last executing test programs: 11m25.764562933s ago: executing program 1 (id=3703): socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x810, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x9, 0x8, 0x3, 0x3}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="48000000c9ad58b8f2a75c4434b246b5c10dc424b842df8d8801cea0fc020ceefcb51605deb73a0a960798e118c43d4b45e8fa902b7e3190343604dde0a591545866ef3741c45592b225b07ab2f310d0b420407441", @ANYRES16=0x0, @ANYBLOB="000328bd7000fcdbdf255e00000008", @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20048801}, 0x8000) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0x10f, @time}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000140)=0xfffffdfb) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) unshare(0x28000800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r4, 0xae44, 0xbf14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x2) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x4001, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 11m24.781902155s ago: executing program 1 (id=3709): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000f30000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000001050003001200000008000240000000050900010073797a30000000000900020073797a32"], 0x80}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000003cc0)=ANY=[@ANYRES8=r0], 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000100)={0x0, 0x23, 0x3, {0x3, 0x21, "e6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f00000000c0)={'ah\x00'}, &(0x7f0000000140)=0x1e) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) 11m21.464894609s ago: executing program 1 (id=3720): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@local, 0x2}) (async) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3, 0x4, 0x4, 0x0, 0xc, 0xf7, 0xd, 0x3, 0xb8, 0x4, 0x2, 0x5, 0x0, 0x4, 0x1, 0x3, 0x9, 0x6d, 0x81, '\x00', 0x2, 0xfff}) (async) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x200, 0x20003, 0x10020f5b, 0x0, [{0x0, 0x9}, {}, {}, {0x0, 0x35, 0xff}, {0x20, 0xa, 0xfc}, {0x0, 0x0, 0x6, '\x00', 0x7}, {0x23}, {0x2, 0x2, 0x7}, {0x0, 0x0, 0x8, '\x00', 0x2}, {0x0, 0x1, 0x2}, {0x0, 0x0, 0xfe, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0x3}, {}, {0x0, 0xfc}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x8, 0x0, '\x00', 0xff}, {0x0, 0x75, 0xfa}, {0x0, 0x7, 0x8, '\x00', 0x28}, {}, {0x6, 0x7, 0x0, '\x00', 0x1}, {0x0, 0xbf, 0x0, '\x00', 0xfc}, {0x0, 0x5, 0x0, '\x00', 0x1}, {0x0, 0xfc}]}}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x20) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a1800000000000000000000b7080000000000007baa00fe000000"], 0x0, 0x3}, 0x94) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) 11m20.964628866s ago: executing program 1 (id=3721): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2309fefffffffcffffff010000000500070000000000080009000000000006000200feffff7f08000a0004000100080017"], 0x3c}}, 0x0) 11m20.814099369s ago: executing program 1 (id=3723): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000202cd77100304d8b8bb30010203010902120001de0000080904000000d076d80ead86fd"], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000100)=0xff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x148, 0x80543, 0x23456}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 11m20.412554355s ago: executing program 1 (id=3724): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x24, &(0x7f0000000000), 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000100)=@attr_pmu_irq={0x0, 0x1, 0x1, &(0x7f0000000040)=0x7}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 11m19.841647368s ago: executing program 32 (id=3724): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x24, &(0x7f0000000000), 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000100)=@attr_pmu_irq={0x0, 0x1, 0x1, &(0x7f0000000040)=0x7}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 3m36.401658486s ago: executing program 5 (id=5675): openat$nullb(0xffffffffffffff9c, 0x0, 0x4a2000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048800}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) mlock2(&(0x7f00005c2000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f0000000140), 0x80) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)={0x14, 0x2d, 0x9, 0x70bd26, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fdffffff03000000280001800d0001007564703a73797a3100000000140002800800010004f2"], 0x3c}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) 3m34.853239043s ago: executing program 5 (id=5677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010200000900010073797a300000000040000000030a172c0000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000"], 0xb4}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x88000) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg(r3, &(0x7f0000001340)={0x0, 0xffffffffffffff09, 0x0}, 0x64040090) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e24, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x88080, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r6, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f0000000180)='./file1\x00', 0x4) renameat2(r5, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000000406010100000000000005000100000705000100070061cdd9677500"/46], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 3m33.824437588s ago: executing program 5 (id=5683): socket$inet6(0xa, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000280)="430fe1c73f3f2390b9802b00c00f3235010000000f300f28d80f22d8c4e18173f53848b800000000008000000f23c80f21f8350c00d0000f23f8b83879e487ef66d9bd3317ec17ec80ec808e008eab2d1aa80000460f1c46001041ac", 0x5c}], 0x1, 0x5e, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000100)=ANY=[@ANYRES64=r1], 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, 0x0, &(0x7f0000002c00)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r8 = openat$incfs(r1, &(0x7f0000000180)='.log\x00', 0x81, 0x120) ioctl$TIOCSWINSZ(r8, 0x5414, &(0x7f0000000340)={0x565, 0x9, 0x9, 0x4}) bind$l2tp6(r8, &(0x7f00000001c0)={0xa, 0x0, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x25ac}, 0x20) ioctl$PTP_EXTTS_REQUEST2(r7, 0x40103d0b, &(0x7f0000000140)={0x200, 0x8}) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000200)={0x28, 0x2, r6, 0x0, &(0x7f0000000e00)="4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c0c4c4c4cb132051e80cdcea9a6499e5cc009c1cb020e9136dfabbada14328d13da8ae144ef00046d6a05d514ef3c484626000000000000000000009259c5f86dfd22dd347dc58399bfaff88cb9eaba0fb39aa41948184804ede60765566a23ec35475eb9ca897332a87d439729a8a9708a959f7216e47e867c3c9a01b9423ccd8d8ea0e1a3af5f59da28155131397ac2c9e081904111c9206d9405c2b2", 0xffffffffffffffe5, 0x1c}) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) 3m33.46468766s ago: executing program 5 (id=5688): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x800, 0x0, 0x103, 0x1}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') socket$inet6(0xa, 0x6, 0x98) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0xa, 0x1, 0x2, "1c13ebdaf2f20d55800000000000000000000009234700", 0x584e4f53}) 3m33.204471854s ago: executing program 5 (id=5689): openat$kvm(0xffffff9c, &(0x7f0000000100), 0x101041, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) futex(&(0x7f0000000180)=0x1, 0x4, 0x2, 0x0, 0x0, 0x0) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0xa, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000004c0)=0xb1e0, 0x4) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = memfd_secret(0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001122010409a0501854e9e0102030109021b0001000090000904a000010e010000090505030800000010"], 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000040)={0xa8, 0x0, 0x3}) 3m32.971991857s ago: executing program 5 (id=5692): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r1, &(0x7f0000000300)}, 0x20) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',,']) r2 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc77}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000080)=@x86={0x7f, 0xb, 0xfd, 0x0, 0x40001, 0x7, 0xcb, 0xe, 0x7, 0x5, 0xb, 0xb, 0x0, 0x12, 0xb, 0x0, 0x6, 0x15, 0x12, '\x00', 0x1, 0x2000000000000000}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x44f}}]}) io_uring_enter(r0, 0x288b, 0xe38, 0x59, &(0x7f0000000040)={[0x6]}, 0x8) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 3m32.604424456s ago: executing program 33 (id=5692): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r1, &(0x7f0000000300)}, 0x20) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',,']) r2 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc77}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000080)=@x86={0x7f, 0xb, 0xfd, 0x0, 0x40001, 0x7, 0xcb, 0xe, 0x7, 0x5, 0xb, 0xb, 0x0, 0x12, 0xb, 0x0, 0x6, 0x15, 0x12, '\x00', 0x1, 0x2000000000000000}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x44f}}]}) io_uring_enter(r0, 0x288b, 0xe38, 0x59, &(0x7f0000000040)={[0x6]}, 0x8) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 3m29.157932669s ago: executing program 0 (id=5710): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x20000005, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000), 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="8a", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000008400000002000000000041000900000000000002", @ANYRES32=0x0, @ANYBLOB="300000000000000084000000010000000101090003020000e1de00000300000005"], 0x50}, 0x0) 3m20.760565187s ago: executing program 0 (id=5712): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x30, 0x0, &(0x7f0000000040)=0x1d) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ed, &(0x7f0000008400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f00000001c0)='S', 0x1, 0x4000000, 0x0, 0x0) 3m19.879225828s ago: executing program 0 (id=5751): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000040)=0x8, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000), 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) listxattr(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c00000010000104000000000101000000000000", @ANYRES32=0x0, @ANYBLOB="0900000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32=r5], 0x4c}}, 0x0) r6 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x2f, 0x400, 0x70bd29, 0x25dfdbfc, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) exit(0x0) preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000040)=""/194, 0xc2}], 0x1, 0x3, 0x764) write$apparmor_exec(r6, &(0x7f0000000180)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) write$apparmor_exec(r6, &(0x7f0000000200)={'stack ', 'stack '}, 0xc) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)=ANY=[@ANYBLOB='b\x00\x00', @ANYBLOB="99742bbd7000fbdbdf2515000000400001802c0004001400010002004e20ac14140e00000000000000001400020002004e1ee0000001000000000000000068cc01007564703a73797a"], 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 3m18.504435374s ago: executing program 0 (id=5756): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000006) r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e00000028000380040001"], 0xb4}}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001400)={{0x1, 0x1, 0x18, r2, {0xee01, 0x0}}, './file0\x00'}) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r3}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0) sendto$inet6(r0, &(0x7f0000000240)="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", 0xdcb, 0x8894, &(0x7f0000000000)={0xa, 0x4e23, 0x73bcb083, @loopback, 0x7}, 0x1c) r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x4, 0x400000) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={&(0x7f0000001040)="c81de5ef832915603fa5b38030ace3efb34fe332a7857623f69191eeba141c4dd8ceef750b8712f0d1f54b5674d4aa5d32b37191c31c9a8c694fef4ff3f6438e2a19315591066253207cd4d1b898bf2ba0cbc1617dc8d49a166791864ce93dc1a3e44c4d9f538a81887ee6b0cef4", &(0x7f00000010c0)=""/205, &(0x7f00000011c0)="e0e5057d08f6796e058032956b084911adfc866abc9c02e853601758f8a9464155bd9f493af2d84fb5977b57b60d4d5bd0a331c6243186d09c559e2fa44b41a5c933d487f7268a02c29a10bc77c50cb7ae57f95518d2c61a9f5a037a7c58726f4b60f920331fc8cce2b4f5949c53f232e8ba543530e011776c46160f3fa23ef549f22e5acb6dfb0214c2d0fbb60cd69361fbcd776e6c5c21af91d412ceeb8bb207a7db1a548bc291f9d178ba0f2e31bfde30d4b7315e18efa2a6b835389122cf095ef10bac2ed2ccb81b219dfb08d5fa7dc5f690d8f78642cb7a021dae8d3d7cc8c0e9f4d46a5a45d840a3e820ab21d8", &(0x7f00000012c0)="e47ec3d5cc8a568132c6645bbccf61e15276dd1b0e12c577b79bf778cd97880fdfd82020f6b770ab334d0b50992be3a02d871e2c96927393712ac2cea96fe3b03985a90dc43d07be6ba75e214d1ce5845447ed3373822d77127484bce60b88a70ddb7d7b899bd2bbbad93c46e8194c98decfce60c779e764bdf27c3cf4ea54dc3bdcdf4daf83479e12b5bd7795a66c52261b9216adbf78e6fbf94ceb43146568f6e1f207d61ea58ed0f4a5fee00aaed083815cdf", 0x5, r8}, 0x38) ioctl$VIDIOC_SUBDEV_S_FMT(r7, 0xc0585605, &(0x7f0000000180)={0x1, 0x0, {0x7, 0x0, 0x1007, 0x5, 0x8, 0x2, 0x1}}) 3m17.522323885s ago: executing program 0 (id=5759): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000b7080000000000007b8af8ff00000000b508000000000000638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000002000000b703020108000000850000006900000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x90) 3m17.144503182s ago: executing program 0 (id=5760): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000c40)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000002018110000", @ANYRES32=r0, @ANYBLOB="0000000000000004b7020000140000007b110000000000008500000005000000bf0900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xd, 0x100b, &(0x7f0000001e40)=""/4107}, 0x94) 3m16.88023559s ago: executing program 34 (id=5760): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000c40)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000002018110000", @ANYRES32=r0, @ANYBLOB="0000000000000004b7020000140000007b110000000000008500000005000000bf0900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xd, 0x100b, &(0x7f0000001e40)=""/4107}, 0x94) 1m47.347418528s ago: executing program 4 (id=6061): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) gettid() r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000201dd6a000000000000000002000008456a9e29ba62f64e1560c1f0ea449ea77aef36b0cd376549a716d60d877bac60a1a88b3013826dbf3306ef6825fb381d2935627d2a93dc6de377025b5b24876d9f8020ffaf7f99a3644e07803de88cf48b561eacf4d1c94118ab05109c52fa2d268411ca2b5b2e2e0e52ba231eb4fd7d95007aea6084c939d24e2daa8319e529188a2e1685166a12408fb739babb9db8f5dca98d0895a54115c45972a0eaae"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 1m47.187575165s ago: executing program 4 (id=6062): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETS(r1, 0x5401, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x100000001, 0x200000) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000d80)={r0, 0xa, {0x0, 0x0, 0x0, 0x1, 0x101, 0x0, 0x0, 0xd, 0x4, "3b53dfaffbf2d6a961e742ebc1bc5fb70a5cc51417ce40eb0e0e0866e4149087f61d529bc09920486b8d96baa8c912f8c1f5a34ab543bd253bb1bc78c31618d7", "ad99b3545be3f328abd39af416e5fe8e6a753acf720f0d24e2edb45b3e8224569377d6dd8408c66d5b833f4c3ed4596079cd75bdb973cc137868a326b0908e92", "f83ca27c824c5a4e4143561d93caad508d5e5f5c885b23246c598b41e866f7a5", [0xe5, 0x2]}}) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6c, 0xeb, 0x85, 0x40, 0x249c, 0x9002, 0xdead, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x24, 0xdf, 0x6d}}]}}]}}, 0x0) r7 = syz_usb_connect$cdc_ncm(0x6, 0x9b, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x2, 0x1, 0xb, 0x30, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '\a'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xff, 0x5, 0x6}, {0x6, 0x24, 0x1a, 0x4, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0xdf22, 0x196, 0x7, 0x7c, 0x3, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x2}, @dmm={0x7, 0x24, 0x14, 0x9c1b, 0x6}, @country_functional={0xc, 0x24, 0x7, 0x0, 0x1, [0x101, 0x6, 0x2]}, @mbim_extended={0x8, 0x24, 0x1c, 0xe, 0x1, 0x8000}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xff, 0xb, 0x10}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xb, 0xfa, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x5, 0x8}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0xb3, 0x83, 0x0, 0xff, 0x8}, 0x44, &(0x7f0000000140)={0x5, 0xf, 0x44, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0xb, 0x3, 0x7ff}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xb, 0x0, 0x81}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xa3, 0x1, 0x3, 0xf000, 0x5, [0xffc000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x9, 0x8, 0x560c}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "e9f1fdd586d63d010795b8401a6ed6bf"}]}, 0x4, [{0x11, &(0x7f0000000200)=@string={0x11, 0x3, "add08cbc09b0fb6b5ce889c831db8b"}}, {0x62, &(0x7f0000000240)=@string={0x62, 0x3, "95d892f81953545e1fc224422d8046986bd9704dd4361541a65097d0dbae6150454653f9c0093c109b1005a6cd62920d343b5e2da261c2dac0398e90063e90d76a3af85d6f142f0da4874d46005b890fbae834c560bf81ea148a795f337203f6"}}, {0x7e, &(0x7f0000000400)=@string={0x7e, 0x3, "296389c160253db8b7ab2fc8f265f5b0b718039cb911918527e5711c47b085141d0ba8ad0531fdbe6f48bd51b15bbc9aed918b71e54bb013a52554cdfe83b02431e9334bbfaadef207d16f26d809d30470ed2a0b1980017893820cef806c620ac82ab0dd99a2bb58a200635c68a9891b44b81d2544a3efd9c43c67a7"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x1809}}]}) syz_usb_control_io(r7, &(0x7f00000006c0)={0x2c, &(0x7f0000000c40)={0x40, 0x23, 0xed, {0xed, 0xb, "c404d1f0e9b7aa247f717d9da65ee24d50be5948805a30f98519ba84885b8b3e143a7e98ce5bb630f765f100fe71e163e046f56bca7a85446c97e07fc0fb07d3da42b756ec02e9381a1559ddb2e13f08ba751634f1ada245f4805ada6aafc4d024c10d222a17c6a4d997926697b1bdf1457ff1f0b60f8819c003da64dff811e7e0567f32f6f8fdefe5cbac3d7212429d2589dd78d797a460063e15fcc7754d34ed44ad48a9b5d059017d277661e4d0d74bae44f63e76da00c44593c7069d124242d1579664d2b5f37d864a5cf5b7edd01b51a8e3b482cdff592a2f0c46d4458fa8177f353c576018dd6637"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c0a}}, &(0x7f0000000540)={0x0, 0xf, 0xef, {0x5, 0xf, 0xef, 0x1, [@generic={0xea, 0x10, 0x2, "0620acd06f7127e67c086f75df25be5f4853c6f2c5c37233db8931e39c59137b18cffcaf63193287a9683d1a3661ceaf7fdc74ad0fb8d195073344e3baa4370aebb1d7d7cdd30d39c6140fb62c0e17ed5cd839a67c3f037605532386394e7e9918b8367c28825aa33e32c8a0198bcba1d427ffb59981907516b115a8f250754463f254ba6dedb1dbda797f4164a44e8da3d774d1a3dffaa9d39016bb2131134cf2d5deecb3ebf9c0f3b97de83b30e1ec774c0dbca02ead4eea5944c6d6ffcedfba84951f2e05ee0f06d0feb06991ca83249e71d70aa0b1e587a3095902397de2d46cb0a021957c"}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x97, 0x1, "11e7b4ab", "9f5df1e8"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0x7f, 0x2, 0x1, 0x0, 0xbf2d}}}, &(0x7f0000000b80)={0x84, &(0x7f0000000700)={0x0, 0x10, 0x7f, "e8f929699f1ea5b57e805328bfc0124dc4e51eb5c51ca7d423c36c390e0ccf54cc00c4afa77a2922a36b8111f35fbcfd4706aacb1b2d779b83cde6dba2239963c22632464f292fb33dc9d4ff2944716846a058427543d4d4b79ab3e21ca654ffc3adfb84cd4d9edf48abe5975195d6794ed5378bf0fed415e6a629012eb1a0"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0xfc}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x400}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000900)={0x40, 0x9, 0x1}, &(0x7f0000000940)={0x40, 0xb, 0x2, "55e6"}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x8}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000a40)={0x40, 0x19, 0x2, "b629"}, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000ac0)={0x40, 0x1c, 0xda, 0x5}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0x6a}}) 1m43.740212177s ago: executing program 4 (id=6070): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045518, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYRES64=r0], 0x0) 1m40.581521442s ago: executing program 4 (id=6079): syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004600002000000000000190f800000000ffffffff940400041000907800100006"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x81) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fanotify_init(0x20, 0x8000) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x536, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x20883, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r7, 0x80044dff, &(0x7f0000000040)) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x245) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000b080003400000000008000440000000300500020007000000240001800a000100726564697200000014000280080001400000001208000240000000060900010073797a3000"], 0xf8}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r8 = openat$cgroup_ro(r2, &(0x7f0000000800)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0x1f, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffb}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x5}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @generic={0x7, 0x2, 0x9, 0x917, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @ldst={0x0, 0x2, 0x1, 0x0, 0x3, 0x1, 0x4}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000380)='syzkaller\x00', 0x2d1a9470, 0xac, &(0x7f00000003c0)=""/172, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x4, 0xc, 0x584}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000500)=[0x1, 0x1], &(0x7f0000000540)=[{0x0, 0x1, 0xb}], 0x10, 0x7fffffff}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000640), 0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000680)='ns/mnt\x00') sendmsg$nl_route(r8, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@RTM_GETNSID={0x2c, 0x5a, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_PID={0x8, 0x2, r3}, @NETNSA_FD={0x8, 0x3, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xc0) 1m39.623794277s ago: executing program 4 (id=6086): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000780)="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", 0x2000, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) (async) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x0, 0xeeee0000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) (async) r2 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'lc\x00', 0xa, 0x0, 0x14}, 0x2c) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb874c9e02aef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x1, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m39.411506275s ago: executing program 4 (id=6087): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x39}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0608262300", 0x7, 0xfffffffffffffffc) (async) open$dir(&(0x7f0000000240)='./file0\x00', 0x800, 0x100) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x7e, 0xe1c07, 