last executing test programs: 7.84687269s ago: executing program 2 (id=120): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a090001"], 0x118}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) (fail_nth: 4) 7.547873847s ago: executing program 2 (id=123): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0300c4000a000200aaaaaaaaaa0c"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) 7.253173584s ago: executing program 2 (id=127): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x141400, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'tunl0\x00', 0x800}) r4 = socket(0x1f, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x9, 0x8, 0x0, 0x7}, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000000)={&(0x7f0000000c40)={{@hyper, 0x8}, {@any, 0x8}, 0x400, "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"}, 0x418, 0x7}) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbf525017c0000100036800c00020007500000000000000c000180080016"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) recvmsg$can_raw(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/151, 0x97}, {0x0}], 0x2}, 0x40) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={0x4c, 0x12, 0x301, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, {0x4e23, 0x0, [0x0, 0x0, 0x81], [0x1, 0xfffffffd, 0x10000], 0x0, [0x2, 0x7fff]}, 0x7}}, 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xff, 0x7fff0010}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$kcm(0x10, 0x2, 0x0) 5.066091934s ago: executing program 2 (id=142): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0x40, 0x6, &(0x7f0000000080)={0x1f, "b30a69283a9587dfa6434e07f695f3984820a74426495306bbced9189f724c0546"}}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000000100)=[{0x63, 0x3a01, 0x0, 0x0}], 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x7a, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, &(0x7f0000000080)=0x9c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x200, &(0x7f0000000340)) lsm_get_self_attr(0x64, &(0x7f0000000000), &(0x7f0000001280)=0xdb, 0x0) getdents64(r1, &(0x7f0000001f00)=""/4111, 0x100f) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc3}, &(0x7f00000001c0)={0x0, "f016a30467a1bf40928dbefbd56d9c2999871bda6a234c67d3b264dc4e0d181df6bacfa2a8dc07cf817033aef06253c5deb97c68918ee808924c9e25899bbc86", 0x29}, 0x48, 0xfffffffffffffffd) keyctl$unlink(0x9, r3, r3) socket$nl_route(0x10, 0x3, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) unshare(0x2000400) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000087e051720000000000001090224000100009000090400ff0b0300000009210b090f564c0b000905810300"], 0x0) openat$cgroup_int(r1, &(0x7f0000000240)='cpu.max\x00', 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@gettaction={0x14, 0x32, 0x605, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x24000800) syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') 4.980296313s ago: executing program 1 (id=143): r0 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$reject(0x13, r0, 0x93a, 0x5, r0) add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)="fe943e88341edc90bf1c1520b0c7f73fabcf9c15cabd8d537d3cb4fe06b601c868624380b7cd612ae8b44b835e7accd1e7d47efb606870c7c7104b0d0fa43039c0d59a9e31dc8800d5d57470434117cfeba92ea24c4e26192a6151175a4bd905ee33ff29712e18d72dcded7fb66b736da9867654aa0140a0a3d3311c988803b9aafda8f5ca0d4c6af17b86d0", 0x8c, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="7605f4f9410d25faaa049b34ab7df262e531d136670c0a479858a0b4e8261f8f35634648706641b09204d7972408fdf4ebc7b5a4ea7366", @ANYRES16=r2, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r3, @ANYBLOB="0a003400020202020202000008002600e9160000"], 0x30}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x331}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x5a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x143}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, 0x6c}, 0x1, 0x0, 0x0, 0xd4}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x4, 0x6, 0x3, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008001}, 0xc0) process_madvise(r6, &(0x7f0000000680)=[{&(0x7f0000000500)="92e2b2da82a6d3f6fcae08b77e36fdfe634a279beae190dd5646bf1f1e7c622338deda2be2a9056dda7977af0e3a3f178b9c906d05f6d35a7df8473d1ead5a80deaa65b2cc67402037d3870ccd00a0cb5c4ff0d9bc07ca2ecf32675b35baaa88de2aeb7d", 0x64}, {&(0x7f0000000580)="36fba11c5c9d7d70f1d220adf8b2bf3fbe49bec6b77705297ebdfbc8d6464aae79d7bbad6782859f83432f20c0a60d7d1e4dfcab0cdbb9dd03f1c572641b6004ffe7c9aad182e1bc2340093f6ef759fe2010034045d46ff2bde9c2c71fb3f88f958e118bb628e498eef96da2831b70167b182f54c8b3f71db5aeca47030160a3d2dc9d6dd0010384771d37765de6a067d4fef5abec3fc238550936dca4bed156934aaf5f11acbbed45d898a08400565d8bd946b81f803e85562022928992ed0e5163228331060e8bfbaff0abe2d85b6339de966a533db50f1b4f92524493d372c4d5495b00f11a533cae65", 0xeb}], 0x2, 0x0, 0x0) 4.837345206s ago: executing program 4 (id=145): syz_usb_connect$cdc_ecm(0x3, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f010008000000000000000424020009"], 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x92d3, 0x20, 0x1, 0x34c}, &(0x7f00000000c0), &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000280), 0x1) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='/\x00\x00\x00', @ANYRES32], 0x20) 4.379440765s ago: executing program 1 (id=149): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180), 0x4) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000240)="4c00000012001f15b9409b849ac00a00a5784002000000000003030038c88cc05545ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000080", 0x4c, 0x84, 0x0, 0x0) 3.67469924s ago: executing program 0 (id=150): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000040)=0x9, 0x8, 0x3) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000040)=0x9, 0x8, 0x3) mmap(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0xcc4c6000) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x6f89, 0x3a, '', 0x3a, '&', 0x3a, './file0', 0x3a, [0x50, 0x46, 0x50, 0x46, 0x43]}, 0x2d) 3.476314128s ago: executing program 0 (id=151): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d530495c) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRES8=r0, @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xe0000000, 0x1020, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x7, {0x0, 0x3d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_CREATE_OPEN(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000480)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000004c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000400)={r7, r9, r10, 0x81, 0x6000, 0xf, 0x7fff, 0x6, 0x2, 0x3, 0x80000000, 0x7}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000280)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x6, 0x0, 0xfbfbfbfb}) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r12, r11, 0x0) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r13, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r13, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) 3.254978297s ago: executing program 1 (id=152): r0 = eventfd2(0xfffffffd, 0x801) io_setup(0x6, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000002900)=[&(0x7f0000000200)={0x0, 0x0, 0x30, 0x7, 0x3511, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) socket$kcm(0x2, 0x3, 0x2) r2 = socket$kcm(0x10, 0x7ffb48742ae4013b, 0x4) sendmsg$kcm(r2, 0x0, 0x0) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc531, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x1000, 0x5, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xd, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x2, "00df0010"}, @global=@item_012={0x1, 0x1, 0x6, 'O'}]}}, 0x0}, 0x0) 3.122402343s ago: executing program 4 (id=153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000000014000500ff02000000000000000000000000000114000400fe80000000000000000000000000000014000400fc0200000000000000000000000000003c00038006000100", @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000f30000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000001050003001200000008000240000000090900010073797a30000000000900020073797a32", @ANYRES8=r3, @ANYRES32, @ANYRESOCT=r1], 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) dup(r7) read$FUSE(r8, 0x0, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r7) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r7) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r10, 0x10e, 0x1, &(0x7f0000000400)=0x1b, 0x4) r11 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000c00)={{{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3c}, {0x0, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x403}, {0x40000000000005, 0x0, 0x0, 0x5}, 0x4, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x6c}, 0x2, @in6=@local, 0x3502, 0x1, 0x8, 0x0, 0x9075}}, 0xe8) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd00080001f87063690011000200303030303a30303a31302e3000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) 3.121861372s ago: executing program 0 (id=154): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x6, 0x0, '\x00', [@ra={0x5, 0x2f}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) rseq(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00') readv(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/193, 0xc1}], 0x1) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r1, 0x5, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0xd}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x2}]}]}, 0x30}}, 0x0) 2.913340453s ago: executing program 2 (id=156): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff94ea09066dbd86dd68db834400081100fe0180ffffffffffffff0000000000bbff0200000000000000000000000000014e204e2200"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000690003"], 0x20}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200c0810}, 0x44004) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x3}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5}]}, 0x10) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x0) sendto$packet(r2, &(0x7f0000000000)='1', 0x1, 0x40, &(0x7f0000000200)={0x11, 0x8100, r6, 0x1, 0x0, 0x6, @local}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) ioctl$BTRFS_IOC_SEND(r7, 0x40489426, &(0x7f0000000100)={{}, 0x2, &(0x7f0000000000)=[0x2, 0x3], 0xc5ac, 0x7, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELRULE={0x44, 0x8, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1000}}], {0x14}}, 0xc0}}, 0x0) 2.854796999s ago: executing program 0 (id=157): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080005000100000014000700000000000000000500000000000000"], 0x74}}, 0x0) 2.722535345s ago: executing program 0 (id=159): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) tee(r0, r0, 0x8, 0x0) r1 = syz_usb_connect$uac1(0x3, 0x10d, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x5, 0x2, 0x7, 0x78, 0x4}, 0x37, &(0x7f0000000080)={0x5, 0xf, 0x37, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xff, "deaea831e1903eddaf089fdf26744664"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0xe8, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "afae4ceff70c34de310fd65ef6f0c8f0"}]}, 0x1, [{0x15, &(0x7f0000000a40)=ANY=[@ANYBLOB="15037efe914bfb5251b00b59ef0b3f330860b065fff137aaec27f62c0f55073e53a8bd7a3e1524393b5f3637b669a1e3f003ad8f16f4f76f9eff736f3acbc0599c134c5cb9e53224ba3b5404cd818e36a4d496abd533a82d2ed1f64ae346"]}]}) syz_usb_disconnect(r1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x44e, 0x120c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/nfsfs\x00') lseek(r3, 0x1, 0x2) epoll_create1(0x80000) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @pic={0xc, 0xff, 0x6, 0x0, 0xa3, 0x0, 0xe1, 0xfb, 0x9a, 0x7, 0x4, 0x3, 0x7, 0x1, 0x3, 0xb}}) syz_io_uring_setup(0x56b, 0x0, &(0x7f0000000380), 0x0) gettid() socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=@updpolicy={0x244, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}, 0x10000}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x20000}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@multicast1, 0x800000, 0x3}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf}, {{@in6=@loopback, 0x4d4, 0x33}, 0x0, @in=@multicast1, 0x3, 0x0, 0x0, 0x8}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x2, @in6=@mcast2, 0x0, 0x1, 0x2, 