last executing test programs: 21m45.795438286s ago: executing program 2 (id=1108): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000000ec0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002f00)=@migrate={0x1f0, 0x21, 0x8, 0x70bd2d, 0x25dfdbfc, {{@in6=@empty, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0xce22, 0x1, 0x4e22, 0x4, 0x2, 0xa0, 0x80, 0x29, 0x0, r1}, 0x6e6bba}, [@algo_auth={0x5b, 0x1, {{'blake2s-224-arm\x00'}, 0x98, "1fd65b16f689e4cd02d5dc2ed2439d096081c0"}}, @algo_auth_trunc={0x142, 0x14, {{'tgr192\x00'}, 0x7b0, 0x60, "10e74ecb1012b0592d56ac67d147532fd938ce67df02885aa74329a205679c0cfb397ae4872cbd751017b12c41b7dd3cfa2efc63f688cf64bf309e06b698584f7880b646cf31e858dbede076cdd39635063c635545cf8600401834f74e3decccdc1a41c084444079c54fd5eedff5ac0a2b73c72ca43763ad854a4c51446e3c1bbb96e09ef34ef2a2b468afbb5d77ff99e3d1835c71135d176957c7a47cb3ca00146b0f2b13335e258e5061d12321f7be296d79948137d225c71a221d2c210c6efa6c1e5095cd0b37d3a487f517c497438161396c4c6fcbd3d764fa9b0ba1c8ef3082310e575fa7209531cddb9bfba23e6446d84d22bb"}}]}, 0x1f0}}, 0x20000000) 21m45.654123075s ago: executing program 2 (id=1109): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x2f, &(0x7f0000000040), 0x3b) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @rand_addr=0x64010101}], 0x10) sendmmsg$inet6(r2, &(0x7f00000044c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="e8", 0x1}], 0x1}}], 0x1, 0x11) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) bind$alg(r3, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000002f40)=[{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000700)="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", 0x901}], 0x1, 0x0, 0x0, 0x1}], 0x1, 0x200c0010) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000040)={{{@in=@remote}}, {{@in=@remote}}}, &(0x7f0000000140)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x4040880}, 0x2004c484) getresuid(&(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000240)) 21m45.133729616s ago: executing program 2 (id=1110): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff00c}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x189e42) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 21m42.038118932s ago: executing program 2 (id=1121): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x57, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x1}, {0x401, 0x4, 0x87, 0x1}, {0x6, 0x8, 0x3, 0x7ff}]}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, 0x0, &(0x7f0000000040)) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYRES16=r2, @ANYRES16=r0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = syz_usb_connect(0x6, 0x2d, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000bdc000/0x3000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000f04"], 0x50) r6 = socket$inet6(0xa, 0x3, 0xff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x3, 0xfffffffd, 0x31, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0xba08}}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', r5, &(0x7f0000000300)='./file0\x00', 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x13) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000)=0x2, 0x5, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)=0x1, 0x1) syz_open_dev$vim2m(&(0x7f0000000040), 0x100000800001b32, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000400)={0x13, 0x2, 0x200, "18e889cb5bfb8276529323b3592ac5363900", 0x38416761}) acct(&(0x7f00000001c0)='./file0\x00') 21m40.476999254s ago: executing program 2 (id=1123): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e500000000000000711098000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$char_usb(r1, &(0x7f00000005c0)="fa7f9e1fba2a8b078f653cd5fd6a6e8df9e8f3ae46e6dfbaddb0caa208353bec635e27c14193ccc389988b89ae64f42945edcd875e57cd02dbe683c81dd557523231d4b690d2a4cfb2c0256cb98b43394e88565033719d338fa3d2903911ee09d1098be065bd8403c83ebefb928db3ab17272d41018d122a39f86a3a935a23338483ee38480b460b39f9b22041a50f131acebc4e53d85d316248b0955771d86591", 0xa1) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000002200", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x80000, 0x2000000000001]}}) 21m37.4529296s ago: executing program 2 (id=1128): preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/40, 0x28}], 0x1, 0x38, 0xc) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000580)="b98c020000b854f50000ba000000000f302e40f466baf80cb824ce7981ef66bafc0cb000eec422d9bd40910f20e035000010000f22e03e0f458100100000b9800000c00f3235008000000f300f01c136410f0764260f01b200000000", 0x5c}], 0x1, 0x0, 0x0, 0x0) unshare(0x20400) r3 = getpgid(0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_getfd(r4, r4, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x10, 0x3fb}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/40, 0x28}], 0x1, 0x38, 0xc) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x809d) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) (async) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000580)="b98c020000b854f50000ba000000000f302e40f466baf80cb824ce7981ef66bafc0cb000eec422d9bd40910f20e035000010000f22e03e0f458100100000b9800000c00f3235008000000f300f01c136410f0764260f01b200000000", 0x5c}], 0x1, 0x0, 0x0, 0x0) (async) unshare(0x20400) (async) getpgid(0x0) (async) syz_pidfd_open(r3, 0x0) (async) pidfd_getfd(r4, r4, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x10, 0x3fb}, 0x94) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) 21m37.27106338s ago: executing program 32 (id=1128): preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/40, 0x28}], 0x1, 0x38, 0xc) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000580)="b98c020000b854f50000ba000000000f302e40f466baf80cb824ce7981ef66bafc0cb000eec422d9bd40910f20e035000010000f22e03e0f458100100000b9800000c00f3235008000000f300f01c136410f0764260f01b200000000", 0x5c}], 0x1, 0x0, 0x0, 0x0) unshare(0x20400) r3 = getpgid(0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_getfd(r4, r4, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x10, 0x3fb}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/40, 0x28}], 0x1, 0x38, 0xc) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x809d) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) (async) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000580)="b98c020000b854f50000ba000000000f302e40f466baf80cb824ce7981ef66bafc0cb000eec422d9bd40910f20e035000010000f22e03e0f458100100000b9800000c00f3235008000000f300f01c136410f0764260f01b200000000", 0x5c}], 0x1, 0x0, 0x0, 0x0) (async) unshare(0x20400) (async) getpgid(0x0) (async) syz_pidfd_open(r3, 0x0) (async) pidfd_getfd(r4, r4, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x10, 0x3fb}, 0x94) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) 10m52.904068461s ago: executing program 3 (id=3797): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) syz_usb_control_io$hid(r2, 0x0, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x8]}, 0x8, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302) ioctl$SG_IO(r6, 0x2205, 0x0) accept4$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) syz_emit_ethernet(0x1f, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00'}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2}, 0x9, 0x0, 0x0, 0x884}, 0x48810) sendmsg$inet6(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="85a4e2a142368a5e9c975c1eed77f9456d769c627c649784095c2448ad68e23b4f73e837e71d32d9cdc8166f9a94036a6952e8554e101c6520148f6d023bdecf3eb5caed3247774fe0aa52bfeac449cb7840350a9a281b08b4f64a363dc35abcde49e9af7cbcc8f5d81efaf9"], 0x40}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "4b3f7633015aff9fa5e73369ed3ed4f938752184f1af2029", "14ef0f501fd4f4fc0d232b48a86ef0222fb6364766977f816acb8f51148dba1a"}}}}}}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000280)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 10m50.975793506s ago: executing program 3 (id=3806): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x6, 0x80800) r1 = syz_ublk_setup_io_uring(0xc0f, &(0x7f0000000040)={0x0, 0x873a, 0x40000, 0x3, 0x1bc}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) openat$cgroup_pressure(r4, &(0x7f0000000200)='memory.pressure\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10m49.841882386s ago: executing program 3 (id=3812): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7b4da7384ae8095c0106", 0xe, 0x8040, &(0x7f0000000200)={0x11, 0x17, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={r2, 0x1, 0x6}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r2, {0x7, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9902000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f408000300040100000800050000000000", 0x5c}, {&(0x7f00000000c0)="d557fc16674b56c0a96a733c232d6790c63ca969a688b06e3da58f3c4568bf0a77bdff6f41d7890e18defe94ef1a392dc00dea94a1bfe64982de7cf1c91e1103cc1840210cbb57222bc2bfa30369992a6bc5156c00aeadd359a7991ad1de01feec401dba6d7694a14785839d3c2d67188cd07827c934897de4676743c192c4a4b24f7f8747141a1325d29da89694574c32eba56e5bbc8f80376f3325dd89937e990089294183a4829e21849004c538378d41066cb7de399450b3544067", 0xbd}, {&(0x7f0000000280)="5e191aea3468a5eab1c3d6024b43dece099475c81c53aa9244d866f68b8e31e93b41b432fb0454234620a25706bfb6f01ce01093b7ff634785d8b345ef8f7a928034820bbd37467d1049ac7a724c153c358d6f7efd919bb918734e846598b03733a6f4bbce06471d3a440e14dae67170cbfea76bc33481c28ec2cfad1f3d83ddece3006d5bb30dc4288dd40bd476cc7f94d143c56e54ed4d84b9c1ecc87fc035c7c992767edcfe2218bc6542a6a3a9b879e8aa6d652d277ee640cc15d2e9efe30584ed57ab208ca4db6cf63381804a5ee5950020", 0xd4}, {&(0x7f00000017c0)="fd7617adb877574c4a4489fcaccde0c97bdb2d9d89dba8ab9fc9ebbdcedc770661e1971989a787890de32eebe4008ac8bfafa034add91f6ea4acc741521abecc6cbb4fcfeb61d7d08a8911e59550055d17897194afc1ffd04c18c2506d41bec374a6e5b1ed5fd07db55483fef2dc9ad8ae7c6044b08a303f256ff7e7dd720c72fc0d513110468d44e31a8fc9833d521b95c3b04378ca1c67b4faca350009045628c7f7196510f14ebdc68ba7", 0xac}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x0) writev(r0, &(0x7f0000000a80)=[{&(0x7f0000002080)='T01\n', 0x4}, {&(0x7f0000000100)="aecb", 0x2}], 0x2) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f0000000380)={0x1, 0x2, 0x81338a0f}) ioctl$SNDRV_PCM_IOCTL_XRUN(r0, 0x4148, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) ioctl$FITHAW(r6, 0xc0045878) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='/\\\x19@\xbeM\'\f\xb7b}\x8a\xa1\x1a\x1bN\x878u\xeb\n\x1f\x11\xb6\xe9\xbd\xc2\xcaI\xd7A\xce6\x93\xb5QZ\xb3`\x00\x00\x00\x00\x86\x00', &(0x7f0000000180)='400:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) 10m49.705710925s ago: executing program 3 (id=3813): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000580)={r1, 0x11, "25a472634c3e1410f67186fc35019d8da1"}, &(0x7f0000000340)=0x19) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) sendfile(r4, r4, 0x0, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) socket$l2tp6(0xa, 0x2, 0x73) r6 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x3, 0x80) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYRES64=r6], 0x48}}, 0x4000004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) 10m48.751728269s ago: executing program 3 (id=3817): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) close(0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x123080, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) munlockall() getrandom(0x0, 0x0, 0x3) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x5a6, 0x4) bind$inet(r6, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r6, 0x0, 0xb, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) r8 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000003480), 0x900) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r9, 0xc08c5334, &(0x7f00000034c0)={0x3, 0xffffffde, 0x1, 'queue1\x00', 0x200}) ioctl$EVIOCSKEYCODE(r8, 0x40084504, &(0x7f0000000000)=[0x8, 0x7]) 10m48.53765232s ago: executing program 3 (id=3818): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x100, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0xfff2}, {0xc, 0xffff}, {0x0, 0xfffd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x2c}}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x1, 0x7f, 0x1}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001100), 0x101000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r2 = msgget$private(0x0, 0x3ac) msgrcv(r2, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) msgrcv(r2, 0x0, 0x0, 0x0, 0x2000) msgsnd(r2, &(0x7f0000002500)={0x7db6fe032bfedfa8}, 0x8, 0x0) r3 = socket(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071103a00000000009c050100000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="24f5fb00007dbb95f10a958898000000", @ANYRES16=0x0, @ANYBLOB="040025bd7000fbdbdf251400000005000b00000000000800150004000000"], 0x24}, 0x1, 0x0, 0x0, 0x44880}, 0x4000800) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0, &(0x7f0000000000)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x8005, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020601030000000000000000070000000c000780080012400000ffff0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000003fa82bde7389f6b6358c22638b0d8cbce281e8a0f8528428cc27fc"], 0x58}, 0x1, 0x0, 0x0, 0x20000810}, 0x20004000) 10m48.170702004s ago: executing program 33 (id=3818): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x100, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0xfff2}, {0xc, 0xffff}, {0x0, 0xfffd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x2c}}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x1, 0x7f, 0x1}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001100), 0x101000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r2 = msgget$private(0x0, 0x3ac) msgrcv(r2, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) msgrcv(r2, 0x0, 0x0, 0x0, 0x2000) msgsnd(r2, &(0x7f0000002500)={0x7db6fe032bfedfa8}, 0x8, 0x0) r3 = socket(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071103a00000000009c050100000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="24f5fb00007dbb95f10a958898000000", @ANYRES16=0x0, @ANYBLOB="040025bd7000fbdbdf251400000005000b00000000000800150004000000"], 0x24}, 0x1, 0x0, 0x0, 0x44880}, 0x4000800) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0, &(0x7f0000000000)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x8005, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020601030000000000000000070000000c000780080012400000ffff0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000003fa82bde7389f6b6358c22638b0d8cbce281e8a0f8528428cc27fc"], 0x58}, 0x1, 0x0, 0x0, 0x20000810}, 0x20004000) 9.562097696s ago: executing program 5 (id=6798): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) ppoll(&(0x7f0000000140)=[{r2, 0x8024}], 0x1, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 7.551784286s ago: executing program 5 (id=6808): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setgroups(0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1800) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x74, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {0x0, 0xfff1}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x0, 0x2, 0x0, {0x9, 0x1, 0x7ff, 0xf800, 0xce}, {0x0, 0x1, 0x8, 0xa, 0x1ff}, 0x6, 0x80000001, 0x3}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@delchain={0x24, 0x65, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xb, 0x4}, {0xd, 0x7}, {0x7, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x44095) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) 7.238892763s ago: executing program 4 (id=6810): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x1, 0x7}, {0x6, 0x0, 0xfb, 0x6}]}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2203) socket$nl_route(0x10, 0x3, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x0, 0x23, 0x6, &(0x7f0000000080)={0x13, "91240000dba61bf6010cd557c005671fe56af43014f1e11e266e7d73ec00"}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0x9}}}, 0x24}}, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x41100, 0x4f, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x2, 0x1, 0x0, 0x0, 0x0, 0xd5e855c9ff29405c}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000380)) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000000c0)) syz_emit_ethernet(0xef, &(0x7f0000000080)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0xb9, 0x2c, 0x0, @private1, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0xe4}]}}, {"29c3e64618f7bb8def9b1286c21d132e9da49b2e73cc341ed27bb6483e2198092e98a7da38dcc53471e1f2b39326bcc0396462b0cf0f82f2e3f25154eae3863cf99ce1cb289bbf399958f1c29fe4cca7ca90382922a6f17325ce01a5e95f8bd83e554168b5ee846a29a97fb4d2b935c2171abae9a04d174076885ae980b761cc121a42176a2271cf57213972be8870f5a3147d0635ced5e38fcdbaf0ec"}}}}}}}, 0x0) 5.750118928s ago: executing program 4 (id=6816): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000080)=0x1) write(r1, &(0x7f0000000140)='bo', 0x2) syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r2, &(0x7f0000000580)=[{&(0x7f00000006c0)="581a17919cc7749e9438c65fb6", 0xd}], 0x1) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x5, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x4, 0x100000000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x80000000, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 5.158391895s ago: executing program 0 (id=6820): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x57, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x5, 0x2, 0x80, "3ad38eff230c00000000202900000004100000410000000000000300", 0x4f565559}) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@ip_ttl={{0x14, 0x110}}], 0x18, 0x4c00}, 0x810) socket$rxrpc(0x21, 0x2, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x57, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x5, 0x2, 0x80, "3ad38eff230c00000000202900000004100000410000000000000300", 0x4f565559}) (async) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@ip_ttl={{0x14, 0x110}}], 0x18, 0x4c00}, 0x810) (async) 5.103700405s ago: executing program 0 (id=6821): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086e05fe0000000000000109022400010000b00009040000080300000009210000000122460009058103"], 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key$user(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x0, 0x1000}, 0x20) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0xffffffffffffffb6) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x80000000, 0x7, 0x2, {0xa, @sliced={0x1, [0x5, 0x1, 0x7, 0x6, 0x7, 0x3, 0x5, 0x800, 0xfffa, 0x1, 0x9, 0x6, 0x0, 0x101, 0xe7, 0x40, 0x3, 0xfff, 0x4000, 0x7, 0x101, 0x3, 0x4, 0xfffa, 0x9, 0x2, 0x8, 0x6, 0x401, 0xb, 0x1, 0x9, 0x7, 0xd82, 0x5, 0x6, 0x1, 0x7, 0xb2, 0x1, 0xd, 0x4a50, 0xf, 0x111, 0x1, 0x5, 0x4]}}}) ioctl$VIDIOC_QBUF(r5, 0xc058565d, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 4.884201175s ago: executing program 6 (id=6822): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e500000000000000711098000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$char_usb(r1, &(0x7f00000005c0)="fa7f9e1fba2a8b078f653cd5fd6a6e8df9e8f3ae46e6dfbaddb0caa208353bec635e27c14193ccc389988b89ae64f42945edcd875e57cd02dbe683c81dd557523231d4b690d2a4cfb2c0256cb98b43394e88565033719d338fa3d2903911ee09d1098be065bd8403c83ebefb928db3ab17272d41018d122a39f86a3a935a23338483ee38480b460b39f9b22041a50f131acebc4e53d85d316248b0955771d86591", 0xa1) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000005244534b00", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x80000, 0x2000000000001]}}) 4.778562785s ago: executing program 4 (id=6823): ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x50, 0x2, 0x4, {0xb, @pix={0xffff, 0x200, 0x41414770, 0x1, 0x6, 0x3, 0x6, 0x5, 0x0, 0x1, 0x1, 0x4}}, 0x2}) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x521001, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000140)) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000180)={0x7fff}) r1 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x2, 0x2000) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000200)={0xb, @meta={0x4f31434d, 0x5879891, 0x7257, 0x9bdb, 0x72f0e1db}}) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000300)) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000340)={0x1, 0x1, 0xdc1}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000003c0)=0xffffffffffffffff) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000400)=@userptr={0x9, 0xe, 0x4, 0x100000, 0x0, {}, {0x2, 0x0, 0x6, 0x68, 0x4, 0x7, "c56647ad"}, 0x1, 0x2, {&(0x7f0000000380)}, 0xd21b, 0x0, r2}) r3 = syz_open_dev$loop(&(0x7f0000000480), 0x6, 0x420380) ioctl$BLKRRPART(r3, 0x125f, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f00000004c0)={0x4, 0x111, "b6da34a4e36acbe7c50843a86adedbb71080956bd2a99cb8cdf1d3e06e345ced", 0x0, 0x9, 0x9b7}) r4 = syz_open_dev$mouse(&(0x7f0000000540), 0x708, 0x500) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000580)={{0x8000000000000001, 0x3, 0x3ff, 0x1, 0x80000}, 0x8, 0x5, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x3, 0x3, 0xfffffeff}) sendmsg$nl_generic(r4, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x140, 0x3d, 0x300, 0x70bd2c, 0x5, {0x1c}, [@typed={0x4, 0x7}, @nested={0x18, 0x10d, 0x0, 0x1, [@nested={0x4, 0x48}, @nested={0x4, 0x36}, @nested={0x4, 0x36}, @nested={0x4, 0x8d}, @nested={0x4, 0x39}]}, @nested={0x10f, 0x14b, 0x0, 0x1, [@nested={0x4, 