0x6, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_pidfd_open(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)=ANY=[]) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000078000000030a01010000000000000000010000000900030073797a310000000028000480080002400000000208000140000000051400030076657468315f746f5f626174616476000900010073797a300000000008000a4000000002"], 0xc0}}, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbM:', 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newlink={0x54, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c9}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x5}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008040) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, r3, {0x7, 0x29, 0x0, 0x809000, 0x100, 0xfff9, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) 1m39.034107381s ago: executing program 35 (id=6087): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x39}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0608262300", 0x7, 0xfffffffffffffffc) (async) open$dir(&(0x7f0000000240)='./file0\x00', 0x800, 0x100) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x7e, 0xe1c07, 0x6, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_pidfd_open(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)=ANY=[]) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000078000000030a01010000000000000000010000000900030073797a310000000028000480080002400000000208000140000000051400030076657468315f746f5f626174616476000900010073797a300000000008000a4000000002"], 0xc0}}, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbM:', 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newlink={0x54, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c9}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x5}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008040) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, r3, {0x7, 0x29, 0x0, 0x809000, 0x100, 0xfff9, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) 8.223556278s ago: executing program 6 (id=6431): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f00000001c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x24) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f00000004c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x1ff, 0x0, 0xeeee8000, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"db4c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774c95d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa8afb8fa04b707410aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4759da0bee1fabe3f71dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7792a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34ca69c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240b0ffab9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883ca3648c27772fc5dbaea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc007fe029325d6078aef94d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea179a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbeaa970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad58377b0d6ae9b97034f94"}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r6, 0x29, 0x4b, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000000), 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.80844157s ago: executing program 8 (id=6433): r0 = gettid() r1 = fsopen(0x0, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, &(0x7f00000002c0)=0x3b) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x1, 0x2) fchdir(r3) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = open(0x0, 0x1c1242, 0x0) ftruncate(r5, 0x2007ffb) sendfile(0xffffffffffffffff, r5, 0x0, 0x7ffff000) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x260080, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r6 = userfaultfd(0x801) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', '', [], 0xa, "871772ba4b33a59e76a57ff738bea9"}, 0x13) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r9, 0x0) preadv(r9, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_FPU(r9, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) 7.564841062s ago: executing program 6 (id=6434): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b", 0x2}, {&(0x7f0000002800)}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000000240)="06e680be8b5ee435beedb3b8d51690a05aa2e3aa484b54c100a1e8c37f49448bf9da9953cc62044c7884b45fa051e99263eaf7cfb9bec6496131dc8a8eb4481ab2335032c27858791c5da8bd5f45ff43be3e461b9d901fddba910b518868", 0x5e}], 0x4}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f0000000540)="f2e6", 0x2}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="db6a17c67d10beecea12519c84fe5395a32ca73436ce6975b46e5aaff7be26a1dff05c02a3e57710a7289df43f1d96dc1910a0d0e141e1ffd99503fa87475cd9552b0de94dc481d078c634a329327a61d069e7afd887", 0x56}, {&(0x7f0000000440)="028d9a7c7dc3d9decf249e204d8fd31920b3ceaf81d132403d926018086f8183304c9ba0791798c013e7d20c659eaa2171981edb1c37928d2a466c7192bb0c5534672b04798af4bbb1486bdf1e9e49f862f7cb464c3cf7aaa2d18bd01ab0f21a0c65f36ca0696f91f6424b6b635e0ed21be4476746c0f666166dc302bacec49a795f97869cbf1c3a91e6ca5bbcf281433f54f005bbc0c9858beea8715b67fb97cbced0995c9220e5f14ddb7016abec23fb", 0xb1}, {&(0x7f0000003040)="c2422c8f5871fa831a193a42f518527816f1c875256172ea6aa732c9751726dd8ab0ba95ed47e49814e85d2f533142bcd9d251e305560c3b4f249410673fa006932a1ad4b678f44486c82fd9d34267e10cb2f1221dd3a8dd8f97b6616f3d8117ff98c3a57b5cab6a82d6054f460e52daebacfec0a1c40f4e448198cbd867953924ab73664fef653ea6b68fb8ffe6ca47b7a5dd7c870a420009f0f64e2a1c9859894f32f3d1ab08c2776043b660f755fecc592d2dfacac54a68b28f53ea85e762889717f9b202911f96dd0f786bbe173d231e8893ad0b312824962c935dd0317c4ef63774aff30c04961a4f56ab432dbb9124a48cea6b7aee1708ba3ad5923f9c46df81c7f9e0135d2627885e6a0396dbcb230e05936680d360f0a1629704223afd6caf84ab6200dc3d8368b27ed96be735160261f5cc2d50eeef5375f5d04101a8c4e5a37f895560d0f2513b449e0d0a7b47987584ae361ae566b88bdb7627def2b3da8f165cf03ebaa8a85732507f6217d92ec79f03a30844d701123993d2d4ab63733364cbf68aaf14eb7f7bb1eed8bceead0100cc6d29188486b3572033591ad0c6914a368c1332492e89ae422508db0c807f8f72251f5a37732a896c5df3a8edcbc54bd5e7fcddf6dcd5bf5c17a36edecc7f25b77b1b13528f58e34addb6871b807f5ef3586d1fce39fd1f2eebe16e69039d671b937573271091a216a68cca643f89d352b13be47d1e28fdd74d0d60e059e05f7f7cd37a61b96f28c5c0885d0e6263f69821409de67b900a0860893694377e5444be92fc2374b58deff016d4581230ec59585f06c540a72bc23237a9040d0349ecd310929010766ce9bad04da8d7f0e77f32513420a9aea42eee3ecfba29fff188465be5ed711d6f582d0913d16e1b0e849bb8f0a20755437b50aca6fd467889710645af432553bf1cb78202d7c36479f511f4f2475e59f5be02400b0bf2e364f2131babe9ab9dc72f5a24a09fb1fbdb3adca7f66086ba39dc4748a0a7ae6c895b232b7e75c1b43d54953c4ee2441c6e8bf622d2a20a8e3ead92945b6497078aa0f4615e161d631ab8887431a15cd54870de0bd6b6de7089f71472e6f7923953999c1aed73d109ade53ad6a478da0be3f09f13b08ad9242e4003e3a6e5a20f6e27c045d7c97ad9613c85ae806e09e771614855ac4c7a20f8bbab813a78e5fd9b66486f67c000163a6a5e79172acb07e35d4afa371bef7a7a02c485f35bae6a5667529241d68240b3c668ebab7f3fd461f16583de4e9feff7da406320153364e83bd48aa84417fc25857df9718ca0c602dfd1d637007f6af1cd2633c99a4d4713b010f75aabd23ad01d9df4f4e69b093f5531cec35341ddee469271fdce6651ff7e42217ff772c04d0cb0f3ab13da133780e6d3406af53d662b2c522afce345e8dcb50ea7585661ae7207ac6521f5e23d16b427aa8da0cca63fc06380b120eb476d90394249e168dde6ebbd60b1bcde0f3a967a10c9499065c588a9b471f700c35e0cb2653fe2bc6f0bf68aff27650002c695e01411c799074c1ef418840b710305d7bc7cbcde1c379f4875e67a01b94f4da22ced85e8fdee8777bf5a700b2b875f30c45cf08a183f3a8a229456bea40377a7f079bd668d4913509e80e2fd9319208362a653032ddfe7f114bc32461fbd409ada4fe8eb42bf58bc26fd7f8feab3d6ef64674876ec53ab9d73dba18b34c74502441704597668bf5c6dae1ee68c9286b017bb3571b0361c50a5426bea75d59a3633c3864db63b9eb957f0f28c64843dc5951766bdb4591dad2f2aed615d3af9d0a75505b24b20b0b212b857055ad551315f10552a67fb0063610332adfb2624158699c9031a44252f8c650e1e463a336615efd17e86e5fb01d78cf98d668bb981de5570ce216a01a052ee972fefa1f628f3f63174e15290c14f95745953e1e110ad725b2d68144c112e6c78b45552ec678fa0be8f96e3285e1c37357cee1b2673e04e3515b858421e310737652dcbc4bd7fb9f397c8c9cfc1d10c89ca6ff5617630ae2173fce88a692b8da12fe18605af029b50ff25ac1dd2d451c9867247fdd0267f56c2f0ee183190cf890be19b19d8441a99450c3dd0ab07ecedf2477df70a8e655b25688a777f70bb76cfd2b1aa24de77db82723cb8972ae391b98f445614fd9696d0af81805077c97735750e4bf02b52283f8369bda5a6f9536044af0620f5b2513319ae8e7161306a84ac796845947e0c895127f518daa0402255c72006a77fe50fe4b2124d2cd3703e764240c72837abd27c9371ad0574e4796c05561dd28097fe1b2012f44201b560a0c1711a53f754c30b4e000971e02957c390e8667759ea4ef45b6cd1128d2e353f4d27d9d82031f284c44fcd1e586c3768f460a4d290818d9e15e7c3d95518facd74cc1ef3ed8d3daa9b30ff50a68e5a7f2f28329c88834dedad23dd2c445df40ed277c12c170a6e022b793ac6e78e2e0f594309510181278e1f8e6f2be9ea810c680159b1e1698804507b8c3ca301958d124c8574c7631d41cbf9df95a9727b6c6533ba7b450d83245b1ef42c1855abfcbb108f072fab9fa742c52a54c4dfe0f2cb601edb2a23026a35fe33b4cd1adf5947b09b091acbc2c5f0e14c08cd2ca5a6938db51e0d3d9968026041771a34cd796f13e81d2de9f7f22d4684665c793e4ebe37b52e28abfefa1b8474f774afb086c5d6f7b31dfb6f08307e8c6f80fe7091f7f6fd5649d77134f05d435d0b1a95c0f8cf062e49ee525d8565a1bbb5875cd95f1c549b030563df2fd637584eaf6bdcae8579904e1af552f6ad5f6bc95ae4ad6b96b8d35a171931150b3f1461c14c103445580f622cc3c7444aaa42fd4cbbfad317c3c344984af05de15f7cb5b459776ede3208d25565708ebaa719ddd2e31c92c24e20c4c689ca5f9dcd315e30e5c269365a39d208fd713c8cafc3b6243747169355aaa174b7dc78edcc1742b7275ee9d5ee83374f8c8de1b56eef2b9ded91046c8f13e49d3dfe7e870b309986bce9fda88b4bb5deec1be853d80bee4faadcc4603e3a456d6c60afd3ed7dbabdbeee55de2d68805cc4ac888de6a461f95b2aef0b6a75c0a74c96fd48582cafa25437b1fe9e7d3b58bc24463d8916cd4a90d801c0f73dd91b6be6ce336a16a02ef4622f7defd533012083f22319380eaf4f2c4dc9d870e512264452001e3f95201e7496d10e11bda90c759de71ecd4396009a370e1e784055b18816126802ae35b5b05b78e95344d1375fd821bab594af81cd438cd11f950fff01a18e0a4ea838511244c55ed6a412b437ed3dc9128e533eb7392a637144400a29eb77539752e433908a20e5562cc903d76be819b601c3c48f5f4386d0edbf54dd096df112f0c02a00dd89e1567702df09f85e1db5a215f3221cb724d1583802483adc7ff1609a4c65ed54686ee6e514af25da27b25d9ab0894e73ba588c82c6faabbc42b3bf4153a3da8a148540826d3c774a5126595449e8c4671cacbad5c1be8488b5a34b9bc300ebe9dd2526d10d992c539ac790df7db299e5ab188131fc3c08661b8ee7be361403457df66b541a56c2de6f9f3e05b2156b942858e92fddfcd3e0452ae8d957f9693d3c676793b237edb8cd1e8a0a0f14cdaf14ed58a7b166360f7a0964008c3052bd1d203a8b61f6ae00fad4a88ce6bda9fc98b9eebe43c9432d512ad3db6373fd923ac69e07074f7495b950e30edf07a84de42aef76ba61b8ca64ce6a5b3b326e924b58255330e397b187cfe5d4ddbdc22caaa61d00cc3fa6c5907be688d75c5976f1f6d956aa3fd4eaa0361697e163f842fe0ae39ec28d9cf2f1696a84f9995e3df7f1a8190fa7af1aab6d50acd2570f699df9237e81ecc4837aebad153d46904fb3d18aa7f0aa125d93a4f3f57888612a2323929331bc6c1ad154854ecdd291c74d2c7446de84c9ee0a7c8743e925206ebb3d9db8ea179f1b0b1e42923c6313091164b1a553243a5df7137479b158b9607a1682d379816a58ce6e4d7e6c3e92bc8547ef792ba38a504888b9b42dd9f92b2d023260d0b4f6cd3f8ff4c6007c8fb70e5662fa33e0b161fb95c1d4759b811b0b7b1b4f8f1e61dd98688599be3a7f91a129fc26d59282737ff97eeb297ebe40b1e1682554d171a2ff2f0836e6228220034eb9d138ba7c70d71fcf24401187bde83537e38095b62781f21b49286c83de992ad3e6752d75b6a8f32d2e1459dce50ee4b1fcf61815a12c9b2e7badb0e1f1c015fc0388794ae1391c00a0385afeb5200c098cef2a87914ef43e3f5a65dcc9980a08a742579794cc2eef35d81c464c1fdaae3b4089400ba1cabedae7c3b034f3fbbf0af56262f04264738c7a00cb2fb5cc397264d7adef0042af38799c419786a1e78f6ca6d505205e4dca3106243ed50678ebb53409a5de3047efc8301e762199564db69292656d7d94a6dc6b11b710f78540f707c1f68be36e18cedfd9be83720ece867dd62ffb237395ae8be9937ffad1ad8d0ca2fc7de4f90a1b7b3bdb60eb6cca1b03d16c76a8bbeef4901f1bdaf20cfc9b7be8ce9babfa33983da3c283863d3f33f42b70786501fa51d0b9670988a18d482df7da84134e686183eb273e3438e1df8ec9", 0xccd}], 0x3}}], 0x3, 0x4000000) close_range(r0, 0xffffffffffffffff, 0x0) 7.376273441s ago: executing program 6 (id=6435): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103", @ANYRESHEX], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800, 0x0, 0x3}, 0x7d) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSABS2F(r3, 0x401845ef, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x14, &(0x7f0000000040), 0x48) bind$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r4, 0x7ff) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendmmsg(r5, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="7c220752098d1a03003fb4d50b17b9653538f559e8ca1a63dfa1a8f54135abe90913a7bb3930c14e8d1808268429578d92871b8681b42a7a264d4c578a7c26845616d98fc09729e3d8c0aa68e95af732c067f9dd1d9fdd4ee2008561e5a690de23248e60f4ab6390f520377d0a68cc822a17c773be19ee5b51b2428acd21725b17f5fadc10e18e574983e260010d619f74dd4c30", 0x94}], 0x1, &(0x7f0000000480)=ANY=[], 0x170}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000f40)="f48f2d", 0x7313485bca3e9141}], 0x1}}], 0x2, 0x0) 7.288539801s ago: executing program 8 (id=6436): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8400) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, 0x8) setsockopt(r1, 0x84, 0x82, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sigaltstack(&(0x7f0000003e80)={&(0x7f0000000380)=""/253, 0x1, 0xfd}, &(0x7f0000000300)={0x0}) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e21, 0x7, @mcast2}, {0xa, 0x0, 0xb, @empty}, r5}}, 0x48) r6 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60b8192300080000fe807a3a0000000000000000001200aafe8000000000000000000000080000aa0000000000000000"], 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) sendto$inet6(r1, &(0x7f0000000040)="ee", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x101, @loopback, 0x8000005}, 0x1c) r7 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) io_setup(0x8, &(0x7f0000000080)=0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@remote, @empty}, &(0x7f0000000200)=0xc) io_submit(r8, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000140)='-3', 0x2}]) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00') sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0xffffffffffffffa7, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000240)="4b8d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) 6.237320251s ago: executing program 2 (id=6438): r0 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x91, 0x0) 5.57011794s ago: executing program 2 (id=6440): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f00000086c0), 0x0, 0x10122, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b401002400128009000100626f6e6400000000140002800500010006000000080003000000000008000a00", @ANYRES32], 0x4c}}, 0x0) 4.478273076s ago: executing program 8 (id=6441): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b40)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001400)=ANY=[], 0x118) syz_io_uring_setup(0xd55, &(0x7f0000000080)={0x0, 0x0, 0x13580}, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x161082, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e8", 0x31}], 0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x4, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000580)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x5, 0x2, 0x3, 0x600, 0x3, 0x8}) 4.136741769s ago: executing program 3 (id=6442): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000201dd6a000000000000000002000008456a9e29ba62f64e1560c1f0ea449ea77aef36b0cd376549a716d60d877bac60a1a88b3013826dbf3306ef6825fb381d2935627d2a93dc6de377025b5b24876d9f8020ffaf7f99a3644e07803de88cf48b561eacf4d1c94118ab05109c52fa2d268411ca2b5b2e2e0e52ba231eb4fd7d95007aea6084c939d24e2daa8319e529188a2e1685166a12408fb739babb9db8f5dca98d0895a54115c45972a0eaae"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 4.119024355s ago: executing program 2 (id=6443): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r1, @ANYBLOB="010080000000fddbdf250f0000001400058008000100657468000800010065746800140003800800010021000000080002000004000040000780080002000a0000000c00040003000000000000000c00040008000000000000000c00030000"], 0xf8}, 0x1, 0x0, 0x0, 0x2805}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002580)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0x4}, {0xf, 0x2}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000094}, 0x40) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008b86d3106d04b50801d701020003090212"], 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44840}, 0x44050) syz_usb_connect(0x6, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120140e1f173a440cd061501c3d901020301017800090500"/38, @ANYBLOB="872e"], 0x0) 4.002738451s ago: executing program 8 (id=6444): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x29, 0xb, 0x70bd27, 0x0, {0x5}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = syz_io_uring_setup(0x917, &(0x7f0000000240)={0x0, 0x80, 0x10100, 0xfffffffe, 0x309}, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_UNLINKAT={0x24, 0x1b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) mlockall(0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8a4e, 0x509200) execveat(r5, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={[&(0x7f0000000080)='\x00']}, &(0x7f0000000340)={[&(0x7f0000000180)='+])}$^&}.%]]\x00', &(0x7f0000002280)='?\x94\xec|\x972\x97\x97\xd3\xcf\xca\xfe\x1c*\xd1\xd1\xfb\xdbss\xe8\xcf\xe6\xd1\xbdQ\x17\xe4R\x8eal\xc3\xc3\x10\x0f\xf0\xca\xecw\x9d\xd4x0\xed\xe2\x959\x92\x83\x9bm\r+H\xf3\xca\xda\xa9\xa3.t!\x93\x0e\x93\xb9\x8d#G\xfb\tE:\x19\xbd\xe0\xba\f\xd0\xd2\x14H\'\x8c&', &(0x7f0000000240)='\x00', &(0x7f0000000280)='!q})\x00', &(0x7f00000002c0)='{:\\\x00', &(0x7f0000000300)='\x00']}, 0xc00) sendmmsg$sock(r5, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000380)="7237e54085c0b72d0e39fe7eae2bafe5e22ddb57ac0416367c729bce6f3925d8d4272a481d74c16a5e29b78790dbdd00c44b677246b8b5c81e4357cf26b861e476f1a9f784d8c98cf264d769a4844a6f597277326d163e9a62080799fc29dc3c48cff94dc2579da82a", 0x69}, {&(0x7f0000000400)="331024aad5a8a2eda2499b1d31c783aecbd9f2a7ddb3995c854d7b60edb2c58743ac4fa0405ab21641484ec5c92f1914edbccfa771808104344a54399f9e9b0f12a83c4baaca9e5b1b80e3", 0x4b}, {&(0x7f0000000480)="e8b9cba55a372b03f347a04dced18f5e251bf4df2c64", 0x16}, {&(0x7f00000004c0)="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", 0xfa}, {&(0x7f00000005c0)="81a6a6b48918feee1a99da3cc5ebff62f0c00a99224ceffe72c3239c9865083de59796cf0a501cc6afffeb12554214af5e449ae8ed62f72d", 0x38}, {&(0x7f0000000600)="bd3ee6d033ee760176924ee825d1311ae8ace812cfc79499af716453ff3558", 0x1f}, {&(0x7f0000000640)="b21cb33bcf10ea98f173a890d1bb8ede8c48c20b3bbabe897ce516007675dce25b07126110ed4bb55a5b7696d0dcdbc20be8d5f50fb86c37fe472a0554d3d1c07f795e654a1c929cb33c8af96bb902af1f3705bd9d05bbc8a9c6dc5383145a005c1f61f468b1805fcba2a6b4a6047663de2ff271961418fcb2ffcd86377ddf74cb21e24777321fefbc97798b621f2f7161ec9213c864a85f84f33ff4cf8643eb8fe6d443eaaf4121d582c27f0cf77e9f369f6deb1a032b020578eca1e0201de8148b40bca2d64ce27012b82d8bd81159680d79bd679bcb195e8abb654a", 0xdd}, {&(0x7f0000000740)="928ebe79fda0b569d04c2544c6a6eb62991dfb36e2bea2c3611f7784f74d0fc8d84d8dd1c2ef49000e85973cd0805deed430f95c4c738e2a51e09204b638866e92be35d8c64b139e76a00731a3fbb98301ebb5363325d02515e4dbdd8784cdb792617367a4377049f0818278c9df685c76178e9d1063662ae10163dfb0bc267f3e1cb4c490df88960ade4dbba02f93fee90f06c32c224039fa8569fa1d4997f5c69c5a6a590d5b31197e5523a8cc4e73ef0390a72d0fcf25fd4368", 0xbb}, {&(0x7f0000000800)="1a8fa2f65f4fb11c4c04ddaec0ccbef505638738e7147d91c51ba947d1f6cfb773ca1cb68c8a7e3eec9edd27d900dcd0a1cf72ea8c406f7b5449f9f36d3f61d35dc0a3acdc91a36f83162e98b1f675247938ba2dd68019d5da1bfa88d56ef78ceae3f2d19ea2dc9648bac2503a115f3312fac83b3d4ddb5b1295f00cf75b5f6d19c3f6111691f21b7dde46178f92f0c98ec982411c7a72af387596a47ef450613a9f5434d92c38a9b81e0e3ab60df87031b6ca6129080154a9d49df0b6da9ab2bc1a7829525daefafb589e8992349a3e9bb2c80128ef7e4e", 0xd8}], 0x9, &(0x7f00000009c0)=[@timestamping={{0x14, 0x1, 0x25, 0x338}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xda57}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x4519}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x67}}], 0xd8}}, {{&(0x7f0000000ac0)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000000b40)="2d50c5fdf190be50fb78fa461a52fa0e28229f963a9e9daaae117ebc446cf0543104738f6a10e1737fd05f9144bead36c0a4f54ccf070a6e8c817db80f091e8f71c1305bf7af9dbd07e265762c218360bdb9a508984e33aff11b327c1c278609f8e024273d82a8a93a823370c681d070cf7d2cbd35dc68027cdaa0ed84205741ba1a1a281809c1bbe8459a3bc3d3bd506bbbebda6d193e86bead5a07380a045733ebf84a54b859352c875bf8a0914b72859ed13c254c38308e496d20ad2d71fdd9ee3b91eddfa5835282bfea0013dabb33a43c819ded7f704ea3bea5b09e03510437a1930f35dcfbbc", 0xe9}, {&(0x7f0000000c40)="d604e57beb793e2aea8c84c568ee9144a0c6567c6c44dcdd03f0d41874a2737317df7289ac5a720536eb16274b19c2923be1ee54798130fbc8531df2ce57ddcc2f347081fc5f1342b468544ad89da97920e7b50c8572c14251adb6ca3b4b76", 0x5f}, {&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000001cc0)="f5cfb5cfc4d5d8fdaebcb3771f638700f7ccb9ddf285890fc7074f589d044f11d18045a7a9bbe137ac8abf83f060d5cf1b2bfdad663a8274f1b8ecba7e0c4a53c01504a6161a7f8a19d1a9a65a4e2baf24afce3f1471730c6f727e649ea68ebad0cec35bb048f017e3d460230eb5a0d47913e1c1e13ba0ea3b24dc6f8bbfa13d10f3ade5a547ac478e0764f3b4aac84c47d66ab30f2a2d83c86eff29068d57320f5e51f0cedba58f79f79a45234f55162d4a22ecd739fc14e0ebef979a4fadbd145241ccea04d30cc66c692f17c2e9fff616af9098df11fe7d378b1957a6e5e3125de009c544e340a0c08353326254772e5355", 0xf3}, {&(0x7f0000001dc0)="e7bfd555f44b6d5efaa7dbd6cb04e861b5bfa0a04b8e0fce3dcb0b5a70860d509b979ac033292ce7eb804920af8f16288685a4631f201ce581f8b473a3f5235678abfa803273aa32a31f64e4a801d62e185c6a837b59e0b33da1123b807329880fa263b9", 0x64}], 0x5, &(0x7f0000001ec0)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x30}}, {{&(0x7f0000001f00)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x20000000}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001f80)="4137c204b39e006ec3974f86e9ba862e51da87", 0x13}, {&(0x7f0000001fc0)="e0", 0x1}], 0x2, &(0x7f0000002040)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}], 0x18}}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000002080)="c962adcd24c5861328efa98ca1650f0adbdfd2c3d9a3f6b0e42cff39456970c106db1ed9d030e7d9244a1d9bd0ac5fbcc643c04231bfaff24325a1c8788e9d93a7d666d33bdcc6e2bc3bf4ec535838bfc43bc81f12dc9c061063023c218b20667302ad7723271216b610cce42d0c10bbd814c705007c5e6377721163fd88451ef66a0ce6a5db10623686dc204d7d1f4885c06432c3f6e9f8172ea9444d0a952fd02ec4787b31cad8f41a49c6f8b38362", 0xb0}], 0x1}}], 0x4, 0x4) 3.87735042s ago: executing program 3 (id=6446): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x70, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x28, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0xbb}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}}]}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x800}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb}, @IPSET_ATTR_COMMENT={0xf, 0x1a, '$@{Z$[[\x1b(!