last executing test programs: 43m38.97967946s ago: executing program 3 (id=908): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001680)) r3 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) 43m37.036996948s ago: executing program 3 (id=915): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r2, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 43m36.077355629s ago: executing program 3 (id=918): openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) preadv(0xffffffffffffffff, &(0x7f0000002280), 0x0, 0x10001, 0x7) r3 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r3, 0x1) flock(r3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000040c0)={0x2020}, 0x2020) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0xb}, 0x8) 43m34.07629497s ago: executing program 3 (id=924): socket(0x840000000002, 0x3, 0xfa) r0 = syz_io_uring_setup(0x1e1a, &(0x7f0000000440)={0x0, 0x430, 0x10100, 0x0, 0x83}, &(0x7f0000002000)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23}) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000002300)={0x50, 0x0, r4, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r3, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r6, r3, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) io_uring_enter(r0, 0x100048ed, 0x0, 0x2, 0x0, 0x0) 43m33.525570019s ago: executing program 3 (id=925): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffe0, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x9, 0xc, 0x8, 0x1}}}}]}, 0x48}}, 0x4008800) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 43m33.269667204s ago: executing program 3 (id=927): socket$nl_route(0x10, 0x3, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001100)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a7042b10460d810082190102030109021b00010000000009040000018984aa0009050c7f"], 0x0) 43m32.622249571s ago: executing program 32 (id=927): socket$nl_route(0x10, 0x3, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001100)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a7042b10460d810082190102030109021b00010000000009040000018984aa0009050c7f"], 0x0) 36m16.625825076s ago: executing program 0 (id=2249): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x80}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ptype\x00') read$FUSE(r4, &(0x7f0000000b00)={0x2020}, 0x2020) read$dsp(r4, &(0x7f0000002b40)=""/4096, 0x1000) write$P9_RCLUNK(r4, &(0x7f0000000180)={0x7, 0x79, 0x1}, 0x7) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="38010000"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8}, @XFRMA_IF_ID={0x8}]}, 0x148}}, 0x0) add_key(&(0x7f0000000200)='cifs.spnego\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="35af9741bc5eda54ba34ad760c8b2294db2b808edc6e29cb5690a0f487800273922d553fa4641827c206", 0x2a, 0xfffffffffffffffc) 36m16.264773697s ago: executing program 0 (id=2251): socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 36m16.081709871s ago: executing program 0 (id=2252): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) madvise(&(0x7f00003cd000/0x1000)=nil, 0x1000, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req={0x3, 0x10004, 0x800, 0x7}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r4 = fsmount(r3, 0x0, 0x4) openat$cgroup_pressure(r4, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1e4, 0x20a, 0x278, 0x1e4, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x154, 0x0, {}, [@inet=@rpfilter={{}, {0x4}}, @inet=@rpfilter={{}, {0x4}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @loopback, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xff], 'bond0\x00', 'pim6reg1\x00', {}, {0xff}}, 0x0, 0xa4, 0xd4}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x5}, {0x2, 0x0, 0x3}, 0xf, 0x4}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0xffffffffffffff1d) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') lseek(r6, 0xfffd, 0x0) 36m14.187275149s ago: executing program 0 (id=2257): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001500), 0x0, 0x4000800) shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x400c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x4dc8aa39}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 36m11.873752368s ago: executing program 0 (id=2263): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xa, &(0x7f0000ffb000/0x3000)=nil) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0608630002560e2be2c64c", 0xd, 0xfffffffffffffffd) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x28, r4, 0x311, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) 36m9.121904387s ago: executing program 0 (id=2270): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) semctl$SETALL(0x0, 0x0, 0x14, &(0x7f0000000040)) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x8, 0x0, 0x2, 0x0, 0x9a}) r3 = syz_open_dev$sndctrl(0x0, 0x7, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000b00)=0x6) r4 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xcb) r5 = add_key$fscrypt_v1(&(0x7f0000001380), &(0x7f0000000280)={'fscrypt:', @auto=[0x37, 0x0, 0x0, 0x33, 0x61, 0x0, 0x0, 0x34, 0x31, 0x35, 0x34, 0x35, 0x0, 0x39, 0x65]}, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x2, &(0x7f00000002c0)={0x3, 0x3, &(0x7f0000000740)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SOUND_MIXER_WRITE_RECSRC(r4, 0xc0044dff, &(0x7f0000000100)=0x9) 35m53.680045002s ago: executing program 33 (id=2270): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) semctl$SETALL(0x0, 0x0, 0x14, &(0x7f0000000040)) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153bdf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x8, 0x0, 0x2, 0x0, 0x9a}) r3 = syz_open_dev$sndctrl(0x0, 0x7, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000b00)=0x6) r4 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xcb) r5 = add_key$fscrypt_v1(&(0x7f0000001380), &(0x7f0000000280)={'fscrypt:', @auto=[0x37, 0x0, 0x0, 0x33, 0x61, 0x0, 0x0, 0x34, 0x31, 0x35, 0x34, 0x35, 0x0, 0x39, 0x65]}, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x2, &(0x7f00000002c0)={0x3, 0x3, &(0x7f0000000740)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SOUND_MIXER_WRITE_RECSRC(r4, 0xc0044dff, &(0x7f0000000100)=0x9) 34m37.540438338s ago: executing program 2 (id=2494): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001700)=ANY=[@ANYBLOB="480000000002010400000000000000007800000004000380300002802c00018014000300fc00005ba7ede500000000000020140004004e261cdfc8a9050d4f1800000000000000000000ffffffffffff9166d9d0d2ba159d7b7d2b5fb20ae83882a7d70539bec8ae070f207f3b465a560504b507df320dce2ac31ff1ca7ac1b3558113e6b141e108fa888a399d820092572b9cb84f98c624e415d194e4d2404d8ba5035c174275987d474cf9b3e063d63874d6dac96391cf4199d6f3f0a0c0339c075fbc3590c2d523221474eb68113a11ccc9baed9884af"], 0x48}, 0x1, 0x0, 0x0, 0x200080d0}, 0x0) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000011540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'batadv0\x00', &(0x7f0000000240)=@ethtool_stats}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f00000015c0)) socket$packet(0x11, 0x3, 0x300) r7 = dup(r5) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000080)={0x0, r7}) eventfd2(0x8001, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f0000000100)=0x549e, 0x4) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000380)={0xf0f004, 0x2}) 34m35.469736476s ago: executing program 2 (id=2497): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400500142603600e120800060000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) pselect6(0xa0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x80000000000300, 0x0, 0x0, 0x4, 0x80000000000}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f0000000300)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x4d, &(0x7f00000003c0)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x3f, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e21, 0x2b, 0x0, @opaque="c6089a52713165421ee7b2c5e89599174425a85a52ad1b80863abbdd7341f632804b12"}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 34m33.500959018s ago: executing program 2 (id=2503): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) setregid(0xee01, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read(r0, 0x0, 0x0) syz_io_uring_setup(0x10f, 0x0, 0x0, &(0x7f0000000280)) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000000140)=[{0x63, 0xa021, 0x0, 0x0}], 0x1}) 34m31.936181086s ago: executing program 2 (id=2504): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001140)) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x8000000) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b000100000000090437"], 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0xaede, 0x1000, 0x2, 0xbfdffffc}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x2) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) read$char_usb(r2, &(0x7f00000002c0)=""/151, 0x97) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) writev(r2, &(0x7f0000001880)=[{&(0x7f00000005c0)='~', 0x1}, {&(0x7f0000000680)="54c8", 0x2}], 0x2) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 34m31.172775758s ago: executing program 6 (id=2506): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$uac1(0x2, 0xaf, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x8], 0xfb}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x2, 0x2, 0x900, 0x9, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0xe}, @feature_unit={0x7, 0x24, 0x6, 0x0, 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x205, 0x0, 0x5}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x0, 0x1, [0x6]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x20, {0x7}}}}}}}]}}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x20, 0xffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f00000000c0)="010000000600275eaea4ca5826d8f50ee7f9ff0000006bb57ae0fffc5aadff07000088d18ee9cb1a75d14ff5cf5ad0ca816f40a8333c3532a19673b6dab6301fd45fb039", 0x44, 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$getownex(r0, 0x10, &(0x7f0000000300)={0x0, 0x0}) ptrace$cont(0x1f, r4, 0x100, 0x4) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x17, &(0x7f0000000480)=0x1d, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) sendmsg$nl_route(r5, 0x0, 0x800) 34m29.957347008s ago: executing program 2 (id=2510): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000040)={0x6, 0x1700, "778d8ce72aa8f35457c8617739b4948e07180be64604d3a5", {0x9, 0x8}, 0x2}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000000)) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl2\x00', 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000580)={0x237, 0x7d, 0x2, {{0x500, 0xf6, 0x0, 0x5000000, {0x96346fe8a85d2583, 0x0, 0x8}, 0x41400000, 0x0, 0xe5e0, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x33, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x3e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x00\x00\x00\x00\x00\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x801, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) 34m27.619799008s ago: executing program 2 (id=2513): r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) mmap(&(0x7f0000050000/0x1000)=nil, 0x1000, 0x200000c, 0x832, 0xffffffffffffffff, 0xffffd000) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x100000000a, &(0x7f0000000040)=0x800000001, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008040, &(0x7f0000000000)={0xa, 0x4e29, 0x4410666d, @private2, 0x9}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='~', 0x1, 0x40000, 0x0, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac100088026"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4040806) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3ff, 0x100) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 34m26.365183561s ago: executing program 6 (id=2515): modify_ldt$write(0x1, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff8000000000000008000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) modify_ldt$write(0x1, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r2 = socket$inet(0x2, 0x80001, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r3, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a4, 0x0) listen(r3, 0x3) bind$inet(r2, &(0x7f0000000040)={0x2, 0xee20, @empty}, 0x10) listen(r2, 0x3) close(0x3) socket$kcm(0x11, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000022c0)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {0x9}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000000)={0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x5, 0x0, 0x0, 0x0) 34m25.38013716s ago: executing program 6 (id=2518): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x11000) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x101400) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r6, 0xc01064ac, &(0x7f0000000000)={r7, 0x1000, &(0x7f0000002a80)=""/4096}) close(0xffffffffffffffff) unshare(0x2c020400) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r8, 0x11, 0x66, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) poll(&(0x7f0000000140)=[{r3, 0x8}, {r2, 0x2cfc08c20dafc34e}, {r8, 0xa8}, {r0, 0xf102}], 0x4, 0x8000007) 34m23.252092554s ago: executing program 6 (id=2521): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0xfffffffd, 0x0}, 0x6400c810) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_clone(0x4038000, &(0x7f00000001c0)="ce6c21ee23995e760cf0ea262d7a25d4bf336e15dd8906a93c2aacad74a32323c3b52bd251a39ddd44219b2111783adf475deaa4ff9ae8ad0f8d55b7230cb36fb26503fa7f7b91f9f023f3844c337fd18cdc2bbba71a8225228e6af7909981e888a9942e4334d16bfb17f7f9146826fb38194fd78df46d96a6cec667d30ab0e30b53ea260bb2d3b6", 0x88, &(0x7f0000000280), &(0x7f0000000480), &(0x7f00000004c0)="c8c77f1ace667fe683a69198e1549d4194db2998300c7e8986222ad49540c09ab6c348af75ad1eb8c8c44bddbf12ba4f13ce7832cce300007fe95dba702ce8efc57db904410194acff7440578062d4a426b366f10393b4d671f82003cf6b081267fd7206a9069208deca7231e884ea66bd846f1db6248b9c8c2b54b59ca41fbe9b6c0a470300000000000000a8ad0f1b3ca4162feb6d7553c4ed82c4148ba4faf6982cf92777dbec88c02c09853007331bd4ff5f1ce31b499a383519ab11034b7470a1bce5197aa0bd39fb2e9727e49d81e6f1ed0cc8bede97de84611ecc0a87affcd67fe91a71d0add8dcb9f6601e6ccfb1798bd0f5729243e75fe2ee6f9dc0aa784fe7e276978fb33342333fff2509af0ab68274cd511d338f458e22cada9e20e5ed9beed8c5e2b5142ba29855804c48f08d73cf8683f969de0087c51a0d3373a53e6ec28a1bb4cef3c5609c") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x4010, 0xffffffffffffffff, 0x0) unshare(0x22020600) syz_io_uring_setup(0x7b1d, &(0x7f0000000280)={0x0, 0x0, 0x8000, 0x0, 0x3}, &(0x7f0000000100), &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000"], 0x18c) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d800000018008105e00212ba0d8105040a020200020f100b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb", 0xd5}], 0x1}, 0x0) 34m17.402514412s ago: executing program 6 (id=2524): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) fsopen(&(0x7f00000003c0)='befs\x00', 0x1) writev(0xffffffffffffffff, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = syz_io_uring_setup(0x5fce, &(0x7f0000000940)={0x0, 0x939e, 0x1, 0xfffffffe, 0x35}, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000800)={0x0}, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000900)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x3}, 0x1) close_range(r2, r2, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 34m15.543924925s ago: executing program 6 (id=2526): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) socket$nl_crypto(0x10, 0x3, 0x15) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x810}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0xfffffff3, 0x4) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r2, &(0x7f0000000400)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) unshare(0x6e000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 34m12.428603304s ago: executing program 34 (id=2513): r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) mmap(&(0x7f0000050000/0x1000)=nil, 0x1000, 0x200000c, 0x832, 0xffffffffffffffff, 0xffffd000) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x100000000a, &(0x7f0000000040)=0x800000001, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008040, &(0x7f0000000000)={0xa, 0x4e29, 0x4410666d, @private2, 0x9}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='~', 0x1, 0x40000, 0x0, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac100088026"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4040806) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3ff, 0x100) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 33m59.93315062s ago: executing program 35 (id=2526): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) socket$nl_crypto(0x10, 0x3, 0x15) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x810}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0xfffffff3, 0x4) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r2, &(0x7f0000000400)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) unshare(0x6e000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 18.859346436s ago: executing program 8 (id=6111): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) brk(0x400000ffc000) r5 = syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="7365aa6c97a937451dbece6375726974792e2f640004000000000000"]) ioctl$FS_IOC_RESVSP(r5, 0x80086601, 0x0) r6 = fsopen(&(0x7f0000000000)='ufs\x00', 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000600)={'syztnl0\x00', 0x0}) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000300)='posixacl\x00', 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000200), 0x4) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x12cc, 0x1184, 0x150, 0x150, 0x1184, 0xf8010000, 0x124c, 0x238, 0x238, 0x124c, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [], [], 'team_slave_0\x00', 'hsr0\x00', {0xff}, {}, 0x84}, 0x0, 0x10d4, 0x113c, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x1, './cgroup.net/syz0\x00', 0x1000000, {0x8}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'batadv_slave_0\x00', 'gre0\x00', {}, {}, 0x87}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x1328) socket(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00'}) 16.499278091s ago: executing program 8 (id=6105): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x6, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x41414270, 0x0, 0x0, [{}, {}, {0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x7}], 0x7}}, 0xfffffffc}) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1}) ioctl$VIDIOC_DQEVENT(r6, 0x80885659, &(0x7f0000000240)={0x0, @src_change}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af60, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_connect(0x0, 0x12, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) 15.676891603s ago: executing program 1 (id=6109): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262) r5 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, 0x0) sendto$inet(r2, 0x0, 0x0, 0x400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x4004084, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x3fc, 0x1, 0x32, 0xb}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x300, 0x0, 0x0, 0x54}, 0x9c) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 13.349636231s ago: executing program 1 (id=6110): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20007, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="00b107471e52"], 0xfdef) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0xc04c561a, &(0x7f00000000c0)) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b70500060000000061102c000000bb7ae8203d318351e419ac5fad57293900004000000000000000950000000000000095fb01604c65a0973e95dc7f9ccea5da4f6415581d"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x2000775) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a8001000700000000000000000000000000000000001400350077673100000000000000000000000000ed0c595c27f95a1b796e2bd39bb6f2056dd4c3564c2bb613e67cea150dc0f18284037150a3f007798d7e46e60cdae33425aa68b88c27443883688a97d06bd2df0e8a329335600ec1ff0997730b58db259254e67cbb1fdfc1cb9304"], 0x50}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x4000000004882, 0x0) mremap(&(0x7f0000662000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000016b000/0x2000)=nil) 12.829575972s ago: executing program 4 (id=6113): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20007, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="00b107471e52"], 0xfdef) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0xc04c561a, &(0x7f00000000c0)) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b70500060000000061102c000000bb7ae8203d318351e419ac5fad57293900004000000000000000950000000000000095fb01604c65a0973e95dc7f9ccea5da4f6415581d"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r1, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x2000775) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a8001000700000000000000000000000000000000001400350077673100000000000000000000000000ed0c595c27f95a1b796e2bd39bb6f2056dd4c3564c2bb613e67cea150dc0f18284037150a3f007798d7e46e60cdae33425aa68b88c27443883688a97d06bd2df0e8a329335600ec1ff0997730b58db259254e67cbb1fdfc1cb9304"], 0x50}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x4000000004882, 0x0) mremap(&(0x7f0000662000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000016b000/0x2000)=nil) 12.475653336s ago: executing program 8 (id=6114): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r1) truncate(&(0x7f0000000200)='./mnt\x00', 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) socket(0xb, 0x3, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xffffff64, 0xfffffffc}, 0x0) syz_open_dev$video(0x0, 0xa7, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) writev(r4, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) 12.346196433s ago: executing program 5 (id=6115): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r1) truncate(&(0x7f0000000200)='./mnt\x00', 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) socket(0xb, 0x3, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xffffff64, 0xfffffffc}, 0x0) syz_open_dev$video(0x0, 0xa7, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) writev(r4, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x138, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x7}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x4000}]}]}, 0x138}}, 0x4040000) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r7 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r7, 0x40045730, &(0x7f0000000080)) 11.877309161s ago: executing program 7 (id=6116): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) 11.097845443s ago: executing program 1 (id=6117): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) select(0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000000000000000, 0x7}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0xb}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r1, 0x0, 0x0, 0xfffffe04, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x5f85, &(0x7f0000000600)={0x0, 0x7d71, 0x20, 0x0, 0x368}, &(0x7f0000000280), &(0x7f0000000000)) readv(r3, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x100e}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000700)={{0x0, 0x1, 0xffffffff, 0xfffffff8, 'syz0\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x9, 'syz0\x00', 0x0}) r4 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x1cba8c72}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x177ffb498171ed1, 0x8040010) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, &(0x7f0000000180)) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x1, 0x2, &(0x7f0000000040)="82"}) syz_open_dev$tty1(0xc, 0x4, 0x4) 11.097504586s ago: executing program 7 (id=6118): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x101) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000002c0)={0x0, 0x10, 0x70b6}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$rds(0x15, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x7}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0x80}}, 