0x4e}, @typed={0x8, 0xb2, 0x0, 0x0, @u32=0xfff}, @generic="6c729f7a510242152a5a2f64c85bdec1f8da624cabdc9f076546ae9ceb9ac40256ae53df638c1346d2c3e223d2d69a295c91a05bf161f15e74ff1558412e57d570e4829961bf1ab19511208b551f7941ece82a102adc9852cb627244ff48e7e49effa37efb7a28b190723791c5a7fb36b69ee392c25c0743910b67099aaad4c6bcd9ae4a3f8010e177514c0ebb7a792984ea1ed525cb6b95a620b3459c0db6780e04d51c64a8cb2eda462781b92d6fea9f277f584a6c891cfa313ed6ceb6040aa83243eb58ca0d933f8e", @nested={0x4, 0x148}, @typed={0x14, 0x143, 0x0, 0x0, @ipv6=@remote}, @generic="feb30053197e59de898deed74b504ed30b9e2abf085a4d590ca7fe1ec8"]}]}, 0x140}, 0x1, 0x0, 0x0, 0x80}, 0x24040001) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000880)) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000008c0)={0x0, @multicast1, @multicast1}, &(0x7f0000000900)=0xc) io_setup(0x2, &(0x7f0000000940)) ioctl$BLKDISCARDZEROES(r3, 0x127c, &(0x7f0000000980)) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000009c0), &(0x7f0000000a00)={0x0, 0xfb, 0xe4, 0x0, 0x0, "764cb3e2313af5e6207e8021a49550b5", "a5d732e531ace4dfdfe9c35a6fd964fa97d3adbbcdf6decd2c0cbfe99b54123e315fe894c59f2fef9eb415a786958adf47337de0d15b5072771098a814a77123a49c653eec4e7ea3db46bdce39962ac5a21af584699fd28983ecdd43506c31386e528e487f250b2e3652614d5fbf38fa7d5cb2d662bbcc4cd78ccc80fb0e4eb9aad8a48fb4da3cdd8a7fdba678fbcd85bac7f12afbb70e012c2f3fd635b0b6a3c50d760d2877775612f68de81c61a78818c09599bc9769b3cbffb74aa7c8454214f375e973c418a7799b91798ec555"}, 0xe4, 0x2) syz_ublk_setup_queues(r4, 0x0, &(0x7f0000000b00)={0x0, 0xf17a, 0x8, 0x1, 0x26b}, &(0x7f0000000b80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd299, 0x80, 0x3, 0x4b, 0x0, r4}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xff9e, 0x40, 0x2, 0x112, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4, 0x4000, 0x2, 0x196, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfdd7, 0x2000, 0x1, 0x3e5, 0x0, r4}}], 0x4, &(0x7f0000001e00)={0x2e, 0x41, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x2}, 0x0, 0x0, '\x00', {0x1, 0x30d, 0x0, &(0x7f0000000e00)=@buf_4k="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"}}, &(0x7f0000001e80)=0x0) syz_ublk_process_io(r6, 0x1, 0x1, &(0x7f0000002ec0)=@ublk_io_commit_and_fetch_sqe={0x2e, 0x0, 0x0, r4, 0xc0107521, 0x0, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, '\x00', {0x4, 0x41d, 0x100, &(0x7f0000001ec0)=@buf_512="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"}}, 0x1) fgetxattr(r5, &(0x7f0000002f40)=@random={'osx.', '/dev/loop#\x00'}, &(0x7f0000002f80)=""/229, 0xe5) syz_open_dev$radio(&(0x7f0000003080), 0x1, 0x2) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000030c0), 0x200000, 0x0) ioctl$HIDIOCSUSAGES(r7, 0x501c4814, &(0x7f0000003100)={{0x3, 0xffffffff, 0x9, 0x6, 0x101, 0x5}, 0x1da, [0x4, 0x7f, 0x4, 0xfffffff0, 0x7, 0x1, 0x7c, 0x80, 0x9, 0xff, 0x2658762c, 0x7, 0x2, 0x4, 0x6, 0xd, 0x7, 0x3, 0x1, 0x1ff, 0x1, 0x89d, 0x7, 0xb, 0x8, 0x200, 0x8, 0xee5d, 0x3ff, 0x5, 0xfffffffe, 0x7, 0x1, 0x0, 0x2, 0x10001, 0x4, 0x5, 0x6, 0x3ff, 0x5, 0x1, 0xfff, 0x4, 0xfffffffe, 0x9, 0xa90, 0x3d87, 0x1, 0x3, 0xebc, 0x3, 0x6, 0x8, 0x1, 0x4, 0xfffff57b, 0x3, 0x1, 0xfffff000, 0x5, 0x80, 0x6, 0x1, 0x400, 0x5, 0x0, 0x6, 0x6, 0xfffffff7, 0x9, 0x7, 0xfffffff9, 0x6, 0x5, 0x1ff, 0x1, 0xc34, 0x6, 0x2d, 0xfffffffc, 0xe, 0x1, 0x2, 0x0, 0x2736, 0x80, 0x80000001, 0x101, 0x4, 0x5, 0x6, 0x0, 0x7ff, 0x9, 0xa, 0x5, 0xfffffffa, 0x9, 0x1, 0x2, 0x349, 0x3, 0x1, 0x0, 0x1, 0xff, 0x599, 0x8001, 0x4, 0x1, 0x80000001, 0x10000, 0x1ae7968e, 0x6, 0x2, 0xa, 0x0, 0x3df, 0x7, 0x75b, 0x6, 0x1d3, 0xf1, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x40, 0x401, 0x0, 0x6, 0x2, 0x5750, 0x2, 0x7, 0x0, 0xd, 0x52bfcb5f, 0x3, 0xfffffffc, 0x56, 0x4ef, 0x817, 0x2, 0x7, 0x2d05e866, 0x0, 0x4, 0x5, 0xe92e, 0x7ff, 0xa9, 0x2, 0x1, 0x9, 0x200, 0x200, 0x101, 0x200, 0xd03, 0x8b, 0xa, 0x1, 0x7, 0x7ff, 0x6, 0x2, 0x78, 0x10001, 0x5, 0xfffffffc, 0xc85, 0x3, 0x4, 0xf0f, 0x6, 0x2, 0xe, 0x7fffffff, 0x80000000, 0x5d3bd9d1, 0x9, 0x4, 0x9, 0x4, 0x5, 0x7, 0x4, 0x8, 0xf4d, 0x1000, 0x9, 0x9, 0x2, 0x0, 0x6, 0x10d, 0xed, 0x7, 0x4, 0x7ff, 0x4, 0x0, 0xf, 0x3, 0x0, 0x1000, 0xfffffffe, 0x4, 0x3d, 0x4, 0x10001, 0x3, 0x0, 0x9, 0x12000, 0x290, 0x7fffffff, 0x81, 0x0, 0x7, 0x101, 0x8000, 0x4, 0x991a, 0xd, 0xe98, 0x266, 0x2, 0x7fffffff, 0x7, 0x1000, 0x8, 0xfffffff7, 0x7fffffff, 0x1, 0x1, 0x78ac, 0x3ff, 0x20, 0x9, 0x6, 0x58, 0x3, 0x8, 0x2, 0x3, 0x0, 0x1, 0x7, 0x10000, 0x7, 0x7, 0x3e64ad3f, 0xc8, 0x7, 0x66, 0xc2, 0x0, 0x7, 0xabb, 0x3, 0x5, 0xeb, 0x4, 0x8000, 0x7, 0xb, 0x400, 0x7, 0x0, 0x5, 0xffffff3b, 0x3, 0x800, 0x8, 0x6, 0x0, 0x3, 0x3, 0x19, 0x9d, 0x7, 0x4, 0x0, 0x97d, 0x80000001, 0x2, 0x5f5dc0bf, 0x6, 0x1, 0x8, 0x6, 0xa, 0x8000, 0xeec3, 0x7c9, 0x10, 0xd253f8d, 0x7, 0xde08, 0x81, 0x7cd, 0x3, 0x6, 0x8, 0x1, 0xd96, 0x520, 0x7fff, 0x6, 0x3ff, 0x50, 0xf6e8, 0xb7a, 0xb63, 0x1c, 0x4, 0x2, 0xfff, 0x9, 0x4, 0x8, 0x6, 0xfffffff7, 0x0, 0x3a4, 0x3ff, 0x3, 0x7, 0x4a, 0x0, 0x2, 0x9, 0x9a, 0x7, 0x8, 0xffffffff, 0x6, 0x23, 0x6, 0xa88, 0x0, 0x10000, 0x6, 0x101, 0x1, 0x6e, 0x9, 0xffff, 0x6, 0x9, 0x1, 0x7fffffff, 0xe83, 0xe62, 0x85a, 0x5, 0x9, 0x7fffffff, 0x200, 0x1, 0x0, 0x7, 0xb5fc, 0xfff, 0x3, 0x5952, 0x2, 0x5, 0x4, 0xfffffff7, 0x1, 0xb42, 0x128, 0x7, 0x6, 0x2, 0x1, 0xffff, 0x282, 0x7, 0x4, 0x6, 0x1000000, 0x2, 0x2, 0x136, 0x9, 0x4, 0x9, 0x6, 0xfffff9b7, 0xa1, 0x1, 0x4a27e92d, 0x0, 0x81, 0xffff, 0x0, 0x5, 0x4, 0x6, 0xff, 0x5a8, 0x4, 0x1, 0x2, 0x6, 0x3, 0x3, 0x3, 0xb308, 0x7, 0x0, 0x3, 0x2ba, 0xa3b, 0x800000, 0x1, 0x6, 0x9, 0x7dc, 0x5, 0xc1, 0x7, 0x1, 0x4cb, 0x453, 0xfffffffb, 0x1, 0x6, 0x1000, 0x1000, 0x4, 0x68, 0x2aa7, 0x1, 0x0, 0x20fe, 0xffffff40, 0x800, 0x1, 0x1000, 0x3, 0x2, 0x8, 0x8, 0xc880, 0x81, 0x7, 0x5, 0xbc01, 0x0, 0xbd, 0x6, 0x9, 0x3, 0x40, 0xc302, 0x7, 0x3, 0x3, 0x5, 0xed, 0x3, 0x7fff, 0x36, 0x6, 0x0, 0x6, 0x80, 0x0, 0x7, 0x10001, 0x81, 0x6, 0x88, 0x7, 0x0, 0x8, 0x0, 0x6, 0x7f7cb26a, 0x6, 0x7, 0x5, 0x0, 0xe, 0x2, 0x7, 0x8, 0x7, 0x7, 0x10d, 0x1, 0x3ff, 0xd5, 0x3, 0x2, 0x3, 0x6, 0x7f, 0xe00, 0x4, 0x0, 0xbecb, 0xd, 0x6, 0x4000, 0x19a, 0x6, 0x8fe7, 0x0, 0x9, 0x401, 0x0, 0x80000001, 0x398, 0x10, 0x51a, 0x40, 0x1ff, 0x5, 0x7, 0x4, 0x9c, 0x3, 0x3, 0x1000, 0x9, 0x1c5, 0x80, 0x9, 0x9, 0x101, 0x9, 0x0, 0x6, 0x6, 0x5, 0x3182d734, 0x40, 0x73c, 0x5fd2, 0x7f, 0x7fffffff, 0x1, 0x1a, 0x8f, 0x0, 0x1, 0x9, 0x4, 0x1, 0x7fffffff, 0x7, 0xc04, 0xf0000000, 0x6a, 0x9, 0xa7a, 0x7, 0x0, 0xa, 0xd15e, 0x80000000, 0xb, 0x9, 0x6, 0x7ff, 0x2, 0x1ff, 0xad, 0x1, 0x1ff, 0xe7, 0x8001, 0x44, 0x1000, 0x7, 0x2800, 0x1, 0x5, 0x4, 0x4, 0x40, 0x7fff, 0x6, 0x6486, 0x6, 0x5, 0xc31, 0x4, 0x6, 0x8, 0x1, 0xfff, 0x9, 0x8001, 0x6, 0x81, 0x2, 0x1, 0x7, 0x0, 0x9, 0x0, 0x0, 0xfcc, 0xb, 0xc, 0x400, 0x7fffffff, 0x2, 0x8, 0x7, 0x8, 0x60, 0x8, 0x1, 0x7fffffff, 0x6, 0x1ff, 0x40, 0x2, 0x1, 0xffffffff, 0x1, 0x5, 0x8, 0x55a, 0x87, 0x10, 0x40, 0xe, 0x1, 0x4, 0x401, 0x7, 0x9, 0x4, 0x9, 0x7, 0xfffff4a6, 0x4, 0x101, 0x6, 0x400, 0x5, 0x5, 0x7a48, 0xf88, 0x2, 0x4, 0xffffffff, 0x3dc, 0x7, 0x1, 0x7, 0xff, 0x6, 0x6668, 0x1, 0x4, 0x3, 0xfd, 0x7f, 0x4, 0x0, 0x7, 0x80000001, 0x176d, 0x3ff, 0x6, 0x7, 0x3, 0x2bf, 0x13, 0x0, 0x10000, 0x9, 0x2, 0x5, 0xfffffff7, 0x7, 0x9, 0x6, 0x94f6, 0x2, 0x7f, 0xffffffff, 0x8000, 0x6, 0xd, 0x2, 0x3, 0xd, 0x0, 0x10, 0x100, 0x37, 0x3, 0x3b34b257, 0x8d, 0x9, 0x517cff1f, 0x1, 0xd067, 0x5, 0x3, 0x7, 0x400, 0x5, 0x7, 0x81, 0xfffffffb, 0x100, 0x8, 0x0, 0x5, 0x8, 0x401, 0x8afa, 0x16c81527, 0x401, 0x8, 0x4, 0x9, 0x8001, 0x0, 0x8, 0x3, 0x4, 0x3, 0x6, 0x7, 0x5, 0xffffffff, 0x4, 0x7, 0x7, 0x6, 0xb, 0xf, 0x4, 0x8, 0x1000, 0x1, 0x7, 0x46f6, 0x4, 0xfffffffe, 0x5, 0x7, 0xd, 0x81, 0xfffffffe, 0x6, 0x3, 0x786, 0x4, 0x80000000, 0x1, 0x8695, 0x9f4e, 0x80000001, 0x0, 0x5, 0x5, 0x2, 0x2, 0x9, 0x67, 0x3ff, 0x2, 0x6, 0x0, 0x2, 0x2, 0x9, 0x7fffffff, 0x9, 0xf, 0x7f, 0x7, 0x4, 0x4f03, 0xfff, 0x3f0, 0x2, 0x5, 0x1, 0xce8, 0x33b0, 0x6c, 0xcf67, 0x4b44, 0x4, 0x7fff, 0xe24, 0x1, 0x6, 0x7, 0x7, 0x3, 0x0, 0x8000, 0x9, 0xc03e, 0x4, 0x3, 0xc, 0x5, 0x3, 0xc, 0x0, 0xfffff597, 0xff, 0x0, 0x6, 0x4, 0x2, 0xffff, 0x8001, 0x2, 0x8, 0x0, 0xfffffff9, 0x1744, 0xc15, 0x0, 0x3, 0x5, 0x10, 0xbf440000, 0xc018, 0x9, 0x6, 0x138, 0x200, 0x40, 0x7fffffff, 0x3, 0x4, 0x6, 0x800, 0x8, 0x6, 0xd, 0x2, 0x9, 0xf, 0x8, 0x6, 0x2, 0xfffffff9, 0x2, 0x9, 0x0, 0x5, 0x0, 0xc, 0x2, 0x8, 0x3, 0x16, 0x9, 0x2, 0x2, 0xffff, 0x6, 0x0, 0x9, 0x3, 0x5, 0x9, 0xbed8, 0x4, 0x6, 0x8, 0x101, 0x4, 0x6, 0x5, 0x4, 0x0, 0x6, 0x80000001, 0xc8, 0x0, 0x7, 0x71d, 0x3, 0x0, 0x7ff, 0x7, 0x4, 0x3, 0x8001, 0x7ff, 0xaadac68b, 0x0, 0x1, 0xffffffcb, 0x379, 0x5, 0x9, 0x9b2f, 0x7fff, 0x6, 0x1, 0x80000001, 0x0, 0x3, 0x1000, 0x9, 0x20000, 0x2a60, 0x8c, 0x4, 0x9, 0xffffffff, 0x4, 0x81, 0x1, 0x9, 0xfffffff8, 0xc, 0x8, 0x70aeda2a, 0x7, 0x400, 0x8e95, 0x6, 0x6, 0x7, 0x6, 0x1, 0x80, 0x7fffffff, 0xb3, 0x2, 0x3, 0xf03, 0x80000001, 0x4, 0xffff, 0x4, 0xc, 0x40, 0x7, 0x8001, 0x80, 0xa, 0x3, 0x342044, 0x0, 0x101, 0x2, 0x4, 0xe, 0x8, 0x2, 0x7, 0x1, 0x8, 0xa019, 0x401, 0x5, 0x6, 0x3, 0x50, 0x8, 0x7, 0xfffff5df, 0x900, 0x7, 0x3, 0xffff7fff, 0x7, 0x2, 0x4, 0x9, 0x6, 0x3, 0x5, 0x80000001, 0xffffffff, 0x46c2, 0x101, 0x7b9c, 0x35b, 0xfffffffb, 0x4, 0x10001, 0xe9, 0x6, 0x6, 0xb9a, 0x6, 0x0, 0x7fffffff, 0x1, 0x7fff, 0x8, 0x80, 0xfffff65d, 0x1, 0x8, 0x81, 0x3, 0x1ff, 0x9, 0x9, 0x2, 0x4, 0x4, 0x9, 0xffff8000, 0x3, 0x1]}) ioctl$VT_GETMODE(r7, 0x5601, &(0x7f0000004140)) write$P9_RLERROR(r7, &(0x7f0000004180)={0xd, 0x7, 0x2, {0x4, '\xdd-^/'}}, 0xd) fcntl$getownex(r0, 0x10, &(0x7f00000041c0)) 4.638050168s ago: executing program 6 (id=6824): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001580)=""/4101, 0x1000}, {&(0x7f0000003140)=""/4096}], 0x61, 0x0, 0x0, 0x7fffe000}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xfffffffffffffd70, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010012000000000000000000000a20000000000a03000000000000000400070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000215c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c006c80080003400000000220000b801c"], 0xe0}}, 0x0) 4.452688442s ago: executing program 4 (id=6825): socket$inet6(0xa, 0x3, 0x20000a0e) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') ioctl$XFS_IOC_AG_GEOMETRY(r2, 0xc080583d, &(0x7f0000001240)={0x3, 0x1, 0x231e65b7, 0x9, 0x2, 0x3ff, 0x7, 0x89}) preadv(r2, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x73, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x8) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4c011}, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = syz_open_dev$dri(&(0x7f0000001340), 0x8, 0x800) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f0000001380)={0xfff, 0xffffffff, 0x1, 0x43, 0x1b, 0x7ff}) accept(r0, &(0x7f0000000100)=@l2={0x1f, 0x0, @none}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$bt_hci(r5, 0x0, 0x1, 0x0, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000015c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r7, 0x7df2, 0x7721, 0x16, 0x0, 0x0) 4.348836041s ago: executing program 6 (id=6826): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0xa600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0xa2, 0x5, 0x0, 0x0, @adapter={0x3, 0x8, 0x8, 0x3, 0xee}}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="18e346cd6b00000000040000ac000000181100005e881fc4f9c221287c4816867d98a89f4c80a89fe408f86c6d903fc52eba4a3e789b2374371bb472a9d07407d880b4010e869ff0183c2a0afa3fb42e69b582cdfdf4508a6ec9a60369a56b32bfaee2e18c742de3dd82d4237fd07dab6f2e3b63bda6e67c99bc4b1154e5a74c10ae8fd5c8ea14821ff598", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000057000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x22, &(0x7f0000001840)=""/4085}, 0x94) 4.274087352s ago: executing program 4 (id=6827): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_usb_connect$uac1(0x5, 0xa6, &(0x7f00000000c0)=ANY=[], 0x0) unshare(0x6020400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) listns(&(0x7f0000000580)={0x20, 0x0, 0x2, 0x44000000, 0x0, 0xffffffffffffffff}, &(0x7f0000001fc0)=[0x0], 0x1, 0x0) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102) 4.095159386s ago: executing program 1 (id=6828): r0 = syz_usb_connect$uac2(0x5, 0x8d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x31b2, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x3, 0x1, 0xd, 0x30, 0x3, {0x8, 0xb, 0x0, 0x1, 0x1, 0x0, 0x20, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0xb, 0x15}, [@output_terminal={0xc, 0x24, 0x3, 0x3, 0x506, 0xda, 0x4, 0xfc, 0xbd, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x9, 0x3, 0x3, {0x8, 0x25, 0x1, 0x3, 0x3c, 0x80, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xa, 0x8, 0x6, {0x8, 0x25, 0x1, 0x80, 0x0, 0xfc, 0x7}}}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x0, 0x4000ffc, 0x46}, 0x2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r4 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x6a, 0x2, 0x0, &(0x7f00000000c0)=0xfffffffffffffd27) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) accept4$unix(r4, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e, 0xc0800) r5 = syz_usb_connect$rtl8150(0x4, 0x0, 0x0, 0x0) syz_usb_control_io$rtl8150(r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000000500000000dc01000700000000000000", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) syz_usb_connect$uac2(0x1, 0x7b, &(0x7f0000004f80)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x644, 0x800f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xff, 0x10, 0x2, {0x8, 0xb, 0x1, 0x1, 0x1, 0x1, 0x20, 0x58}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xfff8, 0x1, 0x9, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0x0, 0x7, {0x8, 0x25, 0x1, 0x2, 0x33, 0xfe, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xf9, 0x6, 0x69, {0x8, 0x25, 0x1, 0x0, 0xc, 0xd8, 0xffff}}}}}}}}]}}, 0x0) 4.030444025s ago: executing program 6 (id=6829): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_open_dev$loop(0x0, 0xffff, 0x180) (async) syz_open_dev$loop(0x0, 0xffff, 0x180) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000340), 0x12) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x805, 0x0) (async) r3 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000240), 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r6 = getgid() ioctl$TUNSETGROUP(r5, 0x400454ce, r6) (async) ioctl$TUNSETGROUP(r5, 0x400454ce, r6) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000380)={r4, 0x1}, 0x8) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) r8 = fsmount(0xffffffffffffffff, 0x1, 0x8) ioctl$VIDIOC_G_CTRL(r8, 0xc008561b, &(0x7f0000000040)={0x9, 0x40}) (async) ioctl$VIDIOC_G_CTRL(r8, 0xc008561b, &(0x7f0000000040)={0x9, 0x40}) close_range(r7, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\a']) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000000080)={0x50, 0x0, r10, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) 3.481372207s ago: executing program 6 (id=6830): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010300ff000040720501cb6526010203010902120001000000000904"], 0x0) 3.308861418s ago: executing program 5 (id=6831): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r0, &(0x7f0000000100)=""/134, 0x86) getdents64(r0, 0x0, 0x0) getdents(r0, &(0x7f0000000340)=""/151, 0x97) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}, 0x1c) r2 = syz_io_uring_setup(0xf03, &(0x7f0000000480)={0x0, 0x595f, 0x400, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) getdents64(r0, 0x0, 0x48) close(r0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x81, 0x540000, r7}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000800)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0xfc}, 0x0, 0x0, 0x0, 0x100, 0xfd, 0x180107, r7}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r10}) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) fcntl$getown(r11, 0x9) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) getgroups(0x7, &(0x7f0000000140)=[0xffffffffffffffff, 0xee01, 0xee00, 0xee00, 0xee01, 0x0, 0xee00]) 3.205873918s ago: executing program 5 (id=6832): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x8000, 0x220100) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) (async) landlock_restrict_self(r2, 0x0) (async) r4 = syz_pidfd_open(r1, 0x0) r5 = pidfd_getfd(r4, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)=0x7194) (async, rerun: 64) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) (rerun: 64) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r8, 0x0, 0x0, 0x1}) syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000840600000000000095"], &(0x7f0000000200)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r10 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000086a051300000000000001090224000100009008090400fcdf03000300092181000c1422280009058103400003c10073b6e6470b00dff125f71ad779b1fb0369fc6dc57620d16326e316eb3d96108149f9d5017a965a40f95cc17382f4dee7fc9049841130a062d8f3b8dc4ef2161a11d8799a68a4a1e58988d169f62d94e64610c4f92754e2ca64e3ce26c6f73313dc156fea13e60386beca2b8aa7078fc55b3cd7b0f51ca53190c3"], 0x0) (rerun: 64) syz_usb_control_io$hid(r10, 0x0, 0x0) (async) syz_emit_ethernet(0xf9, &(0x7f00000003c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @multicast, @val={@val, {0x8100, 0x3}}, {@generic={0x6000, "5149f76483fa7bdf47b8acfb9af477647247249643e5fc0a587dcf682e8bb54f451fedf70964ff43f455eaada510fd88cc1f952289dd5877adc429675858b0af67c4421316ebc6a25537c1e8c64132b25086c4072af9000fa9c3ff869e411ec5d8f26499ae814800009ba23c4c4ca7bc873c1b9bf9b760587ba5fe177e8c30602979463c4ca2e675830b5bb807e5dbf017d23a64501a4ad9853985cf6fbfce4b52a6c27e8e88e91f706bf05e6c6e0ed5f310b2360677c9c049c17c57854ce87f0de58287e1af588b6ae5255c3326d01b13cbd37fe319d16f9f40bb58c9f816d20e2fb3"}}}, &(0x7f00000001c0)={0x1, 0x1, [0x590, 0x5e6, 0xed0, 0x267]}) (async) syz_usb_control_io(r10, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="20082b0000002b21c263138526792c3cbdeace918d0fb74237cc6e446c4e88e78883"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000a00)={0x70, 0x7, r8, 0x0, 0xfffffffffffffffc, 0x1000}) (async) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f00000001c0)={0x48, 0x8, r9, 0x0, 0x3, 0x2, &(0x7f00000002c0)='N\a'}) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r12, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r13, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) (async) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@initdev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f00000005c0)=0xe8) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000700)={'tunl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x1, 0x90, 0x2, 0xf, {{0x36, 0x4, 0x0, 0x1f, 0xd8, 0x66, 0x0, 0x7, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x1c, 0x9b, 0x3, 0xa, [{@multicast1, 0x7fff}, {@rand_addr=0x64010100, 0x9}, {@multicast2, 0x80000000}]}, @lsrr={0x83, 0x13, 0xf9, [@multicast1, @multicast1, @multicast1, @empty]}, @rr={0x7, 0x1b, 0x4d, [@broadcast, @loopback, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x3b}, @loopback]}, @noop, @lsrr={0x83, 0x27, 0xdb, [@multicast2, @multicast2, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @remote, @local, @rand_addr=0x1, @multicast2]}, @generic={0xc52429ea1e9c55e5, 0x12, "72923840fc2ea09a575b64a22d657728"}, @end, @timestamp_prespec={0x44, 0x3c, 0x44, 0x3, 0x2, [{@broadcast, 0xd18}, {@multicast1, 0x20}, {@broadcast, 0xfffffffc}, {@local, 0x8ca}, {@local, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@loopback, 0x3}]}]}}}}}) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@delpolicy={0x5c, 0x14, 0x611, 0x70bd2b, 0x25dfdbfe, {{@in6=@private2, @in=@multicast1, 0x4e22, 0x401, 0x4e24, 0x2, 0xa, 0xa0, 0x0, 0x33, r13, r14}, 0x6e6bb3, 0x2}, [@offload={0xc, 0x1c, {r15, 0x2}}]}, 0x5c}}, 0x0) (async) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000100)={0x2, 0x101, 0x8, {0x5, 0xfff, 0x5}}) (async) fsmount(r5, 0x1, 0x74) 3.150066255s ago: executing program 5 (id=6833): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000080)=0x1) write(r1, &(0x7f0000000140)='bo', 0x2) syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x5, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x4, 0x100000000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x80000000, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 2.270490298s ago: executing program 5 (id=6834): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, &(0x7f0000000040)={0x2, 0x6, 0x40, 0x9, '\x00', 0x400003f}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) readv(r1, &(0x7f0000001380)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f00000013c0)={0x2, 0x0, [{0x4, 0x9, 0x2, 0x5, 0x4, 0x798, 0x80000001}, {0x40000001, 0x3, 0x4, 0x4, 0x6, 0x7, 0x5}]}) syz_usb_connect(0x6, 0x2fb, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x2, 0x1, 0x1000b0a7}, 0x1c) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0), 0x400000000000181, 0x20004050) syz_usb_connect$cdc_ecm(0x1, 0x57, &(0x7f0000001080)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x2, 0x40, 0x8, "", [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0xf, {{0x6, 0x24, 0x6, 0x0, 0x0, "f1"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xff, 0xf89c, 0x37}}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x2, 0xcc}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x5, 0xf5, 0xf7}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xf8, 0x9, 0x8}}}}}]}}]}}, &(0x7f0000001380)={0xa, &(0x7f0000001100)={0xa, 0x6, 0x0, 0x0, 0x7, 0x80, 0x8, 0x40}, 