last executing test programs: 23.905617832s ago: executing program 4 (id=2788): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, &(0x7f0000000880)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x4000, 0x3, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367, 0x0, r10}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r12, &(0x7f0000000200)={0x0, 0xbc38, 0x400, 0x3, 0xb2, 0x0, r0}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1819, 0x0, 0x1, 0x8002ad, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e40, 0x1, 0x9, 0x102, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x1000, 0x3, 0x800102c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x1000, 0x2, 0x21b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r11, '\x00', {0x1, 0x46a, 0x0, 0x0}}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000e07d0000240012800b00010065727370616e000014000280060003001b000000060002"], 0x44}}, 0x44810) 22.865530068s ago: executing program 4 (id=2795): socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) userfaultfd(0x801) r0 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x800) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc048aeca, &(0x7f00000000c0)={0x7, 0x0, [{0x9c7, 0x0, 0x4}, {0x2e8, 0x0, 0x40000005}, {0x8be, 0x0, 0x8001}, {0x9b5, 0x0, 0xb}, {0x804}, {0x8a1, 0x0, 0x200000000002}, {0x865, 0x0, 0x100000000}]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x3, 0x4a, &(0x7f0000000540)=ANY=[@ANYBLOB="92010000055bed40020000000000000003010902380002000000060904c702010e0101000300d009050a000000000000090400000101be2600090500000000000000080b878a", @ANYBLOB="9831a64f"], 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0xffffffffffffff0b, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x30, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0xffffff81}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x70}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 22.743486663s ago: executing program 1 (id=2797): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) (async) r2 = inotify_init1(0x80000) r3 = dup(r2) read$FUSE(r3, 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2a401, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r10) (async) r11 = socket$unix(0x1, 0x5, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x5, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x8, 0x8, 0x8, 0x8, 0x800, 0x8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) (async) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) bind$alg(r3, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ce\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) r14 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r14, &(0x7f0000004780)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)='2', 0x1}], 0x1, 0x0, 0x0, 0x4800}], 0x1, 0x40048000) (async) accept4(r14, 0x0, 0x0, 0x0) 22.501223736s ago: executing program 1 (id=2799): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0xfffffffffffffffc]}, 0x8, 0x800) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getegid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x10004) io_setup(0x206, &(0x7f0000000200)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f00000002c0)) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000000600)=@vmx={0x0, 0x0, 0x2080, {0x26000, 0x0, {}, 0x0, 0x3}}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x14, 'sed\x00', 0x2, 0x9, 0x7b}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x4e22, 0x1, 0xa, 0x7ffffffe, 0x1000fb}}, 0x44) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0xfffffffffffffffd, 0x3, 0x80, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0xb, 0x700000000000000, 0x6, 0xffff, 0xfffffffffffffffe, 0x7, 0x7fffffff, 0x5, 0x26, 0x2, 0x4ba138a5, 0x6, 0x8, 0x2, 0x4, 0x20000000009, 0x401, 0x1fd, 0x3, 0x0, 0x7, 0x5, 0x400005, 0x2, 0x501, 0x43, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x80, 0x0, 0xfffffffffffffffc, 0x20008, 0x1ff, 0x0, 0x6, 0x8000000000000001, 0xffffffbffffffff9, 0x2000100000000, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0xa, 0xfffffffffffffffe, 0xd, 0x11, 0xa, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0x7, 0x7, 0xfffffffffffffffc, 0xa, 0xffffffffffffffff, 0x355, 0xdac, 0xe90, 0x7, 0x4c5d, 0xa7, 0xba00, 0x3, 0x7ff, 0x81, 0x1, 0x100, 0x4, 0xe, 0xfffffffffffffffc, 0x80000001, 0x800000000000005, 0x21, 0x8, 0xfffffffffffffffd, 0x10000, 0x3, 0x1e4b, 0x2, 0x79, 0xf, 0x10000, 0xf, 0x10000000002, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x6518, 0x8, 0x2, 0x100000001, 0x80, 0x3, 0xd, 0x4, 0xb, 0x9, 0x1, 0x401, 0x1, 0x2, 0x7, 0xea7, 0x2000000000000001]}) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f00000000c0)={0x29}) 21.339655758s ago: executing program 3 (id=2802): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x0, 0x5, 0x0, 'queue1\x00'}) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000000)="228292", 0xfff6}], 0x2) pipe(&(0x7f00000001c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r3, 0x114, 0x1d, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r4 = io_uring_setup(0x3828, &(0x7f0000000040)={0x0, 0x2150, 0x4000, 0x3, 0xce}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x100, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xd4, 0x3, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0xc4, 0x6, 0x1, 0x0, "2f11e7ef8e766bc851286d7b851917a8c4428e9e9e091293cae490c16826a3c85a205f678852b43a06c61d63ba42373a00bb7c1ad7f1758c6b2ce8b1f597542c5b20d1abf3d9cba06aa296695acaa0facffbd68f6cafc22503df4d5c27c256f0b4f6c49fa2d43becd9c27d04488658cebd38947517a7ab12195f2e5a26fccf5baa41dc0bb3b777019eabb057c0db7069c109a9f969da3d7fa87b35f7cad005636d9e278b22a111b90dda70832b9773e6c964339bb3c4185e0ceb9a1cf08e553c"}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x194}, 0x1, 0x0, 0x0, 0x8000}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) io_uring_enter(r4, 0x2219, 0xcf77, 0x16, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r7 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r7, &(0x7f0000000000)={0x1, 0x1}, 0x2) 21.120472704s ago: executing program 4 (id=2803): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280)=0x655e, 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) socket$nl_route(0x10, 0x3, 0x0) r1 = dup2(r0, r0) write$tun(r1, &(0x7f00000000c0)=ANY=[], 0x46) recvmmsg(r1, &(0x7f00000020c0), 0x0, 0x2000, 0x0) 21.069682128s ago: executing program 1 (id=2804): syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xa, 0x0, 0x80000001, 0x1, 0x3e0, 0x6, 0x1}}, {0x6, 0x2, [0xfffa]}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) close(r2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'netpci0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r7, 0x84, 0x1e, &(0x7f0000000000), 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) close(0x4) 20.955990943s ago: executing program 4 (id=2805): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) r3 = syz_open_dev$video4linux(&(0x7f0000000140), 0x6, 0x2000) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000003c0)=@userptr={0xdb44, 0xd, 0x4, 0x0, 0x9, {r4, r5/1000+60000}, {0x3, 0x2, 0x6, 0x4e, 0x6, 0x79, "7b47728a"}, 0x5, 0x2, {&(0x7f00000001c0)}, 0x1}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff77}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r7 = io_uring_setup(0x1194, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) io_uring_enter(r7, 0x2219, 0xcf78, 0x16, 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000000)=0x4020) listen(0xffffffffffffffff, 0x80) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x40) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r9, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 20.904881602s ago: executing program 0 (id=2806): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103"], 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r1, &(0x7f0000009780)={0x2020, 0x0, 0x0}, 0x2020) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000f00)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x1c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}, @ib={0x1b, 0x1, 0x0, {"15a82a35c72b55077ec82827906f7f19"}, 0x8001, 0x7, 0x7}}}, 0x118) write$FUSE_STATX(r1, &(0x7f0000001f40)={0x130, 0x0, r2, {0x4, 0x3b6, 0x0, '\x00', {0x411, 0x200, 0x8000000000000000, 0xfffffe00, 0x0, 0x0, 0x4000, '\x00', 0xfffffffffffffff1, 0x8001, 0x3, 0x2, {0x6, 0x9}, {0x7b, 0x40}, {0x6, 0x2}, {0xbb, 0x7fff}, 0x6, 0xfffff800, 0x7, 0xf4}}}, 0x130) syz_usb_control_io(r0, 0x0, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) connect$pptp(r4, &(0x7f0000000040)={0x18, 0x2, {0x200, @empty}}, 0x1e) syz_usb_connect(0x2, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="add124a0c9a43b2292136226b5ba7ada5317f080e8b91d5f5c80d36f225b33ab4da2ba9723d50c660c72128d325e322b8d317a6c6cdbac96fe134bea2bf520b341cbe6fa1d93d55d56eb6d27"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x501100, 0x0) mkdirat(r5, &(0x7f0000000140)='./file0\x00', 0x99) 20.545592115s ago: executing program 3 (id=2807): syz_emit_ethernet(0x1e, &(0x7f0000000180)={@multicast, @remote, @void, {@can={0xc, {{0x0, 0x1}, 0x8, 0x2, 0x0, 0x0, "31a03ad4883a0903"}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0x20000}]}, &(0x7f0000000040)='GPL\x00', 0x1}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0x20000}]}, &(0x7f0000000040)='GPL\x00', 0x1}, 0x94) syz_usb_connect(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022d00010000000009040000026bb22b000904ff"], 0x0) 20.338275317s ago: executing program 1 (id=2808): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010"], 0x48}, 0x1, 0x0, 0x0, 0x14000000}, 0x40040) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0) 20.325832519s ago: executing program 2 (id=2809): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x2000) readv(r0, &(0x7f0000001400)=[{&(0x7f0000002700)=""/4106, 0x100a}], 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x8c, 0x61, 0xc4, 0x8, 0xc72, 0x11, 0xf735, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x9, 0x2, 0x80, 0xf9, "", [{{0x9, 0x4, 0x6f, 0x3, 0x1, 0xc1, 0x23, 0x49, 0xfd, [], [{{0x9, 0x5, 0x1, 0x10, 0x8, 0xb, 0x8, 0x30}}]}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 20.239112375s ago: executing program 1 (id=2810): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa0009"], 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x101000) unshare(0x6a040000) unshare(0x10000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x20, 0xc, 0x15, {0x15, 0x4, "06f2610ddf389dc7081a090276f870a26b12e1"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}}, &(0x7f0000000440)={0x34, &(0x7f0000000100)={0x20, 0x14, 0x19, "fd604ee84096142088b2d5eff9a1b8f0eabc7936c4921a334f"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000002c0)={0x20, 0x0, 0x9d, {0x9b, "fbf8f989aaeb43de9ac379ab484700b228990b4a692513bc52c9888ca7a2c9bd695b73d548b8793b8127557474450088596bb409930060b0c18d2ecace15fb7a88d209759ab7da42905e93ce2668a71fd1e840055ce7955701092f40a4aa9eb279989bb7186c56a00532e89486b31ee051159001b51a18503223c318497a8be994712979ecbd9bc4b1b0a660fabe7078c93bdc607b3a799ccd7190"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0x9}, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0x8}}) socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x0, 0x10, 0x2, {0x2, 0x22}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00', 0x9}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000002100)={0xa, 0x4e22, 0x8001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x1c, &(0x7f0000002500)=[{&(0x7f0000002140)="cf", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000000c0)={0xecd2, 0x208, 0x7, 0x9}, &(0x7f0000000100)=0x10) ioctl$SG_IO(r2, 0x2285, &(0x7f00000004c0)={0x53, 0xfffffffc, 0x24, 0x0, @scatter={0x0, 0x3, &(0x7f00000006c0)}, &(0x7f0000000480)="6a18e8ff5659251ab00000000000000081a1443daa5ee640859c41d7e58a000000000000", 0x0, 0x11, 0x5, 0x0, 0x0}) 19.347191748s ago: executing program 4 (id=2811): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) chown(0x0, 0x0, 0xee01) syz_usb_connect$uac2(0x3, 0xa0, &(0x7f0000000280)=ANY=[], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) socket$kcm(0x10, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='smaps\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{0x4000, 0x2}, {&(0x7f0000000140)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000000080)=""/79, 0x4f}], 0x1, 0x21}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffff8, 0x4}, {0x0}, &(0x7f0000001580)=[{&(0x7f00000003c0)=""/139, 0x8b}], 0x1, 0x8, 0x3}}], 0x90}, 0x0) sendmsg$nl_route(r2, 0x0, 0x8000002) sendmsg$nl_route_sched(r1, 0x0, 0x40000) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x4, 0x3, 0x0, {0xa, 0x4e20, 0xfffffff9, @local, 0x2eb}}}, 0x80, 0x0}, 0x4044001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$XFS_IOC_SWAPEXT(r5, 0x40045b17, 0x0) link(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40081}, 0x2000) r8 = semget$private(0x0, 0x6, 0x0) semop(r8, 0x0, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x27) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0x4}}, 0x9) 19.209794333s ago: executing program 3 (id=2812): mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) 19.089662202s ago: executing program 3 (id=2813): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r0], 0x0) syz_usb_connect$uac1(0x6, 0x72, &(0x7f0000000040)=ANY=[@ANYBLOB="120140010000000899041c104000010203010902600003010740071f88243ae7559fe8dd5cd1f1af8186ce0904000000010100000a240103000a000201020904010000010200000904010101010200000905010908000308030725010c00010009040200000102000009040201010102000009058209ff036440520725010c8e0500dcdd9d5bf69d278ed0eff4e8cae78c367dcab2062f4785f55f550ecae8fb6349ded4f390a50c833f721fef7c8422307976414787ca77"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x6, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x8f}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000340)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x80, 0x0, 0x400}]}, 0x10) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) syz_emit_ethernet(0x813, &(0x7f0000000900)={@remote, @random="1927544aef12", @void, {@mpls_mc={0x8848, {[], @generic="3cc8a0387ac4320af058fabe314dfbac5f635344c96c135bffa282424f0991a631deda52a05c7cb97a17400512b31b3d83f56594f81e035682ec39bccd3176404e36417a49fd300248103f303767b7f0537dc58bca669ab544a61f5feaa8fcc960c006cf6e0dee01f49390e3be5e7b25d5587a848cbd376348bd78896920245af39381dc97e03b986dcd61ec03147b042818f18edf99b8a494b269562444ac96a0fe4ae019b31941b6cac251767631b5a59ae1ae57ec88fa7bbcd753701f977e05d4ecc79b72803bb666f6cb3bbfd85709ef99b1b707e47b282895cf1f5737addc1d5a8b2d8f6336c60a30fac2feec0363cd31974c16b9fabf5c73118905d81bc63005328d1a4e9f0059f8015aed4e8fdc453c8354f14f4dab9737bfcd0b4d0b7a60d07617399be3898cf65c6dd5e2a93fe0b858c180180bd5eec093e1823c18c55613ec214f790bac9ce1dec192429e2b43c9a5abc7eaa8237209a81c7ea055386bc3e275e73d89fe2503584623052e64194f5d38be28585094b4e7cd17fa80e0038784c9625bd057984e743448ce94841fa728c60a6f6fff03856b1acbc5b39b9b790a2903918ffc3f0d2092bbc5a4d8b9412b6befc7e22307fe5f7b02c337d1df8130334209ad8ea3b4849c978193ccdef973d7913c33ade64a2e36a1fe551e24f32425c647090e2e2f43acfd705e01270d6df935644bdfe29bbe2286ca9963d880a86a42da863cbc5d9dff2019e540413854df096bf6b46e01ad1513c854eec8d95fe0421e121b198b230dab190015eca4e7e6b2cadfeb2589723814f8d44ccb68396f7252be937ff42c9fb59d8f2f0a5ad62d660560c0e8cf719ad4c17e66cc7c4469ded1db001d313af5172bffb88bb08c4e89423d2c80685262d8ca360c3e6cf0b9b478a36f9099c79ae9547d7646987fa3cdb9ddbc90541ba5aa891dcac69af026f60cb8803e34bcd3d2bb193160274470c4b8d6361b9ff8c98f852564de88af3859f0bc76b4eabcbef62898904b640eed6ba5526a062c1ea4c0f275274dbb9154132aaa010fd24e42b1a5266e10b3d3bedd6adbbc788554885993115d4c08262113771a16a2341134533c6f344586d794f33c5642140fcebc979e1fb92d08d4c65f45225cab3a3c6cee6bd244877a9067c4be463bb1e8ab7a4559f61e7077d27749e991e91b204c7025185ba27e62b54f296c121a06917d3177d063bf353de8f07b0505b9b8ea2a5fe8639ec4a250d135b82c7d7238ddfe454223a55f8901c7c5e96dcbca22ddd52845810a16c4972d70d2c04d9130237b49d7021ad48933bacf1cd9657a9d6f15ade749b461946b46b8109e2f2b89e6503b7328f385f4429c2bae4db7fc3974e61bcebdea3fb43bc16e61b140512b9bb8d3b877099c17d02d70493bfceab97b616673557795ce76819bc48229ad867aed19076540c2e81adcd7506c661bca9917104dfd6ccb9f777316e8f59a211402af14f78b0d4fb575ba1a9ea0cafaf798ab663e2a6bfdb3a1e0650393f208a7d970dd6a4389f638ab9f57aececc756bf595a9eba45b1d2bdd7007db95c97385d942d23abf7c342226cdf72aafa9ce77a3909d4b5c11a5f8891cf15c72ba74ba66003d273d52669e02311353cb4897fe5bebaa5f4339920470e87a90c858f1549416ea211aced57ffd06a0c39053cd855cc230e76631242f606020d47c994e490f09ea6f66af81ddd8d5258aec9f4d5cc4dc686673e17f358191266dec7a38648cd7bfe605ca29aba4f576e70421d1ebf236a12836ed4f359773fb2927f88d3fd4200bef90203d2fbf9c78a87d0367e2434ec0d42196a1e92c8ba08f26a382bbc262a79572624b544fb0cd06a56c4e0cd1c1a63c901b59b3c46326c0f00bd127153d6c58b352b9b944f5f390ad9401dbf51b228391b199aa0c6a7dc18a8a45fabf7dee3cfc02a72552fe837ef6ac6ba7970d960faaf3c1baf9bbc03481f1bddd4660273c6a163eadcd507b377ecf65aef7d3eea8f982d9e12f69f5d19a07f980a9d630045562a909d6e7326421b27312a0053c037dbc4c38344d2f0dd5ab595e038e39014a2667611751dc26d9365238746ef24e0d2b52d2ae0d8e51085fd72a5b091e8c0cd36a81fd477a9339b79d163ab51c40f01c8fc0d915c736349551f4663c0da3420b7783ef678fd48fa196fc55820754a4f1b4a97678ad16d7a88c4e327fc1e8c8a68ae486573aee4723dcf7a2de316480b2168715bd117f47f697eac5a57a1d452d3329e134ad61bddbc44c887bb0c1cf48212f3ae0ba76b95b1b7cc90f2387c35399b486e3bae928a655de12cfcaeca9c7a11e9968e7791918c06e57ab05211cfaa93775135961ff7be95689ac9f52a768c9e08d32530f2a87763e1fd43d3132f0bb85808618c49e0f72ef1552c1d45f728e867adec2c72d95374d557340fb7fb1de72052b77deb6a322fdefa1da9612f01ff17e09ad4ee04df1b839b29630a074c95403c26159999f5d3216066962c59ed7da6977d743eb2b0c312c25d6360fc59b8dc679d8578a021baeb7962374d5673ad7e4103b0c6eddeba5063ff16d0426cf8d7e9b029ab62505512a9ae534c948db0c75adc52769808769ce61c4362fa95dba7c8ca415a018e1892066cdb10a9563ca9ddd5ed5594a1a996d946b41e20d78e1ccb2883779213d5eca89e3451d653dc5402773e18daa611741b9653d4ef41bf0ce666f8ce56824922ffde7963d76ae6d9b9bd44a6dd1a3fe93f50453a561210ed581c301a32c626c5a4157cfe3cc9ac7effd47a24fe30a316c048fbdd60698e184fe5db974993dce5aec82ebef416cd82ec660f8d07481695e16dd44ac519dec41fa402c1d46fce88b275b90b27a55f8bef994fc61931f0708460abec56ea8adc29bdc"}}}}, 0x0) close(0x3) syz_usb_control_io(r1, 0x0, 0x0) r4 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x32f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x60, 0x7, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x2, 0xfa, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0xe21}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xf7, 0xf3, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x4, 0xe, 0x19}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x1, 0x8, 0xd, 0x40, 0x4}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1404}}, {0xba, &(0x7f0000000300)=@string={0xba, 0x3, "8469249a88a81117d42f1dbb933def5c60bc27d6ee400db08e4ba8e4971718b40f31121fc0d4f2cf1773396449979e3a0a9ff77d7f0f41faad1e13d8da1ea220bd8b1dc02bde75b5f28350a83cdd0f31172003d824664ef0bc584b36da5f366adf11d45f5fdc6fb0f9c785ef49b4ce23a3a3dbacaa0144f5c15bc0ec5fedacb8b2178463109cde883c6346de894c69c195d183540cd9a9a2d03f0fc78237be1b4cc5e029e0dbb4f355fd037fb80109bf72df7b66bb5c85bc"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x827}}]}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xb8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201500200000008990425104000010203010902a60003010110020904000000010100000a2401040029000201020b240402062974f2ee440a092407030100742f590b240606010201000900030904010000010200000904010101010200000b240201d80109027960340924020101010dcbdc0a240201030407"], 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async) syz_usb_disconnect(r0) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r0], 0x0) (async) syz_usb_connect$uac1(0x6, 0x72, &(0x7f0000000040)=ANY=[@ANYBLOB="120140010000000899041c104000010203010902600003010740071f88243ae7559fe8dd5cd1f1af8186ce0904000000010100000a240103000a000201020904010000010200000904010101010200000905010908000308030725010c00010009040200000102000009040201010102000009058209ff036440520725010c8e0500dcdd9d5bf69d278ed0eff4e8cae78c367dcab2062f4785f55f550ecae8fb6349ded4f390a50c833f721fef7c8422307976414787ca77"], 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) (async) fcntl$lock(r2, 0x6, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x8f}) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000340)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x80, 0x0, 0x400}]}, 0x10) (async) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) (async) syz_emit_ethernet(0x813, &(0x7f0000000900)={@remote, @random="1927544aef12", @void, {@mpls_mc={0x8848, {[], @generic="3cc8a0387ac4320af058fabe314dfbac5f635344c96c135bffa282424f0991a631deda52a05c7cb97a17400512b31b3d83f56594f81e035682ec39bccd3176404e36417a49fd300248103f303767b7f0537dc58bca669ab544a61f5feaa8fcc960c006cf6e0dee01f49390e3be5e7b25d5587a848cbd376348bd78896920245af39381dc97e03b986dcd61ec03147b042818f18edf99b8a494b269562444ac96a0fe4ae019b31941b6cac251767631b5a59ae1ae57ec88fa7bbcd753701f977e05d4ecc79b72803bb666f6cb3bbfd85709ef99b1b707e47b282895cf1f5737addc1d5a8b2d8f6336c60a30fac2feec0363cd31974c16b9fabf5c73118905d81bc63005328d1a4e9f0059f8015aed4e8fdc453c8354f14f4dab9737bfcd0b4d0b7a60d07617399be3898cf65c6dd5e2a93fe0b858c180180bd5eec093e1823c18c55613ec214f790bac9ce1dec192429e2b43c9a5abc7eaa8237209a81c7ea055386bc3e275e73d89fe2503584623052e64194f5d38be28585094b4e7cd17fa80e0038784c9625bd057984e743448ce94841fa728c60a6f6fff03856b1acbc5b39b9b790a2903918ffc3f0d2092bbc5a4d8b9412b6befc7e22307fe5f7b02c337d1df8130334209ad8ea3b4849c978193ccdef973d7913c33ade64a2e36a1fe551e24f32425c647090e2e2f43acfd705e01270d6df935644bdfe29bbe2286ca9963d880a86a42da863cbc5d9dff2019e540413854df096bf6b46e01ad1513c854eec8d95fe0421e121b198b230dab190015eca4e7e6b2cadfeb2589723814f8d44ccb68396f7252be937ff42c9fb59d8f2f0a5ad62d660560c0e8cf719ad4c17e66cc7c4469ded1db001d313af5172bffb88bb08c4e89423d2c80685262d8ca360c3e6cf0b9b478a36f9099c79ae9547d7646987fa3cdb9ddbc90541ba5aa891dcac69af026f60cb8803e34bcd3d2bb193160274470c4b8d6361b9ff8c98f852564de88af3859f0bc76b4eabcbef62898904b640eed6ba5526a062c1ea4c0f275274dbb9154132aaa010fd24e42b1a5266e10b3d3bedd6adbbc788554885993115d4c08262113771a16a2341134533c6f344586d794f33c5642140fcebc979e1fb92d08d4c65f45225cab3a3c6cee6bd244877a9067c4be463bb1e8ab7a4559f61e7077d27749e991e91b204c7025185ba27e62b54f296c121a06917d3177d063bf353de8f07b0505b9b8ea2a5fe8639ec4a250d135b82c7d7238ddfe454223a55f8901c7c5e96dcbca22ddd52845810a16c4972d70d2c04d9130237b49d7021ad48933bacf1cd9657a9d6f15ade749b461946b46b8109e2f2b89e6503b7328f385f4429c2bae4db7fc3974e61bcebdea3fb43bc16e61b140512b9bb8d3b877099c17d02d70493bfceab97b616673557795ce76819bc48229ad867aed19076540c2e81adcd7506c661bca9917104dfd6ccb9f777316e8f59a211402af14f78b0d4fb575ba1a9ea0cafaf798ab663e2a6bfdb3a1e0650393f208a7d970dd6a4389f638ab9f57aececc756bf595a9eba45b1d2bdd7007db95c97385d942d23abf7c342226cdf72aafa9ce77a3909d4b5c11a5f8891cf15c72ba74ba66003d273d52669e02311353cb4897fe5bebaa5f4339920470e87a90c858f1549416ea211aced57ffd06a0c39053cd855cc230e76631242f606020d47c994e490f09ea6f66af81ddd8d5258aec9f4d5cc4dc686673e17f358191266dec7a38648cd7bfe605ca29aba4f576e70421d1ebf236a12836ed4f359773fb2927f88d3fd4200bef90203d2fbf9c78a87d0367e2434ec0d42196a1e92c8ba08f26a382bbc262a79572624b544fb0cd06a56c4e0cd1c1a63c901b59b3c46326c0f00bd127153d6c58b352b9b944f5f390ad9401dbf51b228391b199aa0c6a7dc18a8a45fabf7dee3cfc02a72552fe837ef6ac6ba7970d960faaf3c1baf9bbc03481f1bddd4660273c6a163eadcd507b377ecf65aef7d3eea8f982d9e12f69f5d19a07f980a9d630045562a909d6e7326421b27312a0053c037dbc4c38344d2f0dd5ab595e038e39014a2667611751dc26d9365238746ef24e0d2b52d2ae0d8e51085fd72a5b091e8c0cd36a81fd477a9339b79d163ab51c40f01c8fc0d915c736349551f4663c0da3420b7783ef678fd48fa196fc55820754a4f1b4a97678ad16d7a88c4e327fc1e8c8a68ae486573aee4723dcf7a2de316480b2168715bd117f47f697eac5a57a1d452d3329e134ad61bddbc44c887bb0c1cf48212f3ae0ba76b95b1b7cc90f2387c35399b486e3bae928a655de12cfcaeca9c7a11e9968e7791918c06e57ab05211cfaa93775135961ff7be95689ac9f52a768c9e08d32530f2a87763e1fd43d3132f0bb85808618c49e0f72ef1552c1d45f728e867adec2c72d95374d557340fb7fb1de72052b77deb6a322fdefa1da9612f01ff17e09ad4ee04df1b839b29630a074c95403c26159999f5d3216066962c59ed7da6977d743eb2b0c312c25d6360fc59b8dc679d8578a021baeb7962374d5673ad7e4103b0c6eddeba5063ff16d0426cf8d7e9b029ab62505512a9ae534c948db0c75adc52769808769ce61c4362fa95dba7c8ca415a018e1892066cdb10a9563ca9ddd5ed5594a1a996d946b41e20d78e1ccb2883779213d5eca89e3451d653dc5402773e18daa611741b9653d4ef41bf0ce666f8ce56824922ffde7963d76ae6d9b9bd44a6dd1a3fe93f50453a561210ed581c301a32c626c5a4157cfe3cc9ac7effd47a24fe30a316c048fbdd60698e184fe5db974993dce5aec82ebef416cd82ec660f8d07481695e16dd44ac519dec41fa402c1d46fce88b275b90b27a55f8bef994fc61931f0708460abec56ea8adc29bdc"}}}}, 