cfab6aba1c41528adf3f1059ae8293d037a49b85222aaeb0d475fbfc4854e2ce402d9abaee9e46c4b0ae6c4a39566bd089836eb8f40c40765fb4d8c1634714390809e2278539fd7ab2b3069be59a5e8afce3d3bfcc6e4525e3c62049070148d322cfbd56fe502d21dacdb2c2f27593207bd67bd63ac01967b4fb28ff41a2ca57f99868923acf6fd7a5ee484a5986117fc201661d39657f88661ee637") syz_open_procfs(r1, &(0x7f0000000580)='net/ip6_flowlabel\x00') 2.914726532s ago: executing program 1 (id=297): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000400)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) ioctl$BLKRRPART(r3, 0x125f, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000) syz_pidfd_open(r5, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xe) ioctl$KVM_CAP_DISABLE_QUIRKS(r6, 0x4068aea3, &(0x7f00000001c0)={0x74, 0x0, 0x4}) wait4(r5, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r7, 0x540a, 0x0) ioctl$TCXONC(r7, 0x540a, 0x1) syz_init_net_socket$x25(0x9, 0x5, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r8, 0xc0205648, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f905, 0xffffbfff, '\x00', @string=&(0x7f0000000180)=0xa3}}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="8c005a800400018017cd39bc"], 0x28}}, 0x0) 2.695576735s ago: executing program 0 (id=298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000500fffd0900010073797a30000000002c000000030a010100000000000000000500000a0900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000008000b40000000002c0004802800018007000100637400001c0002800800014000000015080002400000000b08000240000000080900010073797a3000"], 0xc8}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x4, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xfde6, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3d03}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x101}]}, 0x2c}}, 0x15) 2.425775576s ago: executing program 0 (id=299): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x515ac3, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000040)={0x9, 0x2, 0x5, 0x1000, 0xff}) r1 = dup2(r0, r0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x9, 0x2, 0x5, 0x8000, 0x7, "397bea8a54645bc04d595e7a68be8d74a9075b"}) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x7, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f00000001c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0xc, 'veth1_to_bond\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x38}, "548114bbdfbe97deb1bc7a358cad2fbfe19026939e97c32ad6430c1944e35423a9a5fd86b47f5f30474eec54101644669e6d244851dbcf76"}, 0x3c) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000340)={{r2}, "39b1801dda26532d469c42a28de0c3d005eddfa3db5c468789baf3243f81f1ed45b2c9d5a6019a82935eb40f224b9d93e20549af4b093f59d06041e6f4f37121dd7bc88481417d5f462750d260ee9a2b1bcbed1e006d44227f6e27005f6d682f6c38c4d8f6f84ff6d3101e59a8ac54980ca7deb8cfdf716a9d935400fa707512373855c541f8efa398a59fda5816274eccd650f30ca670617d66983547103a63d29c29e772e4725aacc2050f96b97ee2c05364305ea72ebb4483026da1f8d25a8ae14aef35e038f9ca75c910f33a0300cce1c570d756fc0cb8acc7975f3812995098ef409a8703bbf3348cc91930cc20bc456558b4d0e4494c1b0e18de0380159308cea8dd44a3e0a3166e3255d60993b03bcf227d415559cf72b5e1d7a5bc7d43ddea4c0472ba3eb8a5be67018b4065f98d79bec0195ea4e119009e8e8691c3da0c6fda7933d684886002b2d5199fef2afd01ab0d4b306c49739fbd7ffed2e3f89208cbb887106541389ca187b5aba6d249f5f7fd86734229e761f305b600b0d18791680d343a32b8f7f2ce69b8feeabc3f946b6232752d3093092b9c4478b5e15ccffed1a321572b7e09eefa677e7d897ea13df97ae24c21c2e2e4231f8ccf676bdcb95777156c047fdb46941b164427e8f2f0dde6a106edbf718cf511347c379ebe191d3de0cb166cf19acb6b8a2b1fb3ec71555566c152d1e648444fbc794f7c27f57f476e7b0c77f25224f748646ab7b174a664f92340d45ebc1eaae61fd717da3c46c6933128450febf0a81463811bbf225e54958d91a10fc8ebdfef18d1c537dd0d9320dffa79127242135d2d6afd9daaa07197b98832c569f0c749d8a1ab1adbd2607977098c152d9d43ced8d0d735e327ff0f9920345ddc2279a3f1599b1f9bf9980807a1def6833fa349e2b51a36dd724c8e0b93f9dee6c1dadadb6584c415ace091bb5580666a1937709480cf7bcf6b15c5a1c5537f695c6297eab64d5698354870b55c401c8a9078b898764523ac98c9e1b300597fd5b6092d4e7d7dad33e9cd893aac8c99c9a31c6001528892cac08e9f5e32aea139aa06cf5dc7499a5f55c7b0138458e17c02c2317dcdb3ac869dae03b3ff0fe5934af652d345b5a7e654de5dc39809e451f721aab3019d87b19242d24bddefdc6e23034164fc705b59aa611088c21e6b28f9b8ffac5e361eebaef1dc6dfb0991f076c229f13539a67bef44513bd0f6641b3ff95bfa1471cd981d28b948eabe6decd359c012b6bb233a56e23ec73fde9c5f6862df9c7ed259dfb5573de921a27d850ad16723ef25f5b01049d1176b95abb30061ca05d96730d161dd4ddb2ef43de568ec1a6826889a34577b7b07da62f4071e07096934ab45541ea98b9a9dbd3422419128892008ae31e0d3fc9aabf227e88eb4f3ea8d11e910655efab9cdb5b7350d1cd2415d2286636ee1e5cbdd3c9c9ca0298358db698694d93813d2d6663c059c8e9298e8aa6d04fdb31a0832db5579af613b79bb37a584ccf6e54a830995da622c9ee252c0b6a4ee730de8b7cf89a8d9ae2e6117e9e1b0af1123625aa967af78b6324f28862c9e331c6de9e5ed5bb6e8bf2694a8e7ad4ddfe86891102eb383c526193211eeae145fb059e18df9a95e95e7bd412d75de828feb6fcf694ea7873e577bb062b6b06773d63737623314bf9967fed1218cd09621a8025a4931ff9c7b493a6cb0f4420232da5456684322db2836c5eb405c6cc13366159b3b373f1781c2f9620554463eed26b02d78934073c68a74dea357e5207d6fde8f9489d8e9c36890596e522796f1f7194f3a341fd16d7eb05210d8f1f2793482ab1e5ca5f8fe37133aa63201bbdc4aed6f12f3f1cd7d542708de0c5605cedf661a61b2b00c82ddafb8f7696a8e52563091d71cd238f7c22df16ae48b76338ed24096580834aea80bf6aab24837775f25a8bb3b266972a9330002d50cc94c36d06cf9ca80a6ad3b936c4950cd012b3dac009bf47faba570da1ad099a0405631fb37d16a67cd61d74bbab189cf88e49f7432edd477a1403d04dae781a15e5850443340f4238b82c258330ac708bfda72e4d350ae4c3e95d6444edd7e8d5f2aeb233f14d530f535e9497ca76496c2a3712e557ad796a779605e77355e34fc962a0fd2cff6194b442dad63049907f6694f864a25403dd84b8d6d69c09e2388733ed34744781a87be87e6d7dbab0c486df53b5d0d1363c30008a148e5eb871f6568e48a2c4715325ea5de48118c3d36d8ca7a110c899a3fc176c73dcae079d0ec4c0ffe478e52e054c9048a13f048f9581859af7c33f4a95d3201e75f3046226f8b31fb0ef741c3f804421caa6fda0a7d673e02484f433007e8b54ea4eed59af711882f0a31cfe2d743522cdb863e8fb4641ab2065b12417b8f3863a393397e990802cedb5484ef57728c2c60131fd47bc63929209caa0c4ba957011ab714e8a84204f40204311264ae09553d8b92ec1083cdb138be33c6dcf32a76f185e625ae134197a3215fd5fff510c12ee5c5a7d2ce627205e4b5b2b243ffcff0d42f289f6ca9cf7b24dcb82285f91e5d03a05663c8943b8a675443be83732733476d40af839176944d2ae485f96ba69d2c2a754515955d1e6dbbdbbdd384819ff7adbba5b7590e9be5735da751cf3590f1766ac8059c4a33665fbf5f051c156305e2c22ddbc3770b212cf3e1716ca71960ec236c5dfa44ee00c5be17200d21280075a8e9e381a0b5f85cc60db7a1acb80f7d27f028a35f4cdd6ac6a50435bc1166fd711d87a5b10b0f8fc1ea8785e216eccbb1debeb0bd0a01bef7998b728f026ddd6c0b4b3333f3a0425848de15a051e8b940255443a0e982afd6823fc9d9eeddcce91d0bba9e1ba08b949d28addbffc10dcbc422452e6c1bc29f1303cff743cf441ef71701a266296f37750b770a96f8930a9b8340fa7dc862718f66d4d69cea63ca418607a810bb5c892c07001a8bc90a11b2ddd80b4e2bf4a444e471a005d128c09f55e8645337b900096a37881aa7ed170a2c017f4fd8bdbeeb15ba90d3b479eaa89b4de1c24dee1d4746dcf7c1704d50b76838d18b6fe52dfb82ba5293a17f518b50e8278b04332464f6681eae65374e7263f48e294f371d3cd5f56c8d32e069740026eaed9fbebf8faa8f49ad595f5589763721e400b8edf3eb6ee4135d0e3a3d0fbabfb54bc5b7fcdca81dffdc775ad34a4e7b8337d14a41fd2db98f2783b152ae834dd1b865871ad56ba4602c6d814e38bec1f92ee10624d68c506f3940a7d4c7f12183f10b1a12a030300b62a4bfe43140213e1135bbe0cc0d92c2abe03b4ca07842ffafdbc72099bc12622fd7734e0f3740664481397d567ef19f72efb824f3757c2dad01f39a55a69f86ca79fb8f01c8ed4808ea6c430839275c4ad08c84b3fb7da32b91e044e4341893740adcb33cd6d7481691ada1bb6d103f2eb1fcd349dfcd1fb6536b276629577ebd16c56720ae079546e0f0f7e87708165c20dd06cc728f739caddf6f0c0a865e039da86f114b5a514d5f1dc4abbff34e901b8c304dee434211f3995e60938845ff807b983754a9c07a0addd709fdd01d7584603d55ea0373dffddf02e3a9e5c90c4e74d9f50dd02a3b7e0a8b4f917c0a5d9d8a08f3e9cad089efcb8daab9a23d3aeb1e668484fb2341e8a5a6852f329de8cfb00b176534c2816a7d9af66c5f7a7bec0690904061c4ae855d06ea72aaef2e19f57f08ae53e0f1d91e612a327db3ad3db4da6a22e197f04d14f7694de96fcae9711390a42f16b8405f77ba12d020f0546b10c5ae7945069d204619bbd103f73e4c63bae5e792a5a0bdb4a1d6f8da493f64daac552df8135a985099072e29a77eb61b4f84013f4e47e95b2e7092af03742b09074bc168315b99f52a9dde3ad8ee4543bcf20da7406ba663a1a281649be0d3f4681f79b2283fef1c18b22629c4500bcc805fdfadf39e6ed34028ac3654c3f7c432e31453abfd3ab4f84f3617a976c27500dffb6fe8fa0eb51b983fd669b227014015ceca8876e3b7fc8fccff4b75282d20443947e8f8e4814ea22f0f1443a2fa5a93e86b93cbab7bc7b0fb86fe2c3eb414dd111a29359f32728ed2d75cb0672d3ec9a882c1f8fef4ed7ba2b7f355127bcb8ba6d2a20b60b4279a584c148acea253b2e3404c73212c854cd47c012ca10c8908ad2820cebeb9022b1e00da6a8c5b9bfa4b2b14de1d143393766bc90164584f2883dbf907f4edf6398ef9a2a20db8e33ccd0a29bb8af29556cddc7f90f9df0485eeedf9119f7e2942315244b5a18219943b2439ed0d62d1b1e2af1598b41cd4353e3006936656467030e4408ab72c7a87f5268ee495564a483e085631cac336c257b0018b6c47bf7ead3ab451e6d3c05a3149ce05beb9750fe6cff1f6e375ef8358dfbe22d5434a84d4cb80c60d6082ca04b351c5d0ee7f1ebfa5947581f7e55d06c86972cd8e25ad7908d4730634c2e4084d9934c1efc4ee993074e7b95b16089931718d86a8ad90b8dda211bb96ffc7afe7ba47b1e5e45a37411bc496e608877464abca0d1898e4c7506908bc314ceacc5cad7ed4a82cad1a4d1acfea950aefdb3d0532404747b04624a97edcce7a30bf73290efe5e3ae0a959e313b59e5c1252854b893245056577bd30eba1be8d7ecaf58a1a57b939fb46289190185c680127e1c4f6a2af38c98c2bef79726072012e528a9ee3005e7499d762f6a506b17bc7446d773fc4c7ddf7427c823bd10ff82a880c9a8196e49db88528fa95a3c6ce0271b47569605cf67382afc5eb4c946935801fae3feef571ae991b8c928ebf6177f852bf9810172b5414688b3ab3dbf9b1b2c5a427c5de5bc5237e96e90714bd54f047a7eadd8703c402e29ce8f970e4d322a8554482377a900352ca3fdcdb390f97e09fc9008814694c84bebff079f0f3082f5645d5c9946ac67da8bdd00f5e05f6924db14736ff8477fd82fc285fb2719c3603272ec3e9683a79bbf9a85a2003627f8ac226f9932cbde3b1b609513f539ef86db5b891dae279e9d1f72ac63aa6ebc348d45ae458fc20921eecb356b42d3bbfe20bd542af35562d53d1c188f5dd28597f8cda39ec6e3b7a70ae88427e86f0fff86ad41b94ba76d375614056fee52499ac18abd916f0fc3bca7dae3701f33b5fc1d83a123ea6891a64e2bf81d3993c148604855e2655ee23d3b80d16b48805dce716e3585534ab46334f717632aab23e31ebe6438b967a74656aa961450622f606615fec6ed2b6f8c611d77cc8c491457d988f070b4510ca602bc1a6dfec615db18d491f47b9fdc206b6a44d80b95c7bfde56a82429c3f3984dc7fb517ab9e2b533d7635cf2ff95eb6dd1331f9e4e329bcabd5be7bc60a4b3452f9700a08bdaa316fa68030d448827a97be91c6a4fe6806854e9c592a4b81a60344159396546a98f00007ffa516f07cb4f6a332f2326e002a528689d3ded409224cf24868063658dec7bae245514f300f0b9b9503d17a323d703a9252ea627534eebe21f3703ef16552a61f3e828d5326e6b05fe3b832017111049e6a95028dc454c1b02524dbf78662faf7feb8e5c9d96989ddf9f67d1bacddc15098b12d81045f69a1bbb64dbfc8d084fc11bf750908307864b6bb985f66be5560f0827ce412a641b248e340856c8e00b5a4619c5defea231ed73e21f6c2a475745c2289fcba919eff337e01a3c3c3c648661bd6228bf03c0907f3461531c579fad2129547af4df7041b8d386e3fe34f4e7f19d58a112d327fa2"}) clock_adjtime(0x0, &(0x7f0000000200)={0x1000000000d1, 0x8000000000000001, 0x80004001, 0xd6, 0x9c7, 0xfff, 0x2, 0xc5e3, 0xa, 0x8000, 0x3, 0xffff, 0xf2e9, 0x8000000000000001, 0x6, 0x2, 0x80006, 0x6, 0x81, 0xa, 0xe4c, 0x4dd, 0x8, 0x200, 0x8085, 0x4}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001340), 0x40, 0x0) syz_emit_vhci(&(0x7f0000001980)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x20}, @l2cap_cid_signaling={{0x1c}, [@l2cap_conn_req={{0x2, 0x4, 0x4}, {0x3, 0x80}}, @l2cap_create_chan_rsp={{0xd, 0x5, 0x8}, {0x5, 0x6, 0x8, 0x3842}}, @l2cap_disconn_rsp={{0x7, 0xfc, 0x4}, {0x4, 0x3}}]}}, 0x25) 2.28864243s ago: executing program 3 (id=300): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000180)="e5da5a00c70bd29776e9d8121960fc067af90e7a7f9834360378371d424f028c48b486f4eb4860502324d738850084b6fd6e06f335635ccdf6bf4d082f22d3e9004039b7326852882d8c81e4005628674c7a309425c6c331ced14bbb662962c89cfad10827adb74e6ef10150922adfebe0b85dc3cec48317b8d29aa50a802c9fb26ea0a0d3bae5a4dfac490f1c6b172f435b1df7441b388198942108fa34b9f9f2f5c56f427139bf5e0cc189cb8d6524dd71b4f333fbbe654821b6e79a0498606965264c4d5ca51a1b92d777e326520c9092c0dfd2703f") (async) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x4}) (async) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x14, 0x0, &(0x7f0000000400)) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2c, 0xc4, 0x94, 0x40, 0x1110, 0x9042, 0x51d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x3d, 0x20, 0x7f, "", [{{0x9, 0x4, 0x8d, 0x4, 0x0, 0x60, 0x7d, 0x2b, 0x25}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 2.135767778s ago: executing program 0 (id=301): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x20004849}, 0x4000000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x252, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x66035bbd01c9b772, 0x63, "", [{{0x9, 0x4, 0x0, 0xdf, 0x2, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x7, 0x1, 0x1, {0x22, 0x685}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x4, 0x0, 0xfa}}}}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x20004849}, 0x4000000) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x252, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x66035bbd01c9b772, 0x63, "", [{{0x9, 0x4, 0x0, 0xdf, 0x2, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x7, 0x1, 0x1, {0x22, 0x685}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x4, 0x0, 0xfa}}}}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) (async) 2.083853595s ago: executing program 4 (id=302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x75}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x13}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xf}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3d}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xbd}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xb}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40a0}, 0x4a014) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.029130516s ago: executing program 4 (id=303): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000200)=ANY=[], 0x0, 0x600) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x8c, &(0x7f0000000380)=@string={0x8c, 0x3, "8ef149006d9c5b81261a779b66879c98f757d5ec98f807f689cfc8cfd1f4e27db6043eda8cec3e25ad7860554b4b3547f86e0f56107eafcaeae3d274500f1484157cfcc15dece3344712048cce472ccd653237590efa9673b5fa5e883584572100259c4952023803347b51d1bf39da5b19c50e75432647d18210032c00084e8658dba51083f5960bcb00"}}]}) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000240)={0x40, 0xc, 0x1, '!'