0x56, &(0x7f0000001140)={0x5, 0xf, 0x56, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x5, 0xadc}, @ss_container_id={0x14, 0x10, 0x4, 0xe, "03a4e294da1f452ee1ef164814b6a29b"}, @ssp_cap={0x18, 0x10, 0xa, 0xfb, 0x3, 0x0, 0xf00, 0x8001, [0xc0ff, 0xff00ff, 0xff3ff0]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "c08328452ef64135960f990a878baf71"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x4, 0xc, 0x7}]}, 0x2, [{0x93, &(0x7f00000011c0)=@string={0x93, 0x3, "b65078d2050cd2fd4a40213de97b331f639394e322e6a4ca53e425e410348f6567f3554b1a5399cd71a43b6d4588f2827cc54cfb54fc129e56f8f1ee10f5971aae4be15dc5b2110843554840841b7bc71faaebcd407e7728db0b10ebdc8a763d9975959416ac89410f2085755291f5eaee66f2198d5fc49dfed07c568ff5e16575ce41efee7b96c96a3fe47046ccb0f7df"}}, {0xd8, &(0x7f0000001280)=@string={0xd8, 0x3, "356bbcdb8015b6487442da5a208901e94f2ade74006ac448d7b0d48f1c06405ef5373a8c04697c8d8e39b2d631127edef3e511d323d54ac6ca28a48df2ddd3103dcc16fdf4a2cfb262f7d7c9487623670c56a777d3f78499280bc6d3d7dd0c47eb590795649beae2033a2847b5210af4a09f9e79a7124b5f80af87a82e605f32b65847c3f35f6b1bec23902597975f8bbaa0fee65e00ba2440e8e336aaf8821ccbcab1877071bbd05b7c1b7bfa2337650cfa971b837d03f167fa995901d1b4aee49b06f071cbe3b6f38af09d5fbb82c005bc9b53b0a1"}}]}) 2.036630354s ago: executing program 0 (id=6835): ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x0, 0x0, 0xd, 0x0, 0x8c, "ff0000001a5fbf61048955f6f8ead1ff", 0x1, 0x0, 0xfc}) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0) unshare(0x20000400) flock(0xffffffffffffffff, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x5, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x10, 0x8}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x700}) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) r7 = socket$kcm(0x2, 0x5, 0x2) sendmsg$inet(r7, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x4048080) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r9 = getpid() sched_setscheduler(r9, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.641844733s ago: executing program 0 (id=6836): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd3d00ffdbdf25030000000c00018008000100", @ANYRES32=r3, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20009805}, 0x40040c0) 1.635861751s ago: executing program 0 (id=6837): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet6(0xa, 0x1, 0x100) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x2}}, 0x100, 0x0, 0xffffffff, 0x0, 0x54}, 0x9c) 1.17526481s ago: executing program 4 (id=6838): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) ppoll(&(0x7f0000000140)=[{r2, 0x8024}], 0x1, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 970.511015ms ago: executing program 1 (id=6839): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001b0000000000ffffff3f00005f0600000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) 870.363456ms ago: executing program 1 (id=6840): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x0, 0x1, 0xb57, 0x1ff, {{0x9, 0x4, 0x1, 0x1, 0x24, 0x65, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010100, @loopback, {[@lsrr={0x83, 0x7, 0xd9, [@rand_addr=0x64010102]}, @ssrr={0x89, 0x7, 0xc7, [@empty]}]}}}}}) (rerun: 64) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') writev(r3, &(0x7f00000002c0)=[{0x0, 0x2b}, {&(0x7f0000000080)='-', 0x1}], 0x2) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x20, &(0x7f0000000000)=@raw=[@ldst={0x33ef0afd05313a4, 0x2, 0x3, 0x1, 0x2, 0x50, 0x8}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @generic={0x6f, 0x5, 0x8, 0x7, 0xbf2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x30}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x1d, &(0x7f0000000140)=""/29, 0x41100, 0x24, '\x00', r1, 0x18, r2, 0x8, &(0x7f00000002c0)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x1c5ac, r3, 0x1, &(0x7f0000000300)=[r0, r0], &(0x7f0000000340)=[{0x0, 0x2, 0xc, 0xc}], 0x10, 0xc49}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x11, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ffffc}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x57}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@map_fd={0x18, 0x6, 0x1, 0x0, r0}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5d}}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) 817.973435ms ago: executing program 1 (id=6841): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000480008d0a7bd7000fedbdf250a001000", @ANYRES32=r2, @ANYBLOB="5508000014000100fc00000000000000000000000000000114000100fe80000000000000000000000000002714000100fe800000000000000000000000000043080002000400000014000100fc02000000000000000000000000000108000200040000001400010020010000000000000000000000000001"], 0x90}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000002) 729.521698ms ago: executing program 1 (id=6842): unshare(0xe040400) socket$rds(0x15, 0x5, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x1}, &(0x7f0000000300)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42040, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2, 0x3, 0x6) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0xa0017, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x6e20, @multicast1}, 0x10) listen(r4, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r5, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) lseek(r0, 0xfffffffffffffff9, 0x2) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) 638.521482ms ago: executing program 0 (id=6843): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) pipe2$9p(0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xff, 0x8000000000000000, 0x1) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904000001070000090905", @ANYRES64=r2], 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x37) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r3, 0xc018aec0, &(0x7f00000000c0)={0x1}) r4 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) ioctl$VIDIOC_S_CROP(r4, 0x4014563c, &(0x7f00000000c0)={0x1, {0x9, 0x8bb, 0xc4f, 0x870}}) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000002c0)={0xef, 0x9, 0x1, "341144cd9831d91b97ea55fe4ff60577ef28a516eb877aee6e096585f9db3aec", 0x30324c4a}) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000140)={0x2, 0x10001, 0x0, 0x3, 0x2, 0x0, [{0x0, 0x2, 0x3}, {0x7fffffffffffffff, 0x5, 0x3, '\x00', 0x1000}]}) pselect6(0x40, &(0x7f0000000100)={0x932, 0x9, 0x0, 0x80000001, 0x0, 0x4, 0x6}, 0x0, &(0x7f0000000240)={0x1e, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0xa, 0x6c}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 376.123032ms ago: executing program 6 (id=6844): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000080)=0x1) write(r1, &(0x7f0000000140)='bo', 0x2) syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x5, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x4, 0x100000000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x80000000, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 0s ago: executing program 1 (id=6845): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086e05fe0000000000000109022400010000b00009040000080300000009210000000122460009058103"], 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key$user(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x0, 0x1000}, 0x20) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0xffffffffffffffb6) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x80000000, 0x7, 0x2, {0xa, @sliced={0x1, [0x5, 0x1, 0x7, 0x6, 0x7, 0x3, 0x5, 0x800, 0xfffa, 0x1, 0x9, 0x6, 0x0, 0x101, 0xe7, 0x40, 0x3, 0xfff, 0x4000, 0x7, 0x101, 0x3, 0x4, 0xfffa, 0x9, 0x2, 0x8, 0x6, 0x401, 0xb, 0x1, 0x9, 0x7, 0xd82, 0x5, 0x6, 0x1, 0x7, 0xb2, 0x1, 0xd, 0x4a50, 0xf, 0x111, 0x1, 0x5, 0x4]}}}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) kernel console output (not intermixed with test programs): idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1719.766250][T20383] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.777585][T20383] usb 1-1: Product: syz [ 1719.782079][T20383] usb 1-1: Manufacturer: syz [ 1719.788912][T20383] usb 1-1: SerialNumber: syz [ 1719.859976][T29316] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1720.227968][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1720.369656][T29323] loop2: detected capacity change from 0 to 7 [ 1720.383325][T29323] loop2: p1 [ 1720.387223][T29323] loop2: partition table partially beyond EOD, truncated [ 1720.394547][T29323] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 1720.412499][T29323] fuse: Unknown parameter '000000000000000000000040x0000000000000004' [ 1720.415947][T20383] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 1720.445411][T20383] cdc_ncm 1-1:1.0: bind() failure [ 1720.453149][T29294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1720.470157][T20383] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1720.478567][T29294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1720.491960][T20383] cdc_ncm 1-1:1.1: bind() failure [ 1720.536539][T29325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1720.549417][T29325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1720.578550][T29325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1720.589777][T24563] udevd[24563]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1720.602479][T29325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1721.224637][T29329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1721.234871][T29329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1721.254200][T29329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6451'. [ 1721.268017][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1721.572862][T29336] loop5: detected capacity change from 0 to 7 [ 1721.581340][T29336] Dev loop5: unable to read RDB block 7 [ 1721.587725][T29336] loop5: unable to read partition table [ 1721.593915][T29336] loop5: partition table beyond EOD, truncated [ 1721.600381][T29336] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1721.909936][T17600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1722.068093][T20430] Bluetooth: hci5: command 0x0406 tx timeout [ 1722.197619][T29350] tipc: New replicast peer: 255.255.255.255 [ 1722.226333][T20430] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1722.228348][T29350] tipc: Enabled bearer , priority 10 [ 1722.255410][T20430] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1722.268427][T20430] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1722.308508][T20430] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1722.319236][T20430] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1722.344893][ T42] usb 1-1: USB disconnect, device number 71 [ 1722.548994][T13913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1722.888408][T19291] usbhid 6-1:0.0: can't add hid device: -32 [ 1722.920326][T19291] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 1722.948052][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1723.331973][ T42] usb 5-1: USB disconnect, device number 12 [ 1723.587982][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1723.617690][T29355] bridge0: port 1(bridge_slave_0) entered blocking state [ 1723.635571][T29355] bridge0: port 1(bridge_slave_0) entered disabled state [ 1723.658315][T29355] bridge_slave_0: entered allmulticast mode [ 1723.677464][T29355] bridge_slave_0: entered promiscuous mode [ 1723.704574][T29355] bridge0: port 2(bridge_slave_1) entered blocking state [ 1723.730317][T29355] bridge0: port 2(bridge_slave_1) entered disabled state [ 1723.751344][T29355] bridge_slave_1: entered allmulticast mode [ 1723.764253][T29355] bridge_slave_1: entered promiscuous mode [ 1723.833858][T29355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1723.872127][T29355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1723.982792][T29355] team0: Port device team_slave_0 added [ 1723.988194][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.000481][T29355] team0: Port device team_slave_1 added [ 1724.052907][T29355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1724.068809][T29355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1724.096655][T29355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1724.111075][T29355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1724.120282][T29355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1724.149653][T29355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1724.234675][T29355] hsr_slave_0: entered promiscuous mode [ 1724.254580][T29355] hsr_slave_1: entered promiscuous mode [ 1724.273104][T29355] debugfs: 'hsr0' already exists in 'hsr' [ 1724.279408][T29355] Cannot create hsr debugfs directory [ 1724.390422][T20430] Bluetooth: hci1: command tx timeout [ 1724.534617][T29376] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6463'. [ 1724.628032][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.770488][T29355] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1724.784116][T29355] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.819195][T29355] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 37671 - 0 [ 1724.891415][T29381] loop5: detected capacity change from 0 to 7 [ 1724.898674][T29381] Dev loop5: unable to read RDB block 7 [ 1724.904273][T29381] loop5: unable to read partition table [ 1724.911747][T29381] loop5: partition table beyond EOD, truncated [ 1724.918037][T29381] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1725.055738][T29355] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1725.078216][T29355] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1725.100774][T29355] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 37671 - 0 [ 1725.129509][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1725.212119][T19291] usb 6-1: USB disconnect, device number 47 [ 1725.336999][T29355] netdevsim netdevsim4 netdevsim1 (unregistering): left promiscuous mode [ 1725.348790][T29355] team0: Port device netdevsim1 removed [ 1725.364254][T29355] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1725.374943][T29355] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1725.386169][T29355] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 37671 - 0 [ 1725.497030][T29355] netdevsim netdevsim4  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1725.506983][T29355] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1725.519152][T29355] netdevsim netdevsim4  (unregistering): unset [1, 1] type 2 family 0 port 37671 - 0 [ 1725.896118][T29355] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1725.906119][T29355] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1725.917758][T29355] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1725.936970][T29355] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1725.947979][T29355] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1725.960754][T29355] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1725.969475][T29355] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1725.985967][T29355] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1726.008472][T13913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1726.126741][T29355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1726.148067][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1726.152428][T29355] 8021q: adding VLAN 0 to HW filter on device team0 [ 1726.170716][T13913] bridge0: port 1(bridge_slave_0) entered blocking state [ 1726.177908][T13913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1726.204267][T13913] bridge0: port 2(bridge_slave_1) entered blocking state [ 1726.211512][T13913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1726.311181][T29355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1726.367362][T29355] veth0_vlan: entered promiscuous mode [ 1726.383919][T29355] veth1_vlan: entered promiscuous mode [ 1726.426244][T29355] veth0_macvtap: entered promiscuous mode [ 1726.439187][T19291] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1726.447544][T29355] veth1_macvtap: entered promiscuous mode [ 1726.468426][T20430] Bluetooth: hci1: command tx timeout [ 1726.479436][T29355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1726.496285][T29355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1726.515711][T13914] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.562120][T13914] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.574215][T13914] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.585946][T13914] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.620735][T19291] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 1726.629815][T19291] usb 6-1: config 1 has no interface number 0 [ 1726.655194][T19291] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1726.703656][T19291] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 8 [ 1726.833651][T13914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1726.846746][T13914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1726.876134][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 1726.876150][ T29] audit: type=1326 audit(1782819005.842:12928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29413 comm="syz.6.6474" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01afb9ce59 code=0x0 [ 1726.901360][T13914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1726.928969][T13914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1726.940563][T19291] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1726.952845][T19291] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.962914][T19291] usb 6-1: Product: syz [ 1726.976835][T19291] usb 6-1: Manufacturer: syz [ 1726.988353][T19291] usb 6-1: SerialNumber: syz [ 1726.998197][T29408] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1727.005654][T29408] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1727.028177][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.188215][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.408017][ T42] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1727.557991][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 1727.567260][ T42] usb 5-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 1727.576743][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.585215][ T42] usb 5-1: Product: syz [ 1727.591530][ T42] usb 5-1: Manufacturer: syz [ 1727.601293][ T42] usb 5-1: SerialNumber: syz [ 1727.608596][ T42] usb 5-1: config 0 descriptor?? [ 1727.619060][ T42] usb 5-1: selecting invalid altsetting 1 [ 1727.625127][ T42] technisat-usb2: could not set alternate setting to 0 [ 1727.819653][ T29] audit: type=1804 audit(1782819006.782:12929): pid=29424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.6476" name="/newroot/183/file0" dev="fuse" ino=1 res=1 errno=0 [ 1727.869213][ T29] audit: type=1804 audit(1782819006.842:12930): pid=29424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6476" name="/newroot/183/file0" dev="fuse" ino=1 res=1 errno=0 [ 1727.891145][ T42] technisat-usb2: firmware version: 0.0 [ 1727.896932][ T42] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 1728.067953][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1728.299956][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1728.311677][ T42] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 1728.320986][ T42] usb 5-1: media controller created [ 1728.326290][ T42] technisat-usb2: i2c-error: out failed 53 = -22 [ 1728.332879][ T42] dvb-usb: MAC address reading failed. [ 1728.350465][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1728.403306][ T42] DVB: Unable to find symbol stv090x_attach() [ 1728.499708][ T42] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 1728.548902][T20430] Bluetooth: hci1: command tx timeout [ 1728.558048][ T42] rc_core: IR keymap rc-technisat-usb2 not found [ 1728.564446][ T42] Registered IR keymap rc-empty [ 1728.573686][ T42] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 1728.586011][ T42] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input170 [ 1728.603161][ T42] dvb-usb: schedule remote query interval to 100 msecs. [ 1728.837132][T29443] netlink: 'syz.0.6481': attribute type 5 has an invalid length. [ 1729.120316][ T42] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 1729.120378][T29421] technisat-usb2: i2c-error: out failed 00 = -22 [ 1729.167180][T27789] dvb-usb: error -32 while querying for an remote control event. [ 1729.220072][T19291] usb 6-1: Error in usbnet_get_endpoints (-71) [ 1729.252729][T19291] usb 6-1: USB disconnect, device number 48 [ 1729.281846][T27789] dvb-usb: error -32 while querying for an remote control event. [ 1729.328367][T13914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1729.408844][T27789] dvb-usb: error -32 while querying for an remote control event. [ 1729.509577][T17600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1729.535340][ T42] dvb-usb: error -32 while querying for an remote control event. [ 1729.648380][ T42] dvb-usb: error -32 while querying for an remote control event. [ 1729.683272][ T8837] usb 5-1: USB disconnect, device number 13 [ 1729.780832][ T8837] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 1729.794831][T29465] loop5: detected capacity change from 0 to 7 [ 1729.807758][T29465] Dev loop5: unable to read RDB block 7 [ 1729.815288][T29465] loop5: unable to read partition table [ 1729.822584][T29465] loop5: partition table beyond EOD, truncated [ 