0x0) sendmsg$rds(r4, 0x0, 0x0) set_mempolicy(0x6005, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x80000001}, 0x50) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000640)={0x28, r8, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xf2}]}]}, 0x28}}, 0x40040) 11.097344214s ago: executing program 4 (id=6119): socket$kcm(0x10, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0xb, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) syz_open_dev$tty1(0xc, 0x4, 0x1) 9.907000742s ago: executing program 8 (id=6120): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x6, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x41414270, 0x0, 0x0, [{}, {}, {0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x7}], 0x7}}, 0xfffffffc}) openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r6 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af60, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_connect(0x0, 0x12, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) 8.712399359s ago: executing program 4 (id=6121): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f00008d9000/0x4000)=nil, 0x4000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x800) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket(0x1e, 0x80801, 0x1) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0, 0x1200) setsockopt$inet_int(r6, 0x0, 0x18, &(0x7f0000000200)=0x7fd, 0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) 8.710950739s ago: executing program 7 (id=6131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r1, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0xe}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf25550000", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4040040) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd5000f8dbdf2555000000080001004f00000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) 8.710120017s ago: executing program 5 (id=6122): openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262) r3 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) 8.607619801s ago: executing program 1 (id=6123): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) lseek(r2, 0xfffffffffffffffc, 0x0) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2], [0x4, 0x4, 0x0, 0x0, 0x0, 0x431]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc00c6419, &(0x7f00000005c0)={0x4, &(0x7f00000002c0)=""/202, &(0x7f00000004c0)=[{0x6, 0x87, 0x5, &(0x7f00000003c0)=""/135}, {0xd2bd, 0x38, 0xfffffff9, &(0x7f0000000480)=""/56}, {0xb3, 0xc5, 0x6, &(0x7f0000000980)=""/197}, {0x6, 0x1000, 0x200, &(0x7f0000001e00)=""/4096}]}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) r7 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) connect$inet(r6, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r8 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x82401) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48) ioctl$MEDIA_IOC_REQUEST_ALLOC(r8, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r9, 0x7c81, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r10, &(0x7f0000000300)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) socket$kcm(0x2, 0x5, 0x84) 8.399608309s ago: executing program 7 (id=6124): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505330, 0x0) ptrace(0x10, 0x1) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x304000, 0x800, 0x0, 0x3}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x818d, 0x10100}, &(0x7f00000002c0)=0x0, 0x0) syz_io_uring_submit(r9, 0x0, 0x0) io_uring_enter(r8, 0x2def, 0xfffffffd, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 6.529869692s ago: executing program 8 (id=6125): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x6, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x41414270, 0x0, 0x0, [{}, {}, {0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x7}], 0x7}}, 0xfffffffc}) openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r6 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1}) ioctl$VIDIOC_DQEVENT(r6, 0x80885659, &(0x7f0000000240)={0x0, @src_change}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af60, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_connect(0x0, 0x12, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) 6.234885445s ago: executing program 4 (id=6126): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r6, 0x0, &(0x7f0000000140)) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0x7}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40010) sendmmsg$inet(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)="c2d611c89c220e25943fb0", 0xb}, {&(0x7f0000000300)="1744493947f3f194d945da4a5105056f0f665ecfbb449db768cb01290f9eaaf57ab4fd1b986e", 0x26}, {&(0x7f0000000440)="ec2795a51677975067161cd21531c57f6a1506eee2bfed36334025c28b0e2dd4ac6da428b42e6ec6930863de5c136e2902a53b730b2cb4b4a6f2053817b24a6db33afb4989a62e", 0x47}, {&(0x7f0000000340)="c8250af5859494ca246324a514b1f51f227767a5c28efeaa5b89fee2445002474fa6eff7cc7e3e577b4c4ce3b553972ad9b89278a2be6408a3f524f554c0d8882f9ca7a47d304cee20ff85409407ecd4c84acf0aefb53fa00de3b65261", 0x5d}, {&(0x7f0000000500)="7f0545478791604f5c2acabcf0c6c2700a63ff39", 0x14}, {&(0x7f00000005c0)="f4533216dd2e46b4f592e57d1ed2d8d17fbe8fe3b3fc9bf7237719adef8835bb0057948b94998e69cb87dea47f4f4ec934e5f2d9565ce4fc48a960739f5bf9bd616545f814d59382c975247f9e9e522c2a3d14a534562507be7a76ed3cfa8048c62cad08f12b88357957553f6d42079773f1f0594c25ca31", 0x78}], 0x6, &(0x7f0000000800)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x1}}], 0x10}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000840)="81ef5108ef6a32b31a034a00935e753631576ba5273e4c5f21f9e092a7e94eeee2cb1c6da251f55c4476ec39ba572f3b9b7d47c1dfb073b6905a68bdd1cd5d6a996b5ed5eed836acdcdb5c36c2dd93f6641201ab3959d8eda706f2bde95d7507858c6aa16c1759ff8ca42f8313ef2e9704d8d1b5f24b141156ac9ee0ccf09fd24d63ef2ba3f7163784b1117acc11645cb5fe62f7beecf560a4efdd4295a1ac501faa1cb7b6ca02ffaf4c004990dc7f862e67aea6d22fa985bf5d2f93b4ad1df4134cc84ad370114a5074715f81dd66f533216ef00bca961536a3934059e7ba651ca471", 0xe3}, {&(0x7f0000000940)="cffbe8b77c07517094ff595ce2e6fc7df39bb1cd2b7b54ceb65f93f33461c79e4beeb23b829ecd342ea42deea38c0339f3d9e13ba7fce45912512546f2711e635111a891667849bd71ff049977a124893473e6e79a4af60dd15aaeedf0cb49", 0x5f}, {&(0x7f00000009c0)="7f", 0x1}], 0x3, &(0x7f0000000a40)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @remote}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@noop, @rr={0x7, 0x27, 0xd, [@remote, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x3a}, @local, @remote, @broadcast]}]}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x99a}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @remote, @remote}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r7, @local, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x8c}}], 0x2, 0x8080) sendfile(r3, r4, 0x0, 0x20000023896) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0100001a00130700000000fcdbde252001000000000000000000000000000120010000000000000000000000000001000000004e210002020000003b000100", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 5.451424779s ago: executing program 1 (id=6127): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xd40, 0x82) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f00000001c0)={@local, @broadcast}, &(0x7f0000000200)=0xc) openat$btrfs_control(0xffffff9c, &(0x7f00000002c0), 0x20642, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x0, 0x0, &(0x7f0000000a00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0xd) ioctl$TCFLSH(r5, 0x540b, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180140002"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) fsopen(&(0x7f0000000040)='sockfs\x00', 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="05ac0f000cac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 5.443908071s ago: executing program 5 (id=6128): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20007, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="00b107471e52"], 0xfdef) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0xc04c561a, &(0x7f00000000c0)) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b70500060000000061102c000000bb7ae8203d318351e419ac5fad57293900004000000000000000950000000000000095fb01604c65a0973e95dc7f9ccea5da4f6415581d"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x2000775) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a8001000700000000000000000000000000000000001400350077673100000000000000000000000000ed0c595c27f95a1b796e2bd39bb6f2056dd4c3564c2bb613e67cea150dc0f18284037150a3f007798d7e46e60cdae33425aa68b88c27443883688a97d06bd2df0e8a329335600ec1ff0997730b58db259254e67cbb1fdfc1cb9304"], 0x50}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x4000000004882, 0x0) mremap(&(0x7f0000662000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000016b000/0x2000)=nil) 4.951568827s ago: executing program 7 (id=6129): openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262) r4 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, 0x0) sendto$inet(r1, 0x0, 0x0, 0x400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x4004084, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x3fc, 0x1, 0x32, 0xb}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.493358081s ago: executing program 4 (id=6130): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYRESHEX=r0], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) syz_emit_ethernet(0x10b, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000050011fcfc505230d81a8ddebea88d38fe418bd61b7b40efc8079473e76b80f89c2fb79803a7091c617f8f0476cceee025aaadaa29fb8bcfbc0047e0876d5388f3e32aca152635384fa9f371f5c49784e0c00ed4684fcf096bef712253fa3e8273911dfcef6d389ad4e7af204c96cc1541305078b7cb86f29e7ab25d0182da772f17ad4178f2a23c115f1e6450865a9eb53604c795d1febf02bd35bb1369296594bd997e7ab532e1fed2ee31d50d0276627d24d4b7270e95ee3b787247c892dfab7b9b66cb881fc1e8ceb14806ae93978f"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x1) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f0000000540)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x3, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x2b, 0x7, '\x00', [@enc_lim={0x4, 0x1, 0x74}]}}}], 0x20}}], 0x2, 0x4000001) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 3.03182765s ago: executing program 5 (id=6132): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r1) truncate(&(0x7f0000000200)='./mnt\x00', 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) socket(0xb, 0x3, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xffffff64, 0xfffffffc}, 0x0) syz_open_dev$video(0x0, 0xa7, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) writev(r4, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x138, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x7}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x4000}]}]}, 0x138}}, 0x4040000) 1.748391732s ago: executing program 8 (id=6133): socket$kcm(0x10, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0xb, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000000)) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0x100000000000f7) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000280)=0x14) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdd5}, 0x94) r5 = syz_open_dev$vim2m(&(0x7f0000000240), 0x41d3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) 1.704986157s ago: executing program 1 (id=6134): socket$kcm(0x10, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0xb, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) syz_open_dev$tty1(0xc, 0x4, 0x1) 1.578357771s ago: executing program 5 (id=6135): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r1, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0xe}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf25550000", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4040040) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd5000f8dbdf2555000000080001004f00000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) 