0x0, 0x1}]}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x5}]}, 0x244}}, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3c) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x45e, 0x750, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x1, 0x48, {0x9, 0x21, 0x1000, 0x2, 0x1, {0x22, 0x6cb}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xf7, 0x7, 0x5a}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0xa, 0x0, 0x8, 0xff}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x300a}}]}) setsockopt$inet6_tcp_int(r6, 0x11a, 0x5, 0x0, 0x0) getdents64(r3, 0xffffffffffffffff, 0x43) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x8, "4d2b8369"}]}}, 0x0}, 0x0) 2.586733741s ago: executing program 2 (id=160): syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYRES64], 0x0) r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x200}) 2.405269264s ago: executing program 3 (id=161): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x0) r1 = dup(r0) write$binfmt_script(r0, &(0x7f0000000280), 0xc7) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800107b, r1, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (fail_nth: 22) 2.321984315s ago: executing program 4 (id=162): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) close(0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r2 = eventfd2(0x0, 0x80000) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x0, 0x1, 0x3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r5 = gettid() r6 = getpid() ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000380)=0xf000) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) rt_tgsigqueueinfo(r6, r5, 0x5, &(0x7f0000000140)={0x3f, 0xffffffff, 0x3}) rt_sigprocmask(0x2, &(0x7f00000001c0)={[0x7]}, 0x0, 0x8) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000400)="8a8be51dab7c8c124d3396b36bd06d0b421372898f88152249b8356036b1b64ea9ce30430620e4a952637f9d4e01c469f9656e807ffb0bb353341e76e4cff445b22cb0e459d17eb636bf25559e256629f7d5d8f5", 0x54) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x30, 0x0, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x40000002, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x9004) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f00000002c0)="0fc75d0e0fc7690b0f35ba6100b818eaef66b8010000000f01d966b80500000066b9156800000f01c1b80e010f00d8646664a726260f2024d3f9", 0xfffffffffffffe0e}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x7c, 0xd000, 0x0, r2, 0xf}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x28d4}, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x4, 0x4) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) 1.874890916s ago: executing program 3 (id=163): syz_usb_connect$cdc_ecm(0x3, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f010008000000000000000424020009"], 0x0) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x92d3, 0x20, 0x1, 0x34c}, &(0x7f00000000c0), &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='/\x00\x00\x00', @ANYRES32], 0x20) 1.246630439s ago: executing program 1 (id=164): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000380)={0x3, 0x0, [{0x2, 0x9a, &(0x7f0000000580)=""/154}, {0xffff1000, 0xa8, &(0x7f0000000640)=""/168}, {0x2000, 0xb8, &(0x7f0000000700)=""/184}]}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$proc_mixer(r1, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000480)=0x200000000) r2 = dup2(r0, r0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/126, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mmap(&(0x7f00003b0000/0x1000)=nil, 0x1000, 0x1, 0x10, r0, 0xd2d0a000) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000080)) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) write$vhost_msg_v2(r2, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0x20000, 0x0, 0x0, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000100)=0x1) r4 = syz_open_dev$video(&(0x7f0000000000), 0xb, 0x80400) r5 = socket(0x10, 0x3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x8d) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="08000000040000000400000807000000000000003e8450c2348c4757e5014594bdcbc690cca0d6e899abec2a93b063b1e35519890e739f05894d218d107d9c156e524a6c75cf1b9aaca5bacb7766206402cb6dbb1df152a6c60c00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r8}, 0x20) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r9, 0x4b44, 0x2) unshare(0xa020480) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x8, &(0x7f00000004c0)=0x2007d, 0x4) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f0000000040)={0x990001, 0x2}) ioctl$VIDIOC_G_DV_TIMINGS(r4, 0xc0845658, &(0x7f0000000140)={0x0, @reserved}) 1.169524252s ago: executing program 4 (id=165): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x10000, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xfd, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 1.022720384s ago: executing program 4 (id=166): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0xca}, 0x38) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000840)='z', 0x1, 0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001400000000000000000000000800120000000200000000000000000006000000000000000000000000000000ac1e0001000000000000000000000000ac14140000000000000000000000000005000500000000000a00000000000000fe8000080000000000000000000000aa00000000"], 0xa0}}, 0x0) sendto$inet6(r0, &(0x7f0000000280)="aa", 0x1, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="93", 0x34000, 0x0, 0x0, 0x44) 774.89737ms ago: executing program 1 (id=167): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x6}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)='\'', 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r4) r5 = socket$kcm(0x10, 0x2, 0x4) close(r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xd, 0x3}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0x94) r6 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="14", 0x1}], 0x1}, 0x8000) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='\\', 0x1}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xffcc) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 699.611771ms ago: executing program 1 (id=168): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4e21, @empty=0xe0000000}}, {{0x2, 0x4e23, @local}}}, 0x108) (async) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @dev={0xac, 0x14, 0x14, 0x44}, @rand_addr=0x64010102}, 0xc) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r2, &(0x7f00000000c0)=""/144, 0x90, 0x200000000000002f) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xfe}}]}}}]}, 0x5c}}, 0x0) 602.62554ms ago: executing program 3 (id=169): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/101, 0x65}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000000)=""/192, 0xc0}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 579.186871ms ago: executing program 3 (id=170): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000240)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}}) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 523.374453ms ago: executing program 3 (id=171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800c0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x24000000}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}}, 0x80) 422.558456ms ago: executing program 3 (id=172): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x2, 0x4, 0x31, @mcast2, @mcast1, 0x7, 0x10, 0xe03, 0x1}}) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x401, 0x8, 0x1, 0x6, 0x5, 0x0}) fcntl$lock(r3, 0x24, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x2, r6}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r7, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/config', 0x0, 0x0) unlinkat(r8, &(0x7f00000002c0)='./file0\x00', 0x200) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r8, &(0x7f0000000a80)="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", &(0x7f0000000140)=""/44}, 0x20) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000142c00fe800000000000000000000000000008000000000000000000000000000000002c000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000c1"], 0x0) socket$unix(0x1, 0x5, 0x0) 382.484398ms ago: executing program 0 (id=173): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) io_setup(0x401, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)) io_setup(0x10000, &(0x7f0000000800)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000002c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x20, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x8}, {0xa, 0xfff2}, {0x0, 0x1}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="0fdf8bc95b0000b9a2030000b800000000ba000000800f3066b81f008ee066ba430066ed66b8e4000f00d0b8010000000f01c12e260f01b50a000000c4e27d785670360f011866baf80cb8d6603f8eef66bafc0c66ed", 0x56}], 0x1, 0x4b, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r9, &(0x7f0000000300)='E\\', 0x0}, 0x20) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x100000001, &(0x7f0000000080)=0x2) write$tun(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003012000060ec970012301100fe80000000"], 0xfdef) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x28, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x7f}]}]}, 0x28}}, 0x48804) 0s ago: executing program 4 (id=174): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002180)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x50, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @remote}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) (async) r5 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async, rerun: 64) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (rerun: 64) process_madvise(r5, &(0x7f0000000600)=[{&(0x7f0000000140)="bf817af6ca74a4909f26fe01f5ff522422ec81dcdb0fadc1bb0f8089e0ba4b3bc25732edcc481d224a5a65729079eb897bfbd5cc976a1fd39e238c4c288a908c737ba1ef", 0x44}, {&(0x7f0000000400)="4ba289fe8a8a50bbeab3bdc62543e8a819c12413af7403f9151575d9922376133eb8b63a4e34f102d037ceddeedd07627eb8465c8d740e00183c10e4c652c271cb2bd78ab6e5fb3858b7082cbcaee9eb2b1be2fe07bd81a61c06b8f2a12a17f6fe7360109de8fdcaad27739e10c90c6badf68a231f5553e1be04d143f11942b59764bf8439282b9ccfcd08babd7aea962a2ee84e06211908b8614a5948a04f5d544735a6dd98994648e0fd17ebc8e026468239a15b58fe1e2157e848d5291c7ef23cfc60318533d451c2161237a8eb3e1cef", 0xd2}, {&(0x7f0000000240)="03964bd02f33b1f3b2a61f81a21e9d12743303e7405a32b6b927e7097c81e75953fc0e060ed34e3ce063941841434378691d860970df2350abd0073b300dda1256", 0x41}, {&(0x7f0000000500)="729d3e1b5e7e3f25a45c44468c63e01c375e26d76f6e8985bfcf46a6ee0a5adc11e0c481ce2e29352cb12083cf09a48cfecbd49305a85644c3771df85d949e6e247b63afb9d01f7c15c1b29c791ce351e7322331510f9551c216beb58421176ed5ba510ec115ef8e3c583ab363", 0x6d}, {&(0x7f0000000580)="861b97e84d11f328d314c426672ff7dc59423467fad27ccf33b548704e47a651a526d79810bbebe5c309651d12b73a127cdb83e28d61e1d5b06004538fe4899f1bac42a0c0c3bffab3e2219b55e8f4ee08346c20bd33962b1b26e78fb2f8f4a358537b2adff2f7757c1909248bc59b194f1df578f08b15b2bafd", 0x7a}], 0x5, 0x11, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async, rerun: 64) listen(r5, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="65672ef0814c547e2a00360fc79d0000b803008ec00fc72a0f01c80f20c06635000001000f22c00fba79c303f4f30f580a66d1890000", 0x36}], 0x1, 0x2, &(0x7f0000000140), 0x0) (async, rerun: 64) r7 = socket$rds(0x15, 0x5, 0x0) (rerun: 64) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f00000026c0)={&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48090}, 0x0) (async) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000000)=0x200000000) (async) write$vhost_msg(r8, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) (async) write$vhost_msg_v2(r8, &(0x7f0000000100)={0x2, 0x0, {&(0x7f00000007c0)=""/4083, 0xff3, 0x0, 0x3, 0x2}}, 0x48) (async) write$vhost_msg_v2(r8, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0xb8, 0x0, 0x2, 0x3}}, 0x48) (async) sendmsg$rds(r7, &(0x7f0000000100)={&(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/189, 0xbd}], 0x1}, 0x0) (async, rerun: 32) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000680)={{{@in=@private, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f00000017c0)=0xe8) (async, rerun: 32) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.166' (ED25519) to the list of known hosts. [ 