1729.829529][T29465] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1729.889763][T27789] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 1730.049617][T27789] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1730.060043][T27789] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1730.071292][T27789] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1730.082240][T27789] usb 6-1: config 1 interface 1 has no altsetting 0 [ 1730.092502][T27789] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1730.101814][T27789] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.110061][T27789] usb 6-1: Product: syz [ 1730.114238][T27789] usb 6-1: Manufacturer: syz [ 1730.120792][T27789] usb 6-1: SerialNumber: syz [ 1730.128679][T29461] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1730.137310][T27789] cdc_mbim 6-1:1.0: skipping garbage [ 1730.144863][T27789] usb 6-1: selecting invalid altsetting 1 [ 1730.150966][T27789] usb 6-1: selecting invalid altsetting 0 [ 1730.156721][T27789] usb 6-1: selecting invalid altsetting 0 [ 1730.162759][T27789] cdc_mbim 6-1:1.0: bind() failure [ 1730.170771][T27789] usb 6-1: selecting invalid altsetting 0 [ 1730.176531][T27789] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -22 [ 1730.178944][ T8837] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1730.184857][T27789] usb 6-1: selecting invalid altsetting 0 [ 1730.198774][T27789] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -22 [ 1730.207461][T27789] usb 6-1: selecting invalid altsetting 0 [ 1730.213359][T27789] usbtest 6-1:1.1: probe with driver usbtest failed with error -22 [ 1730.233366][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.239828][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.338166][ T8837] usb 5-1: Using ep0 maxpacket: 16 [ 1730.347570][ T8837] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 1730.357411][ T8837] usb 5-1: config 0 has no interface number 0 [ 1730.365242][ T8837] usb 5-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 1730.378369][ T8837] usb 5-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9 [ 1730.390304][ T8837] usb 5-1: config 0 interface 49 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1730.398022][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1730.402929][ T8837] usb 5-1: config 0 interface 49 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0 [ 1730.425233][ T8837] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1730.436574][ T8837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.445506][ T8837] usb 5-1: Product: syz [ 1730.450126][ T8837] usb 5-1: Manufacturer: syz [ 1730.454769][ T8837] usb 5-1: SerialNumber: syz [ 1730.464054][ T8837] usb 5-1: config 0 descriptor?? [ 1730.472924][T29469] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1730.506645][ T42] usb 6-1: USB disconnect, device number 49 [ 1730.548094][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1730.628099][T20430] Bluetooth: hci1: command tx timeout [ 1731.427939][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1731.588138][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1731.786838][T29488] bridge_slave_0: left allmulticast mode [ 1731.817908][T29488] bridge_slave_0: left promiscuous mode [ 1731.832488][T29488] bridge0: port 1(bridge_slave_0) entered disabled state [ 1731.875756][ T8837] qcserial 5-1:0.49: Qualcomm USB modem converter detected [ 1731.906380][ T29] audit: type=1326 audit(1782819010.872:12931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29494 comm="syz.6.6496" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f01afb9ce59 code=0x0 [ 1731.907272][T29488] bond0: (slave bond_slave_0): Releasing backup interface [ 1731.945014][ T8837] usb 5-1: USB disconnect, device number 14 [ 1731.956354][ T8837] qcserial 5-1:0.49: device disconnected [ 1732.120336][T29488] bond0: (slave bond_slave_1): Releasing backup interface [ 1732.131844][T29488] team0: Port device team_slave_0 removed [ 1732.140600][T29488] team0: Port device team_slave_1 removed [ 1732.146846][T29488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1732.166649][T29488] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1732.261469][T27789] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1732.400030][T27789] usb 6-1: device descriptor read/64, error -71 [ 1732.425095][T29506] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6500'. [ 1732.448048][ T42] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1732.452223][T29506] bridge_slave_0: left allmulticast mode [ 1732.461348][T29506] bridge_slave_0: left promiscuous mode [ 1732.467040][T29506] bridge0: port 1(bridge_slave_0) entered disabled state [ 1732.483789][T29506] bridge_slave_1: left allmulticast mode [ 1732.490873][T29506] bridge_slave_1: left promiscuous mode [ 1732.497009][T29506] bridge0: port 2(bridge_slave_1) entered disabled state [ 1732.510844][T19291] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1732.530879][T29506] bond0: (slave bond_slave_0): Releasing backup interface [ 1732.551695][T29506] bond0: (slave bond_slave_1): Releasing backup interface [ 1732.576025][T29506] team0: Port device team_slave_0 removed [ 1732.588308][ T42] usb 5-1: device descriptor read/64, error -71 [ 1732.601780][T29506] team0: Port device team_slave_1 removed [ 1732.618733][T29506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1732.629848][T29506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1732.639010][T29506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1732.647186][T29506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1732.658579][T29506] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1732.675512][T19291] usb 1-1: Using ep0 maxpacket: 16 [ 1732.676068][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1732.687562][T19291] usb 1-1: config 1 has an invalid descriptor of length 117, skipping remainder of the config [ 1732.701144][T19291] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1732.712795][T19291] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1732.722402][T19291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.731053][T19291] usb 1-1: Product: syz [ 1732.735417][T19291] usb 1-1: Manufacturer: syz [ 1732.741725][T19291] usb 1-1: SerialNumber: syz [ 1732.798444][T23010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1732.808075][T19291] usb 1-1: 0:2 : does not exist [ 1732.837957][ T42] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1732.983257][T19291] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1732.993726][ T42] usb 5-1: device descriptor read/64, error -71 [ 1733.019777][T19291] usb 1-1: USB disconnect, device number 72 [ 1733.045303][T24563] udevd[24563]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1733.098501][T29519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1733.113720][ T42] usb usb5-port1: attempt power cycle [ 1733.120318][T29519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1733.467941][ T42] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1733.488663][ T42] usb 5-1: device descriptor read/8, error -71 [ 1733.498411][T27789] usb usb6-port1: Cannot enable. Maybe the USB cable is bad? [ 1733.511079][T27789] usb usb6-port1: attempt power cycle [ 1733.728308][ T42] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1733.747974][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.757426][ T42] usb 5-1: device descriptor read/8, error -71 [ 1733.828094][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.848260][T27789] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1733.868596][ T42] usb usb5-port1: unable to enumerate USB device [ 1733.875583][T27789] usb 6-1: Using ep0 maxpacket: 32 [ 1733.882816][T27789] usb 6-1: config 1 has an invalid descriptor of length 198, skipping remainder of the config [ 1733.893372][T27789] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1733.904140][T27789] usb 6-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 1733.913431][T27789] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.921502][T27789] usb 6-1: Product: syz [ 1733.925658][T27789] usb 6-1: Manufacturer: syz [ 1733.930366][T27789] usb 6-1: SerialNumber: syz [ 1733.938069][ T8837] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1734.099731][ T8837] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1734.110793][ T8837] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1734.120721][ T8837] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1734.130117][ T8837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.141016][ T8837] usb 1-1: config 0 descriptor?? [ 1734.162344][T27789] usb 6-1: 0:1 : does not exist [ 1734.167301][T27789] usb 6-1: unit 1 not found! [ 1734.173148][T27789] usb 6-1: unit 8 not found! [ 1734.218628][T27789] usb 6-1: USB disconnect, device number 52 [ 1734.255277][T24601] udevd[24601]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1734.552151][ T8837] cp2112 0003:10C4:EA90.0083: unknown main item tag 0x0 [ 1734.559410][ T8837] cp2112 0003:10C4:EA90.0083: unknown main item tag 0x0 [ 1734.566429][ T8837] cp2112 0003:10C4:EA90.0083: unknown main item tag 0x0 [ 1734.573715][ T8837] cp2112 0003:10C4:EA90.0083: unknown main item tag 0x0 [ 1734.580756][ T8837] cp2112 0003:10C4:EA90.0083: unknown main item tag 0x0 [ 1734.587694][ T8837] cp2112 0003:10C4:EA90.0083: unknown main item tag 0x0 [ 1734.595471][ T8837] cp2112 0003:10C4:EA90.0083: unknown main item tag 0x0 [ 1734.604427][ T8837] cp2112 0003:10C4:EA90.0083: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1734.750772][ T8837] cp2112 0003:10C4:EA90.0083: Part Number: 0x00 Device Version: 0x00 [ 1734.788012][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1734.868021][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1735.042748][T29540] FAULT_INJECTION: forcing a failure. [ 1735.042748][T29540] name failslab, interval 1, probability 0, space 0, times 0 [ 1735.056121][T29540] CPU: 0 UID: 0 PID: 29540 Comm: syz.4.6510 Tainted: G L syzkaller #0 PREEMPT(full) [ 1735.056151][T29540] Tainted: [L]=SOFTLOCKUP [ 1735.056158][T29540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1735.056170][T29540] Call Trace: [ 1735.056178][T29540] [ 1735.056186][T29540] dump_stack_lvl+0xe8/0x150 [ 1735.056216][T29540] should_fail_ex+0x40c/0x560 [ 1735.056252][T29540] should_failslab+0xa8/0x100 [ 1735.056276][T29540] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1735.056303][T29540] ? local_lock_release+0x9c/0x160 [ 1735.056327][T29540] ? __alloc_skb+0x1d7/0x7a0 [ 1735.056347][T29540] ? __alloc_skb+0x1d7/0x7a0 [ 1735.056374][T29540] __alloc_skb+0x1d7/0x7a0 [ 1735.056400][T29540] netlink_sendmsg+0x5d4/0xb40 [ 1735.056434][T29540] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1735.056464][T29540] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1735.056496][T29540] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1735.056521][T29540] sock_sendmsg_nosec+0x13a/0x180 [ 1735.056553][T29540] ____sys_sendmsg+0x54e/0x850 [ 1735.056583][T29540] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1735.056616][T29540] ? import_iovec+0x73/0xa0 [ 1735.056644][T29540] ___sys_sendmsg+0x2a5/0x360 [ 1735.056667][T29540] ? __lock_acquire+0x683/0x2cf0 [ 1735.056691][T29540] ? __pfx____sys_sendmsg+0x10/0x10 [ 1735.056748][T29540] ? __fget_files+0x2a/0x420 [ 1735.056766][T29540] ? __fget_files+0x3a2/0x420 [ 1735.056794][T29540] __x64_sys_sendmsg+0x1b1/0x290 [ 1735.056821][T29540] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1735.056862][T29540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1735.056884][T29540] do_syscall_64+0x174/0x580 [ 1735.056906][T29540] ? trace_irq_disable+0x3b/0x140 [ 1735.056935][T29540] ? clear_bhb_loop+0x40/0x90 [ 1735.056958][T29540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1735.056985][T29540] RIP: 0033:0x7fd72db9ce59 [ 1735.057003][T29540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1735.057020][T29540] RSP: 002b:00007fd72eade028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1735.057041][T29540] RAX: ffffffffffffffda RBX: 00007fd72de15fa0 RCX: 00007fd72db9ce59 [ 1735.057056][T29540] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1735.057069][T29540] RBP: 00007fd72eade090 R08: 0000000000000000 R09: 0000000000000000 [ 1735.057081][T29540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1735.057093][T29540] R13: 00007fd72de16038 R14: 00007fd72de15fa0 R15: 00007fd72df3fa48 [ 1735.057123][T29540] [ 1735.507793][ T8837] cp2112 0003:10C4:EA90.0083: error reading lock byte: 0 [ 1735.789886][ T8837] usb 1-1: reset high-speed USB device number 73 using dummy_hcd [ 1735.815018][T29558] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1735.832947][T29541] netlink: 'syz.0.6507': attribute type 11 has an invalid length. [ 1735.853714][T29561] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6515'. [ 1735.865025][T29541] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6507'. [ 1736.290731][T13913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1736.643642][T17615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1737.348134][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1737.382877][T29590] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6524'. [ 1737.668104][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1737.757957][ T8837] usb 1-1: device descriptor read/64, error -71 [ 1738.009178][ T8837] usb 1-1: reset high-speed USB device number 73 using dummy_hcd [ 1738.170183][ T8837] usb 1-1: device firmware changed [ 1738.193628][T19291] usb 1-1: USB disconnect, device number 73 [ 1738.388156][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.448198][T19291] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1738.600278][T19291] usb 1-1: config 0 has an invalid interface number: 33 but max is 0 [ 1738.609736][T19291] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1738.620261][T19291] usb 1-1: config 0 has no interface number 0 [ 1738.626545][T19291] usb 1-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1738.638530][T19291] usb 1-1: config 0 interface 33 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1738.654388][T19291] usb 1-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64 [ 1738.663984][T19291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.672315][T19291] usb 1-1: Product: syz [ 1738.676685][T19291] usb 1-1: Manufacturer: syz [ 1738.681562][T19291] usb 1-1: SerialNumber: syz [ 1738.689976][T19291] usb 1-1: config 0 descriptor?? [ 1738.695811][T29593] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1738.706402][T19291] hdpvr 1-1:0.33: Could not find bulk-in endpoint [ 1738.713181][T19291] hdpvr 1-1:0.33: probe with driver hdpvr failed with error -12 [ 1738.718093][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.923851][T29593] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1738.997972][ T42] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1739.149791][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1739.161255][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1739.172396][ T42] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1739.181917][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.195077][ T42] usb 6-1: config 0 descriptor?? [ 1739.317971][ T5688] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1739.448027][ T5688] usb 5-1: device descriptor read/64, error -71 [ 1739.678334][T17615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1739.687963][ T5688] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1739.817990][ T5688] usb 5-1: device descriptor read/64, error -71 [ 1739.928545][ T5688] usb usb5-port1: attempt power cycle [ 1740.268062][ T5688] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1740.288598][ T5688] usb 5-1: device descriptor read/8, error -71 [ 1740.324687][ T42] usbhid 6-1:0.0: can't add hid device: -71 [ 1740.343291][ T42] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1740.377110][ T42] usb 6-1: USB disconnect, device number 53 [ 1740.419684][T19291] usb 1-1: USB disconnect, device number 74 [ 1740.476096][T13913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1740.548083][ T5688] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1740.576476][T29619] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6536'. [ 1740.587947][ T5688] usb 5-1: device descriptor read/8, error -71 [ 1740.707939][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1740.708262][ T5688] usb usb5-port1: unable to enumerate USB device [ 1740.783043][T29624] netlink: 211984 bytes leftover after parsing attributes in process `syz.0.6537'. [ 1740.793940][T29624] openvswitch: netlink: Message has 512 unknown bytes. [ 1740.810530][T29624] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1741.518238][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1741.705069][T29632] loop2: detected capacity change from 0 to 7 [ 1741.713703][T29632] loop2: p1 [ 1741.717052][T29632] loop2: partition table partially beyond EOD, truncated [ 1741.725819][T29632] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 1741.738257][T29632] fuse: Unknown parameter '000000000000000000000040x0000000000000004' [ 1741.748818][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1741.784437][T24563] udevd[24563]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1742.023198][T29638] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6542'. [ 1742.043962][T29636] netlink: 165 bytes leftover after parsing attributes in process `syz.5.6538'. [ 1742.161967][T29642] loop5: detected capacity change from 0 to 7 [ 1742.173696][T29642] Dev loop5: unable to read RDB block 7 [ 1742.184091][T29642] loop5: unable to read partition table [ 1742.194155][T29642] loop5: partition table beyond EOD, truncated [ 1742.203809][T29642] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1742.308296][T19291] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1742.509737][T19291] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1742.535330][T19291] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1742.544968][T19291] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1742.553350][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1742.563794][T19291] usb 6-1: Product: syz [ 1742.568457][T19291] usb 6-1: Manufacturer: syz [ 1742.571458][ T42] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 1742.574015][T19291] usb 6-1: SerialNumber: syz [ 1742.750571][ T42] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1742.758629][ T42] usb 5-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 1742.771921][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1742.785271][ T42] usb 5-1: config 0 descriptor?? [ 1742.827435][T19291] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 54 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1743.058261][T17615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.081897][T29653] netlink: 'syz.0.6548': attribute type 46 has an invalid length. [ 1743.090034][T29653] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6548'. [ 1743.211865][ T42] pantherlord 0003:0F30:0111.0084: ignoring exceeding usage max [ 1743.232238][ T42] pantherlord 0003:0F30:0111.0084: hidraw0: USB HID v0.81 Device [HID 0f30:0111] on usb-dummy_hcd.4-1/input0 [ 1743.253401][ T42] pantherlord 0003:0F30:0111.0084: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula [ 1743.410267][ T42] usb 5-1: USB disconnect, device number 23 [ 1743.678294][T13913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.964009][T29659] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6550'. [ 1744.077935][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1744.121805][T29663] loop2: detected capacity change from 0 to 7 [ 1744.129213][T29663] loop2: p1 [ 1744.132457][T29663] loop2: partition table partially beyond EOD, truncated [ 1744.140264][T29663] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 1744.150707][T29663] fuse: Unknown parameter '000000000000000000000040x0000000000000004' [ 1744.205733][T24563] udevd[24563]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1744.241589][T29665] netlink: 'syz.4.6552': attribute type 8 has an invalid length. [ 1744.471968][T29669] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6554'. [ 1744.708052][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1744.820462][ T42] usb 6-1: USB disconnect, device number 54 [ 1744.829350][ T42] usblp0: removed [ 1744.896535][T29674] loop5: detected capacity change from 0 to 7 [ 1744.904048][T29674] Dev loop5: unable to read RDB block 7 [ 1744.910116][T29674] loop5: unable to read partition table [ 1744.915949][T29674] loop5: partition table beyond EOD, truncated [ 1744.932125][T29674] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1745.013176][T29676] x_tables: duplicate underflow at hook 2 [ 1745.108038][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.414011][T29691] loop2: detected capacity change from 0 to 7 [ 1745.421854][T29691] loop2: p1 [ 1745.425122][T29691] loop2: partition table partially beyond EOD, truncated [ 1745.434196][T29691] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 1745.448236][T29691] fuse: Unknown parameter '000000000000000000000040x0000000000000004' [ 1745.473774][T24563] udevd[24563]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1745.602490][T29694] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6563'. [ 1745.611693][ T8837] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1745.620329][T29694] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 1745.626828][T29694] PKCS7: Only support pkcs7_signedData type [ 1745.658591][T29694] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1745.748086][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.787884][ T8837] usb 5-1: Using ep0 maxpacket: 32 [ 1745.795230][ T8837] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1745.805031][ T8837] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1745.814090][ T8837] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1745.825576][ T8837] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1745.834891][ T8837] usb 5-1: config 1 has no interface number 0 [ 1745.841373][ T8837] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1745.850788][ T8837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1745.868640][ T8837] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1746.066378][ T8837] snd_usb_pod 5-1:1.1: set_interface failed [ 1746.073321][ T8837] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1746.085243][ T8837] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1746.096053][ T8837] usb 5-1: USB disconnect, device number 24 [ 1746.419818][T29705] loop5: detected capacity change from 0 to 7 [ 1746.426677][T29705] Dev loop5: unable to read RDB block 7 [ 1746.432426][T29705] loop5: unable to read partition table [ 1746.438836][T29705] loop5: partition table beyond EOD, truncated [ 1746.446626][T17600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1746.446952][T29705] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1746.497996][ T42] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 1746.531690][T29707] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1746.661801][ T42] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 1746.670108][ T42] usb 1-1: config 0 has no interface number 0 [ 1746.676865][ T42] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1746.688323][ T42] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1746.700236][ T42] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1746.711802][ T42] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1746.720004][ T42] usb 1-1: Manufacturer: syz [ 1746.724619][ T42] usb 1-1: SerialNumber: syz [ 1746.731869][ T42] usb 1-1: config 0 descriptor?? [ 1746.743914][ T29] audit: type=1804 audit(1782819025.712:12932): pid=29710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.6569" name="/newroot/21/file0" dev="fuse" ino=1 res=1 errno=0 [ 1746.796325][ T29] audit: type=1804 audit(1782819025.762:12933): pid=29712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.6569" name="/newroot/21/file0" dev="fuse" ino=1 res=1 errno=0 [ 1747.108557][ T8837] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1747.128005][ T5703] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1747.270250][ T8837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1747.277930][ T5703] usb 5-1: Using ep0 maxpacket: 8 [ 1747.282338][ T8837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1747.288814][ T5703] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1747.297388][ T8837] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1747.308460][ T5703] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1747.321988][ T8837] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1747.330803][ T5703] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1747.339928][ T8837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.361042][ T5703] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1747.373450][ T8837] usb 6-1: config 0 descriptor?? [ 1747.379736][ T29] audit: type=1326 audit(1782819026.352:12934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29700 comm="syz.0.6565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5baf9ce59 code=0x7ffc0000 [ 1747.381811][T29701] program syz.0.6565 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1747.405416][ T29] audit: type=1326 audit(1782819026.352:12935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29700 comm="syz.0.6565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5baf9ce59 code=0x7ffc0000 [ 1747.422912][ T5703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.443864][ T29] audit: type=1326 audit(1782819026.352:12936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29700 comm="syz.0.6565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fe5baf9ce59 code=0x7ffc0000 [ 1747.474860][T29719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1747.484993][T29719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1747.485728][ T5703] usb 5-1: config 0 descriptor?? [ 1747.493188][ T29] audit: type=1326 audit(1782819026.352:12937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29700 comm="syz.0.6565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5baf9ce59 code=0x7ffc0000 [ 1747.523308][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1747.533090][T23010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1747.542479][ T29] audit: type=1326 audit(1782819026.352:12938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29700 comm="syz.0.6565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5baf9ce59 code=0x7ffc0000 [ 1747.583844][ T42] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1747.590318][ T29] audit: type=1326 audit(1782819026.352:12939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29700 comm="syz.0.6565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe5baf5d68e code=0x7ffc0000 [ 1747.608404][ T42] usb 1-1: USB disconnect, device number 75 [ 1747.663762][ T29] audit: type=1326 audit(1782819026.352:12940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29700 comm="syz.0.6565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5baf9ce59 code=0x7ffc0000 [ 1747.692565][ T29] audit: type=1326 audit(1782819026.352:12941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29700 comm="syz.0.6565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5baf9ce59 code=0x7ffc0000 [ 1747.724091][T29721] loop2: detected capacity change from 0 to 7 [ 1747.732176][T29721] loop2: p1 [ 1747.735459][T29721] loop2: partition table partially beyond EOD, truncated [ 1747.743635][T29721] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 1747.758537][T29721] fuse: Unknown parameter '000000000000000000000040x0000000000000004' [ 1747.813693][T24563] udevd[24563]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1747.927478][T29725] qrtr: Invalid version 0 [ 1747.947446][T29725] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6574'. [ 1747.963686][T29725] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6574'. [ 1748.391038][ T8837] steelseries 0003:1038:1410.0085: unknown main item tag 0x1 [ 1748.408268][ T8837] steelseries 0003:1038:1410.0085: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 1748.545002][T29734] loop5: detected capacity change from 0 to 7 [ 1748.555883][T29734] Dev loop5: unable to read RDB block 7 [ 1748.558057][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.569801][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.602106][T29734] loop5: unable to read partition table [ 1748.618911][T29734] loop5: partition table beyond EOD, truncated [ 1748.631299][T29737] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1748.642210][T29734] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1748.655512][T29737] batman_adv: batadv0: Adding interface: gretap1 [ 1748.663752][T29737] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1748.753756][T29737] batman_adv: batadv0: Interface activated: gretap1 [ 1749.148758][T29728] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1749.455660][T29752] loop2: detected capacity change from 0 to 7 [ 1749.473684][T29752] loop2: p1 [ 1749.485391][T29752] loop2: partition table partially beyond EOD, truncated [ 1749.511581][T29753] fuse: Unknown parameter '000000000000000000000040x0000000000000004' [ 1749.516102][T29752] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 1749.572074][T29755] netdevsim netdevsim0: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 1749.588368][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1749.653702][T24563] udevd[24563]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1749.833128][T17615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1749.838098][T15078] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1749.866267][T29767] loop5: detected capacity change from 0 to 7 [ 1749.873444][T29767] Dev loop5: unable to read RDB block 7 [ 1749.879778][T29767] loop5: unable to read partition table [ 1749.885659][T29767] loop5: partition table beyond EOD, truncated [ 1749.892985][T29767] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1749.992425][T29769] trusted_key: encrypted_key: insufficient parameters specified [ 1750.003844][T15078] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1750.014166][T15078] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 1750.023225][T15078] usb 1-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1750.034415][T15078] usb 1-1: config 129 has no interface number 0 [ 1750.041237][T15078] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1750.056691][T15078] usb 1-1: config 129 interface 135 has no altsetting 0 [ 1750.069493][T15078] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1750.082454][T15078] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.092537][T15078] usb 1-1: Product: syz [ 1750.098387][T15078] usb 1-1: Manufacturer: syz [ 1750.105179][T15078] usb 1-1: SerialNumber: syz [ 1750.155958][ T5703] usbhid 5-1:0.0: can't add hid device: -71 [ 1750.178137][ T5703] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1750.207654][ T5703] usb 5-1: USB disconnect, device number 25 [ 1750.377522][T27789] usb 6-1: USB disconnect, device number 55 [ 1750.462060][T15078] usb 1-1: USB disconnect, device number 76 [ 1750.688804][T29781] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6595'. [ 1750.754251][T29782] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6595'. [ 1750.858637][T15078] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1750.868155][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1751.009992][T15078] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1751.021134][T15078] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1751.031573][T15078] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1751.040885][T15078] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1751.051729][T15078] usb 1-1: config 0 descriptor?? [ 1751.658115][T27789] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1751.788126][T27789] usb 5-1: device descriptor read/64, error -71 [ 1751.808159][T29793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1751.818106][T29793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1751.908142][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1752.001265][T17615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1752.027992][T27789] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1752.158831][T27789] usb 5-1: device descriptor read/64, error -71 [ 1752.268251][T27789] usb usb5-port1: attempt power cycle [ 1752.608328][T27789] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1752.640518][T27789] usb 5-1: device descriptor read/8, error -71 [ 1752.802497][T29795] fuse: Unknown parameter '000000000000000000000040x0000000000000004' [ 1752.879467][T27789] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1752.908709][T27789] usb 5-1: device descriptor read/8, error -71 [ 1753.018555][T27789] usb usb5-port1: unable to enumerate USB device [ 1753.028230][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.228231][T17615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.569608][T15078] hid-led 0003:27B8:01ED.0086: probe with driver hid-led failed with error -71 [ 1753.590202][T15078] usb 1-1: USB disconnect, device number 77 [ 1753.853127][T29803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1753.861914][T29803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1754.050851][T29803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1754.068255][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1754.090846][T29803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1754.139002][T15078] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1754.253437][T13914] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1754.262743][T13914] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1754.272322][T13914] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1754.282098][T13914] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1754.305448][T15078] usb 1-1: Using ep0 maxpacket: 8 [ 1754.310758][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1754.319426][T27789] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1754.355740][T15078] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1754.391386][T15078] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1754.401654][T15078] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1754.419567][T15078] usb 1-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1754.435350][T15078] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1754.456610][T15078] usb 1-1: config 0 descriptor?? [ 1754.497954][T27789] usb 6-1: Using ep0 maxpacket: 8 [ 1754.512589][T27789] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1754.529276][T27789] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1754.547688][T27789] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1754.562486][T27789] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1754.575875][T27789] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1754.585290][T27789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1754.944129][T27789] usb 6-1: GET_CAPABILITIES returned 0 [ 1754.969697][T27789] usbtmc 6-1:16.0: can't read capabilities [ 1755.347974][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.427290][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1755.532674][T29834] FAULT_INJECTION: forcing a failure. [ 1755.532674][T29834] name failslab, interval 1, probability 0, space 0, times 0 [ 1755.546258][T29834] CPU: 1 UID: 0 PID: 29834 Comm: syz.4.6608 Tainted: G L syzkaller #0 PREEMPT(full) [ 1755.546277][T29834] Tainted: [L]=SOFTLOCKUP [ 1755.546281][T29834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1755.546288][T29834] Call Trace: [ 1755.546293][T29834] [ 1755.546298][T29834] dump_stack_lvl+0xe8/0x150 [ 1755.546318][T29834] should_fail_ex+0x40c/0x560 [ 1755.546341][T29834] should_failslab+0xa8/0x100 [ 1755.546356][T29834] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1755.546375][T29834] ? skb_clone+0x212/0x3a0 [ 1755.546392][T29834] ? skb_clone+0x212/0x3a0 [ 1755.546409][T29834] skb_clone+0x212/0x3a0 [ 1755.546425][T29834] __netlink_deliver_tap+0x413/0x860 [ 1755.546447][T29834] ? netlink_deliver_tap+0x2e/0x1b0 [ 1755.546465][T29834] netlink_deliver_tap+0x19c/0x1b0 [ 1755.546480][T29834] netlink_sendskb+0x68/0x140 [ 1755.546494][T29834] nfnetlink_rcv+0x260c/0x28c0 [ 1755.546591][T29834] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1755.546612][T29834] ? ref_tracker_free+0x689/0x830 [ 1755.546637][T29834] ? lockdep_hardirqs_on+0x7a/0x110 [ 1755.546652][T29834] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1755.546663][T29834] ? rcu_preempt_deferred_qs_irqrestore+0x7b7/0xb90 [ 1755.546691][T29834] netlink_unicast+0x7bb/0x940 [ 1755.546710][T29834] netlink_sendmsg+0x813/0xb40 [ 1755.546729][T29834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1755.546746][T29834] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1755.546767][T29834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1755.546781][T29834] sock_sendmsg_nosec+0x13a/0x180 [ 1755.546801][T29834] ____sys_sendmsg+0x54e/0x850 [ 1755.546817][T29834] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1755.546836][T29834] ? import_iovec+0x73/0xa0 [ 1755.546852][T29834] ___sys_sendmsg+0x2a5/0x360 [ 1755.546865][T29834] ? __lock_acquire+0x683/0x2cf0 [ 1755.546878][T29834] ? __pfx____sys_sendmsg+0x10/0x10 [ 1755.546909][T29834] ? __fget_files+0x2a/0x420 [ 1755.546926][T29834] ? __fget_files+0x3a2/0x420 [ 1755.546960][T29834] __x64_sys_sendmsg+0x1b1/0x290 [ 1755.546977][T29834] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1755.547000][T29834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1755.547012][T29834] do_syscall_64+0x174/0x580 [ 1755.547025][T29834] ? trace_irq_disable+0x3b/0x140 [ 1755.547043][T29834] ? clear_bhb_loop+0x40/0x90 [ 1755.547056][T29834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1755.547067][T29834] RIP: 0033:0x7fd72db9ce59 [ 1755.547078][T29834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1755.547088][T29834] RSP: 002b:00007fd72eade028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1755.547100][T29834] RAX: ffffffffffffffda RBX: 00007fd72de15fa0 RCX: 00007fd72db9ce59 [ 1755.547108][T29834] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1755.547114][T29834] RBP: 00007fd72eade090 R08: 0000000000000000 R09: 0000000000000000 [ 1755.547121][T29834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1755.547127][T29834] R13: 00007fd72de16038 R14: 00007fd72de15fa0 R15: 00007fd72df3fa48 [ 1755.547143][T29834] [ 1755.854348][T27859] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1755.869791][T27859] dvb_usb_az6027 2-1:9.17: probe with driver dvb_usb_az6027 failed with error -110 [ 1755.884318][T13914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.899113][T27859] dvb-usb: found a 'Technisat SkyStar USB 2 HD CI' in cold state, will try to load a firmware [ 1755.910248][T27859] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1755.919354][T27859] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1756.026006][T29838] loop2: detected capacity change from 0 to 7 [ 1756.076248][T29838] loop2: p1 [ 1756.083497][T29840] fuse: Unknown parameter '000000000000000000000040x0000000000000004' [ 1756.101476][T29838] loop2: partition table partially beyond EOD, truncated [ 1756.123739][T29838] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 1756.256825][T24563] udevd[24563]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1756.376484][T29835] syzkaller1: entered promiscuous mode [ 1756.558120][T27789] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 1756.725055][T27789] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1756.737525][T27789] usb 5-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1756.750366][T27789] usb 5-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1756.779196][T27789] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1756.790289][T27789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1756.798855][T27789] usb 5-1: SerialNumber: syz [ 1756.878359][T23010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1756.948122][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1756.989544][T15078] usbhid 1-1:0.0: can't add hid device: -71 [ 1757.015965][T15078] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1757.054440][T15078] usb 1-1: USB disconnect, device number 78 [ 1757.099368][T29816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1757.120889][T29816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1757.280497][T27789] rndis_host 5-1:253.0: RNDIS init failed, -71 [ 1757.299216][T27789] rndis_host 5-1:253.0: probe with driver rndis_host failed with error -71 [ 1757.332174][T27789] usb 5-1: USB disconnect, device number 30 [ 1757.350924][T29835] syzkaller1: entered allmulticast mode [ 1757.461557][T15078] IPVS: starting estimator thread 0... [ 1757.467377][T29816] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6604'. [ 1757.548519][T29860] IPVS: using max 33 ests per chain, 79200 per kthread [ 1757.907946][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1757.988063][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1758.009407][T29868] netlink: 'syz.4.6620': attribute type 5 has an invalid length. [ 1758.218395][T29875] FAULT_INJECTION: forcing a failure. [ 1758.218395][T29875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1758.270325][T29875] CPU: 1 UID: 0 PID: 29875 Comm: syz.0.6621 Tainted: G L syzkaller #0 PREEMPT(full) [ 1758.270352][T29875] Tainted: [L]=SOFTLOCKUP [ 1758.270356][T29875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1758.270363][T29875] Call Trace: [ 1758.270368][T29875] [ 1758.270373][T29875] dump_stack_lvl+0xe8/0x150 [ 1758.270393][T29875] should_fail_ex+0x40c/0x560 [ 1758.270414][T29875] _copy_from_user+0x2d/0xb0 [ 1758.270429][T29875] kstrtouint_from_user+0xd6/0x180 [ 1758.270511][T29875] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1758.270532][T29875] proc_fail_nth_write+0x8e/0x210 [ 1758.270545][T29875] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1758.270561][T29875] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1758.270571][T29875] vfs_write+0x296/0xba0 [ 1758.270589][T29875] ? __pfx_vfs_write+0x10/0x10 [ 1758.270602][T29875] ? __fget_files+0x2a/0x420 [ 1758.270615][T29875] ? __fget_files+0x3a2/0x420 [ 1758.270625][T29875] ? __fget_files+0x2a/0x420 [ 1758.270640][T29875] ksys_write+0x150/0x270 [ 1758.270654][T29875] ? __pfx_ksys_write+0x10/0x10 [ 1758.270671][T29875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1758.270683][T29875] do_syscall_64+0x174/0x580 [ 1758.270697][T29875] ? trace_irq_disable+0x3b/0x140 [ 1758.270714][T29875] ? clear_bhb_loop+0x40/0x90 [ 1758.270727][T29875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1758.270738][T29875] RIP: 0033:0x7fe5baf5d68e [ 1758.270749][T29875] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1758.270759][T29875] RSP: 002b:00007fe5bbe9dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1758.270773][T29875] RAX: ffffffffffffffda RBX: 00007fe5bbe9e6c0 RCX: 00007fe5baf5d68e [ 1758.270780][T29875] RDX: 0000000000000001 RSI: 00007fe5bbe9e0a0 RDI: 0000000000000004 [ 1758.270787][T29875] RBP: 00007fe5bbe9e090 R08: 0000000000000000 R09: 0000000000000000 [ 1758.270793][T29875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1758.270799][T29875] R13: 00007fe5bb216038 R14: 00007fe5bb215fa0 R15: 00007fe5bb33fa48 [ 1758.270815][T29875] [ 1758.628162][T29880] loop2: detected capacity change from 0 to 7 [ 1758.644834][T29880] loop2: p1 [ 1758.648751][T29880] loop2: partition table partially beyond EOD, truncated [ 1758.664026][T29880] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 1758.686642][T29883] fuse: Unknown parameter '000000000000000000000040x0000000000000004' [ 1758.947975][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1759.272891][T19291] usb 6-1: USB disconnect, device number 56 [ 1759.463366][T29900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6630'. [ 1759.516084][T29900] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6630'. [ 1759.534297][T29901] netlink: 'syz.5.6628': attribute type 10 has an invalid length. [ 1759.617934][ T8837] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1759.774480][T29906] loop4: detected capacity change from 0 to 2640 [ 1759.783066][ T8837] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1759.793148][ T8837] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1759.802216][ T8837] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1759.805159][T24563] buffer_io_error: 8 callbacks suppressed [ 1759.805175][T24563] Buffer I/O error on dev loop4, logical block 0, async page read [ 1759.811578][ T8837] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1759.811603][ T8837] usb 5-1: Product: syz [ 1759.811617][ T8837] usb 5-1: Manufacturer: syz [ 1759.820001][T24563] Buffer I/O error on dev loop4, logical block 0, async page read [ 1759.825863][ T8837] usb 5-1: SerialNumber: syz [ 1759.834678][T24563] Buffer I/O error on dev loop4, logical block 0, async page read [ 1759.860187][ T8837] usb 5-1: config 0 descriptor?? [ 1759.863751][T24563] Buffer I/O error on dev loop4, logical block 0, async page read [ 1759.878439][T24563] Buffer I/O error on dev loop4, logical block 0, async page read [ 1759.891208][ T8837] usb 5-1: selecting invalid altsetting 0 [ 1759.954907][T29906] Buffer I/O error on dev loop4, logical block 0, async page read [ 1759.979266][T29906] Buffer I/O error on dev loop4, logical block 0, async page read [ 1759.991948][T29906] Buffer I/O error on dev loop4, logical block 0, async page read [ 1760.002040][T29906] Buffer I/O error on dev loop4, logical block 0, async page read [ 1760.029214][T29906] Buffer I/O error on dev loop4, logical block 0, async page read [ 1760.040721][T29906] ldm_validate_partition_table(): Disk read failed. [ 1760.047701][T29906] Dev loop4: unable to read RDB block 0 [ 1760.054073][T29906] loop4: unable to read partition table [ 1760.060339][T29906] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 1760.103630][T27789] usb 5-1: USB disconnect, device number 31 [ 1760.428700][T13912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1760.565095][ T4993] ldm_validate_partition_table(): Disk read failed. [ 1760.572383][ T4993] Dev loop4: unable to read RDB block 0 [ 1760.578628][ T4993] loop4: unable to read partition table [ 1760.888076][T27789] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1760.935746][T29912] fuse: fd is not a fuse device [ 1761.039665][T27789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1761.050810][T27789] usb 5-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 1761.060349][T27789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1761.070195][T27789] usb 5-1: config 0 descriptor?? [ 1761.218038][ T8837] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1761.286882][T29918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1761.301047][T27789] ortek 0003:05A4:2000.0087: unknown main item tag 0x0 [ 1761.308865][T29918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1761.316674][T27789] ortek 0003:05A4:2000.0087: unknown main item tag 0x0 [ 1761.324524][T27789] ortek 0003:05A4:2000.0087: unknown main item tag 0x0 [ 1761.331806][T27789] ortek 0003:05A4:2000.0087: unknown main item tag 0x0 [ 1761.338895][T27789] ortek 0003:05A4:2000.0087: unknown main item tag 0x0 [ 1761.345773][T27789] ortek 0003:05A4:2000.0087: unknown main item tag 0x0 [ 1761.354519][T27789] ortek 0003:05A4:2000.0087: unknown main item tag 0x0 [ 1761.361476][T27789] ortek 0003:05A4:2000.0087: unknown main item tag 0x0 [ 1761.368848][T27789] ortek 0003:05A4:2000.0087: unknown main item tag 0x0 [ 1761.375774][T27789] ortek 0003:05A4:2000.0087: unknown main item tag 0x0 [ 1761.384245][ T8837] usb 6-1: config 46 has no interfaces? [ 1761.384892][T27789] ortek 0003:05A4:2000.0087: collection stack underflow [ 1761.391101][ T8837] usb 6-1: New USB device found, idVendor=0bed, idProduct=0100, bcdDevice= 0.00 [ 1761.397014][T27789] ortek 0003:05A4:2000.0087: item 0 0 0 12 parsing failed [ 1761.406580][ T8837] usb 6-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 1761.414425][T27789] ortek 0003:05A4:2000.0087: probe with driver ortek failed with error -22 [ 1761.424225][ T8837] usb 6-1: Manufacturer: syz [ 1761.485408][T27789] usb 5-1: USB disconnect, device number 32 [ 1761.507966][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1761.589106][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1762.547949][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1762.628032][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1762.720877][T29944] tipc: Started in network mode [ 1762.728469][T29944] tipc: Node identity e23579485619, cluster identity 4711 [ 1762.736391][T29944] tipc: Enabled bearer , priority 0 [ 1762.744408][T29946] tipc: Enabling of bearer rejected, already enabled [ 1762.756913][T29941] syzkaller0: entered promiscuous mode [ 1762.773531][T29941] syzkaller0: entered allmulticast mode [ 1762.796352][T29941] tipc: Resetting bearer [ 1762.814771][T29940] tipc: Resetting bearer [ 1762.880044][T29940] tipc: Disabling bearer [ 1762.988088][T27789] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1763.021498][T29948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6643'. [ 1763.031930][T29948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6643'. [ 1763.137947][T27789] usb 5-1: Using ep0 maxpacket: 16 [ 1763.158182][T27789] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1763.176598][T27789] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 233, changing to 7 [ 1763.203288][T27789] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 240, changing to 7 [ 1763.215879][T19291] IPVS: starting estimator thread 0... [ 1763.248449][T27789] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1600, setting to 1024 [ 1763.307966][T29952] IPVS: using max 35 ests per chain, 84000 per kthread [ 1763.318667][T27789] usb 5-1: language id specifier not provided by device, defaulting to English [ 1763.349692][T27789] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1763.388000][T27789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1763.423939][T27789] usb 5-1: Product: syz [ 1763.464800][T27789] usb 5-1: Manufacturer: ⯉褮恤ဤ烔᜞ꅰ넺猳Ⅼ몭Ѣ鏍￣츏Ṟ薹ਅ쉜ƛ⹏슌뿅듲 [ 1763.498108][T27789] usb 5-1: SerialNumber: syz [ 1763.668209][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.738507][T13913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1764.006650][T29957] loop5: detected capacity change from 0 to 7 [ 1764.016256][T27789] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 1764.043730][T29957] Dev loop5: unable to read RDB block 7 [ 1764.062404][T29957] loop5: unable to read partition table [ 1764.062495][ C0] operation not supported error, dev loop5, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 2 [ 1764.096898][T29957] loop5: partition table beyond EOD, truncated [ 1764.111953][T29957] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1764.146041][T19291] usb 6-1: USB disconnect, device number 57 [ 1764.192776][T27789] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1764.304940][T27789] usb 5-1: USB disconnect, device number 33 [ 1764.383971][T24563] udevd[24563]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1764.577955][ T8837] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1764.730353][ T8837] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1764.741726][ T8837] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1764.752416][ T8837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1764.760907][T19291] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1764.772605][ T8837] usb 1-1: config 0 descriptor?? [ 1764.788036][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1764.907927][T19291] usb 6-1: device descriptor read/64, error -71 [ 1765.065643][ T8837] usb 1-1: USB disconnect, device number 79 [ 1765.148013][T19291] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1765.288055][T19291] usb 6-1: device descriptor read/64, error -71 [ 1765.408319][T19291] usb usb6-port1: attempt power cycle [ 1765.508161][ T8837] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1765.660659][ T8837] usb 1-1: device descriptor read/64, error -71 [ 1765.759222][T19291] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1765.808734][T19291] usb 6-1: device descriptor read/8, error -71 [ 1765.827947][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1765.872215][T29982] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1765.908471][ T8837] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1766.058134][ T8837] usb 1-1: device descriptor read/64, error -71 [ 1766.097980][T19291] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1766.118894][T29986] netlink: 'syz.6.6653': attribute type 4 has an invalid length. [ 1766.141756][T29986] netlink: 'syz.6.6653': attribute type 4 has an invalid length. [ 1766.178474][ T8837] usb usb1-port1: attempt power cycle [ 1766.200146][T19291] usb 6-1: device descriptor read/8, error -71 [ 1766.208733][T29986] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6653'. [ 1766.328270][T19291] usb usb6-port1: unable to enumerate USB device [ 1766.415108][T29989] loop5: detected capacity change from 0 to 7 [ 1766.424632][T29989] Dev loop5: unable to read RDB block 7 [ 1766.430477][T29989] loop5: unable to read partition table [ 1766.436426][T29989] loop5: partition table beyond EOD, truncated [ 1766.444418][T29989] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1766.537957][ T8837] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1766.558902][ T8837] usb 1-1: device descriptor read/8, error -71 [ 1766.797967][ T8837] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1766.818483][ T8837] usb 1-1: device descriptor read/8, error -71 [ 1766.928246][ T8837] usb usb1-port1: unable to enumerate USB device [ 1767.068517][T13913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1767.359206][T13913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1767.451219][T29995] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6657'. [ 1767.688091][T19291] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1767.840012][T19291] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 1767.848381][T19291] usb 1-1: config 1 has no interface number 0 [ 1767.854507][T19291] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1767.866684][T19291] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1767.877512][T19291] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1767.892580][T19291] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1767.902045][T19291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1767.911051][T19291] usb 1-1: Product: syz [ 1767.915624][T19291] usb 1-1: Manufacturer: syz [ 1767.920418][T19291] usb 1-1: SerialNumber: syz [ 1767.928187][T29993] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1768.139818][T29993] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1768.147988][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.182356][T30002] netlink: 'syz.1.6659': attribute type 21 has an invalid length. [ 1768.193445][T30002] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6659'. [ 1768.375237][T19291] sierra_net 1-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:05:07 [ 1768.388611][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.668056][ T42] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1768.817969][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 1768.824841][ T42] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1768.835233][ T42] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1768.846376][ T42] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1768.848135][ T8837] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1768.855809][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.871459][ T42] usb 5-1: Product: syz [ 1768.875652][ T42] usb 5-1: Manufacturer: syz [ 1768.881402][ T42] usb 5-1: SerialNumber: syz [ 1768.897235][ T42] usb 5-1: 0:2 : does not exist [ 1769.011833][ T8837] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1769.030591][ T8837] usb 6-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 1769.041812][ T8837] usb 6-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 1769.052783][ T8837] usb 6-1: config 66 interface 0 altsetting 16 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1769.076209][ T8837] usb 6-1: config 66 interface 0 has no altsetting 0 [ 1769.086283][ T8837] usb 6-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 1769.103995][ T8837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1769.110836][ T42] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1769.142589][ T8837] usb 6-1: Product: syz [ 1769.149674][ T8837] usb 6-1: Manufacturer: syz [ 1769.154475][ T8837] usb 6-1: SerialNumber: syz [ 1769.164532][ T42] usb 5-1: USB disconnect, device number 34 [ 1769.197967][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1769.219332][T24548] udevd[24548]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1769.238047][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 1769.238096][ T29] audit: type=1326 audit(1782819048.212:12964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30011 comm="syz.6.6663" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afb9ce59 code=0x7ffc0000 [ 1769.301880][ T29] audit: type=1326 audit(1782819048.242:12965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30011 comm="syz.6.6663" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afb9ce59 code=0x7ffc0000 [ 1769.355220][T19291] sierra_net 1-1:1.7 wwan0: Submit SYNC failed -71 [ 1769.366218][T19291] sierra_net 1-1:1.7 wwan0: Send SYNC failed, status -71 [ 1769.379233][ T29] audit: type=1326 audit(1782819048.242:12966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30011 comm="syz.6.6663" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f01afb9ce59 code=0x7ffc0000 [ 1769.404491][T19291] usb 1-1: USB disconnect, device number 84 [ 1769.414493][T19291] sierra_net 1-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem [ 1769.430279][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1769.446666][ T29] audit: type=1326 audit(1782819048.242:12967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30011 comm="syz.6.6663" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afb9ce59 code=0x7ffc0000 [ 1769.484503][ T29] audit: type=1326 audit(1782819048.242:12968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30011 comm="syz.6.6663" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afb9ce59 code=0x7ffc0000 [ 1769.527163][ T29] audit: type=1326 audit(1782819048.242:12969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30011 comm="syz.6.6663" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afb9ce59 code=0x7ffc0000 [ 1769.558411][T19291] sierra_net 1-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 1769.574099][ T29] audit: type=1326 audit(1782819048.242:12970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30011 comm="syz.6.6663" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afb9ce59 code=0x7ffc0000 [ 1769.603269][ T29] audit: type=1326 audit(1782819048.242:12971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30011 comm="syz.6.6663" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f01afb9ce59 code=0x7ffc0000 [ 1769.630366][ T29] audit: type=1326 audit(1782819048.242:12972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30011 comm="syz.6.6663" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afb9ce59 code=0x7ffc0000 [ 1769.658337][ T29] audit: type=1326 audit(1782819048.242:12973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30011 comm="syz.6.6663" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afb9ce59 code=0x7ffc0000 [ 1769.742493][T30017] loop5: detected capacity change from 0 to 7 [ 1769.750059][T30017] Dev loop5: unable to read RDB block 7 [ 1769.756537][T30009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1769.756622][T30017] loop5: unable to read partition table [ 1769.773318][T30017] loop5: partition table beyond EOD, truncated [ 1769.781104][T30017] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1769.917584][T30009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1770.137950][T15078] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 1770.299585][T15078] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1770.310896][T15078] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1770.317914][T15078] usb 5-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 1770.327180][T15078] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.338072][T19291] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1770.338781][T15078] usb 5-1: config 0 descriptor?? [ 1770.351695][T30019] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1770.399423][T13914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1770.497954][T19291] usb 1-1: Using ep0 maxpacket: 16 [ 1770.505720][T19291] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1770.517801][T19291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1770.532027][T19291] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1770.542114][T19291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1770.550505][T19291] usb 1-1: Product: syz [ 1770.554941][T19291] usb 1-1: Manufacturer: syz [ 1770.560728][T19291] usb 1-1: SerialNumber: syz [ 1770.577476][T19291] usb 1-1: config 0 descriptor?? [ 1770.592268][T19291] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1770.601686][T19291] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1770.946041][T30019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1770.955949][T30019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1770.978091][T15078] kye 0003:0458:500F.0088: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1770.989304][T15078] hid_parser_main: 173 callbacks suppressed [ 1770.989326][T15078] kye 0003:0458:500F.0088: unknown main item tag 0x0 [ 1771.002108][T15078] kye 0003:0458:500F.0088: unknown main item tag 0x0 [ 1771.009248][T15078] kye 0003:0458:500F.0088: unknown main item tag 0x0 [ 1771.015997][T15078] kye 0003:0458:500F.0088: unknown main item tag 0x0 [ 1771.022828][T15078] kye 0003:0458:500F.0088: unknown main item tag 0x0 [ 1771.029761][T15078] kye 0003:0458:500F.0088: unknown main item tag 0x0 [ 1771.036481][T15078] kye 0003:0458:500F.0088: unknown main item tag 0x0 [ 1771.043411][T15078] kye 0003:0458:500F.0088: unknown main item tag 0x0 [ 1771.051698][T15078] kye 0003:0458:500F.0088: unknown main item tag 0x0 [ 1771.058891][T15078] kye 0003:0458:500F.0088: unknown main item tag 0x0 [ 1771.068460][T15078] kye 0003:0458:500F.0088: hidraw0: USB HID v0.04 Device [HID 0458:500f] on usb-dummy_hcd.4-1/input0 [ 1771.080693][T15078] kye 0003:0458:500F.0088: tablet-enabling feature report not found [ 1771.088820][T15078] kye 0003:0458:500F.0088: tablet enabling failed [ 1771.187774][T15078] usb 5-1: USB disconnect, device number 35 [ 1771.194248][T19291] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1771.204823][T19291] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1771.264296][T30030] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6668'. [ 1771.428002][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1771.555795][ T8837] ati_remote2 6-1:66.0: ati_remote2_probe(): need 2 interfaces, found 1 [ 1771.576967][ T8837] usb 6-1: USB disconnect, device number 62 [ 1771.822137][T19291] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 1771.836081][T19291] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 1771.940195][T30038] fuse: Unknown parameter 'eroup_id' [ 1772.008127][ T8837] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1772.047639][T19291] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 1772.062752][T19291] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 