1.572677165s ago: executing program 7 (id=6136): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f00000003c0)='./bus\x00', 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r8 = open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) ftruncate(r8, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r6, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) write$FUSE_NOTIFY_RESEND(r2, &(0x7f0000002040)={0x14}, 0x14) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RSETATTR(r11, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r10, 0x0, r1, 0x0, 0x20000000000002, 0x2) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0xa6, 0xffffffb9, 0x1a}, 0x9c) close_range(r0, 0xffffffffffffffff, 0x0) 948.399265ms ago: executing program 5 (id=6137): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x20000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180) fsopen(&(0x7f00000000c0)='ocfs2\x00', 0x1) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r4 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x19}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0xa, 0x0, 0x6, 0x480, 0x4000000000000009, 0x10200}) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a001000000002", 0x29}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x20, 0x25, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000d50a0000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000493c010000000000950000000000000018120000aec72eed7b8a0d09", @ANYRESHEX=r2, @ANYRES16], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x15, &(0x7f00000001c0)=""/21, 0x41100, 0x46, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0x4, 0x8, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000880)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000008c0)=[{0x2, 0x2, 0x4, 0x2}, {0x3, 0x4, 0x1000b, 0xa}, {0x3, 0x2, 0x6, 0xa}, {0x1, 0x4, 0x20c, 0xa}], 0x10, 0x2}, 0x94) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) dup(r4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04fa81060c0db5f2a900000000000000000000000009000000"], 0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000001780)={&(0x7f0000000640), &(0x7f0000000440)=[{}, {}, {}, {}], &(0x7f0000000640), &(0x7f0000000640), 0x4}) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021380011800a0001006c696d6974000000280002800c00024000000000000000030c00014000000000000001010c0001400000000000000101b81700000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000008c1703800c0000800800034000000002"], 0x1874}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 0s ago: executing program 4 (id=6138): r0 = syz_open_procfs(0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2e0000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r4, 0x0, 0x0, 0x800) recvmmsg(r6, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}, 0x2}], 0x1, 0x10022, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}, 0x7, 0x9, 0x0, 0x6, 0x2e9e}, &(0x7f0000000000)=0x98) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, 0x0, &(0x7f00000006c0), 0x2000000}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) unshare(0x6a040000) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x2, &(0x7f0000000200), 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2c02, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) kernel console output (not intermixed with test programs): [ T5846] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 2633.225295][T27056] usb 5-1: USB disconnect, device number 33 [ 2635.620668][T27056] usb 9-1: USB disconnect, device number 88 [ 2635.996292][ T751] netlink: 'syz.4.5419': attribute type 6 has an invalid length. [ 2636.016290][ T751] QAT: failed to copy from user cfg_data. [ 2639.453345][ T787] fuse: Unknown parameter '¦)Í0x0000000000000005' [ 2639.712940][ T790] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5425'. [ 2640.399472][T26397] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2640.569162][T26397] usb 2-1: Using ep0 maxpacket: 8 [ 2640.584518][T26397] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 2640.652568][T26397] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2640.664629][T26397] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2640.682763][T26397] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 2640.704189][T26397] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2640.719244][T26397] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2640.779244][T26397] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2640.839881][T26397] usb 2-1: config 0 descriptor?? [ 2640.845899][ T791] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2640.966189][ T801] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5426'. [ 2641.203133][ T807] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5428'. [ 2641.291070][ T810] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5427'. [ 2642.426843][T18785] usb 2-1: USB disconnect, device number 30 [ 2642.430199][ T5846] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 2643.074175][ T819] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5430'. [ 2645.357269][ T839] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5435'. [ 2646.550901][ T846] program syz.5.5436 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2647.265409][ T853] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5437'. [ 2647.488930][ T575] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 2647.648946][ T575] usb 5-1: Using ep0 maxpacket: 32 [ 2647.657257][ T575] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2647.665638][ T575] usb 5-1: config 0 has no interface number 0 [ 2647.678186][ T575] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2647.694380][ T575] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2647.712616][ T575] usb 5-1: Product: syz [ 2647.717061][ T575] usb 5-1: Manufacturer: syz [ 2647.746391][ T575] usb 5-1: SerialNumber: syz [ 2647.920130][ T575] usb 5-1: config 0 descriptor?? [ 2648.051319][ T575] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2648.139670][ T575] usb 5-1: selecting invalid altsetting 1 [ 2648.145683][ T575] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2648.189049][ T575] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2648.209863][ T575] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2648.233503][ T575] usb 5-1: media controller created [ 2648.296404][ T575] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2648.370315][ T863] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5440'. [ 2648.430026][ T575] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 2648.437300][ T575] zl10353_read_register: readreg error (reg=127, ret==-32) [ 2648.443039][ T852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5438'. [ 2649.216148][ T575] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 2649.552887][ T575] usb 5-1: USB disconnect, device number 34 [ 2651.213904][ T892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5444'. [ 2651.774472][ T901] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5446'. [ 2652.843680][ T906] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5447'. [ 2653.469095][ T918] [U]  [ 2654.905592][ T931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5449'. [ 2655.085789][ T937] trusted_key: encrypted_key: hex blob is missing [ 2655.383834][ T943] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5451'. [ 2655.600886][ T952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5452'. [ 2656.568423][ T964] netlink: 'syz.1.5454': attribute type 2 has an invalid length. [ 2656.638769][ T966] netlink: 'syz.1.5454': attribute type 2 has an invalid length. [ 2656.682671][ T964] !: entered promiscuous mode [ 2657.814987][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2657.821532][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2658.095663][ T975] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5456'. [ 2660.876370][ T1004] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5464'. [ 2660.963445][ T1006] netlink: 'syz.1.5465': attribute type 6 has an invalid length. [ 2660.983448][ T1006] QAT: failed to copy from user cfg_data. [ 2661.931410][ T1011] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5466'. [ 2661.940998][ T1012] vlan0: entered promiscuous mode [ 2662.068497][ T1017] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5467'. [ 2663.926603][ T1040] netlink: 'syz.4.5470': attribute type 2 has an invalid length. [ 2663.973477][ T1040] !: entered promiscuous mode [ 2664.026439][ T1039] netlink: 'syz.4.5470': attribute type 2 has an invalid length. [ 2664.034490][ T1039] !: left promiscuous mode [ 2664.907594][ T1043] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5471'. [ 2665.335633][ T1048] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5482'. [ 2667.714222][ T1074] [U]  [ 2668.210906][ T1083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5476'. [ 2670.311738][ T1102] IPv6: Can't replace route, no match found [ 2670.717893][ T1106] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5480'. [ 2671.739259][ T1113] delete_channel: no stack [ 2672.200629][ T1117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5484'. [ 2672.325099][ T1124] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5486'. [ 2672.552470][ T1125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5487'. [ 2673.827727][ T1130] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5488'. [ 2673.840278][ T1130] syz_tun: left allmulticast mode [ 2674.613600][ T1138] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5490'. [ 2676.062414][ T1154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5493'. [ 2677.690859][ T1165] vhci_hcd vhci_hcd.0: port 0 already used [ 2677.755359][ T1166] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2677.799159][ T1166] vim2m vim2m.0: vidioc_s_fmt queue busy [ 2679.366047][ T1175] loop8: detected capacity change from 0 to 7 [ 2679.401267][ T1114] Dev loop8: unable to read RDB block 7 [ 2679.455152][ T1183] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5499'. [ 2679.553714][ T1114] loop8: AHDI p1 p2 p3 [ 2679.573908][ T1114] loop8: partition table partially beyond EOD, truncated [ 2679.588856][ T1114] loop8: p1 start 1601398130 is beyond EOD, truncated [ 2679.610624][ T1114] loop8: p2 start 1702059890 is beyond EOD, truncated [ 2679.698372][ T1114] Dev loop8: unable to read RDB block 7 [ 2679.704432][ T1114] loop8: AHDI p1 p2 p3 [ 2679.708664][ T1114] loop8: partition table partially beyond EOD, truncated [ 2679.719751][ T1114] loop8: p1 start 1601398130 is beyond EOD, truncated [ 2679.766677][ T1114] loop8: p2 start 1702059890 is beyond EOD, truncated [ 2679.796615][ T1192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5502'. [ 2679.831934][ T1175] Dev loop8: unable to read RDB block 7 [ 2679.872714][ T1175] loop8: AHDI p1 p2 p3 [ 2679.891209][ T1175] loop8: partition table partially beyond EOD, truncated [ 2679.901036][ T1175] loop8: p1 start 1601398130 is beyond EOD, truncated [ 2679.907965][ T1175] loop8: p2 start 1702059890 is beyond EOD, truncated [ 2679.969908][ T1180] Dev loop8: unable to read RDB block 7 [ 2680.028969][ T1180] loop8: AHDI p1 p2 p3 [ 2680.033294][ T1180] loop8: partition table partially beyond EOD, truncated [ 2680.043003][ T1180] loop8: p1 start 1601398130 is beyond EOD, truncated [ 2680.185415][ T1180] loop8: p2 start 1702059890 is beyond EOD, truncated [ 2680.699587][ T1199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5503'. [ 2683.815005][ T1236] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5509'. [ 2683.984898][ T1238] netlink: 'syz.4.5510': attribute type 3 has an invalid length. [ 2685.595775][ T1254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5514'. [ 2685.975767][ T1259] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 2686.358733][ T1270] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5516'. [ 2687.271193][ T1273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5517'. [ 2687.438339][ T1274] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5519'. [ 2688.594784][ T1283] input: syz1 as /devices/virtual/input/input89 [ 2691.012892][ T1304] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5523'. [ 2691.400928][ T1312] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5525'. [ 2691.410132][ T1312] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5525'. [ 2691.419534][ T1312] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5525'. [ 2693.395022][ T1328] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5530'. [ 2695.163242][ T1349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5534'. [ 2697.059414][ T1359] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5535'. [ 2697.169365][ T1359] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5535'. [ 2697.388725][ T1366] fuse: Unknown parameter '¦)Í0x000000000000000500000000000000000000' [ 2697.432821][ T1367] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5537'. [ 2697.478932][T26397] usb 9-1: new high-speed USB device number 89 using dummy_hcd [ 2697.749050][T18785] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2697.771968][T26397] usb 9-1: Using ep0 maxpacket: 8 [ 2697.782949][T26397] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 2697.792211][T26397] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2697.804208][T26397] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2697.821451][T26397] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2697.871189][T26397] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2697.919077][T18785] usb 2-1: Using ep0 maxpacket: 8 [ 2697.936077][T26397] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2697.946943][T18785] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 2697.963696][T26397] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2697.975671][T18785] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2697.996108][T18785] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2698.032944][T18785] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 2698.070314][T18785] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2698.302521][T26397] usb 9-1: GET_CAPABILITIES returned 0 [ 2698.308148][T26397] usbtmc 9-1:16.0: can't read capabilities [ 2698.314288][T18785] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2698.336168][T18785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2698.410487][T18785] usb 2-1: config 0 descriptor?? [ 2698.416688][ T1368] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2698.636341][ T1359] usbtmc 9-1:16.0: usb_control_msg returned -71 [ 2698.643547][T27056] usb 9-1: USB disconnect, device number 89 [ 2699.254320][ T1382] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5541'. [ 2699.706817][ T1385] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5542'. [ 2700.729168][ T5846] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 2700.885636][T18785] usb 2-1: USB disconnect, device number 31 [ 2700.964928][ T1393] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2702.708356][ T1411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5546'. [ 2703.139128][ T1417] usb usb5: usbfs: process 1417 (syz.5.5547) did not claim interface 0 before use [ 2705.897654][ T1449] syzkaller0: entered promiscuous mode [ 2705.968895][ T1449] syzkaller0: entered allmulticast mode [ 2707.530147][T18785] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2707.739545][T18785] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2707.758981][T18785] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2707.850514][T18785] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2707.982380][T18785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2708.140118][ T1457] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2708.162209][T18785] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2708.713874][ T1470] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5557'. [ 2708.939579][ T1470] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5557'. [ 2709.219329][ T1479] netlink: 'syz.5.5556': attribute type 2 has an invalid length. [ 2709.309554][ T1480] netlink: 'syz.5.5556': attribute type 2 has an invalid length. [ 2713.558125][ T1479] !: entered promiscuous mode [ 2713.671494][T31350] usb 2-1: USB disconnect, device number 32 [ 2713.732457][ T1480] !: left promiscuous mode [ 2714.091195][ T1495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5560'. [ 2716.921621][ T1524] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5564'. [ 2719.290288][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2719.296782][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2719.489848][ T1536] program syz.1.5567 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2719.957076][ T1544] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5578'. [ 2720.081205][ T1544] : entered promiscuous mode [ 2720.447418][ T1549] fuse: Bad value for 'fd' [ 2724.406657][ T1583] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5576'. [ 2726.344670][ T1594] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5580'. [ 2726.379567][ T1594] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5580'. [ 2726.462564][ T1593] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5581'. [ 2727.191538][ T1611] input: syz0 as /devices/virtual/input/input90 [ 2727.583670][ T1616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5584'. [ 2729.677199][ T1636] delete_channel: no stack [ 2731.102132][ T1644] loop8: detected capacity change from 0 to 7 [ 2731.120721][ T1644] Dev loop8: unable to read RDB block 7 [ 2731.126467][ T1644] loop8: AHDI p1 p2 p3 [ 2731.130816][ T1644] loop8: partition table partially beyond EOD, truncated [ 2731.138683][ T1644] loop8: p1 start 1601398130 is beyond EOD, truncated [ 2731.145736][ T1644] loop8: p2 start 1702059890 is beyond EOD, truncated [ 2731.271060][ T1598] Dev loop8: unable to read RDB block 7 [ 2731.280375][ T1598] loop8: AHDI p1 p2 p3 [ 2731.284985][ T1598] loop8: partition table partially beyond EOD, truncated [ 2731.335863][ T1598] loop8: p1 start 1601398130 is beyond EOD, truncated [ 2731.611420][ T1598] loop8: p2 start 1702059890 is beyond EOD, truncated [ 2732.115616][T26397] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 2732.528682][T26397] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2732.538692][T26397] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2732.571608][T26397] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2732.594839][T26397] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2732.840967][T26397] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2732.905331][T26397] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2733.095740][ T1665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5592'. [ 2733.125273][T26397] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2733.134432][T26397] usb 6-1: Product: syz [ 2733.144594][T26397] usb 6-1: Manufacturer: syz [ 2733.173512][T26397] cdc_wdm 6-1:1.0: skipping garbage [ 2733.195794][T26397] cdc_wdm 6-1:1.0: skipping garbage [ 2733.232882][T26397] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 2733.239162][T26397] cdc_wdm 6-1:1.0: Unknown control protocol [ 2733.473036][ T1663] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2733.823035][ T1672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2733.832785][ T1672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2733.853784][ T1672] sch_tbf: burst 19872 is lower than device lo mtu (65499) ! [ 2734.151584][ C0] wdm_int_callback: 281 callbacks suppressed [ 2734.151603][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2734.164215][ C0] wdm_int_callback: 281 callbacks suppressed [ 2734.164233][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2734.179058][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2734.185682][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2734.192157][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2734.198815][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2734.205204][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2734.211813][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2734.218279][T31350] usb 6-1: USB disconnect, device number 5 [ 2734.224192][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2734.224211][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2734.224223][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2734.250589][ T1673] cdc_wdm 6-1:1.0: Tx URB error: -19 [ 2736.918728][ T1679] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5596'. [ 2736.929200][ T1679] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5596'. [ 2738.009063][ T1713] vivid-001: ================= START STATUS ================= [ 2738.017224][ T1713] vivid-001: FM Deviation: 75000 [ 2738.023681][ T1713] vivid-001: ================== END STATUS ================== [ 2740.982792][ T1730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5605'. [ 2741.495938][ T1737] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2741.511058][ T1741] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5606'. [ 2742.590212][ T1736] loop8: detected capacity change from 0 to 7 [ 2742.611234][ T1736] Dev loop8: unable to read RDB block 7 [ 2742.865931][ T1736] loop8: AHDI p1 p2 p3 [ 2742.877729][ T1736] loop8: partition table partially beyond EOD, truncated [ 2742.936609][ T1736] loop8: p1 start 1601398130 is beyond EOD, truncated [ 2743.309203][ T1736] loop8: p2 start 1702059890 is beyond EOD, truncated [ 2743.590007][ T1655] Dev loop8: unable to read RDB block 7 [ 2743.595747][ T1655] loop8: AHDI p1 p2 p3 [ 2743.600055][ T1655] loop8: partition table partially beyond EOD, truncated [ 2743.628702][ T1655] loop8: p1 start 1601398130 is beyond EOD, truncated [ 2743.657137][ T1655] loop8: p2 start 1702059890 is beyond EOD, truncated [ 2743.818060][ T1745] Dev loop8: unable to read RDB block 7 [ 2743.837670][ T1745] loop8: AHDI p1 p2 p3 [ 2743.938042][ T1745] loop8: partition table partially beyond EOD, truncated [ 2743.959709][ T1745] loop8: p1 start 1601398130 is beyond EOD, truncated [ 2743.959758][ T1745] loop8: p2 start 1702059890 is beyond EOD, truncated [ 2744.294981][T31350] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 2744.621118][T31350] usb 6-1: config 0 has an invalid interface number: 122 but max is 0 [ 2744.630380][T31350] usb 6-1: config 0 has no interface number 0 [ 2744.636505][T31350] usb 6-1: config 0 interface 122 has no altsetting 0 [ 2745.033877][T31350] usb 6-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 2745.062623][T31350] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2745.088890][T31350] usb 6-1: Product: syz [ 2745.109527][ T1767] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5610'. [ 2745.118952][T31350] usb 6-1: Manufacturer: syz [ 2745.146025][T31350] usb 6-1: SerialNumber: syz [ 2745.190051][T31350] usb 6-1: config 0 descriptor?? [ 2746.142278][ T1770] fuse: Unknown parameter '¦)Í0x0000000000000005' [ 2746.580501][T18785] usb 9-1: new high-speed USB device number 90 using dummy_hcd [ 2746.738913][T18785] usb 9-1: Using ep0 maxpacket: 8 [ 2746.768148][T18785] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 2746.790742][T18785] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2746.902781][T18785] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2746.933083][T18785] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 2746.978028][T18785] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2747.493456][T18785] usb 9-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2747.507989][ T1782] wireguard0: entered promiscuous mode [ 2747.513689][ T1782] wireguard0: entered allmulticast mode [ 2747.597423][T18785] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2747.848502][T18785] usb 9-1: config 0 descriptor?? [ 2747.865044][ T1770] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 2747.979067][T27056] usb 6-1: USB disconnect, device number 6 [ 2747.987730][T27056] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 