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x20, 0x23, 0xea, {0xea, 0xb, "19cbfe8cd7fe299d7d3631dc7d19a052d50c82aa3e16104cf8be42794f1956eb3c4bedcf1c272a18269d7765dd737ca9933826595b34c9f5414fdfd9c77307c8114a364260d16a831c194a133f19aa2045a5c5a6d37e4770997e7d9e6279ed0333ae20a629668ba071dc50a8e0da0c93198decc901d32b77b399ca03f37ccce4bbb9453abcbd948a068a48ab0cf8fd631393d04faec56b81362651ae56cc3c53a37b450dec9cfadf603a6f298a30b18f221d7c7addc7d9a2bf706904f583c5041f7a8b1700bb2184b05f6bccdf95c434e55f6606a1b1fd61f541de9ba4e6e3e6753e97f89bb29379"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x438}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000440)={0x0, 0x5, 0xfd, "09e7388d00189b0c3cd72bb519b368a89413782d430c6013d405c1acc1ae5408d27ea4726b7592a6a0e3c31d774c6604e1ae913399c2f9904e69ff0569dc8c18dafe6401f2115454e12ee7006c089b0310ce49af2133a1b8b3cc586b6b6146402f39b82ee3f1027b71eb1cf53e264c9c37532366813020bb741a583d04a0091f5569a75f031b4ea429ec17d265829200233a2b99bf3e7f3962f660a2c83e4d4729dc16d8683b10a72bb35011beeb6556e8b681d99b723bd05ea91b4e7a14e0e4fa81fdc0cbb4c24d1356b962ca37618f7c6868da19eb709ec5bfda865cad890c226e222e8e05294fbe84f16dde2fe94c39e8132bb0e617cd99a4f065dc"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000005c0)={0x0, 0x8, 0x1}, &(0x7f0000000640)={0xc0, 0x5, 0x5, "215329a28d"}, &(0x7f0000000680)}) (async) syz_usb_control_io$rtl8150(r1, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x20, 0x23, 0xea, {0xea, 0xb, "19cbfe8cd7fe299d7d3631dc7d19a052d50c82aa3e16104cf8be42794f1956eb3c4bedcf1c272a18269d7765dd737ca9933826595b34c9f5414fdfd9c77307c8114a364260d16a831c194a133f19aa2045a5c5a6d37e4770997e7d9e6279ed0333ae20a629668ba071dc50a8e0da0c93198decc901d32b77b399ca03f37ccce4bbb9453abcbd948a068a48ab0cf8fd631393d04faec56b81362651ae56cc3c53a37b450dec9cfadf603a6f298a30b18f221d7c7addc7d9a2bf706904f583c5041f7a8b1700bb2184b05f6bccdf95c434e55f6606a1b1fd61f541de9ba4e6e3e6753e97f89bb29379"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x438}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000440)={0x0, 0x5, 0xfd, "09e7388d00189b0c3cd72bb519b368a89413782d430c6013d405c1acc1ae5408d27ea4726b7592a6a0e3c31d774c6604e1ae913399c2f9904e69ff0569dc8c18dafe6401f2115454e12ee7006c089b0310ce49af2133a1b8b3cc586b6b6146402f39b82ee3f1027b71eb1cf53e264c9c37532366813020bb741a583d04a0091f5569a75f031b4ea429ec17d265829200233a2b99bf3e7f3962f660a2c83e4d4729dc16d8683b10a72bb35011beeb6556e8b681d99b723bd05ea91b4e7a14e0e4fa81fdc0cbb4c24d1356b962ca37618f7c6868da19eb709ec5bfda865cad890c226e222e8e05294fbe84f16dde2fe94c39e8132bb0e617cd99a4f065dc"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000005c0)={0x0, 0x8, 0x1}, &(0x7f0000000640)={0xc0, 0x5, 0x5, "215329a28d"}, &(0x7f0000000680)}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0xfffffffffffffdae, &(0x7f00000001c0)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0xfffffffffffffdae, &(0x7f00000001c0)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.05966337s ago: executing program 1 (id=304): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x5ac}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ac", 0x1}], 0x1}}], 0x2, 0x400c404) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x446, 0x21) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r4 = fanotify_init(0x40, 0x80000) dup3(r4, r2, 0x0) splice(r2, &(0x7f0000000040)=0x10, r3, 0x0, 0x807, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000780)={0x2c, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) 794.639064ms ago: executing program 0 (id=305): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x44}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_team\x00'}}]}]}, 0x5c}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x24c001) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x24c001) 640.594046ms ago: executing program 3 (id=306): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x2c, r0, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r2) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 588.183205ms ago: executing program 0 (id=307): r0 = socket$inet(0x2, 0x4, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x4e20, @local}, {0x1, @local}, 0x2, {0x2, 0x4e20, @multicast2}, 'veth0_to_bond\x00'}) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x2, 0xbd9d20f2ee7e74d0, 0x85, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x3, 0x6, 0xc, {0x7, 0x25, 0x1, 0x0, 0x2, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x8e, 0x3, 0x5, {0x7, 0x25, 0x1, 0xc, 0x6, 0x100}}}}}}}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 357.392323ms ago: executing program 3 (id=308): r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$dsp(r0, &(0x7f0000000040)="c7e6c97400db195b8ddd8a2db29037ad9630df45634fe722babd6afedd48c392028d1ebee09b3ebeb86c2865d6ae4bde1771351475c8ca68330563d0ef399397ba06a1048965e8016e4311da32fdc1c99fb25fbe50638b82dbb6e4c184cd3f79707dcfafa485d9ac99bf3abe1ae78ba2e4147fd9bd8c", 0x76) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) socket$alg(0x26, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) write$snddsp(r2, &(0x7f0000000540)="55d512c256dfd7ac7a033f53df0937d7724f13f7eb9a3a1f66b2c029e936023d4d1ed772d1d1fc2f33609859f5fc81673494d1d8489b77eb16d72286be94bfdd003aa1d039dd3037a3de45782555ee2d30bd99ea04dc0c6d533f418bd7c285fc8ea76f505390", 0x66) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd0000008019000000000000000000000000000000000000000001000100", [0x100000000, 0x8000000000000000]}}) 0s ago: executing program 3 (id=309): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0x33}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff000000000100000008000100030000003400048005000300010000000500030000000000050053bb2ca800000500030080000000050003000000000005001300010000000800020002"], 0x58}}, 0x814) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x30, r4, 0x101, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x20004800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.13' (ED25519) to the list of known hosts. [ 75.180497][ T5595] cgroup: Unknown subsys name 'net' [ 75.391380][ T5595] cgroup: Unknown subsys name 'cpuset' [ 75.457554][ T5595] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.055130][ T5595] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.302196][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.333894][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.334664][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.337802][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.339174][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.357711][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.360136][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.361186][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.362359][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.363579][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.514978][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.527695][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.529052][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.534114][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.537295][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.566671][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.600758][ T5613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.603640][ T5613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.605617][ T5613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.606335][ T5613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.293925][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.294657][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.296586][ T5614] bridge_slave_0: entered allmulticast mode [ 81.300226][ T5614] bridge_slave_0: entered promiscuous mode [ 81.338218][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.338426][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.338574][ T5614] bridge_slave_1: entered allmulticast mode [ 81.340256][ T5614] bridge_slave_1: entered promiscuous mode [ 81.415563][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.415777][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.415911][ T5617] bridge_slave_0: entered allmulticast mode [ 81.418839][ T5617] bridge_slave_0: entered promiscuous mode [ 81.438667][ T5613] Bluetooth: hci1: command tx timeout [ 81.438674][ T4922] Bluetooth: hci0: command tx timeout [ 81.475211][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.475520][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.475747][ T5617] bridge_slave_1: entered allmulticast mode [ 81.479728][ T5617] bridge_slave_1: entered promiscuous mode [ 81.496419][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.497516][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.497971][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.498202][ T5620] bridge_slave_0: entered allmulticast mode [ 81.502908][ T5620] bridge_slave_0: entered promiscuous mode [ 81.511776][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.512054][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.512287][ T5610] bridge_slave_0: entered allmulticast mode [ 81.515363][ T5610] bridge_slave_0: entered promiscuous mode [ 81.550134][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.550710][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.550998][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.551211][ T5620] bridge_slave_1: entered allmulticast mode [ 81.554211][ T5620] bridge_slave_1: entered promiscuous mode [ 81.555616][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.555892][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.556102][ T5610] bridge_slave_1: entered allmulticast mode [ 81.561700][ T5610] bridge_slave_1: entered promiscuous mode [ 81.641271][ T32] cfg80211: failed to load regulatory.db [ 81.677327][ T4922] Bluetooth: hci2: command tx timeout [ 81.677348][ T5613] Bluetooth: hci3: command tx timeout [ 81.721692][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.829107][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.950269][ T5614] team0: Port device team_slave_0 added [ 81.954443][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.959891][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.986738][ T5614] team0: Port device team_slave_1 added [ 81.995859][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.002199][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.059003][ T5617] team0: Port device team_slave_0 added [ 82.102991][ T5617] team0: Port device team_slave_1 added [ 82.104330][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.104339][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.104352][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.111029][ T5620] team0: Port device team_slave_0 added [ 82.118180][ T5610] team0: Port device team_slave_0 added [ 82.142189][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.142202][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.142224][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.148221][ T5610] team0: Port device team_slave_1 added [ 82.208364][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.208379][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.208402][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.243852][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.243868][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.243892][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.248952][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.248965][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.248987][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.287761][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.287776][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.287799][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.345655][ T5614] hsr_slave_0: entered promiscuous mode [ 82.348056][ T5614] hsr_slave_1: entered promiscuous mode [ 82.435131][ T5617] hsr_slave_0: entered promiscuous mode [ 82.436268][ T5617] hsr_slave_1: entered promiscuous mode [ 82.437865][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 82.437964][ T5617] Cannot create hsr debugfs directory [ 82.464705][ T5620] team0: Port device team_slave_1 added [ 82.511271][ T5610] hsr_slave_0: entered promiscuous mode [ 82.512358][ T5610] hsr_slave_1: entered promiscuous mode [ 82.513225][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 82.513245][ T5610] Cannot create hsr debugfs directory [ 82.572790][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.572800][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.572813][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.621647][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.621656][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.621669][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.859813][ T5620] hsr_slave_0: entered promiscuous mode [ 82.860920][ T5620] hsr_slave_1: entered promiscuous mode [ 82.861785][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 82.861805][ T5620] Cannot create hsr debugfs directory [ 83.515362][ T5614] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.517326][ T4922] Bluetooth: hci1: command tx timeout [ 83.517349][ T5613] Bluetooth: hci0: command tx timeout [ 83.554114][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.584466][ T5614] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.601517][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.620745][ T5614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.650533][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.668114][ T5614] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.703051][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.757486][ T5613] Bluetooth: hci2: command tx timeout [ 83.758354][ T5613] Bluetooth: hci3: command tx timeout [ 83.803517][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.851133][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.855640][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.873599][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.882440][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.912632][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.954749][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.993240][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.124432][ T5617] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.151654][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.176392][ T5617] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.210945][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.216476][ T5617] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.252296][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.274691][ T5617] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.313239][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.446475][ T5620] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.498470][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.503605][ T5620] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.534247][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.538505][ T5620] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.570644][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.584382][ T5620] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.616417][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.650007][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.743446][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.794943][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.795187][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.839390][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.844806][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.845329][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.955968][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.990606][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.995574][ T4814] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.995709][ T4814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.048241][ T1193] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.048377][ T1193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.125635][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.207950][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.208080][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.232523][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.265273][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.265430][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.384864][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.421675][ T4814] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.421821][ T4814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.479079][ T4814] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.479237][ T4814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.597297][ T4922] Bluetooth: hci1: command tx timeout [ 85.597383][ T5613] Bluetooth: hci0: command tx timeout [ 85.837967][ T4922] Bluetooth: hci2: command tx timeout [ 85.838040][ T5613] Bluetooth: hci3: command tx timeout [ 86.186012][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.504534][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.618840][ T5614] veth0_vlan: entered promiscuous mode [ 86.706266][ T5614] veth1_vlan: entered promiscuous mode [ 86.771640][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.838830][ T5610] veth0_vlan: entered promiscuous mode [ 86.912814][ T5610] veth1_vlan: entered promiscuous mode [ 86.941879][ T5614] veth0_macvtap: entered promiscuous mode [ 86.975760][ T5614] veth1_macvtap: entered promiscuous mode [ 87.015118][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.056455][ T5617] veth0_vlan: entered promiscuous mode [ 87.079046][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.097394][ T5610] veth0_macvtap: entered promiscuous mode [ 87.112730][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.113638][ T5617] veth1_vlan: entered promiscuous mode [ 87.136682][ T5610] veth1_macvtap: entered promiscuous mode [ 87.174643][ T1193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.194459][ T1193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.209515][ T1193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.214591][ T1193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.376278][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.502298][ T5620] veth0_vlan: entered promiscuous mode [ 87.530961][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.578686][ T5617] veth0_macvtap: entered promiscuous mode [ 87.601551][ T1193] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.605681][ T1193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.626582][ T1193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.630988][ T5620] veth1_vlan: entered promiscuous mode [ 87.656231][ T1193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.663494][ T5617] veth1_macvtap: entered promiscuous mode [ 87.690832][ T5613] Bluetooth: hci0: command tx timeout [ 87.690860][ T5613] Bluetooth: hci1: command tx timeout [ 87.773022][ T1193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.773046][ T1193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.928376][ T4922] Bluetooth: hci3: command tx timeout [ 87.928404][ T4922] Bluetooth: hci2: command tx timeout [ 87.984709][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.082183][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.082198][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.121605][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.192647][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.192665][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.221775][ T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.223726][ T67] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.231455][ T67] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.235420][ T5620] veth0_macvtap: entered promiscuous mode [ 88.264225][ T67] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.325439][ T5620] veth1_macvtap: entered promiscuous mode [ 88.372913][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.372930][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.732762][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.788953][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.861173][ T126] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.878907][ T126] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.880739][ T126] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.880843][ T126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.880856][ T126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.883477][ T126] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.083320][ T5613] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 89.083340][ T5613] Bluetooth: Wrong link type (-22) [ 89.372427][ T2222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.372446][ T2222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.466448][ T5764] syz.2.6 uses obsolete (PF_INET,SOCK_PACKET) [ 89.856170][ T5711] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 89.996425][ T5771] [U] [ 89.996505][ T5771] [U] [ 89.996522][ T5771] [U] [ 89.996539][ T5771] [U] [ 89.996616][ T5771] [U] [ 89.996633][ T5771] [U] [ 89.996650][ T5771] [U] [ 89.996667][ T5771] [U] [ 89.997182][ T5771] [U] [ 89.997207][ T5771] [U] [ 89.997225][ T5771] [U] [ 89.997243][ T5771] [U] [ 89.997318][ T5771] [U] [ 89.997336][ T5771] [U] [ 89.997354][ T5771] [U] [ 89.997371][ T5771] [U] [ 89.997453][ T5771] [U] [ 89.997470][ T5771] [U] [ 89.997486][ T5771] [U] [ 89.997503][ T5771] [U] [ 89.997577][ T5771] [U] [ 89.997594][ T5771] [U] [ 89.997610][ T5771] [U] [ 89.997627][ T5771] [U] [ 89.997711][ T5771] [U] [ 89.997729][ T5771] [U] [ 89.997746][ T5771] [U] [ 89.997762][ T5771] [U] [ 89.997837][ T5771] [U] [ 89.997854][ T5771] [U] [ 89.997871][ T5771] [U] [ 89.997888][ T5771] [U] [ 89.997968][ T5771] [U] [ 89.997985][ T5771] [U] [ 89.998001][ T5771] [U] [ 89.998019][ T5771] [U] [ 89.998035][ T5771] [U] [ 89.998111][ T5771] [U] [ 89.998128][ T5771] [U] [ 89.998145][ T5771] [U] [ 89.998162][ T5771] [U] [ 89.998250][ T5771] [U] [ 89.998268][ T5771] [U] [ 89.998285][ T5771] [U] [ 89.998303][ T5771] [U] [ 89.998379][ T5771] [U] [ 89.998397][ T5771] [U] [ 89.998414][ T5771] [U] [ 89.998431][ T5771] [U] [ 89.998513][ T5771] [U] [ 89.998530][ T5771] [U] [ 89.998547][ T5771] [U] [ 89.998564][ T5771] [U] [ 89.998637][ T5771] [U] [ 89.998655][ T5771] [U] [ 89.998671][ T5771] [U] [ 89.998688][ T5771] [U] [ 89.998772][ T5771] [U] [ 89.998789][ T5771] [U] [ 89.998807][ T5771] [U] [ 89.998823][ T5771] [U] [ 89.998898][ T5771] [U] [ 89.998914][ T5771] [U] [ 89.998931][ T5771] [U] [ 89.998949][ T5771] [U] [ 89.999029][ T5771] [U] [ 89.999047][ T5771] [U] [ 89.999064][ T5771] [U] [ 89.999080][ T5771] [U] [ 89.999154][ T5771] [U] [ 89.999171][ T5771] [U] [ 89.999188][ T5771] [U] [ 89.999222][ T5771] [U] [ 90.006067][ T5771] [U] [ 90.006103][ T5771] [U] [ 90.006135][ T5771] [U] [ 90.006168][ T5771] [U] [ 90.006318][ T5771] [U] [ 90.006351][ T5771] [U] [ 90.006384][ T5771] [U] [ 90.006416][ T5771] [U] [ 90.006570][ T5771] [U] [ 90.006603][ T5771] [U] [ 90.006635][ T5771] [U] [ 90.006667][ T5771] [U] [ 90.006805][ T5771] [U] [ 90.006836][ T5771] [U] [ 90.006867][ T5771] [U] [ 90.006899][ T5771] [U] [ 90.007046][ T5771] [U] [ 90.007077][ T5771] [U] [ 90.007121][ T5771] [U] [ 90.007152][ T5771] [U] [ 90.007297][ T5771] [U] [ 90.007330][ T5771] [U] [ 90.007364][ T5771] [U] [ 90.007395][ T5771] [U] [ 90.014115][ T5771] [U] [ 90.014152][ T5771] [U] [ 90.014185][ T5771] [U] [ 90.014223][ T5771] [U] [ 90.014368][ T5771] [U] [ 90.014400][ T5771] [U] [ 90.014431][ T5771] [U] [ 90.014462][ T5771] [U] [ 90.014620][ T5771] [U] [ 90.014652][ T5771] [U] [ 90.014683][ T5771] [U] [ 90.014713][ T5771] [U] [ 90.014852][ T5771] [U] [ 90.014884][ T5771] [U] [ 90.014915][ T5771] [U] [ 90.014946][ T5771] [U] [ 90.015097][ T5771] [U] [ 90.015128][ T5771] [U] [ 90.015161][ T5771] [U] [ 90.015198][ T5771] [U] [ 90.015374][ T5771] [U] [ 90.015408][ T5771] [U] [ 90.015441][ T5771] [U] [ 90.015473][ T5771] [U] [ 90.015623][ T5771] [U] [ 90.015655][ T5771] [U] [ 90.015687][ T5771] [U] [ 90.015717][ T5771] [U] [ 90.015832][ T5771] [U] [ 90.015863][ T5771] [U] [ 90.015895][ T5771] [U] [ 90.026263][ T5770] [U] [ 90.273842][ T5711] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 90.273886][ T5711] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 90.273908][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.646776][ T5711] usb 1-1: string descriptor 0 read error: -71 [ 90.651390][ T5711] hub 1-1:32.0: bad descriptor, ignoring hub [ 90.651424][ T5711] hub 1-1:32.0: probe with driver hub failed with error -5 [ 90.759204][ T822] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.905456][ T1193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.905475][ T1193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.002230][ T822] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 91.002256][ T822] usb 4-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config [ 91.002276][ T822] usb 4-1: config 220 has no interface number 2 [ 91.002329][ T822] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 91.002354][ T822] usb 4-1: config 220 interface 0 has no altsetting 0 [ 91.002372][ T822] usb 4-1: config 220 interface 76 has no altsetting 0 [ 91.002390][ T822] usb 4-1: config 220 interface 1 has no altsetting 0 [ 91.076727][ T822] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 91.076754][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.076773][ T822] usb 4-1: Product: syz [ 91.076786][ T822] usb 4-1: Manufacturer: syz [ 91.076801][ T822] usb 4-1: SerialNumber: syz [ 91.397552][ T5711] usb 1-1: USB disconnect, device number 2 [ 92.000938][ T1183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.000957][ T1183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.008078][ T5712] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 92.433520][ T5712] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 92.433548][ T5712] usb 3-1: config 8 has an invalid descriptor of length 255, skipping remainder of the config [ 92.433567][ T5712] usb 3-1: config 8 has no interface number 0 [ 92.433606][ T5712] usb 3-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 92.438668][ T5712] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 92.438695][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.438715][ T5712] usb 3-1: Product: syz [ 92.438727][ T5712] usb 3-1: Manufacturer: syz [ 92.438741][ T5712] usb 3-1: SerialNumber: syz [ 93.666129][ T5712] usb 3-1: USB disconnect, device number 2 [ 94.090533][ T822] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 94.090572][ T822] uvcvideo 4-1:220.0: No valid video chain found. [ 94.152764][ T822] usb 4-1: selecting invalid altsetting 0 [ 94.214341][ T5711] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 94.223730][ T822] usb 4-1: selecting invalid altsetting 0 [ 94.223765][ T822] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 94.408992][ T822] usb 4-1: USB disconnect, device number 2 [ 94.618869][ T5711] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 94.618900][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.618920][ T5711] usb 1-1: Product: syz [ 94.618934][ T5711] usb 1-1: Manufacturer: syz [ 94.618948][ T5711] usb 1-1: SerialNumber: syz [ 95.377054][ T5817] input: syz1 as /devices/virtual/input/input5 [ 95.423173][ T5711] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 95.423236][ T5711] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 96.299061][ T5825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 96.687671][ T5711] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 96.821927][ T5837] capability: warning: `syz.3.21' uses 32-bit capabilities (legacy support in use) [ 96.822249][ T5837] program syz.3.21 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.057208][ T5711] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO [ 97.059072][ T5711] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 97.059130][ T5711] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 97.072797][ T5711] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 97.163463][ T5711] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 97.189030][ T5838] netlink: 763 bytes leftover after parsing attributes in process `syz.1.20'. [ 97.214099][ T5838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'. [ 97.400656][ T5711] usb 1-1: USB disconnect, device number 3 [ 97.662694][ T5845] loop3: detected capacity change from 0 to 519 [ 97.959364][ T5854] netlink: 68 bytes leftover after parsing attributes in process `syz.2.26'. [ 98.570798][ T5873] program syz.0.31 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.862515][ T5880] loop3: detected capacity change from 0 to 3511 [ 98.892029][ T5713] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.077673][ T5713] usb 2-1: Using ep0 maxpacket: 8 [ 99.099430][ T5713] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.099464][ T5713] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 99.099504][ T5713] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 99.099527][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.143844][ T5713] usb 2-1: config 0 descriptor?? [ 99.592225][ T5877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.595862][ T5877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.691268][ T5713] hid-picolcd 0003:04D8:C002.0001: unexpected long global item [ 99.705309][ T5711] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 99.708203][ T5713] hid-picolcd 0003:04D8:C002.0001: device report parse failed [ 99.708264][ T5713] hid-picolcd 0003:04D8:C002.0001: probe with driver hid-picolcd failed with error -22 [ 99.813153][ T5877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.814470][ T5877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.829122][ T5713] usb 2-1: USB disconnect, device number 2 [ 99.901247][ T5711] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.901273][ T5711] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.902361][ T5711] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 0.00 [ 99.902385][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 99.902397][ T5711] usb 3-1: SerialNumber: syz [ 99.972680][ T5711] usb 3-1: 0:2 : does not exist [ 100.387079][ T5888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.387602][ T5888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.434590][ T5909] tmpfs: Unknown parameter 'obj_role' [ 100.435381][ T5909] tmpfs: Unknown parameter 'obj_role' [ 100.436385][ T5909] tmpfs: Unknown parameter 'obj_role' [ 100.439036][ T5909] tmpfs: Unknown parameter 'obj_role' [ 100.439524][ T5909] tmpfs: Unknown parameter 'obj_role' [ 100.439943][ T5909] tmpfs: Unknown parameter 'obj_role' [ 