72.998040][ T5835] cgroup: Unknown subsys name 'net' [ 73.173259][ T5835] cgroup: Unknown subsys name 'cpuset' [ 73.182246][ T5835] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.576043][ T5835] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.006550][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.019508][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.027825][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.050068][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.058755][ T5860] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.067208][ T5860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.075660][ T5860] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.084638][ T5860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.092716][ T5860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.103163][ T5860] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.110919][ T5860] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.120579][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.124399][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.128706][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.137905][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.149785][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.158825][ T5860] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.158914][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.173651][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.182305][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.182445][ T5860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.199597][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.200964][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.215725][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.240602][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.959607][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 77.988612][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 78.045945][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 78.063821][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 78.074122][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 78.342815][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.351649][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.359098][ T5863] bridge_slave_0: entered allmulticast mode [ 78.366842][ T5863] bridge_slave_0: entered promiscuous mode [ 78.386650][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.393943][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.401687][ T5866] bridge_slave_0: entered allmulticast mode [ 78.408661][ T5866] bridge_slave_0: entered promiscuous mode [ 78.428577][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.435785][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.443254][ T5865] bridge_slave_0: entered allmulticast mode [ 78.451053][ T5865] bridge_slave_0: entered promiscuous mode [ 78.458313][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.465936][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.473572][ T5862] bridge_slave_0: entered allmulticast mode [ 78.481686][ T5862] bridge_slave_0: entered promiscuous mode [ 78.489800][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.497226][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.504873][ T5863] bridge_slave_1: entered allmulticast mode [ 78.513202][ T5863] bridge_slave_1: entered promiscuous mode [ 78.531266][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.538477][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.546052][ T5866] bridge_slave_1: entered allmulticast mode [ 78.553371][ T5866] bridge_slave_1: entered promiscuous mode [ 78.575161][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.582663][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.590001][ T5865] bridge_slave_1: entered allmulticast mode [ 78.597140][ T5865] bridge_slave_1: entered promiscuous mode [ 78.604354][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.611782][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.618965][ T5862] bridge_slave_1: entered allmulticast mode [ 78.626253][ T5862] bridge_slave_1: entered promiscuous mode [ 78.670730][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.677886][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.685762][ T5864] bridge_slave_0: entered allmulticast mode [ 78.693459][ T5864] bridge_slave_0: entered promiscuous mode [ 78.740839][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.753613][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.765792][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.776268][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.783491][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.791174][ T5864] bridge_slave_1: entered allmulticast mode [ 78.798190][ T5864] bridge_slave_1: entered promiscuous mode [ 78.808200][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.834803][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.898486][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.911333][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.923818][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.947182][ T5862] team0: Port device team_slave_0 added [ 78.956022][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.002420][ T5862] team0: Port device team_slave_1 added [ 79.011034][ T5863] team0: Port device team_slave_0 added [ 79.018658][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.069254][ T5863] team0: Port device team_slave_1 added [ 79.112491][ T5866] team0: Port device team_slave_0 added [ 79.123507][ T5865] team0: Port device team_slave_0 added [ 79.157658][ T5864] team0: Port device team_slave_0 added [ 79.168952][ T5864] team0: Port device team_slave_1 added [ 79.176132][ T5866] team0: Port device team_slave_1 added [ 79.199940][ T5865] team0: Port device team_slave_1 added [ 79.207122][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.214747][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.230576][ T5853] Bluetooth: hci0: command tx timeout [ 79.241162][ T5847] Bluetooth: hci2: command tx timeout [ 79.250344][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.252034][ T5849] Bluetooth: hci3: command tx timeout [ 79.268887][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.276709][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.302808][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.313655][ T5849] Bluetooth: hci4: command tx timeout [ 79.313665][ T5847] Bluetooth: hci1: command tx timeout [ 79.326101][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.333411][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.359362][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.394966][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.402656][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.429124][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.460693][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.467751][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.493861][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.517924][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.525391][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.552492][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.576773][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.584222][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.610384][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.628182][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.635626][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.661777][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.696300][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.703901][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.730689][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.751833][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.758804][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.785349][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.823474][ T5862] hsr_slave_0: entered promiscuous mode [ 79.830298][ T5862] hsr_slave_1: entered promiscuous mode [ 79.871154][ T5863] hsr_slave_0: entered promiscuous mode [ 79.877500][ T5863] hsr_slave_1: entered promiscuous mode [ 79.884208][ T5863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.892919][ T5863] Cannot create hsr debugfs directory [ 80.036747][ T5866] hsr_slave_0: entered promiscuous mode [ 80.043184][ T5866] hsr_slave_1: entered promiscuous mode [ 80.051443][ T5866] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.059010][ T5866] Cannot create hsr debugfs directory [ 80.069232][ T5865] hsr_slave_0: entered promiscuous mode [ 80.076315][ T5865] hsr_slave_1: entered promiscuous mode [ 80.082791][ T5865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.090526][ T5865] Cannot create hsr debugfs directory [ 80.108676][ T5864] hsr_slave_0: entered promiscuous mode [ 80.115238][ T5864] hsr_slave_1: entered promiscuous mode [ 80.122580][ T5864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.130321][ T5864] Cannot create hsr debugfs directory [ 80.710567][ T5863] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.725454][ T5863] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.752704][ T5863] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.776214][ T5863] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.826185][ T5865] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.842674][ T5865] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.870412][ T5865] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.902464][ T5865] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.961639][ T5862] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.974055][ T5862] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.986230][ T5862] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.997065][ T5862] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.105955][ T5864] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.128162][ T5864] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.141705][ T5864] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.168667][ T5864] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.295737][ T5866] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.307305][ T5866] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.313695][ T5847] Bluetooth: hci0: command tx timeout [ 81.319440][ T5853] Bluetooth: hci3: command tx timeout [ 81.326250][ T5849] Bluetooth: hci2: command tx timeout [ 81.346245][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.353544][ T5866] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.363667][ T5866] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.390114][ T5849] Bluetooth: hci1: command tx timeout [ 81.400546][ T5849] Bluetooth: hci4: command tx timeout [ 81.438534][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.484191][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.498781][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.506143][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.546809][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.554097][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.621492][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.652316][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.659533][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.672994][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.680231][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.715563][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.828806][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.863235][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.918213][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.946666][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.991502][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.000583][ T1345] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.007830][ T1345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.023473][ T1345] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.030865][ T1345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.075910][ T1345] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.083557][ T1345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.135775][ T1345] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.142906][ T1345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.156360][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.194164][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.201348][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.228299][ T5865] veth0_vlan: entered promiscuous mode [ 82.238488][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.245687][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.275396][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.332114][ T5862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.348818][ T5865] veth1_vlan: entered promiscuous mode [ 82.486021][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.495276][ T5865] veth0_macvtap: entered promiscuous mode [ 82.516153][ T5863] veth0_vlan: entered promiscuous mode [ 82.526186][ T5865] veth1_macvtap: entered promiscuous mode [ 82.565858][ T5863] veth1_vlan: entered promiscuous mode [ 82.579052][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.599215][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.627080][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.654054][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.698814][ T5865] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.708095][ T5865] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.717349][ T5865] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.726631][ T5865] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.759686][ T5864] veth0_vlan: entered promiscuous mode [ 82.799734][ T5862] veth0_vlan: entered promiscuous mode [ 82.814581][ T5863] veth0_macvtap: entered promiscuous mode [ 82.839007][ T5864] veth1_vlan: entered promiscuous mode [ 82.846325][ T5862] veth1_vlan: entered promiscuous mode [ 82.864427][ T5866] veth0_vlan: entered promiscuous mode [ 82.878539][ T5863] veth1_macvtap: entered promiscuous mode [ 82.899010][ T5866] veth1_vlan: entered promiscuous mode [ 82.991608][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.006942][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.044300][ T5864] veth0_macvtap: entered promiscuous mode [ 83.064697][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.078335][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.096628][ T5866] veth0_macvtap: entered promiscuous mode [ 83.105588][ T5864] veth1_macvtap: entered promiscuous mode [ 83.127554][ T5862] veth0_macvtap: entered promiscuous mode [ 83.135841][ T5863] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.144810][ T5863] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.160558][ T5863] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.169293][ T5863] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.205277][ T5866] veth1_macvtap: entered promiscuous mode [ 83.213779][ T5862] veth1_macvtap: entered promiscuous mode [ 83.234573][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.241494][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.255264][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.281082][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.304938][ T5864] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.316992][ T5864] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.328507][ T5864] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.337304][ T5864] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.372231][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.391652][ T5847] Bluetooth: hci2: command tx timeout [ 83.391660][ T5853] Bluetooth: hci0: command tx timeout [ 83.404968][ T5849] Bluetooth: hci3: command tx timeout [ 83.414448][ T5865] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.421946][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.457365][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.471098][ T5849] Bluetooth: hci4: command tx timeout [ 83.476639][ T5849] Bluetooth: hci1: command tx timeout [ 83.480157][ T5862] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.493707][ T5862] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.503292][ T5862] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.512510][ T5862] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.556900][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.597398][ T1345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.608354][ T1345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.631126][ T5866] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.640201][ T5866] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.653141][ T5866] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.662341][ T5866] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.756058][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.788194][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.830595][ T5947] vivid-000: disconnect [ 84.062364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.164742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.299759][ T1013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.314145][ T1013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.352130][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.379497][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 84.510507][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.544865][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.722661][ T1013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.745546][ T5943] vivid-000: reconnect [ 84.790711][ T1013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.838985][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.864624][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.937770][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.947676][ T5942] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 84.968980][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.089933][ T5942] usb 3-1: device descriptor read/64, error -71 [ 85.101061][ T195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.108936][ T195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.340162][ T5942] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 85.472411][ T5847] Bluetooth: hci3: command tx timeout [ 85.472424][ T5853] Bluetooth: hci2: command tx timeout [ 85.483530][ T5942] usb 3-1: device descriptor read/64, error -71 [ 85.490334][ T5849] Bluetooth: hci0: command tx timeout [ 85.510250][ T5969] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.544073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.552738][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.563060][ T5847] Bluetooth: hci1: command tx timeout [ 85.564657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.568924][ T5847] Bluetooth: hci4: command tx timeout [ 85.577210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 85.591110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 85.630121][ T5942] usb usb3-port1: attempt power cycle [ 85.670120][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.787223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 85.879539][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 85.887656][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.902028][ T24] usb 1-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice= b.8c [ 85.913644][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.922085][ T24] usb 1-1: Product: syz [ 85.926444][ T24] usb 1-1: Manufacturer: syz [ 85.961807][ T24] usb 1-1: SerialNumber: syz [ 85.990698][ T5942] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 86.019928][ T5942] usb 3-1: device descriptor read/8, error -71 [ 86.155772][ T5981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.259903][ T5942] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 86.304461][ T5966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 86.316086][ T5942] usb 3-1: device descriptor read/8, error -71 [ 86.389905][ T5966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'. [ 86.424785][ T5966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.439890][ T5942] usb usb3-port1: unable to enumerate USB device [ 86.469017][ T5966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.613151][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'. [ 86.628441][ T24] empeg 1-1:1.0: empeg converter detected [ 86.647468][ T24] empeg 1-1:1.0: probe with driver empeg failed with error -71 [ 86.708085][ T24] usb 1-1: USB disconnect, device number 2 [ 86.758771][ T924] cfg80211: failed to load regulatory.db [ 86.883380][ T5995] syz.0.16 uses obsolete (PF_INET,SOCK_PACKET) [ 86.942326][ T5995] netlink: 104 bytes leftover after parsing attributes in process `syz.0.16'. [ 87.025142][ T5995] ip6gretap1: entered promiscuous mode [ 87.030777][ T5995] ip6gretap1: entered allmulticast mode [ 87.045486][ T30] audit: type=1326 audit(1753715907.484:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5994 comm="syz.3.17" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4cd58e9a9 code=0x0 [ 87.684023][ T24] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 87.882266][ T24] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 87.921495][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.935511][ T24] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 87.967507][ T24] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 87.969510][ T5953] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.054765][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 88.086222][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.104547][ T24] usb 1-1: Product: syz [ 88.108830][ T24] usb 1-1: Manufacturer: syz [ 88.126222][ T24] usb 1-1: SerialNumber: syz [ 88.173848][ T5953] usb 2-1: Using ep0 maxpacket: 32 [ 88.187184][ T5953] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 88.232612][ T5953] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 88.288466][ T5953] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 88.315829][ T5953] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 88.344110][ T5953] usb 2-1: config 0 interface 0 has no altsetting 0 [ 88.376139][ T6005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18'. [ 88.392651][ T5953] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 88.408227][ T5953] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 88.435993][ T5953] usb 2-1: Product: syz [ 88.449276][ T5953] usb 2-1: Manufacturer: syz [ 88.468230][ T5953] usb 2-1: SerialNumber: syz [ 88.490880][ T5953] usb 2-1: config 0 descriptor?? [ 88.525504][ T5953] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 88.565011][ T5953] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 89.039413][ T5932] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.219399][ T5932] usb 4-1: Using ep0 maxpacket: 16 [ 89.256062][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'. [ 89.305911][ T6032] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 89.321756][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 89.396481][ T5953] usb 2-1: USB disconnect, device number 2 [ 89.412921][ T6012] Zero length message leads to an empty skb [ 89.433510][ T5953] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 90.497786][ T24] usb 1-1: USB disconnect, device number 3 [ 90.570925][ T5991] udevd[5991]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.719484][ T5897] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.832001][ T924] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 90.879601][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 90.891195][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.902579][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.913234][ T5897] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.927517][ T5897] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 90.936647][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.950371][ T5897] usb 2-1: config 0 descriptor?? [ 91.009460][ T924] usb 3-1: Using ep0 maxpacket: 16 [ 91.017033][ T924] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 91.029368][ T924] usb 3-1: config 128 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 91.043324][ T924] usb 3-1: config 128 interface 0 has no altsetting 0 [ 91.055206][ T924] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 