\x00'}]}, @IPSET_ATTR_ADT={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x4c091) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a018014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 3.688519489s ago: executing program 8 (id=6448): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf0bd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f}}}}}]}}]}}, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0xf5ff, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000000)={0x40, 0x30, 0x5, {0x5, 0xe, "dced88"}}, 0x0, 0x0, 0x0}, 0x0) 3.665775303s ago: executing program 6 (id=6449): syz_usb_connect$uac1(0x1, 0x84, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010102000000086b1d0101400001020301090272000301d6400a0904000000010100000a24010101080201020924030101010505010904010000010200000904010101010200000a240201060405073a7a09050109080006690407250101ffff7f09040200000102000009040201010102000009058209ff0309030107250100000101"], &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 3.617009833s ago: executing program 3 (id=6450): r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x91, 0x0) 3.45179186s ago: executing program 3 (id=6452): r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r1 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000001540)=@ethernet={0x306, @random="2c88fc1ab44d"}, 0x80, 0x0}, 0x8010) recvmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=r2, @ANYBLOB="8a23210a6c8b798e32d6183f516cdc4c00577f7e9328c1a1337822712d9bf8f15c40e2988f8ae33d1c7f1a4282c8cc5d1cf8e81648c8ff1ca863102fa668c4e1f187f64c5d2262e9ebd875ae04f1e480c2c2b34dccd60b8a81687a7972989c69c4a22b58908a34aa6fc7fb64400a3d1bfd40de375a94b39d225159"], 0x78}, 0x1, 0x0, 0x0, 0x4004025}, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000015c0)=ANY=[], 0x11f0}, 0x40) socket(0x2, 0x80805, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="fe", 0x1a000}], 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0x1ff, 0x100, 0x9, 0x3ff, 0x14}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="40000000100001000100"/20, @ANYRES32=0x0, @ANYBLOB="850b010000000000140003006d6163736563300000000000000000000a000100aaaa"], 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x4200, 0x11cfa, 0x0, 0x8000008, 0x7, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, 0x0, 0x48000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8000, &(0x7f0000006680)) 3.174452964s ago: executing program 3 (id=6453): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e6ef1f00060000007f00000001"], 0x48) unshare(0x26020480) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x6a040000) syz_usb_connect(0x0, 0x36, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x100, 0x3, 0x234}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) unshare(0x8000000) semget$private(0x0, 0x4000, 0x200) semtimedop(0x0, &(0x7f0000000500)=[{0x4, 0x3, 0x1000}], 0x1, 0x0) unshare(0x2c040000) bpf$MAP_CREATE(0x0, 0x0, 0x50) 2.375534278s ago: executing program 2 (id=6455): pipe(0x0) r0 = io_uring_setup(0x6429, &(0x7f00000001c0)={0x0, 0xfc9f, 0x80, 0x0, 0x274}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x24004094}, 0x240000c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}, 0x1, 0x0, 0x0, 0xa6975b0d20b3dc1e}, 0x40) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x13, &(0x7f0000001bc0), 0x2) 2.240450932s ago: executing program 2 (id=6456): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r2, 0x7ff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendmmsg(r3, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="7c220752098d1a03003fb4d50b17b9653538f559e8ca1a63dfa1a8f54135abe90913a7bb3930c14e8d1808268429578d92871b8681b42a7a264d4c578a7c26845616d98fc09729e3d8c0aa68e95af732c067f9dd1d9fdd4ee2008561e5a690de23248e60f4ab6390f520377d0a68cc822a17c773be19ee5b51b2428acd21725b17f5fadc10e18e574983e260010d619f74dd4c30", 0x94}], 0x1, &(0x7f0000000480)=ANY=[], 0x170}, 0x94}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000f40)="f48f2d", 0x7313485bca3e9141}], 0x1}}], 0x2, 0x0) 1.523795617s ago: executing program 7 (id=6457): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b", 0x2}, {&(0x7f0000002800)}, {0x0}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000000240)="06e680be8b5ee435beedb3b8d51690a05aa2e3aa484b54c100a1e8c37f49448bf9da9953cc62044c7884b45fa051e99263eaf7cfb9bec6496131dc8a8eb4481ab2335032c27858791c5da8bd5f45ff43be3e461b9d901fddba910b518868", 0x5e}], 0x5}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f0000000540)="f2e6", 0x2}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="db6a17c67d10beecea12519c84fe5395a32ca73436ce6975b46e5aaff7be26a1dff05c02a3e57710a7289df43f1d96dc1910a0d0e141e1ffd99503fa87475cd9552b0de94dc481d078c634a329327a61d069e7afd887", 0x56}, {&(0x7f0000000440)="028d9a7c7dc3d9decf249e204d8fd31920b3ceaf81d132403d926018086f8183304c9ba0791798c013e7d20c659eaa2171981edb1c37928d2a466c7192bb0c5534672b04798af4bbb1486bdf1e9e49f862f7cb464c3cf7aaa2d18bd01ab0f21a0c65f36ca0696f91f6424b6b635e0ed21be4476746c0f666166dc302bacec49a795f97869cbf1c3a91e6ca5bbcf281433f54f005bbc0c9858beea8715b67fb97cbced0995c9220e5f14ddb7016abec23fb", 0xb1}, {&(0x7f0000003040)="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", 0xccd}], 0x3}}], 0x3, 0x4000000) close_range(r0, 0xffffffffffffffff, 0x0) 1.417157667s ago: executing program 7 (id=6458): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8a450200000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=r1], 0x44}}, 0x40) 1.216559608s ago: executing program 7 (id=6459): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x2d9}}]}, 0x40}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x4, [0x9, 0xf, 0x8, 0x10, 0x7, 0x9, 0x6, 0x4, 0xa, 0x5, 0xd, 0xc, 0x6, 0xf, 0xa, 0xf], 0x0, [0xc, 0x5c, 0xfff, 0x7d56, 0x7, 0x8, 0x1, 0x26, 0x3ff, 0x2, 0x2, 0x80, 0x9, 0xf87, 0x5, 0x3], [0x1, 0xb, 0x3, 0x2, 0x4, 0x7ff, 0xec, 0x4, 0x4, 0x7, 0x49, 0x1, 0x2, 0x8000, 0x8, 0xfab2]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @multicast2}, 0xc) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r6 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') getsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f00000000c0), &(0x7f0000000140)=0x4) preadv(r6, &(0x7f0000001b80)=[{&(0x7f0000002f40)=""/102, 0x66}, {&(0x7f0000000500)=""/101, 0x65}], 0x2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, r4, 0x1, 0x70bd25, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x6}]}, 0x3c}}, 0x4010) 1.208668246s ago: executing program 2 (id=6460): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, &(0x7f0000000480)=ANY=[@ANYBLOB="4006cd000000cd02901a00a7efb91b9ef91466d941af1b33c3f5877116adea4f3b89615964d7a5f284a259c806bcddb1c5c99e5cf1e4a59905b951d43f179e1bc50ae5f7ec541e62e84e2d64b2d9dc4fa5d487b891ca765c62974d58b9c5fa20c4e63897e6d3698e152460d1fc779abcf089b13b14ae48bf06b8ae9c66cf910e6bf3452a00692a5a6e2020320e0c7a6ad5052baa517fd3b926789b79c772c0979ec0898202d25be69085f4771858f422fd798e7c00b23391dd4dfbe105f564a5d9484ff0df41e7937d9f390000000000000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) pread64(r1, &(0x7f0000000100)=""/78, 0x4e, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', r2, 0x0, 0x260) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0x7, 0x4d, 0x2}, 0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r3, r3, 0x21) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x2, 0x0, 0x7}) 1.119789746s ago: executing program 7 (id=6461): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close_range(r0, r1, 0x2) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="7ccdd8c5e07790ce4466f579998e2ebb955621a82ed687088df82a0ce021f2bc14e2ec4aa0c590aabe2bf6fd64c611ca64eab4a67e40e30a283f1c193d2660", 0x3f}, {&(0x7f00000000c0)="0c30c6527e206a934239108b3db9acafe6b50230006a7ce81414931e8e2d140d17abd81ed6db7ab418de32d81b", 0x2d}], 0x2}, 0x855) (async) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.freeze\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000200)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x20, 0x7f, 0xd2, 0x2}, 0x7, 0x7fff}}, 0x200000) (async) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000240)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000280)={0x48, 0x5, r5}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) unshare(0x62000080) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000380)=@security={'security\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x140, 0x238, 0x140, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000340), {[{{@ipv6={@local, @dev={0xfe, 0x80, '\x00', 0x24}, [0x0, 0x0, 0xff000000, 0xffffff00], [0x0, 0x0, 0xffffff00, 0xffffffff], 'pim6reg1\x00', 'gre0\x00', {}, {0xff}, 0x32, 0x9, 0x1, 0x46}, 0x0, 0x100, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0x4, 'A,', 0x1}}, @common=@srh={{0x30}, {0x33, 0xe8, 0xd2, 0x94, 0xfffe, 0x40}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x2, 0x8, 0x8, 0x10000, 0x2, 0xffff, 0x40, 0x6]}}}, {{@ipv6={@loopback, @empty, [0xffffffff, 0xff], [0xff000000, 0xff, 0xffffff00, 0xff000000], 'sit0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x2c, 0x4, 0x7, 0x2d}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {'\'R', 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7c, 0x2, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) unshare(0x40000100) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000800)={0x8, 0x0, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async, rerun: 32) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000840)={@hyper, 0x2}) (async, rerun: 32) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xb8, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffc262}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffde37}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc5b}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) writev(r1, &(0x7f0000001b00)=[{&(0x7f0000000a00)="ba0c878673fa2296bb77a2d5fa1a", 0xe}, {&(0x7f0000000a40)="9b29c8147ecb24c61536dcef92022b018157925773cf614389aa0c770217f5a2abf8814a2b6620968e7e929d9597e5e3f3a27b9b09ee8e1e64ad", 0x3a}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="a143d9ae4281896607d305da6ed70d34456ddf5e1d75d338a62b2699f822eb96e5ad7c15bc3f39e5922abbea29a092e43a6fce9eb7c8fdbc0a20984127531664d444", 0x42}], 0x4) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000001b40), 0x80000, 0x0) ioctl$TUNSETFILTEREBPF(r7, 0x800454e1, &(0x7f0000001b80)=r4) (async) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020662a, &(0x7f0000001bc0)={0x80, 0x9, 0x6, 0x8, 0x7, 0x0, [{0x80000000, 0x6, 0xfff, '\x00', 0x1}, {0x3, 0x8, 0x4, '\x00', 0x1200}, {0x6, 0xb451, 0x4, '\x00', 0x2}, {0x1, 0x1, 0x3, '\x00', 0x300}, {0x5, 0x80000000, 0x3, '\x00', 0x1003}, {0x4, 0x0, 0x3, '\x00', 0x1082}, {0xfffffffffffffe00, 0xc, 0x0, '\x00', 0x584}]}) (async, rerun: 32) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000001d80)={0x70, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}]}}) (rerun: 32) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001e00)={0x0, 0x0, 0x9}) (async) unshare(0x42010180) (async) epoll_pwait(r4, &(0x7f0000001e40)=[{}, {}, {}, {}, {}], 0x5, 0x55, &(0x7f0000001e80)={[0x8]}, 0x8) ioctl$int_in(r7, 0x5452, &(0x7f0000001ec0)=0x8) (async, rerun: 32) ioctl$RTC_PLL_GET(r4, 0x80207011, &(0x7f0000001f00)) (rerun: 32) bind$can_raw(r4, &(0x7f0000001f40), 0x10) (async) read$nci(r1, &(0x7f0000001f80)=""/147, 0x93) 645.320094ms ago: executing program 7 (id=6462): r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x91, 0x0) 508.154512ms ago: executing program 7 (id=6463): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000005ec0)={0x2, &(0x7f0000005e80)=[{0x35, 0x0, 0xe1, 0x5}, {0x8001, 0x3, 0x5, 0x1}]}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000080)="b927db", 0x3, 0x40, &(0x7f0000000140)={0xa, 0x4e23, 0x800, @loopback}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000500)='net/ip_tables_targets\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x224e}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002980)=ANY=[@ANYBLOB="340000001100010027bd7000ffdbdf7e00000000", @ANYRES32=0x0, @ANYBLOB="c0000000001400001400350077673200"/28], 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) preadv(r0, 0x0, 0x0, 0x3, 0x80) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x20000004) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) syz_usb_connect(0x1, 0x3d, 0x0, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="10000000161409"], 0x10}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 507.901774ms ago: executing program 8 (id=6464): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/17, 0x11}, {0x0, 0x1100}], 0x2) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f000063d000/0x3000)=nil, 0x3000, 0x6, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x284a, &(0x7f00000001c0)={0x0, 0xdf7a, 0x2000, 0x0, 0x2d5}, &(0x7f0000000440), &(0x7f0000000100)=0x0) r4 = socket$caif_stream(0x25, 0x1, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0x6}]}}]}, 0x38}}, 0x20040850) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x80, &(0x7f00000003c0)=@nfc_llcp={0x27, r7, 0x1, 0x4, 0xd, 0x7, "ebc9a51f5c2650a5111a3c180a741ca59e1b18ce46947f8891a4f5de9cfbd3c15744f54219249f6384369dfa7a31504410035f5662c3dd3ae9658adc54b985", 0x31}}) r8 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x9) sendfile(r9, r8, 0x0, 0x7ffff000) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r10, @ANYRES16=r10, @ANYRES32=r0, @ANYBLOB="6bae9a1aeb91197cf7a6e96c70379ec9eaf0cc11b8386a9776b76d47ca62a4b01c00973d5b0c35bd7c97a6026e82d2c919ff6974b1aefe834235571e97fef9bdb8b5e327b4b842365d286d252ce6e068ffc0485adb85482b0e018fb04b0f5936846e8aa190db53e19efa1edfe36721bf177df2989b76534c071675b742e86bb38ef2b6d3e5d98e5eaa239409c16a5c46c7"], 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = creat(&(0x7f0000000000)='./file0\x00', 0x0) read$FUSE(r11, &(0x7f00000004c0)={0x2020}, 0x2020) 507.110236ms ago: executing program 6 (id=6465): openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) r0 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000100000000000000000000000000000000000000fe8000001ae85eee883ba099000000aa00000000000000080a00603058000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000007f00000000000000070000000000000003000000000000000000000000000000fdffffffffffffff0500000000000000ffffffffffffffffffffffff00000000000000000000000000000000000000000100010000000000000000000000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x1158e3b975e78980}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000f40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe8000000000000000000012000000bbfe8000000019"], 0x0) 341.115238ms ago: executing program 6 (id=6466): r0 = syz_open_procfs(0x0, 0x0) getdents64(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x68}}, 0x200000d4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x8000) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000240)={0x14, {{0x29, 0x0, 0x37000000, @empty, 0x10000000}}}, 0x88) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x8, 0x7fff7ffc}]}) r3 = syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYRES16=r2, @ANYRESHEX=r2], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) syz_usb_disconnect(r3) r4 = socket$inet6(0xa, 0x200000000003, 0x87) getsockopt$inet6_int(r4, 0x29, 0x4a, 0x0, &(0x7f0000000040)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x5, 0x51, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100000be99c1099041810dab20102030109023f00010200000009040400022cb3d8000524040000052400ff070d240f010900000001000300800423fc09090501"], 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) 0s ago: executing program 3 (id=6467): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x106, 0x27f1236058d26330}}, 0x20) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000007000200fe8000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000280)={0x7, 0x100, "77c638b05041a0115f44304807e55536b7fc5ae52727d800", 0x1ff, 0x5, 0x79, 0xdf4}) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) request_key(&(0x7f0000000780)='rxrpc_s\x00', &(0x7f00000007c0)={'syz', 0x0}, &(0x7f0000000800)='/dev/nvme-fabri\x04\x00\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x485a40, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000140)={0xc}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x8, r5}, 0x18) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) open_by_handle_at(r3, &(0x7f0000000240)=ANY=[], 0x10000) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000040)={0x2e, 0x6, 0x0, {0x3, 0x5, 0x5, 0x0, '\xaa\xaa\xaa\xaa\xaa'}}, 0x2e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) kernel console output (not intermixed with test programs): mem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14692kB pagetables:6924kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1558.685062][T25277] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1558.760679][T31071] Node 1 active_anon:0kB inactive_anon:0kB active_file:88kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:36kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1558.799474][T31071] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1558.831310][T31071] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 1558.837890][T31071] Node 0 DMA32 free:924056kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33568kB inactive_anon:0kB active_file:74020kB inactive_file:160004kB unevictable:1536kB writepending:700kB present:3129332kB managed:2560992kB mlocked:0kB bounce:0kB free_pcp:45584kB local_pcp:27368kB free_cma:0kB [ 1558.865134][T25277] usb 3-1: device descriptor read/64, error -71 [ 1558.877147][T31071] lowmem_reserve[]: 0 0 1 1 1 [ 1558.881907][T31071] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1820kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1558.920856][T31071] lowmem_reserve[]: 0 0 0 0 0 [ 1558.971843][T31071] Node 1 Normal free:3911648kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:88kB inactive_file:200kB unevictable:1536kB writepending:36kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:10520kB local_pcp:0kB free_cma:0kB [ 1558.995655][T25277] usb usb3-port1: attempt power cycle [ 1559.065238][T31071] lowmem_reserve[]: 0 0 0 0 0 [ 1559.070013][T31071] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1559.088778][T31071] Node 0 DMA32: 1048*4kB (UME) 1290*8kB (ME) 1066*16kB (UME) 438*32kB (UME) 508*64kB (UME) 169*128kB (UME) 90*256kB (ME) 71*512kB (UME) 43*1024kB (UME) 5*2048kB (UME) 174*4096kB (UM) = 926096kB [ 1559.110273][T31071] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 1559.123268][T31071] Node 1 Normal: 146*4kB (UME) 45*8kB (UE) 41*16kB (UE) 195*32kB (UE) 79*64kB (UME) 27*128kB (UME) 10*256kB (UME) 9*512kB (UE) 3*1024kB (U) 5*2048kB (UME) 946*4096kB (UM) = 3911648kB [ 1559.142015][T31071] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1559.152978][T31071] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1559.163594][T31071] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1559.174184][T31071] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1559.263689][T31071] 60785 total pagecache pages [ 1559.288707][T31071] 0 pages in swap cache [ 1559.293007][T31071] Free swap = 124996kB [ 1559.308718][T31071] Total swap = 124996kB [ 1559.318726][T31071] 2097051 pages RAM [ 1559.328638][T31071] 0 pages HighMem/MovableOnly [ 1559.336294][T31071] 424697 pages reserved [ 1559.340717][T31071] 0 pages cma reserved [ 1559.345554][T25277] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1559.396201][T25277] usb 3-1: device descriptor read/8, error -71 [ 1559.665084][T25277] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1559.685568][T25277] usb 3-1: device descriptor read/8, error -71 [ 1559.805726][T25277] usb usb3-port1: unable to enumerate USB device [ 1559.863969][T31078] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1559.877406][T31078] bond0: (slave bond1): Enslaving as an active interface with an up link [ 1560.066735][T16861] net_ratelimit: 2 callbacks suppressed [ 1560.066749][T16861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.080812][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.168105][T31086] trusted_key: encrypted_key: insufficient parameters specified [ 1560.722639][T16875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.730958][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.739880][T16861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.748125][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.763204][T16875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.771478][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.958041][T25277] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1561.035581][T31103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1561.118900][T31103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1561.135112][T25277] usb 5-1: Using ep0 maxpacket: 16 [ 1561.152067][T25277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1561.175641][T25277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1561.203565][T25277] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1561.267559][T25277] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1561.297223][T25277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1561.344976][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.353172][ T6839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.422277][T25277] usb 5-1: config 0 descriptor?? [ 1561.855778][T31096] loop2: detected capacity change from 0 to 7 [ 1561.927785][T31096] Dev loop2: unable to read RDB block 7 [ 1562.092406][T31096] loop2: unable to read partition table [ 1562.105498][T31096] loop2: partition table beyond EOD, truncated [ 1562.150260][T31096] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1562.283311][T25277] usbhid 5-1:0.0: can't add hid device: -71 [ 1562.437085][T25277] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1562.463110][T25277] usb 5-1: USB disconnect, device number 116 [ 1563.607580][T31132] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1563.630332][T31132] bond0: (slave bond2): Enslaving as an active interface with an up link [ 1563.640331][T31138] FAULT_INJECTION: forcing a failure. [ 1563.640331][T31138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1563.654285][T31138] CPU: 0 UID: 0 PID: 31138 Comm: syz.3.6048 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1563.654308][T31138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1563.654318][T31138] Call Trace: [ 1563.654326][T31138] [ 1563.654333][T31138] dump_stack_lvl+0x189/0x250 [ 1563.654360][T31138] ? __pfx____ratelimit+0x10/0x10 [ 1563.654384][T31138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1563.654407][T31138] ? __pfx__printk+0x10/0x10 [ 1563.654425][T31138] ? __might_fault+0xb0/0x130 [ 1563.654452][T31138] should_fail_ex+0x414/0x560 [ 1563.654476][T31138] _copy_from_user+0x2d/0xb0 [ 1563.654493][T31138] __se_sys_io_uring_setup+0x15b/0x270 [ 1563.654511][T31138] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1563.654540][T31138] ? rcu_is_watching+0x15/0xb0 [ 1563.654569][T31138] ? do_syscall_64+0xbe/0x3b0 [ 1563.654595][T31138] do_syscall_64+0xfa/0x3b0 [ 1563.654615][T31138] ? lockdep_hardirqs_on+0x9c/0x150 [ 1563.654637][T31138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.654653][T31138] ? clear_bhb_loop+0x60/0xb0 [ 1563.654673][T31138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.654689][T31138] RIP: 0033:0x7f0b1d38e929 [ 1563.654704][T31138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1563.654719][T31138] RSP: 002b:00007f0b1e15efc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1563.654737][T31138] RAX: ffffffffffffffda RBX: 00007f0b1d5b5fa0 RCX: 00007f0b1d38e929 [ 1563.654750][T31138] RDX: 0000200000ff4000 RSI: 0000200000000000 RDI: 00000000000048ba [ 1563.654762][T31138] RBP: 0000200000000000 R08: 0000000000000000 R09: 0000200000ff4000 [ 1563.654773][T31138] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1563.654784][T31138] R13: 0000200000000080 R14: 00000000000048ba R15: 0000200000ff4000 [ 1563.654811][T31138] [ 1563.999379][T31147] fuse: Invalid gid '00000000000000000007' [ 1564.109070][T31151] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6051'. [ 1564.128930][T31153] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6053'. [ 1564.140515][T31153] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6053'. [ 1564.255574][T25277] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1564.415634][T25277] usb 4-1: no configurations [ 1564.423128][T25277] usb 4-1: can't read configurations, error -22 [ 1564.565553][T25277] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1564.717445][T25277] usb 4-1: no configurations [ 1564.756970][T25277] usb 4-1: can't read configurations, error -22 [ 1564.810461][T25277] usb usb4-port1: attempt power cycle [ 1564.884029][T31167] libceph: resolve '4..' (ret=-3): failed [ 1565.396544][T25277] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1565.430834][T25277] usb 4-1: no configurations [ 1565.435634][T25277] usb 4-1: can't read configurations, error -22 [ 1565.675374][T25277] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1565.694653][ T30] audit: type=1326 audit(1751425127.502:8844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31175 comm="syz.6.6060" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffbe1f8e929 code=0x0 [ 1565.735773][T25277] usb 4-1: no configurations [ 1565.740413][T25277] usb 4-1: can't read configurations, error -22 [ 1565.755935][T25277] usb usb4-port1: unable to enumerate USB device [ 1565.826221][ T9586] net_ratelimit: 4 callbacks suppressed [ 1565.826239][ T9586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.826434][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.254932][ T9111] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1566.344956][T25277] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1566.415665][ T9111] usb 3-1: Using ep0 maxpacket: 32 [ 1566.424110][ T9111] usb 3-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice= d.2d [ 1566.434361][ T9111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.445784][ T9111] usb 3-1: Product: syz [ 1566.454151][ T9111] usb 3-1: Manufacturer: syz [ 1566.465695][ T9111] usb 3-1: SerialNumber: syz [ 1566.466704][ T9586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.478836][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.487941][T16861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.496330][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.505595][T16875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.513841][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.523031][T16859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.531438][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.571651][T25277] usb 5-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 1566.613694][T31189] batman_adv: batadv0: Adding interface: dummy0 [ 1566.624130][T25277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.646891][T31189] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1566.699629][T31189] batman_adv: batadv0: Interface activated: dummy0 [ 1566.729649][ T9111] aqc111 3-1:1.0: probe with driver aqc111 failed with error -22 [ 1566.745711][T25277] usb 5-1: config 0 descriptor?? [ 1566.786434][ T9111] usb 3-1: USB disconnect, device number 16 [ 1567.199896][T31199] netlink: 'syz.6.6065': attribute type 10 has an invalid length. [ 1567.212478][T31199] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6065'. [ 1567.236830][T31199] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1567.243730][T31199] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1567.278688][T31199] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1567.395015][T16193] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1567.664998][T16193] usb 4-1: Using ep0 maxpacket: 8 [ 1567.698920][T16193] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1567.712812][T16193] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.723245][T16193] usb 4-1: Product: syz [ 1567.735924][T16193] usb 4-1: Manufacturer: syz [ 1567.740672][T16193] usb 4-1: SerialNumber: syz [ 1567.836204][T16193] usb 4-1: config 0 descriptor?? [ 1568.111816][T16193] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1569.041486][T31213] netlink: 'syz.6.6069': attribute type 1 has an invalid length. [ 1569.181946][T31215] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6069'. [ 1569.235399][T25277] usb 5-1: can't set first interface for hiFace device. [ 1569.242422][T25277] snd-usb-hiface 5-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 1569.250231][T31213] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1569.300941][T31215] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1569.366258][T25277] usb 5-1: USB disconnect, device number 117 [ 1569.366376][T31215] bond1: (slave gtp0): The slave device specified does not support setting the MAC address [ 1569.434570][T31215] bond1: (slave gtp0): Error -95 calling set_mac_address [ 1569.535911][T16193] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1569.555267][T16193] usb 4-1: USB disconnect, device number 120 [ 1569.775581][T25277] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1569.895267][ T9111] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1569.945001][T25277] usb 5-1: device descriptor read/64, error -71 [ 1570.055008][ T9111] usb 3-1: Using ep0 maxpacket: 32 [ 1570.066872][ T9111] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1570.080970][ T9111] usb 3-1: config 0 has no interface number 0 [ 1570.095001][ T9111] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1570.115128][ T9111] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1570.151961][ T9111] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1570.183275][ T9111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1570.235057][T25277] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1570.282758][ T9111] usb 3-1: config 0 descriptor?? [ 1570.415011][T25277] usb 5-1: device descriptor read/64, error -71 [ 1570.657236][T25277] usb usb5-port1: attempt power cycle [ 1570.815911][ T9104] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1570.943839][ T9111] uclogic 0003:28BD:0094.0055: pen parameters not found [ 1570.955982][T16869] net_ratelimit: 2 callbacks suppressed [ 1570.955996][T16869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1570.969888][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1570.999915][ T9111] uclogic 0003:28BD:0094.0055: interface is invalid, ignoring [ 1571.045442][ T9104] usb 4-1: no configurations [ 1571.059571][ T9104] usb 4-1: can't read configurations, error -22 [ 1571.085710][T25277] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1571.105746][T25277] usb 5-1: device descriptor read/8, error -71 [ 1571.305058][ T9104] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1571.416189][T25277] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1571.585664][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1571.596352][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1571.623068][ T9109] usb 3-1: USB disconnect, device number 17 [ 1571.660207][T25277] usb 5-1: device descriptor read/8, error -71 [ 1571.777099][T25277] usb usb5-port1: unable to enumerate USB device [ 1571.856004][ T9104] usb 4-1: no configurations [ 1571.860618][ T9104] usb 4-1: can't read configurations, error -22 [ 1571.901547][ T9104] usb usb4-port1: attempt power cycle [ 1572.225949][T16869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1572.234190][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1572.243227][T30897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1572.251476][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1572.259591][ T6839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1572.267971][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1572.465887][T31251] syzkaller1: left promiscuous mode [ 1572.490094][T31251] syzkaller1: left allmulticast mode [ 1572.535689][ T9104] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1572.558158][ T9104] usb 4-1: no configurations [ 1572.562772][ T9104] usb 4-1: can't read configurations, error -22 [ 1572.695276][ T9104] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1572.739636][ T9104] usb 4-1: no configurations [ 1572.744616][ T9104] usb 4-1: can't read configurations, error -22 [ 1572.764792][ T9104] usb usb4-port1: unable to enumerate USB device [ 1572.790840][T31260] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6080'. [ 1572.849304][T31260] netlink: 5 bytes leftover after parsing attributes in process `syz.7.6080'. [ 1572.903756][T31260] netlink: 5 bytes leftover after parsing attributes in process `syz.7.6080'. [ 1572.995675][ T9117] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1573.135007][ T9117] usb 3-1: device descriptor read/64, error -71 [ 1573.172105][T31267] tipc: Enabling of bearer rejected, failed to enable media [ 1573.377574][ T9117] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1573.535188][ T9117] usb 3-1: device descriptor read/64, error -71 [ 1573.665551][ T9117] usb usb3-port1: attempt power cycle [ 1574.025286][ T9117] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1574.075823][ T9117] usb 3-1: device descriptor read/8, error -71 [ 1574.295163][ T9109] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1574.325230][ T9117] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1574.344743][T23758] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1574.345831][ T9117] usb 3-1: device descriptor read/8, error -71 [ 1574.362367][T23758] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1574.372359][T23758] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1574.383102][T23758] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1574.391894][T23758] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1574.460187][ T9109] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1574.465461][ T9117] usb usb3-port1: unable to enumerate USB device [ 1574.475746][ T9109] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1574.487964][ T9109] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1574.497051][ T9109] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.508476][ T9109] usb 4-1: config 0 descriptor?? [ 1574.674708][T31286] chnl_net:caif_netlink_parms(): no params data found [ 1574.784145][T31286] bridge0: port 1(bridge_slave_0) entered blocking state [ 1574.792108][T31286] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.799946][T31286] bridge_slave_0: entered allmulticast mode [ 1574.808434][T31286] bridge_slave_0: entered promiscuous mode [ 1574.818330][T31286] bridge0: port 2(bridge_slave_1) entered blocking state [ 1574.827252][T31286] bridge0: port 2(bridge_slave_1) entered disabled state [ 1574.834520][T31286] bridge_slave_1: entered allmulticast mode [ 1574.842414][T31286] bridge_slave_1: entered promiscuous mode [ 1574.889105][T31286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1574.901500][T31286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1574.930873][ T9109] cm6533_jd 0003:0D8C:0022.0056: item fetching failed at offset 2/5 [ 1574.940878][ T9109] cm6533_jd 0003:0D8C:0022.0056: parse failed [ 1574.947676][ T9109] cm6533_jd 0003:0D8C:0022.0056: probe with driver cm6533_jd failed with error -22 [ 1574.981879][T31286] team0: Port device team_slave_0 added [ 1574.991952][T31286] team0: Port device team_slave_1 added [ 1575.026131][T31286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1575.033563][T31286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1575.060191][T31286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1575.072720][T31286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1575.079776][T31286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1575.106291][T31286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1575.157616][T31286] hsr_slave_0: entered promiscuous mode [ 1575.163950][T31286] hsr_slave_1: entered promiscuous mode [ 1575.170795][T31286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1575.179460][T31286] Cannot create hsr debugfs directory [ 1575.382376][T31286] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1575.392503][T31286] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1575.404372][T31286] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1575.417502][T31286] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1575.508483][T31286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1575.530738][T31286] 8021q: adding VLAN 0 to HW filter on device team0 [ 1575.550467][ T9586] bridge0: port 1(bridge_slave_0) entered blocking state [ 1575.557723][ T9586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1575.575544][ T6839] bridge0: port 2(bridge_slave_1) entered blocking state [ 1575.582660][ T6839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1575.660409][T31286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1575.700511][T31286] veth0_vlan: entered promiscuous mode [ 1575.733362][T31286] veth1_vlan: entered promiscuous mode [ 1575.786761][T31286] veth0_macvtap: entered promiscuous mode [ 1575.799927][T31286] veth1_macvtap: entered promiscuous mode [ 1575.840989][T31286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1575.861526][T31286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1575.877982][T31286] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.887877][T31286] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.896861][T31286] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.906312][T31286] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.993919][ T9586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1576.010973][ T9586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1576.040892][T16875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1576.050015][T16875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1576.080527][T16143] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1576.225191][T16143] usb 3-1: device descriptor read/64, error -71 [ 1576.452564][T31307] netlink: 'syz.8.6094': attribute type 13 has an invalid length. [ 1576.465402][T23758] Bluetooth: hci4: command tx timeout [ 1576.496030][T16143] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1576.618223][T31313] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6095'. [ 1576.645544][T16143] usb 3-1: device descriptor read/64, error -71 [ 1576.755902][T16143] usb usb3-port1: attempt power cycle [ 1576.757780][T31307] bridge0: port 2(bridge_slave_1) entered disabled state [ 1576.768814][T31307] bridge0: port 1(bridge_slave_0) entered disabled state [ 1576.781236][ T9586] net_ratelimit: 4 callbacks suppressed [ 1576.781254][ T9586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1576.795387][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1577.046272][T31307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1577.060457][T31307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1577.122530][T16193] usb 4-1: USB disconnect, device number 125 [ 1577.245219][T16143] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1577.268605][T16143] usb 3-1: device descriptor read/8, error -71 [ 1577.351998][T16869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1577.360290][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1577.379759][T31307] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.398784][T31307] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.445034][T31307] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.480637][T31307] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.528249][T16143] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1577.656774][T16143] usb 3-1: device descriptor read/8, error -71 [ 1577.776262][T16143] usb usb3-port1: unable to enumerate USB device [ 1577.961364][T31320] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1577.990718][T16875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1577.999350][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1578.019708][T16859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1578.028091][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1578.038381][T30897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1578.046675][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1578.097932][T31320] bond0: (slave bond2): Enslaving as an active interface with an up link [ 1578.135550][T31337] binder: 31333:31337 ioctl c0306201 200000000080 returned -22 [ 1578.354946][T16143] usb 4-1: new low-speed USB device number 126 using dummy_hcd [ 1578.507604][T16143] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1578.520824][T16143] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1578.531033][T16143] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1578.546163][T23758] Bluetooth: hci4: command tx timeout [ 1578.554427][T16143] usb 4-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 1578.563691][T16143] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.578623][T16143] usb 4-1: config 0 descriptor?? [ 1578.595156][T16143] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input126 [ 1578.781047][T31346] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.791306][ T5184] bcm5974 4-1:0.0: could not read from device [ 1578.830427][ T5184] bcm5974 4-1:0.0: could not read from device [ 1578.870732][T16143] usb 4-1: USB disconnect, device number 126 [ 1578.874448][ T5980] udevd[5980]: Unable to EVIOCGABS device "/dev/input/event4" [ 1578.884726][ T5980] udevd[5980]: Unable to EVIOCGABS device "/dev/input/event4" [ 1578.909520][ T5980] udevd[5980]: Unable to EVIOCGABS device "/dev/input/event4" [ 1578.923270][ T5980] udevd[5980]: Unable to EVIOCGABS device "/dev/input/event4" [ 1579.255352][ T9117] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1579.418969][ T9117] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1579.492225][ T9117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.650193][ T9117] usb 3-1: config 0 descriptor?? [ 1579.715184][ T9117] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1580.117395][T31349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1580.140344][T31349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1580.161831][ T9117] cpia1 3-1:0.0: unexpected state after lo power cmd: 01 [ 1580.185158][T16193] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 1580.341578][T16193] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1580.379467][T16193] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1580.443744][T16193] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1580.498420][T16193] usb 4-1: config 1 has no interface number 0 [ 1580.515064][T16193] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1580.526343][T16193] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1580.540040][T16193] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1580.562640][T16193] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.625193][T23758] Bluetooth: hci4: command tx timeout [ 1580.682883][T16193] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1580.986270][ T9117] gspca_cpia1: usb_control_msg 03, error -71 [ 1580.992347][ T9117] cpia1 3-1:0.0: unexpected systemstate: 01 [ 1581.003820][ T9117] usb 3-1: USB disconnect, device number 26 [ 1581.109096][T31376] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1581.119242][T31376] bond0: (slave bond1): Enslaving as an active interface with an up link [ 1581.212393][T16193] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 1581.431500][T31379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1581.448882][T31379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1581.898671][T31396] fuse: Bad value for 'user_id' [ 1581.903601][T31396] fuse: Bad value for 'user_id' [ 1581.913198][T31395] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6120'. [ 1581.992384][ T9117] usb 4-1: USB disconnect, device number 127 [ 1582.016703][ T9117] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1582.325086][T25277] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1582.466278][ T9586] net_ratelimit: 2 callbacks suppressed [ 1582.466296][ T9586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1582.480208][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1582.504967][ T9117] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1582.515124][T25277] usb 3-1: Using ep0 maxpacket: 32 [ 1582.524464][T25277] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1582.538957][T25277] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1582.548459][T25277] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1582.556842][T25277] usb 3-1: Product: syz [ 1582.561009][T25277] usb 3-1: Manufacturer: syz [ 1582.565723][T25277] usb 3-1: SerialNumber: syz [ 1582.586538][T25277] usb 3-1: config 0 descriptor?? [ 1582.592199][T31395] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1582.612421][T25277] hub 3-1:0.0: bad descriptor, ignoring hub [ 1582.624571][T25277] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1582.656744][ T9117] usb 4-1: Using ep0 maxpacket: 16 [ 1582.676501][ T9117] usb 4-1: config 0 interface 0 altsetting 48 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1582.707331][T14394] Bluetooth: hci4: command tx timeout [ 1582.725123][ T9117] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1582.731952][ T9117] usb 4-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 1582.741790][ T9117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.763601][ T9117] usb 4-1: config 0 descriptor?? [ 1583.105793][ T9586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1583.114110][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1583.180877][ T9117] usbhid 4-1:0.0: can't add hid device: -71 [ 1583.196109][ T9117] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1583.214497][ T9117] usb 4-1: USB disconnect, device number 2 [ 1583.226251][T31395] usb 3-1: reset high-speed USB device number 27 using dummy_hcd [ 1583.420164][T31395] usb 3-1: device firmware changed [ 1583.433058][T16193] usb 3-1: USB disconnect, device number 27 [ 1583.585192][T16193] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1583.746700][T16869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1583.755162][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1583.764132][T30897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1583.772302][T16869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1583.780440][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1583.788561][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1583.797622][T16193] usb 3-1: Using ep0 maxpacket: 32 [ 1583.815139][T16193] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1583.839724][T16193] usb 3-1: string descriptor 0 read error: -22 [ 1583.847361][T16193] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1583.856842][T16193] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1583.872118][T16193] usb 3-1: config 0 descriptor?? [ 1583.885412][T31400] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1583.903282][T16193] hub 3-1:0.0: bad descriptor, ignoring hub [ 1583.910301][T14394] Bluetooth: hci3: command 0x0406 tx timeout [ 1583.918537][T16193] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1583.963821][T31436] input: syz1 as /devices/virtual/input/input128 [ 1584.215186][ T9110] usb 3-1: USB disconnect, device number 28 [ 1584.710176][T31446] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6133'. [ 1585.115479][ T9103] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1585.255504][ T9103] usb 3-1: device descriptor read/64, error -71 [ 1585.495507][ T9103] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1585.635136][ T9103] usb 3-1: device descriptor read/64, error -71 [ 1585.755640][ T9103] usb usb3-port1: attempt power cycle [ 1585.855039][T16193] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 1586.016980][T16193] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1586.029126][T16193] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1586.040266][T16193] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1586.053614][T16193] usb 4-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 1586.065056][T16193] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.077158][T16193] usb 4-1: config 0 descriptor?? [ 1586.093541][T16193] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input129 [ 1586.103123][ T9103] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1586.153626][ T9103] usb 3-1: device descriptor read/8, error -71 [ 1586.415104][ T9103] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1586.455749][ T9103] usb 3-1: device descriptor read/8, error -71 [ 1586.575224][ T9103] usb usb3-port1: unable to enumerate USB device [ 1588.154979][T16143] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1588.260213][T30897] net_ratelimit: 2 callbacks suppressed [ 1588.260231][T30897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1588.274164][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1588.499073][T16143] usb 3-1: config 0 has no interfaces? [ 1588.520756][T16143] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1588.531367][T16143] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.540892][T16143] usb 3-1: Product: syz [ 1588.553185][T16143] usb 3-1: Manufacturer: syz [ 1588.567480][T16143] usb 3-1: SerialNumber: syz [ 1588.591238][T16143] usb 3-1: config 0 descriptor?? [ 1588.597404][ T5184] bcm5974 4-1:0.0: could not read from device [ 1588.658938][ T5184] bcm5974 4-1:0.0: could not read from device [ 1588.672763][T16193] usb 4-1: USB disconnect, device number 3 [ 1588.706800][ T5980] udevd[5980]: Unable to EVIOCGABS device "/dev/input/event5" [ 1588.735136][ T5980] udevd[5980]: Unable to EVIOCGABS device "/dev/input/event5" [ 1588.792309][ T5980] udevd[5980]: Unable to EVIOCGABS device "/dev/input/event5" [ 1588.824464][ T5980] udevd[5980]: Unable to EVIOCGABS device "/dev/input/event5" [ 1588.882700][T16859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1588.891101][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1588.899242][T16869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1588.907674][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.506566][ T9586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.514749][T16861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.522887][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.531003][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1590.160594][T31528] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6156'. [ 1590.823620][T16193] usb 3-1: USB disconnect, device number 33 [ 1590.893411][T31533] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6159'. [ 1591.085565][ T9110] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 1591.252268][ T9110] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1591.281921][ T9110] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1591.375543][ T9110] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1591.393300][ T9110] usb 4-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 1591.416242][T31533] bond0 (unregistering): (slave bond5): Releasing backup interface [ 1591.422809][ T9110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.438989][T31533] bond0 (unregistering): Released all slaves [ 1591.475091][ T9110] usb 4-1: config 0 descriptor?? [ 1591.498330][ T9110] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input130 [ 1591.663656][ T5929] udevd[5929]: Unable to EVIOCGABS device "/dev/input/event4" [ 1591.690216][ T5929] udevd[5929]: Unable to EVIOCGABS device "/dev/input/event4" [ 1591.725059][ T5929] udevd[5929]: Unable to EVIOCGABS device "/dev/input/event4" [ 1591.758044][ T5929] udevd[5929]: Unable to EVIOCGABS device "/dev/input/event4" [ 1592.195196][ T9110] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 1592.359215][ T9110] usb 3-1: config index 0 descriptor too short (expected 8192, got 36) [ 1592.368640][ T9110] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1592.379935][ T9110] usb 3-1: config 0 has no interfaces? [ 1592.394916][ T9110] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1592.414251][ T9110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.444780][ T9110] usb 3-1: config 0 descriptor?? [ 1592.652903][T31543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6163'. [ 1592.692540][ T9110] usb 3-1: string descriptor 0 read error: -71 [ 1592.725285][ T9110] usb 3-1: USB disconnect, device number 34 [ 1593.823336][ T5184] bcm5974 4-1:0.0: could not read from device [ 1593.823741][T25277] usb 4-1: USB disconnect, device number 4 [ 1593.847493][ T5184] bcm5974 4-1:0.0: could not read from device [ 1593.858441][ T5184] bcm5974 4-1:0.0: could not read from device [ 1593.997943][T16859] net_ratelimit: 2 callbacks suppressed [ 1593.997960][T16859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1594.011976][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1594.038086][ T9117] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1594.205312][ T9117] usb 3-1: Using ep0 maxpacket: 16 [ 1594.240983][ T9117] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1594.254047][ T9117] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1594.264991][T25277] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1594.268675][ T9117] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1594.311043][ T9117] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1594.320358][ T9117] usb 3-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 1594.333422][ T9117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.364563][ T9117] usb 3-1: config 0 descriptor?? [ 1594.464974][T25277] usb 4-1: Using ep0 maxpacket: 32 [ 1594.473104][T25277] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1594.484221][T25277] usb 4-1: config 0 has no interface number 0 [ 1594.506232][T25277] usb 4-1: config 0 interface 2 has no altsetting 0 [ 1594.519883][T25277] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1594.531200][T25277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.543748][T25277] usb 4-1: Product: syz [ 1594.550382][T25277] usb 4-1: Manufacturer: syz [ 1594.558400][T25277] usb 4-1: SerialNumber: syz [ 1594.572444][T25277] usb 4-1: config 0 descriptor?? [ 1594.625347][T16869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1594.633683][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1594.643228][ T6839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1594.651517][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1594.812811][ T9117] input: HID 28bd:0905 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0905.0057/input/input131 [ 1594.813547][T25277] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1594.961551][T25277] usb 4-1: USB disconnect, device number 5 [ 1595.023081][ T5978] udevd[5978]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1595.082205][ T9117] uclogic 0003:28BD:0905.0057: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0905] on usb-dummy_hcd.2-1/input0 [ 1595.102835][ T9117] usb 3-1: USB disconnect, device number 35 [ 1595.265565][T16859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1595.273882][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1595.288512][T16869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1595.297042][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1595.393971][T31577] fido_id[31577]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1595.935141][T25277] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1596.099745][T25277] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1596.110616][T25277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.119677][T25277] usb 3-1: Product: syz [ 1596.124602][T25277] usb 3-1: Manufacturer: syz [ 1596.129821][T25277] usb 3-1: SerialNumber: syz [ 1596.138838][T25277] usb 3-1: config 0 descriptor?? [ 1596.158232][T25277] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1596.366069][T31584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1596.375169][T31584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1597.257994][T31584] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6175'. [ 1597.272313][T31609] PKCS7: Unknown OID: [5] (bad) [ 1597.277459][T31609] PKCS7: Only support pkcs7_signedData type [ 1597.670453][T25277] gspca_sunplus: reg_r err -71 [ 1597.675448][T25277] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1597.718717][T25277] usb 3-1: USB disconnect, device number 36 [ 1598.872569][ T9110] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1599.035229][ T9110] usb 3-1: Using ep0 maxpacket: 8 [ 1599.051146][ T9110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1599.084000][ T30] audit: type=1326 audit(1751425160.892:8845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31620 comm="syz.7.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a28d8e929 code=0x7ffc0000 [ 1599.109350][T16869] net_ratelimit: 2 callbacks suppressed [ 1599.109362][T16869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1599.123280][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1599.136083][ T30] audit: type=1326 audit(1751425160.892:8846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31620 comm="syz.7.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a28d8e929 code=0x7ffc0000 [ 1599.158840][ T30] audit: type=1326 audit(1751425160.952:8847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31620 comm="syz.7.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f3a28d8e929 code=0x7ffc0000 [ 1599.161391][ T9110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1599.182036][ T30] audit: type=1326 audit(1751425160.952:8848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31620 comm="syz.7.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a28d8e929 code=0x7ffc0000 [ 1599.224964][ T30] audit: type=1326 audit(1751425160.952:8849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31620 comm="syz.7.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a28d8e929 code=0x7ffc0000 [ 1599.259547][ T30] audit: type=1326 audit(1751425160.952:8850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31620 comm="syz.7.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a28d8e929 code=0x7ffc0000 [ 1599.287842][ T30] audit: type=1326 audit(1751425160.952:8851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31620 comm="syz.7.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3a28d8e929 code=0x7ffc0000 [ 1599.310928][T23758] Bluetooth: hci2: command 0x0406 tx timeout [ 1599.322717][ T30] audit: type=1326 audit(1751425160.952:8852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31620 comm="syz.7.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a28d8e929 code=0x7ffc0000 [ 1599.350158][ T30] audit: type=1326 audit(1751425160.952:8853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31620 comm="syz.7.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3a28d8e929 code=0x7ffc0000 [ 1599.387417][ T30] audit: type=1326 audit(1751425160.952:8854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31620 comm="syz.7.6185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a28d8e929 code=0x7ffc0000 [ 1599.417824][ T9110] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1599.452695][ T9110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 1599.470425][ T9110] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1599.554053][ T9110] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1599.586118][ T9110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.628309][ T9110] usb 3-1: config 0 descriptor?? [ 1599.648000][T31619] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1600.074984][ T9111] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1600.119030][T25277] usb 3-1: USB disconnect, device number 37 [ 1600.137321][T14394] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 1600.365523][ T9111] usb 4-1: config 0 has no interfaces? [ 1600.385574][T16861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1600.393883][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1600.403303][T30897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1600.412095][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1600.520067][ T9111] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1600.588543][ T9111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.666342][ T9111] usb 4-1: Product: syz [ 1600.685466][ T9111] usb 4-1: Manufacturer: syz [ 1600.733836][ T9111] usb 4-1: SerialNumber: syz [ 1600.826531][ T9111] usb 4-1: config 0 descriptor?? [ 1601.025626][T16869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1601.033869][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1601.042781][T16875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1601.051255][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1601.794994][ T9110] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 1601.984527][ T9110] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 1601.992853][ T9110] usb 3-1: config 0 has no interface number 0 [ 1602.021135][ T9110] usb 3-1: config 0 interface 251 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1602.279597][ T9110] usb 3-1: config 0 interface 251 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1602.323604][ T9110] usb 3-1: config 0 interface 251 has no altsetting 0 [ 1602.398560][ T9110] usb 3-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 1602.444211][ T9110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.496261][ T9110] usb 3-1: config 0 descriptor?? [ 1603.424411][T25277] usb 4-1: USB disconnect, device number 6 [ 1604.558876][T31704] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.6207'. [ 1604.580821][T31706] netlink: 'syz.3.6208': attribute type 1 has an invalid length. [ 1604.614645][T31703] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.6207'. [ 1604.653154][T31712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6208'. [ 1604.705459][T31714] fuse: Unknown parameter 'p_id' [ 1604.876661][T16859] net_ratelimit: 2 callbacks suppressed [ 1604.876680][T16859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1604.890622][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1605.453384][ T9110] usbhid 3-1:0.251: can't add hid device: -71 [ 1605.495059][ T9110] usbhid 3-1:0.251: probe with driver usbhid failed with error -71 [ 1605.607025][ T9110] usb 3-1: USB disconnect, device number 38 [ 1605.888665][T31730] FAULT_INJECTION: forcing a failure. [ 1605.888665][T31730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1605.934770][T31730] CPU: 0 UID: 0 PID: 31730 Comm: syz.2.6216 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1605.934796][T31730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1605.934810][T31730] Call Trace: [ 1605.934817][T31730] [ 1605.934823][T31730] dump_stack_lvl+0x189/0x250 [ 1605.934854][T31730] ? __pfx____ratelimit+0x10/0x10 [ 1605.934882][T31730] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1605.934904][T31730] ? __pfx__printk+0x10/0x10 [ 1605.934922][T31730] ? __might_fault+0xb0/0x130 [ 1605.934950][T31730] should_fail_ex+0x414/0x560 [ 1605.934975][T31730] _copy_from_user+0x2d/0xb0 [ 1605.934992][T31730] sock_do_ioctl+0x182/0x300 [ 1605.935013][T31730] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1605.935032][T31730] ? __lock_acquire+0xab9/0xd20 [ 1605.935069][T31730] sock_ioctl+0x576/0x790 [ 1605.935093][T31730] ? __pfx_sock_ioctl+0x10/0x10 [ 1605.935115][T31730] ? __fget_files+0x2a/0x420 [ 1605.935132][T31730] ? __fget_files+0x3a0/0x420 [ 1605.935148][T31730] ? __fget_files+0x2a/0x420 [ 1605.935169][T31730] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1605.935191][T31730] ? __pfx_sock_ioctl+0x10/0x10 [ 1605.935211][T31730] __se_sys_ioctl+0xf9/0x170 [ 1605.935237][T31730] do_syscall_64+0xfa/0x3b0 [ 1605.935258][T31730] ? lockdep_hardirqs_on+0x9c/0x150 [ 1605.935280][T31730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1605.935297][T31730] ? clear_bhb_loop+0x60/0xb0 [ 1605.935316][T31730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1605.935332][T31730] RIP: 0033:0x7f28ee58e929 [ 1605.935347][T31730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1605.935361][T31730] RSP: 002b:00007f28ef394038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1605.935378][T31730] RAX: ffffffffffffffda RBX: 00007f28ee7b5fa0 RCX: 00007f28ee58e929 [ 1605.935391][T31730] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 1605.935402][T31730] RBP: 00007f28ef394090 R08: 0000000000000000 R09: 0000000000000000 [ 1605.935413][T31730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1605.935423][T31730] R13: 0000000000000000 R14: 00007f28ee7b5fa0 R15: 00007f28ee8dfa28 [ 1605.935450][T31730] [ 1606.212237][ T9586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.220593][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.352150][T23758] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1606.373946][T23758] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1606.382766][T23758] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1606.422708][T23758] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1606.447542][T23758] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1606.458924][T16193] hid-generic 0000:0000:0000.0058: unknown main item tag 0x0 [ 1606.538894][T31747] loop7: detected capacity change from 0 to 16384 [ 1606.576035][T16193] hid-generic 0000:0000:0000.0058: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1606.623217][T31750] fuse: Unknown parameter '0x000000000000000200000000000000000000003' [ 1606.786920][T30897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.795373][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.805033][T16875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.813379][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1606.840398][T31752] fido_id[31752]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1606.855234][ T9117] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1607.085000][ T9117] usb 4-1: Using ep0 maxpacket: 8 [ 1607.108548][ T9117] usb 4-1: config 0 has no interfaces? [ 1607.153093][ T9117] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1607.175603][ T9117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1607.195167][ T9117] usb 4-1: Product: syz [ 1607.199374][ T9117] usb 4-1: Manufacturer: syz [ 1607.203976][ T9117] usb 4-1: SerialNumber: syz [ 1607.226613][ T9117] usb 4-1: config 0 descriptor?? [ 1607.342325][T31751] chnl_net:caif_netlink_parms(): no params data found [ 1607.439362][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.447038][T30897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1607.455201][T30897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1607.455242][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.534188][T31766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1607.538031][T31764] geneve2: entered promiscuous mode [ 1607.595898][T31747] I/O error, dev loop7, sector 1832 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0 [ 1607.609219][T31766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1607.622603][T31747] I/O error, dev loop7, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 [ 1607.634711][T31747] I/O error, dev loop7, sector 2088 op 0x0:(READ) flags 0x80700 phys_seg 10 prio class 0 [ 1607.645681][T31747] I/O error, dev loop7, sector 1832 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1607.656729][T31747] buffer_io_error: 1734 callbacks suppressed [ 1607.656745][T31747] Buffer I/O error on dev loop7, logical block 229, async page read [ 1607.671923][T31747] I/O error, dev loop7, sector 1832 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1607.681602][T31747] Buffer I/O error on dev loop7, logical block 229, async page read [ 1607.690906][T31747] I/O error, dev loop7, sector 1832 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1607.701563][T31747] Buffer I/O error on dev loop7, logical block 229, async page read [ 1607.713191][ T9110] usb 4-1: USB disconnect, device number 7 [ 1607.735493][T31746] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 1607.750351][T31746] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 