0x0) (async) close(0x3) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x32f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x60, 0x7, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x2, 0xfa, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0xe21}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xf7, 0xf3, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x4, 0xe, 0x19}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x1, 0x8, 0xd, 0x40, 0x4}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1404}}, {0xba, &(0x7f0000000300)=@string={0xba, 0x3, "8469249a88a81117d42f1dbb933def5c60bc27d6ee400db08e4ba8e4971718b40f31121fc0d4f2cf1773396449979e3a0a9ff77d7f0f41faad1e13d8da1ea220bd8b1dc02bde75b5f28350a83cdd0f31172003d824664ef0bc584b36da5f366adf11d45f5fdc6fb0f9c785ef49b4ce23a3a3dbacaa0144f5c15bc0ec5fedacb8b2178463109cde883c6346de894c69c195d183540cd9a9a2d03f0fc78237be1b4cc5e029e0dbb4f355fd037fb80109bf72df7b66bb5c85bc"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x827}}]}) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_connect$uac1(0x3, 0xb8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201500200000008990425104000010203010902a60003010110020904000000010100000a2401040029000201020b240402062974f2ee440a092407030100742f590b240606010201000900030904010000010200000904010101010200000b240201d80109027960340924020101010dcbdc0a240201030407"], 0x0) (async) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") (async) 19.047393861s ago: executing program 0 (id=2814): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000001080)={0x1000, 0x4, 0x9, 0xbd75}) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) 18.742238771s ago: executing program 2 (id=2815): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280)=0x655e, 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) socket$nl_route(0x10, 0x3, 0x0) r1 = dup2(r0, r0) write$tun(r1, &(0x7f00000000c0)=ANY=[], 0x46) recvmmsg(r1, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x2000, 0x0) 18.669863662s ago: executing program 2 (id=2816): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280)=0x655e, 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) socket$nl_route(0x10, 0x3, 0x0) r1 = dup2(r0, r0) write$tun(r1, &(0x7f00000000c0)=ANY=[], 0x46) recvmmsg(r1, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x2000, 0x0) (fail_nth: 1) 18.344405713s ago: executing program 0 (id=2817): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800451f001c00680000000290780a010100ac1414aa5e25a205160090780a010102"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp6\x00') syz_emit_ethernet(0xf78, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xf6a, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "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"}}}}, 0x0) read$snddsp(r0, &(0x7f0000000180)=""/26, 0x1a) io_uring_enter(r0, 0x1e5a, 0xf654, 0x70, &(0x7f00000000c0)={[0x2]}, 0x8) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/66, 0x42}], 0x1, 0x103c, 0xd) syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000000)=ANY=[], 0x0) 18.343459679s ago: executing program 2 (id=2818): r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x80000000000) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRESOCT=r1, @ANYRES32=r0, @ANYRES32=r1], 0x50) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000001280)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004600000076000000db98000041000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f0000000040)) 18.197564563s ago: executing program 2 (id=2819): syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xa, 0x0, 0x80000001, 0x1, 0x3e0, 0x6, 0x1}}, {0x6, 0x2, [0xfffa]}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) close(r2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'netpci0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r7, 0x84, 0x1e, &(0x7f0000000000), 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) close(0x4) 17.782427643s ago: executing program 1 (id=2820): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xfffffffffffffffd, 0x2a4301) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0xfe, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @private=0x2, @local}}}}}}, 0x0) socket$kcm(0x10, 0x2, 0x10) set_mempolicy(0x4005, &(0x7f0000000040)=0x16, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3, 0xfff3}, {0x1}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x1, 0x10001, 0x3ff, 0x3, 0x1}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00009914a9b1", @ANYRES64=r0], 0xb2) 17.391433149s ago: executing program 2 (id=2821): socket$kcm(0x10, 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) socket$rds(0x15, 0x5, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000003c0)={0x0}) socket$kcm(0xa, 0x3, 0x87) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x3, 0x100000000, 0x100000000000000, 0x1, 0xfdb1, 0x8, 0x2000000000000200, 0x7}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r5, 0x40786e88, &(0x7f0000000700)={{&(0x7f0000000400)=[{0x40, 0x6f, 0x2, {0x455}, 0x3, 0x2, 0xa6}, {0x3, 0x2, 0xff, {0x7, 0x46}, 0x6, 0x6, 0xfffffff8}, {0x3ff, 0x8, 0x8000000000000001, {0x0, 0x5}, 0xf, 0x2, 0x4}, {0xfffffffffffffffc, 0x5, 0x5d, {0x2}, 0x547, 0x0, 0x6}, {0x128d86c, 0x5, 0x4, {0x5, 0x3}, 0x20000, 0x9, 0x5}, {0x3, 0x4c0, 0x4, {0x6, 0xd}, 0x1, 0x4, 0x3}, {0x28000000000000, 0x655, 0x6, {0xe, 0x8}, 0x100000001, 0x7, 0x2}, {0x8, 0x476, 0x200, {0x5, 0x7}, 0x2, 0xb422, 0xffffff11}], 0x8, 0x40, 0x380, 0x7}, {&(0x7f0000000600)=[{0x101}, {0x8, 0x4c}, {0x9e7, 0x101}, {0x1, 0x81}], 0x4, 0x10, 0x3, 0xfffffffffffffffa}, {&(0x7f0000000640)=[0x0], 0x1, 0x8, 0x80, 0x5}, {&(0x7f0000000680), 0x0, 0x28, 0x3, 0x7}, {&(0x7f00000006c0)=[0x1, 0x400, 0x5], 0x3, 0x8, 0x3a3f}}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={0x0}) 16.237427136s ago: executing program 4 (id=2822): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r4, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x4004850) sendmmsg$sock(r0, &(0x7f0000002080), 0x0, 0x4000030) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 16.019944327s ago: executing program 3 (id=2823): mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) 15.985851646s ago: executing program 3 (id=2824): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) fallocate(r1, 0x10, 0x0, 0x76000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$unix(r1, &(0x7f0000000200)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/70, 0x46}], 0x1, &(0x7f0000000180)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffb, 0x6, 0xb0, @scatter={0x0, 0x40000000, 0x0}, &(0x7f0000000440)="a3c527edb709", 0x0, 0x70, 0xaf27685993db7c38, 0x22, 0x0}) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x100007, 0x0, 0x0, 0x20, 0xc, 0x4, 0xec, 0x0, 0x1, 0x4, 0x8, 0x111, 0xff, 0x1, 0x0, [0x0, 0x1]}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) 15.272041329s ago: executing program 0 (id=2825): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x183200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34325241, 0x0, 0x9, [{}, {}, {}, {0x3}, {}, {}, {0x0, 0x60}]}}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b4a0d93481b232b11b819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x1000008]}}) 15.238815071s ago: executing program 0 (id=2826): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280)=0x655e, 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) socket$nl_route(0x10, 0x3, 0x0) r1 = dup2(r0, r0) write$tun(r1, &(0x7f00000000c0)=ANY=[], 0x46) recvmmsg(r1, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x2000, 0x0) 15.204967338s ago: executing program 0 (id=2827): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1b96, 0xb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xa2, 0xc0, 0xd, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x103, 0x7, 0x1, {0x22, 0x2a7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x70, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xd3, 0x3, 0xc}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x5, 0x7, 0x1, 0xff, 0x6}, 0xfc, &(0x7f0000000500)={0x5, 0xf, 0xfc, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xb, 0xf, 0xd7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x6, 0x3, 0x3, 0x7f}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x6}, @generic={0xd1, 0x10, 0x2, "7fa8d73e5c7dd36132de933953e2c4647d1a6ef1266ccb901c6039e87bde29e8d4ed6bad00365b41f081ec29a4a70757dfac4b104a985c59d95178590e1d88801231aee7f2a966f599d5124a867e850a8eb7782de51047a88bc41d054ca852707033da7f822b398cb1f9ee7f6257913cca335af147178f1d3c80f56bdce08f25a0f5e08c90ed71607095e779043bed24c65427ab99111c37604943ea9a264e3c2f92776b9aa1edbf9ccf9cf9290d43175bca903ba340743f2e04dedeb44315642e2962843c188f636a8f0e8e4aec"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x5, 0x89, 0x4}]}, 0x1, [{0x4a, &(0x7f0000000600)=@string={0x4a, 0x3, "f47690d9ef92059146515421b1c2b0e4596a8648528f2f5c29c96e8d2451a78ccba8bf97f3bb6b969049802e4ce9849baf0e2aa85822eabf2719d82b2ee0aa15bc11923fd2f01410"}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000940)={0x24, &(0x7f00000006c0)={0x40, 0x6, 0x48, {0x48, 0xa, "6ef247a2926eddb6ca611e1874a1a496b249a4b8e384a38712a418cdf7665ab4943c8a69789c2144534fd004e3052592451a4ef4c65ee6bcac3ac2bddb25a1faf3a14a64370d"}}, &(0x7f0000000b80)={0x0, 0x3, 0xe3, @string={0xe3, 0x3, "f5459c8d5a909050147d98d2b748e39bac397f3adb820ccc17ac6950c69cb78d35c4333601c0720d198ea87d69dbac288efc3cc62ed2d49e99142d34a5992d10a1436c226769a68b1cb23e4b7d8ff4f65de735938819fb8bc8079ab65bddf2e8056f287ae2d2321a4521df8450278f0a0487dd458b3b6ed8d3fbf564c0b070628036d0b05babc289d1a196727326cf190afa1c326c03ef2855ba3020b041a0b1bb96f785b83ebb742a64cab9c064025b2e18a488d2c21bc76605a50592b3b189155a9e94b8b1fcbae20fdc110ebe0087b39b8edab8d080ec7a551a52c2ded31eff"}}, &(0x7f0000000780)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x0, "39a9dea9"}, @global=@item_4={0x3, 0x1, 0x0, "b025409f"}]}}, &(0x7f00000007c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x4c4}}}}, &(0x7f0000000b40)={0x2c, &(0x7f0000000a00)={0x0, 0xa, 0x34, "452229825c672af52f7a19304a7030f9dcbc8d77c5bd0bf6cdcada15e7bc1ce2e6d8881bbbeb85bbe8e1595d804c5156e1cb2b50"}, &(0x7f0000000a40)={0x0, 0xa, 0x1}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000ac0)={0x20, 0x1, 0x2f, "9ef85a3b0149d0c89959aa9635f5accb5ba8a112c9342066bace846e4e8185ba013ac47a981391f267b8f9ad613990"}, &(0x7f0000000b00)={0x20, 0x3, 0x1, 0x5}}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0xdc}, 0x1, 0x0, 0x0, 0x40a0}, 0x11) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1, 0x6, 0xa00, 0x4, 0x987, 0x200ff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xffff3a98}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 2.503042998s ago: executing program 32 (id=2820): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xfffffffffffffffd, 0x2a4301) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0xfe, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @private=0x2, @local}}}}}}, 0x0) socket$kcm(0x10, 0x2, 0x10) set_mempolicy(0x4005, &(0x7f0000000040)=0x16, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3, 0xfff3}, {0x1}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x1, 0x10001, 0x3ff, 0x3, 0x1}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00009914a9b1", @ANYRES64=r0], 0xb2) 2.002512736s ago: executing program 33 (id=2821): socket$kcm(0x10, 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) socket$rds(0x15, 0x5, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000003c0)={0x0}) socket$kcm(0xa, 0x3, 0x87) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x3, 0x100000000, 0x100000000000000, 0x1, 0xfdb1, 0x8, 0x2000000000000200, 0x7}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r5, 0x40786e88, &(0x7f0000000700)={{&(0x7f0000000400)=[{0x40, 0x6f, 0x2, {0x455}, 0x3, 0x2, 0xa6}, {0x3, 0x2, 0xff, {0x7, 0x46}, 0x6, 0x6, 0xfffffff8}, {0x3ff, 0x8, 0x8000000000000001, {0x0, 0x5}, 0xf, 0x2, 0x4}, {0xfffffffffffffffc, 0x5, 0x5d, {0x2}, 0x547, 0x0, 0x6}, {0x128d86c, 0x5, 0x4, {0x5, 0x3}, 0x20000, 0x9, 0x5}, {0x3, 0x4c0, 0x4, {0x6, 0xd}, 0x1, 0x4, 0x3}, {0x28000000000000, 0x655, 0x6, {0xe, 0x8}, 0x100000001, 0x7, 0x2}, {0x8, 0x476, 0x200, {0x5, 0x7}, 0x2, 0xb422, 0xffffff11}], 0x8, 0x40, 0x380, 0x7}, {&(0x7f0000000600)=[{0x101}, {0x8, 0x4c}, {0x9e7, 0x101}, {0x1, 0x81}], 0x4, 0x10, 0x3, 0xfffffffffffffffa}, {&(0x7f0000000640)=[0x0], 0x1, 0x8, 0x80, 0x5}, {&(0x7f0000000680), 0x0, 0x28, 0x3, 0x7}, {&(0x7f00000006c0)=[0x1, 0x400, 0x5], 0x3, 0x8, 0x3a3f}}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={0x0}) 996.855301ms ago: executing program 34 (id=2822): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r4, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x4004850) sendmmsg$sock(r0, &(0x7f0000002080), 0x0, 0x4000030) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 501.826546ms ago: executing program 35 (id=2824): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) fallocate(r1, 0x10, 0x0, 0x76000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$unix(r1, &(0x7f0000000200)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/70, 0x46}], 0x1, &(0x7f0000000180)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffb, 0x6, 0xb0, @scatter={0x0, 0x40000000, 0x0}, &(0x7f0000000440)="a3c527edb709", 0x0, 0x70, 0xaf27685993db7c38, 0x22, 0x0}) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x100007, 0x0, 0x0, 0x20, 0xc, 0x4, 0xec, 0x0, 0x1, 0x4, 0x8, 0x111, 0xff, 0x1, 0x0, [0x0, 0x1]}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) 0s ago: executing program 36 (id=2827): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1b96, 0xb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xa2, 0xc0, 0xd, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x103, 0x7, 0x1, {0x22, 0x2a7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x70, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xd3, 0x3, 0xc}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x5, 0x7, 0x1, 0xff, 0x6}, 0xfc, &(0x7f0000000500)={0x5, 0xf, 0xfc, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xb, 0xf, 0xd7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x6, 0x3, 0x3, 0x7f}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x6}, @generic={0xd1, 0x10, 0x2, "7fa8d73e5c7dd36132de933953e2c4647d1a6ef1266ccb901c6039e87bde29e8d4ed6bad00365b41f081ec29a4a70757dfac4b104a985c59d95178590e1d88801231aee7f2a966f599d5124a867e850a8eb7782de51047a88bc41d054ca852707033da7f822b398cb1f9ee7f6257913cca335af147178f1d3c80f56bdce08f25a0f5e08c90ed71607095e779043bed24c65427ab99111c37604943ea9a264e3c2f92776b9aa1edbf9ccf9cf9290d43175bca903ba340743f2e04dedeb44315642e2962843c188f636a8f0e8e4aec"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x5, 0x89, 0x4}]}, 0x1, [{0x4a, &(0x7f0000000600)=@string={0x4a, 0x3, "f47690d9ef92059146515421b1c2b0e4596a8648528f2f5c29c96e8d2451a78ccba8bf97f3bb6b969049802e4ce9849baf0e2aa85822eabf2719d82b2ee0aa15bc11923fd2f01410"}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000940)={0x24, &(0x7f00000006c0)={0x40, 0x6, 0x48, {0x48, 0xa, "6ef247a2926eddb6ca611e1874a1a496b249a4b8e384a38712a418cdf7665ab4943c8a69789c2144534fd004e3052592451a4ef4c65ee6bcac3ac2bddb25a1faf3a14a64370d"}}, &(0x7f0000000b80)={0x0, 0x3, 0xe3, @string={0xe3, 0x3, "f5459c8d5a909050147d98d2b748e39bac397f3adb820ccc17ac6950c69cb78d35c4333601c0720d198ea87d69dbac288efc3cc62ed2d49e99142d34a5992d10a1436c226769a68b1cb23e4b7d8ff4f65de735938819fb8bc8079ab65bddf2e8056f287ae2d2321a4521df8450278f0a0487dd458b3b6ed8d3fbf564c0b070628036d0b05babc289d1a196727326cf190afa1c326c03ef2855ba3020b041a0b1bb96f785b83ebb742a64cab9c064025b2e18a488d2c21bc76605a50592b3b189155a9e94b8b1fcbae20fdc110ebe0087b39b8edab8d080ec7a551a52c2ded31eff"}}, &(0x7f0000000780)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x0, "39a9dea9"}, @global=@item_4={0x3, 0x1, 0x0, "b025409f"}]}}, &(0x7f00000007c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x4c4}}}}, &(0x7f0000000b40)={0x2c, &(0x7f0000000a00)={0x0, 0xa, 0x34, "452229825c672af52f7a19304a7030f9dcbc8d77c5bd0bf6cdcada15e7bc1ce2e6d8881bbbeb85bbe8e1595d804c5156e1cb2b50"}, &(0x7f0000000a40)={0x0, 0xa, 0x1}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000ac0)={0x20, 0x1, 0x2f, "9ef85a3b0149d0c89959aa9635f5accb5ba8a112c9342066bace846e4e8185ba013ac47a981391f267b8f9ad613990"}, &(0x7f0000000b00)={0x20, 0x3, 0x1, 0x5}}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0xdc}, 0x1, 0x0, 0x0, 0x40a0}, 0x11) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1, 0x6, 0xa00, 0x4, 0x987, 0x200ff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xffff3a98}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) kernel console output (not intermixed with test programs): fferent from the descriptor's value: 101 [ 473.425906][ T5720] usb 5-1: USB disconnect, device number 5 [ 473.434020][ T1233] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 473.466403][ T1233] usb 4-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0 [ 473.486263][ T1233] usb 4-1: Product: syz [ 473.490613][ T1233] usb 4-1: Manufacturer: syz [ 473.496618][ T5720] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 473.517939][ T1233] usb 4-1: config 0 descriptor?? [ 473.529868][ T1233] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 473.542901][ T1233] usb 4-1: Detected FT2232C/D [ 473.741160][ T808] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 473.801391][ T1233] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 473.824723][ T1233] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 473.852244][ T1233] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 473.879843][ T1233] usb 4-1: USB disconnect, device number 17 [ 473.887120][T14206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2607'. [ 473.908183][ T1233] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 473.925290][ T808] usb 2-1: config 0 has no interfaces? [ 473.937235][ T808] usb 2-1: config 0 has no interfaces? [ 473.949069][ T1233] ftdi_sio 4-1:0.0: device disconnected [ 473.959445][ T808] usb 2-1: config 0 has no interfaces? [ 474.073409][T14214] IPv6: addrconf: prefix option has invalid lifetime [ 474.207124][T14218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.215537][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.232877][T14218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.248381][T14216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.260958][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 474.321140][T14220] syzkaller0: entered promiscuous mode [ 474.326761][T14220] syzkaller0: entered allmulticast mode [ 474.430994][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 474.437933][ T24] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 474.448582][ T24] usb 3-1: can't read configurations, error -22 [ 474.582173][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 474.628809][ T30] kauditd_printk_skb: 98 callbacks suppressed [ 474.628829][ T30] audit: type=1800 audit(1782163036.393:9240): pid=14238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2620" name="/" dev="fuse" ino=1 res=0 errno=0 [ 474.708867][ T808] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=40.6e [ 474.721723][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.735328][ T808] usb 2-1: config 0 descriptor?? [ 474.740931][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 474.750844][ T808] usb 2-1: can't set config #0, error -71 [ 474.752250][ T24] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 474.760139][T14243] FAULT_INJECTION: forcing a failure. [ 474.760139][T14243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 474.769530][ T24] usb 3-1: can't read configurations, error -22 [ 474.786777][ T24] usb usb3-port1: attempt power cycle [ 474.793991][ T808] usb 2-1: USB disconnect, device number 3 [ 474.805033][T14243] CPU: 1 UID: 0 PID: 14243 Comm: syz.3.2622 Tainted: G L syzkaller #0 PREEMPT(full) [ 474.805080][T14243] Tainted: [L]=SOFTLOCKUP [ 474.805089][T14243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 474.805102][T14243] Call Trace: [ 474.805111][T14243] [ 474.805121][T14243] dump_stack_lvl+0xe8/0x150 [ 474.805157][T14243] should_fail_ex+0x40c/0x560 [ 474.805187][T14243] _copy_to_user+0x31/0xb0 [ 474.805221][T14243] copy_siginfo_to_user+0x22/0xc0 [ 474.805253][T14243] x64_setup_rt_frame+0x764/0xc50 [ 474.805288][T14243] ? rcu_is_watching+0x15/0xb0 [ 474.805322][T14243] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 474.805364][T14243] arch_do_signal_or_restart+0x456/0x860 [ 474.805399][T14243] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 474.805437][T14243] ? rcu_is_watching+0x15/0xb0 [ 474.805463][T14243] exit_to_user_mode_loop+0x104/0x730 [ 474.805496][T14243] ? rcu_is_watching+0x15/0xb0 [ 474.805520][T14243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.805543][T14243] do_syscall_64+0x353/0x580 [ 474.805576][T14243] ? trace_irq_disable+0x3b/0x140 [ 474.805609][T14243] ? clear_bhb_loop+0x40/0x90 [ 474.805649][T14243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.805670][T14243] RIP: 0033:0x7f2485f9ce57 [ 474.805688][T14243] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 474.805707][T14243] RSP: 002b:00007f2486dcd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 474.805731][T14243] RAX: 000000000000002a RBX: 00007f2486215fa0 RCX: 00007f2485f9ce59 [ 474.805747][T14243] RDX: 000000000000006e RSI: 0000200000000000 RDI: 0000000000000005 [ 474.805762][T14243] RBP: 00007f2486dcd090 R08: 0000000000000000 R09: 0000000000000000 [ 474.805776][T14243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.805789][T14243] R13: 00007f2486216038 R14: 00007f2486215fa0 R15: 00007f248633fa48 [ 474.805813][T14243] [ 475.081164][ T29] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 475.232817][ T29] usb 5-1: config 0 interface 0 altsetting 67 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 475.244620][ T29] usb 5-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 475.255763][ T29] usb 5-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.269461][ T29] usb 5-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 475.282649][ T5361] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 475.290219][ T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 475.297921][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 475.301221][ T808] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 475.311737][ T29] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 475.321819][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.330122][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 475.339008][ T29] usb 5-1: config 0 descriptor?? [ 475.347989][ T24] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 475.356737][ T24] usb 3-1: can't read configurations, error -22 [ 475.471110][ T5361] usb 2-1: Using ep0 maxpacket: 8 [ 475.472313][ T808] usb 4-1: Using ep0 maxpacket: 32 [ 475.481750][ T5361] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 475.485279][ T808] usb 4-1: config 4 has an invalid interface number: 228 but max is 0 [ 475.497410][ T5361] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 475.499209][ T808] usb 4-1: config 4 has no interface number 0 [ 475.514142][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 475.516699][ T808] usb 4-1: too many endpoints for config 4 interface 228 altsetting 12: 129, using maximum allowed: 30 [ 475.524106][ T5361] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 475.533859][ T808] usb 4-1: config 4 interface 228 altsetting 12 endpoint 0x7 has invalid wMaxPacketSize 0 [ 475.543815][ T5361] usb 2-1: Product: syz [ 475.555865][ T808] usb 4-1: config 4 interface 228 altsetting 12 bulk endpoint 0x7 has invalid maxpacket 0 [ 475.557638][ T5361] usb 2-1: Manufacturer: syz [ 475.572431][ T808] usb 4-1: config 4 interface 228 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 475.576291][ T5361] usb 2-1: SerialNumber: syz [ 475.590433][ T808] usb 4-1: config 4 interface 228 has no altsetting 0 [ 475.596256][ T808] usb 4-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 475.597746][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 475.608481][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.621614][ T24] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 475.627826][ T808] usb 4-1: Product: syz [ 475.635687][ T808] usb 4-1: Manufacturer: syz [ 475.638367][ T24] usb 3-1: can't read configurations, error -22 [ 475.640355][ T808] usb 4-1: SerialNumber: syz [ 475.646967][ T5696] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 475.662777][ T24] usb usb3-port1: unable to enumerate USB device [ 475.801009][ T5696] usb 1-1: Using ep0 maxpacket: 8 [ 475.809061][ T5696] usb 1-1: config 9 has an invalid interface number: 122 but max is 0 [ 475.817897][ T5696] usb 1-1: config 9 has no interface number 0 [ 475.824169][ T5696] usb 1-1: config 9 interface 122 altsetting 6 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 475.835297][ T5696] usb 1-1: config 9 interface 122 has no altsetting 0 [ 475.842355][ T5361] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 475.850808][ T5361] usb 2-1: Handspring Visor / Palm OS: port 231, is for unknown use [ 475.859096][ T5361] usb 2-1: Handspring Visor / Palm OS: port 193, is for Debugger use [ 475.867498][ T5361] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 475.878096][ T5696] usb 1-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=f7.cd [ 475.887353][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.895736][ T5696] usb 1-1: Product: syz [ 475.900314][ T5696] usb 1-1: Manufacturer: syz [ 475.905298][ T5696] usb 1-1: SerialNumber: syz [ 475.923703][T14249] gretap0: left promiscuous mode [ 475.950702][T14249] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.958418][T14249] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.023099][T14249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.037043][T14249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.121428][T14249] vlan2: left allmulticast mode [ 476.126489][T14249] veth0_vlan: left allmulticast mode [ 476.134224][ T5696] appledisplay 1-1:9.122: Could not find int-in endpoint [ 476.143734][ T8367] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.147713][ T5696] usbhid 1-1:9.122: couldn't find an input interrupt endpoint [ 476.168931][ T8367] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.173534][ T5696] usb 1-1: USB disconnect, device number 6 [ 476.185194][ T5361] usb 2-1: palm_os_3_probe - error -110 getting bytes available request [ 476.199227][ T8367] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.205036][ T5361] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 476.223356][ T8367] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.244110][ T5361] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 476.262823][ T5361] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 476.310228][T14258] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2626'. [ 476.323669][ T808] usb 4-1: USB disconnect, device number 18 [ 476.360326][ T6228] udevd[6228]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 476.559518][T14260] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2627'. [ 476.781844][T14269] loop9: detected capacity change from 0 to 7 [ 476.788949][T14269] Dev loop9: unable to read RDB block 7 [ 476.794767][T14269] loop9: unable to read partition table [ 476.800832][T14269] loop9: partition table beyond EOD, truncated [ 476.807251][T14269] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 477.087071][T14271] kvm: pic: single mode not supported [ 477.087087][T14271] pic_ioport_write: 1 callbacks suppressed [ 477.087129][T14271] kvm: pic: level sensitive irq not supported [ 477.098815][T14271] kvm: pic: non byte write [ 477.112306][T14271] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 477.451056][ T5696] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 477.527389][T14274] syzkaller0: entered promiscuous mode [ 477.533375][T14274] syzkaller0: entered allmulticast mode [ 477.551598][ T8384] net_ratelimit: 1 callbacks suppressed [ 477.551619][ T8384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.565788][ T8384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.574153][ T8384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.582344][ T8384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.591137][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.607352][ T30] audit: type=1326 audit(1782163039.373:9241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14265 comm="syz.0.2629" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59bab9ce59 code=0x7fc00000 [ 477.646013][ T29] usbhid 5-1:0.0: can't add hid device: -71 [ 477.658337][ T29] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 477.698713][ T29] usb 5-1: USB disconnect, device number 6 [ 477.712743][ T5696] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 477.740253][ T5696] usb 3-1: can't read configurations, error -71 [ 478.001006][ T808] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 478.035828][ T24] usb 2-1: USB disconnect, device number 4 [ 478.048502][ T24] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 478.072082][ T24] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 478.085484][ T24] visor 2-1:1.0: device disconnected [ 478.111112][ T29] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 478.131347][ T808] usb 1-1: device descriptor read/64, error -71 [ 478.198394][T14292] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2637'. [ 478.277246][ T29] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 478.286556][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.294763][ T29] usb 5-1: Product: syz [ 478.299101][ T29] usb 5-1: Manufacturer: syz [ 478.303841][ T29] usb 5-1: SerialNumber: syz [ 478.306163][T14294] FAULT_INJECTION: forcing a failure. [ 478.306163][T14294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.316898][ T29] usb 5-1: config 0 descriptor?? [ 478.327178][T14294] CPU: 0 UID: 0 PID: 14294 Comm: syz.1.2638 Tainted: G L syzkaller #0 PREEMPT(full) [ 478.327211][T14294] Tainted: [L]=SOFTLOCKUP [ 478.327220][T14294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 478.327233][T14294] Call Trace: [ 478.327243][T14294] [ 478.327252][T14294] dump_stack_lvl+0xe8/0x150 [ 478.327282][T14294] should_fail_ex+0x40c/0x560 [ 478.327310][T14294] _copy_from_user+0x2d/0xb0 [ 478.327342][T14294] __ia32_sys_rt_sigreturn+0x362/0x8c0 [ 478.327381][T14294] ? trace_irq_enable+0x3b/0x140 [ 478.327414][T14294] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 478.327446][T14294] ? _raw_spin_unlock_irq+0x2e/0x50 [ 478.327484][T14294] ? lock_release+0x4b/0x3c0 [ 478.327515][T14294] ? rcu_is_watching+0x15/0xb0 [ 478.327542][T14294] ? rcu_is_watching+0x15/0xb0 [ 478.327565][T14294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.327589][T14294] do_syscall_64+0x174/0x580 [ 478.327619][T14294] ? trace_irq_disable+0x3b/0x140 [ 478.327651][T14294] ? clear_bhb_loop+0x40/0x90 [ 478.327676][T14294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.327698][T14294] RIP: 0033:0x7fe3d0f3e1d9 [ 478.327718][T14294] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 478.327738][T14294] RSP: 002b:00007fe3d1f01a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 478.327762][T14294] RAX: ffffffffffffffda RBX: 00007fe3d1215fa0 RCX: 00007fe3d0f3e1d9 [ 478.327779][T14294] RDX: 00007fe3d1f01a80 RSI: 00007fe3d1f01bb0 RDI: 0000000000000021 [ 478.327795][T14294] RBP: 00007fe3d1f02090 R08: 0000000000000000 R09: 0000000000000000 [ 478.327810][T14294] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 478.327823][T14294] R13: 00007fe3d1216038 R14: 00007fe3d1215fa0 R15: 00007fe3d133fa48 [ 478.327848][T14294] [ 478.355392][ T29] ch341 5-1:0.0: ch341-uart converter detected [ 478.382394][ T808] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 478.576383][T14299] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2640'. [ 478.661194][ T808] usb 1-1: device descriptor read/64, error -71 [ 478.781609][ T808] usb usb1-port1: attempt power cycle [ 478.793552][T14309] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 478.811741][T14303] binder: 14296:14303 ioctl 4018620d 0 returned -22 [ 478.875916][T14303] No such timeout policy "syz1" [ 478.951028][ T1233] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 479.100981][ T1233] usb 2-1: Using ep0 maxpacket: 8 [ 479.108973][ T1233] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 479.117928][ T1233] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 479.128355][ T1233] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 479.139448][ T808] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 479.147274][ T1233] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 479.158034][ T1233] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 479.176441][T14276] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2632'. [ 479.186082][ T1233] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 479.196159][ T808] usb 1-1: device descriptor read/8, error -71 [ 479.204973][ T29] usb 5-1: failed to send control message: -71 [ 479.206682][ T1233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.229703][ T29] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 479.248920][ T29] usb 5-1: USB disconnect, device number 7 [ 479.278610][ T29] ch341 5-1:0.0: device disconnected [ 479.440999][ T808] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 479.451622][ T1233] usb 2-1: usb_control_msg returned -32 [ 479.460763][ T1233] usbtmc 2-1:16.0: can't read capabilities [ 479.471651][ T808] usb 1-1: device descriptor read/8, error -71 [ 479.591190][ T808] usb usb1-port1: unable to enumerate USB device [ 479.678730][T14312] syzkaller0: entered promiscuous mode [ 479.684350][T14312] syzkaller0: entered allmulticast mode [ 479.805279][T14317] netlink: 'syz.1.2642': attribute type 1 has an invalid length. [ 479.991059][ T808] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 480.001682][T14327] FAULT_INJECTION: forcing a failure. [ 480.001682][T14327] name failslab, interval 1, probability 0, space 0, times 0 [ 480.014762][T14327] CPU: 0 UID: 0 PID: 14327 Comm: syz.2.2650 Tainted: G L syzkaller #0 PREEMPT(full) [ 480.014799][T14327] Tainted: [L]=SOFTLOCKUP [ 480.014809][T14327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 480.014823][T14327] Call Trace: [ 480.014834][T14327] [ 480.014844][T14327] dump_stack_lvl+0xe8/0x150 [ 480.014876][T14327] should_fail_ex+0x40c/0x560 [ 480.014907][T14327] should_failslab+0xa8/0x100 [ 480.014934][T14327] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 480.014968][T14327] ? rcu_is_watching+0x15/0xb0 [ 480.014995][T14327] ? __alloc_skb+0x1d7/0x7a0 [ 480.015030][T14327] ? trace_irq_enable+0x3b/0x140 [ 480.015080][T14327] __alloc_skb+0x1d7/0x7a0 [ 480.015115][T14327] sock_wmalloc+0xb2/0x130 [ 480.015138][T14327] unix_stream_connect+0x3b5/0x1000 [ 480.015178][T14327] ? apparmor_socket_connect+0xd1/0x1b0 [ 480.015215][T14327] ? bpf_lsm_socket_connect+0x9/0x20 [ 480.015246][T14327] __sys_connect+0x323/0x460 [ 480.015280][T14327] ? __pfx___sys_connect+0x10/0x10 [ 480.015317][T14327] ? rcu_is_watching+0x15/0xb0 [ 480.015346][T14327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.015370][T14327] __x64_sys_connect+0x7a/0x90 [ 480.015407][T14327] do_syscall_64+0x174/0x580 [ 480.015439][T14327] ? trace_irq_disable+0x3b/0x140 [ 480.015472][T14327] ? clear_bhb_loop+0x40/0x90 [ 480.015497][T14327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.015520][T14327] RIP: 0033:0x7f08a739ce59 [ 480.015540][T14327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.015561][T14327] RSP: 002b:00007f08a8328028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 480.015586][T14327] RAX: ffffffffffffffda RBX: 00007f08a7615fa0 RCX: 00007f08a739ce59 [ 480.015603][T14327] RDX: 000000000000006e RSI: 0000200000000000 RDI: 0000000000000005 [ 480.015619][T14327] RBP: 00007f08a8328090 R08: 0000000000000000 R09: 0000000000000000 [ 480.015633][T14327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 480.015647][T14327] R13: 00007f08a7616038 R14: 00007f08a7615fa0 R15: 00007f08a773fa48 [ 480.015673][T14327] [ 480.257807][T14330] usbtmc 2-1:16.0: usb_clear_halt returned -32 [ 480.264921][T14331] loop2: detected capacity change from 0 to 7 [ 480.276780][T14331] Dev loop2: unable to read RDB block 7 [ 480.282700][T14331] loop2: unable to read partition table [ 480.288645][T14331] loop2: partition table beyond EOD, truncated [ 480.296249][T14330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.305834][T14331] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 480.308625][T14330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.323514][ T808] usb 4-1: Using ep0 maxpacket: 8 [ 480.330219][ T808] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 480.338473][ T808] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.349257][ T808] usb 4-1: config 0 has no interface number 0 [ 480.355719][ T808] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 480.367006][ T808] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 480.380146][ T808] usb 4-1: config 0 interface 52 has no altsetting 0 [ 480.390027][ T808] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 480.399244][ T808] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 480.407442][ T808] usb 4-1: Manufacturer: syz [ 480.413711][ T808] usb 4-1: config 0 descriptor?? [ 480.420838][ T808] hub 4-1:0.52: bad descriptor, ignoring hub [ 480.427036][ T808] hub 4-1:0.52: probe with driver hub failed with error -5 [ 480.459227][ T1233] usb 2-1: USB disconnect, device number 5 [ 480.626175][ T808] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input45 [ 480.931280][ T1233] usb 4-1: USB disconnect, device number 19 [ 481.022564][T14339] xt_connbytes: Forcing CT accounting to be enabled [ 481.077956][T14343] syzkaller0: entered promiscuous mode [ 481.097477][T14343] syzkaller0: entered allmulticast mode [ 481.114237][T14339] xt_CT: No such helper "snmp" [ 481.394514][ T1233] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 481.540994][ T808] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 481.572542][ T1233] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 481.587443][ T1233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.605703][ T1233] usb 5-1: config 0 descriptor?? [ 481.624603][ T1233] cp210x 5-1:0.0: cp210x converter detected [ 481.671074][ T5696] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 481.731963][ T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.753126][ T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.769385][ T808] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 481.791038][ T808] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 481.801326][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.833758][ T808] usb 2-1: config 0 descriptor?? [ 481.842362][ T5696] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 481.866435][ T5696] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 481.892368][ T5696] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 481.921359][ T5696] usb 4-1: config 220 has no interface number 2 [ 481.940958][ T5696] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 481.971867][ T5696] usb 4-1: config 220 interface 0 has no altsetting 0 [ 481.978907][ T5696] usb 4-1: config 220 interface 76 has no altsetting 0 [ 481.986357][ T5696] usb 4-1: config 220 interface 1 has no altsetting 0 [ 481.995751][ T5696] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 482.027048][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.049447][ T1233] usb 5-1: cp210x converter now attached to ttyUSB0 [ 482.056152][ T5696] usb 4-1: Product: syz [ 482.056177][ T5696] usb 4-1: Manufacturer: syz [ 482.056194][ T5696] usb 4-1: SerialNumber: syz [ 482.230767][ T1233] usb 5-1: USB disconnect, device number 8 [ 482.263604][ T1233] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 482.293856][ T1233] cp210x 5-1:0.0: device disconnected [ 482.311529][ T808] steelseries 0003:1038:1410.0021: unknown main item tag 0x0 [ 482.331363][ T808] steelseries 0003:1038:1410.0021: unknown main item tag 0x0 [ 482.362474][ T808] steelseries 0003:1038:1410.0021: unknown main item tag 0x0 [ 482.370361][ T808] steelseries 0003:1038:1410.0021: unknown main item tag 0x0 [ 482.380635][ T808] steelseries 0003:1038:1410.0021: unknown main item tag 0x0 [ 482.392551][ T808] steelseries 0003:1038:1410.0021: unknown main item tag 0x0 [ 482.408874][ T808] steelseries 0003:1038:1410.0021: unknown main item tag 0x0 [ 482.429644][ T808] steelseries 0003:1038:1410.0021: missing HID_OUTPUT_REPORT 0 [ 482.491793][ T5696] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 482.505169][ T5696] uvcvideo 4-1:220.0: No valid video chain found. [ 482.512062][ T5696] usb 4-1: selecting invalid altsetting 0 [ 482.518546][T14356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.530550][T14356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.538821][ T5696] usb 4-1: selecting invalid altsetting 0 [ 482.545046][ T5696] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 482.547318][T14356] sg_write: data in/out 1022304/136 bytes for SCSI command 0x0-- guessing data in; [ 482.547318][T14356] program syz.1.2659 not setting count and/or reply_len properly [ 482.565948][ T5696] usb 4-1: USB disconnect, device number 20 [ 482.593507][ T1233] usb 2-1: USB disconnect, device number 6 [ 483.100993][ T1233] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 483.131720][T14386] netlink: 'syz.0.2667': attribute type 13 has an invalid length. [ 483.139651][T14386] netlink: 'syz.0.2667': attribute type 17 has an invalid length. [ 483.222517][T14390] loop9: detected capacity change from 0 to 7 [ 483.260447][T14390] Dev loop9: unable to read RDB block 7 [ 483.268997][ T1233] usb 5-1: Using ep0 maxpacket: 16 [ 483.278425][ T1233] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.303719][ T1233] usb 5-1: config 0 interface 0 has no altsetting 0 [ 483.311416][ T8410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.319764][ T8410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.328105][ T8410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.336296][ T8410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.344878][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.353695][ T1233] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 483.362895][ T1233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.372352][ T1233] usb 5-1: config 0 descriptor?? [ 483.388889][T14392] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2669'. [ 483.405445][T14390] loop9: unable to read partition table [ 483.442866][T14390] loop9: partition table beyond EOD, truncated [ 483.524207][T14390] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 483.579186][T14394] Dev loop9: unable to read RDB block 7 [ 483.634883][T14394] loop9: unable to read partition table [ 483.666984][T14394] loop9: partition table beyond EOD, truncated [ 483.715350][T14394] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 483.800022][ T1233] mcp2221 0003:04D8:00DD.0022: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 484.208802][ T5696] usb 5-1: USB disconnect, device number 9 [ 484.351822][ T1233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.360074][ T1233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.368291][ T1233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.599915][T14386] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 484.668390][T14410] sg_write: data in/out 426048/136 bytes for SCSI command 0x0-- guessing data in; [ 484.668390][T14410] program syz.0.2673 not setting count and/or reply_len properly [ 484.741259][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.767300][T14414] loop2: detected capacity change from 0 to 7 [ 484.778980][T14414] Dev loop2: unable to read RDB block 7 [ 484.785397][T14414] loop2: unable to read partition table [ 484.794758][T14414] loop2: partition table beyond EOD, truncated [ 484.806547][T14414] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 484.822001][ T5696] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 484.981013][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 485.001140][ T5696] usb 3-1: Using ep0 maxpacket: 16 [ 485.007894][ T5696] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.026190][ T5696] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.036433][ T5696] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 485.049477][ T5696] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 485.058641][ T5696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.069689][ T5696] usb 3-1: config 0 descriptor?? [ 485.121038][ T808] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 485.148994][T14437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.161461][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 485.173789][ T24] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 485.193198][ T24] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 485.211209][ T24] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 485.228428][ T24] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 485.252480][ T24] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 485.266718][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.279074][T14408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.287787][ T24] usb 4-1: Product: syz [ 485.292452][ T808] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 485.295005][ T24] usb 4-1: Manufacturer: syz [ 485.308192][T14408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.318261][ T808] usb 2-1: config 0 has no interface number 0 [ 485.326780][ T808] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.339106][ T24] usb 4-1: SerialNumber: syz [ 485.358762][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 485.369712][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input46 [ 485.379893][ T808] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.422245][ T808] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 485.446232][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.466232][ T808] usb 2-1: config 0 descriptor?? [ 485.547854][ T5696] microsoft 0003:045E:07DA.0023: item fetching failed at offset 31/34 [ 485.571592][ T5696] microsoft 0003:045E:07DA.0023: parse failed [ 485.577888][ T5696] microsoft 0003:045E:07DA.0023: probe with driver microsoft failed with error -22 [ 485.587397][ T24] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 485.602846][ T24] (id 0x00) [ 485.701098][ T24] rc_core: IR keymap rc-imon-pad not found [ 485.707182][ T24] Registered IR keymap rc-empty [ 485.713418][ T24] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 485.724276][ T24] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 485.750049][ T29] usb 3-1: USB disconnect, device number 21 [ 485.783109][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 485.803900][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input47 [ 485.824584][ T24] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:21> initialized [ 485.893836][T14425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.914173][ T5696] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 485.958174][T14425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.003876][ T808] prodikeys 0003:041E:2801.0024: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input1 [ 486.032049][ T808] hid_prodikeys: hid-prodikeys: failed to find output report [ 486.032049][ T808] [ 486.093013][ T5696] usb 1-1: device descriptor read/64, error -71 [ 486.206053][ T808] usb 2-1: USB disconnect, device number 7 [ 486.351312][ T5696] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 486.491130][ T5696] usb 1-1: device descriptor read/64, error -71 [ 486.601771][ T5696] usb usb1-port1: attempt power cycle [ 486.811394][ T29] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 486.821626][T14456] netlink: 'syz.1.2686': attribute type 1 has an invalid length. [ 486.951799][ T5696] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 486.971695][ T5696] usb 1-1: device descriptor read/8, error -71 [ 486.987279][ T29] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 486.997327][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.006456][ T29] usb 3-1: Product: syz [ 487.012721][ T29] usb 3-1: Manufacturer: syz [ 487.018019][ T29] usb 3-1: SerialNumber: syz [ 487.091743][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 487.221050][ T5696] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 487.238730][ T29] usblp 3-1:1.0: usblp1: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 487.250357][ T5696] usb 1-1: device descriptor read/8, error -71 [ 487.257817][ T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 487.268731][ T29] usb 3-1: USB disconnect, device number 22 [ 487.274935][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.286852][ T29] usblp1: removed [ 487.291482][ T24] usb 2-1: config 0 descriptor?? [ 487.391867][ T5696] usb usb1-port1: unable to enumerate USB device [ 487.914387][T14471] usb usb7: usbfs: process 14471 (syz.4.2693) did not claim interface 0 before use [ 487.924411][T14452] imon:send_packet: task interrupted [ 487.940800][T14452] imon:send_packet: packet tx failed (-512) [ 487.957447][T14452] imon:vfd_write: send packet #2 failed [ 487.985743][ T29] usb 4-1: USB disconnect, device number 21 [ 488.080154][ T24] ath6kl: Failed to submit usb control message: -71 [ 488.110142][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 