91.065218][ T924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.074534][ T924] usb 3-1: Product: syz [ 91.078897][ T924] usb 3-1: Manufacturer: syz [ 91.084356][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.094551][ T924] usb 3-1: SerialNumber: syz [ 91.102229][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.112728][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.124362][ T924] mcba_usb 3-1:128.0: Can't find endpoints [ 91.134244][ T24] usb 1-1: Product: syz [ 91.138649][ T24] usb 1-1: Manufacturer: syz [ 91.143670][ T24] usb 1-1: SerialNumber: syz [ 91.398114][ T5897] acrux 0003:1A34:0802.0001: unknown main item tag 0x0 [ 91.404120][ T6048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.424146][ T5897] acrux 0003:1A34:0802.0001: unknown main item tag 0x0 [ 91.437446][ T5897] acrux 0003:1A34:0802.0001: unknown main item tag 0x0 [ 91.445132][ T6048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.455692][ T5897] acrux 0003:1A34:0802.0001: unknown main item tag 0x0 [ 91.463467][ T5897] acrux 0003:1A34:0802.0001: unknown main item tag 0x0 [ 91.474468][ T24] cdc_ether 1-1:1.0: skipping garbage [ 91.487115][ T24] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 91.508887][ T5897] acrux 0003:1A34:0802.0001: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.1-1/input0 [ 91.524396][ T24] usb 1-1: USB disconnect, device number 4 [ 91.546013][ T5897] acrux 0003:1A34:0802.0001: no inputs found [ 91.565082][ T5897] acrux 0003:1A34:0802.0001: Failed to enable force feedback support, error: -19 [ 91.655701][ T5897] usb 2-1: USB disconnect, device number 3 [ 91.728624][ T6054] fido_id[6054]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 91.777643][ T5932] usb 4-1: unable to get BOS descriptor or descriptor too short [ 91.808416][ T5932] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 91.827997][ T5932] usb 4-1: can't read configurations, error -71 [ 92.200282][ T5932] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 92.259423][ T43] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 92.349840][ T5932] usb 4-1: Using ep0 maxpacket: 16 [ 92.358579][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.375356][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.385558][ T5932] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 92.398698][ T5932] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 92.408172][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.425094][ T5932] usb 4-1: config 0 descriptor?? [ 92.435845][ T43] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 92.463686][ T43] usb 5-1: config 0 has no interface number 0 [ 92.481113][ T43] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.504875][ T6069] trusted_key: syz.1.40 sent an empty control message without MSG_MORE. [ 92.506767][ T43] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.524560][ T43] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 92.534428][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.547291][ T43] usb 5-1: config 0 descriptor?? [ 92.759500][ T5953] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 92.895437][ T6059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.920574][ T5953] usb 2-1: Using ep0 maxpacket: 16 [ 92.940179][ T6059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.954722][ T5953] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.997652][ T5953] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 93.003899][ T5932] HID 045e:07da: Invalid code 65791 type 1 [ 93.032655][ T5953] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 93.044714][ T43] input: HID 04d9:a055 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:04D9:A055.0002/input/input7 [ 93.057965][ T5932] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0003/input/input6 [ 93.084833][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.144359][ T5953] usb 2-1: config 0 descriptor?? [ 93.183561][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42'. [ 93.274319][ T43] holtek_kbd 0003:04D9:A055.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.4-1/input1 [ 93.323006][ T5932] microsoft 0003:045E:07DA.0003: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 93.360345][ T43] usb 5-1: USB disconnect, device number 2 [ 93.463404][ T5909] usb 3-1: USB disconnect, device number 6 [ 93.522605][ T6076] fido_id[6076]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 93.569470][ T5953] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 93.626352][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43'. [ 93.704662][ T6082] block device autoloading is deprecated and will be removed. [ 93.739438][ T5953] usb 1-1: Using ep0 maxpacket: 32 [ 93.758821][ T5953] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 93.773977][ T5953] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 93.783590][ T5953] usb 1-1: config 0 has no interface number 0 [ 93.794832][ T5953] usb 1-1: config 0 interface 151 altsetting 16 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 93.807133][ T5953] usb 1-1: config 0 interface 151 altsetting 16 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 93.822255][ T5953] usb 1-1: config 0 interface 151 altsetting 16 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 93.833747][ T5953] usb 1-1: config 0 interface 151 altsetting 16 has a duplicate endpoint with address 0x3, skipping [ 93.840405][ T43] usb 2-1: USB disconnect, device number 4 [ 93.845386][ T5953] usb 1-1: config 0 interface 151 altsetting 16 has a duplicate endpoint with address 0x3, skipping [ 93.870699][ T5953] usb 1-1: config 0 interface 151 altsetting 16 has a duplicate endpoint with address 0x3, skipping [ 93.887333][ T5953] usb 1-1: config 0 interface 151 altsetting 16 endpoint 0x88 has invalid maxpacket 3063, setting to 1024 [ 93.905348][ T5953] usb 1-1: config 0 interface 151 altsetting 16 bulk endpoint 0x88 has invalid maxpacket 1024 [ 93.915867][ T5953] usb 1-1: config 0 interface 151 altsetting 16 endpoint 0xA has invalid wMaxPacketSize 0 [ 93.984172][ T5953] usb 1-1: config 0 interface 151 altsetting 16 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 94.027565][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.44'. [ 94.869853][ T5918] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 94.896483][ T5953] usb 1-1: config 0 interface 151 altsetting 16 has a duplicate endpoint with address 0xA, skipping [ 94.943244][ T5953] usb 1-1: config 0 interface 151 altsetting 16 endpoint 0xB has invalid wMaxPacketSize 0 [ 94.973719][ T5953] usb 1-1: config 0 interface 151 altsetting 16 bulk endpoint 0xB has invalid maxpacket 0 [ 94.985550][ T5953] usb 1-1: config 0 interface 151 altsetting 16 has a duplicate endpoint with address 0x5, skipping [ 95.004120][ T5953] usb 1-1: config 0 interface 151 has no altsetting 0 [ 95.013473][ T5953] usb 1-1: New USB device found, idVendor=0930, idProduct=88a5, bcdDevice=f0.7f [ 95.030311][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.051503][ T5953] usb 1-1: config 0 descriptor?? [ 95.059226][ T6075] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 95.078445][ T6075] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 95.086832][ T6075] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 95.499260][ T6073] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 95.513552][ T6073] macvtap1: entered allmulticast mode [ 95.520091][ T6073] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 95.543668][ T6073] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 95.550634][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 95.558539][ T6073] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 95.753665][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.884625][ T5942] usb 1-1: USB disconnect, device number 5 [ 95.897187][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 95.921809][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.934557][ T24] usb 3-1: Product: syz [ 95.938756][ T24] usb 3-1: Manufacturer: syz [ 95.940939][ T5918] usb 4-1: device descriptor read/64, error -71 [ 95.945785][ T24] usb 3-1: SerialNumber: syz [ 96.207630][ T6104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.209456][ T5918] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 96.232944][ T6104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.250330][ T24] cdc_ether 3-1:1.0: skipping garbage [ 96.269023][ T24] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 96.283646][ T24] usb 3-1: USB disconnect, device number 7 [ 96.370531][ T5918] usb 4-1: device descriptor read/64, error -71 [ 96.612726][ T5918] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 96.675190][ T5918] usb 4-1: device descriptor read/8, error -71 [ 96.877744][ T6125] Dead loop on virtual device ip6_vti0, fix it urgently! [ 96.885337][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 96.933833][ T5918] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 96.967155][ T6125] binder_alloc: 6124: binder_alloc_buf, no vma [ 97.008638][ T5918] usb 4-1: device descriptor read/8, error -71 [ 97.011940][ T30] audit: type=1326 audit(1753715917.424:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.4.56" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf0cb8e9a9 code=0x0 [ 97.082137][ T24] usb 2-1: config 0 has no interfaces? [ 97.103474][ T6128] netlink: 'syz.4.56': attribute type 2 has an invalid length. [ 97.111668][ T24] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 97.124234][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.139593][ T24] usb 2-1: Product: syz [ 97.146925][ T24] usb 2-1: Manufacturer: syz [ 97.155294][ T24] usb 2-1: SerialNumber: syz [ 97.163028][ T5909] usb 4-1: USB disconnect, device number 3 [ 97.179089][ T24] usb 2-1: config 0 descriptor?? [ 97.409591][ T5909] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 97.434505][ T6130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.568277][ T6130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.599749][ T5909] usb 4-1: device descriptor read/64, error -71 [ 97.670309][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 97.819423][ T24] usb 3-1: device descriptor read/64, error -71 [ 97.843828][ T5909] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 97.989487][ T5909] usb 4-1: device descriptor read/64, error -71 [ 98.089507][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 98.100033][ T5909] usb usb4-port1: attempt power cycle [ 98.159434][ T5953] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.311855][ T5953] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 98.464443][ T24] usb 3-1: device descriptor read/64, error -71 [ 98.495109][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 49984, setting to 1024 [ 98.509678][ T5953] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 98.593095][ T5953] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 98.629375][ T5953] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=3 [ 98.637960][ T5953] usb 5-1: Product: syz [ 98.643006][ T5953] usb 5-1: Manufacturer: syz [ 98.647718][ T5953] usb 5-1: SerialNumber: syz [ 98.665844][ T5953] usb 5-1: config 0 descriptor?? [ 98.840024][ T6139] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 98.843358][ T24] usb usb3-port1: attempt power cycle [ 98.855854][ T6139] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 99.083771][ T6139] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 99.098725][ T6139] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 99.211698][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 99.251445][ T24] usb 3-1: device descriptor read/8, error -71 [ 99.499988][ T5909] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 99.519681][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 99.529898][ T5953] Error reading MAC address [ 99.551368][ T24] usb 3-1: device descriptor read/8, error -71 [ 99.651340][ T5909] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.664174][ T5909] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.670792][ T24] usb usb3-port1: unable to enumerate USB device [ 99.680036][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.688147][ T5909] usb 4-1: Product: syz [ 99.692895][ T5909] usb 4-1: Manufacturer: syz [ 99.697579][ T5909] usb 4-1: SerialNumber: syz [ 99.719433][ T43] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 99.879396][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 99.886588][ T43] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 99.895382][ T43] usb 1-1: config 0 has no interface number 0 [ 99.904238][ T43] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 99.913754][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.922021][ T43] usb 1-1: Product: syz [ 99.926402][ T43] usb 1-1: Manufacturer: syz [ 99.931289][ T43] usb 1-1: SerialNumber: syz [ 99.944333][ T43] usb 1-1: config 0 descriptor?? [ 99.947164][ T6158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.959125][ T43] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 99.971542][ T6158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.987193][ T5909] cdc_ether 4-1:1.0: skipping garbage [ 99.994778][ T5909] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 100.024047][ T5909] usb 4-1: USB disconnect, device number 7 [ 100.079989][ T24] usb 2-1: USB disconnect, device number 5 [ 100.280549][ T6165] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.337664][ T43] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 100.389978][ T43] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 101.007399][ T43] usb 5-1: USB disconnect, device number 3 [ 101.720835][ T6202] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 102.093534][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 102.101979][ T43] usb 1-1: USB disconnect, device number 6 [ 102.116535][ T43] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 102.197399][ T43] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 102.218735][ T5953] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 102.267100][ T43] quatech2 1-1:0.51: device disconnected [ 102.379474][ T5953] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.426799][ T5953] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.456462][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.508817][ T5953] usb 3-1: Product: syz [ 102.556738][ T5953] usb 3-1: Manufacturer: syz [ 102.567240][ T5953] usb 3-1: SerialNumber: syz [ 102.694123][ T6222] warning: `syz.1.84' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.768677][ T6214] process 'syz.4.81' launched './file1' with NULL argv: empty string added [ 102.860697][ T6210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.890005][ T6210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.901780][ T6214] sctp: failed to load transform for md5: -2 [ 102.968083][ T5953] cdc_ether 3-1:1.0: skipping garbage [ 102.993734][ T5953] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 103.134893][ T5953] usb 3-1: USB disconnect, device number 12 [ 103.408385][ T6245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.89'. [ 103.443447][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.89'. [ 103.452490][ T6245] netlink: 1 bytes leftover after parsing attributes in process `syz.3.89'. [ 103.569955][ T6248] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.311675][ T6259] binder_alloc: binder_alloc_mmap_handler: 6256 200000ffd000-200001000000 already mapped failed -16 [ 104.312205][ T6258] binder: BINDER_SET_CONTEXT_MGR already set [ 104.312245][ T6258] binder: 6256:6258 ioctl 4018620d 200000000040 returned -16 [ 104.345366][ T6245] syz.3.89 (6245) used greatest stack depth: 19384 bytes left [ 104.389744][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'. [ 104.461897][ T6264] block device autoloading is deprecated and will be removed. [ 104.484554][ T6264] syz.4.96: attempt to access beyond end of device [ 104.484554][ T6264] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 105.129431][ T5953] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 105.300818][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.300853][ T5953] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 105.300866][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.302635][ T5953] usb 5-1: config 0 descriptor?? [ 105.506307][ T5953] usbhid 5-1:0.0: can't add hid device: -71 [ 105.506430][ T5953] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 105.515415][ T5953] usb 5-1: USB disconnect, device number 4 [ 105.729430][ T5909] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 105.884476][ T5909] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 105.926137][ T5909] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 105.949684][ T5953] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 105.963648][ T5909] usb 1-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 105.992215][ T5909] usb 1-1: config 220 has no interface number 2 [ 106.009948][ T5909] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 106.028180][ T5909] usb 1-1: config 220 interface 0 has no altsetting 0 [ 106.041936][ T5909] usb 1-1: config 220 interface 76 has no altsetting 0 [ 106.049077][ T5909] usb 1-1: config 220 interface 1 has no altsetting 0 [ 106.073291][ T5909] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 106.086174][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.098700][ T5909] usb 1-1: Product: syz [ 106.110731][ T5953] usb 5-1: Using ep0 maxpacket: 16 [ 106.124361][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.138799][ T5909] usb 1-1: Manufacturer: syz [ 106.146386][ T5953] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 106.155758][ T5909] usb 1-1: SerialNumber: syz [ 106.171444][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.196414][ T5953] usb 5-1: config 0 descriptor?? [ 106.249678][ T5963] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 106.273708][ T5942] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 106.413668][ T5963] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.465120][ T5942] usb 3-1: Using ep0 maxpacket: 16 [ 106.470929][ T5909] usb 1-1: selecting invalid altsetting 0 [ 106.485945][ T5963] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.502624][ T5942] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 106.524872][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.536575][ T5909] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 106.543390][ T5942] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.556869][ T5963] usb 4-1: Product: syz [ 106.561441][ T5909] usb 1-1: No valid video chain found. [ 106.567322][ T5963] usb 4-1: Manufacturer: syz [ 106.572116][ T5942] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.584063][ T5963] usb 4-1: SerialNumber: syz [ 106.605055][ T5909] usb 1-1: selecting invalid altsetting 0 [ 106.624623][ T5909] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 106.639796][ T5942] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 106.665112][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.674650][ T5953] kye 0003:0458:5016.0004: control desc unexpectedly large [ 106.686501][ T5909] usb 1-1: USB disconnect, device number 7 [ 106.697706][ T5942] usb 3-1: Product: syz [ 106.720478][ T5942] usb 3-1: Manufacturer: syz [ 106.737600][ T5953] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0004/input/input8 [ 106.749900][ T5942] usb 3-1: SerialNumber: syz [ 106.856537][ T5963] cdc_ether 4-1:1.0: skipping garbage [ 106.882583][ T5963] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 106.916651][ T5953] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0004/input/input9 [ 106.954983][ T5963] usb 4-1: USB disconnect, device number 8 [ 107.026887][ T5953] kye 0003:0458:5016.0004: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 107.180697][ T5942] usb 3-1: 0:2 : does not exist [ 107.723046][ T5953] usb 5-1: USB disconnect, device number 5 [ 108.458826][ T6329] FAULT_INJECTION: forcing a failure. [ 108.458826][ T6329] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 108.629697][ T6329] CPU: 1 UID: 0 PID: 6329 Comm: syz.4.117 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 108.629723][ T6329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.629739][ T6329] Call Trace: [ 108.629746][ T6329] [ 108.629754][ T6329] dump_stack_lvl+0x189/0x250 [ 108.629787][ T6329] ? __pfx____ratelimit+0x10/0x10 [ 108.629807][ T6329] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.629825][ T6329] ? __pfx__printk+0x10/0x10 [ 108.629858][ T6329] should_fail_ex+0x414/0x560 [ 108.629882][ T6329] _copy_to_user+0x31/0xb0 [ 108.629907][ T6329] simple_read_from_buffer+0xe1/0x170 [ 108.629936][ T6329] proc_fail_nth_read+0x1df/0x250 [ 108.629956][ T6329] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 108.629975][ T6329] ? rw_verify_area+0x258/0x650 [ 108.629995][ T6329] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 108.630013][ T6329] vfs_read+0x1fd/0x980 [ 108.630039][ T6329] ? __pfx___mutex_lock+0x10/0x10 [ 108.630059][ T6329] ? __pfx_vfs_read+0x10/0x10 [ 108.630081][ T6329] ? __fget_files+0x2a/0x420 [ 108.630101][ T6329] ? __fget_files+0x3a0/0x420 [ 108.630115][ T6329] ? __fget_files+0x2a/0x420 [ 108.630139][ T6329] ksys_read+0x145/0x250 [ 108.630162][ T6329] ? __pfx_ksys_read+0x10/0x10 [ 108.630180][ T6329] ? rcu_is_watching+0x15/0xb0 [ 108.630204][ T6329] ? do_syscall_64+0xbe/0x3b0 [ 108.630227][ T6329] do_syscall_64+0xfa/0x3b0 [ 108.630244][ T6329] ? lockdep_hardirqs_on+0x9c/0x150 [ 108.630261][ T6329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.630277][ T6329] ? clear_bhb_loop+0x60/0xb0 [ 108.630297][ T6329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.630312][ T6329] RIP: 0033:0x7fbf0cb8d3bc [ 108.630331][ T6329] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 108.630344][ T6329] RSP: 002b:00007fbf0da25030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 108.630362][ T6329] RAX: ffffffffffffffda RBX: 00007fbf0cdb5fa0 RCX: 00007fbf0cb8d3bc [ 108.630374][ T6329] RDX: 000000000000000f RSI: 00007fbf0da250a0 RDI: 0000000000000005 [ 108.630383][ T6329] RBP: 00007fbf0da25090 R08: 0000000000000000 R09: 0000000000000000 [ 108.630393][ T6329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 108.630402][ T6329] R13: 0000000000000000 R14: 00007fbf0cdb5fa0 R15: 00007fbf0cedfa28 [ 108.630429][ T6329] [ 109.239644][ T5953] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 109.347252][ T6335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.119'. [ 109.373373][ T5942] usb 3-1: USB disconnect, device number 13 [ 109.403262][ T5953] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.414722][ T6337] FAULT_INJECTION: forcing a failure. [ 109.414722][ T6337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.441815][ T6335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.119'. [ 109.454868][ T5953] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.467259][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.499549][ T6337] CPU: 1 UID: 0 PID: 6337 Comm: syz.2.120 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 109.499572][ T6337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 109.499581][ T6337] Call Trace: [ 109.499588][ T6337] [ 109.499595][ T6337] dump_stack_lvl+0x189/0x250 [ 109.499620][ T6337] ? __pfx____ratelimit+0x10/0x10 [ 109.499639][ T6337] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.499658][ T6337] ? __pfx__printk+0x10/0x10 [ 109.499679][ T6337] ? __might_fault+0xb0/0x130 [ 109.499709][ T6337] should_fail_ex+0x414/0x560 [ 109.499733][ T6337] _copy_from_iter+0x1db/0x16f0 [ 109.499758][ T6337] ? rcu_is_watching+0x15/0xb0 [ 109.499778][ T6337] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 109.499802][ T6337] ? __pfx__copy_from_iter+0x10/0x10 [ 109.499824][ T6337] ? __build_skb_around+0x257/0x3e0 [ 109.499851][ T6337] ? netlink_sendmsg+0x642/0xb30 [ 109.499872][ T6337] ? skb_put+0x11b/0x210 [ 109.499898][ T6337] netlink_sendmsg+0x6b2/0xb30 [ 109.499930][ T6337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.499956][ T6337] ? aa_sock_msg_perm+0x94/0x160 [ 109.499977][ T6337] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 109.499994][ T6337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.500016][ T6337] __sock_sendmsg+0x21c/0x270 [ 109.500039][ T6337] ____sys_sendmsg+0x505/0x830 [ 109.500061][ T6337] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.500086][ T6337] ? import_iovec+0x74/0xa0 [ 109.500111][ T6337] ___sys_sendmsg+0x21f/0x2a0 [ 109.500129][ T6337] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.500182][ T6337] ? __fget_files+0x2a/0x420 [ 109.500196][ T6337] ? __fget_files+0x3a0/0x420 [ 109.500221][ T6337] __x64_sys_sendmsg+0x19b/0x260 [ 109.500240][ T6337] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 109.500266][ T6337] ? __pfx_ksys_write+0x10/0x10 [ 109.500283][ T6337] ? rcu_is_watching+0x15/0xb0 [ 109.500307][ T6337] ? do_syscall_64+0xbe/0x3b0 [ 109.500330][ T6337] do_syscall_64+0xfa/0x3b0 [ 109.500347][ T6337] ? lockdep_hardirqs_on+0x9c/0x150 [ 109.500364][ T6337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.500380][ T6337] ? clear_bhb_loop+0x60/0xb0 [ 109.500408][ T6337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.500423][ T6337] RIP: 0033:0x7f299358e9a9 [ 109.500438][ T6337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.500457][ T6337] RSP: 002b:00007f29944cb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.500476][ T6337] RAX: ffffffffffffffda RBX: 00007f29937b5fa0 RCX: 00007f299358e9a9 [ 109.500488][ T6337] RDX: 0000000020008800 RSI: 0000200000000100 RDI: 0000000000000003 [ 109.500499][ T6337] RBP: 00007f29944cb090 R08: 0000000000000000 R09: 0000000000000000 [ 109.500509][ T6337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.500518][ T6337] R13: 0000000000000000 R14: 00007f29937b5fa0 R15: 00007f29938dfa28 [ 109.500546][ T6337] [ 109.502428][ T5953] usb 4-1: Product: syz [ 109.565713][ T5991] udevd[5991]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.779976][ T5953] usb 4-1: Manufacturer: syz [ 109.969798][ T5953] usb 4-1: SerialNumber: syz [ 110.307366][ T5953] cdc_ether 4-1:1.0: skipping garbage [ 110.324172][ T6358] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 110.339167][ T5953] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 110.363110][ T5953] usb 4-1: USB disconnect, device number 9 [ 110.490492][ T6369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.132'. [ 110.502926][ T6369] netlink: 20 bytes leftover after parsing attributes in process `syz.4.132'. [ 110.576732][ T6363] capability: warning: `syz.1.130' uses deprecated v2 capabilities in a way that may be insecure [ 110.595421][ T6363] fuse: Unknown parameter '' [ 110.709517][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 110.901499][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 110.914934][ T24] usb 1-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config [ 110.930597][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.013880][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 125, changing to 10 [ 111.046205][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 58243, setting to 1024 [ 111.146194][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.210100][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 111.220277][ T6382] FAULT_INJECTION: forcing a failure. [ 111.220277][ T6382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.226114][ T24] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 111.251602][ T24] usb 1-1: Manufacturer: syz [ 111.254462][ T6382] CPU: 0 UID: 0 PID: 6382 Comm: syz.3.137 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 111.254483][ T6382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 111.254493][ T6382] Call Trace: [ 111.254500][ T6382] [ 111.254514][ T6382] dump_stack_lvl+0x189/0x250 [ 111.254538][ T6382] ? __pfx____ratelimit+0x10/0x10 [ 111.254557][ T6382] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.254574][ T6382] ? __pfx__printk+0x10/0x10 [ 111.254595][ T6382] ? __might_fault+0xb0/0x130 [ 111.254627][ T6382] should_fail_ex+0x414/0x560 [ 111.254648][ T6382] _copy_from_iter+0x1db/0x16f0 [ 111.254672][ T6382] ? rcu_is_watching+0x15/0xb0 [ 111.254692][ T6382] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 111.254715][ T6382] ? __pfx__copy_from_iter+0x10/0x10 [ 111.254736][ T6382] ? __build_skb_around+0x257/0x3e0 [ 111.254760][ T6382] ? netlink_sendmsg+0x642/0xb30 [ 111.254780][ T6382] ? skb_put+0x11b/0x210 [ 111.254805][ T6382] netlink_sendmsg+0x6b2/0xb30 [ 111.254836][ T6382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.254865][ T6382] ? aa_sock_msg_perm+0x94/0x160 [ 111.254883][ T6382] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 111.254900][ T6382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.254922][ T6382] __sock_sendmsg+0x21c/0x270 [ 111.254944][ T6382] ____sys_sendmsg+0x505/0x830 [ 111.254964][ T6382] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.254988][ T6382] ? import_iovec+0x74/0xa0 [ 111.255012][ T6382] ___sys_sendmsg+0x21f/0x2a0 [ 111.255030][ T6382] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.255078][ T6382] ? __fget_files+0x2a/0x420 [ 111.255091][ T6382] ? __fget_files+0x3a0/0x420 [ 111.255115][ T6382] __x64_sys_sendmsg+0x19b/0x260 [ 111.255133][ T6382] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 111.255157][ T6382] ? __pfx_ksys_write+0x10/0x10 [ 111.255174][ T6382] ? rcu_is_watching+0x15/0xb0 [ 111.255197][ T6382] ? do_syscall_64+0xbe/0x3b0 [ 111.255218][ T6382] do_syscall_64+0xfa/0x3b0 [ 111.255234][ T6382] ? lockdep_hardirqs_on+0x9c/0x150 [ 111.255250][ T6382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.255265][ T6382] ? clear_bhb_loop+0x60/0xb0 [ 111.255284][ T6382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.255299][ T6382] RIP: 0033:0x7fe4cd58e9a9 [ 111.255314][ T6382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.255333][ T6382] RSP: 002b:00007fe4ce3f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.255350][ T6382] RAX: ffffffffffffffda RBX: 00007fe4cd7b5fa0 RCX: 00007fe4cd58e9a9 [ 111.255361][ T6382] RDX: 0000000020008800 RSI: 0000200000000100 RDI: 0000000000000003 [ 111.255371][ T6382] RBP: 00007fe4ce3f3090 R08: 0000000000000000 R09: 0000000000000000 [ 111.255380][ T6382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.255390][ T6382] R13: 0000000000000000 R14: 00007fe4cd7b5fa0 R15: 00007fe4cd8dfa28 [ 111.255415][ T6382] [ 111.492501][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.579150][ T24] usb 1-1: config 0 descriptor?? [ 111.633494][ T6385] netlink: 156 bytes leftover after parsing attributes in process `syz.3.138'. [ 111.656910][ T6385] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 112.079742][ T24] rc_core: IR keymap rc-hauppauge not found [ 112.117586][ T24] Registered IR keymap rc-empty [ 112.150219][ T24] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 112.220900][ T24] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 112.293497][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 112.320762][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10 [ 112.399099][ T24] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 112.452442][ T24] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 112.491949][ T24] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 112.549706][ T5963] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 112.550902][ T24] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 112.630823][ T24] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 112.660115][ T24] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 112.691406][ T24] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 112.699729][ T5963] usb 3-1: Using ep0 maxpacket: 8 [ 112.719530][ T5897] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 112.720579][ T5963] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 112.761361][ T5963] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 112.766254][ T24] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 112.780857][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.790607][ T5963] usb 3-1: Product: syz [ 112.804797][ T24] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 112.805022][ T5963] usb 3-1: Manufacturer: syz [ 112.842171][ T24] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 112.846998][ T5963] usb 3-1: SerialNumber: syz [ 112.877318][ T24] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 112.883368][ T5963] usb 3-1: config 0 descriptor?? [ 112.906936][ T24] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 112.932896][ T5897] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.941618][ T5963] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 112.967746][ T5897] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.983290][ T5963] usb 3-1: setting power ON [ 112.988923][ T5963] dvb-usb: bulk message failed: -22 (2/0) [ 113.014636][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.032234][ T24] usb 1-1: USB disconnect, device number 8 [ 113.059243][ T5897] usb 5-1: Product: syz [ 113.076195][ T5897] usb 5-1: Manufacturer: syz [ 113.088442][ T5963] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 113.089933][ T5897] usb 5-1: SerialNumber: syz [ 113.144747][ T6400] dvb-usb: bulk message failed: -22 (3/0) [ 113.151541][ T6400] dvb-usb: bulk message failed: -22 (5/0) [ 113.201906][ T5963] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 113.219207][ T6426] dvb-usb: bulk message failed: -22 (3/0) [ 113.250859][ T6426] dvb-usb: bulk message failed: -22 (4/0) [ 113.257059][ T5963] usb 3-1: media controller created [ 113.317436][ T6426] cxusb: i2c read failed [ 113.358712][ T5963] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.374430][ T6400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.438969][ T6400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.456118][ T5897] cdc_ether 5-1:1.0: skipping garbage [ 113.479290][ T5897] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 113.521389][ T6400] tc_dump_action: action bad kind [ 113.525341][ T5897] usb 5-1: USB disconnect, device number 6 [ 113.585525][ T5963] usb 3-1: selecting invalid altsetting 6 [ 113.620715][ T5963] usb 3-1: digital interface selection failed (-22) [ 113.627389][ T5963] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 113.807770][ T5963] usb 3-1: setting power OFF [ 113.826530][ T5963] dvb-usb: bulk message failed: -22 (2/0) [ 113.843090][ T5963] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 113.870115][ T6436] fuse: Bad value for 'user_id' [ 113.891724][ T6436] fuse: Bad value for 'user_id' [ 113.906852][ T5963] (NULL device *): no alternate interface [ 114.119786][ T6438] netlink: 68 bytes leftover after parsing attributes in process `syz.4.153'. [ 114.179580][ T6438] netlink: 48 bytes leftover after parsing attributes in process `syz.4.153'. [ 114.242987][ T5963] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 114.295914][ T5963] usb 3-1: USB disconnect, device number 14 [ 114.431630][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.156'. [ 114.450067][ T5897] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 114.649660][ T5897] usb 2-1: Using ep0 maxpacket: 16 [ 114.656308][ T5897] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.676233][ T5897] usb 2-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 114.694592][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.716117][ T5897] usb 2-1: config 0 descriptor?? [ 114.789978][ T5963] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 114.824271][ T6459] FAULT_INJECTION: forcing a failure. [ 114.824271][ T6459] name failslab, interval 1, probability 0, space 0, times 1 [ 114.842247][ T924] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 114.859100][ T6459] CPU: 0 UID: 0 PID: 6459 Comm: syz.3.161 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 114.859123][ T6459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 114.859133][ T6459] Call Trace: [ 114.859140][ T6459] [ 114.859147][ T6459] dump_stack_lvl+0x189/0x250 [ 114.859170][ T6459] ? __pfx____ratelimit+0x10/0x10 [ 114.859189][ T6459] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.859208][ T6459] ? __pfx__printk+0x10/0x10 [ 114.859235][ T6459] ? __pfx___might_resched+0x10/0x10 [ 114.859252][ T6459] ? fs_reclaim_acquire+0x7d/0x100 [ 114.859273][ T6459] should_fail_ex+0x414/0x560 [ 114.859300][ T6459] should_failslab+0xa8/0x100 [ 114.859322][ T6459] kmem_cache_alloc_noprof+0x73/0x3c0 [ 114.859341][ T6459] ? fanotify_handle_event+0x1975/0x3d00 [ 114.859364][ T6459] fanotify_handle_event+0x1975/0x3d00 [ 114.859391][ T6459] ? fanotify_handle_event+0xfa0/0x3d00 [ 114.859418][ T6459] ? __pfx_fanotify_handle_event+0x10/0x10 [ 114.859448][ T6459] ? fsnotify+0x735/0x1a80 [ 114.859477][ T6459] ? __pfx_fanotify_handle_event+0x10/0x10 [ 114.859498][ T6459] fsnotify+0x1412/0x1a80 [ 