100.440605][ T5909] tmpfs: Unknown parameter 'obj_role' [ 100.442000][ T5909] tmpfs: Unknown parameter 'obj_role' [ 100.446320][ T5909] tmpfs: Unknown parameter 'obj_role' [ 100.452316][ T5909] tmpfs: Unknown parameter 'obj_role' [ 100.452729][ T5909] tmpfs: Unknown parameter 'obj_role' [ 100.453099][ T5909] tmpfs: Unknown parameter 'obj_role' [ 100.453506][ T5909] tmpfs: Unknown parameter 'obj_role' [ 100.454159][ T5909] tmpfs: Unknown parameter 'obj_role' [ 100.455152][ T5909] tmpfs: Unknown parameter 'obj_role' [ 100.457459][ T5909] tmpfs: Unknown parameter 'obj_role' [ 100.460013][ T5909] tmpfs: Unknown parameter 'obj_role' [ 100.461768][ T5909] tmpfs: Unknown parameter 'obj_role' [ 100.463904][ T5909] tmpfs: Unknown parameter 'obj_role' [ 100.464327][ T5909] tmpfs: Unknown parameter 'obj_role' [ 100.465293][ T5909] tmpfs: Unknown parameter 'obj_role' [ 100.471789][ T5909] tmpfs: Unknown parameter 'obj_role' [ 100.480519][ T5909] tmpfs: Unknown parameter 'obj_role' [ 100.480977][ T5909] tmpfs: Unknown parameter 'obj_role' [ 100.482356][ T5909] tmpfs: Unknown parameter 'obj_role' [ 100.483229][ T5909] tmpfs: Unknown parameter 'obj_role' [ 100.484602][ T5909] tmpfs: Unknown parameter 'obj_role' [ 100.486210][ T5909] tmpfs: Unknown parameter 'obj_role' [ 100.489605][ T5909] tmpfs: Unknown parameter 'obj_role' [ 100.490477][ T5909] tmpfs: Unknown parameter 'obj_role' [ 100.491569][ T5909] tmpfs: Unknown parameter 'obj_role' [ 100.492843][ T5909] tmpfs: Unknown parameter 'obj_role' [ 100.493924][ T5909] tmpfs: Unknown parameter 'obj_role' [ 100.645815][ T5913] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.906128][ T5711] usb 3-1: USB disconnect, device number 3 [ 101.126347][ T822] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 101.269386][ T822] usb 1-1: device descriptor read/64, error -71 [ 101.270946][ T5925] program syz.1.44 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.316023][ T5928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.317573][ T5928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.523749][ T822] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 101.544866][ T5339] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 101.550894][ T5941] Zero length message leads to an empty skb [ 101.655431][ T822] usb 1-1: device descriptor read/64, error -71 [ 101.709682][ T5339] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 101.709710][ T5339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.709729][ T5339] usb 3-1: Product: syz [ 101.709743][ T5339] usb 3-1: Manufacturer: syz [ 101.709756][ T5339] usb 3-1: SerialNumber: syz [ 101.710461][ T5948] overlayfs: unescaped trailing colons in lowerdir mount option. [ 101.770278][ T822] usb usb1-port1: attempt power cycle [ 102.069210][ T5339] rtl8150 3-1:1.0: couldn't reset the device [ 102.069570][ T5339] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 102.161279][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.52'. [ 102.164126][ T5339] usb 3-1: USB disconnect, device number 4 [ 102.182868][ T822] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 102.203499][ T822] usb 1-1: device descriptor read/8, error -71 [ 102.354520][ T5711] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.449443][ T822] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 102.467987][ T822] usb 1-1: device descriptor read/8, error -71 [ 102.529067][ T5711] usb 4-1: Using ep0 maxpacket: 8 [ 102.538685][ T5711] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 102.538711][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.538731][ T5711] usb 4-1: Product: syz [ 102.538745][ T5711] usb 4-1: Manufacturer: syz [ 102.538760][ T5711] usb 4-1: SerialNumber: syz [ 102.547252][ T5769] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.585383][ T822] usb usb1-port1: unable to enumerate USB device [ 102.621111][ T5711] usb 4-1: config 0 descriptor?? [ 102.704132][ T5769] usb 2-1: unable to get BOS descriptor or descriptor too short [ 102.705319][ T5769] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1040, setting to 1024 [ 102.734889][ T5769] usb 2-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 102.734917][ T5769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.734935][ T5769] usb 2-1: Product: syz [ 102.734947][ T5769] usb 2-1: Manufacturer: syz [ 102.734961][ T5769] usb 2-1: SerialNumber: syz [ 102.827067][ T5711] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 103.048756][ T5769] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 103.093390][ T5769] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 103.119773][ T5769] usb 2-1: unable to issue vendor read request (ret = -71) [ 103.120248][ T5769] usb 2-1: unable to issue vendor read request (ret = -71) [ 103.120985][ T5769] usb 2-1: unable to issue vendor read request (ret = -71) [ 103.121465][ T5769] usb 2-1: unable to issue vendor read request (ret = -71) [ 103.278880][ T5769] usb 2-1: USB disconnect, device number 3 [ 103.468252][ T5979] program syz.2.58 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.532639][ T5711] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 103.918532][ T5613] Bluetooth: hci0: SCO packet too small [ 104.034229][ T5990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.61'. [ 104.259903][ T5711] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 104.287311][ T5996] netlink: 'syz.1.63': attribute type 10 has an invalid length. [ 104.340328][ T5996] team0: Port device vlan0 added [ 104.437246][ T5711] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.437278][ T5711] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.437312][ T5711] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 104.437334][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.464402][ T5711] usb 1-1: config 0 descriptor?? [ 104.633528][ T6007] loop3: detected capacity change from 0 to 3087 [ 104.646948][ T44] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 104.806541][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 104.815666][ T44] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.815704][ T44] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 104.830975][ T44] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 104.831003][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.831022][ T44] usb 3-1: Product: syz [ 104.831036][ T44] usb 3-1: Manufacturer: syz [ 104.831050][ T44] usb 3-1: SerialNumber: syz [ 104.848763][ T6011] netlink: 'syz.1.67': attribute type 10 has an invalid length. [ 104.912107][ T44] usb 3-1: config 0 descriptor?? [ 104.922290][ T5711] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 104.922325][ T5711] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 104.922350][ T5711] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 104.922375][ T5711] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 104.922400][ T5711] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 104.922424][ T5711] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 104.922449][ T5711] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 104.933387][ T6011] team0: Cannot enslave team device to itself [ 105.065878][ T44] radioshark2 3-1:0.0: Invalid radioSHARK2 device [ 105.065911][ T44] radioshark2 3-1:0.0: probe with driver radioshark2 failed with error -22 [ 105.066406][ T44] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 105.090216][ T5711] pyra 0003:1E7D:2CF6.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 105.137940][ T5711] pyra 0003:1E7D:2CF6.0002: couldn't init struct pyra_device [ 105.137994][ T5711] pyra 0003:1E7D:2CF6.0002: couldn't install mouse [ 105.213484][ T5769] usb 4-1: USB disconnect, device number 3 [ 105.322150][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70'. [ 105.322251][ T5711] pyra 0003:1E7D:2CF6.0002: probe with driver pyra failed with error -32 [ 105.358505][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70'. [ 105.407026][ T6021] program syz.3.69 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.513483][ T5711] usb 1-1: USB disconnect, device number 8 [ 105.833246][ T9] usb 3-1: USB disconnect, device number 5 [ 105.909532][ T5711] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 105.954473][ T6032] netlink: 'syz.2.74': attribute type 2 has an invalid length. [ 106.071618][ T5711] usb 1-1: device descriptor read/64, error -71 [ 106.116360][ T6034] loop3: detected capacity change from 0 to 1239 [ 106.456959][ T5711] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 106.587262][ T5711] usb 1-1: device descriptor read/64, error -71 [ 106.709327][ T5711] usb usb1-port1: attempt power cycle [ 106.996550][ T6061] program syz.2.83 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.052217][ T5711] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 107.084959][ T5711] usb 1-1: device descriptor read/8, error -71 [ 107.324722][ T5711] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 107.356048][ T5711] usb 1-1: device descriptor read/8, error -71 [ 107.375187][ T5769] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 107.466895][ T5711] usb usb1-port1: unable to enumerate USB device [ 107.526792][ T5769] usb 2-1: Using ep0 maxpacket: 16 [ 107.532396][ T5769] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 107.532423][ T5769] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.573382][ T5769] usb 2-1: config 0 descriptor?? [ 107.586535][ T5769] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 107.796718][ T5769] usb 2-1: Detected FT232A [ 107.841827][ T5769] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 108.318281][ T6084] netlink: 'syz.3.90': attribute type 16 has an invalid length. [ 108.318301][ T6084] netlink: 'syz.3.90': attribute type 2 has an invalid length. [ 108.328990][ T37] audit: type=1326 audit(1781420532.690:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6085 comm="syz.2.91" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f461846ce59 code=0xffff0000 [ 108.622666][ T5711] usb 2-1: USB disconnect, device number 4 [ 108.696061][ T6090] program syz.3.93 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.747338][ T5711] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 108.781228][ T5711] ftdi_sio 2-1:0.0: device disconnected [ 109.142398][ T5769] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 109.294710][ T5769] usb 1-1: Using ep0 maxpacket: 16 [ 109.302838][ T5769] usb 1-1: config 0 has an invalid interface number: 243 but max is 0 [ 109.302862][ T5769] usb 1-1: config 0 has no interface number 0 [ 109.302892][ T5769] usb 1-1: config 0 interface 243 has no altsetting 0 [ 109.308504][ T6099] ./bus: Can't lookup blockdev [ 109.334154][ T5769] usb 1-1: New USB device found, idVendor=2639, idProduct=0001, bcdDevice=62.c2 [ 109.334181][ T5769] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.334201][ T5769] usb 1-1: Product: syz [ 109.334214][ T5769] usb 1-1: Manufacturer: syz [ 109.334228][ T5769] usb 1-1: SerialNumber: syz [ 109.391712][ T5769] usb 1-1: config 0 descriptor?? [ 109.811120][ T5769] usbhid 1-1:0.243: couldn't find an input interrupt endpoint [ 109.828839][ T5769] usb 1-1: USB disconnect, device number 13 [ 110.504074][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.100'. [ 110.517690][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.100'. [ 111.008824][ T5769] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 111.202667][ T5769] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1159, setting to 1024 [ 111.203793][ T5769] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 111.203818][ T5769] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 111.203837][ T5769] usb 1-1: Manufacturer: syz [ 111.219556][ T5769] usb 1-1: config 0 descriptor?? [ 111.227756][ T6123] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 111.258142][ T5769] uvcvideo 1-1:0.0: Found UVC 0.00 device (18ec:3288) [ 111.258174][ T5769] uvcvideo 1-1:0.0: No valid video chain found. [ 111.460862][ T5713] usb 1-1: USB disconnect, device number 14 [ 111.592228][ T6126] loop5: detected capacity change from 0 to 7 [ 111.636300][ T6126] Dev loop5: unable to read RDB block 7 [ 111.636329][ T6126] loop5: AHDI p1 [ 111.636342][ T6126] loop5: partition table partially beyond EOD, truncated [ 111.878415][ T6131] program syz.3.105 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.010469][ T5613] Bluetooth: Frame is too long (len 18, expected len 4) [ 112.430323][ T5713] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 112.590734][ T5713] usb 3-1: Using ep0 maxpacket: 32 [ 112.593335][ T5713] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 112.593359][ T5713] usb 3-1: config 0 has no interface number 0 [ 112.593399][ T5713] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 112.593426][ T5713] usb 3-1: config 0 interface 85 has no altsetting 0 [ 112.596355][ T5713] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 112.596381][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.596401][ T5713] usb 3-1: Product: syz [ 112.596415][ T5713] usb 3-1: Manufacturer: syz [ 112.596429][ T5713] usb 3-1: SerialNumber: syz [ 112.671850][ T5713] usb 3-1: config 0 descriptor?? [ 113.094881][ T5713] appletouch 3-1:0.85: Geyser mode initialized. [ 113.113595][ T5713] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input6 [ 113.186389][ T5711] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 113.331522][ T6137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.348038][ T6137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.456937][ T5711] usb 4-1: Using ep0 maxpacket: 8 [ 113.464878][ T5711] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 113.464904][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.472689][ C1] appletouch 3-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 113.508223][ T5711] usb 4-1: config 0 descriptor?? [ 113.534029][ T5711] gm12u320 4-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 113.534089][ T5711] gm12u320 4-1:0.0: probe with driver gm12u320 failed with error -5 [ 113.574012][ T5711] usb-storage 4-1:0.0: USB Mass Storage device detected [ 113.594312][ T5711] usb-storage 4-1:0.0: device ignored [ 113.704628][ T6137] netlink: 52 bytes leftover after parsing attributes in process `syz.2.103'. [ 114.040675][ T44] usb 3-1: USB disconnect, device number 6 [ 114.149196][ T5711] usb 4-1: USB disconnect, device number 4 [ 114.397530][ T44] appletouch 3-1:0.85: input: appletouch disconnected [ 114.601449][ T6181] loop5: detected capacity change from 0 to 7 [ 114.602941][ T6181] Dev loop5: unable to read RDB block 7 [ 114.602962][ T6181] loop5: AHDI p1 [ 114.602977][ T6181] loop5: partition table partially beyond EOD, truncated [ 114.715527][ T5711] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 114.847808][ T5711] usb 2-1: device descriptor read/64, error -71 [ 114.883999][ T6185] overlayfs: conflicting lowerdir path [ 114.889646][ T6189] program syz.2.118 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.057356][ T6195] netlink: 188 bytes leftover after parsing attributes in process `syz.0.120'. [ 115.121819][ T5711] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 