2748.565716][T18785] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 2749.145517][T18785] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2749.181091][T18785] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2749.198115][T18785] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2749.217514][T18785] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2749.330001][ T1792] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2749.505893][T30627] usb 9-1: USB disconnect, device number 90 [ 2749.518727][ T5846] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 2749.520014][T18785] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2750.315942][ T1795] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5618'. [ 2752.252441][T32489] usb 6-1: USB disconnect, device number 7 [ 2753.528842][T31350] usb 9-1: new high-speed USB device number 91 using dummy_hcd [ 2753.879031][T31350] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2754.009249][T31350] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2754.209261][T31350] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2754.222032][T31350] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2754.602507][ T1825] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2754.625696][T31350] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 2754.961484][ T1825] syz_tun: entered allmulticast mode [ 2757.377217][T27056] usb 9-1: USB disconnect, device number 91 [ 2757.730631][ T1848] vivid-007: ================= START STATUS ================= [ 2757.739070][ T1848] vivid-007: Enable Output Cropping: true [ 2757.745933][ T1848] vivid-007: Enable Output Composing: true [ 2757.752233][ T1848] vivid-007: Enable Output Scaler: true [ 2757.757912][ T1848] vivid-007: Tx RGB Quantization Range: Automatic [ 2757.764588][ T1848] vivid-007: Transmit Mode: HDMI [ 2757.770375][ T1848] vivid-007: Hotplug Present: 0x00000000 [ 2757.777184][ T1848] vivid-007: RxSense Present: 0x00000000 [ 2757.783442][ T1848] vivid-007: EDID Present: 0x00000000 [ 2757.789394][ T1848] vivid-007: ================== END STATUS ================== [ 2760.414004][ T1880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5627'. [ 2760.433442][ T1880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5627'. [ 2760.678932][T31350] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 2761.040395][T31350] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2761.049296][T31350] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2761.078950][T31350] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2761.105286][T31350] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2761.166911][T31350] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2761.192915][T31350] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2761.202338][T31350] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2761.210907][T31350] usb 5-1: Product: syz [ 2761.215190][T31350] usb 5-1: Manufacturer: syz [ 2761.234775][T31350] cdc_wdm 5-1:1.0: skipping garbage [ 2761.244649][T31350] cdc_wdm 5-1:1.0: skipping garbage [ 2761.319586][T31350] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 2761.328899][T31350] cdc_wdm 5-1:1.0: Unknown control protocol [ 2761.543696][ T1882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2761.583362][ T1882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2761.613895][ T1882] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 2761.852179][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2761.858860][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2761.865286][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2761.871923][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2761.878488][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2761.885135][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2761.891547][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2761.898196][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2761.904655][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2761.911286][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2761.917656][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2761.924293][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2761.931157][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2761.937808][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2761.944201][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2761.950926][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2761.957324][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2761.963990][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2761.972836][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2761.979451][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2761.988447][T26397] usb 5-1: USB disconnect, device number 35 [ 2761.988535][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2764.224617][ T1897] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5635'. [ 2764.780836][ T1905] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2765.126208][ T1906] hub 1-0:1.0: USB hub found [ 2765.226480][ T1906] hub 1-0:1.0: 1 port detected [ 2766.359088][T29136] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 2766.687946][T29136] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2766.761415][T29136] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2766.845228][T29136] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2766.945593][T29136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2766.986925][ T1914] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2767.004906][T29136] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2768.531131][ T1938] random: crng reseeded on system resumption [ 2769.571898][T18784] usb 5-1: USB disconnect, device number 36 [ 2770.121914][ T1960] futex_wake_op: syz.4.5644 tries to shift op by 32; fix this program [ 2771.363664][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 2771.363685][ T30] audit: type=1800 audit(1764742233.139:2996): pid=1967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5646" name="nullb0" dev="devtmpfs" ino=3938 res=0 errno=0 [ 2773.673479][ T1995] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5660'. [ 2773.999054][ T30] audit: type=1326 audit(1764742235.539:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1986 comm="syz.5.5650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2774.049366][ T30] audit: type=1326 audit(1764742235.549:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1986 comm="syz.5.5650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2774.079571][ T30] audit: type=1326 audit(1764742235.549:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1986 comm="syz.5.5650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2774.113258][ T2001] hub 1-0:1.0: USB hub found [ 2774.118287][ T2001] hub 1-0:1.0: 1 port detected [ 2774.385806][ T30] audit: type=1326 audit(1764742235.549:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1986 comm="syz.5.5650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2775.031544][ T30] audit: type=1326 audit(1764742235.549:3001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1986 comm="syz.5.5650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2775.208974][ T30] audit: type=1326 audit(1764742235.549:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1986 comm="syz.5.5650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2775.359303][ T30] audit: type=1326 audit(1764742235.549:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1986 comm="syz.5.5650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2775.463171][ T30] audit: type=1326 audit(1764742235.549:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1986 comm="syz.5.5650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2775.586522][ T30] audit: type=1326 audit(1764742235.549:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1986 comm="syz.5.5650" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2777.283109][ T2011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5654'. [ 2777.299009][T32489] usb 9-1: new high-speed USB device number 92 using dummy_hcd [ 2777.391622][ T2011] : entered promiscuous mode [ 2777.459234][T32489] usb 9-1: Using ep0 maxpacket: 16 [ 2777.466617][T32489] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2777.505511][T32489] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2777.545338][T32489] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2777.579622][T32489] usb 9-1: config 0 descriptor?? [ 2777.775238][ T2026] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5668'. [ 2778.202463][ T2020] tipc: Enabled bearer , priority 10 [ 2778.325292][T32489] mcp2221 0003:04D8:00DD.003A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 2778.582087][ T2025] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2778.689645][T32489] usb 9-1: USB disconnect, device number 92 [ 2779.319118][T26397] tipc: Node number set to 289007856 [ 2779.578976][T30627] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 2779.956220][T30627] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2779.970513][T30627] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2780.138415][T30627] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2780.198562][T30627] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2780.240745][T30627] usb 5-1: Product: syz [ 2780.274703][T30627] usb 5-1: Manufacturer: syz [ 2780.306133][T30627] usb 5-1: SerialNumber: syz [ 2780.618204][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2780.626255][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2780.721381][T30627] cdc_ncm 5-1:1.0: skipping garbage [ 2780.738370][T30627] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 2780.936199][T30627] cdc_ncm 5-1:1.0: bind() failure [ 2781.220286][T30627] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 2781.227150][T30627] cdc_ncm 5-1:1.1: bind() failure [ 2783.401688][T31350] usb 5-1: USB disconnect, device number 37 [ 2783.515379][ T2072] delete_channel: no stack [ 2783.733165][ T2080] openvswitch: netlink: Message has 1 unknown bytes. [ 2783.740302][ T2080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2785.927976][ T2100] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5671'. [ 2786.218420][ T2101] [U]  [ 2786.468899][T26397] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 2786.612538][ T2107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5674'. [ 2786.639488][T26397] usb 5-1: Using ep0 maxpacket: 32 [ 2786.750279][T26397] usb 5-1: config index 0 descriptor too short (expected 49410, got 36) [ 2786.814489][T26397] usb 5-1: config 12 has too many interfaces: 127, using maximum allowed: 32 [ 2786.894771][T26397] usb 5-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 2786.913191][T26397] usb 5-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 2786.935953][T26397] usb 5-1: config 12 has 0 interfaces, different from the descriptor's value: 127 [ 2787.039408][T26397] usb 5-1: config index 1 descriptor too short (expected 49410, got 36) [ 2787.058894][T26397] usb 5-1: config 12 has too many interfaces: 127, using maximum allowed: 32 [ 2787.400628][T26397] usb 5-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 2787.410206][T26397] usb 5-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 2787.450011][T26397] usb 5-1: config 12 has 0 interfaces, different from the descriptor's value: 127 [ 2787.921409][T26397] usb 5-1: config index 2 descriptor too short (expected 49410, got 36) [ 2787.959575][T26397] usb 5-1: config 12 has too many interfaces: 127, using maximum allowed: 32 [ 2788.000692][T26397] usb 5-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 2788.077787][T26397] usb 5-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 2788.100563][T26397] usb 5-1: config 12 has 0 interfaces, different from the descriptor's value: 127 [ 2788.197963][T26397] usb 5-1: config index 3 descriptor too short (expected 49410, got 36) [ 