114.859538][ T6459] ? fsnotify+0x735/0x1a80 [ 114.859559][ T6459] ? __pfx_fsnotify+0x10/0x10 [ 114.859597][ T6459] __kernel_read+0x6dc/0x8c0 [ 114.859625][ T6459] ? __pfx___kernel_read+0x10/0x10 [ 114.859661][ T6459] ? rw_verify_area+0x258/0x650 [ 114.859691][ T6459] bprm_execve+0x8ce/0x1450 [ 114.859724][ T6459] ? __pfx_bprm_execve+0x10/0x10 [ 114.859743][ T6459] ? copy_string_kernel+0x25f/0x2a0 [ 114.859763][ T6459] do_execveat_common+0x510/0x6a0 [ 114.859792][ T6459] __x64_sys_execveat+0xc4/0xe0 [ 114.859814][ T6459] do_syscall_64+0xfa/0x3b0 [ 114.859830][ T6459] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.859845][ T6459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.859857][ T6459] ? clear_bhb_loop+0x60/0xb0 [ 114.859875][ T6459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.859889][ T6459] RIP: 0033:0x7fe4cd58e9a9 [ 114.859904][ T6459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.859918][ T6459] RSP: 002b:00007fe4ce3f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 114.859935][ T6459] RAX: ffffffffffffffda RBX: 00007fe4cd7b5fa0 RCX: 00007fe4cd58e9a9 [ 114.859947][ T6459] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 114.859957][ T6459] RBP: 00007fe4ce3f3090 R08: 0000000000001000 R09: 0000000000000000 [ 114.859967][ T6459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.859977][ T6459] R13: 0000000000000000 R14: 00007fe4cd7b5fa0 R15: 00007fe4cd8dfa28 [ 114.860005][ T6459] [ 115.146795][ T5897] logitech-djreceiver 0003:046D:C531.0005: ignoring exceeding usage max [ 115.189953][ T924] usb 3-1: device descriptor read/64, error -71 [ 115.209523][ T5963] usb 1-1: Using ep0 maxpacket: 32 [ 115.217670][ T5963] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 115.226537][ T5963] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.237169][ T5963] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 27 [ 115.262312][ T5963] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 115.271572][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.279746][ T5963] usb 1-1: Product: syz [ 115.283922][ T5963] usb 1-1: Manufacturer: syz [ 115.288533][ T5963] usb 1-1: SerialNumber: syz [ 115.334337][ T5897] usb 2-1: USB disconnect, device number 6 [ 115.429447][ T924] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 115.508477][ T5963] usb 1-1: 0:2 : does not exist [ 115.529070][ T5963] usb 1-1: USB disconnect, device number 9 [ 115.560319][ T5953] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 115.569581][ T924] usb 3-1: device descriptor read/64, error -71 [ 115.700193][ T924] usb usb3-port1: attempt power cycle [ 115.726898][ T5953] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.740175][ T5953] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.749892][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.757923][ T5953] usb 4-1: Product: syz [ 115.762400][ T5953] usb 4-1: Manufacturer: syz [ 115.767033][ T5953] usb 4-1: SerialNumber: syz [ 115.991996][ T5953] cdc_ether 4-1:1.0: skipping garbage [ 116.013100][ T5963] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 116.027766][ T5953] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 116.056038][ T924] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 116.060951][ T5953] usb 4-1: USB disconnect, device number 10 [ 116.090775][ T924] usb 3-1: device descriptor read/8, error -71 [ 116.199491][ T5963] usb 1-1: Using ep0 maxpacket: 32 [ 116.351909][ T924] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 116.392543][ T924] usb 3-1: device descriptor read/8, error -71 [ 116.507773][ T924] usb usb3-port1: unable to enumerate USB device [ 116.745103][ T5963] usb 1-1: unable to get BOS descriptor or descriptor too short [ 116.771604][ T5963] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 116.775934][ T924] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 116.782377][ T5963] usb 1-1: can't read configurations, error -71 [ 116.959566][ T924] usb 2-1: Using ep0 maxpacket: 8 [ 116.971083][ T924] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 116.979755][ T924] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 117.072250][ T924] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 117.093247][ T924] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 117.115846][ T924] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 117.130691][ T924] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 117.139197][ T924] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 117.170393][ T924] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 117.218242][ T6491] page: refcount:515 mapcount:0 mapping:ffff888033d48c40 index:0x200 pfn:0xb4400 [ 117.227900][ T6491] head: order:9 mapcount:1 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 117.236510][ T6491] aops:hugetlbfs_aops ino:2c10 dentry name(?):"anon_hugepage" [ 117.243987][ T6491] flags: 0xfff00000000041(locked|head|node=0|zone=1|lastcpupid=0x7ff) [ 117.252241][ T6491] page_type: f4(hugetlb) [ 117.256484][ T6491] raw: 00fff00000000041 ffffea0005008008 ffffea0001370008 ffff888033d48c40 [ 117.265063][ T6491] raw: 0000000000000200 0000000000000000 00000203f4000000 0000000000000000 [ 117.273647][ T6491] head: 00fff00000000041 ffffea0005008008 ffffea0001370008 ffff888033d48c40 [ 117.282396][ T6491] head: 0000000000000200 0000000000000000 00000203f4000000 0000000000000000 [ 117.291071][ T6491] head: 00fff00000000009 ffffea0002d10001 0000000000000000 0000000000000000 [ 117.299738][ T6491] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000200 [ 117.308482][ T6491] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 117.315751][ T6491] page_owner tracks the page as allocated [ 117.321814][ T6491] page last allocated via order 9, migratetype Movable, gfp_mask 0x346cca(GFP_HIGHUSER_MOVABLE|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP|__GFP_THISNODE), pid 1, tgid 1 (swapper/0), ts 24349034911, free_ts 0 [ 117.342065][ T6491] post_alloc_hook+0x240/0x2a0 [ 117.346837][ T6491] get_page_from_freelist+0x21e4/0x22c0 [ 117.352408][ T6491] __alloc_frozen_pages_noprof+0x181/0x370 [ 117.358213][ T6491] alloc_buddy_hugetlb_folio+0xdf/0x1c0 [ 117.363758][ T6491] only_alloc_fresh_hugetlb_folio+0x8c/0x280 [ 117.369731][ T6491] __nr_hugepages_store_common+0x5dc/0xe20 [ 117.375533][ T6491] hugetlb_sysctl_handler+0x1b6/0x230 [ 117.380953][ T6491] proc_sys_call_handler+0x4c6/0x700 [ 117.386233][ T6491] __kernel_write_iter+0x393/0x860 [ 117.391341][ T6491] kernel_write+0x1ca/0x2e0 [ 117.395844][ T6491] process_sysctl_arg+0x39c/0x5f0 [ 117.400866][ T6491] parse_args+0x30d/0xa70 [ 117.405195][ T6491] do_sysctl_args+0xd0/0x150 [ 117.409776][ T6491] kernel_init+0x84/0x1d0 [ 117.414100][ T6491] ret_from_fork+0x3fc/0x770 [ 117.418680][ T6491] ret_from_fork_asm+0x1a/0x30 [ 117.423442][ T6491] page_owner free stack trace missing [ 117.428921][ T6491] ------------[ cut here ]------------ [ 117.434454][ T6491] kernel BUG at mm/filemap.c:154! [ 117.439528][ T6491] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 117.445783][ T6491] CPU: 0 UID: 0 PID: 6491 Comm: syz.3.172 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 117.455584][ T6491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.465642][ T6491] RIP: 0010:filemap_unaccount_folio+0x715/0x790 [ 117.471897][ T6491] Code: c2 ca ff 48 89 df 48 c7 c6 40 2e 94 8b e8 93 f9 10 00 90 0f 0b e8 2b c2 ca ff 48 89 df 48 c7 c6 20 2d 94 8b e8 7c f9 10 00 90 <0f> 0b e8 14 c2 ca ff 48 89 df 48 c7 c6 40 2e 94 8b e8 65 f9 10 00 [ 117.491500][ T6491] RSP: 0018:ffffc9001c0f70e0 EFLAGS: 00010046 [ 117.497576][ T6491] RAX: 4b370b2eda49a400 RBX: ffffea0002d10000 RCX: 4b370b2eda49a400 [ 117.505628][ T6491] RDX: 0000000000000005 RSI: ffffffff8db8419f RDI: ffff888034e0da00 [ 117.513600][ T6491] RBP: 0000000000000001 R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 117.521564][ T6491] R10: dffffc0000000000 R11: ffffed10170c4853 R12: 0000000000000040 [ 117.529622][ T6491] R13: 1ffffd40005a2000 R14: 1ffffd40005a2001 R15: ffffea0002d10008 [ 117.537583][ T6491] FS: 00007fe4ce36f6c0(0000) GS:ffff888125c23000(0000) knlGS:0000000000000000 [ 117.546509][ T6491] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.553089][ T6491] CR2: 000020000010cb30 CR3: 000000007c9d0000 CR4: 00000000003526f0 [ 117.561081][ T6491] Call Trace: [ 117.564349][ T6491] [ 117.567272][ T6491] __filemap_remove_folio+0xc3/0x500 [ 117.572812][ T6491] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 117.578181][ T6491] ? __pfx___filemap_remove_folio+0x10/0x10 [ 117.584083][ T6491] ? _raw_spin_lock_irq+0xae/0xf0 [ 117.589103][ T6491] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 117.594812][ T6491] filemap_remove_folio+0xe6/0x1f0 [ 117.599915][ T6491] remove_inode_hugepages+0x594/0x1100 [ 117.605370][ T6491] ? __pfx_remove_inode_hugepages+0x10/0x10 [ 117.611377][ T6491] ? hugetlbfs_fallocate+0xbaf/0x1100 [ 117.616754][ T6491] ? up_write+0x1c4/0x420 [ 117.621162][ T6491] hugetlbfs_fallocate+0xbc7/0x1100 [ 117.626353][ T6491] ? lockdep_unlock+0x89/0x120 [ 117.631105][ T6491] ? mark_lock_irq+0x31a/0x390 [ 117.635892][ T6491] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 117.641525][ T6491] ? rcu_read_lock_any_held+0xb3/0x120 [ 117.647067][ T6491] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 117.652962][ T6491] vfs_fallocate+0x6a3/0x830 [ 117.657556][ T6491] ? __pfx_vfs_fallocate+0x10/0x10 [ 117.662786][ T6491] madvise_do_behavior+0x169d/0x2e70 [ 117.668089][ T6491] ? __pfx_madvise_do_behavior+0x10/0x10 [ 117.673721][ T6491] ? __lock_acquire+0xab9/0xd20 [ 117.678597][ T6491] ? page_table_check_set+0x18d/0x730 [ 117.683970][ T6491] ? page_table_check_set+0x18d/0x730 [ 117.689336][ T6491] ? page_table_check_set+0x18d/0x730 [ 117.695147][ T6491] ? __lock_acquire+0xab9/0xd20 [ 117.699989][ T6491] ? madvise_lock+0xda/0x200 [ 117.704579][ T6491] do_madvise+0x174/0x220 [ 117.708908][ T6491] ? count_memcg_event_mm+0x21/0x260 [ 117.714190][ T6491] ? __pfx_do_madvise+0x10/0x10 [ 117.719179][ T6491] __x64_sys_madvise+0xa7/0xc0 [ 117.723949][ T6491] do_syscall_64+0xfa/0x3b0 [ 117.728446][ T6491] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.733634][ T6491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.739704][ T6491] ? clear_bhb_loop+0x60/0xb0 [ 117.744464][ T6491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.750347][ T6491] RIP: 0033:0x7fe4cd58e9a9 [ 117.754767][ T6491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.774370][ T6491] RSP: 002b:00007fe4ce36f038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 117.782781][ T6491] RAX: ffffffffffffffda RBX: 00007fe4cd7b6320 RCX: 00007fe4cd58e9a9 [ 117.790744][ T6491] RDX: 0000000000000009 RSI: 0000000000600002 RDI: 0000200000000000 [ 117.798703][ T6491] RBP: 00007fe4cd610d69 R08: 0000000000000000 R09: 0000000000000000 [ 117.806662][ T6491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.814623][ T6491] R13: 0000000000000001 R14: 00007fe4cd7b6320 R15: 00007fe4cd8dfa28 [ 117.822588][ T6491] [ 117.825602][ T6491] Modules linked in: [ 117.829497][ T6491] ---[ end trace 0000000000000000 ]--- [ 117.834937][ T6491] RIP: 0010:filemap_unaccount_folio+0x715/0x790 [ 117.841207][ T6491] Code: c2 ca ff 48 89 df 48 c7 c6 40 2e 94 8b e8 93 f9 10 00 90 0f 0b e8 2b c2 ca ff 48 89 df 48 c7 c6 20 2d 94 8b e8 7c f9 10 00 90 <0f> 0b e8 14 c2 ca ff 48 89 df 48 c7 c6 40 2e 94 8b e8 65 f9 10 00 [ 117.860816][ T6491] RSP: 0018:ffffc9001c0f70e0 EFLAGS: 00010046 [ 117.866879][ T6491] RAX: 4b370b2eda49a400 RBX: ffffea0002d10000 RCX: 4b370b2eda49a400 [ 117.874909][ T6491] RDX: 0000000000000005 RSI: ffffffff8db8419f RDI: ffff888034e0da00 [ 117.882886][ T6491] RBP: 0000000000000001 R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 117.890866][ T6491] R10: dffffc0000000000 R11: ffffed10170c4853 R12: 0000000000000040 [ 117.898843][ T6491] R13: 1ffffd40005a2000 R14: 1ffffd40005a2001 R15: ffffea0002d10008 [ 117.906837][ T6491] FS: 00007fe4ce36f6c0(0000) GS:ffff888125c23000(0000) knlGS:0000000000000000 [ 117.915769][ T6491] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.922354][ T6491] CR2: 000020000010cb30 CR3: 000000007c9d0000 CR4: 00000000003526f0 [ 117.930323][ T6491] Kernel panic - not syncing: Fatal exception [ 117.936689][ T6491] Kernel Offset: disabled [ 117.941086][ T6491] Rebooting in 86400 seconds..