115.181420][ T5613] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 115.181433][ T5613] Bluetooth: Wrong link type (-22) [ 115.269660][ T5711] usb 2-1: device descriptor read/64, error -71 [ 115.396431][ T5711] usb usb2-port1: attempt power cycle [ 115.624709][ T6211] loop5: detected capacity change from 0 to 7 [ 115.631953][ T6211] Dev loop5: unable to read RDB block 7 [ 115.631976][ T6211] loop5: AHDI p1 [ 115.631992][ T6211] loop5: partition table partially beyond EOD, truncated [ 115.704006][ T6206] netlink: 168 bytes leftover after parsing attributes in process `syz.3.123'. [ 115.754850][ T5711] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 115.779522][ T5711] usb 2-1: device descriptor read/8, error -71 [ 115.821802][ T6219] netlink: 52 bytes leftover after parsing attributes in process `syz.2.126'. [ 116.043912][ T5711] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 116.066394][ T5711] usb 2-1: device descriptor read/8, error -71 [ 116.182204][ T5711] usb usb2-port1: unable to enumerate USB device [ 116.217953][ T10] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 116.353040][ T10] usb 1-1: device descriptor read/64, error -71 [ 116.436141][ T6239] tipc: MTU too low for tipc bearer [ 116.506474][ T5613] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 116.506493][ T5613] Bluetooth: Wrong link type (-22) [ 116.612592][ T10] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 116.695480][ T6249] program syz.3.132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.754641][ T10] usb 1-1: device descriptor read/64, error -71 [ 116.837380][ T822] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 116.858110][ T10] usb usb1-port1: attempt power cycle [ 116.992002][ T822] usb 3-1: Invalid ep0 maxpacket: 64 [ 117.126279][ T822] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 117.229516][ T10] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 117.253319][ T10] usb 1-1: device descriptor read/8, error -71 [ 117.286766][ T6260] random: crng reseeded on system resumption [ 117.292830][ T822] usb 3-1: Invalid ep0 maxpacket: 64 [ 117.293228][ T822] usb usb3-port1: attempt power cycle [ 117.412343][ T6263] loop5: detected capacity change from 0 to 7 [ 117.414551][ T6263] Dev loop5: unable to read RDB block 7 [ 117.414569][ T6263] loop5: AHDI p1 [ 117.414579][ T6263] loop5: partition table partially beyond EOD, truncated [ 117.506354][ T6265] Invalid source name [ 117.506366][ T6265] UBIFS error (pid: 6265): cannot open "/dev/sg0", error -22 [ 117.519333][ T10] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 117.546212][ T10] usb 1-1: device descriptor read/8, error -71 [ 117.653474][ T10] usb usb1-port1: unable to enumerate USB device [ 117.664660][ T822] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 117.685354][ T822] usb 3-1: Invalid ep0 maxpacket: 64 [ 117.783614][ T6278] netlink: 168 bytes leftover after parsing attributes in process `syz.1.136'. [ 117.828046][ T822] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 117.849281][ T822] usb 3-1: Invalid ep0 maxpacket: 64 [ 117.855985][ T822] usb usb3-port1: unable to enumerate USB device [ 117.889923][ T5713] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 118.056364][ T5713] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 118.056392][ T5713] usb 4-1: config 0 has no interface number 0 [ 118.056445][ T5713] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 118.056459][ T5713] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.056470][ T5713] usb 4-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.056484][ T5713] usb 4-1: config 0 interface 1 has no altsetting 0 [ 118.057535][ T5713] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 118.057561][ T5713] usb 4-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 118.057580][ T5713] usb 4-1: Manufacturer: syz [ 118.061343][ T5713] usb 4-1: config 0 descriptor?? [ 118.298998][ T5713] usbhid 4-1:0.1: can't add hid device: -71 [ 118.299127][ T5713] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 118.326308][ T5713] usb 4-1: USB disconnect, device number 5 [ 118.724379][ T5713] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 118.890503][ T5713] usb 4-1: config 0 interface 0 has no altsetting 0 [ 118.890543][ T5713] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 118.890566][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.914894][ T5713] usb 4-1: config 0 descriptor?? [ 119.159883][ T5613] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 119.159927][ T5613] Bluetooth: Wrong link type (-22) [ 119.250051][ T6292] program syz.0.141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.802350][ T6302] loop5: detected capacity change from 0 to 7 [ 119.818973][ T6302] Dev loop5: unable to read RDB block 7 [ 119.818999][ T6302] loop5: AHDI p1 [ 119.819016][ T6302] loop5: partition table partially beyond EOD, truncated [ 120.156425][ T44] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 120.228704][ T5713] video4linux radio48: keene_cmd_main failed (-71) [ 120.228729][ T5713] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 120.270804][ T5713] usb 4-1: USB disconnect, device number 6 [ 120.277082][ T6313] bpf: Bad value for 'mode' [ 120.315775][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 120.329375][ T44] usb 3-1: unable to get BOS descriptor or descriptor too short [ 120.331670][ T44] usb 3-1: config 1 has an invalid interface number: 1 but max is 0 [ 120.331692][ T44] usb 3-1: config 1 has no interface number 0 [ 120.331733][ T44] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 120.331757][ T44] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 120.339942][ T44] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice= 0.40 [ 120.339976][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.339994][ T44] usb 3-1: Product: syz [ 120.340007][ T44] usb 3-1: Manufacturer: syz [ 120.340020][ T44] usb 3-1: SerialNumber: syz [ 120.552542][ T5613] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 120.552561][ T5613] Bluetooth: Wrong link type (-22) [ 120.611342][ T6305] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 120.689785][ T6317] dvmrp2: entered allmulticast mode [ 120.822049][ T6305] netlink: 763 bytes leftover after parsing attributes in process `syz.2.147'. [ 120.880265][ T44] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 120.996850][ T6327] program syz.0.153 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.135673][ T5712] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 121.166391][ T44] usb 3-1: USB disconnect, device number 11 [ 121.305424][ T5712] usb 4-1: unable to get BOS descriptor or descriptor too short [ 121.307307][ T5712] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.307329][ T5712] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 121.307377][ T5712] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 121.307431][ T5712] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 121.307471][ T5712] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 121.307486][ T5712] usb 4-1: config 1 interface 1 has no altsetting 0 [ 121.310496][ T5712] usb 4-1: string descriptor 0 read error: -22 [ 121.310603][ T5712] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 121.310615][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.445594][ T5769] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 121.482220][ T6331] comedi comedi3: comedi_test: 256 microvolt, 5 microsecond waveform attached [ 121.590455][ T5769] usb 2-1: device descriptor read/64, error -71 [ 121.660407][ T6335] netlink: 24 bytes leftover after parsing attributes in process `syz.2.155'. [ 121.671143][ T6334] loop5: detected capacity change from 0 to 7 [ 121.682544][ T6334] Dev loop5: unable to read RDB block 7 [ 121.682563][ T6334] loop5: AHDI p1 [ 121.682595][ T6334] loop5: partition table partially beyond EOD, truncated [ 121.849244][ T5769] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 121.985742][ T5769] usb 2-1: device descriptor read/64, error -71 [ 122.096716][ T5769] usb usb2-port1: attempt power cycle [ 122.284305][ T822] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 122.286394][ T5613] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 122.286409][ T5613] Bluetooth: Wrong link type (-22) [ 122.423705][ T6325] netlink: 182 bytes leftover after parsing attributes in process `syz.3.152'. [ 122.457447][ T5769] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 122.469337][ T5712] usb 4-1: 2:0: failed to get current value for ch 1 (-71) [ 122.477836][ T822] usb 3-1: Using ep0 maxpacket: 32 [ 122.480657][ T5769] usb 2-1: device descriptor read/8, error -71 [ 122.503656][ T5712] usb 4-1: Warning! Unlikely big volume step count (=13971), linear volume or wrong cval->res? [ 122.503678][ T5712] usb 4-1: [2] FU [Speaker Playback Volume] ch = 1, val = -19108/-5137/1 [ 122.533116][ T822] usb 3-1: unable to get BOS descriptor or descriptor too short [ 122.535540][ T822] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 122.571940][ T822] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 122.571966][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.571982][ T822] usb 3-1: Product: syz [ 122.571989][ T822] usb 3-1: Manufacturer: syz [ 122.571996][ T822] usb 3-1: SerialNumber: syz [ 122.678618][ T5712] usb 4-1: USB disconnect, device number 7 [ 122.726666][ T5769] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 122.752410][ T5769] usb 2-1: device descriptor read/8, error -71 [ 122.846489][ T822] usb 3-1: Cannot retrieve CPort count: 0 [ 122.846517][ T822] usb 3-1: Cannot retrieve CPort count: -5 [ 122.846537][ T822] es2_ap_driver 3-1:7.0: probe with driver es2_ap_driver failed with error -5 [ 122.857976][ T5769] usb usb2-port1: unable to enumerate USB device [ 122.869619][ T44] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 123.037142][ T44] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 123.037172][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.037191][ T44] usb 1-1: Product: syz [ 123.037204][ T44] usb 1-1: Manufacturer: syz [ 123.037212][ T44] usb 1-1: SerialNumber: syz [ 123.042672][ T44] usb 1-1: config 0 descriptor?? [ 123.058116][ T44] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 123.418665][ T5712] usb 3-1: USB disconnect, device number 12 [ 123.755540][ T5769] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 123.890441][ T5769] usb 4-1: device descriptor read/64, error -71 [ 124.097080][ T6345] capability: warning: `syz.0.160' uses deprecated v2 capabilities in a way that may be insecure [ 124.137192][ T5769] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 124.283680][ T5769] usb 4-1: device descriptor read/64, error -71 [ 124.345954][ T6356] program syz.1.164 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.373353][ T44] gspca_sunplus: reg_w_riv err -71 [ 124.373407][ T44] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 124.382428][ T44] usb 1-1: USB disconnect, device number 19 [ 124.397312][ T5769] usb usb4-port1: attempt power cycle [ 124.456489][ T10] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 124.623904][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.625528][ T10] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 124.625553][ T10] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 124.625573][ T10] usb 3-1: Product: syz [ 124.625586][ T10] usb 3-1: SerialNumber: syz [ 124.631206][ T10] usb 3-1: config 0 descriptor?? [ 124.678229][ T10] usb 3-1: selecting invalid altsetting 1 [ 124.678254][ T10] usb 3-1: Can not set alternate setting to 1, error: -22 [ 124.678273][ T10] synaptics_usb 3-1:0.0: probe with driver synaptics_usb failed with error -22 [ 124.744940][ T5769] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 124.766550][ T5769] usb 4-1: device descriptor read/8, error -71 [ 124.843586][ T6354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.844151][ T6354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.859436][ T6354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.880849][ T6354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.892166][ T6354] netlink: 68 bytes leftover after parsing attributes in process `syz.2.163'. [ 124.933410][ T44] usb 3-1: USB disconnect, device number 13 [ 124.983817][ T6360] loop5: detected capacity change from 0 to 7 [ 124.985084][ T6360] Dev loop5: unable to read RDB block 7 [ 124.985105][ T6360] loop5: AHDI p1 [ 124.985120][ T6360] loop5: partition table partially beyond EOD, truncated [ 125.014652][ T5769] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 125.036168][ T5769] usb 4-1: device descriptor read/8, error -71 [ 125.147818][ T5769] usb usb4-port1: unable to enumerate USB device [ 125.189790][ T5613] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 125.189808][ T5613] Bluetooth: Wrong link type (-22) [ 125.189909][ T5613] Bluetooth: hci0: link tx timeout [ 125.190195][ T5613] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 125.542637][ T6387] program syz.2.174 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.612745][ T6389] loop5: detected capacity change from 0 to 7 [ 125.613886][ T6389] Dev loop5: unable to read RDB block 7 [ 125.613902][ T6389] loop5: AHDI p1 [ 125.613912][ T6389] loop5: partition table partially beyond EOD, truncated [ 125.650245][ T5712] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 125.806243][ T5712] usb 2-1: config 0 has an invalid descriptor of length 226, skipping remainder of the config [ 125.806271][ T5712] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 125.808504][ T5712] usb 2-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=c7.b3 [ 125.808530][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.808549][ T5712] usb 2-1: Product: syz [ 125.808562][ T5712] usb 2-1: Manufacturer: syz [ 125.808582][ T5712] usb 2-1: SerialNumber: syz [ 125.814072][ T5712] usb 2-1: config 0 descriptor?? [ 125.991040][ T5613] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 125.991053][ T5613] Bluetooth: Wrong link type (-22) [ 125.991119][ T5613] Bluetooth: hci0: link tx timeout [ 125.991127][ T5613] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 126.046385][ T44] usb 2-1: USB disconnect, device number 13 [ 126.169875][ T6402] process 'syz.2.180' launched '/dev/fd/4' with NULL argv: empty string added [ 126.307290][ T6402] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 126.369040][ T6405] netlink: 14 bytes leftover after parsing attributes in process `syz.0.181'. [ 126.537961][ T6405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.687477][ T6414] loop5: detected capacity change from 0 to 7 [ 126.708597][ T6414] Dev loop5: unable to read RDB block 7 [ 126.708624][ T6414] loop5: AHDI p1 [ 126.708642][ T6414] loop5: partition table partially beyond EOD, truncated [ 126.726143][ T6405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.770433][ T6405] bond0 (unregistering): Released all slaves [ 126.913212][ T5613] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 126.913231][ T5613] Bluetooth: Wrong link type (-22) [ 126.913389][ T5613] Bluetooth: hci2: link tx timeout [ 126.921425][ T5613] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 127.154516][ T6424] program syz.3.188 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.287696][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'. [ 127.322757][ T5613] Bluetooth: hci0: command 0x0406 tx timeout [ 127.344472][ T6426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.189'. [ 127.776004][ T5712] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 127.838151][ T5711] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 127.938119][ T5712] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.938153][ T5712] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 127.938166][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.950158][ T5712] usb 1-1: config 0 descriptor?? [ 127.992115][ T5769] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 127.994436][ T5712] pwc: Askey VC010 type 2 USB webcam detected. [ 127.995133][ T5711] usb 2-1: Using ep0 maxpacket: 16 [ 127.998524][ T5711] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 127.998542][ T5711] usb 2-1: config 1 has no interface number 0 [ 127.998566][ T5711] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 127.998580][ T5711] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 127.998596][ T5711] usb 2-1: config 1 interface 105 has no altsetting 0 [ 128.001067][ T5711] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 128.001082][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 128.001092][ T5711] usb 2-1: Product: syz [ 128.001100][ T5711] usb 2-1: Manufacturer: syz [ 128.001107][ T5711] usb 2-1: SerialNumber: syz [ 128.136462][ T6434] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 128.136787][ T6434] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 128.158554][ T5769] usb 4-1: Using ep0 maxpacket: 32 [ 128.191345][ T5769] usb 4-1: unable to get BOS descriptor or descriptor too short [ 128.210230][ T5769] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 128.231786][ T5769] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 128.231813][ T5769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.231833][ T5769] usb 4-1: Product: syz [ 128.231847][ T5769] usb 4-1: Manufacturer: syz [ 128.231860][ T5769] usb 4-1: SerialNumber: syz [ 128.285379][ T101] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.417540][ T5712] pwc: recv_control_msg error -32 req 02 val 2b00 [ 128.486018][ T5769] usb 4-1: Limiting number of CPorts to U8_MAX [ 128.555598][ T6432] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 128.555773][ T6432] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 128.592014][ T5769] usb 4-1: Not enough endpoints found in device, aborting! [ 128.909917][ T5712] pwc: recv_control_msg error -32 req 02 val 2700 [ 128.969461][ T5769] usb 4-1: USB disconnect, device number 12 [ 128.987785][ T5712] pwc: recv_control_msg error -32 req 02 val 2c00 [ 129.018416][ T5712] pwc: recv_control_msg error -32 req 04 val 1000 [ 129.032444][ T5712] pwc: recv_control_msg error -32 req 04 val 1300 [ 129.058447][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 129.067904][ T5622] Bluetooth: hci2: command 0x0406 tx timeout [ 129.127371][ T5712] pwc: recv_control_msg error -32 req 04 val 1400 [ 129.128069][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 129.134821][ T5712] pwc: recv_control_msg error -32 req 02 val 2000 [ 129.135072][ T5711] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 129.136597][ T5711] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 129.149031][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 129.208809][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 129.235583][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 129.316150][ T5712] pwc: recv_control_msg error -32 req 02 val 2100 [ 129.367546][ T5712] pwc: recv_control_msg error -32 req 04 val 1500 [ 129.581256][ T5711] usb 2-1: USB disconnect, device number 14 [ 129.689263][ T5712] pwc: recv_control_msg error -32 req 02 val 2500 [ 129.711164][ T6451] loop5: detected capacity change from 0 to 7 [ 129.729379][ T6451] Dev loop5: unable to read RDB block 7 [ 129.729405][ T6451] loop5: AHDI p1 [ 129.729424][ T6451] loop5: partition table partially beyond EOD, truncated [ 129.810532][ T5623] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 129.810552][ T5623] Bluetooth: Wrong link type (-22) [ 130.168873][ T6459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.169427][ T6459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.184254][ T101] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.381329][ T5711] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 130.422428][ T5713] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 130.577506][ T5711] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 130.577537][ T5711] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 130.577663][ T5711] usb 2-1: Product: syz [ 130.577678][ T5711] usb 2-1: SerialNumber: syz [ 130.597546][ T5713] usb 4-1: Using ep0 maxpacket: 16 [ 130.638957][ T5713] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 130.638987][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.639007][ T5713] usb 4-1: Product: syz [ 130.639021][ T5713] usb 4-1: Manufacturer: syz [ 130.639035][ T5713] usb 4-1: SerialNumber: syz [ 130.652513][ T101] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.729561][ T5711] usb 2-1: config 0 descriptor?? [ 130.780973][ T5713] usb 4-1: config 0 descriptor?? [ 130.819157][ T5713] gspca_main: spca508-2.14.0 probing 041e:4018 [ 130.823792][ T5712] pwc: recv_control_msg error -71 req 02 val 2400 [ 130.838417][ T5712] pwc: recv_control_msg error -71 req 02 val 2600 [ 130.839842][ T5712] pwc: recv_control_msg error -71 req 02 val 2900 [ 130.840616][ T5712] pwc: recv_control_msg error -71 req 02 val 2800 [ 130.842050][ T5712] pwc: recv_control_msg error -71 req 04 val 1100 [ 130.843343][ T5712] pwc: recv_control_msg error -71 req 04 val 1200 [ 130.947520][ T6465] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 130.997275][ T5713] gspca_spca508: reg_read err -71 [ 130.998846][ T5713] gspca_spca508: reg_read err -71 [ 131.004276][ T5713] gspca_spca508: reg_read err -71 [ 131.011088][ T5713] gspca_spca508: reg_read err -71 [ 131.024673][ T5713] gspca_spca508: reg_read err -71 [ 131.026560][ T5713] gspca_spca508: reg write: error -71 [ 131.026644][ T5713] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 131.073080][ T5711] hso 2-1:0.0: Failed to find BULK eps [ 131.079582][ T5713] usb 4-1: USB disconnect, device number 13 [ 131.081243][ T5712] pwc: Registered as video103. [ 131.122219][ T6465] cramfs: wrong magic [ 131.146785][ T5712] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 131.244099][ T5711] usb 2-1: USB disconnect, device number 15 [ 131.343459][ T5712] usb 1-1: USB disconnect, device number 20 [ 131.447396][ T5623] Bluetooth: hci1: command tx timeout [ 131.483009][ T6472] program syz.0.202 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.570319][ T101] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.884015][ T6481] netlink: 16 bytes leftover after parsing attributes in process `syz.1.204'. [ 131.974025][ T5623] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 131.974044][ T5623] Bluetooth: Wrong link type (-22) [ 131.974142][ T5623] Bluetooth: hci3: link tx timeout [ 131.974288][ T5623] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.011030][ T6486] loop5: detected capacity change from 0 to 7 [ 132.015050][ T6486] Dev loop5: unable to read RDB block 7 [ 132.015072][ T6486] loop5: AHDI p1 [ 132.015087][ T6486] loop5: partition table partially beyond EOD, truncated [ 132.372348][ T6491] netlink: 220 bytes leftover after parsing attributes in process `syz.0.208'. [ 132.463869][ T5712] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 132.506430][ T5711] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 132.618760][ T5712] usb 2-1: Using ep0 maxpacket: 16 [ 132.622549][ T5712] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 132.622575][ T5712] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.622653][ T5712] usb 2-1: config 1 has no interface number 0 [ 132.622698][ T5712] usb 2-1: config 1 interface 105 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 132.622720][ T5712] usb 2-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.622746][ T5712] usb 2-1: config 1 interface 105 has no altsetting 0 [ 132.684219][ T5711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 132.684247][ T5711] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 132.684270][ T5711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 132.684289][ T5711] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 132.690261][ T5712] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 132.690286][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 132.690306][ T5712] usb 2-1: Product: syz [ 132.690319][ T5712] usb 2-1: Manufacturer: syz [ 132.690333][ T5712] usb 2-1: SerialNumber: syz [ 132.769874][ T5711] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 132.769901][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.769920][ T5711] usb 4-1: Product: syz [ 132.769933][ T5711] usb 4-1: Manufacturer: syz [ 132.769947][ T5711] usb 4-1: SerialNumber: syz [ 132.780549][ T101] bridge_slave_1: left allmulticast mode [ 132.780679][ T101] bridge_slave_1: left promiscuous mode [ 132.813658][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.859146][ T5711] usb 4-1: config 0 descriptor?? [ 132.881027][ T5711] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 133.074753][ T5712] aqc111 2-1:1.105: probe with driver aqc111 failed with error -22 [ 133.210534][ T101] bridge_slave_0: left allmulticast mode [ 133.210562][ T101] bridge_slave_0: left promiscuous mode [ 133.210780][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.222375][ T6493] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 133.287008][ T5789] usb 2-1: USB disconnect, device number 16 [ 133.315967][ T5711] scsi host1: usb-storage 4-1:0.0 [ 133.423075][ T5711] usb 4-1: USB disconnect, device number 14 [ 133.526475][ T44] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 133.598511][ T5623] Bluetooth: hci1: command tx timeout [ 133.693072][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 133.716041][ T44] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 133.716067][ T44] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 133.716090][ T44] usb 1-1: config 0 interface 0 has no altsetting 0 [ 133.760131][ T44] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 133.760160][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.760179][ T44] usb 1-1: Product: syz [ 133.760193][ T44] usb 1-1: Manufacturer: syz [ 133.760206][ T44] usb 1-1: SerialNumber: syz [ 133.773186][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.773302][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.877365][ T44] usb 1-1: config 0 descriptor?? [ 134.083819][ T5623] Bluetooth: hci3: command 0x0406 tx timeout [ 134.287016][ T6526] netlink: 20 bytes leftover after parsing attributes in process `syz.3.213'. [ 134.338487][ T44] gs_usb 1-1:0.0: Couldn't get device config: (err=-32) [ 134.338532][ T44] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -32 [ 134.450768][ T44] usb 1-1: USB disconnect, device number 21 [ 134.516373][ T5711] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 134.554114][ T4922] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 134.554132][ T4922] Bluetooth: Wrong link type (-22) [ 134.713711][ T5711] usb 2-1: Using ep0 maxpacket: 8 [ 134.716282][ T5711] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 134.716307][ T5711] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.716326][ T5711] usb 2-1: config 0 has no interface number 0 [ 134.716374][ T5711] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 134.716405][ T5711] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.716430][ T5711] usb 2-1: config 0 interface 52 has no altsetting 0 [ 134.720048][ T5711] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 134.720073][ T5711] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 134.720092][ T5711] usb 2-1: Manufacturer: syz [ 134.820584][ T5711] usb 2-1: config 0 descriptor?? [ 134.832409][ T5711] hub 2-1:0.52: bad descriptor, ignoring hub [ 134.832440][ T5711] hub 2-1:0.52: probe with driver hub failed with error -5 [ 134.863032][ T6533] program syz.3.215 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.172107][ T5711] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input8 [ 135.342106][ T6537] loop8: detected capacity change from 0 to 8 [ 135.366025][ T6537] Dev loop8: unable to read RDB block 8 [ 135.366066][ T6537] loop8: unable to read partition table [ 135.366260][ T6537] loop8: partition table beyond EOD, truncated [ 135.366291][ T6537] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 135.382746][ T6536] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 135.408620][ T6536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.216'. [ 135.730423][ T4922] Bluetooth: hci1: command tx timeout [ 135.833979][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.916420][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.926033][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 135.960238][ T101] bond0 (unregistering): Released all slaves [ 136.081226][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 136.083861][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 136.086410][ T10] usb 4-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 1024 [ 136.086437][ T10] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid wMaxPacketSize 0 [ 136.086458][ T10] usb 4-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 0 [ 136.086481][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 136.114451][ T5268] 8021q: adding VLAN 0 to HW filter on device eth1 [ 136.162899][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 136.162932][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.162949][ T10] usb 4-1: Product: syz [ 136.162962][ T10] usb 4-1: Manufacturer: syz [ 136.162974][ T10] usb 4-1: SerialNumber: syz [ 136.226346][ T6541] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 136.343841][ T44] usb 2-1: USB disconnect, device number 17 [ 136.777144][ T10] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 4 proto 2 vid 0x0525 pid 0xA4A8 [ 136.832859][ T6548] netlink: 24 bytes leftover after parsing attributes in process `syz.0.218'. [ 136.846644][ T10] usb 4-1: USB disconnect, device number 15 [ 136.858544][ T6550] netlink: 140 bytes leftover after parsing attributes in process `syz.1.219'. [ 136.888925][ T10] usblp0: removed [ 136.945233][ T6546] netlink: 28 bytes leftover after parsing attributes in process `syz.0.218'. [ 137.638007][ T4922] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 137.638026][ T4922] Bluetooth: Wrong link type (-22) [ 137.844649][ T6579] program syz.1.224 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.873026][ T4922] Bluetooth: hci1: command tx timeout [ 137.881633][ T6546] netlink: 830 