2788.228616][T26397] usb 5-1: config 12 has too many interfaces: 127, using maximum allowed: 32 [ 2788.242797][T26397] usb 5-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 2788.336034][T26397] usb 5-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 2788.379043][T26397] usb 5-1: config 12 has 0 interfaces, different from the descriptor's value: 127 [ 2788.451326][T26397] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice= 0.00 [ 2788.470933][T26397] usb 5-1: New USB device strings: Mfr=16, Product=32, SerialNumber=9 [ 2788.481072][T26397] usb 5-1: Product: syz [ 2788.498535][T26397] usb 5-1: Manufacturer: syz [ 2788.523590][T26397] usb 5-1: SerialNumber: syz [ 2788.825363][ T2118] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5686'. [ 2789.233590][ T2120] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5675'. [ 2790.596010][T30627] usb 5-1: USB disconnect, device number 38 [ 2790.744200][ T2139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5677'. [ 2790.786985][ T2139] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5677'. [ 2791.358952][T32489] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2791.609740][T32489] usb 2-1: Using ep0 maxpacket: 8 [ 2791.644998][T32489] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2791.666143][T32489] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2791.679969][T32489] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2791.700716][T32489] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2791.711285][T32489] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2791.732852][T32489] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2791.744023][T32489] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2792.120421][T32489] usb 2-1: GET_CAPABILITIES returned 0 [ 2792.126007][T32489] usbtmc 2-1:16.0: can't read capabilities [ 2792.412135][ T2136] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 2792.424653][T30627] usb 2-1: USB disconnect, device number 33 [ 2792.801114][ T2149] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(13) [ 2792.807757][ T2149] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2792.934586][ T2149] vhci_hcd vhci_hcd.0: Device attached [ 2792.969701][ T2154] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(16) [ 2792.976373][ T2154] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2793.010312][ T2157] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5681'. [ 2793.058122][ T2149] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2793.067379][ T2154] vhci_hcd vhci_hcd.0: Device attached [ 2793.116541][ T2149] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(18) [ 2793.123230][ T2149] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2793.187313][ T2149] vhci_hcd vhci_hcd.0: Device attached [ 2793.206244][ T2154] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(22) [ 2793.212915][ T2154] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2793.238897][T32489] usb 47-1: new low-speed USB device number 3 using vhci_hcd [ 2793.263694][ T2163] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2793.279137][ T2154] vhci_hcd vhci_hcd.0: Device attached [ 2793.304882][ T2149] vhci_hcd vhci_hcd.0: pdev(7) rhport(5) sockfd(26) [ 2793.311526][ T2149] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2793.326625][ T2149] vhci_hcd vhci_hcd.0: Device attached [ 2793.388281][ T2149] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2793.521350][ T2165] vhci_hcd: connection closed [ 2793.521653][T15227] vhci_hcd: stop threads [ 2793.531548][ T2161] vhci_hcd: connection closed [ 2793.532041][ T2158] vhci_hcd: connection closed [ 2793.536800][ T2155] vhci_hcd: connection closed [ 2793.539939][ T2150] vhci_hcd: connection reset by peer [ 2793.551940][T15227] vhci_hcd: release socket [ 2793.661650][T15227] vhci_hcd: disconnect device [ 2793.671691][T15227] vhci_hcd: stop threads [ 2793.676374][T15227] vhci_hcd: release socket [ 2793.687631][T15227] vhci_hcd: disconnect device [ 2793.739580][T15227] vhci_hcd: stop threads [ 2793.745972][T15227] vhci_hcd: release socket [ 2793.750908][T15227] vhci_hcd: disconnect device [ 2793.758273][T15227] vhci_hcd: stop threads [ 2793.766227][T15227] vhci_hcd: release socket [ 2793.793744][T15227] vhci_hcd: disconnect device [ 2793.803440][T15227] vhci_hcd: stop threads [ 2793.807866][T15227] vhci_hcd: release socket [ 2793.813023][T15227] vhci_hcd: disconnect device [ 2793.901921][ T2174] delete_channel: no stack [ 2794.433754][ T2157] bridge0 (unregistering): left promiscuous mode [ 2794.872538][ T2172] netlink: 76 bytes leftover after parsing attributes in process `syz.8.5683'. [ 2794.889458][ T2172] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5683'. [ 2794.898567][ T2172] netlink: 'syz.8.5683': attribute type 3 has an invalid length. [ 2794.918069][ T2172] netlink: 11 bytes leftover after parsing attributes in process `syz.8.5683'. [ 2794.952789][ T2177] : renamed from bridge_slave_0 (while UP) [ 2796.900967][ T2197] openvswitch: netlink: Message has 1 unknown bytes. [ 2796.907702][ T2197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2797.022289][ T2201] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5690'. [ 2797.412399][ T2206] [U]  [ 2797.457434][ T2203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5688'. [ 2798.629999][T32489] vhci_hcd: vhci_device speed not set [ 2800.030542][T26397] usb usb48-port1: attempt power cycle [ 2800.275336][ T2226] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5693'. [ 2800.677811][T26397] usb usb48-port1: unable to enumerate USB device [ 2802.805582][ T2233] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2804.109965][ T2255] binder: 2251:2255 ioctl c018620c 80000380 returned -22 [ 2806.112006][ T2267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5701'. [ 2806.307222][ T2272] random: crng reseeded on system resumption [ 2807.301841][ T2282] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5704'. [ 2808.218067][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 2808.218085][ T30] audit: type=1800 audit(1764742270.019:3030): pid=2291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5705" name="nullb0" dev="devtmpfs" ino=3938 res=0 errno=0 [ 2809.232036][ T2300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5707'. [ 2810.313562][T26282] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 2810.501434][T26282] usb 6-1: Using ep0 maxpacket: 16 [ 2810.511078][T26282] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2810.543902][T26282] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2810.584569][T26282] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2810.606628][T26282] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2810.664491][T26282] usb 6-1: Product: syz [ 2810.683133][T26282] usb 6-1: Manufacturer: syz [ 2810.696575][T26282] usb 6-1: SerialNumber: syz [ 2810.720631][T26282] usb 6-1: config 0 descriptor?? [ 2810.772608][T26282] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2810.797233][T26282] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 2811.251380][ T2316] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5711'. [ 2811.382638][T26282] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 2811.392527][T26282] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 2812.047780][T26282] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 2812.272667][T26282] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 2812.293701][T26282] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 2812.320190][T26282] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 2812.344434][T26282] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 2812.363217][T26282] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 2812.402191][T26282] usb 6-1: USB disconnect, device number 8 [ 2812.992929][ T2325] delete_channel: no stack [ 2814.741509][ T2343] hsr0: entered promiscuous mode [ 2814.749499][ T2343] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5716'. [ 2814.760060][ T2343] hsr_slave_0: left promiscuous mode [ 2814.766631][ T2343] hsr_slave_1: left promiscuous mode [ 2814.873156][ T2343] hsr0 (unregistering): left promiscuous mode [ 2817.650640][ T2366] random: crng reseeded on system resumption [ 2818.784537][ T30] audit: type=1800 audit(1764742280.589:3031): pid=2372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5719" name="nullb0" dev="devtmpfs" ino=3938 res=0 errno=0 [ 2819.425414][ T2382] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5720'. [ 2820.479568][ T30] audit: type=1326 audit(1764742282.259:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2388 comm="syz.7.5723" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2820.642629][ T30] audit: type=1326 audit(1764742282.259:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2388 comm="syz.7.5723" exe="/root/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2820.739678][ T30] audit: type=1326 audit(1764742282.259:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2388 comm="syz.7.5723" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2820.837462][ T30] audit: type=1326 audit(1764742282.259:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2388 comm="syz.7.5723" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2821.001859][ T30] audit: type=1326 audit(1764742282.329:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2388 comm="syz.7.5723" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2821.334759][ T30] audit: type=1326 audit(1764742282.329:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2388 comm="syz.7.5723" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2821.465841][ T30] audit: type=1326 audit(1764742282.329:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2398 comm="syz.7.5723" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2821.572243][ T30] audit: type=1326 audit(1764742282.439:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2388 comm="syz.7.5723" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2821.594610][ T30] audit: type=1326 audit(1764742282.439:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2388 comm="syz.7.5723" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2822.340229][ T2411] hub 1-0:1.0: USB hub found [ 2822.349653][ T2411] hub 1-0:1.0: 1 port detected [ 2822.774236][ T2412] tipc: Failed to remove unknown binding: 66,1,1/1535742677:1501367866/1501367868 [ 2822.786240][ T2412] tipc: Failed to remove unknown binding: 66,1,1/1535742677:1501367866/1501367868 [ 2822.795726][ T2412] tipc: Failed to remove unknown binding: 66,1,1/1535742677:1501367866/1501367868 [ 2824.312181][ T2432] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5730'. [ 2826.161659][T30627] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 2826.389439][T30627] usb 5-1: Using ep0 maxpacket: 32 [ 2826.396808][T30627] usb 5-1: config 0 has an invalid interface number: 169 but max is 0 [ 2826.412786][T30627] usb 5-1: config 0 has an invalid descriptor of length 53, skipping remainder of the config [ 2826.449772][T30627] usb 5-1: config 0 has no interface number 0 [ 2826.456040][T30627] usb 5-1: config 0 interface 169 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2826.500260][T30627] usb 5-1: config 0 interface 169 has no altsetting 0 [ 2826.511841][T30627] usb 5-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=33.49 [ 2826.525373][T30627] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2826.573509][T30627] usb 5-1: Product: syz [ 2826.577760][T30627] usb 5-1: Manufacturer: syz [ 2826.604506][T30627] usb 5-1: SerialNumber: syz [ 2826.617848][T30627] usb 5-1: config 0 descriptor?? [ 2826.628438][T30627] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2826.845158][ T2457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5735'. [ 2826.893838][ T2443] netlink: 'syz.4.5732': attribute type 21 has an invalid length. [ 2826.913501][ T2463] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5743'. [ 2827.058516][ T2443] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5732'. [ 