1607.759519][T31746] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 1607.768383][T31746] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 1607.777208][T31746] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 1607.794178][T31746] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 1607.804046][T31746] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 1607.812638][T31746] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 1607.827709][T31746] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x800 phys_seg 101 prio class 0 [ 1607.828070][T31751] bridge0: port 1(bridge_slave_0) entered blocking state [ 1607.862910][T31751] bridge0: port 1(bridge_slave_0) entered disabled state [ 1607.875335][T31751] bridge_slave_0: entered allmulticast mode [ 1607.883511][T31751] bridge_slave_0: entered promiscuous mode [ 1607.903788][T31751] bridge0: port 2(bridge_slave_1) entered blocking state [ 1607.919197][T31751] bridge0: port 2(bridge_slave_1) entered disabled state [ 1607.940080][T31751] bridge_slave_1: entered allmulticast mode [ 1607.959471][T31751] bridge_slave_1: entered promiscuous mode [ 1608.171302][T31751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1608.189004][T31751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1608.245964][T31751] team0: Port device team_slave_0 added [ 1608.267200][T31751] team0: Port device team_slave_1 added [ 1608.510984][T31751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1608.519045][T31751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1608.544989][ C1] vkms_vblank_simulate: vblank timer overrun [ 1608.554976][T23758] Bluetooth: hci3: command tx timeout [ 1608.562328][T31751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1608.577551][T31751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1608.584515][T31751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1608.610443][ C1] vkms_vblank_simulate: vblank timer overrun [ 1608.617407][T31751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1608.776441][T31751] hsr_slave_0: entered promiscuous mode [ 1608.790619][T31751] hsr_slave_1: entered promiscuous mode [ 1608.800903][T31751] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1608.808901][T31751] Cannot create hsr debugfs directory [ 1608.985467][ T9110] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1609.065494][ T9117] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1609.080324][T31751] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1609.157191][ T9110] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1609.167077][ T9110] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1609.177500][ T9110] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1609.194957][ T9110] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1609.204028][ T9110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1609.204737][T31751] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1609.212834][ T9110] usb 3-1: Product: syz [ 1609.236161][ T9110] usb 3-1: Manufacturer: syz [ 1609.240838][ T9110] usb 3-1: SerialNumber: syz [ 1609.255352][ T9117] usb 4-1: Using ep0 maxpacket: 8 [ 1609.262206][ T9117] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1609.272447][ T9117] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1609.287042][ T9117] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1609.314591][ T9117] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1609.331811][T31751] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1609.339125][ T9117] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1609.352550][ T9117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.369432][ T9117] usb 4-1: Product: syz [ 1609.373831][ T9117] usb 4-1: Manufacturer: syz [ 1609.382359][ T9117] usb 4-1: SerialNumber: syz [ 1609.422192][T31785] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1609.462244][ T9117] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1609.478119][ T9117] usbtest 4-1:1.0: Linux user mode ISO test driver [ 1609.491854][ T9117] usbtest 4-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 1609.493332][ T9110] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 39 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1609.686858][ T9110] usb 4-1: USB disconnect, device number 8 [ 1609.830899][T31800] tty tty2: ldisc open failed (-12), clearing slot 1 [ 1609.876575][ T9117] usb 3-1: USB disconnect, device number 39 [ 1609.899785][ T9117] usblp0: removed [ 1609.909121][T31803] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6229'. [ 1609.919773][T31803] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6229'. [ 1609.992667][T31751] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1610.012511][T31751] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1610.025826][T31751] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1610.036219][T31751] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1610.121649][T31751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1610.151054][T31751] 8021q: adding VLAN 0 to HW filter on device team0 [ 1610.162692][ T9586] bridge0: port 1(bridge_slave_0) entered blocking state [ 1610.169852][ T9586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1610.188974][T16875] bridge0: port 2(bridge_slave_1) entered blocking state [ 1610.196170][T16875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1610.316249][T31751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1610.393847][T31751] veth0_vlan: entered promiscuous mode [ 1610.410733][T31751] veth1_vlan: entered promiscuous mode [ 1610.441905][T31751] veth0_macvtap: entered promiscuous mode [ 1610.452516][T31751] veth1_macvtap: entered promiscuous mode [ 1610.483468][T31751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1610.499395][T31751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1610.511670][T31751] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.521319][T31751] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.530357][T31751] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.539485][T31751] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.606005][T16143] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1610.625443][T23758] Bluetooth: hci3: command tx timeout [ 1610.666754][ T6839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1610.682100][ T6839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1610.719625][ T6839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1610.733068][ T6839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1610.795480][T16143] usb 4-1: Using ep0 maxpacket: 16 [ 1610.811548][T16143] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1610.824459][T16143] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1610.834670][T16143] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1610.848482][T16143] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1610.858940][T16143] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.888044][T16143] usb 4-1: config 0 descriptor?? [ 1610.910721][T16143] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input132 [ 1610.947398][T31819] macsec0: entered promiscuous mode [ 1610.953024][T31819] macsec0: entered allmulticast mode [ 1610.958598][T31819] veth1_macvtap: entered allmulticast mode [ 1611.032706][ T5184] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1611.053278][ T5184] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1611.097952][ T5184] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1611.240179][T31820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1611.285388][T31820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1611.916895][ T9586] net_ratelimit: 2 callbacks suppressed [ 1611.916915][ T9586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1611.930886][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1612.326171][T31830] FAULT_INJECTION: forcing a failure. [ 1612.326171][T31830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1612.339588][T31830] CPU: 0 UID: 0 PID: 31830 Comm: syz.7.6240 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1612.339610][T31830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1612.339620][T31830] Call Trace: [ 1612.339628][T31830] [ 1612.339635][T31830] dump_stack_lvl+0x189/0x250 [ 1612.339664][T31830] ? __pfx____ratelimit+0x10/0x10 [ 1612.339688][T31830] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1612.339712][T31830] ? __pfx__printk+0x10/0x10 [ 1612.339731][T31830] ? __might_fault+0xb0/0x130 [ 1612.339758][T31830] should_fail_ex+0x414/0x560 [ 1612.339783][T31830] _copy_from_user+0x2d/0xb0 [ 1612.339800][T31830] ___sys_sendmsg+0x158/0x2a0 [ 1612.339824][T31830] ? __pfx____sys_sendmsg+0x10/0x10 [ 1612.339878][T31830] ? __fget_files+0x2a/0x420 [ 1612.339896][T31830] ? __fget_files+0x3a0/0x420 [ 1612.339923][T31830] __sys_sendmmsg+0x227/0x430 [ 1612.339948][T31830] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1612.339973][T31830] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1612.340022][T31830] ? ksys_write+0x22a/0x250 [ 1612.340040][T31830] ? __pfx_ksys_write+0x10/0x10 [ 1612.340053][T31830] ? rcu_is_watching+0x15/0xb0 [ 1612.340083][T31830] __x64_sys_sendmmsg+0xa0/0xc0 [ 1612.340105][T31830] do_syscall_64+0xfa/0x3b0 [ 1612.340126][T31830] ? lockdep_hardirqs_on+0x9c/0x150 [ 1612.340148][T31830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1612.340164][T31830] ? clear_bhb_loop+0x60/0xb0 [ 1612.340185][T31830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1612.340201][T31830] RIP: 0033:0x7f3a28d8e929 [ 1612.340217][T31830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1612.340231][T31830] RSP: 002b:00007f3a29b36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1612.340250][T31830] RAX: ffffffffffffffda RBX: 00007f3a28fb6160 RCX: 00007f3a28d8e929 [ 1612.340262][T31830] RDX: 0000000000000002 RSI: 0000200000000e80 RDI: 0000000000000006 [ 1612.340273][T31830] RBP: 00007f3a29b36090 R08: 0000000000000000 R09: 0000000000000000 [ 1612.340283][T31830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1612.340294][T31830] R13: 0000000000000000 R14: 00007f3a28fb6160 R15: 00007f3a290dfa28 [ 1612.340321][T31830] [ 1612.573147][T16869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1612.581323][ T9586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1612.589454][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1612.597565][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1612.605695][T16869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1612.613943][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1612.706552][T23758] Bluetooth: hci3: command tx timeout [ 1613.195489][T16875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1613.204669][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1613.235774][T31834] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1613.438238][T16143] usb 4-1: USB disconnect, device number 9 [ 1613.577515][T31845] netlink: 428 bytes leftover after parsing attributes in process `syz.3.6247'. [ 1613.624068][T31845] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6247'. [ 1613.995018][T16143] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1614.169735][T16143] usb 4-1: config 0 has no interfaces? [ 1614.175406][T16143] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1614.255064][T16143] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.267185][T16143] usb 4-1: config 0 descriptor?? [ 1614.618247][T31845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1614.631204][T31845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1614.643350][T31845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1614.667369][T31845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1614.683588][ T9111] usb 4-1: USB disconnect, device number 10 [ 1614.785318][T23758] Bluetooth: hci3: command tx timeout [ 1615.075045][ T9104] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1615.155312][T16143] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1615.255267][ T9104] usb 3-1: Using ep0 maxpacket: 16 [ 1615.262295][ T9104] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1615.278550][ T9104] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1615.295085][ T9104] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1615.305284][ T9104] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.315337][ T9104] usb 3-1: Product: syz [ 1615.319603][ T9104] usb 3-1: Manufacturer: syz [ 1615.324284][ T9104] usb 3-1: SerialNumber: syz [ 1615.331763][T16143] usb 4-1: config 9 has an invalid interface number: 182 but max is 2 [ 1615.340372][T16143] usb 4-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 1615.349699][T16143] usb 4-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 1615.363288][ T9104] usb 3-1: config 0 descriptor?? [ 1615.369015][T16143] usb 4-1: config 9 has an invalid descriptor of length 132, skipping remainder of the config [ 1615.384788][T16143] usb 4-1: config 9 has 1 interface, different from the descriptor's value: 3 [ 1615.397228][ T9104] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1615.407292][ T9104] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1615.415228][T16143] usb 4-1: config 9 has no interface number 0 [ 1615.421653][T16143] usb 4-1: config 9 interface 182 altsetting 107 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 1615.434152][T16143] usb 4-1: config 9 interface 182 altsetting 107 endpoint 0x9 has invalid maxpacket 1664, setting to 1024 [ 1615.446935][T16143] usb 4-1: config 9 interface 182 altsetting 107 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1615.462083][T16143] usb 4-1: config 9 interface 182 has no altsetting 0 [ 1615.506538][T16143] usb 4-1: New USB device found, idVendor=2345, idProduct=87f8, bcdDevice=d5.be [ 1615.521696][T16143] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.530461][T16143] usb 4-1: Product: syz [ 1615.535092][T16143] usb 4-1: Manufacturer: ࡃ [ 1615.539961][T16143] usb 4-1: SerialNumber: syz [ 1615.778312][T31845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1615.794313][T31845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1615.824257][T16143] usb 4-1: USB disconnect, device number 11 [ 1616.017682][ T9104] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1616.024190][ T9104] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1616.232937][ T9104] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1616.246495][ T9104] em28xx 3-1:0.0: No AC97 audio processor [ 1617.176469][T16859] net_ratelimit: 2 callbacks suppressed [ 1617.176488][T16859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1617.190441][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1617.478587][T31890] FAULT_INJECTION: forcing a failure. [ 1617.478587][T31890] name failslab, interval 1, probability 0, space 0, times 0 [ 1617.491531][T31890] CPU: 1 UID: 0 PID: 31890 Comm: syz.6.6259 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1617.491554][T31890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1617.491566][T31890] Call Trace: [ 1617.491574][T31890] [ 1617.491582][T31890] dump_stack_lvl+0x189/0x250 [ 1617.491611][T31890] ? __pfx____ratelimit+0x10/0x10 [ 1617.491634][T31890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1617.491657][T31890] ? __pfx__printk+0x10/0x10 [ 1617.491679][T31890] ? __pfx___might_resched+0x10/0x10 [ 1617.491703][T31890] ? fs_reclaim_acquire+0x7d/0x100 [ 1617.491727][T31890] should_fail_ex+0x414/0x560 [ 1617.491752][T31890] should_failslab+0xa8/0x100 [ 1617.491772][T31890] __kmalloc_noprof+0xcb/0x4f0 [ 1617.491788][T31890] ? sock_kmalloc+0xd6/0x160 [ 1617.491812][T31890] sock_kmalloc+0xd6/0x160 [ 1617.491834][T31890] ____sys_sendmsg+0x1b5/0x830 [ 1617.491859][T31890] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1617.491883][T31890] ? import_iovec+0x74/0xa0 [ 1617.491898][T31890] ___sys_sendmsg+0x21f/0x2a0 [ 1617.491914][T31890] ? __pfx____sys_sendmsg+0x10/0x10 [ 1617.491954][T31890] ? __fget_files+0x2a/0x420 [ 1617.491967][T31890] ? __fget_files+0x3a0/0x420 [ 1617.491988][T31890] __sys_sendmmsg+0x227/0x430 [ 1617.492006][T31890] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1617.492019][T31890] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1617.492055][T31890] ? ksys_write+0x22a/0x250 [ 1617.492069][T31890] ? __pfx_ksys_write+0x10/0x10 [ 1617.492079][T31890] ? rcu_is_watching+0x15/0xb0 [ 1617.492102][T31890] __x64_sys_sendmmsg+0xa0/0xc0 [ 1617.492118][T31890] do_syscall_64+0xfa/0x3b0 [ 1617.492134][T31890] ? lockdep_hardirqs_on+0x9c/0x150 [ 1617.492150][T31890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.492163][T31890] ? clear_bhb_loop+0x60/0xb0 [ 1617.492179][T31890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.492191][T31890] RIP: 0033:0x7febdcb8e929 [ 1617.492203][T31890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1617.492215][T31890] RSP: 002b:00007febdd932038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1617.492229][T31890] RAX: ffffffffffffffda RBX: 00007febdcdb6160 RCX: 00007febdcb8e929 [ 1617.492239][T31890] RDX: 0000000000000002 RSI: 0000200000000e80 RDI: 0000000000000006 [ 1617.492247][T31890] RBP: 00007febdd932090 R08: 0000000000000000 R09: 0000000000000000 [ 1617.492256][T31890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1617.492263][T31890] R13: 0000000000000000 R14: 00007febdcdb6160 R15: 00007febdcedfa28 [ 1617.492284][T31890] [ 1618.277097][ T9104] usb 3-1: USB disconnect, device number 40 [ 1618.289971][ T9104] em28xx 3-1:0.0: Disconnecting em28xx [ 1618.305833][T16861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1618.314056][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1618.336534][T16875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1618.344654][ T9586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1618.352780][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1618.360885][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1618.390616][ T9104] em28xx 3-1:0.0: Freeing device [ 1618.836398][T16143] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1618.946461][ T9586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1618.954729][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1618.997001][T16143] usb 4-1: device descriptor read/64, error -71 [ 1619.265296][T16143] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1619.290486][T14394] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1619.313159][T14394] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1619.323460][T14394] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1619.338363][T14394] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1619.346661][T14394] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1619.435157][T16143] usb 4-1: device descriptor read/64, error -71 [ 1619.559596][T16143] usb usb4-port1: attempt power cycle [ 1619.716289][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 1619.716304][ T30] audit: type=1326 audit(1751425181.522:8900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31904 comm="syz.8.6264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4718e929 code=0x7ffc0000 [ 1619.823386][ T30] audit: type=1326 audit(1751425181.522:8901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31904 comm="syz.8.6264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4718e929 code=0x7ffc0000 [ 1619.870598][ T30] audit: type=1326 audit(1751425181.532:8902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31904 comm="syz.8.6264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f5c4718e929 code=0x7ffc0000 [ 1619.965203][T16143] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1620.026786][T16143] usb 4-1: device descriptor read/8, error -71 [ 1620.057781][ T30] audit: type=1326 audit(1751425181.532:8903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31904 comm="syz.8.6264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4718e929 code=0x7ffc0000 [ 1620.087876][ T30] audit: type=1326 audit(1751425181.562:8904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31904 comm="syz.8.6264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5c4718e929 code=0x7ffc0000 [ 1620.115298][ T30] audit: type=1326 audit(1751425181.722:8905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31904 comm="syz.8.6264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4718e929 code=0x7ffc0000 [ 1620.172982][ T30] audit: type=1326 audit(1751425181.722:8906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31904 comm="syz.8.6264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c4718e929 code=0x7ffc0000 [ 1620.471945][T16143] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1620.616030][T16143] usb 4-1: device descriptor read/8, error -71 [ 1620.738826][T16143] usb usb4-port1: unable to enumerate USB device [ 1620.926020][T31900] chnl_net:caif_netlink_parms(): no params data found [ 1621.067659][T16859] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.425154][T14394] Bluetooth: hci5: command tx timeout [ 1621.451884][T16859] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.870821][T16859] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1622.172863][ T30] audit: type=1326 audit(1751425183.982:8907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31944 comm="syz.7.6272" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a28d8e929 code=0x0 [ 1622.196948][T16859] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1622.244475][T31900] bridge0: port 1(bridge_slave_0) entered blocking state [ 1622.442482][T31900] bridge0: port 1(bridge_slave_0) entered disabled state [ 1622.481984][T31900] bridge_slave_0: entered allmulticast mode [ 1622.506558][T31900] bridge_slave_0: entered promiscuous mode [ 1622.632112][T31900] bridge0: port 2(bridge_slave_1) entered blocking state [ 1622.657964][T31900] bridge0: port 2(bridge_slave_1) entered disabled state [ 1622.729798][T31900] bridge_slave_1: entered allmulticast mode [ 1622.857583][T31900] bridge_slave_1: entered promiscuous mode [ 1622.990145][ T9586] net_ratelimit: 2 callbacks suppressed [ 1622.990165][ T9586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1623.004168][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1623.146877][T31900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1623.238656][T31900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1623.505266][T14394] Bluetooth: hci5: command tx timeout [ 1623.556616][T31900] team0: Port device team_slave_0 added [ 1623.642803][T31900] team0: Port device team_slave_1 added [ 1623.904192][T31900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1623.913839][T31900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1623.982657][T31900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1624.065240][ T6835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.073405][T16861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.081554][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.089652][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.099135][T16864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.107540][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.355622][ T9586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.363920][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.591154][T14394] Bluetooth: hci5: command tx timeout [ 1625.937264][T16859] bond7 (unregistering): (slave gretap3): Releasing active interface [ 1626.558475][T32012] input: syz1 as /devices/virtual/input/input133 [ 1626.681859][T16859] bond1 (unregistering): Released all slaves [ 1626.902053][T32022] fuse: Bad value for 'fd' [ 1627.613820][T16859] bond2 (unregistering): Released all slaves [ 1627.676791][T14394] Bluetooth: hci5: command tx timeout [ 1628.076858][T16859] bond3 (unregistering): Released all slaves [ 1628.380394][T16859] bond4 (unregistering): Released all slaves [ 1628.549200][T16869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1628.557540][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1628.661650][T16859] bond5 (unregistering): Released all slaves [ 1628.944769][T16859] bond6 (unregistering): Released all slaves [ 1629.313315][T16859] bond7 (unregistering): Released all slaves [ 1629.554256][T16859] bond8 (unregistering): Released all slaves [ 1629.577471][T31900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1629.586424][T31900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1629.624658][T31900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1629.671590][T31999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6284'. [ 1629.709028][T32019] netlink: 'syz.7.6289': attribute type 3 has an invalid length. [ 1629.730636][T32048] netlink: 'syz.8.6298': attribute type 29 has an invalid length. [ 1629.755421][T32049] netlink: 'syz.8.6298': attribute type 29 has an invalid length. [ 1629.826763][ T9586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1629.834934][ T9586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1629.843097][ T6839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1629.851233][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1629.859345][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1629.867655][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1630.351744][T31900] hsr_slave_0: entered promiscuous mode [ 1630.368812][T31900] hsr_slave_1: entered promiscuous mode [ 1630.381357][T31900] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1630.414848][T31900] Cannot create hsr debugfs directory [ 1630.633557][T32053] input: syz1 as /devices/virtual/input/input134 [ 1631.135878][T16864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1631.144177][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1631.713836][T16859] hsr_slave_0: left promiscuous mode [ 1631.754925][T16859] hsr_slave_1: left promiscuous mode [ 1631.761655][T16859] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1631.808577][T16859] batman_adv: batadv0: Removing interface: ipvlan2 [ 1631.903937][T16859] veth1_macvtap: left allmulticast mode [ 1632.040309][T16859] veth1_macvtap: left promiscuous mode [ 1632.086956][T16859] veth0_macvtap: left promiscuous mode [ 1632.114743][T16859] veth1_vlan: left promiscuous mode [ 1632.140818][T16859] veth0_vlan: left promiscuous mode [ 1632.626694][T16859] pim6reg (unregistering): left allmulticast mode [ 1633.191195][T32110] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6308'. [ 1633.209430][T32110] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6308'. [ 1633.219303][T32110] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6308'. [ 1633.229080][T32110] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6308'. [ 1633.238853][T32110] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6308'. [ 1633.248640][T32110] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6308'. [ 1633.258610][T32110] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6308'. [ 1633.268196][T32110] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6308'. [ 1633.277967][T32110] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6308'. [ 1634.305465][T16864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.313729][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1635.380476][T32094] syzkaller1: entered promiscuous mode [ 1635.393291][T32094] syzkaller1: entered allmulticast mode [ 1635.588804][T26624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1635.597097][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1635.606820][ T9586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1635.615331][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1635.627659][T16861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1635.636044][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1635.965224][ T9104] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1636.237868][ T9104] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1636.247761][T30897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1636.247960][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1636.272486][ T9104] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1636.318180][ T9104] usb 4-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 1636.334044][ T9104] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1636.400748][ T9104] usb 4-1: config 0 descriptor?? [ 1636.983816][T32155] __nla_validate_parse: 33 callbacks suppressed [ 1636.983829][T32155] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6314'. [ 1637.590794][T31900] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1637.654770][T31900] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1637.702140][T31900] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1637.757125][T31900] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1637.787122][T32168] netlink: 312 bytes leftover after parsing attributes in process `syz.8.6321'. [ 1638.032516][T31900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1638.092982][T31900] 8021q: adding VLAN 0 to HW filter on device team0 [ 1638.137827][T16864] bridge0: port 1(bridge_slave_0) entered blocking state [ 1638.145066][T16864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1638.187384][T16869] bridge0: port 2(bridge_slave_1) entered blocking state [ 1638.194567][T16869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1638.594209][T31900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1638.772634][ T9104] usbhid 4-1:0.0: can't add hid device: -71 [ 1638.792475][ T9104] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1638.840984][ T9104] usb 4-1: USB disconnect, device number 16 [ 1638.853037][T31900] veth0_vlan: entered promiscuous mode [ 1638.892676][T31900] veth1_vlan: entered promiscuous mode [ 1638.918574][T32190] ptrace attach of "./syz-executor exec"[19195] was attempted by "./syz-executor exec"[32190] [ 1638.947806][T31900] veth0_macvtap: entered promiscuous mode [ 1638.959492][T31900] veth1_macvtap: entered promiscuous mode [ 1638.994966][T31900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1639.018101][T31900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1639.058439][T31900] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.086350][T31900] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.121287][T31900] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.168502][T31900] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.707068][T30897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1639.753440][T30897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1639.916421][T16869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1639.958195][T16869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1640.072385][T16864] net_ratelimit: 2 callbacks suppressed [ 1640.072403][T16864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.086330][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.715733][T26624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.724002][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.732465][T32230] batadv_slave_0: entered promiscuous mode [ 1640.795060][T26624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.803378][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.912772][T32226] batadv_slave_0: left promiscuous mode [ 1641.357986][T16864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1641.366442][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1641.535488][T32249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6332'. [ 1641.656639][T23758] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1641.673748][T23758] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1641.682922][T23758] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1641.709793][T23758] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1641.729263][T23758] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1641.845523][T32260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6335'. [ 1641.987210][T16869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1641.995994][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1642.050671][T32260] bridge0: port 3(vlan2) entered blocking state [ 1642.058391][T32260] bridge0: port 3(vlan2) entered disabled state [ 1642.065031][T32260] vlan2: entered allmulticast mode [ 1642.070367][T32260] bridge0: entered allmulticast mode [ 1642.079153][T32260] vlan2: left allmulticast mode [ 1642.084427][T32260] bridge0: left allmulticast mode [ 1642.287459][T32271] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1642.340113][T32271] bond0: (slave bond1): Enslaving as an active interface with an up link [ 1642.356062][T32279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6339'. [ 1642.385151][T32279] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6339'. [ 1642.398933][T32279] loop8: detected capacity change from 0 to 16383 [ 1642.510817][T32259] chnl_net:caif_netlink_parms(): no params data found [ 1642.644209][T32283] loop8: detected capacity change from 16383 to 16319 [ 1642.833918][T32259] bridge0: port 1(bridge_slave_0) entered blocking state [ 1642.854058][T32259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1642.947183][T32259] bridge_slave_0: entered allmulticast mode [ 1642.983399][T32259] bridge_slave_0: entered promiscuous mode [ 1643.022418][T32259] bridge0: port 2(bridge_slave_1) entered blocking state [ 1643.045816][T32259] bridge0: port 2(bridge_slave_1) entered disabled state [ 1643.068397][T32259] bridge_slave_1: entered allmulticast mode [ 1643.100429][T32259] bridge_slave_1: entered promiscuous mode [ 1643.217697][T32297] netlink: 'syz.2.6340': attribute type 15 has an invalid length. [ 1643.247898][T32297] netlink: 666 bytes leftover after parsing attributes in process `syz.2.6340'. [ 1643.517099][T32259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1643.561406][T32259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1643.828015][T23758] Bluetooth: hci0: command tx timeout [ 1644.406048][T32259] team0: Port device team_slave_0 added [ 1644.471403][T32320] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6347'. [ 1644.487590][T32320] netlink: 'syz.7.6347': attribute type 6 has an invalid length. [ 1644.536758][T32320] netlink: 'syz.7.6347': attribute type 5 has an invalid length. [ 1644.554618][T32320] netlink: 'syz.7.6347': attribute type 4 has an invalid length. [ 1644.620079][T32259] team0: Port device team_slave_1 added [ 1644.747298][T32259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1644.763526][T32259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1644.803174][T32259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1644.880177][T32259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1644.915042][T32259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1644.940972][ C0] vkms_vblank_simulate: vblank timer overrun [ 1645.023498][T32259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1645.248180][T32259] hsr_slave_0: entered promiscuous mode [ 1645.285325][T32259] hsr_slave_1: entered promiscuous mode [ 1645.292354][T32259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1645.302452][T32259] Cannot create hsr debugfs directory [ 1645.444911][ T9111] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1645.604909][ T9111] usb 3-1: Using ep0 maxpacket: 16 [ 1645.613461][ T9111] usb 3-1: config 0 has an invalid interface number: 180 but max is 0 [ 1645.640647][ T9111] usb 3-1: config 0 has no interface number 0 [ 1645.670807][ T9111] usb 3-1: New USB device found, idVendor=0421, idProduct=0134, bcdDevice=11.72 [ 1645.695205][ T9111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.713584][ T9111] usb 3-1: Product: syz [ 1645.719735][ T9111] usb 3-1: Manufacturer: syz [ 1645.724543][ T9111] usb 3-1: SerialNumber: syz [ 1645.746911][ T9111] usb 3-1: config 0 descriptor?? [ 1645.778511][ T9111] usb 3-1: bad CDC descriptors [ 1645.804114][T32259] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1645.818073][T32259] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.835616][ T6835] net_ratelimit: 2 callbacks suppressed [ 1645.835634][ T6835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1645.845440][T32259] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1645.849644][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1645.910412][T23758] Bluetooth: hci0: command tx timeout [ 1645.965020][ T9111] usb 3-1: USB disconnect, device number 41 [ 1645.979299][T32259] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1645.991595][T32259] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.002235][T32259] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1646.103787][T32259] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1646.114187][T32259] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.125977][T32259] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1646.466710][T16869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1646.475247][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1646.811712][T32259] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1646.851553][T32259] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1646.920588][T32259] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1646.934401][T32388] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6362'. [ 1646.974743][T32259] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1647.017211][T32388] sit0: entered promiscuous mode [ 1647.056884][T32388] netlink: 'syz.2.6362': attribute type 1 has an invalid length. [ 1647.064714][T32388] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6362'. [ 1647.109238][T16869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.117821][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.227788][T32401] ip6gretap1: entered promiscuous mode [ 1647.233311][T32401] ip6gretap1: entered allmulticast mode [ 1647.442588][T32259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1647.481296][T32259] 8021q: adding VLAN 0 to HW filter on device team0 [ 1647.502726][ T9586] bridge0: port 1(bridge_slave_0) entered blocking state [ 1647.509955][ T9586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1647.586867][T16861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.595337][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.629711][T16859] bridge0: port 2(bridge_slave_1) entered blocking state [ 1647.636965][T16859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1647.744256][T32259] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1647.745464][T16869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.763252][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.802503][T32259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1647.985238][T23758] Bluetooth: hci0: command tx timeout [ 1648.051181][T32259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1648.247308][T32259] veth0_vlan: entered promiscuous mode [ 1648.407790][T32259] veth1_vlan: entered promiscuous mode [ 1648.582951][T32259] veth0_macvtap: entered promiscuous mode [ 1648.661999][T32259] veth1_macvtap: entered promiscuous mode [ 1648.902129][T32259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1649.010716][T32259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1649.074439][T32259] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.135025][T32259] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.206679][T32259] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.219726][T32259] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.385284][ T30] audit: type=1326 audit(1751425211.192:8908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32441 comm="syz.2.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7586f8e929 code=0x7ffc0000 [ 1649.519974][ T30] audit: type=1326 audit(1751425211.222:8909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32441 comm="syz.2.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f7586f8e929 code=0x7ffc0000 [ 1649.673154][ T30] audit: type=1326 audit(1751425211.222:8910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32441 comm="syz.2.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7586f8e929 code=0x7ffc0000 [ 1649.804288][T16861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1649.854422][T16861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1649.903127][ T30] audit: type=1326 audit(1751425211.232:8911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32441 comm="syz.2.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7586f8e929 code=0x7ffc0000 [ 1649.925597][ C0] vkms_vblank_simulate: vblank timer overrun [ 1649.953569][ T6835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1650.020396][ T6835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1650.065786][T23758] Bluetooth: hci0: command tx timeout [ 1650.092040][ T30] audit: type=1326 audit(1751425211.232:8912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32441 comm="syz.2.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f7586f8e929 code=0x7ffc0000 [ 1650.228810][ T30] audit: type=1326 audit(1751425211.232:8913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32441 comm="syz.2.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7586f8e929 code=0x7ffc0000 [ 1650.416638][ T30] audit: type=1326 audit(1751425211.232:8914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32441 comm="syz.2.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7586f8e929 code=0x7ffc0000 [ 1650.492830][ T30] audit: type=1326 audit(1751425211.242:8915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32441 comm="syz.2.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f7586f8e929 code=0x7ffc0000 [ 1650.534125][ T30] audit: type=1326 audit(1751425212.002:8916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32441 comm="syz.2.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7586f8e929 code=0x7ffc0000 [ 1650.887290][ T30] audit: type=1326 audit(1751425212.002:8917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32441 comm="syz.2.6372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7586f8e929 code=0x7ffc0000 [ 1650.909709][ C0] vkms_vblank_simulate: vblank timer overrun [ 1651.585969][T26624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1651.594158][ T9586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1651.602302][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1651.610424][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1652.198168][T32486] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6379'. [ 1652.838532][T32515] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1652.866326][T30897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1652.874506][T16864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1652.882640][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1652.890755][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1652.937647][ T9111] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1652.965017][T25277] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1653.144932][T25277] usb 3-1: Using ep0 maxpacket: 8 [ 1653.156708][T25277] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1653.171764][T16864] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1653.183685][T25277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.259296][T25277] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1653.282234][T25277] pvrusb2: ********** [ 1653.290718][T25277] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1653.304953][T25277] pvrusb2: Important functionality might not be entirely working. [ 1653.333265][T25277] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1653.386338][T25277] pvrusb2: ********** [ 1653.458999][ T2342] pvrusb2: Invalid write control endpoint [ 1653.513419][T16864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1653.521939][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1653.544694][ T2342] pvrusb2: Invalid write control endpoint [ 1653.559372][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1653.573964][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1653.582389][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1653.593355][ T2342] pvrusb2: Device being rendered inoperable [ 1653.600884][ T2342] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 1653.610830][ T2342] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1653.628212][ T2342] pvrusb2: Attached sub-driver cx25840 [ 1653.641421][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1653.658685][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1653.692595][ T9109] usb 3-1: USB disconnect, device number 42 [ 1653.700053][ T9111] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1653.866943][ T9111] usb 4-1: device descriptor read/64, error -71 [ 1653.986511][ T9110] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1654.115109][ T9111] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1654.226991][T16861] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1654.246694][ T9111] usb 4-1: device descriptor read/64, error -71 [ 1654.253372][T16861] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1654.267148][T32541] bridge_slave_0: invalid flags given to default FDB implementation [ 1654.355914][ T9111] usb usb4-port1: attempt power cycle [ 1654.614936][ T9110] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1654.695653][ T9109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1654.705713][ T9111] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1654.746142][ T9111] usb 4-1: device descriptor read/8, error -71 [ 1654.785847][ T9110] usb 3-1: Using ep0 maxpacket: 16 [ 1654.797797][ T9110] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1654.812018][ T9110] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1654.830380][ T9110] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1654.843566][ T9110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1654.852232][ T9110] usb 3-1: Product: syz [ 1654.856959][ T9110] usb 3-1: Manufacturer: syz [ 1654.861691][ T9110] usb 3-1: SerialNumber: syz [ 1654.995055][ T9111] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1655.015592][ T9111] usb 4-1: device descriptor read/8, error -71 [ 1655.105131][ T30] audit: type=1326 audit(1751425216.902:8918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32542 comm="syz.2.6391" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7586f8e929 code=0x0 [ 1655.135624][ T9111] usb usb4-port1: unable to enumerate USB device [ 1655.773289][T32557] netlink: 'syz.7.6395': attribute type 9 has an invalid length. [ 1655.790292][T32557] netlink: 212160 bytes leftover after parsing attributes in process `syz.7.6395'. [ 1656.189725][ T30] audit: type=1326 audit(1751425218.002:8919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32563 comm="syz.7.6397" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a28d8e929 code=0x0 [ 1656.711850][T26624] net_ratelimit: 3 callbacks suppressed [ 1656.711869][T26624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1656.726026][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1656.833582][T32575] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 1656.915154][T32575] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 1657.081357][T32579] gretap1: entered promiscuous mode [ 1657.260689][T32579] team0: Port device gretap1 added [ 1657.322911][T32580] team0: Device vlan2 is already an upper device of the team interface [ 1657.345485][T16864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1657.353827][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1657.464953][T16143] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1657.626938][T16143] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1657.649790][T16143] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1657.679569][T16143] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.726427][T16143] usb 4-1: config 0 descriptor?? [ 1657.757791][T16143] pwc: Askey VC010 type 2 USB webcam detected. [ 1658.192153][T16143] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1658.203960][T16143] pwc: recv_control_msg error -32 req 02 val 2700 [ 1658.234021][ T9110] usb 3-1: 0:2 : does not exist [ 1658.267934][ T9110] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1658.333134][ T9110] usb 3-1: USB disconnect, device number 43 [ 1658.385105][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1658.409239][ T5980] udevd[5980]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1658.626303][T30897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.634493][T16864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.642634][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.650763][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.269211][ T6835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.277642][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.791190][T16143] pwc: recv_control_msg error -71 req 04 val 1000 [ 1659.811157][T16143] pwc: recv_control_msg error -71 req 04 val 1300 [ 1659.826158][T32575] delete_channel: no stack [ 1659.868913][T16143] pwc: recv_control_msg error -71 req 04 val 1400 [ 1659.895826][T16143] pwc: recv_control_msg error -71 req 02 val 2000 [ 1659.918057][T16143] pwc: recv_control_msg error -71 req 02 val 2100 [ 1659.958552][T16143] pwc: recv_control_msg error -71 req 04 val 1500 [ 1659.979480][T16143] pwc: recv_control_msg error -71 req 02 val 2500 [ 1660.029644][T16143] pwc: recv_control_msg error -71 req 02 val 2400 [ 1660.060476][T16143] pwc: recv_control_msg error -71 req 02 val 2600 [ 1660.075454][T16143] pwc: recv_control_msg error -71 req 02 val 2900 [ 1660.109215][T16143] pwc: recv_control_msg error -71 req 02 val 2800 [ 1660.129856][T16143] pwc: recv_control_msg error -71 req 04 val 1100 [ 1660.152418][T16143] pwc: recv_control_msg error -71 req 04 val 1200 [ 1660.184521][T16143] pwc: Registered as video103. [ 1660.228342][T16143] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input135 [ 1660.319423][T16143] usb 4-1: USB disconnect, device number 21 [ 1660.975237][ T9103] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1661.135023][ T9103] usb 4-1: Using ep0 maxpacket: 16 [ 1661.167765][ T9103] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 1661.199285][ T9103] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 1661.254970][ T9103] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1661.285286][ T9103] usb 4-1: config 8 has no interface number 0 [ 1661.291471][ T9103] usb 4-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 1661.390272][ T9103] usb 4-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 1661.503938][ T9103] usb 4-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1661.537469][ T9103] usb 4-1: config 8 interface 223 has no altsetting 0 [ 1661.565425][ T9103] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1661.598365][ T9103] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.615964][ T9103] usb 4-1: Product: syz [ 1661.624671][ T9103] usb 4-1: Manufacturer: syz [ 1661.636634][ T9103] usb 4-1: SerialNumber: syz [ 1661.715793][T32614] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1661.948739][T32614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1661.957912][T32614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1661.969176][T32614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1661.988553][T32614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1662.002503][T32634] netlink: 'syz.2.6416': attribute type 1 has an invalid length. [ 1662.030750][T32638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1662.062422][T32614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1662.134382][T32638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1662.183315][T32614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1662.229531][T32638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1662.266041][T32638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1662.357863][ T9103] usb 4-1: USB disconnect, device number 22 [ 1662.466479][T16869] net_ratelimit: 2 callbacks suppressed [ 1662.466497][T16869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1662.480566][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1662.505426][ T9586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1662.513772][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1662.798214][T32649] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6419'. [ 1663.075053][ T9103] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1663.226019][ T9103] usb 3-1: Using ep0 maxpacket: 16 [ 1663.236540][ T9103] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 1663.249442][ T9103] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 1663.261820][ T9103] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 1663.283058][ T9103] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1663.294280][ T9103] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.318860][ T9103] usb 3-1: Product: syz [ 1663.323087][ T9103] usb 3-1: Manufacturer: syz [ 1663.331091][ T9103] usb 3-1: SerialNumber: syz [ 1663.360131][ T9103] usb 3-1: config 0 descriptor?? [ 1663.372741][T32651] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1663.428697][ C0] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71) [ 1663.449886][ T9103] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 1663.450002][ C0] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71) [ 1663.588819][ T9103] usb 3-1: USB disconnect, device number 44 [ 1663.596927][ T9103] mcba_usb 3-1:0.0 can0: device disconnected [ 1663.758230][T16869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.766562][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.057274][T32664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1664.153016][T32664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1664.397472][T30897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.405817][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.492961][T32676] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1665.027736][T16861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.036233][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.083603][T32696] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1665.126701][T32706] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2661838356 (170357654784 ns) > initial count (86302876160 ns). Using initial count to start timer. [ 1665.420486][T32702] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6432'. [ 1666.209427][T32735] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6436'. [ 1666.250760][T32736] libceph: resolve '4..' (ret=-3): failed [ 1666.305043][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1666.365513][T32735] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6436'. [ 1666.414659][T32735] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6436'. [ 1667.753855][T32756] bond2 (unregistering): Released all slaves [ 1668.226490][T26624] net_ratelimit: 2 callbacks suppressed [ 1668.226503][T26624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1668.240622][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1668.257642][T30897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1668.265951][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1668.871489][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.878073][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.936176][ T300] netlink: 124 bytes leftover after parsing attributes in process `syz.2.6443'. [ 1668.965584][ T300] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6443'. [ 1669.002051][ T300] tipc: Started in network mode [ 1669.034402][ T300] tipc: Node identity a, cluster identity 4711 [ 1669.071278][ T300] tipc: Node number set to 10 [ 1669.095696][ T300] tipc: Cannot configure node identity twice [ 1669.155453][ T305] netlink: 'syz.8.6444': attribute type 1 has an invalid length. [ 1669.236556][ T9117] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1669.397613][ T9117] usb 3-1: Using ep0 maxpacket: 16 [ 1669.416675][ T9117] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1669.454580][ T9117] usb 3-1: config 128 has 0 interfaces, different from the descriptor's value: 5 [ 1669.486430][ T9117] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1669.507146][T30897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.515882][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.535024][ T9117] usb 3-1: config 128 has 0 interfaces, different from the descriptor's value: 5 [ 1669.547723][ T9117] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1669.559505][ T9117] usb 3-1: config 128 has 0 interfaces, different from the descriptor's value: 5 [ 1669.571355][ T9117] usb 3-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 1669.580933][ T9117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1669.649957][ T9117] usb 3-1: Product: syz [ 1669.654258][ T9117] usb 3-1: Manufacturer: syz [ 1669.755115][ T326] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6451'. [ 1669.769276][ T326] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6451'. [ 1669.792224][ T324] macsec0: entered promiscuous mode [ 1669.797951][ T324] macsec0: entered allmulticast mode [ 1669.803235][ T324] veth1_macvtap: entered allmulticast mode [ 1670.069307][ T9117] usb 3-1: USB disconnect, device number 45 [ 1670.136279][ T326] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6451'. [ 1670.149511][T16861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1670.158808][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1670.686365][ T338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6455'. [ 1670.696039][ T338] netlink: 'syz.2.6455': attribute type 2 has an invalid length. [ 1670.703949][ T338] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6455'. [ 1670.787468][ T6835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1670.795932][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1671.689246][ T346] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 1671.718402][ T346] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 1672.095216][ T9109] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1672.277473][ T9109] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1672.289275][ T9109] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1672.299919][ T9109] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1672.315545][ T9109] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1672.324992][ T9109] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1672.336515][ T9109] usb 3-1: config 0 descriptor?? [ 1672.778947][ T9109] plantronics 0003:047F:FFFF.0059: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1673.019887][ T30] audit: type=1326 audit(1751425234.832:8920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=348 comm="syz.2.6460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7586f8e929 code=0x7ffc0000 [ 1673.025448][ T375] ================================================================== [ 1673.050234][ T375] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1673.058849][ T375] Write of size 5120 at addr ffffc90004813c40 by task vivid-000-vid-c/375 [ 1673.067382][ T375] [ 1673.069717][ T375] CPU: 1 UID: 0 PID: 375 Comm: vivid-000-vid-c Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1673.069738][ T375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1673.069749][ T375] Call Trace: [ 1673.069757][ T375] [ 1673.069766][ T375] dump_stack_lvl+0x189/0x250 [ 1673.069790][ T375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1673.069812][ T375] ? __pfx__printk+0x10/0x10 [ 1673.069830][ T375] ? __pfx__printk+0x10/0x10 [ 1673.069844][ T375] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1673.069864][ T375] ? preempt_schedule_irq+0xde/0x150 [ 1673.069884][ T375] ? __virt_addr_valid+0xdc/0x5c0 [ 1673.069903][ T375] print_report+0xd2/0x2b0 [ 1673.069924][ T375] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1673.069947][ T375] kasan_report+0x118/0x150 [ 1673.069964][ T375] ? lockdep_hardirqs_on+0x9c/0x150 [ 1673.069987][ T375] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1673.070012][ T375] kasan_check_range+0x2b0/0x2c0 [ 1673.070029][ T375] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1673.070051][ T375] __asan_memcpy+0x40/0x70 [ 1673.070072][ T375] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1673.070124][ T375] vivid_thread_vid_cap_tick+0xfff/0x5fd0 [ 1673.070163][ T375] ? __lock_acquire+0xab9/0xd20 [ 1673.070184][ T375] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1673.070212][ T375] ? cgroup_freezing+0x2ad/0x360 [ 1673.070234][ T375] vivid_thread_vid_cap+0x8da/0x10d0 [ 1673.070265][ T375] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1673.070286][ T375] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1673.070305][ T375] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1673.070328][ T375] ? __kthread_parkme+0x7b/0x200 [ 1673.070344][ T375] ? __kthread_parkme+0x1a1/0x200 [ 1673.070361][ T375] kthread+0x70e/0x8a0 [ 1673.070379][ T375] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1673.070399][ T375] ? __pfx_kthread+0x10/0x10 [ 1673.070417][ T375] ? _raw_spin_unlock_irq+0x23/0x50 [ 1673.070435][ T375] ? lockdep_hardirqs_on+0x9c/0x150 [ 1673.070453][ T375] ? __pfx_kthread+0x10/0x10 [ 1673.070469][ T375] ret_from_fork+0x3fc/0x770 [ 1673.070492][ T375] ? __pfx_ret_from_fork+0x10/0x10 [ 1673.070515][ T375] ? __switch_to_asm+0x39/0x70 [ 1673.070530][ T375] ? __switch_to_asm+0x33/0x70 [ 1673.070545][ T375] ? __pfx_kthread+0x10/0x10 [ 1673.070561][ T375] ret_from_fork_asm+0x1a/0x30 [ 1673.070590][ T375] [ 1673.070594][ T375] [ 1673.296804][ T375] The buggy address belongs to the virtual mapping at [ 1673.296804][ T375] [ffffc90004809000, ffffc90004816000) created by: [ 1673.296804][ T375] vb2_vmalloc_alloc+0xef/0x340 [ 1673.314692][ T375] [ 1673.317006][ T375] The buggy address belongs to the physical page: [ 1673.323409][ T375] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88806b609000 pfn:0x6b609 [ 1673.333464][ T375] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1673.340567][ T375] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1673.349141][ T375] raw: ffff88806b609000 0000000000000000 00000001ffffffff 0000000000000000 [ 1673.357712][ T375] page dumped because: kasan: bad access detected [ 1673.364164][ T375] page_owner tracks the page as allocated [ 1673.369861][ T375] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_NOWARN), pid 349, tgid 348 (syz.2.6460), ts 1672956735935, free_ts 1672796763613 [ 1673.388167][ T375] post_alloc_hook+0x240/0x2a0 [ 1673.392921][ T375] get_page_from_freelist+0x21e4/0x22c0 [ 1673.398453][ T375] __alloc_frozen_pages_noprof+0x181/0x370 [ 1673.404247][ T375] alloc_pages_mpol+0x232/0x4a0 [ 1673.409084][ T375] alloc_pages_noprof+0xa9/0x190 [ 1673.414004][ T375] __vmalloc_node_range_noprof+0x97d/0x12f0 [ 1673.419883][ T375] vmalloc_user_noprof+0xad/0xf0 [ 1673.424807][ T375] vb2_vmalloc_alloc+0xef/0x340 [ 1673.429651][ T375] __vb2_queue_alloc+0x9c2/0x15a0 [ 1673.434681][ T375] vb2_core_reqbufs+0xc31/0x1420 [ 1673.439610][ T375] __vb2_init_fileio+0x318/0xff0 [ 1673.444533][ T375] __vb2_perform_fileio+0x284/0x1600 [ 1673.449808][ T375] vb2_fop_read+0x273/0x360 [ 1673.454305][ T375] v4l2_read+0x199/0x2c0 [ 1673.458539][ T375] vfs_read+0x200/0x980 [ 1673.462685][ T375] __x64_sys_pread64+0x193/0x220 [ 1673.467606][ T375] page last free pid 9111 tgid 9111 stack trace: [ 1673.473910][ T375] __free_frozen_pages+0xc71/0xe70 [ 1673.479009][ T375] rcu_core+0xca5/0x1710 [ 1673.483238][ T375] handle_softirqs+0x286/0x870 [ 1673.487992][ T375] do_softirq+0xec/0x180 [ 1673.492223][ T375] __local_bh_enable_ip+0x17d/0x1c0 [ 1673.497419][ T375] wg_packet_encrypt_worker+0x2dc/0x1720 [ 1673.503039][ T375] process_scheduled_works+0xade/0x17b0 [ 1673.508573][ T375] worker_thread+0x8a0/0xda0 [ 1673.513180][ T375] kthread+0x70e/0x8a0 [ 1673.517234][ T375] ret_from_fork+0x3fc/0x770 [ 1673.521810][ T375] ret_from_fork_asm+0x1a/0x30 [ 1673.526563][ T375] [ 1673.528879][ T375] Memory state around the buggy address: [ 1673.534502][ T375] ffffc90004814f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1673.542582][ T375] ffffc90004814f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1673.550633][ T375] >ffffc90004815000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1673.558676][ T375] ^ [ 1673.562727][ T375] ffffc90004815080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1673.570770][ T375] ffffc90004815100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1673.578812][ T375] ================================================================== [ 1673.591645][ T30] audit: type=1326 audit(1751425234.842:8921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=348 comm="syz.2.6460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f7586f8e929 code=0x7ffc0000 [ 1673.622804][ T9586] net_ratelimit: 2 callbacks suppressed [ 1673.622822][ T9586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1673.636719][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1673.649168][ T9586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1673.657529][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1673.665866][ T30] audit: type=1326 audit(1751425235.402:8922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=377 comm="syz.2.6460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7586fc11e5 code=0x7ffc0000 [ 1673.696775][ T30] audit: type=1326 audit(1751425235.402:8923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=348 comm="syz.2.6460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7586f8e929 code=0x7ffc0000 [ 1673.734931][ T375] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1673.742163][ T375] CPU: 1 UID: 0 PID: 375 Comm: vivid-000-vid-c Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1673.754479][ T375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1673.764539][ T375] Call Trace: [ 1673.767815][ T375] [ 1673.770730][ T375] dump_stack_lvl+0x99/0x250 [ 1673.775310][ T375] ? __asan_memcpy+0x40/0x70 [ 1673.779885][ T375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1673.785070][ T375] ? __pfx__printk+0x10/0x10 [ 1673.789647][ T375] panic+0x2db/0x790 [ 1673.793535][ T375] ? __pfx_panic+0x10/0x10 [ 1673.797955][ T375] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1673.803871][ T375] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1673.810231][ T375] ? print_memory_metadata+0x314/0x400 [ 1673.815697][ T375] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1673.821347][ T375] check_panic_on_warn+0x89/0xb0 [ 1673.826286][ T375] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1673.831945][ T375] end_report+0x78/0x160 [ 1673.836196][ T375] kasan_report+0x129/0x150 [ 1673.840703][ T375] ? lockdep_hardirqs_on+0x9c/0x150 [ 1673.845919][ T375] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1673.851577][ T375] kasan_check_range+0x2b0/0x2c0 [ 1673.856530][ T375] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1673.862152][ T375] __asan_memcpy+0x40/0x70 [ 1673.866589][ T375] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1673.872053][ T375] vivid_thread_vid_cap_tick+0xfff/0x5fd0 [ 1673.877772][ T375] ? __lock_acquire+0xab9/0xd20 [ 1673.882616][ T375] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1673.888768][ T375] ? cgroup_freezing+0x2ad/0x360 [ 1673.893721][ T375] vivid_thread_vid_cap+0x8da/0x10d0 [ 1673.899001][ T375] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1673.904713][ T375] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1673.910628][ T375] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1673.916951][ T375] ? __kthread_parkme+0x7b/0x200 [ 1673.921878][ T375] ? __kthread_parkme+0x1a1/0x200 [ 1673.926887][ T375] kthread+0x70e/0x8a0 [ 1673.930978][ T375] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1673.936715][ T375] ? __pfx_kthread+0x10/0x10 [ 1673.941297][ T375] ? _raw_spin_unlock_irq+0x23/0x50 [ 1673.946521][ T375] ? lockdep_hardirqs_on+0x9c/0x150 [ 1673.951726][ T375] ? __pfx_kthread+0x10/0x10 [ 1673.956304][ T375] ret_from_fork+0x3fc/0x770 [ 1673.960882][ T375] ? __pfx_ret_from_fork+0x10/0x10 [ 1673.965988][ T375] ? __switch_to_asm+0x39/0x70 [ 1673.970736][ T375] ? __switch_to_asm+0x33/0x70 [ 1673.975483][ T375] ? __pfx_kthread+0x10/0x10 [ 1673.980057][ T375] ret_from_fork_asm+0x1a/0x30 [ 1673.984820][ T375] [ 1673.988095][ T375] Kernel Offset: disabled [ 1673.992412][ T375] Rebooting in 86400 seconds..