bytes leftover after parsing attributes in process `syz.0.218'. [ 137.915563][ T5268] 8021q: adding VLAN 0 to HW filter on device eth2 [ 138.181707][ T5713] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 138.386788][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.386818][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.386838][ T5713] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 138.386979][ T5713] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 138.387002][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.533243][ T6592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.534067][ T6592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.535109][ T6592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.542284][ T6592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.559043][ T6592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.559544][ T6592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.560835][ T6592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.561325][ T6592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.564336][ T6592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.564878][ T6592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.616437][ T5713] usb 4-1: config 0 descriptor?? [ 138.760631][ T5789] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 139.219744][ T5713] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 139.288539][ T6582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.289099][ T6582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.302327][ T44] usb 4-1: USB disconnect, device number 16 [ 139.521245][ T6609] fido_id[6609]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 140.072363][ T6445] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.073333][ T6445] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.073598][ T6445] bridge_slave_0: entered allmulticast mode [ 140.120967][ T6445] bridge_slave_0: entered promiscuous mode [ 140.149721][ T6445] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.150102][ T6445] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.150374][ T6445] bridge_slave_1: entered allmulticast mode [ 140.210393][ T6445] bridge_slave_1: entered promiscuous mode [ 140.252597][ T6624] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.331122][ T5268] 8021q: adding VLAN 0 to HW filter on device eth3 [ 140.513060][ T101] hsr_slave_0: left promiscuous mode [ 140.553845][ T101] hsr_slave_1: left promiscuous mode [ 140.554881][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.567014][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.606557][ T6640] netlink: 'syz.3.238': attribute type 21 has an invalid length. [ 140.609691][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.609706][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.671006][ T6641] sg_write: data in/out 443356/194 bytes for SCSI command 0x0-- guessing data in; [ 140.671006][ T6641] program syz.3.238 not setting count and/or reply_len properly [ 140.699729][ T101] veth1_macvtap: left promiscuous mode [ 140.699883][ T101] veth0_macvtap: left promiscuous mode [ 140.700072][ T101] veth1_vlan: left promiscuous mode [ 140.700593][ T101] veth0_vlan: left promiscuous mode [ 140.728926][ T5712] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 140.924009][ T5712] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 140.924039][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.924058][ T5712] usb 2-1: Product: syz [ 140.924071][ T5712] usb 2-1: Manufacturer: syz [ 140.924086][ T5712] usb 2-1: SerialNumber: syz [ 140.973890][ T5712] usb 2-1: config 0 descriptor?? [ 141.209528][ T6634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.210147][ T6634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.709516][ T101] team0 (unregistering): Port device team_slave_1 removed [ 141.718955][ T5712] usb 2-1: Firmware version (0.0) predates our first public release. [ 141.718976][ T5712] usb 2-1: Please update to version 0.2 or newer [ 141.770670][ T101] team0 (unregistering): Port device team_slave_0 removed [ 141.963735][ T6640] netlink: 132 bytes leftover after parsing attributes in process `syz.3.238'. [ 142.167328][ T6445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.371254][ T6445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.382414][ T5712] usb 2-1: USB disconnect, device number 19 [ 142.514128][ T6662] netlink: 20 bytes leftover after parsing attributes in process `syz.0.244'. [ 142.514154][ T6662] netlink: 'syz.0.244': attribute type 1 has an invalid length. [ 142.960410][ T6445] team0: Port device team_slave_0 added [ 142.991242][ T6445] team0: Port device team_slave_1 added [ 143.311394][ T6445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.311410][ T6445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.311432][ T6445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.322264][ T6445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.322278][ T6445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.322301][ T6445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.348116][ T5712] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 143.497150][ T5712] usb 2-1: device descriptor read/64, error -71 [ 143.701483][ T6445] hsr_slave_0: entered promiscuous mode [ 143.705768][ T6445] hsr_slave_1: entered promiscuous mode [ 143.802821][ T5712] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 143.956191][ T5712] usb 2-1: device descriptor read/64, error -71 [ 144.076050][ T5712] usb usb2-port1: attempt power cycle [ 144.491863][ T5712] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 144.503433][ T5712] usb 2-1: device descriptor read/8, error -71 [ 144.745310][ T6702] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 144.815101][ T5712] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 144.834163][ T5712] usb 2-1: device descriptor read/8, error -71 [ 144.856352][ T5268] 8021q: adding VLAN 0 to HW filter on device eth4 [ 144.989170][ T5712] usb usb2-port1: unable to enumerate USB device [ 145.019768][ T5789] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 145.173451][ T5789] usb 1-1: Using ep0 maxpacket: 8 [ 145.181613][ T5789] usb 1-1: config 0 has an invalid interface number: 101 but max is 0 [ 145.181638][ T5789] usb 1-1: config 0 has no interface number 0 [ 145.181667][ T5789] usb 1-1: config 0 interface 101 has no altsetting 0 [ 145.181764][ T5789] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 145.181786][ T5789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.302065][ T5789] usb 1-1: config 0 descriptor?? [ 145.342255][ T5789] usb-storage 1-1:0.101: USB Mass Storage device detected [ 145.386865][ T5789] usb-storage 1-1:0.101: device ignored [ 145.524472][ T5789] usb 1-1: USB disconnect, device number 22 [ 146.137934][ T4922] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 146.137948][ T4922] Bluetooth: Wrong link type (-22) [ 146.213680][ T6724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.258'. [ 146.238823][ T6445] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 146.314179][ T6445] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 146.317989][ T6445] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 146.397762][ T6724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.258'. [ 146.398276][ T6445] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 146.398431][ T6724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.258'. [ 146.402008][ T6445] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 146.437135][ T6445] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 146.438344][ T6445] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 146.478516][ T6445] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 146.513814][ T5789] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 146.672613][ T5789] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 146.672639][ T5789] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 146.716982][ T5789] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 146.717012][ T5789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.717032][ T5789] usb 1-1: Product: syz [ 146.717046][ T5789] usb 1-1: Manufacturer: syz [ 146.717059][ T5789] usb 1-1: SerialNumber: syz [ 146.759806][ T5789] usb 1-1: config 0 descriptor?? [ 146.791840][ T5789] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 146.851045][ T6748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.851984][ T6748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.213410][ T6758] nfs: Bad value for 'source' [ 147.319073][ T5789] gspca_sunplus: reg_r err -110 [ 147.319250][ T5789] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 147.387888][ T6445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.420231][ T10] usb 1-1: USB disconnect, device number 23 [ 147.539765][ T6445] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.562507][ T4922] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 147.562526][ T4922] Bluetooth: Wrong link type (-22) [ 147.578154][ T6170] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.578397][ T6170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.643656][ T6170] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.643785][ T6170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.794029][ T5711] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 147.955662][ T5711] usb 4-1: not running at top speed; connect to a high speed hub [ 147.963511][ T5711] usb 4-1: config 64 has an invalid interface number: 25 but max is 0 [ 147.963543][ T5711] usb 4-1: config 64 has no interface number 0 [ 147.963572][ T5711] usb 4-1: config 64 interface 25 has no altsetting 0 [ 147.967414][ T5711] usb 4-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=f3.76 [ 147.967439][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.967458][ T5711] usb 4-1: Product: syz [ 147.967471][ T5711] usb 4-1: Manufacturer: syz [ 147.967484][ T5711] usb 4-1: SerialNumber: syz [ 148.030473][ T5712] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 148.200182][ T6761] usb usb8: usbfs: process 6761 (syz.3.264) did not claim interface 0 before use [ 148.297410][ T5712] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 148.297460][ T5712] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 148.297484][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.304451][ T6765] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 148.337815][ T5711] gspca_main: pac7311-2.14.0 probing 093a:260e [ 148.338305][ T5711] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 148.338387][ T5711] pac7311 4-1:64.25: probe with driver pac7311 failed with error -71 [ 148.354387][ T5712] hub 2-1:4.0: USB hub found [ 148.375162][ T5711] usb 4-1: USB disconnect, device number 17 [ 148.554617][ T6445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.569932][ T5712] hub 2-1:4.0: 2 ports detected [ 148.569966][ T5712] usb 2-1: selecting invalid altsetting 1 [ 148.569975][ T5712] hub 2-1:4.0: Using single TT (err -22) [ 148.819888][ T5712] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 148.819913][ T5712] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 148.907366][ T5712] usb 2-1: USB disconnect, device number 24 [ 149.037628][ T6790] netlink: 5 bytes leftover after parsing attributes in process `syz.3.268'. [ 149.051036][ T6791] loop5: detected capacity change from 0 to 7 [ 149.073323][ T6791] Dev loop5: unable to read RDB block 7 [ 149.073361][ T6791] loop5: unable to read partition table [ 149.073544][ T6791] loop5: partition table beyond EOD, truncated [ 149.073560][ T6791] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 149.074859][ T6791] netlink: 14 bytes leftover after parsing attributes in process `syz.0.269'. [ 149.423694][ T6796] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 149.426854][ T6796] ======================================================= [ 149.426854][ T6796] WARNING: The mand mount option has been deprecated and [ 149.426854][ T6796] and is ignored by this kernel. Remove the mand [ 149.426854][ T6796] option from the mount to silence this warning. [ 149.426854][ T6796] ======================================================= [ 149.491865][ T5711] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 149.701391][ T5711] usb 4-1: Using ep0 maxpacket: 32 [ 149.704885][ T5711] usb 4-1: unable to get BOS descriptor or descriptor too short [ 149.705934][ T5711] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 149.705958][ T5711] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 149.705978][ T5711] usb 4-1: config 14 has no interface number 0 [ 149.705993][ T5711] usb 4-1: config 14 has no interface number 1 [ 149.706046][ T5711] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 149.706059][ T5711] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 149.706073][ T5711] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 149.706098][ T5711] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 149.706124][ T5711] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 149.706147][ T5711] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.706171][ T5711] usb 4-1: config 14 interface 57 has no altsetting 0 [ 149.706188][ T5711] usb 4-1: config 14 interface 228 has no altsetting 0 [ 149.860119][ T5711] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 149.860148][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.860168][ T5711] usb 4-1: Product: syz [ 149.860181][ T5711] usb 4-1: Manufacturer: syz [ 149.860195][ T5711] usb 4-1: SerialNumber: syz [ 149.947749][ T6445] veth0_vlan: entered promiscuous mode [ 150.042951][ T6445] veth1_vlan: entered promiscuous mode [ 150.320832][ T5711] legousbtower 4-1:14.57: interrupt endpoints not found [ 150.331417][ T6445] veth0_macvtap: entered promiscuous mode [ 150.354815][ T6445] veth1_macvtap: entered promiscuous mode [ 150.385310][ T4922] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 150.385329][ T4922] Bluetooth: Wrong link type (-22) [ 150.459276][ T6445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.560011][ T6445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.585838][ T6806] loop5: detected capacity change from 0 to 7 [ 150.589788][ T6806] Dev loop5: unable to read RDB block 7 [ 150.589805][ T6806] loop5: AHDI p1 [ 150.589815][ T6806] loop5: partition table partially beyond EOD, truncated [ 150.631644][ T1193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.632176][ T1193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.632214][ T1193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.632246][ T1193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.777771][ T5711] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 150.821183][ T5711] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 150.992643][ T6794] loop8: detected capacity change from 0 to 7 [ 151.110815][ T6794] Dev loop8: unable to read RDB block 7 [ 151.110854][ T6794] loop8: unable to read partition table [ 151.111053][ T6794] loop8: partition table beyond EOD, truncated [ 151.116620][ T6794] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 