488.139490][ T24] ath6kl: Unable to send get target info: -71 [ 488.147833][ T24] ath6kl: Failed to init ath6kl core: -71 [ 488.161021][ T808] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 488.172988][ T24] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 488.207678][ T24] usb 2-1: USB disconnect, device number 8 [ 488.245321][ T5627] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 488.255153][ T5627] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 488.264729][ T5627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 488.275075][ T5627] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 488.278582][T14477] syzkaller0: entered promiscuous mode [ 488.288875][ T5627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 488.301343][T14477] syzkaller0: entered allmulticast mode [ 488.342816][ T808] usb 5-1: unable to get BOS descriptor or descriptor too short [ 488.361702][ T808] usb 5-1: not running at top speed; connect to a high speed hub [ 488.373875][ T808] usb 5-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 488.392083][ T808] usb 5-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=42.38 [ 488.407274][ T808] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 488.415546][ T808] usb 5-1: Manufacturer: syz [ 488.420593][ T5644] syz_tun (unregistering): left allmulticast mode [ 488.427515][ T29] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 488.437669][ T5644] syz_tun (unregistering): left promiscuous mode [ 488.444691][ T5644] bridge0: port 3(syz_tun) entered disabled state [ 488.499417][ T8413] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 38963 - 0 [ 488.570977][ T29] usb 4-1: device descriptor read/64, error -71 [ 488.583819][ T8413] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 38963 - 0 [ 488.640378][T14480] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.647804][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 488.656783][ T808] cxacru 5-1:11.0: usbatm_usb_probe: bind failed: -19! [ 488.670793][T14480] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.680278][ T808] usb 5-1: USB disconnect, device number 10 [ 488.689963][T14480] bridge_slave_0: entered allmulticast mode [ 488.697774][T14480] bridge_slave_0: entered promiscuous mode [ 488.707225][T14480] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.714785][T14480] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.723912][T14480] bridge_slave_1: entered allmulticast mode [ 488.734881][T14480] bridge_slave_1: entered promiscuous mode [ 488.753478][T14489] net_ratelimit: 2 callbacks suppressed [ 488.753498][T14489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.753703][ T8413] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 38963 - 0 [ 488.759638][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.811030][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 488.817960][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 488.826988][T14480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.842100][ T29] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 488.852495][ T24] usb 2-1: string descriptor 0 read error: -22 [ 488.859176][ T24] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 488.866345][ T8413] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 38963 - 0 [ 488.869699][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.882216][T14491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2698'. [ 488.906102][T14480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.947599][T14480] team0: Port device team_slave_0 added [ 488.957404][T14480] team0: Port device team_slave_1 added [ 488.981073][ T29] usb 4-1: device descriptor read/64, error -71 [ 489.005082][T14480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.012818][T14480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.039159][T14480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.053156][T14480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.060251][T14480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.074346][ T8410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.090810][T14480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.094620][ T8410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.106516][ T29] usb usb4-port1: attempt power cycle [ 489.113199][ T8410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.126651][ T8410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.135306][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.154565][ T24] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 489.193626][T14480] hsr_slave_0: entered promiscuous mode [ 489.201019][ T808] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 489.204739][T14480] hsr_slave_1: entered promiscuous mode [ 489.215645][T14480] debugfs: 'hsr0' already exists in 'hsr' [ 489.221870][T14480] Cannot create hsr debugfs directory [ 489.230797][ T8413] bridge_slave_1: left promiscuous mode [ 489.236679][ T8413] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.245662][ T8413] bridge_slave_0: left allmulticast mode [ 489.252526][ T8413] bridge_slave_0: left promiscuous mode [ 489.258386][ T8413] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.320384][ T8413] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 489.329125][ T8413] ip6gre1 (unregistering): left promiscuous mode [ 489.354350][T14496] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2700'. [ 489.361280][ T808] usb 1-1: Using ep0 maxpacket: 32 [ 489.369383][ T24] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 489.386752][ T808] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.397489][ T808] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 489.412120][ T808] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.424108][ T808] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 489.437302][ T8413] gretap0 (unregistering): left promiscuous mode [ 489.441848][ T808] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.454639][ T808] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 489.470817][ T808] usb 1-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a [ 489.480316][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.490415][ T808] usb 1-1: Product: syz [ 489.491106][ T29] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 489.494913][ T808] usb 1-1: Manufacturer: syz [ 489.507240][ T808] usb 1-1: SerialNumber: syz [ 489.517622][ T808] usb 1-1: config 0 descriptor?? [ 489.531643][ T29] usb 4-1: device descriptor read/8, error -71 [ 489.555067][ T8413] bond9 (unregistering): (slave bridge3): Releasing backup interface [ 489.565936][ T8413] bridge3 (unregistering): left promiscuous mode [ 489.594216][ T8413] bond1 (unregistering): (slave .`): Releasing backup interface [ 489.616076][ T8413] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.628522][ T8413] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.643181][ T8413] .` (unregistering): Released all slaves [ 489.656550][ T24] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 489.658909][ T8413] bond1 (unregistering): Released all slaves [ 489.680460][ T8413] bond0 (unregistering): Released all slaves [ 489.693913][ T8413] bond2 (unregistering): Released all slaves [ 489.708106][ T8413] bond3 (unregistering): Released all slaves [ 489.719148][ T8413] bond4 (unregistering): Released all slaves [ 489.732439][ T8413] bond5 (unregistering): Released all slaves [ 489.750252][ T8413] bond6 (unregistering): Released all slaves [ 489.768784][ T8413] bond7 (unregistering): Released all slaves [ 489.788559][ T8413] bond8 (unregistering): Released all slaves [ 489.795503][ T29] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 489.806357][T14493] kvm: pic: non byte write [ 489.824789][ T29] usb 4-1: device descriptor read/8, error -71 [ 489.833128][ T8413] bond9 (unregistering): Released all slaves [ 489.892584][ T1233] usb 1-1: USB disconnect, device number 15 [ 489.943926][ T29] usb usb4-port1: unable to enumerate USB device [ 489.980616][ T8413] tipc: Left network mode [ 490.139006][T14478] tipc: Enabled bearer , priority 0 [ 490.166885][ T8413] veth1_to_team: left promiscuous mode [ 490.185864][ T8413] hsr_slave_0: left promiscuous mode [ 490.194998][ T8413] hsr_slave_1: left promiscuous mode [ 490.205602][ T8413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.213623][ T8413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.341774][ T8413] team0 (unregistering): Port device team_slave_1 removed [ 490.351844][ T5625] Bluetooth: hci5: command tx timeout [ 490.362670][ T8413] team0 (unregistering): Port device team_slave_0 removed [ 490.489543][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 490.675985][T14480] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 490.692546][T14480] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 490.701015][T14480] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 490.722823][T14480] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 490.735141][T14480] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 490.745167][ T5361] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 490.777058][T14480] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 490.787812][T14480] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 490.808767][T14480] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 490.828655][ T8413] IPVS: stop unused estimator thread 0... [ 490.911571][ T5361] usb 1-1: Using ep0 maxpacket: 8 [ 490.918555][ T5361] usb 1-1: no configurations [ 490.928847][ T5361] usb 1-1: can't read configurations, error -22 [ 491.081898][ T5361] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 491.173971][T14480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.256046][ T5683] usb 2-1: USB disconnect, device number 9 [ 491.263101][ T5361] usb 1-1: Using ep0 maxpacket: 8 [ 491.288072][ T5361] usb 1-1: no configurations [ 491.302128][ T5361] usb 1-1: can't read configurations, error -22 [ 491.308995][ T5361] usb usb1-port1: attempt power cycle [ 491.320504][T14476] tipc: Resetting bearer [ 491.334143][T14476] tipc: Disabling bearer [ 491.365132][T14555] netlink: 'syz.4.2708': attribute type 1 has an invalid length. [ 491.369897][T14556] netlink: 'syz.4.2708': attribute type 1 has an invalid length. [ 491.395745][T14555] 8021q: adding VLAN 0 to HW filter on device bond9 [ 491.434397][T14556] vlan3: entered allmulticast mode [ 491.447906][T14556] bond9: entered allmulticast mode [ 491.468602][T14555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2708'. [ 491.476548][T14480] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.490485][T14556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2708'. [ 491.523445][T14555] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2708'. [ 491.526727][ T8368] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.538909][T14556] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2708'. [ 491.539845][ T8368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.628648][ T8412] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.635916][ T8412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.691496][ T5361] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 491.722370][ T5361] usb 1-1: Using ep0 maxpacket: 8 [ 491.728283][ T5361] usb 1-1: no configurations [ 491.747891][ T5361] usb 1-1: can't read configurations, error -22 [ 491.828892][T14480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.837177][T14575] netlink: 'syz.4.2714': attribute type 11 has an invalid length. [ 491.854736][T14575] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2714'. [ 491.908385][T14480] veth0_vlan: entered promiscuous mode [ 491.920820][T14480] veth1_vlan: entered promiscuous mode [ 491.921553][ T5361] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 491.971677][ T5361] usb 1-1: Using ep0 maxpacket: 8 [ 491.997492][ T5361] usb 1-1: no configurations [ 492.004912][ T5361] usb 1-1: can't read configurations, error -22 [ 492.025884][ T5361] usb usb1-port1: unable to enumerate USB device [ 492.038921][T14480] veth0_macvtap: entered promiscuous mode [ 492.074840][T14480] veth1_macvtap: entered promiscuous mode [ 492.098078][T14480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.121088][ T1233] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 492.133472][T14480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.163600][ T8412] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.178212][ T8412] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.214198][ T8412] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.248789][ T8412] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.271902][ T1233] usb 2-1: device descriptor read/64, error -71 [ 492.282368][T14588] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=335983306 (335983306 ns) > initial count (18880876 ns). Using initial count to start timer. [ 492.301312][ T808] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 492.411287][ T8413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.427081][ T8413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.441506][ T5625] Bluetooth: hci5: command tx timeout [ 492.454762][ T808] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 492.473553][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.482897][ T808] usb 5-1: Product: syz [ 492.487244][ T808] usb 5-1: Manufacturer: syz [ 492.506791][ T808] usb 5-1: SerialNumber: syz [ 492.512592][ T1233] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 492.522228][ T8384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.532611][ T8384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.671998][ T1233] usb 2-1: device descriptor read/64, error -71 [ 492.721043][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 492.745490][ T808] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 492.768102][ T808] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 492.782589][ T1233] usb usb2-port1: attempt power cycle [ 492.795200][ T808] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 492.808027][ T808] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 492.819794][ T808] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 492.865184][ T808] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 492.885958][ T9] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 492.921704][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 492.940494][ T808] usb 5-1: USB disconnect, device number 11 [ 492.976703][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 493.023175][ T9] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 493.047900][ T9] usb 4-1: Product: syz [ 493.059640][ T9] usb 4-1: Manufacturer: syz [ 493.066804][ T9] usb 4-1: SerialNumber: syz [ 493.079766][ T9] usb 4-1: config 0 descriptor?? [ 493.104732][ T9] usb 4-1: selecting invalid altsetting 0 [ 493.121633][ T1233] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 493.150704][T14607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2720'. [ 493.165922][ T1233] usb 2-1: device descriptor read/8, error -71 [ 493.222850][T14607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2720'. [ 493.224369][T14609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2720'. [ 493.411183][ T1233] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 493.451732][ T1233] usb 2-1: device descriptor read/8, error -71 [ 493.572196][ T1233] usb usb2-port1: unable to enumerate USB device [ 493.795584][T14618] bond1: entered promiscuous mode [ 493.816303][T14618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 493.911388][ T808] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 494.073141][ T808] usb 1-1: config 0 has an invalid interface number: 32 but max is 0 [ 494.100833][ T808] usb 1-1: config 0 has no interface number 0 [ 494.108384][ T808] usb 1-1: config 0 interface 32 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.134409][ T808] usb 1-1: config 0 interface 32 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 494.155258][ T808] usb 1-1: config 0 interface 32 has no altsetting 0 [ 494.163485][ T808] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 494.188966][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.204841][ T808] usb 1-1: config 0 descriptor?? [ 494.470056][ T5361] usb 4-1: USB disconnect, device number 26 [ 494.512987][ T5625] Bluetooth: hci5: command tx timeout [ 494.617148][ T808] kye 0003:0458:5010.0025: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 494.641525][ T808] kye 0003:0458:5010.0025: unexpected long global item [ 494.649132][ T808] kye 0003:0458:5010.0025: parse failed [ 494.656194][ T808] kye 0003:0458:5010.0025: probe with driver kye failed with error -22 [ 494.829241][ T1233] usb 1-1: USB disconnect, device number 20 [ 494.836811][ T8374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.844293][ T5361] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 494.845212][ T8374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.860716][ T8374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.869027][ T8374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.877730][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.041763][ T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 495.056098][ T5361] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 495.064630][ T5361] usb 4-1: config 0 has no interface number 0 [ 495.071689][ T5361] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.083636][ T5361] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.093812][ T5361] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 495.103441][ T5361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.124179][ T5361] usb 4-1: config 0 descriptor?? [ 495.231326][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 495.239592][ T24] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 495.248150][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.258420][ T24] usb 3-1: config 0 has no interfaces? [ 495.266347][ T24] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 495.275901][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.284534][ T24] usb 3-1: Product: syz [ 495.288855][ T24] usb 3-1: Manufacturer: syz [ 495.293807][ T24] usb 3-1: SerialNumber: syz [ 495.301328][ T24] usb 3-1: config 0 descriptor?? [ 495.471098][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 495.472790][T14659] __nla_validate_parse: 3 callbacks suppressed [ 495.472885][T14659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2736'. [ 495.497178][T14659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2736'. [ 495.515481][ T29] usb 3-1: USB disconnect, device number 23 [ 495.641892][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 495.763506][ T5361] input: HID 04d9:a055 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:04D9:A055.0026/input/input48 [ 495.793579][ T9] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 495.821047][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 495.827830][ T24] usb 5-1: config 182 has an invalid interface number: 81 but max is 0 [ 495.838071][ T24] usb 5-1: config 182 has no interface number 0 [ 495.845453][T14672] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2740'. [ 495.850552][ T24] usb 5-1: config 182 interface 81 has no altsetting 0 [ 495.867694][ T24] usb 5-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=99.33 [ 495.881902][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.881951][ T5361] holtek_kbd 0003:04D9:A055.0026: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.3-1/input1 [ 495.902387][ T24] usb 5-1: Product: syz [ 495.908648][ T24] usb 5-1: Manufacturer: syz [ 495.918423][ T24] usb 5-1: SerialNumber: syz [ 495.946474][ T1233] usb 4-1: USB disconnect, device number 27 [ 495.958153][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 495.973679][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.989220][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 496.001353][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.024474][T14673] fido_id[14673]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 496.025024][ T9] usb 2-1: config 0 descriptor?? [ 496.111670][ T29] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 496.241067][ T29] usb 1-1: device descriptor read/64, error -71 [ 496.294575][ T24] usb 5-1: USB disconnect, device number 12 [ 496.457344][T14682] sit0: entered promiscuous mode [ 496.465610][T14682] netlink: 'syz.1.2737': attribute type 3 has an invalid length. [ 496.473952][T14682] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2737'. [ 496.484096][ T29] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 496.496354][ T9] isku 0003:1E7D:319C.0027: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 496.556362][ T9] isku 0003:1E7D:319C.0027: couldn't init struct isku_device [ 496.592412][ T5625] Bluetooth: hci5: command tx timeout [ 496.594651][ T9] isku 0003:1E7D:319C.0027: couldn't install keyboard [ 496.631917][ T29] usb 1-1: device descriptor read/64, error -71 [ 496.661288][T14689] misc userio: Can't change port type on an already running userio instance [ 496.662171][ T9] isku 0003:1E7D:319C.0027: probe with driver isku failed with error -71 [ 496.696254][ T9] usb 2-1: USB disconnect, device number 14 [ 496.753107][ T29] usb usb1-port1: attempt power cycle [ 496.850623][T14695] x_tables: duplicate underflow at hook 3 [ 496.860424][T14695] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 496.880953][ T5720] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 496.957543][T14699] macsec1: entered promiscuous mode [ 496.973521][T14699] macsec1: entered allmulticast mode [ 497.025009][T14704] loop5: detected capacity change from 0 to 7 [ 497.033290][T14704] Dev loop5: unable to read RDB block 7 [ 497.039016][T14704] loop5: AHDI p1 p2 p3 [ 497.043912][T14704] loop5: partition table partially beyond EOD, truncated [ 497.053289][T14704] loop5: p1 start 1601398130 is beyond EOD, truncated [ 497.060488][T14704] loop5: p2 start 1702059890 is beyond EOD, truncated [ 497.072952][T14704] fuse: fd is not a fuse device [ 497.111190][ T29] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 497.131829][ T29] usb 1-1: device descriptor read/8, error -71 [ 497.161100][ T24] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 497.281350][ T5361] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 497.313675][ T24] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 497.323497][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.333562][ T24] usb 5-1: config 0 descriptor?? [ 497.342848][ T24] pwc: Samsung MPC-C10 USB webcam detected. [ 497.371075][ T29] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 497.391724][ T29] usb 1-1: device descriptor read/8, error -71 [ 497.433074][ T5361] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 497.441746][ T5361] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 497.450648][ T5361] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 497.462995][ T5361] usb 3-1: config 220 has no interface number 2 [ 497.469356][ T5361] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 497.483961][ T5361] usb 3-1: config 220 interface 0 has no altsetting 0 [ 497.491116][ T5361] usb 3-1: config 220 interface 76 has no altsetting 0 [ 497.498165][ T5361] usb 3-1: config 220 interface 1 has no altsetting 0 [ 497.507427][ T29] usb usb1-port1: unable to enumerate USB device [ 497.517242][ T5361] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 497.528787][ T5361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.537229][ T5361] usb 3-1: Product: syz [ 497.548179][ T24] pwc: send_video_command error -71 [ 497.562119][ T5361] usb 3-1: Manufacturer: syz [ 497.566978][ T24] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 497.578748][ T5361] usb 3-1: SerialNumber: syz [ 497.584071][ T24] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 497.610127][ T24] usb 5-1: USB disconnect, device number 13 [ 497.840978][ T29] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 497.990967][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 497.997778][ T29] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 498.006597][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.017547][ T29] usb 2-1: config 0 has no interfaces? [ 498.025277][ T29] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 498.036149][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.044295][ T29] usb 2-1: Product: syz [ 498.048508][ T29] usb 2-1: Manufacturer: syz [ 498.053203][ T29] usb 2-1: SerialNumber: syz [ 498.059612][ T29] usb 2-1: config 0 descriptor?? [ 498.091073][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 498.160965][ T5720] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 498.242569][ T24] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 