1772.079392][T19291] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 1772.097179][T19291] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 1772.121932][T19291] usb 1-1: USB disconnect, device number 85 [ 1772.167911][ T8837] usb 6-1: Using ep0 maxpacket: 8 [ 1772.268386][ T8837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1772.292785][ T8837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1772.315126][ T8837] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1772.342954][ T8837] usb 6-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1772.364409][ T8837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.394241][ T8837] usb 6-1: config 0 descriptor?? [ 1772.468120][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1772.555323][T30041] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6671'. [ 1772.866492][T30054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6673'. [ 1772.950301][T29812] IPVS: starting estimator thread 0... [ 1772.956932][T30057] dlm: plock device version mismatch: kernel (1.2.0), user (619199281.1581691892.1258375512) [ 1773.048099][T19291] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1773.057993][T30058] IPVS: using max 32 ests per chain, 76800 per kthread [ 1773.109476][T13913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.188407][T19291] usb 1-1: device descriptor read/64, error -71 [ 1773.233746][T30061] kvm: pic: non byte write [ 1773.448000][T19291] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1773.578142][T19291] usb 1-1: device descriptor read/64, error -71 [ 1773.688642][T19291] usb usb1-port1: attempt power cycle [ 1773.753990][T30045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1774.027974][T19291] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1774.058594][T19291] usb 1-1: device descriptor read/8, error -71 [ 1774.158119][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1774.318298][T19291] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1774.362774][T19291] usb 1-1: device descriptor read/8, error -71 [ 1774.403400][T30071] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 1774.412832][T30071] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 1774.482790][T19291] usb usb1-port1: unable to enumerate USB device [ 1774.788087][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1774.830876][ T8837] usbhid 6-1:0.0: can't add hid device: -71 [ 1774.837721][ T8837] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1774.849955][ T8837] usb 6-1: USB disconnect, device number 63 [ 1775.169685][T30084] loop2: detected capacity change from 0 to 7 [ 1775.176481][T30084] loop2: p1 [ 1775.179975][T30084] loop2: partition table partially beyond EOD, truncated [ 1775.187157][T30084] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 1775.198126][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1775.208611][T30084] fuse: Unknown parameter '000000000000000000000040x0000000000000004' [ 1775.273671][T30086] netlink: 'syz.4.6683': attribute type 5 has an invalid length. [ 1775.277379][T24563] udevd[24563]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1775.504149][T30088] Set syz1 is full, maxelem 6117 reached [ 1775.828174][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1776.129784][T30110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1776.144270][T30108] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1776.167997][T29812] usb 6-1: new low-speed USB device number 64 using dummy_hcd [ 1776.269683][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1776.269701][ T29] audit: type=1326 audit(1782819055.232:12980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30101 comm="syz.0.6689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5baf9ce59 code=0x7ffc0000 [ 1776.312337][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1776.481030][T29812] usb 6-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 1776.500528][ T29] audit: type=1326 audit(1782819055.272:12981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30101 comm="syz.0.6689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5baf9ce59 code=0x7ffc0000 [ 1776.531145][T29812] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1776.543870][T29812] usb 6-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1776.564739][T29812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1776.593165][ T29] audit: type=1326 audit(1782819055.302:12982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30101 comm="syz.0.6689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5baf9ce59 code=0x7ffc0000 [ 1776.666597][T29812] usb 6-1: config 0 descriptor?? [ 1776.674079][ T29] audit: type=1326 audit(1782819055.302:12983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30101 comm="syz.0.6689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5baf9ce59 code=0x7ffc0000 [ 1776.755772][ T29] audit: type=1326 audit(1782819055.322:12984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30101 comm="syz.0.6689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe5baf9ce59 code=0x7ffc0000 [ 1776.821762][T30118] program syz.6.6693 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1776.865604][ T29] audit: type=1326 audit(1782819055.322:12985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30101 comm="syz.0.6689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5baf9ce59 code=0x7ffc0000 [ 1776.959804][T30118] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6693'. [ 1776.980865][T30118] tipc: Enabling of bearer rejected, failed to enable media [ 1777.006610][ T29] audit: type=1326 audit(1782819055.322:12986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30101 comm="syz.0.6689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5baf9ce59 code=0x7ffc0000 [ 1777.047158][ T29] audit: type=1326 audit(1782819055.322:12987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30101 comm="syz.0.6689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5baf9ce59 code=0x7ffc0000 [ 1777.072388][ T29] audit: type=1326 audit(1782819055.322:12988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30101 comm="syz.0.6689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe5baf9ce59 code=0x7ffc0000 [ 1777.083833][T30046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1777.099281][ T29] audit: type=1326 audit(1782819055.322:12989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30101 comm="syz.0.6689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5baf9ce59 code=0x7ffc0000 [ 1777.553531][T30128] loop6: detected capacity change from 0 to 2640 [ 1777.586516][T30128] buffer_io_error: 126 callbacks suppressed [ 1777.586535][T30128] Buffer I/O error on dev loop6, logical block 0, async page read [ 1777.630439][T30128] Buffer I/O error on dev loop6, logical block 0, async page read [ 1777.672366][T30128] Buffer I/O error on dev loop6, logical block 0, async page read [ 1777.699078][T30128] Buffer I/O error on dev loop6, logical block 0, async page read [ 1777.731697][T30128] Buffer I/O error on dev loop6, logical block 0, async page read [ 1777.775260][T30128] Buffer I/O error on dev loop6, logical block 0, async page read [ 1777.793324][T30128] Buffer I/O error on dev loop6, logical block 0, async page read [ 1777.806439][T30128] Buffer I/O error on dev loop6, logical block 0, async page read [ 1777.820382][T30130] Buffer I/O error on dev loop6, logical block 0, async page read [ 1777.838388][T30127] Buffer I/O error on dev loop6, logical block 0, async page read [ 1777.849537][T30128] ldm_validate_partition_table(): Disk read failed. [ 1777.857125][T30128] Dev loop6: unable to read RDB block 0 [ 1777.864552][T30128] loop6: unable to read partition table [ 1777.871141][T30128] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 1778.079638][ T42] usb 6-1: USB disconnect, device number 64 [ 1778.147979][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1778.277971][T15078] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1778.408866][T15078] usb 5-1: device descriptor read/64, error -71 [ 1778.648214][T15078] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1778.661025][T30159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6704'. [ 1778.678247][ T42] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1778.756484][T30163] netlink: 'syz.0.6704': attribute type 13 has an invalid length. [ 1778.789234][T15078] usb 5-1: device descriptor read/64, error -71 [ 1778.835671][T30159] sch_tbf: burst 0 is lower than device batadv_slave_0 mtu (1514) ! [ 1778.852662][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1778.867033][ T42] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1778.879590][T17605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1778.879654][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.909172][T15078] usb usb5-port1: attempt power cycle [ 1778.936943][ T42] usb 6-1: config 0 descriptor?? [ 1778.955183][T30166] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1778.967473][T30166] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1778.976429][T30166] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1779.088084][T19291] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1779.187944][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1779.238552][T19291] usb 1-1: Using ep0 maxpacket: 16 [ 1779.256475][T19291] usb 1-1: too many configurations: 60, using maximum allowed: 8 [ 1779.271533][T15078] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1779.308954][T15078] usb 5-1: device descriptor read/8, error -71 [ 1779.347068][T19291] usb 1-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 1779.365695][T19291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 1779.374571][T19291] usb 1-1: Product: syz [ 1779.380275][T19291] usb 1-1: Manufacturer: syz [ 1779.387145][T19291] usb 1-1: SerialNumber: syz [ 1779.407323][T19291] usb 1-1: config 0 descriptor?? [ 1779.418741][T19291] pwc: Philips SPC 880NC USB webcam detected. [ 1779.559337][T15078] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1779.598816][T15078] usb 5-1: device descriptor read/8, error -71 [ 1779.624012][T19291] pwc: Warning: more than 1 configuration available. [ 1779.633605][T19291] pwc: Failed to set LED on/off time (-71) [ 1779.643036][T19291] pwc: send_video_command error -71 [ 1779.649563][T19291] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1779.658684][T19291] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 1779.673452][T19291] usb 1-1: USB disconnect, device number 90 [ 1779.728791][T15078] usb usb5-port1: unable to enumerate USB device [ 1779.744656][ T42] keytouch 0003:0926:3333.0089: fixing up Keytouch IEC report descriptor [ 1779.812804][ T42] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0089/input/input175 [ 1779.908138][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1780.011390][ T42] keytouch 0003:0926:3333.0089: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1780.529647][T17605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1780.948195][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1781.329816][T30189] netlink: 428 bytes leftover after parsing attributes in process `syz.4.6710'. [ 1781.372526][T30189] openvswitch: netlink: Key type 351 is out of range max 32 [ 1781.587967][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1781.662663][ T8837] usb 6-1: USB disconnect, device number 65 [ 1781.764500][T30193] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1782.188188][T29812] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1782.344556][T30216] syzkaller0: entered promiscuous mode [ 1782.348004][T29812] usb 5-1: Using ep0 maxpacket: 32 [ 1782.365240][T29812] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1782.365913][T30216] syzkaller0: entered allmulticast mode [ 1782.391507][T29812] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1782.414510][T29812] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1782.433817][T29812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1782.455131][T29812] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1782.477914][T29812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1782.491723][T29812] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1782.501938][T29812] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1782.520364][T29812] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1782.531983][T29812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1782.546988][T29812] usb 5-1: config 0 descriptor?? [ 1782.627977][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1782.791915][T29812] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1782.832786][T29812] usb 5-1: USB disconnect, device number 40 [ 1782.853703][T29812] usblp0: removed [ 1783.188396][T19291] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1783.372655][T19291] usb 6-1: Using ep0 maxpacket: 8 [ 1783.384122][T19291] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1783.402176][T19291] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.411091][T29812] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1783.422526][T19291] usb 6-1: Product: syz [ 1783.441222][T19291] usb 6-1: Manufacturer: syz [ 1783.451097][T19291] usb 6-1: SerialNumber: syz [ 1783.461922][T19291] usb 6-1: config 0 descriptor?? [ 1783.724639][T19291] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1783.758010][T29812] usb 5-1: device descriptor read/64, error -71 [ 1783.898704][T30234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1783.991330][T30045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1784.278062][ T8837] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1784.427930][ T8837] usb 1-1: Using ep0 maxpacket: 32 [ 1784.435402][ T8837] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1784.444783][ T8837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1784.455343][ T8837] usb 1-1: config 0 descriptor?? [ 1784.465215][ T8837] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1784.540673][T30226] tipc: Failed to remove unknown binding: 66,0,0/0:3743308370/3743308372 [ 1784.552711][T30226] tipc: Failed to remove unknown binding: 66,0,0/0:3743308370/3743308371 [ 1784.562549][T30226] tipc: Failed to remove unknown binding: 66,0,0/0:3743308370/3743308372 [ 1784.574217][T30226] tipc: Failed to remove unknown binding: 66,0,0/0:3743308370/3743308371 [ 1784.676515][T30249] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6723'. [ 1784.687130][T30249] syzkaller0: entered promiscuous mode [ 1784.692968][T30249] syzkaller0: entered allmulticast mode [ 1784.780220][ T8837] gspca_sunplus: reg_w_riv err -71 [ 1784.787312][ T8837] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 1784.798895][ T8837] usb 1-1: USB disconnect, device number 91 [ 1784.948116][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1785.028062][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1785.152807][ T29] kauditd_printk_skb: 298 callbacks suppressed [ 1785.152824][ T29] audit: type=1804 audit(1782819064.122:13288): pid=30253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.6725" name="/newroot/70/file0" dev="fuse" ino=1 res=1 errno=0 [ 1785.206776][ T29] audit: type=1804 audit(1782819064.172:13289): pid=30255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.6725" name="/newroot/70/file0" dev="fuse" ino=1 res=1 errno=0 [ 1785.245047][T19291] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1785.257216][T19291] usb 6-1: USB disconnect, device number 66 [ 1785.972938][T30276] loop2: detected capacity change from 0 to 7 [ 1785.988017][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1786.005108][T30276] loop2: p1 [ 1786.015105][T30276] loop2: partition table partially beyond EOD, truncated [ 1786.029770][T30277] fuse: Unknown parameter '000000000000000000000040x0000000000000004' [ 1786.043731][T30276] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 1786.068086][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1786.203645][T24563] udevd[24563]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1786.607475][ T29] audit: type=1804 audit(1782819065.572:13290): pid=30292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.6736" name="/newroot/306/file0" dev="fuse" ino=1 res=1 errno=0 [ 1786.660040][ T29] audit: type=1804 audit(1782819065.632:13291): pid=30297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.6736" name="/newroot/306/file0" dev="fuse" ino=1 res=1 errno=0 [ 1786.688706][ T8837] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1786.708332][ T5703] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1786.719104][T30298] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6738'. [ 1786.848265][ T8837] usb 1-1: Using ep0 maxpacket: 8 [ 1786.855405][ T8837] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1786.889116][ T8837] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1786.889796][ T5703] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1786.910878][ T5703] usb 5-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x19, changing to 0x9 [ 1786.923241][ T5703] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1786.926934][ T8837] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1786.935776][ T5703] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1786.956131][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1786.965995][ T8837] usb 1-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1786.976629][ T8837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1786.977226][ T5703] usb 5-1: Product: syz [ 1786.991340][ T5703] usb 5-1: Manufacturer: syz [ 1786.995192][ T8837] usb 1-1: config 0 descriptor?? [ 1786.996062][ T5703] usb 5-1: SerialNumber: syz [ 1787.102251][T20430] Bluetooth: hci0: unexpected event for opcode 0x1009 [ 1787.108240][ T42] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1787.191620][T30045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1787.258109][ T42] usb 6-1: Using ep0 maxpacket: 32 [ 1787.265080][ T42] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1787.276216][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.293818][ T42] usb 6-1: config 0 descriptor?? [ 1787.319522][ T42] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1787.330354][T30234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1787.419142][ T8837] hid_parser_main: 19 callbacks suppressed [ 1787.419164][ T8837] elecom 0003:056E:00FE.008A: unknown main item tag 0x4 [ 1787.447750][ T8837] elecom 0003:056E:00FE.008A: unknown main item tag 0x6 [ 1787.455461][ T8837] elecom 0003:056E:00FE.008A: unknown main item tag 0x0 [ 1787.462903][ T8837] elecom 0003:056E:00FE.008A: unknown main item tag 0x0 [ 1787.474279][ T8837] elecom 0003:056E:00FE.008A: unknown main item tag 0x0 [ 1787.482186][ T8837] elecom 0003:056E:00FE.008A: unknown main item tag 0x0 [ 1787.490737][ T8837] elecom 0003:056E:00FE.008A: unknown main item tag 0x0 [ 1787.498152][ T8837] elecom 0003:056E:00FE.008A: unknown main item tag 0x0 [ 1787.506075][ T8837] elecom 0003:056E:00FE.008A: unknown main item tag 0x0 [ 1787.514493][ T8837] elecom 0003:056E:00FE.008A: unknown main item tag 0x0 [ 1787.529107][ T8837] elecom 0003:056E:00FE.008A: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.0-1/input0 [ 1787.654868][ T8837] usb 1-1: USB disconnect, device number 92 [ 1787.760710][T30314] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1787.963873][ T29] audit: type=1326 audit(1782819066.932:13292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30312 comm="syz.1.6742" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3bbf9ce59 code=0x0 [ 1788.005171][T29812] usb 6-1: USB disconnect, device number 67 [ 1788.029312][ T5703] cdc_ncm 5-1:1.0: bind() failure [ 1788.055043][ T5703] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1788.065922][ T5703] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1788.075465][ T5703] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 1788.090680][ T5703] usb 5-1: USB disconnect, device number 43 [ 1788.228056][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1788.388218][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1788.753698][T30331] netlink: 264 bytes leftover after parsing attributes in process `syz.4.6744'. [ 1789.054151][T30336] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1789.268050][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1789.438045][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1790.018991][T30347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6749'. [ 1790.517790][ T29] audit: type=1326 audit(1782819069.482:13293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30355 comm="syz.6.6753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01afb9ce59 code=0x0 [ 1790.671273][T30235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1791.009893][T30369] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6758'. [ 1791.029346][T30234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1791.133595][T30371] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6758'. [ 1791.163802][T30371] bridge_slave_1: left allmulticast mode [ 1791.182216][T30371] bridge_slave_1: left promiscuous mode [ 1791.202281][T30371] bridge0: port 2(bridge_slave_1) entered disabled state [ 1791.237317][T30371] bridge_slave_0: left allmulticast mode [ 1791.256410][T30371] bridge_slave_0: left promiscuous mode [ 1791.269281][T30371] bridge0: port 1(bridge_slave_0) entered disabled state [ 1791.671630][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.678221][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.747966][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1792.068159][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1792.755952][T30387] trusted_key: encrypted_key: master key parameter is missing [ 1792.788007][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1792.806080][T30397] input: syz1 as /devices/virtual/input/input177 [ 1792.950379][T30402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6766'. [ 1792.985930][T30402] netlink: 'syz.4.6766': attribute type 12 has an invalid length. [ 1793.108046][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1793.133424][T30402] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6766'. [ 1793.146584][ T29] audit: type=1804 audit(1782819072.112:13294): pid=30404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.6765" name="/newroot/446/file0" dev="fuse" ino=1 res=1 errno=0 [ 1793.197590][ T29] audit: type=1804 audit(1782819072.162:13295): pid=30410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.6765" name="/newroot/446/file0" dev="fuse" ino=1 res=1 errno=0 [ 1793.254471][T30408] ipip0: entered promiscuous mode [ 1793.275075][T30408] ipip0: entered allmulticast mode [ 1793.473660][T30421] kvm: pic: non byte write [ 1793.688140][T29812] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1793.848667][T29812] usb 6-1: Using ep0 maxpacket: 8 [ 1793.906187][T29812] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1793.917246][T29812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.927415][T29812] usb 6-1: Product: syz [ 1793.932552][T29812] usb 6-1: Manufacturer: syz [ 1793.940426][T29812] usb 6-1: SerialNumber: syz [ 1793.964251][T29812] usb 6-1: config 0 descriptor?? [ 1793.998958][T30234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1794.036676][T29812] gspca_main: se401-2.14.0 probing 047d:5003 [ 1794.475123][ T29] audit: type=1804 audit(1782819073.432:13296): pid=30437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.6774" name="bus" dev="ramfs" ino=194441 res=1 errno=0 [ 1794.653982][T30423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1794.868199][ T8837] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1795.027964][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1795.036602][ T8837] usb 1-1: Using ep0 maxpacket: 16 [ 1795.056479][ T8837] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1795.085181][ T8837] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1795.124036][ T8837] usb 1-1: Product: syz [ 1795.146624][ T8837] usb 1-1: Manufacturer: syz [ 1795.159499][ T8837] usb 1-1: SerialNumber: syz [ 1795.176691][T30423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1795.187737][T30423] raw-gadget.2 gadget.5: fail, usb_ep_queue returned -108 [ 1795.190099][ T8837] usb 1-1: config 0 descriptor?? [ 1795.248236][T29812] usb 6-1: reset high-speed USB device number 68 using dummy_hcd [ 1795.388037][T29812] usb 6-1: device descriptor read/64, error -32 [ 1795.398399][ T42] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1795.422179][ T8837] peak_usb 1-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 1795.503917][T30423] bond9: Unable to set down delay as MII monitoring is disabled [ 1795.512411][T30235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1795.522491][T30423] bond9 (unregistering): Released all slaves [ 1795.558530][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 1795.565778][ T42] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1795.575040][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.620271][ T42] usb 5-1: config 0 descriptor?? [ 1795.626744][ T8837] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 1795.633954][ T8837] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 1795.634755][ T42] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1795.647400][ T8837] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 1795.654339][T29812] usb 6-1: reset high-speed USB device number 68 using dummy_hcd [ 1795.719603][ T8837] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -22 [ 1795.802781][T29812] usb 6-1: device descriptor read/64, error -32 [ 1796.047986][T29812] usb 6-1: reset high-speed USB device number 68 using dummy_hcd [ 1796.068060][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1796.078565][T29812] usb 6-1: device descriptor read/8, error -32 [ 1796.158165][ T42] gspca_sonixj: reg_w1 err -110 [ 1796.163502][ T42] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 1796.318137][T29812] usb 6-1: reset high-speed USB device number 68 using dummy_hcd [ 1796.342828][T29812] usb 6-1: device descriptor read/8, error -32 [ 1796.397169][T30458] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6781'. [ 1796.464108][T29812] gspca_se401: read req failed req 0x06 error -19 [ 1796.473712][T29812] usb 6-1: USB disconnect, device number 68 [ 1796.547996][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1796.558617][T29812] raw-gadget.2 gadget.5: failed to queue resume event [ 1796.628224][T29812] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1796.637483][ C0] raw-gadget.2 gadget.5: ignoring, device is not running [ 1796.645496][T29812] raw-gadget.2 gadget.5: failed to queue reset event [ 1796.718013][T29812] raw-gadget.2 gadget.5: failed to queue resume event [ 1796.793381][T29812] usb 6-1: device descriptor read/64, error -32 [ 1796.911624][T29812] raw-gadget.2 gadget.5: failed to queue suspend event [ 1796.919106][T29812] raw-gadget.2 gadget.5: failed to queue reset event [ 1796.960772][T30423] raw-gadget.2 gadget.5: failed to queue disconnect event [ 1797.339325][T30043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1797.513155][ T8837] usb 1-1: USB disconnect, device number 93 [ 1797.588059][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1798.234989][ T8837] usb 5-1: USB disconnect, device number 44 [ 1798.368827][T17322] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1798.388105][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1798.401892][T30498] loop2: detected capacity change from 0 to 7 [ 1798.414083][T30498] loop2: p1 [ 1798.419513][T30498] loop2: partition table partially beyond EOD, truncated [ 1798.427161][T30498] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 1798.443884][T30498] fuse: Unknown parameter '000000000000000000000040x0000000000000004' [ 1798.538469][T17322] usb 1-1: Using ep0 maxpacket: 8 [ 1798.565480][T17322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1798.581650][T17322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1798.595855][T17322] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1798.609431][T17322] usb 1-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1798.618856][T17322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1798.653981][T17322] usb 1-1: config 0 descriptor?? [ 1799.270427][T30523] C: renamed from veth1_to_team [ 1799.282336][T30523] netlink: 'syz.6.6806': attribute type 8 has an invalid length. [ 1799.292183][T30523] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1799.378066][ T42] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1799.428111][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1799.562118][ T42] usb 5-1: config 2 has an invalid interface number: 174 but max is 0 [ 1799.623247][ T42] usb 5-1: config 2 has no interface number 0 [ 1799.673681][ T42] usb 5-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 1799.711819][ T42] usb 5-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 1799.734859][ T42] usb 5-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 103 [ 1799.761839][ T42] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 1799.771391][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.779648][ T42] usb 5-1: Product: syz [ 1799.783945][ T42] usb 5-1: Manufacturer: syz [ 1799.788817][ T42] usb 5-1: SerialNumber: syz [ 1799.798850][T30519] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1799.806255][T30519] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1800.017261][ T42] usb 5-1: probing VID:PID(0424:012C) [ 1800.026793][ T42] usb 5-1: vub300 testing BULK IN EndPoint(0) 8E [ 1800.035156][ T42] usb 5-1: vub300 testing BULK IN EndPoint(1) 82 [ 1800.043129][ T42] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 1800.062571][ T42] vub300 5-1:2.174: probe with driver vub300 failed with error -22 [ 1800.081133][ T42] usb 5-1: USB disconnect, device number 45 [ 1800.681302][T30043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1800.968036][T29812] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1801.117944][T29812] usb 5-1: Using ep0 maxpacket: 32 [ 1801.125217][T29812] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1801.136259][T29812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1801.160770][T29812] usb 5-1: config 0 descriptor?? [ 1801.176330][T17322] usbhid 1-1:0.0: can't add hid device: -71 [ 1801.186892][T17322] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1801.204776][T17322] usb 1-1: USB disconnect, device number 94 [ 1801.268629][T30045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1801.384913][T29812] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1801.748032][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1801.943261][T30543] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1802.181147][T30550] netlink: 'syz.0.6815': attribute type 1 has an invalid length. [ 1802.210949][T30554] fuse: Unknown parameter '3' [ 1802.254609][T30550] bond3: (slave veth5): Enslaving as an active interface with a down link [ 1802.269896][T30550] netlink: 'syz.0.6815': attribute type 10 has an invalid length. [ 1802.278649][T30550] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6815'. [ 1802.288789][T30550] dummy0: entered promiscuous mode [ 1802.308069][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1802.787954][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1803.099964][T17322] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1803.114251][T30573] loop5: detected capacity change from 0 to 7 [ 1803.125051][T30573] Dev loop5: unable to read RDB block 7 [ 1803.146592][T30573] loop5: unable to read partition table [ 1803.169835][T30573] loop5: partition table beyond EOD, truncated [ 1803.193889][T30573] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1803.268707][T17322] usb 1-1: Using ep0 maxpacket: 8 [ 1803.276764][T17322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1803.290291][T17322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1803.316213][T17322] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1803.331268][T17322] usb 1-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1803.344729][T17322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1803.358150][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1803.359182][T17322] usb 1-1: config 0 descriptor?? [ 1803.422719][T30577] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6824'. [ 1803.435379][T30577] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6824'. [ 1804.038377][T30227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1805.108007][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1805.866800][T17322] usbhid 1-1:0.0: can't add hid device: -71 [ 1805.877426][T17322] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1805.911706][T17322] usb 1-1: USB disconnect, device number 95 [ 1806.068177][ T42] usb 6-1: new low-speed USB device number 71 using dummy_hcd [ 1806.148038][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1806.208015][ T42] usb 6-1: device descriptor read/64, error -71 [ 1806.457971][ T42] usb 6-1: new low-speed USB device number 72 using dummy_hcd [ 1806.588072][ T42] usb 6-1: device descriptor read/64, error -71 [ 1806.708285][ T42] usb usb6-port1: attempt power cycle [ 1807.033304][T30043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1807.061017][ T42] usb 6-1: new low-speed USB device number 73 using dummy_hcd [ 1807.109750][ T42] usb 6-1: device descriptor read/8, error -71 [ 1807.366092][ T42] usb 6-1: new low-speed USB device number 74 using dummy_hcd [ 1807.374449][T30232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1807.421463][ T42] usb 6-1: device descriptor read/8, error -71 [ 1807.558309][ T42] usb usb6-port1: unable to enumerate USB device [ 1807.628821][T17322] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1807.819227][T17322] usb 1-1: Using ep0 maxpacket: 8 [ 1807.839150][T17322] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1807.863567][T17322] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1807.883646][T17322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.068032][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1808.131790][T30644] ================================================================== [ 1808.139892][T30644] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1b4f/0x5ea0 [ 1808.148488][T30644] Write of size 5120 at addr ffffc900067bbc40 by task vivid-000-vid-c/30644 [ 1808.157151][T30644] [ 1808.159470][T30644] CPU: 1 UID: 0 PID: 30644 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 1808.159493][T30644] Tainted: [L]=SOFTLOCKUP [ 1808.159499][T30644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1808.159509][T30644] Call Trace: [ 1808.159516][T30644] [ 1808.159522][T30644] dump_stack_lvl+0xe8/0x150 [ 1808.159545][T30644] print_address_description+0x55/0x1e0 [ 1808.159564][T30644] ? tpg_fill_plane_buffer+0x1b4f/0x5ea0 [ 1808.159590][T30644] print_report+0x58/0x70 [ 1808.159605][T30644] kasan_report+0x117/0x150 [ 1808.159623][T30644] ? trace_irq_disable+0x3b/0x140 [ 1808.159648][T30644] ? tpg_fill_plane_buffer+0x1b4f/0x5ea0 [ 1808.159671][T30644] kasan_check_range+0x264/0x2c0 [ 1808.159689][T30644] ? tpg_fill_plane_buffer+0x1b4f/0x5ea0 [ 1808.159710][T30644] __asan_memcpy+0x40/0x70 [ 1808.159736][T30644] tpg_fill_plane_buffer+0x1b4f/0x5ea0 [ 1808.159778][T30644] vivid_thread_vid_cap_tick+0x115c/0x6340 [ 1808.159879][T30644] ? __lock_acquire+0x683/0x2cf0 [ 1808.159897][T30644] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1808.159914][T30644] ? lockdep_hardirqs_on+0x7a/0x110 [ 1808.159932][T30644] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1808.159950][T30644] ? vivid_thread_vid_cap+0x491/0x11e0 [ 1808.159968][T30644] ? cgroup1_freezing+0x29a/0x350 [ 1808.159993][T30644] vivid_thread_vid_cap+0x927/0x11e0 [ 1808.160010][T30644] ? __lock_acquire+0x683/0x2cf0 [ 1808.160037][T30644] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1808.160052][T30644] ? do_raw_spin_lock+0x12b/0x2f0 [ 1808.160075][T30644] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1808.160090][T30644] ? __kthread_parkme+0x71/0x1f0 [ 1808.160113][T30644] ? __kthread_parkme+0x196/0x1f0 [ 1808.160146][T30644] kthread+0x388/0x470 [ 1808.160162][T30644] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1808.160177][T30644] ? __pfx_kthread+0x10/0x10 [ 1808.160193][T30644] ret_from_fork+0x514/0xb70 [ 1808.160211][T30644] ? __pfx_ret_from_fork+0x10/0x10 [ 1808.160227][T30644] ? __switch_to+0xc89/0x1420 [ 1808.160250][T30644] ? __pfx_kthread+0x10/0x10 [ 1808.160270][T30644] ret_from_fork_asm+0x1a/0x30 [ 1808.160294][T30644] [ 1808.160299][T30644] [ 1808.365470][T30644] The buggy address belongs to a 12-page vmalloc region starting at 0xffffc900067b1000 allocated at vb2_vmalloc_alloc+0xef/0x360 [ 1808.378858][T30644] The buggy address belongs to the physical page: [ 1808.385275][T30644] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x270aa [ 1808.387976][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1808.394025][T30644] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1808.409181][T30644] raw: 00fff00000000000 0000000000000000 ffffea00009c2a90 0000000000000000 [ 1808.417774][T30644] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1808.426350][T30644] page dumped because: kasan: bad access detected [ 1808.432765][T30644] page_owner tracks the page as allocated [ 1808.438468][T30644] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 30641, tgid 30640 (syz.0.6843), ts 1808106982936, free_ts 1808106325446 [ 1808.458432][T30644] post_alloc_hook+0x1f9/0x250 [ 1808.463201][T30644] get_page_from_freelist+0x21fa/0x2270 [ 1808.468739][T30644] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1808.474535][T30644] alloc_pages_mpol+0x212/0x380 [ 1808.479373][T30644] alloc_pages_noprof+0xac/0x2a0 [ 1808.484305][T30644] __vmalloc_node_range_noprof+0x795/0x1730 [ 1808.490188][T30644] vmalloc_user_noprof+0xad/0xe0 [ 1808.495120][T30644] vb2_vmalloc_alloc+0xef/0x360 [ 1808.499963][T30644] __vb2_queue_alloc+0xa0b/0x1660 [ 1808.504977][T30644] vb2_core_reqbufs+0xc3f/0x1470 [ 1808.509906][T30644] __vb2_init_fileio+0x310/0x1040 [ 1808.514926][T30644] vb2_core_poll+0x4b0/0x830 [ 1808.519513][T30644] vb2_fop_poll+0x196/0x310 [ 1808.524013][T30644] v4l2_poll+0x147/0x2c0 [ 1808.528350][T30644] do_select+0x1067/0x17f0 [ 1808.532767][T30644] core_sys_select+0x86d/0xb40 [ 1808.537523][T30644] page last free pid 30641 tgid 30640 stack trace: [ 1808.544005][T30644] __free_frozen_pages+0xc1e/0xd10 [ 1808.549110][T30644] stack_depot_save_flags+0x407/0x800 [ 1808.554473][T30644] kasan_save_track+0x4f/0x80 [ 1808.559143][T30644] __kasan_kmalloc+0x93/0xb0 [ 1808.563723][T30644] __kmalloc_noprof+0x375/0x720 [ 1808.568567][T30644] __vb2_queue_alloc+0x2a0/0x1660 [ 1808.573588][T30644] vb2_core_reqbufs+0xc3f/0x1470 [ 1808.578518][T30644] __vb2_init_fileio+0x310/0x1040 [ 1808.583534][T30644] vb2_core_poll+0x4b0/0x830 [ 1808.588114][T30644] vb2_fop_poll+0x196/0x310 [ 1808.592609][T30644] v4l2_poll+0x147/0x2c0 [ 1808.596846][T30644] do_select+0x1067/0x17f0 [ 1808.601253][T30644] core_sys_select+0x86d/0xb40 [ 1808.606009][T30644] __se_sys_pselect6+0x267/0x320 [ 1808.610944][T30644] do_syscall_64+0x174/0x580 [ 1808.615522][T30644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1808.621402][T30644] [ 1808.623711][T30644] Memory state around the buggy address: [ 1808.629405][T30644] ffffc900067bcf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1808.637456][T30644] ffffc900067bcf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1808.645506][T30644] >ffffc900067bd000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1808.653548][T30644] ^ [ 1808.657607][T30644] ffffc900067bd080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1808.665654][T30644] ffffc900067bd100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1808.673695][T30644] ================================================================== [ 1808.739401][T30644] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1808.746643][T30644] CPU: 1 UID: 0 PID: 30644 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 1808.758021][T30644] Tainted: [L]=SOFTLOCKUP [ 1808.762340][T30644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1808.772386][T30644] Call Trace: [ 1808.775656][T30644] [ 1808.778575][T30644] vpanic+0x56c/0xa60 [ 1808.782559][T30644] ? __pfx_vpanic+0x10/0x10 [ 1808.787052][T30644] ? __pfx___schedule+0x10/0x10 [ 1808.791893][T30644] panic+0xc5/0xd0 [ 1808.795606][T30644] ? __pfx_panic+0x10/0x10 [ 1808.800016][T30644] ? preempt_schedule_common+0x82/0xd0 [ 1808.805465][T30644] ? tpg_fill_plane_buffer+0x1b4f/0x5ea0 [ 1808.811090][T30644] check_panic_on_warn+0x89/0xb0 [ 1808.816025][T30644] ? tpg_fill_plane_buffer+0x1b4f/0x5ea0 [ 1808.821650][T30644] end_report+0x73/0x170 [ 1808.825885][T30644] ? tpg_fill_plane_buffer+0x1b4f/0x5ea0 [ 1808.831509][T30644] kasan_report+0x128/0x150 [ 1808.836005][T30644] ? trace_irq_disable+0x3b/0x140 [ 1808.841028][T30644] ? tpg_fill_plane_buffer+0x1b4f/0x5ea0 [ 1808.846661][T30644] kasan_check_range+0x264/0x2c0 [ 1808.851592][T30644] ? tpg_fill_plane_buffer+0x1b4f/0x5ea0 [ 1808.857217][T30644] __asan_memcpy+0x40/0x70 [ 1808.861626][T30644] tpg_fill_plane_buffer+0x1b4f/0x5ea0 [ 1808.867103][T30644] vivid_thread_vid_cap_tick+0x115c/0x6340 [ 1808.872912][T30644] ? __lock_acquire+0x683/0x2cf0 [ 1808.877846][T30644] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1808.883644][T30644] ? lockdep_hardirqs_on+0x7a/0x110 [ 1808.888838][T30644] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1808.894981][T30644] ? vivid_thread_vid_cap+0x491/0x11e0 [ 1808.900432][T30644] ? cgroup1_freezing+0x29a/0x350 [ 1808.905451][T30644] vivid_thread_vid_cap+0x927/0x11e0 [ 1808.910726][T30644] ? __lock_acquire+0x683/0x2cf0 [ 1808.915658][T30644] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1808.921364][T30644] ? do_raw_spin_lock+0x12b/0x2f0 [ 1808.926385][T30644] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1808.932180][T30644] ? __kthread_parkme+0x71/0x1f0 [ 1808.937117][T30644] ? __kthread_parkme+0x196/0x1f0 [ 1808.942140][T30644] kthread+0x388/0x470 [ 1808.946202][T30644] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1808.951911][T30644] ? __pfx_kthread+0x10/0x10 [ 1808.956492][T30644] ret_from_fork+0x514/0xb70 [ 1808.961085][T30644] ? __pfx_ret_from_fork+0x10/0x10 [ 1808.966184][T30644] ? __switch_to+0xc89/0x1420 [ 1808.970861][T30644] ? __pfx_kthread+0x10/0x10 [ 1808.975442][T30644] ret_from_fork_asm+0x1a/0x30 [ 1808.980199][T30644] [ 1808.983458][T30644] Kernel Offset: disabled [ 1808.987770][T30644] Rebooting in 86400 seconds..