151.506660][ T6794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.516628][ T6794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.573010][ T6173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.573029][ T6173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.665266][ T6820] netlink: 9 bytes leftover after parsing attributes in process `syz.1.278'. [ 151.710214][ T44] usb 4-1: USB disconnect, device number 18 [ 151.732412][ T6820] netlink: 9 bytes leftover after parsing attributes in process `syz.1.278'. [ 151.808621][ T44] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 151.967904][ T6169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.967922][ T6169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.177048][ T4922] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 152.177067][ T4922] Bluetooth: Wrong link type (-22) [ 152.294675][ T6836] loop5: detected capacity change from 0 to 7 [ 152.302137][ T6836] Dev loop5: unable to read RDB block 7 [ 152.302182][ T6836] loop5: AHDI p1 [ 152.302201][ T6836] loop5: partition table partially beyond EOD, truncated [ 152.654748][ T6844] netlink: 60 bytes leftover after parsing attributes in process `syz.3.285'. [ 152.701902][ T5789] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 152.858542][ T5789] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.858588][ T5789] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 152.889901][ T5789] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.889933][ T5789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.889953][ T5789] usb 5-1: Product: syz [ 152.889968][ T5789] usb 5-1: Manufacturer: syz [ 152.889983][ T5789] usb 5-1: SerialNumber: syz [ 152.986701][ T5623] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 152.986719][ T5623] Bluetooth: Wrong link type (-22) [ 153.159261][ T6840] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 153.499575][ T6880] fuseblk: Unknown parameter 'rootmode' [ 153.608781][ T6884] loop3: detected capacity change from 0 to 7 [ 153.627463][ T5713] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 153.643350][ T6884] Dev loop3: unable to read RDB block 7 [ 153.643391][ T6884] loop3: unable to read partition table [ 153.643591][ T6884] loop3: partition table beyond EOD, truncated [ 153.643621][ T6884] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 153.786695][ T5789] cdc_ncm 5-1:1.0: SET_CRC_MODE failed [ 153.788713][ T5789] cdc_ncm 5-1:1.0: SET_NTB_FORMAT failed [ 153.803845][ T5713] usb 4-1: Using ep0 maxpacket: 8 [ 153.814310][ T5789] cdc_ncm 5-1:1.0: bind() failure [ 153.829495][ T5713] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 153.829521][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.829539][ T5713] usb 4-1: Product: syz [ 153.829553][ T5713] usb 4-1: Manufacturer: syz [ 153.829567][ T5713] usb 4-1: SerialNumber: syz [ 153.847599][ T5713] usb 4-1: config 0 descriptor?? [ 153.873112][ T5789] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 153.873150][ T5789] cdc_ncm 5-1:1.1: bind() failure [ 153.902015][ T5789] usb 5-1: USB disconnect, device number 2 [ 153.964377][ T6884] Dev loop3: unable to read RDB block 7 [ 153.964419][ T6884] loop3: unable to read partition table [ 153.964637][ T6884] loop3: partition table beyond EOD, truncated [ 154.075744][ T5713] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 154.171330][ T5713] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 154.187566][ T5713] usb 4-1: USB disconnect, device number 19 [ 154.216695][ T4973] Dev loop3: unable to read RDB block 7 [ 154.216732][ T4973] loop3: unable to read partition table [ 154.216944][ T4973] loop3: partition table beyond EOD, truncated [ 154.556337][ T5789] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 154.647155][ T6885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.297'. [ 154.659817][ T5713] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 154.711169][ T32] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 154.715255][ T5789] usb 1-1: unable to get BOS descriptor or descriptor too short [ 154.717006][ T5789] usb 1-1: config 1 interface 0 altsetting 223 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.717036][ T5789] usb 1-1: config 1 interface 0 has no altsetting 0 [ 154.720188][ T5789] usb 1-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40 [ 154.720213][ T5789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.720232][ T5789] usb 1-1: Product: syz [ 154.720245][ T5789] usb 1-1: Manufacturer: syz [ 154.720259][ T5789] usb 1-1: SerialNumber: syz [ 154.832019][ T5713] usb 4-1: not running at top speed; connect to a high speed hub [ 154.834339][ T5713] usb 4-1: config 3 has an invalid interface number: 141 but max is 0 [ 154.834362][ T5713] usb 4-1: config 3 has no interface number 0 [ 154.834392][ T5713] usb 4-1: config 3 interface 141 has no altsetting 0 [ 154.843915][ T5713] usb 4-1: New USB device found, idVendor=1110, idProduct=9042, bcdDevice=51.d4 [ 154.843940][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.843960][ T5713] usb 4-1: Product: syz [ 154.843973][ T5713] usb 4-1: Manufacturer: syz [ 154.843987][ T5713] usb 4-1: SerialNumber: syz [ 154.919791][ T32] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 154.919820][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.954359][ T32] usb 5-1: config 0 descriptor?? [ 154.964507][ T32] cp210x 5-1:0.0: cp210x converter detected [ 155.046931][ T6911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.063168][ T6911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.126127][ T5789] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input9 [ 155.234967][ T4958] bcm5974 1-1:1.0: could not read from device [ 155.286833][ T5789] usb 1-1: USB disconnect, device number 24 [ 155.735095][ T6916] tipc: Failed to obtain node identity [ 155.735185][ T6916] tipc: Enabling of bearer rejected, failed to enable media [ 155.743666][ T5711] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 155.888804][ T5711] usb 2-1: device descriptor read/64, error -71 [ 155.911343][ T6920] overlayfs: overlapping lowerdir path [ 156.167645][ T5711] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 156.286838][ T6927] loop5: detected capacity change from 0 to 7 [ 156.302203][ T5711] usb 2-1: device descriptor read/64, error -71 [ 156.302449][ T1009] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 156.325686][ T6927] Dev loop5: unable to read RDB block 7 [ 156.325711][ T6927] loop5: AHDI p1 [ 156.325729][ T6927] loop5: partition table partially beyond EOD, truncated [ 156.415247][ T5711] usb usb2-port1: attempt power cycle [ 156.470301][ T1009] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 142, changing to 7 [ 156.473129][ T1009] usb 1-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 156.473155][ T1009] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.473175][ T1009] usb 1-1: Product: syz [ 156.473189][ T1009] usb 1-1: Manufacturer: syz [ 156.473203][ T1009] usb 1-1: SerialNumber: syz [ 156.508221][ T5713] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 156.581382][ T5713] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleIV.fw [ 156.718688][ T5713] usb 4-1: USB disconnect, device number 20 [ 156.777525][ T5711] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 156.798719][ T5711] usb 2-1: device descriptor read/8, error -71 [ 156.917692][ T9] usb 4-1: Direct firmware load for ueagle-atm/eagleIV.fw failed with error -2 [ 156.917717][ T9] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleIV.fw [ 156.970476][ T9] ------------[ cut here ]------------ [ 156.970488][ T9] !atomic_read(&kn->count) [ 156.970499][ T9] WARNING: fs/kernfs/dir.c:560 at __kernfs_new_node+0x8b8/0xa70, CPU#0: kworker/0:0/9 [ 156.970536][ T9] Modules linked in: [ 156.970567][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 156.970592][ T9] Tainted: [L]=SOFTLOCKUP [ 156.970599][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 156.970610][ T9] Workqueue: events request_firmware_work_func [ 156.970637][ T9] RIP: 0010:__kernfs_new_node+0x8b8/0xa70 [ 156.970659][ T9] Code: 08 e9 44 fb ff ff e8 77 2d 59 ff e8 e2 c6 27 ff e9 8f fa ff ff e8 68 2d 59 ff e8 a3 e0 c6 fe e9 26 fb ff ff e8 59 2d 59 ff 90 <0f> 0b 90 e9 d1 fc ff ff e8 db 55 d1 08 89 f9 80 e1 07 80 c1 03 38 [ 156.970674][ T9] RSP: 0018:ffffc900000e7440 EFLAGS: 00010293 [ 156.970690][ T9] RAX: ffffffff826c9e47 RBX: 0000000000000000 RCX: ffff88801dae5d00 [ 156.970703][ T9] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 156.970714][ T9] RBP: ffffc900000e7598 R08: 0000000000000000 R09: 0000000000000000 [ 156.970725][ T9] R10: dffffc0000000000 R11: ffffed100684d969 R12: ffff88803426cb40 [ 156.970739][ T9] R13: 1ffff9200001ce94 R14: dffffc0000000000 R15: ffff88805c443000 [ 156.970753][ T9] FS: 0000000000000000(0000) GS:ffff888125a6b000(0000) knlGS:0000000000000000 [ 156.970767][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.970780][ T9] CR2: 00007f94e99de1b8 CR3: 000000003384c000 CR4: 00000000003526f0 [ 156.970797][ T9] Call Trace: [ 156.970809][ T9] [ 156.970828][ T9] ? __pfx___kernfs_new_node+0x10/0x10 [ 156.970850][ T9] ? kernfs_root+0x1c/0x230 [ 156.970875][ T9] ? kernfs_root+0x1c/0x230 [ 156.970893][ T9] ? kernfs_root+0x1c/0x230 [ 156.970909][ T9] ? kernfs_root+0x1c/0x230 [ 156.970933][ T9] kernfs_create_dir_ns+0xfe/0x230 [ 156.970961][ T9] sysfs_create_dir_ns+0x12f/0x2a0 [ 156.970990][ T9] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 156.971012][ T9] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 156.971044][ T9] ? rt_spin_unlock+0x160/0x200 [ 156.971065][ T9] kobject_add_internal+0x631/0xd10 [ 156.971101][ T9] kobject_add+0x163/0x240 [ 156.971128][ T9] ? rcu_is_watching+0x15/0xb0 [ 156.971159][ T9] ? __pfx_kobject_add+0x10/0x10 [ 156.971192][ T9] ? kobject_init+0x83/0x1e0 [ 156.971220][ T9] get_device_parent+0x31d/0x3a0 [ 156.971248][ T9] device_add+0x2e1/0xb90 [ 156.971273][ T9] firmware_fallback_sysfs+0x2e4/0xa30 [ 156.971296][ T9] ? kfree+0x1c5/0x6c0 [ 156.971329][ T9] _request_firmware+0x1052/0x1780 [ 156.971368][ T9] ? __pfx__request_firmware+0x10/0x10 [ 156.971396][ T9] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 156.971420][ T9] ? process_one_work+0x8be/0x1630 [ 156.971445][ T9] ? process_one_work+0x8be/0x1630 [ 156.971473][ T9] request_firmware_work_func+0xba/0x2e0 [ 156.971501][ T9] ? process_one_work+0x8be/0x1630 [ 156.971526][ T9] process_one_work+0x98b/0x1630 [ 156.971573][ T9] ? __pfx_process_one_work+0x10/0x10 [ 156.971598][ T9] ? do_raw_spin_lock+0x12b/0x2f0 [ 156.971634][ T9] worker_thread+0xb49/0x1140 [ 156.972565][ T9] kthread+0x388/0x470 [ 156.972595][ T9] ? __pfx_worker_thread+0x10/0x10 [ 156.972621][ T9] ? __pfx_kthread+0x10/0x10 [ 156.972644][ T9] ret_from_fork+0x514/0xb70 [ 156.972670][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 156.972691][ T9] ? __switch_to+0xc79/0x1410 [ 156.972712][ T9] ? __pfx_kthread+0x10/0x10 [ 156.972735][ T9] ret_from_fork_asm+0x1a/0x30 [ 156.972776][ T9] [ 156.972786][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 156.972802][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 156.972827][ T9] Tainted: [L]=SOFTLOCKUP [ 156.972834][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 156.972845][ T9] Workqueue: events request_firmware_work_func [ 156.972867][ T9] Call Trace: [ 156.972874][ T9] [ 156.972881][ T9] vpanic+0x56c/0xa60 [ 156.972908][ T9] ? __pfx__printk+0x10/0x10 [ 156.972928][ T9] ? __pfx_vpanic+0x10/0x10 [ 156.972951][ T9] ? is_bpf_text_address+0x292/0x2b0 [ 156.972977][ T9] ? is_bpf_text_address+0x26/0x2b0 [ 156.973011][ T9] panic+0xc5/0xd0 [ 156.973037][ T9] ? __pfx_panic+0x10/0x10 [ 156.973073][ T9] ? ret_from_fork_asm+0x1a/0x30 [ 156.973101][ T9] __warn+0x315/0x4c0 [ 156.973126][ T9] ? __kernfs_new_node+0x8b8/0xa70 [ 156.973148][ T9] ? __kernfs_new_node+0x8b8/0xa70 [ 156.973170][ T9] __report_bug+0x339/0x540 [ 156.973200][ T9] ? __kernfs_new_node+0x8b8/0xa70 [ 156.973220][ T9] ? __pfx___report_bug+0x10/0x10 [ 156.973262][ T9] ? __kernfs_new_node+0x8b8/0xa70 [ 156.973282][ T9] report_bug+0x16a/0x220 [ 156.973306][ T9] ? __kernfs_new_node+0x8b8/0xa70 [ 156.973325][ T9] ? __kernfs_new_node+0x8ba/0xa70 [ 156.973343][ T9] handle_bug+0x9c/0x200 [ 156.973370][ T9] exc_invalid_op+0x1a/0x50 [ 156.973403][ T9] asm_exc_invalid_op+0x1a/0x20 [ 156.973421][ T9] RIP: 0010:__kernfs_new_node+0x8b8/0xa70 [ 156.973441][ T9] Code: 08 e9 44 fb ff ff e8 77 2d 59 ff e8 e2 c6 27 ff e9 8f fa ff ff e8 68 2d 59 ff e8 a3 e0 c6 fe e9 26 fb ff ff e8 59 2d 59 ff 90 <0f> 0b 90 e9 d1 fc ff ff e8 db 55 d1 08 89 f9 80 e1 07 80 c1 03 38 [ 156.973456][ T9] RSP: 0018:ffffc900000e7440 EFLAGS: 00010293 [ 156.973472][ T9] RAX: ffffffff826c9e47 RBX: 0000000000000000 RCX: ffff88801dae5d00 [ 156.973485][ T9] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 156.973496][ T9] RBP: ffffc900000e7598 R08: 0000000000000000 R09: 0000000000000000 [ 156.973507][ T9] R10: dffffc0000000000 R11: ffffed100684d969 R12: ffff88803426cb40 [ 156.973521][ T9] R13: 1ffff9200001ce94 R14: dffffc0000000000 R15: ffff88805c443000 [ 156.973543][ T9] ? __kernfs_new_node+0x8b7/0xa70 [ 156.973581][ T9] ? __pfx___kernfs_new_node+0x10/0x10 [ 156.973603][ T9] ? kernfs_root+0x1c/0x230 [ 156.973627][ T9] ? kernfs_root+0x1c/0x230 [ 156.973644][ T9] ? kernfs_root+0x1c/0x230 [ 156.973660][ T9] ? kernfs_root+0x1c/0x230 [ 156.973683][ T9] kernfs_create_dir_ns+0xfe/0x230 [ 156.973711][ T9] sysfs_create_dir_ns+0x12f/0x2a0 [ 156.973740][ T9] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 156.973759][ T9] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 156.973791][ T9] ? rt_spin_unlock+0x160/0x200 [ 156.973812][ T9] kobject_add_internal+0x631/0xd10 [ 156.973847][ T9] kobject_add+0x163/0x240 [ 156.973874][ T9] ? rcu_is_watching+0x15/0xb0 [ 156.973904][ T9] ? __pfx_kobject_add+0x10/0x10 [ 156.973937][ T9] ? kobject_init+0x83/0x1e0 [ 156.973967][ T9] get_device_parent+0x31d/0x3a0 [ 156.973994][ T9] device_add+0x2e1/0xb90 [ 156.974020][ T9] firmware_fallback_sysfs+0x2e4/0xa30 [ 156.974045][ T9] ? kfree+0x1c5/0x6c0 [ 156.974079][ T9] _request_firmware+0x1052/0x1780 [ 156.974117][ T9] ? __pfx__request_firmware+0x10/0x10 [ 156.974136][ T9] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 156.974160][ T9] ? process_one_work+0x8be/0x1630 [ 156.974188][ T9] ? process_one_work+0x8be/0x1630 [ 156.974217][ T9] request_firmware_work_func+0xba/0x2e0 [ 156.974246][ T9] ? process_one_work+0x8be/0x1630 [ 156.974270][ T9] process_one_work+0x98b/0x1630 [ 156.974318][ T9] ? __pfx_process_one_work+0x10/0x10 [ 156.974343][ T9] ? do_raw_spin_lock+0x12b/0x2f0 [ 156.974387][ T9] worker_thread+0xb49/0x1140 [ 156.974438][ T9] kthread+0x388/0x470 [ 156.974459][ T9] ? __pfx_worker_thread+0x10/0x10 [ 156.974484][ T9] ? __pfx_kthread+0x10/0x10 [ 156.974507][ T9] ret_from_fork+0x514/0xb70 [ 156.974531][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 156.974553][ T9] ? __switch_to+0xc79/0x1410 [ 156.974574][ T9] ? __pfx_kthread+0x10/0x10 [ 156.974596][ T9] ret_from_fork_asm+0x1a/0x30 [ 156.974635][ T9] [ 156.974896][ T9] Kernel Offset: disabled