498.252082][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.261812][ T24] usb 5-1: config 0 descriptor?? [ 498.272805][ T24] pwc: Samsung MPC-C10 USB webcam detected. [ 498.275654][ T808] usb 2-1: USB disconnect, device number 15 [ 498.313221][ T5720] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 498.324512][ T5720] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 498.335805][ T5720] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 498.346051][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.357094][T14710] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 498.368805][ T5720] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 498.573959][ T29] usb 4-1: USB disconnect, device number 29 [ 498.686914][T14697] syzkaller0: entered promiscuous mode [ 498.692571][T14697] syzkaller0: entered allmulticast mode [ 498.904113][ T24] pwc: recv_control_msg error -71 req 02 val 2b00 [ 498.921760][ T24] pwc: recv_control_msg error -71 req 02 val 2700 [ 498.928826][ T24] pwc: recv_control_msg error -71 req 04 val 1700 [ 498.936306][ T24] pwc: recv_control_msg error -71 req 02 val 2c00 [ 498.944326][ T24] pwc: recv_control_msg error -71 req 04 val 1000 [ 498.951569][ T24] pwc: recv_control_msg error -71 req 04 val 1300 [ 498.958811][ T24] pwc: recv_control_msg error -71 req 04 val 1400 [ 498.966963][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 498.975125][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 498.982397][ T24] pwc: recv_control_msg error -71 req 02 val 2200 [ 498.989458][ T24] pwc: recv_control_msg error -71 req 06 val 0600 [ 498.998011][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 499.005520][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 499.014861][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 499.022195][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 499.029155][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 499.036557][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 499.043988][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 499.051229][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 499.059641][ T24] pwc: Registered as video103. [ 499.074230][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input50 [ 499.101684][ T808] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 499.108501][ T24] usb 5-1: USB disconnect, device number 14 [ 499.280945][ T808] usb 2-1: Using ep0 maxpacket: 8 [ 499.290059][ T808] usb 2-1: config index 0 descriptor too short (expected 30482, got 18) [ 499.300561][ T808] usb 2-1: config 0 has too many interfaces: 101, using maximum allowed: 32 [ 499.309913][ T808] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 101 [ 499.322408][ T808] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 499.332325][ T808] usb 2-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0 [ 499.342561][ T808] usb 2-1: Product: syz [ 499.347135][ T808] usb 2-1: Manufacturer: syz [ 499.358143][ T808] usb 2-1: config 0 descriptor?? [ 499.374769][ T808] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 499.386556][ T808] usb 2-1: Detected FT2232C/D [ 499.491313][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 499.606730][ T808] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 499.624163][ T808] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 499.650451][ T808] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 499.683134][ T808] usb 2-1: USB disconnect, device number 16 [ 499.719882][ T808] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 499.748601][ T808] ftdi_sio 2-1:0.0: device disconnected [ 500.035673][ T5361] usb 3-1: selecting invalid altsetting 0 [ 500.061963][ T5361] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 500.091591][ T5361] uvcvideo 3-1:220.0: No valid video chain found. [ 500.115047][ T5361] usb 3-1: selecting invalid altsetting 0 [ 500.127083][ T5361] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 500.141905][ T5361] usb 3-1: USB disconnect, device number 24 [ 500.347091][T14743] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2763'. [ 500.362732][T14743] syzkaller1: entered promiscuous mode [ 500.369682][T14743] syzkaller1: entered allmulticast mode [ 500.450940][ T5361] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 500.532620][T14745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2764'. [ 500.592040][ T8412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.600330][ T8412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.608573][ T8412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.616782][ T8412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.625383][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.653838][ T5361] usb 3-1: config 2 has an invalid interface number: 145 but max is 2 [ 500.662315][ T5361] usb 3-1: config 2 has an invalid interface number: 146 but max is 2 [ 500.681975][ T5361] usb 3-1: config 2 has an invalid interface number: 54 but max is 2 [ 500.722167][ T5361] usb 3-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 500.756341][ T5361] usb 3-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 500.792949][ T5361] usb 3-1: config 2 has no interface number 0 [ 500.802044][ T5361] usb 3-1: config 2 has no interface number 1 [ 500.808532][ T5361] usb 3-1: config 2 has no interface number 2 [ 500.820150][ T5361] usb 3-1: config 2 interface 145 altsetting 253 endpoint 0x3 has an invalid bInterval 97, changing to 10 [ 500.833584][ T5361] usb 3-1: config 2 interface 145 altsetting 253 endpoint 0xE has invalid maxpacket 975, setting to 64 [ 500.842191][T14749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2766'. [ 500.855407][ T5361] usb 3-1: config 2 interface 145 altsetting 253 bulk endpoint 0xA has invalid maxpacket 8 [ 500.866812][ T5361] usb 3-1: config 2 interface 145 altsetting 253 has a duplicate endpoint with address 0xD, skipping [ 500.878811][ T5361] usb 3-1: config 2 interface 145 altsetting 253 has an invalid descriptor for endpoint zero, skipping [ 500.879212][T14749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2766'. [ 500.902983][ T5361] usb 3-1: config 2 interface 145 altsetting 253 has an invalid descriptor for endpoint zero, skipping [ 500.915957][ T5361] usb 3-1: config 2 interface 145 altsetting 253 has an invalid descriptor for endpoint zero, skipping [ 500.946966][ T5361] usb 3-1: config 2 interface 145 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 500.982903][T14751] netlink: 'syz.4.2766': attribute type 10 has an invalid length. [ 500.989054][ T5361] usb 3-1: config 2 interface 145 altsetting 253 has a duplicate endpoint with address 0x7, skipping [ 501.002570][ T1233] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 501.011029][ T5361] usb 3-1: config 2 interface 145 altsetting 253 has a duplicate endpoint with address 0x6, skipping [ 501.023589][T14751] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2766'. [ 501.047437][ T5361] usb 3-1: config 2 interface 145 altsetting 253 has an endpoint descriptor with address 0x36, changing to 0x6 [ 501.062166][T14750] bridge1: port 1(dummy0) entered blocking state [ 501.076502][ T5361] usb 3-1: config 2 interface 145 altsetting 253 has a duplicate endpoint with address 0x6, skipping [ 501.084465][T14750] bridge1: port 1(dummy0) entered disabled state [ 501.097915][T14750] dummy0: entered allmulticast mode [ 501.107711][T14750] dummy0: entered promiscuous mode [ 501.113063][ T5361] usb 3-1: config 2 interface 145 altsetting 253 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 501.113119][ T5361] usb 3-1: config 2 interface 146 altsetting 207 endpoint 0x5 has invalid wMaxPacketSize 0 [ 501.113146][ T5361] usb 3-1: config 2 interface 146 altsetting 207 has a duplicate endpoint with address 0xC, skipping [ 501.113171][ T5361] usb 3-1: config 2 interface 146 altsetting 207 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 501.113210][ T5361] usb 3-1: config 2 interface 54 altsetting 118 has a duplicate endpoint with address 0xB, skipping [ 501.176928][ T5361] usb 3-1: config 2 interface 54 altsetting 118 has a duplicate endpoint with address 0x8, skipping [ 501.179529][ T1233] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 501.199999][ T5361] usb 3-1: config 2 interface 54 altsetting 118 has a duplicate endpoint with address 0xE, skipping [ 501.214289][ T5361] usb 3-1: config 2 interface 54 altsetting 118 has a duplicate endpoint with address 0x6, skipping [ 501.226547][ T5361] usb 3-1: config 2 interface 54 altsetting 118 has a duplicate endpoint with address 0xD, skipping [ 501.239658][ T5361] usb 3-1: config 2 interface 54 altsetting 118 has a duplicate endpoint with address 0xD, skipping [ 501.240018][ T1233] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 501.261183][T14751] bridge1: port 1(dummy0) entered blocking state [ 501.267686][T14751] bridge1: port 1(dummy0) entered forwarding state [ 501.268752][ T1233] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 501.284198][ T1233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.294897][T14751] dummy0: left allmulticast mode [ 501.300332][ T5361] usb 3-1: config 2 interface 54 altsetting 118 has a duplicate endpoint with address 0x5, skipping [ 501.302412][T14747] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 501.322605][T14751] bridge1: port 1(dummy0) entered disabled state [ 501.334793][ T1233] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 501.338909][ T5361] usb 3-1: config 2 interface 54 altsetting 118 has a duplicate endpoint with address 0xC, skipping [ 501.357097][ T5361] usb 3-1: config 2 interface 54 altsetting 118 has a duplicate endpoint with address 0x9, skipping [ 501.369027][ T5361] usb 3-1: config 2 interface 54 altsetting 118 has a duplicate endpoint with address 0xA, skipping [ 501.451874][ T5361] usb 3-1: config 2 interface 54 altsetting 118 has an invalid descriptor for endpoint zero, skipping [ 501.468441][ T5361] usb 3-1: config 2 interface 54 altsetting 118 has a duplicate endpoint with address 0xB, skipping [ 501.532651][ T5361] usb 3-1: config 2 interface 54 altsetting 118 has a duplicate endpoint with address 0x1, skipping [ 501.558097][ T5361] usb 3-1: config 2 interface 145 has no altsetting 0 [ 501.567797][ T5361] usb 3-1: config 2 interface 146 has no altsetting 0 [ 501.576576][ T5361] usb 3-1: config 2 interface 54 has no altsetting 0 [ 501.605361][ T5361] usb 3-1: Dual-Role OTG device on HNP port [ 501.616254][ T5361] usb 3-1: New USB device found, idVendor=0499, idProduct=1018, bcdDevice=1e.9b [ 501.628587][ T5361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.645719][ T5361] usb 3-1: Product: 긘焛⼙ﲙà£ë®¨î¶ˆà¥ æµ‹ížŽçª¸ [ 501.654496][ T5361] usb 3-1: Manufacturer: ᜋ뽿胶筰噎઀糌ཙ㾘ୣëˆâ‰è·ºí–›ï¹¡ã˜±êŒ°ç©é®â›©å°Œã’¸â•™ç­ˆà¤¦æ´¦â®¯î’塌弣䓻ȃ꿱强ᦊ纳ఎ朒åŸå¦¯á“®ç ªè¥•Ùžé®ˆâ ³ï©ƒï’…ë—åºìˆ­á™ší™·é¤œá§²â­«åœ´â„è’­å¾±ê§éŽà©ªÓ©ã²Œé»ãˆ°í›‘ܙ೙é꺺筚î²è‘ªæ°›î©¢ï¹è‡ë‹»æ‘Ÿé‚‹á€²ç†½î„ªí†¨ë²Œê–¦ì¢‰êŒ–à¬èž¨ã¬”뙢㥓å¸é‰¹í¬å·„àµìµ‰ë¥¯ï…—ꎹ䂅࣬鬚蛽우㜥埳èžæ·¼ï¸”戗ᚈë±ã›–åž [ 501.691652][ T5361] usb 3-1: SerialNumber: 〠[ 501.736983][T14739] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 501.765049][T14739] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 502.232325][ T5361] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 502.256105][ T5361] snd-usb-audio 3-1:2.145: probe with driver snd-usb-audio failed with error -2 [ 502.423285][T14739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.471554][T14739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.498632][T14739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.527421][T14739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.573414][T14739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.600835][T14739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.645423][ T5361] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 502.669747][ T5361] snd-usb-audio 3-1:2.146: probe with driver snd-usb-audio failed with error -2 [ 502.712405][ T5361] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 502.825718][ T5361] snd-usb-audio 3-1:2.54: probe with driver snd-usb-audio failed with error -2 [ 502.894013][ T5361] usb 3-1: USB disconnect, device number 25 [ 502.960118][ T6228] udevd[6228]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.54/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 502.988433][T14771] loop3: detected capacity change from 0 to 7 [ 503.006089][T14771] Dev loop3: unable to read RDB block 7 [ 503.029091][T14771] loop3: unable to read partition table [ 503.042609][T14771] loop3: partition table beyond EOD, truncated [ 503.051383][ T9] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 503.061643][ T24] usb 2-1: USB disconnect, device number 17 [ 503.103950][T14771] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 503.224596][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.249827][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 503.278338][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 503.297802][T14774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.306352][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.315158][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.323393][ T9] usb 4-1: Product: syz [ 503.330044][ T9] usb 4-1: Manufacturer: syz [ 503.335756][ T9] usb 4-1: SerialNumber: syz [ 503.354980][T14774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.363746][ T8384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.390663][ T9] usb 4-1: config 0 descriptor?? [ 503.400990][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.615340][T14779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2775'. [ 503.707864][ T9] usb 4-1: USB disconnect, device number 31 [ 503.881077][ T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 503.926231][T14785] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2777'. [ 504.043802][ T24] usb 1-1: config 0 has an invalid interface number: 252 but max is 0 [ 504.067111][ T24] usb 1-1: config 0 has no interface number 0 [ 504.101377][ T24] usb 1-1: config 0 interface 252 has no altsetting 0 [ 504.125215][ T24] usb 1-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=5d.91 [ 504.141198][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.163642][ T24] usb 1-1: Product: syz [ 504.200697][ T24] usb 1-1: Manufacturer: syz [ 504.216504][ T24] usb 1-1: SerialNumber: syz [ 504.273576][ T24] usb 1-1: config 0 descriptor?? [ 504.338394][T14809] netlink: 'syz.4.2781': attribute type 4 has an invalid length. [ 504.482673][ T9] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 504.574334][T14810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.614477][T14810] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.642739][ T9] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 504.661862][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 504.673761][T14821] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2784'. [ 504.687643][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 504.699254][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 504.714040][ T9] usb 3-1: Product: syz [ 504.718546][ T9] usb 3-1: Manufacturer: syz [ 504.719548][T14810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.741431][ T9] usb 3-1: SerialNumber: syz [ 504.748270][ T9] usb 3-1: config 0 descriptor?? [ 504.773868][ T9] usb 3-1: selecting invalid altsetting 0 [ 504.936287][T14810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.006454][T14810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.025575][T14827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.083995][T14827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.103219][T14810] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 505.154473][ T9] usb 3-1: USB disconnect, device number 26 [ 505.177356][T14810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 505.278687][T14810] veth1_vlan: left promiscuous mode [ 505.304914][T14810] veth0_vlan: left promiscuous mode [ 505.334001][T14810] veth0_vlan: entered promiscuous mode [ 505.374738][T14810] veth1_vlan: entered promiscuous mode [ 505.394626][T14810] veth1_macvtap: left promiscuous mode [ 505.408613][T14810] veth0_macvtap: left promiscuous mode [ 505.415959][T14810] veth0_macvtap: entered promiscuous mode [ 505.431821][T14810] veth1_macvtap: entered promiscuous mode [ 505.482951][T14810] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 505.512775][T14810] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 505.525128][T14810] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 505.536137][T14810] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 505.557403][T14810] virt_wifi0: entered promiscuous mode [ 505.565805][T14810] virt_wifi0: entered allmulticast mode [ 505.616743][ T24] usb 1-1: USB disconnect, device number 25 [ 505.629194][ T8412] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.636439][ T8412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.662512][ T8412] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.669735][ T8412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.718933][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 505.725848][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.790500][ T8410] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.806175][ T8410] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.822935][T14829] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2786'. [ 505.835644][ T8410] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.853628][T14829] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2786'. [ 505.885139][T14829] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2786'. [ 505.927737][ T8410] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.352408][ T8412] net_ratelimit: 2 callbacks suppressed [ 506.352429][ T8412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.366284][ T8412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.374435][ T8412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.382670][ T8412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.391249][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.681018][ T5720] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 506.867112][ T5720] usb 4-1: Using ep0 maxpacket: 16 [ 506.920196][ T5720] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 506.951865][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.990591][ T5720] usb 4-1: Product: syz [ 507.014198][ T5720] usb 4-1: Manufacturer: syz [ 507.031372][ T5720] usb 4-1: SerialNumber: syz [ 507.058493][T14864] fuse: Bad value for 'fd' [ 507.231059][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 507.268743][T14850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2793'. [ 507.326854][T14873] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 507.395332][T14850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.412725][ T9] usb 5-1: config 0 has an invalid interface number: 199 but max is 1 [ 507.435917][ T9] usb 5-1: config 0 has no interface number 1 [ 507.461942][ T9] usb 5-1: config 0 interface 199 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 507.481571][T14850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.493819][ T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 507.516901][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 507.577356][ T9] usb 5-1: config 0 interface 199 has no altsetting 0 [ 507.602375][ T5720] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 507.623883][ T9] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 507.649388][ T5720] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 507.661189][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 507.663975][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 507.675452][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.711524][ T5720] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 507.712238][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.744002][ T9] usb 5-1: SerialNumber: syz [ 507.762905][ T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 507.786043][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.794619][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 507.803042][ T9] usb 5-1: config 0 descriptor?? [ 507.835192][ T24] usb 3-1: config 0 descriptor?? [ 507.917431][ T5720] usb 4-1: USB disconnect, device number 32 [ 507.966011][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 508.023282][T14858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2795'. [ 508.066239][ T9] uvcvideo 5-1:0.199: Found UVC 0.00 device (0002:0000) [ 508.098452][ T9] uvcvideo 5-1:0.199: No valid video chain found. [ 508.142215][ T9] usb 5-1: USB disconnect, device number 15 [ 508.328715][ T24] savu 0003:1E7D:2D5A.0028: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 508.633967][ T5704] usb 3-1: USB disconnect, device number 27 [ 509.061061][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 509.091137][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 509.221159][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 509.228166][ T24] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 509.237355][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 509.241423][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 509.248202][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 509.264543][ T9] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 509.264964][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 509.276080][ T9] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.286134][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.296148][ T9] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.303169][ T24] usb 5-1: Product: syz [ 509.303192][ T24] usb 5-1: Manufacturer: syz [ 509.303209][ T24] usb 5-1: SerialNumber: syz [ 509.320135][ T24] usb 5-1: 0:2 : does not exist [ 509.341433][ T9] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 509.354718][ T9] usb 1-1: config 7 interface 0 has no altsetting 0 [ 509.361465][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 509.370931][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.403213][ T5720] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 509.563091][ T5720] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 509.576112][ T5720] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.586614][ T5720] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 509.600752][ T5720] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 509.610694][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.622372][ T5720] usb 4-1: config 0 descriptor?? [ 509.630093][ T5720] usb-storage 4-1:0.0: USB Mass Storage device detected [ 509.647050][ T5720] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 509.736663][ T24] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 509.741379][ T1233] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 509.752139][ T5754] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 509.786648][ T24] usb 5-1: USB disconnect, device number 16 [ 509.838713][ T5720] usb 4-1: USB disconnect, device number 33 [ 509.847902][T14897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.862693][T14897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.883517][ T9] hid (null): unknown global tag 0xd [ 509.899813][ T9] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.0/0003:0458:5010.0029/input/input51 [ 509.912922][ T5754] usb 3-1: Using ep0 maxpacket: 8 [ 509.920604][ T1233] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 509.930419][ T1233] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 509.944723][ T5754] usb 3-1: unable to get BOS descriptor or descriptor too short [ 509.953314][ T1233] usb 2-1: config 0 interface 0 has no altsetting 0 [ 509.961783][ T5754] usb 3-1: config 9 has an invalid interface number: 111 but max is 0 [ 509.970584][ T5754] usb 3-1: config 9 has no interface number 0 [ 509.977345][ T5754] usb 3-1: config 9 interface 111 has no altsetting 0 [ 509.985702][ T1233] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 509.996166][ T1233] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 510.007450][ T9] kye 0003:0458:5010.0029: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 510.021987][ T1233] usb 2-1: Product: syz [ 510.027078][ T5754] usb 3-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice=f7.35 [ 510.037364][ T5754] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.047385][ T1233] usb 2-1: Manufacturer: syz [ 510.053165][ T1233] usb 2-1: SerialNumber: syz [ 510.057951][ T5754] usb 3-1: Product: syz [ 510.063751][ T5754] usb 3-1: Manufacturer: syz [ 510.069451][ T5754] usb 3-1: SerialNumber: syz [ 510.075010][ T1233] usb 2-1: config 0 descriptor?? [ 510.082696][ T1233] hub 2-1:0.0: bad descriptor, ignoring hub [ 510.089654][ T1233] hub 2-1:0.0: probe with driver hub failed with error -5 [ 510.112827][ T9] usb 1-1: USB disconnect, device number 26 [ 510.156486][T14912] fido_id[14912]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 510.180213][ T1233] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 510.218859][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 510.332912][ T5754] peak_usb 3-1:9.111 can0: unable to request usb[type=0 value=1] err=-71 [ 510.359253][ T5754] peak_usb 3-1:9.111: unable to read PCAN-USB Pro FD firmware info (err -71) [ 510.439702][ T30] audit: type=1326 audit(1782163072.203:9242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14914 comm="syz.4.2811" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542239ce59 code=0x7ffc0000 [ 510.488275][ T5754] peak_usb 3-1:9.111: probe with driver peak_usb failed with error -71 [ 510.533919][ T5754] usb 3-1: USB disconnect, device number 28 [ 510.542771][ T30] audit: type=1326 audit(1782163072.233:9243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14914 comm="syz.4.2811" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542239ce59 code=0x7ffc0000 [ 510.607173][ T30] audit: type=1326 audit(1782163072.233:9244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14914 comm="syz.4.2811" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542239ce59 code=0x7ffc0000 [ 510.705199][ T30] audit: type=1326 audit(1782163072.243:9245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14914 comm="syz.4.2811" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f542239ce59 code=0x7ffc0000 [ 510.729752][ T5704] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 510.737933][ T30] audit: type=1326 audit(1782163072.243:9246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14914 comm="syz.4.2811" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542239ce59 code=0x7ffc0000 [ 510.765478][ T30] audit: type=1326 audit(1782163072.243:9247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14914 comm="syz.4.2811" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542239ce59 code=0x7ffc0000 [ 510.790584][ T30] audit: type=1326 audit(1782163072.243:9248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14914 comm="syz.4.2811" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542239ce59 code=0x7ffc0000 [ 510.816596][ T30] audit: type=1326 audit(1782163072.253:9249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14914 comm="syz.4.2811" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542239ce59 code=0x7ffc0000 [ 510.860364][ T30] audit: type=1326 audit(1782163072.253:9250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14914 comm="syz.4.2811" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f542235d68e code=0x7ffc0000 [ 510.887299][ T5704] usb 5-1: device descriptor read/64, error -71 [ 510.950954][ T24] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 510.958753][ T30] audit: type=1326 audit(1782163072.253:9251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14914 comm="syz.4.2811" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f542239caeb code=0x7ffc0000 [ 511.065150][T14907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.087807][T14907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.105536][T14928] FAULT_INJECTION: forcing a failure. [ 511.105536][T14928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.124093][T14928] CPU: 1 UID: 0 PID: 14928 Comm: syz.2.2816 Tainted: G L syzkaller #0 PREEMPT(full) [ 511.124140][T14928] Tainted: [L]=SOFTLOCKUP [ 511.124149][T14928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 511.124163][T14928] Call Trace: [ 511.124171][T14928] [ 511.124180][T14928] dump_stack_lvl+0xe8/0x150 [ 511.124208][T14928] should_fail_ex+0x40c/0x560 [ 511.124235][T14928] _copy_from_user+0x2d/0xb0 [ 511.124268][T14928] ___sys_recvmsg+0x173/0x5a0 [ 511.124294][T14928] ? __pfx____sys_recvmsg+0x10/0x10 [ 511.124318][T14928] ? __fget_files+0x2a/0x420 [ 511.124351][T14928] ? rcu_is_watching+0x15/0xb0 [ 511.124383][T14928] ? __fget_files+0x3a2/0x420 [ 511.124418][T14928] do_recvmmsg+0x31a/0x7f0 [ 511.124445][T14928] ? __pfx_do_recvmmsg+0x10/0x10 [ 511.124471][T14928] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 511.124503][T14928] ? __fget_files+0x3a2/0x420 [ 511.124539][T14928] __x64_sys_recvmmsg+0x198/0x250 [ 511.124563][T14928] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 511.124588][T14928] ? rcu_is_watching+0x15/0xb0 [ 511.124612][T14928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.124634][T14928] do_syscall_64+0x174/0x580 [ 511.124662][T14928] ? trace_irq_disable+0x3b/0x140 [ 511.124695][T14928] ? clear_bhb_loop+0x40/0x90 [ 511.124719][T14928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.124740][T14928] RIP: 0033:0x7f15f679ce59 [ 511.124766][T14928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.124785][T14928] RSP: 002b:00007f15f76fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 511.124809][T14928] RAX: ffffffffffffffda RBX: 00007f15f6a15fa0 RCX: 00007f15f679ce59 [ 511.124826][T14928] RDX: 0000000000000001 RSI: 00002000000020c0 RDI: 0000000000000003 [ 511.124840][T14928] RBP: 00007f15f76fe090 R08: 0000000000000000 R09: 0000000000000000 [ 511.124854][T14928] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 511.124868][T14928] R13: 00007f15f6a16038 R14: 00007f15f6a15fa0 R15: 00007f15f6b3fa48 [ 511.124892][T14928] [ 511.366024][ T29] usb 2-1: USB disconnect, device number 18 [ 511.394388][ T5704] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 511.406900][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.407593][T14933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.419505][ T24] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 511.435669][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.447324][ T24] usb 4-1: config 0 descriptor?? [ 511.531105][ T5704] usb 5-1: device descriptor read/64, error -71 [ 511.651214][ T5704] usb usb5-port1: attempt power cycle [ 511.658830][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 511.666355][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 511.676724][ T24] usb 4-1: USB disconnect, device number 34 [ 511.691029][ T29] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 511.821177][ T29] usb 1-1: device descriptor read/64, error -71 [ 512.002331][ T5704] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 512.054361][T14939] netlink: 'syz.1.2820': attribute type 13 has an invalid length. [ 512.063422][T14939] netlink: 'syz.1.2820': attribute type 17 has an invalid length. [ 512.072366][ T29] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 512.082090][ T5704] usb 5-1: device descriptor read/8, error -71 [ 512.091155][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 512.114647][ T8410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.123421][ T8410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.131979][ T8410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.140663][ T8410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.151539][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.222056][ T29] usb 1-1: device descriptor read/64, error -71 [ 512.289857][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.301505][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 512.312183][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.324691][ T9] usb 4-1: config 0 descriptor?? [ 512.341022][ T5704] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 512.349849][ T29] usb usb1-port1: attempt power cycle [ 512.393580][ T5704] usb 5-1: device descriptor read/8, error -71 [ 512.411827][T14939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.423433][T14939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.460307][T14939] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 512.471055][T14939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 512.498728][T14939] veth1_vlan: left promiscuous mode [ 512.509285][T14939] veth1_vlan: entered promiscuous mode [ 512.519225][T14939] veth1_macvtap: left promiscuous mode [ 512.522104][ T5704] usb usb5-port1: unable to enumerate USB device [ 512.532934][T14939] veth0_macvtap: left promiscuous mode [ 512.539812][T14939] veth0_macvtap: entered promiscuous mode [ 512.558726][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 512.564307][T14939] veth1_macvtap: entered promiscuous mode [ 512.578162][T14939] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 512.580224][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 512.595323][ T9] usb 4-1: USB disconnect, device number 35 [ 512.711315][ T29] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 512.732148][ T29] usb 1-1: device descriptor read/8, error -71 [ 512.891087][ T9] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 512.971033][ T29] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 512.991754][ T29] usb 1-1: device descriptor read/8, error -71 [ 513.021021][ T9] usb 4-1: device descriptor read/64, error -71 [ 513.101823][ T29] usb usb1-port1: unable to enumerate USB device [ 513.261044][ T9] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 513.392651][ T9] usb 4-1: device descriptor read/64, error -71 [ 513.501560][ T9] usb usb4-port1: attempt power cycle [ 514.432282][T14954] loop5: detected capacity change from 0 to 7 [ 514.439252][T14954] Dev loop5: unable to read RDB block 7 [ 514.445022][T14954] loop5: unable to read partition table [ 514.451908][T14954] loop5: partition table beyond EOD, truncated [ 514.458494][T14954] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 514.771114][ T29] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 514.921008][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 514.928361][ T29] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 211, changing to 11 [ 514.941840][ T29] usb 1-1: New USB device found, idVendor=1b96, idProduct=000b, bcdDevice= 0.40 [ 514.951207][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.959252][ T29] usb 1-1: Product: syz [ 514.963633][ T29] usb 1-1: Manufacturer: syz [ 514.968378][ T29] usb 1-1: SerialNumber: syz [ 515.379463][T14958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2827'. [ 517.871490][ T8368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.879692][ T8368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.887938][ T8368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.896122][ T8368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.905403][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.196208][ T29] usbhid 1-1:1.0: can't add hid device: -32 [ 520.203128][ T29] usbhid 1-1:1.0: probe with driver usbhid failed with error -32 [ 523.631688][ T8412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.640163][ T8412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.648398][ T8412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.656623][ T8412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.665248][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.310536][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 527.318236][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 527.326379][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 527.334237][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 527.342146][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 527.848628][ T5627] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 527.856332][ T5627] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 527.864552][ T5627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 527.872814][ T5627] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 527.880261][ T5627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 528.870680][ T5625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 528.878179][ T5625] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 528.885932][ T5625] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 528.893870][ T5625] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 528.901656][ T5625] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 529.379279][ T5625] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 529.386714][ T5625] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 529.395369][ T5625] Bluetooth: hci0: command tx timeout [ 529.401668][ T8412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.407047][ T5633] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 529.410013][ T8412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.420035][ T5633] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 529.425061][ T8412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.434974][ T5633] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 529.440247][ T8412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.455821][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.878399][ T5633] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 529.885864][ T5633] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 529.893490][ T5633] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 529.901513][ T5633] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 529.908998][ T5633] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 529.951151][ T5633] Bluetooth: hci5: command tx timeout [ 530.991076][ T5633] Bluetooth: hci6: command tx timeout [ 531.471796][T14974] Bluetooth: hci7: command tx timeout [ 531.473360][ T5633] Bluetooth: hci0: command tx timeout [ 531.951381][T14974] Bluetooth: hci8: command tx timeout [ 532.031042][T14974] Bluetooth: hci5: command tx timeout [ 533.071216][T14974] Bluetooth: hci6: command tx timeout [ 533.551480][T14974] Bluetooth: hci0: command tx timeout [ 533.553161][ T5633] Bluetooth: hci7: command tx timeout [ 534.031367][ T5633] Bluetooth: hci8: command tx timeout [ 534.111215][ T5633] Bluetooth: hci5: command tx timeout [ 535.151662][ T5633] Bluetooth: hci6: command tx timeout [ 535.156217][ T8404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.165301][ T8404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.173502][ T8404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.181728][ T8404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.190398][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.631140][ T5633] Bluetooth: hci7: command tx timeout [ 535.631640][T14974] Bluetooth: hci0: command tx timeout [ 536.121138][T14974] Bluetooth: hci8: command tx timeout [ 536.191154][T14974] Bluetooth: hci5: command tx timeout [ 537.231124][T14974] Bluetooth: hci6: command tx timeout [ 537.711056][T14974] Bluetooth: hci7: command tx timeout [ 538.191293][T14974] Bluetooth: hci8: command tx timeout [ 540.911616][ T8367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.919867][ T8367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.928066][ T8367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.936261][ T8367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.944964][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.042156][ T8412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.050418][ T8412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.058648][ T8412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.066865][ T8412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.075559][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.792043][ T8368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.800299][ T8368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.808651][ T8368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.816849][ T8368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.825529][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.551982][ T8368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.560239][ T8368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.568929][ T8368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.577113][ T8368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.585740][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.153044][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.159630][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 576.751358][ T8412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.759550][ T8412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.767806][ T8412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.776232][ T8412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.784826][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.512843][ T8380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.521106][ T8380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.529277][ T8380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.537559][ T8380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.546179][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.436808][ T5633] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 587.444250][ T5633] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 587.451645][ T5633] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 587.459433][ T5633] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 587.468131][ T5633] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 587.928750][T14974] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 587.936291][T14974] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 587.944328][T14974] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 587.952492][T14974] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 587.960093][T14974] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 588.271610][ T8404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.279834][ T8404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.288064][ T8404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.296252][ T8404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.304896][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.939327][ T5633] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 588.947343][ T5633] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 588.954862][ T5633] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 588.962870][ T5633] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 588.970457][ T5633] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 589.444199][T14974] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 589.451727][T14974] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 589.459133][T14974] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 589.467379][T14974] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 589.475736][T14974] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 589.551749][ T5633] Bluetooth: hci9: command tx timeout [ 590.030978][ T5633] Bluetooth: hci10: command tx timeout [ 590.454973][T14974] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 590.462525][T14974] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 590.469910][T14974] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 590.478143][T14974] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 590.485824][T14974] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 590.990985][ T5633] Bluetooth: hci11: command tx timeout [ 591.551074][ T5633] Bluetooth: hci12: command tx timeout [ 591.631198][ T5633] Bluetooth: hci9: command tx timeout [ 592.111137][ T5633] Bluetooth: hci10: command tx timeout [ 592.511078][ T5633] Bluetooth: hci13: command tx timeout [ 593.071067][ T5633] Bluetooth: hci11: command tx timeout [ 593.391484][ T8380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.399885][ T8380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.408124][ T8380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.416307][ T8380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.424935][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.631041][ T5633] Bluetooth: hci12: command tx timeout [ 593.711206][ T5633] Bluetooth: hci9: command tx timeout [ 594.190996][ T5633] Bluetooth: hci10: command tx timeout [ 594.591165][ T5633] Bluetooth: hci13: command tx timeout [ 595.151068][ T5633] Bluetooth: hci11: command tx timeout [ 595.711037][ T5633] Bluetooth: hci12: command tx timeout [ 595.791248][ T5633] Bluetooth: hci9: command tx timeout [ 596.271035][ T5633] Bluetooth: hci10: command tx timeout [ 596.681097][ T5633] Bluetooth: hci13: command tx timeout [ 597.241056][ T5633] Bluetooth: hci11: command tx timeout [ 597.800952][ T5633] Bluetooth: hci12: command tx timeout [ 598.511810][ T8404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.520037][ T8404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.528363][ T8404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.536610][ T8404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.545189][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.751103][ T5633] Bluetooth: hci13: command tx timeout [ 603.631502][ T8367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.639760][ T8367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.647981][ T8367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.656185][ T8367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.664716][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.111337][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.119730][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.391530][ T8380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.399743][ T8380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.407964][ T8380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.416212][ T8380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.424897][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.511993][ T8380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.520214][ T8380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.528438][ T8380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.536643][ T8380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.545251][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.271378][ T8367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.279692][ T8367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.288079][ T8367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.296281][ T8367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.304918][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.031403][ T8367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.039616][ T8367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.047811][ T8367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.056019][ T8367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.064631][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.601946][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.608316][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.791814][ T8380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.800145][ T8380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.808364][ T8380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.816540][ T8380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.825201][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.551313][ T8404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.559529][ T8404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.567804][ T8404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.576010][ T8404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.584708][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.311671][ T8380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.319963][ T8380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.328273][ T8380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.336486][ T8380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.345267][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.505135][T14974] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 647.512631][T14974] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 647.520329][T14974] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 647.528222][T14974] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 647.535952][T14974] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 648.525465][ T5633] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 648.533123][ T5633] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 648.540654][ T5633] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 648.548855][ T5633] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 648.556608][ T5633] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 649.009829][T14974] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 649.017430][T14974] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 649.024867][T14974] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 649.032821][T14974] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 649.040466][T14974] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 649.073293][ T8367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.081553][ T8367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.089771][ T8367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.098044][ T8367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.106549][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.551052][T15015] Bluetooth: hci14: command tx timeout [ 650.023375][ T5625] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 650.031722][ T5625] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 650.039200][ T5625] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 650.047491][ T5625] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 650.055356][ T5625] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 650.513419][T15015] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 650.520980][T15015] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 650.528521][T15015] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 650.536614][T15015] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 650.544569][T15015] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 650.591167][T15015] Bluetooth: hci15: command tx timeout [ 651.071255][T15015] Bluetooth: hci16: command tx timeout [ 651.151204][ T5625] Bluetooth: hci5: command 0x0406 tx timeout [ 651.152995][T15015] Bluetooth: hci0: command 0x0406 tx timeout [ 651.158913][ T5625] Bluetooth: hci6: command 0x0406 tx timeout [ 651.631123][ T5633] Bluetooth: hci14: command tx timeout [ 652.112075][ T5633] Bluetooth: hci17: command tx timeout [ 652.591279][ T5633] Bluetooth: hci18: command tx timeout [ 652.671714][ T5633] Bluetooth: hci15: command tx timeout [ 653.151134][ T5633] Bluetooth: hci16: command tx timeout [ 653.711100][ T5633] Bluetooth: hci14: command tx timeout [ 654.191902][ T5633] Bluetooth: hci17: command tx timeout [ 654.197606][ T8412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.197687][ T8412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.197748][ T8412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.197807][ T8412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.198717][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.671401][T15015] Bluetooth: hci18: command tx timeout [ 654.751041][T15015] Bluetooth: hci15: command tx timeout [ 655.241062][T15015] Bluetooth: hci16: command tx timeout [ 655.791077][T15015] Bluetooth: hci14: command tx timeout [ 656.271608][T15015] Bluetooth: hci8: command 0x0406 tx timeout [ 656.272446][ T5627] Bluetooth: hci7: command 0x0406 tx timeout [ 656.277723][T14974] Bluetooth: hci17: command tx timeout [ 656.751371][ T5633] Bluetooth: hci18: command tx timeout [ 656.831121][ T5633] Bluetooth: hci15: command tx timeout [ 657.311451][ T5633] Bluetooth: hci16: command tx timeout [ 658.351055][ T5633] Bluetooth: hci17: command tx timeout [ 658.831052][ T5633] Bluetooth: hci18: command tx timeout [ 659.961505][ T8412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.969796][ T8412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.978148][ T8412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.986342][ T8412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.995007][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.711419][ T8368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.719643][ T8368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.727856][ T8368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.736073][ T8368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.744708][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.281028][ T31] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 668.288701][ T31] Tainted: G L syzkaller #0 [ 668.295320][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 668.304061][ T31] task:kworker/1:0 state:D stack:21688 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 668.316328][ T31] Workqueue: events netdev_rx_mode_work [ 668.322136][ T31] Call Trace: [ 668.325449][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 668.328402][ T31] __schedule+0x17d9/0x56c0 [ 668.333577][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 668.339500][ T31] ? __pfx___schedule+0x10/0x10 [ 668.344580][ T31] ? rcu_is_watching+0x15/0xb0 [ 668.349673][ T31] ? rcu_is_watching+0x15/0xb0 [ 668.354779][ T31] ? lock_release+0x4b/0x3c0 [ 668.359462][ T31] ? rcu_is_watching+0x15/0xb0 [ 668.364338][ T31] ? schedule+0x90/0x360 [ 668.368628][ T31] ? trace_irq_enable+0x3b/0x140 [ 668.373771][ T31] schedule+0x164/0x360 [ 668.377979][ T31] schedule_preempt_disabled+0x13/0x30 [ 668.384102][ T31] __mutex_lock+0x7bf/0x1550 [ 668.388782][ T31] ? __mutex_lock+0x5d4/0x1550 [ 668.394003][ T31] ? netdev_rx_mode_work+0x18/0x3c0 [ 668.399276][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 668.404721][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 668.411552][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 668.428690][ T31] ? rcu_is_watching+0x15/0xb0 [ 668.434178][ T31] ? lock_acquire+0x5f/0x350 [ 668.450858][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 668.456705][ T31] netdev_rx_mode_work+0x18/0x3c0 [ 668.472526][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 668.481078][ T31] process_scheduled_works+0xa8e/0x14e0 [ 668.489186][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 668.498434][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 668.503929][ T31] ? assign_work+0x3cf/0x5d0 [ 668.508584][ T31] worker_thread+0xa47/0xfb0 [ 668.513350][ T31] kthread+0x388/0x470 [ 668.517500][ T31] ? __pfx_worker_thread+0x10/0x10 [ 668.522931][ T31] ? __pfx_kthread+0x10/0x10 [ 668.527578][ T31] ret_from_fork+0x514/0xb70 [ 668.532746][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 668.537922][ T31] ? __switch_to+0xc89/0x1420 [ 668.542760][ T31] ? __pfx_kthread+0x10/0x10 [ 668.547414][ T31] ret_from_fork_asm+0x1a/0x30 [ 668.552372][ T31] [ 668.555677][ T31] INFO: task kworker/u8:26:8374 blocked for more than 143 seconds. [ 668.563692][ T31] Tainted: G L syzkaller #0 [ 668.570206][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 668.581771][ T31] task:kworker/u8:26 state:D stack:24760 pid:8374 tgid:8374 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 668.594839][ T31] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 668.602688][ T31] Call Trace: [ 668.606063][ T31] [ 668.609012][ T31] __schedule+0x17d9/0x56c0 [ 668.613692][ T31] ? update_cfs_rq_load_avg+0x426/0x4e0 [ 668.619310][ T31] ? rcu_is_watching+0x15/0xb0 [ 668.624212][ T31] ? __pfx___schedule+0x10/0x10 [ 668.629130][ T31] ? rcu_is_watching+0x15/0xb0 [ 668.634418][ T31] ? rcu_is_watching+0x15/0xb0 [ 668.639247][ T31] ? lock_release+0x4b/0x3c0 [ 668.643950][ T31] ? wq_worker_sleeping+0x66/0x250 [ 668.649115][ T31] schedule+0x164/0x360 [ 668.653420][ T31] schedule_preempt_disabled+0x13/0x30 [ 668.658926][ T31] __mutex_lock+0x7bf/0x1550 [ 668.663706][ T31] ? __mutex_lock+0x5d4/0x1550 [ 668.668533][ T31] ? udp_tunnel_nic_device_sync_work+0x29/0xa20 [ 668.675053][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 668.680158][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 668.685322][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 668.690738][ T31] ? rcu_is_watching+0x15/0xb0 [ 668.695711][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 668.701541][ T31] ? rcu_is_watching+0x15/0xb0 [ 668.706321][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 668.712549][ T31] udp_tunnel_nic_device_sync_work+0x29/0xa20 [ 668.718699][ T31] ? rcu_is_watching+0x15/0xb0 [ 668.723620][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 668.729385][ T31] process_scheduled_works+0xa8e/0x14e0 [ 668.735019][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 668.741316][ T31] ? do_raw_spin_lock+0x26c/0x2f0 [ 668.746400][ T31] ? assign_work+0x3cf/0x5d0 [ 668.751584][ T31] worker_thread+0xa47/0xfb0 [ 668.756256][ T31] kthread+0x388/0x470 [ 668.760349][ T31] ? __pfx_worker_thread+0x10/0x10 [ 668.765570][ T31] ? __pfx_kthread+0x10/0x10 [ 668.770371][ T31] ret_from_fork+0x514/0xb70 [ 668.775044][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 668.780191][ T31] ? __switch_to+0xc89/0x1420 [ 668.785013][ T31] ? __pfx_kthread+0x10/0x10 [ 668.789656][ T31] ret_from_fork_asm+0x1a/0x30 [ 668.794552][ T31] [ 668.797641][ T31] INFO: task kworker/u8:33:8384 blocked for more than 143 seconds. [ 668.809958][ T31] Tainted: G L syzkaller #0 [ 668.816564][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 668.825421][ T31] task:kworker/u8:33 state:D stack:22616 pid:8384 tgid:8384 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 668.837750][ T31] Workqueue: netns cleanup_net [ 668.843183][ T31] Call Trace: [ 668.846584][ T31] [ 668.849611][ T31] __schedule+0x17d9/0x56c0 [ 668.854219][ T31] ? unwind_next_frame+0x1baf/0x2550 [ 668.859575][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 668.865882][ T31] ? __pfx___schedule+0x10/0x10 [ 668.870891][ T31] ? rcu_is_watching+0x15/0xb0 [ 668.875728][ T31] ? rcu_is_watching+0x15/0xb0 [ 668.880534][ T31] ? lock_release+0x4b/0x3c0 [ 668.885287][ T31] ? wq_worker_sleeping+0x66/0x250 [ 668.890490][ T31] schedule+0x164/0x360 [ 668.894823][ T31] schedule_preempt_disabled+0x13/0x30 [ 668.900336][ T31] __mutex_lock+0x7bf/0x1550 [ 668.905119][ T31] ? process_scheduled_works+0xa8e/0x14e0 [ 668.911100][ T31] ? __mutex_lock+0x5d4/0x1550 [ 668.915969][ T31] ? unregister_netdevice_notifier_net+0x87/0x2f0 [ 668.922566][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 668.927654][ T31] unregister_netdevice_notifier_net+0x87/0x2f0 [ 668.934135][ T31] ? net_generic+0x1e/0x240 [ 668.939002][ T31] ? __pfx_unregister_netdevice_notifier_net+0x10/0x10 [ 668.946013][ T31] ? net_generic+0x1e/0x240 [ 668.950571][ T31] ? lock_release+0x4b/0x3c0 [ 668.955838][ T31] ? net_generic+0x1e/0x240 [ 668.960399][ T31] ? net_generic+0x1e/0x240 [ 668.965029][ T31] ? net_generic+0x1f4/0x240 [ 668.969667][ T31] ops_undo_list+0x43d/0x8d0 [ 668.974346][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 668.979521][ T31] ? idr_destroy+0x218/0x290 [ 668.984266][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 668.989433][ T31] cleanup_net+0x572/0x810 [ 668.994014][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 668.999009][ T31] ? lock_acquire+0x5f/0x350 [ 669.003725][ T31] ? rcu_is_watching+0x15/0xb0 [ 669.008559][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 669.014383][ T31] process_scheduled_works+0xa8e/0x14e0 [ 669.019997][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 669.026116][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 669.031295][ T31] ? assign_work+0x3cf/0x5d0 [ 669.035979][ T31] worker_thread+0xa47/0xfb0 [ 669.040611][ T31] kthread+0x388/0x470 [ 669.044953][ T31] ? __pfx_worker_thread+0x10/0x10 [ 669.050142][ T31] ? __pfx_kthread+0x10/0x10 [ 669.054826][ T31] ret_from_fork+0x514/0xb70 [ 669.059453][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 669.064641][ T31] ? __switch_to+0xc89/0x1420 [ 669.069358][ T31] ? __pfx_kthread+0x10/0x10 [ 669.074139][ T31] ret_from_fork_asm+0x1a/0x30 [ 669.078987][ T31] [ 669.082201][ T31] INFO: task kworker/u8:54:8410 blocked for more than 144 seconds. [ 669.090125][ T31] Tainted: G L syzkaller #0 [ 669.096789][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 669.105535][ T31] task:kworker/u8:54 state:D stack:22648 pid:8410 tgid:8410 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 669.117713][ T31] Workqueue: ipv6_addrconf addrconf_dad_work [ 669.123815][ T31] Call Trace: [ 669.127127][ T31] [ 669.130103][ T31] __schedule+0x17d9/0x56c0 [ 669.134719][ T31] ? deref_stack_reg+0x18e/0x220 [ 669.139717][ T31] ? unwind_next_frame+0x8f/0x2550 [ 669.145103][ T31] ? unwind_next_frame+0x1baf/0x2550 [ 669.150453][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 669.155686][ T31] ? unwind_next_frame+0x8f/0x2550 [ 669.160913][ T31] ? arch_stack_walk+0x11b/0x150 [ 669.165898][ T31] ? __pfx___schedule+0x10/0x10 [ 669.170900][ T31] ? rcu_is_watching+0x15/0xb0 [ 669.175708][ T31] ? rcu_is_watching+0x15/0xb0 [ 669.180596][ T31] ? lock_release+0x4b/0x3c0 [ 669.185269][ T31] ? wq_worker_sleeping+0x66/0x250 [ 669.190418][ T31] schedule+0x164/0x360 [ 669.194694][ T31] schedule_preempt_disabled+0x13/0x30 [ 669.200213][ T31] __mutex_lock+0x7bf/0x1550 [ 669.204906][ T31] ? __mutex_lock+0x5d4/0x1550 [ 669.209720][ T31] ? addrconf_dad_work+0x116/0x15c0 [ 669.215036][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 669.220112][ T31] ? rcu_is_watching+0x15/0xb0 [ 669.224967][ T31] ? trace_hrtimer_start+0x82/0x200 [ 669.230210][ T31] addrconf_dad_work+0x116/0x15c0 [ 669.235656][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 669.241153][ T31] ? __pfx_addrconf_dad_work+0x10/0x10 [ 669.246668][ T31] ? rcu_is_watching+0x15/0xb0 [ 669.251569][ T31] ? lock_acquire+0x5f/0x350 [ 669.256197][ T31] ? rcu_is_watching+0x15/0xb0 [ 669.261214][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 669.266989][ T31] process_scheduled_works+0xa8e/0x14e0 [ 669.273514][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 669.279571][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 669.284731][ T31] ? assign_work+0x3cf/0x5d0 [ 669.289506][ T31] worker_thread+0xa47/0xfb0 [ 669.294269][ T31] kthread+0x388/0x470 [ 669.298401][ T31] ? __pfx_worker_thread+0x10/0x10 [ 669.303664][ T31] ? __pfx_kthread+0x10/0x10 [ 669.308307][ T31] ret_from_fork+0x514/0xb70 [ 669.313340][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 669.318530][ T31] ? __switch_to+0xc89/0x1420 [ 669.323377][ T31] ? __pfx_kthread+0x10/0x10 [ 669.328011][ T31] ret_from_fork_asm+0x1a/0x30 [ 669.332911][ T31] [ 669.335985][ T31] INFO: task kworker/u8:56:8413 blocked for more than 144 seconds. [ 669.344123][ T31] Tainted: G L syzkaller #0 [ 669.350687][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 669.359502][ T31] task:kworker/u8:56 state:D stack:21656 pid:8413 tgid:8413 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 669.371924][ T31] Workqueue: events_unbound linkwatch_event [ 669.377864][ T31] Call Trace: [ 669.381329][ T31] [ 669.384325][ T31] __schedule+0x17d9/0x56c0 [ 669.388884][ T31] ? rcu_is_watching+0x15/0xb0 [ 669.393910][ T31] ? rcu_is_watching+0x15/0xb0 [ 669.398772][ T31] ? irqentry_exit+0x218/0x8f0 [ 669.403722][ T31] ? trace_irq_disable+0x3b/0x140 [ 669.408976][ T31] ? __pfx___schedule+0x10/0x10 [ 669.413955][ T31] ? rcu_is_watching+0x15/0xb0 [ 669.418757][ T31] ? rcu_is_watching+0x15/0xb0 [ 669.423678][ T31] ? lock_release+0x4b/0x3c0 [ 669.428415][ T31] ? wq_worker_sleeping+0x66/0x250 [ 669.433675][ T31] schedule+0x164/0x360 [ 669.437905][ T31] schedule_preempt_disabled+0x13/0x30 [ 669.443499][ T31] __mutex_lock+0x7bf/0x1550 [ 669.448156][ T31] ? __mutex_lock+0x5d4/0x1550 [ 669.453024][ T31] ? linkwatch_event+0xe/0x60 [ 669.457834][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 669.463003][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 669.468783][ T31] ? rcu_is_watching+0x15/0xb0 [ 669.473733][ T31] ? rcu_is_watching+0x15/0xb0 [ 669.478560][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 669.484526][ T31] linkwatch_event+0xe/0x60 [ 669.489129][ T31] process_scheduled_works+0xa8e/0x14e0 [ 669.494825][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 669.500946][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 669.506077][ T31] ? assign_work+0x3cf/0x5d0 [ 669.510721][ T31] worker_thread+0xa47/0xfb0 [ 669.515475][ T31] kthread+0x388/0x470 [ 669.519655][ T31] ? __pfx_worker_thread+0x10/0x10 [ 669.524891][ T31] ? __pfx_kthread+0x10/0x10 [ 669.529522][ T31] ret_from_fork+0x514/0xb70 [ 669.534208][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 669.539364][ T31] ? __switch_to+0xc89/0x1420 [ 669.544198][ T31] ? __pfx_kthread+0x10/0x10 [ 669.548849][ T31] ret_from_fork_asm+0x1a/0x30 [ 669.554275][ T31] [ 669.557416][ T31] INFO: task syz.1.2820:14939 blocked for more than 144 seconds. [ 669.565405][ T31] Tainted: G L syzkaller #0 [ 669.572027][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 669.580732][ T31] task:syz.1.2820 state:D stack:22344 pid:14939 tgid:14938 ppid:5642 task_flags:0x400140 flags:0x00080002 [ 669.593060][ T31] Call Trace: [ 669.596382][ T31] [ 669.599329][ T31] __schedule+0x17d9/0x56c0 [ 669.603942][ T31] ? rcu_is_watching+0x15/0xb0 [ 669.608756][ T31] ? rcu_is_watching+0x15/0xb0 [ 669.613639][ T31] ? irqentry_exit+0x218/0x8f0 [ 669.618481][ T31] ? trace_irq_disable+0x3b/0x140 [ 669.623656][ T31] ? __pfx___schedule+0x10/0x10 [ 669.628568][ T31] ? rcu_is_watching+0x15/0xb0 [ 669.634260][ T31] ? rcu_is_watching+0x15/0xb0 [ 669.639080][ T31] ? lock_release+0x4b/0x3c0 [ 669.643758][ T31] ? rcu_is_watching+0x15/0xb0 [ 669.648559][ T31] schedule+0x164/0x360 [ 669.652800][ T31] schedule_preempt_disabled+0x13/0x30 [ 669.658306][ T31] __mutex_lock+0x7bf/0x1550 [ 669.663053][ T31] ? __mutex_lock+0x5d4/0x1550 [ 669.667884][ T31] ? __ethtool_get_link_ksettings+0x109/0x250 [ 669.674144][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 669.679231][ T31] ? igmp_group_added+0x238/0x910 [ 669.684349][ T31] ? igmpv3_del_delrec+0x204/0x710 [ 669.689503][ T31] __ethtool_get_link_ksettings+0x109/0x250 [ 669.695537][ T31] bond_netdev_event+0x643/0xf80 [ 669.700573][ T31] ? __pfx_bond_netdev_event+0x10/0x10 [ 669.706291][ T31] ? __pfx_inetdev_event+0x10/0x10 [ 669.711567][ T31] ? ipmr_device_event+0x1f6/0x220 [ 669.716722][ T31] notifier_call_chain+0x1a5/0x3d0 [ 669.721941][ T31] __dev_notify_flags+0x1aa/0x310 [ 669.727018][ T31] ? __pfx___dev_notify_flags+0x10/0x10 [ 669.732667][ T31] ? __dev_change_flags+0x5f1/0x820 [ 669.737911][ T31] ? __pfx___dev_change_flags+0x10/0x10 [ 669.743586][ T31] ? __kmalloc_cache_noprof+0x318/0x660 [ 669.749195][ T31] netif_change_flags+0xde/0x1b0 [ 669.754244][ T31] dev_change_flags+0x128/0x260 [ 669.759163][ T31] vlan_device_event+0x1b4e/0x1f00 [ 669.764438][ T31] ? packet_notifier+0xf1b/0xf70 [ 669.769416][ T31] ? br_device_event+0x282/0x9c0 [ 669.774444][ T31] ? __pfx_phonet_device_notify+0x10/0x10 [ 669.780224][ T31] ? __pfx_vlan_device_event+0x10/0x10 [ 669.785813][ T31] ? bcm_notifier+0xa9/0x890 [ 669.790523][ T31] ? raw_notifier+0x9d/0x7d0 [ 669.795611][ T31] ? cgw_notifier+0x314/0x380 [ 669.800338][ T31] notifier_call_chain+0x1a5/0x3d0 [ 669.805543][ T31] __dev_notify_flags+0x1aa/0x310 [ 669.810621][ T31] ? __pfx___dev_notify_flags+0x10/0x10 [ 669.816419][ T31] ? __dev_change_flags+0x5f1/0x820 [ 669.821756][ T31] ? __pfx___dev_change_flags+0x10/0x10 [ 669.827361][ T31] ? do_setlink+0x3c9f/0x4670 [ 669.832112][ T31] netif_change_flags+0xde/0x1b0 [ 669.837118][ T31] do_setlink+0xdd6/0x4670 [ 669.841607][ T31] ? __wake_up_klogd+0xe6/0x120 [ 669.846495][ T31] ? __pfx_vprintk_emit+0x10/0x10 [ 669.851595][ T31] ? __pfx_do_setlink+0x10/0x10 [ 669.856499][ T31] ? _printk+0xdd/0x130 [ 669.860673][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 669.866590][ T31] ? ___ratelimit+0x584/0x8e0 [ 669.871369][ T31] ? __mutex_trylock_common+0x15f/0x270 [ 669.876957][ T31] ? __pfx___mutex_trylock_common+0x10/0x10 [ 669.882928][ T31] ? rcu_is_watching+0x15/0xb0 [ 669.887725][ T31] ? trace_contention_end+0x3d/0x140 [ 669.893087][ T31] ? __mutex_lock+0x30d/0x1550 [ 669.897914][ T31] ? rtnl_newlink+0x8a3/0x1bd0 [ 669.902749][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 669.907824][ T31] ? ns_capable+0x89/0xe0 [ 669.912237][ T31] ? rtnl_link_get_net_capable+0xd3/0x310 [ 669.917997][ T31] rtnl_newlink+0x148e/0x1bd0 [ 669.922930][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 669.928035][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 669.933409][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 669.938641][ T31] ? kernel_text_address+0xa5/0xe0 [ 669.943851][ T31] ? __kernel_text_address+0xd/0x30 [ 669.949122][ T31] ? unwind_get_return_address+0x4d/0x90 [ 669.954856][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 669.961090][ T31] ? __skb_flow_dissect+0x3fe/0x6c40 [ 669.966412][ T31] ? rcu_is_watching+0x15/0xb0 [ 669.971393][ T31] ? rcu_is_watching+0x15/0xb0 [ 669.976225][ T31] ? lock_release+0x4b/0x3c0 [ 669.980896][ T31] ? unwind_next_frame+0x8f/0x2550 [ 669.986045][ T31] ? rcu_is_watching+0x15/0xb0 [ 669.990914][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 669.996160][ T31] ? rcu_is_watching+0x15/0xb0 [ 670.001030][ T31] ? rcu_is_watching+0x15/0xb0 [ 670.005852][ T31] ? lock_release+0x4b/0x3c0 [ 670.010460][ T31] ? lock_release+0x4b/0x3c0 [ 670.015137][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 670.020465][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 670.025730][ T31] ? kernel_text_address+0xa5/0xe0 [ 670.031701][ T31] ? __kernel_text_address+0xd/0x30 [ 670.036965][ T31] ? unwind_get_return_address+0x4d/0x90 [ 670.042700][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 670.048990][ T31] ? arch_stack_walk+0xfb/0x150 [ 670.054024][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 670.059199][ T31] ? rcu_is_watching+0x15/0xb0 [ 670.064065][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 670.069137][ T31] ? rcu_is_watching+0x15/0xb0 [ 670.073994][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 670.079070][ T31] ? lock_release+0x4b/0x3c0 [ 670.083742][ T31] ? bpf_lsm_capable+0x9/0x20 [ 670.088454][ T31] ? security_capable+0x7e/0x2c0 [ 670.093527][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 670.098607][ T31] rtnetlink_rcv_msg+0x802/0xc00 [ 670.103663][ T31] ? kasan_save_track+0x3e/0x80 [ 670.108591][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 670.113922][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 670.119471][ T31] ? __netlink_lookup+0xc6/0x8b0 [ 670.124518][ T31] ? rcu_is_watching+0x15/0xb0 [ 670.129329][ T31] netlink_rcv_skb+0x226/0x4a0 [ 670.134191][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 670.139695][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 670.145225][ T31] ? net_generic+0x1e/0x240 [ 670.149800][ T31] ? net_generic+0x1e/0x240 [ 670.154404][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 670.159636][ T31] netlink_unicast+0x7bb/0x940 [ 670.164539][ T31] netlink_sendmsg+0x813/0xb40 [ 670.169362][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 670.174778][ T31] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 670.181294][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 670.186628][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 670.191845][ T31] ____sys_sendmsg+0x54e/0x850 [ 670.196654][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 670.202383][ T31] ? lock_release+0x4b/0x3c0 [ 670.207197][ T31] ? import_iovec+0x73/0xa0 [ 670.212015][ T31] ___sys_sendmsg+0x2a5/0x360 [ 670.216846][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 670.222322][ T31] ? futex_wake+0x51b/0x5f0 [ 670.226919][ T31] ? __fget_files+0x2a/0x420 [ 670.231641][ T31] ? __fget_files+0x3a2/0x420 [ 670.236412][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 670.241462][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 670.247052][ T31] ? rcu_is_watching+0x15/0xb0 [ 670.252070][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.258201][ T31] do_syscall_64+0x174/0x580 [ 670.262896][ T31] ? trace_irq_disable+0x3b/0x140 [ 670.268002][ T31] ? clear_bhb_loop+0x40/0x90 [ 670.272809][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.278770][ T31] RIP: 0033:0x7fe3d0f9ce59 [ 670.283268][ T31] RSP: 002b:00007fe3d1f02028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 670.291770][ T31] RAX: ffffffffffffffda RBX: 00007fe3d1215fa0 RCX: 00007fe3d0f9ce59 [ 670.299854][ T31] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 670.307916][ T31] RBP: 00007fe3d1032e6f R08: 0000000000000000 R09: 0000000000000000 [ 670.316005][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 670.324134][ T31] R13: 00007fe3d1216038 R14: 00007fe3d1215fa0 R15: 00007fe3d133fa48 [ 670.332201][ T31] [ 670.335256][ T31] INFO: task syz.2.2821:14942 blocked for more than 145 seconds. [ 670.343079][ T31] Tainted: G L syzkaller #0 [ 670.349597][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 670.358429][ T31] task:syz.2.2821 state:D stack:27640 pid:14942 tgid:14941 ppid:14480 task_flags:0x400140 flags:0x00080002 [ 670.370730][ T31] Call Trace: [ 670.374358][ T31] [ 670.377354][ T31] __schedule+0x17d9/0x56c0 [ 670.382050][ T31] ? __pfx___schedule+0x10/0x10 [ 670.386975][ T31] ? rcu_is_watching+0x15/0xb0 [ 670.392010][ T31] ? rcu_is_watching+0x15/0xb0 [ 670.396835][ T31] ? lock_release+0x4b/0x3c0 [ 670.401503][ T31] ? rcu_is_watching+0x15/0xb0 [ 670.406301][ T31] schedule+0x164/0x360 [ 670.410466][ T31] schedule_preempt_disabled+0x13/0x30 [ 670.416027][ T31] __mutex_lock+0x7bf/0x1550 [ 670.420656][ T31] ? __mutex_lock+0x5d4/0x1550 [ 670.425496][ T31] ? __tun_chr_ioctl+0x3bc/0x1e10 [ 670.430631][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 670.435818][ T31] ? lock_release+0x4b/0x3c0 [ 670.440456][ T31] ? __might_fault+0xaf/0x130 [ 670.445219][ T31] ? __might_fault+0xcb/0x130 [ 670.449978][ T31] __tun_chr_ioctl+0x3bc/0x1e10 [ 670.454969][ T31] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 670.460295][ T31] ? __fget_files+0x2a/0x420 [ 670.464986][ T31] ? __fget_files+0x3a2/0x420 [ 670.469702][ T31] ? __fget_files+0x2a/0x420 [ 670.474511][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 670.479510][ T31] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 670.484735][ T31] __se_sys_ioctl+0xfc/0x170 [ 670.489381][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.495552][ T31] do_syscall_64+0x174/0x580 [ 670.500193][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.506502][ T31] ? clear_bhb_loop+0x40/0x90 [ 670.511468][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.517445][ T31] RIP: 0033:0x7f15f679ce59 [ 670.521976][ T31] RSP: 002b:00007f15f76fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 670.530556][ T31] RAX: ffffffffffffffda RBX: 00007f15f6a15fa0 RCX: 00007f15f679ce59 [ 670.538666][ T31] RDX: 0000200000000200 RSI: 00000000400454ca RDI: 0000000000000006 [ 670.546732][ T31] RBP: 00007f15f6832e6f R08: 0000000000000000 R09: 0000000000000000 [ 670.554791][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 670.562840][ T31] R13: 00007f15f6a16038 R14: 00007f15f6a15fa0 R15: 00007f15f6b3fa48 [ 670.570936][ T31] [ 670.574018][ T31] INFO: task syz.4.2822:14945 blocked for more than 145 seconds. [ 670.582157][ T31] Tainted: G L syzkaller #0 [ 670.588877][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 670.597687][ T31] task:syz.4.2822 state:D stack:25400 pid:14945 tgid:14944 ppid:5646 task_flags:0x400140 flags:0x00080002 [ 670.609766][ T31] Call Trace: [ 670.613129][ T31] [ 670.616096][ T31] __schedule+0x17d9/0x56c0 [ 670.620628][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 670.625776][ T31] ? rcu_is_watching+0x15/0xb0 [ 670.630586][ T31] ? rcu_is_watching+0x15/0xb0 [ 670.635477][ T31] ? __pfx___schedule+0x10/0x10 [ 670.640383][ T31] ? rcu_is_watching+0x15/0xb0 [ 670.645301][ T31] ? rcu_is_watching+0x15/0xb0 [ 670.650132][ T31] ? lock_release+0x4b/0x3c0 [ 670.654913][ T31] ? rcu_is_watching+0x15/0xb0 [ 670.659722][ T31] schedule+0x164/0x360 [ 670.664033][ T31] schedule_preempt_disabled+0x13/0x30 [ 670.670232][ T31] __mutex_lock+0x7bf/0x1550 [ 670.675566][ T31] ? __mutex_lock+0x5d4/0x1550 [ 670.680401][ T31] ? rtnl_newlink+0x8a3/0x1bd0 [ 670.685537][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 670.690625][ T31] ? ns_capable+0x89/0xe0 [ 670.695222][ T31] ? rtnl_link_get_net_capable+0xd3/0x310 [ 670.701127][ T31] rtnl_newlink+0x8a3/0x1bd0 [ 670.705766][ T31] ? rtnl_newlink+0x811/0x1bd0 [ 670.710637][ T31] ? netlink_deliver_tap+0x19c/0x1b0 [ 670.716012][ T31] ? netlink_unicast+0x77f/0x940 [ 670.721045][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 670.726115][ T31] ? do_syscall_64+0x174/0x580 [ 670.730994][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.737104][ T31] ? rcu_is_watching+0x15/0xb0 [ 670.741980][ T31] ? trace_irq_enable+0x3b/0x140 [ 670.746978][ T31] ? nlmon_xmit+0xb0/0x100 [ 670.751585][ T31] ? kmem_cache_free+0x182/0x650 [ 670.756600][ T31] ? dev_hard_start_xmit+0x7c7/0x830 [ 670.761978][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 670.767133][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 670.772355][ T31] ? rcu_is_watching+0x15/0xb0 [ 670.777259][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 670.782481][ T31] ? trace_irq_enable+0x3b/0x140 [ 670.787485][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 670.792743][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 670.797918][ T31] ? __local_bh_enable_ip+0xd0/0x130 [ 670.803492][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 670.808692][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 670.813862][ T31] ? lock_release+0x4b/0x3c0 [ 670.818490][ T31] ? bpf_lsm_capable+0x9/0x20 [ 670.823250][ T31] ? security_capable+0x7e/0x2c0 [ 670.828226][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 670.833842][ T31] rtnetlink_rcv_msg+0x802/0xc00 [ 670.838858][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 670.844084][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 670.849593][ T31] ? ref_tracker_free+0x689/0x830 [ 670.854733][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 670.860151][ T31] netlink_rcv_skb+0x226/0x4a0 [ 670.865028][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 670.870625][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 670.876047][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 670.881342][ T31] netlink_unicast+0x7bb/0x940 [ 670.886171][ T31] netlink_sendmsg+0x813/0xb40 [ 670.891069][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 670.896429][ T31] ? futex_unqueue+0x22/0x240 [ 670.901272][ T31] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 670.907854][ T31] ? lock_release+0x4b/0x3c0 [ 670.913014][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 670.918394][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 670.923657][ T31] ____sys_sendmsg+0x54e/0x850 [ 670.928477][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 670.934036][ T31] ? lock_release+0x4b/0x3c0 [ 670.938694][ T31] ? import_iovec+0x73/0xa0 [ 670.943352][ T31] ___sys_sendmsg+0x2a5/0x360 [ 670.948078][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 670.953539][ T31] ? futex_wait+0x2a2/0x390 [ 670.958130][ T31] ? __fget_files+0x2a/0x420 [ 670.962845][ T31] ? __fget_files+0x3a2/0x420 [ 670.967575][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 670.972621][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 670.978128][ T31] ? rcu_is_watching+0x15/0xb0 [ 670.982996][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.989142][ T31] do_syscall_64+0x174/0x580 [ 670.993875][ T31] ? clear_bhb_loop+0x40/0x90 [ 670.998597][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.004588][ T31] RIP: 0033:0x7f542239ce59 [ 671.009061][ T31] RSP: 002b:00007f542333c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 671.017661][ T31] RAX: ffffffffffffffda RBX: 00007f5422615fa0 RCX: 00007f542239ce59 [ 671.026122][ T31] RDX: 0000000004004850 RSI: 0000200000000140 RDI: 0000000000000005 [ 671.034230][ T31] RBP: 00007f5422432e6f R08: 0000000000000000 R09: 0000000000000000 [ 671.042351][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 671.050383][ T31] R13: 00007f5422616038 R14: 00007f5422615fa0 R15: 00007f542273fa48 [ 671.058629][ T31] [ 671.062206][ T31] INFO: task syz.3.2824:14951 blocked for more than 146 seconds. [ 671.070287][ T31] Tainted: G L syzkaller #0 [ 671.077649][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 671.086558][ T31] task:syz.3.2824 state:D stack:28088 pid:14951 tgid:14950 ppid:12404 task_flags:0x400040 flags:0x00080002 [ 671.099370][ T31] Call Trace: [ 671.102855][ T31] [ 671.105847][ T31] __schedule+0x17d9/0x56c0 [ 671.110381][ T31] ? __pfx___schedule+0x10/0x10 [ 671.115409][ T31] ? rcu_is_watching+0x15/0xb0 [ 671.120211][ T31] ? rcu_is_watching+0x15/0xb0 [ 671.125185][ T31] ? lock_release+0x4b/0x3c0 [ 671.129958][ T31] ? rcu_is_watching+0x15/0xb0 [ 671.135002][ T31] schedule+0x164/0x360 [ 671.139274][ T31] schedule_preempt_disabled+0x13/0x30 [ 671.144872][ T31] __mutex_lock+0x7bf/0x1550 [ 671.149523][ T31] ? __mutex_lock+0x5d4/0x1550 [ 671.154578][ T31] ? dev_ioctl+0x83c/0x1150 [ 671.159180][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 671.164608][ T31] ? dev_load+0x21/0x1f0 [ 671.168947][ T31] dev_ioctl+0x83c/0x1150 [ 671.173669][ T31] sock_ioctl+0x753/0x7e0 [ 671.178156][ T31] ? lock_release+0x4b/0x3c0 [ 671.182964][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 671.187875][ T31] ? __fget_files+0x3a2/0x420 [ 671.192724][ T31] ? __fget_files+0x2a/0x420 [ 671.197821][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 671.202971][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 671.207879][ T31] __se_sys_ioctl+0xfc/0x170 [ 671.212570][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.218841][ T31] do_syscall_64+0x174/0x580 [ 671.223597][ T31] ? trace_irq_disable+0x3b/0x140 [ 671.228687][ T31] ? clear_bhb_loop+0x40/0x90 [ 671.233646][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.239573][ T31] RIP: 0033:0x7f2485f9ce59 [ 671.244268][ T31] RSP: 002b:00007f2486dcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 671.252800][ T31] RAX: ffffffffffffffda RBX: 00007f2486215fa0 RCX: 00007f2485f9ce59 [ 671.260900][ T31] RDX: 0000200000000340 RSI: 00000000000089f1 RDI: 0000000000000005 [ 671.268936][ T31] RBP: 00007f2486032e6f R08: 0000000000000000 R09: 0000000000000000 [ 671.276988][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 671.285024][ T31] R13: 00007f2486216038 R14: 00007f2486215fa0 R15: 00007f248633fa48 [ 671.293092][ T31] [ 671.296158][ T31] INFO: task syz.3.2824:14952 blocked for more than 146 seconds. [ 671.304054][ T31] Tainted: G L syzkaller #0 [ 671.310704][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 671.319606][ T31] task:syz.3.2824 state:D stack:27248 pid:14952 tgid:14950 ppid:12404 task_flags:0x400040 flags:0x00080002 [ 671.331832][ T31] Call Trace: [ 671.335231][ T31] [ 671.338211][ T31] __schedule+0x17d9/0x56c0 [ 671.342865][ T31] ? __pfx___schedule+0x10/0x10 [ 671.347811][ T31] ? rcu_is_watching+0x15/0xb0 [ 671.352815][ T31] ? rcu_is_watching+0x15/0xb0 [ 671.357630][ T31] ? lock_release+0x4b/0x3c0 [ 671.362309][ T31] ? rcu_is_watching+0x15/0xb0 [ 671.367147][ T31] schedule+0x164/0x360 [ 671.371395][ T31] schedule_preempt_disabled+0x13/0x30 [ 671.376890][ T31] __mutex_lock+0x7bf/0x1550 [ 671.381636][ T31] ? __mutex_lock+0x5d4/0x1550 [ 671.386488][ T31] ? dev_ioctl+0x83c/0x1150 [ 671.391158][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 671.396432][ T31] ? dev_load+0x21/0x1f0 [ 671.400748][ T31] dev_ioctl+0x83c/0x1150 [ 671.405302][ T31] sock_ioctl+0x753/0x7e0 [ 671.409854][ T31] ? lock_release+0x4b/0x3c0 [ 671.414564][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 671.419451][ T31] ? __fget_files+0x3a2/0x420 [ 671.424277][ T31] ? __fget_files+0x2a/0x420 [ 671.428934][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 671.433997][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 671.438983][ T31] __se_sys_ioctl+0xfc/0x170 [ 671.443676][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.449781][ T31] do_syscall_64+0x174/0x580 [ 671.454459][ T31] ? trace_irq_disable+0x3b/0x140 [ 671.459532][ T31] ? clear_bhb_loop+0x40/0x90 [ 671.464481][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.470427][ T31] RIP: 0033:0x7f2485f9ce59 [ 671.474992][ T31] RSP: 002b:00007f2486dac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 671.483219][ T8412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.483831][ T31] RAX: ffffffffffffffda RBX: 00007f2486216090 RCX: 00007f2485f9ce59 [ 671.491756][ T8412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.499584][ T31] RDX: 0000200000000340 RSI: 00000000000089f2 RDI: 0000000000000007 [ 671.507796][ T8412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.515909][ T31] RBP: 00007f2486032e6f R08: 0000000000000000 R09: 0000000000000000 [ 671.523982][ T8412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.537328][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 671.541900][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.548750][ T31] R13: 00007f2486216128 R14: 00007f2486216090 R15: 00007f248633fa48 [ 671.564927][ T31] [ 671.568001][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 671.577237][ T31] INFO: task syz.0.2827:14958 blocked for more than 146 seconds. [ 671.585117][ T31] Tainted: G L syzkaller #0 [ 671.591713][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 671.600403][ T31] task:syz.0.2827 state:D stack:25480 pid:14958 tgid:14957 ppid:5645 task_flags:0x400140 flags:0x00080002 [ 671.612494][ T31] Call Trace: [ 671.615803][ T31] [ 671.618743][ T31] __schedule+0x17d9/0x56c0 [ 671.623365][ T31] ? _printk+0xdd/0x130 [ 671.627571][ T31] ? __pfx__printk+0x10/0x10 [ 671.632537][ T31] ? __pfx___schedule+0x10/0x10 [ 671.637423][ T31] ? rcu_is_watching+0x15/0xb0 [ 671.642278][ T31] ? rcu_is_watching+0x15/0xb0 [ 671.647104][ T31] ? lock_release+0x4b/0x3c0 [ 671.651782][ T31] ? rcu_is_watching+0x15/0xb0 [ 671.656598][ T31] schedule+0x164/0x360 [ 671.661277][ T31] schedule_preempt_disabled+0x13/0x30 [ 671.666781][ T31] __mutex_lock+0x7bf/0x1550 [ 671.671546][ T31] ? __mutex_lock+0x5d4/0x1550 [ 671.676422][ T31] ? rtnl_newlink+0x8a3/0x1bd0 [ 671.682103][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 671.687221][ T31] ? ns_capable+0x89/0xe0 [ 671.691771][ T31] ? rtnl_link_get_net_capable+0xd3/0x310 [ 671.697630][ T31] rtnl_newlink+0x8a3/0x1bd0 [ 671.702402][ T31] ? netlink_deliver_tap+0x19c/0x1b0 [ 671.708215][ T31] ? netlink_unicast+0x77f/0x940 [ 671.714098][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 671.719177][ T31] ? do_syscall_64+0x174/0x580 [ 671.724029][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.730143][ T31] ? rcu_is_watching+0x15/0xb0 [ 671.735034][ T31] ? trace_irq_enable+0x3b/0x140 [ 671.740043][ T31] ? nlmon_xmit+0xb0/0x100 [ 671.744552][ T31] ? kmem_cache_free+0x182/0x650 [ 671.749544][ T31] ? dev_hard_start_xmit+0x7c7/0x830 [ 671.754919][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 671.760074][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 671.765336][ T31] ? rcu_is_watching+0x15/0xb0 [ 671.770147][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 671.775359][ T31] ? trace_irq_enable+0x3b/0x140 [ 671.780346][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 671.785678][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 671.791181][ T31] ? __local_bh_enable_ip+0xd0/0x130 [ 671.796558][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 671.802770][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 671.807897][ T31] ? lock_release+0x4b/0x3c0 [ 671.812606][ T31] ? bpf_lsm_capable+0x9/0x20 [ 671.817359][ T31] ? security_capable+0x7e/0x2c0 [ 671.822411][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 671.827501][ T31] rtnetlink_rcv_msg+0x802/0xc00 [ 671.832548][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 671.837707][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 671.843287][ T31] ? ref_tracker_free+0x689/0x830 [ 671.848358][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 671.853850][ T31] netlink_rcv_skb+0x226/0x4a0 [ 671.858648][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 671.864201][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 671.869619][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 671.875325][ T31] netlink_unicast+0x7bb/0x940 [ 671.880164][ T31] netlink_sendmsg+0x813/0xb40 [ 671.885029][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 671.890352][ T31] ? futex_unqueue+0x22/0x240 [ 671.895147][ T31] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 671.901749][ T31] ? lock_release+0x4b/0x3c0 [ 671.906377][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 671.911928][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 671.917000][ T31] ____sys_sendmsg+0x54e/0x850 [ 671.921845][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 671.927169][ T31] ? lock_release+0x4b/0x3c0 [ 671.931886][ T31] ? import_iovec+0x73/0xa0 [ 671.936475][ T31] ___sys_sendmsg+0x2a5/0x360 [ 671.941418][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 671.946801][ T31] ? futex_wait+0x2a2/0x390 [ 671.951609][ T31] ? __fget_files+0x2a/0x420 [ 671.956258][ T31] ? __fget_files+0x3a2/0x420 [ 671.961032][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 671.966001][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 671.971564][ T31] ? rcu_is_watching+0x15/0xb0 [ 671.976363][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.982510][ T31] do_syscall_64+0x174/0x580 [ 671.987159][ T31] ? trace_irq_disable+0x3b/0x140 [ 671.992270][ T31] ? clear_bhb_loop+0x40/0x90 [ 671.996984][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.002956][ T31] RIP: 0033:0x7f59bab9ce59 [ 672.007400][ T31] RSP: 002b:00007f59b8df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 672.016044][ T31] RAX: ffffffffffffffda RBX: 00007f59bae15fa0 RCX: 00007f59bab9ce59 [ 672.024151][ T31] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 672.032266][ T31] RBP: 00007f59bac32e6f R08: 0000000000000000 R09: 0000000000000000 [ 672.040270][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 672.048334][ T31] R13: 00007f59bae16038 R14: 00007f59bae15fa0 R15: 00007f59baf3fa48 [ 672.056421][ T31] [ 672.059469][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 672.068592][ T31] INFO: task syz.0.2827:14959 blocked for more than 147 seconds. [ 672.076413][ T31] Tainted: G L syzkaller #0 [ 672.083114][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 672.092043][ T31] task:syz.0.2827 state:D stack:27536 pid:14959 tgid:14957 ppid:5645 task_flags:0x400140 flags:0x00080002 [ 672.104107][ T31] Call Trace: [ 672.107414][ T31] [ 672.110371][ T31] __schedule+0x17d9/0x56c0 [ 672.115150][ T31] ? trace_irq_enable+0x3b/0x140 [ 672.120180][ T31] ? __pfx___schedule+0x10/0x10 [ 672.125256][ T31] ? rcu_is_watching+0x15/0xb0 [ 672.130075][ T31] ? rcu_is_watching+0x15/0xb0 [ 672.134965][ T31] ? lock_release+0x4b/0x3c0 [ 672.139602][ T31] ? rcu_is_watching+0x15/0xb0 [ 672.144438][ T31] schedule+0x164/0x360 [ 672.148631][ T31] schedule_preempt_disabled+0x13/0x30 [ 672.154227][ T31] __mutex_lock+0x7bf/0x1550 [ 672.158914][ T31] ? __mutex_lock+0x5d4/0x1550 [ 672.163767][ T31] ? rtnetlink_rcv_msg+0x767/0xc00 [ 672.168923][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 672.174101][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 672.179273][ T31] ? rcu_is_watching+0x15/0xb0 [ 672.184116][ T31] ? lock_release+0x4b/0x3c0 [ 672.188732][ T31] ? bpf_lsm_capable+0x9/0x20 [ 672.193574][ T31] ? security_capable+0x7e/0x2c0 [ 672.198574][ T31] rtnetlink_rcv_msg+0x767/0xc00 [ 672.203602][ T31] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 672.208788][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 672.214399][ T31] ? ref_tracker_free+0x689/0x830 [ 672.219589][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 672.225093][ T31] netlink_rcv_skb+0x226/0x4a0 [ 672.229903][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 672.235666][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 672.241091][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 672.246310][ T31] netlink_unicast+0x7bb/0x940 [ 672.251208][ T31] netlink_sendmsg+0x813/0xb40 [ 672.256027][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 672.261384][ T31] ? kasan_save_free_info+0x40/0x50 [ 672.266692][ T31] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 672.273280][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 672.278627][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 672.283757][ T31] ____sys_sendmsg+0x54e/0x850 [ 672.288571][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 672.294069][ T31] ? lock_release+0x4b/0x3c0 [ 672.298716][ T31] ? import_iovec+0x73/0xa0 [ 672.303355][ T31] ___sys_sendmsg+0x2a5/0x360 [ 672.308097][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 672.313845][ T31] ? kfree+0x1c5/0x640 [ 672.318111][ T31] ? tomoyo_path_number_perm+0x219/0x5f0 [ 672.323874][ T31] ? __fget_files+0x2a/0x420 [ 672.328524][ T31] ? __fget_files+0x3a2/0x420 [ 672.333382][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 672.338376][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 672.344084][ T31] ? kfree+0x4d/0x640 [ 672.348137][ T31] ? __pfx_kcov_ioctl+0x10/0x10 [ 672.353160][ T31] ? rcu_is_watching+0x15/0xb0 [ 672.357990][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.364173][ T31] do_syscall_64+0x174/0x580 [ 672.368815][ T31] ? trace_irq_disable+0x3b/0x140 [ 672.373961][ T31] ? clear_bhb_loop+0x40/0x90 [ 672.378781][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.384762][ T31] RIP: 0033:0x7f59bab9ce59 [ 672.389212][ T31] RSP: 002b:00007f59b8dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 672.397763][ T31] RAX: ffffffffffffffda RBX: 00007f59bae16090 RCX: 00007f59bab9ce59 [ 672.405813][ T31] RDX: 0000000000008800 RSI: 0000200000000100 RDI: 0000000000000005 [ 672.413902][ T31] RBP: 00007f59bac32e6f R08: 0000000000000000 R09: 0000000000000000 [ 672.422001][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 672.430018][ T31] R13: 00007f59bae16128 R14: 00007f59bae16090 R15: 00007f59baf3fa48 [ 672.438410][ T31] [ 672.441553][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 672.450667][ T31] INFO: lockdep is turned off. [ 672.455672][ T31] NMI backtrace for cpu 1 [ 672.455694][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 672.455730][ T31] Tainted: [L]=SOFTLOCKUP [ 672.455736][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 672.455746][ T31] Call Trace: [ 672.455752][ T31] [ 672.455758][ T31] dump_stack_lvl+0xe8/0x150 [ 672.455781][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 672.455800][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 672.455817][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 672.455836][ T31] sys_info+0x135/0x170 [ 672.455850][ T31] watchdog+0xfd7/0x1030 [ 672.455873][ T31] ? watchdog+0x1c7/0x1030 [ 672.455902][ T31] kthread+0x388/0x470 [ 672.455918][ T31] ? __pfx_watchdog+0x10/0x10 [ 672.455938][ T31] ? __pfx_kthread+0x10/0x10 [ 672.455953][ T31] ret_from_fork+0x514/0xb70 [ 672.455970][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 672.455985][ T31] ? __switch_to+0xc89/0x1420 [ 672.456008][ T31] ? __pfx_kthread+0x10/0x10 [ 672.456023][ T31] ret_from_fork_asm+0x1a/0x30 [ 672.456046][ T31] [ 672.456052][ T31] Sending NMI from CPU 1 to CPUs 0: [ 672.572139][ C0] NMI backtrace for cpu 0 [ 672.572162][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 672.572188][ C0] Tainted: [L]=SOFTLOCKUP [ 672.572195][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 672.572206][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 672.572243][ C0] Code: 6c 7a 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 d8 1a 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 672.572260][ C0] RSP: 0018:ffffffff8e607de0 EFLAGS: 00000246 [ 672.572277][ C0] RAX: ffff888125251000 RBX: ffffffff819a72e0 RCX: 0000000080000001 [ 672.572292][ C0] RDX: 0000000000000001 RSI: ffffffff8c2a8d60 RDI: ffffffff819a72e0 [ 672.572305][ C0] RBP: ffffffff8e607eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 672.572319][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 672.572332][ C0] R13: 1ffffffff1cd1de8 R14: 1ffffffff1cc0fc4 R15: dffffc0000000000 [ 672.572346][ C0] FS: 0000000000000000(0000) GS:ffff888125251000(0000) knlGS:0000000000000000 [ 672.572361][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 672.572373][ C0] CR2: 00007f11a3347e20 CR3: 000000000e746000 CR4: 00000000003526f0 [ 672.572396][ C0] Call Trace: [ 672.572404][ C0] [ 672.572410][ C0] default_idle+0x9/0x20 [ 672.572438][ C0] default_idle_call+0x72/0xb0 [ 672.572455][ C0] do_idle+0x2e0/0x540 [ 672.572485][ C0] ? __pfx_do_idle+0x10/0x10 [ 672.572513][ C0] ? do_idle+0x4cb/0x540 [ 672.572542][ C0] cpu_startup_entry+0x43/0x60 [ 672.572561][ C0] rest_init+0x2de/0x300 [ 672.572579][ C0] start_kernel+0x392/0x3e0 [ 672.572793][ C0] x86_64_start_reservations+0x24/0x30 [ 672.572818][ C0] x86_64_start_kernel+0x137/0x1b0 [ 672.572840][ C0] common_startup_64+0x13e/0x157 [ 672.572873][ C0] [ 672.759180][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 672.766077][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 672.776787][ T31] Tainted: [L]=SOFTLOCKUP [ 672.781121][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 672.791176][ T31] Call Trace: [ 672.794457][ T31] [ 672.797392][ T31] vpanic+0x56c/0xa60 [ 672.801384][ T31] ? __pfx___schedule+0x10/0x10 [ 672.806237][ T31] ? __pfx_vpanic+0x10/0x10 [ 672.810751][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 672.816943][ T31] panic+0xc5/0xd0 [ 672.820694][ T31] ? __pfx_panic+0x10/0x10 [ 672.825147][ T31] ? preempt_schedule_common+0x82/0xd0 [ 672.830652][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 672.836056][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 672.842360][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 672.848539][ T31] watchdog+0x1030/0x1030 [ 672.852915][ T31] ? watchdog+0x1c7/0x1030 [ 672.857363][ T31] kthread+0x388/0x470 [ 672.861455][ T31] ? __pfx_watchdog+0x10/0x10 [ 672.866173][ T31] ? __pfx_kthread+0x10/0x10 [ 672.870786][ T31] ret_from_fork+0x514/0xb70 [ 672.875578][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 672.880750][ T31] ? __switch_to+0xc89/0x1420 [ 672.885464][ T31] ? __pfx_kthread+0x10/0x10 [ 672.890073][ T31] ret_from_fork_asm+0x1a/0x30 [ 672.894866][ T31] [ 672.898583][ T31] Kernel Offset: disabled [ 672.902916][ T31] Rebooting in 86400 seconds..