2827.068315][ T2443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5732'. [ 2827.084150][T30627] snd-usb-audio 5-1:0.169: probe with driver snd-usb-audio failed with error -2 [ 2827.228541][ T2460] udevd[2460]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.169/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2827.300976][T30627] usb 5-1: USB disconnect, device number 39 [ 2828.177688][ T2477] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5737'. [ 2829.433072][ T2494] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5740'. [ 2830.109540][T30627] usb 9-1: new high-speed USB device number 93 using dummy_hcd [ 2831.049357][T30627] usb 9-1: config 0 has no interfaces? [ 2831.065068][T30627] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2831.270267][T30627] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2831.312533][T30627] usb 9-1: Product: syz [ 2831.316784][T30627] usb 9-1: Manufacturer: syz [ 2831.359685][T30627] usb 9-1: SerialNumber: syz [ 2831.385718][T30627] usb 9-1: config 0 descriptor?? [ 2831.721344][ T2481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2831.749387][ T2481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2831.794235][ T2504] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5741'. [ 2831.897720][ T2510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5742'. [ 2832.261293][ T2521] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5745'. [ 2832.454761][ T2521] libceph: resolve '0..' (ret=-3): failed [ 2833.570164][T27056] usb 9-1: USB disconnect, device number 93 [ 2834.351752][ T2545] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5749'. [ 2834.828384][ T2557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5750'. [ 2835.027246][ T2559] openvswitch: netlink: Message has 1 unknown bytes. [ 2835.094226][ T2559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2836.730471][ T2570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5753'. [ 2836.926202][ T2582] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5755'. [ 2837.460325][ T2589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5767'. [ 2839.162574][ T2609] hsr0: entered promiscuous mode [ 2839.171107][ T2609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5759'. [ 2839.239595][ T2609] hsr_slave_0: left promiscuous mode [ 2839.246435][ T2609] hsr_slave_1: left promiscuous mode [ 2839.425692][ T2609] hsr0 (unregistering): left promiscuous mode [ 2840.610122][ T2630] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5762'. [ 2842.018530][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2842.025588][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2842.710826][ T2650] openvswitch: netlink: Message has 1 unknown bytes. [ 2842.724210][ T2650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2843.067167][ T2652] binder: 2638:2652 ioctl c018620c 80000380 returned -22 [ 2844.075407][ T2661] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5768'. [ 2844.261080][ T2665] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5769'. [ 2845.020266][T29136] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 2845.201900][T29136] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2845.213854][T29136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2845.251901][T29136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2845.292694][T29136] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2845.390368][T29136] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2845.410844][T29136] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2845.429613][T27056] usb 9-1: new high-speed USB device number 94 using dummy_hcd [ 2845.457840][T29136] usb 5-1: Manufacturer: syz [ 2845.504279][T29136] usb 5-1: config 0 descriptor?? [ 2845.590240][T27056] usb 9-1: Using ep0 maxpacket: 16 [ 2845.597823][T27056] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 2845.613377][T27056] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32770, setting to 1024 [ 2845.640169][ T2687] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5773'. [ 2845.680514][T27056] usb 9-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 2845.705949][T27056] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2845.766364][T27056] usb 9-1: config 0 descriptor?? [ 2846.022787][ T2673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2846.035413][ T2673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2846.049518][T29136] rc_core: IR keymap rc-hauppauge not found [ 2846.056722][T29136] Registered IR keymap rc-empty [ 2846.210511][T27056] bigben 0003:146B:0902.003B: unexpected rdesc, please submit for review [ 2846.218984][T29136] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2846.288182][T29136] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2846.290362][T27056] bigben 0003:146B:0902.003B: unknown main item tag 0x0 [ 2846.331048][T29136] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2846.377017][T27056] bigben 0003:146B:0902.003B: unknown main item tag 0x0 [ 2846.385189][T27056] bigben 0003:146B:0902.003B: unknown main item tag 0x0 [ 2846.407335][T29136] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input91 [ 2846.513662][T27056] bigben 0003:146B:0902.003B: unknown main item tag 0x0 [ 2846.527676][T27056] bigben 0003:146B:0902.003B: item fetching failed at offset 4/5 [ 2846.537368][T29136] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2846.538388][T27056] bigben 0003:146B:0902.003B: parse failed [ 2846.555336][T27056] bigben 0003:146B:0902.003B: probe with driver bigben failed with error -22 [ 2846.663309][T29136] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2846.712639][T29136] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2846.742071][T29136] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2846.778939][T29136] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2847.110466][T29136] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2847.130619][T29136] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2847.160357][T29136] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2847.160568][T27056] usb 9-1: USB disconnect, device number 94 [ 2847.204511][T29136] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2847.230312][T29136] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2847.252954][T29136] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2847.263367][T29136] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2847.798233][T29136] usb 5-1: USB disconnect, device number 40 [ 2848.320759][ T2715] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5778'. [ 2848.404362][ T2718] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2849.266120][ T2728] hub 1-0:1.0: USB hub found [ 2849.270237][ T2728] hub 1-0:1.0: 1 port detected [ 2850.214094][ T2732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5781'. [ 2851.340323][T29136] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2851.425180][ T2746] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5784'. [ 2851.510169][T29136] usb 2-1: Using ep0 maxpacket: 16 [ 2851.890297][T27056] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 2852.221896][T27056] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2852.243204][T27056] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2852.407987][T27056] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 2852.431674][T27056] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2852.443623][T27056] usb 5-1: Manufacturer: syz [ 2852.552065][T27056] usb 5-1: config 0 descriptor?? [ 2853.097488][T27056] usbhid 5-1:0.0: can't add hid device: -71 [ 2853.123908][T27056] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2853.185310][T27056] usb 5-1: USB disconnect, device number 41 [ 2854.728432][ T2781] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5789'. [ 2854.850262][T29136] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2854.882012][T29136] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 2854.900862][T29136] usb 2-1: can't read configurations, error -71 [ 2855.340234][ T2788] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5790'. [ 2857.313094][ T2797] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5791'. [ 2857.375437][ T2799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5792'. [ 2858.000109][ T2810] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5793'. [ 2858.586706][ T2826] tipc: Enabling of bearer rejected, already enabled [ 2859.030225][T27056] usb 9-1: new full-speed USB device number 95 using dummy_hcd [ 2859.196040][T27056] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 2859.227320][T27056] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 2859.316090][T27056] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2859.326351][T27056] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2859.337796][T27056] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2859.357453][T27056] usb 9-1: Product: syz [ 2859.441137][T27056] usb 9-1: Manufacturer: syz [ 2859.446318][T27056] usb 9-1: SerialNumber: syz [ 2859.490754][T27056] usb 9-1: config 0 descriptor?? [ 2859.515708][T27056] usb 9-1: selecting invalid altsetting 0 [ 2860.067457][ T2828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2860.154198][ T2828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2860.253668][T26282] usb 9-1: USB disconnect, device number 95 [ 2860.775424][ T2839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5797'. [ 2860.786536][ T2839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5797'. [ 2862.223434][ T2854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5799'. [ 2862.510464][ T2870] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5802'. [ 2862.520525][T26397] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 2862.564452][ T2870] netlink: 320 bytes leftover after parsing attributes in process `syz.7.5802'. [ 2862.690299][T26397] usb 5-1: Using ep0 maxpacket: 8 [ 2862.700476][ T2868] openvswitch: netlink: Message has 1 unknown bytes. [ 2862.707907][T26397] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 2862.721458][ T2868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2862.777743][T26397] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 2862.839481][T26397] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 2862.895011][T26397] usb 5-1: Product: syz [ 2862.925413][T26397] usb 5-1: Manufacturer: syz [ 2862.947704][T26397] usb 5-1: SerialNumber: syz [ 2863.262741][T26397] usb 5-1: Invalid connection information received from device [ 2863.492386][T30627] usb 5-1: USB disconnect, device number 42 [ 2864.437003][ T2887] random: crng reseeded on system resumption [ 2864.569420][ T2889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5814'. [ 2867.003498][ T2911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5808'. [ 2867.592428][T29136] usb 9-1: new high-speed USB device number 96 using dummy_hcd [ 2867.743582][T26397] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2867.795886][T29136] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2867.821466][T29136] usb 9-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2867.861507][T29136] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2867.872661][T29136] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2867.883679][T29136] usb 9-1: Product: syz [ 2867.888170][T29136] usb 9-1: Manufacturer: syz [ 2867.896780][T29136] usb 9-1: SerialNumber: syz [ 2867.904957][T26397] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2867.916924][T26397] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2867.957313][T29136] cdc_ncm 9-1:1.0: skipping garbage [ 2867.967689][T29136] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found [ 2867.991616][T26397] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2868.008690][T29136] cdc_ncm 9-1:1.0: bind() failure [ 2868.015980][T26397] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2868.042514][T29136] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 2868.063830][T26397] usb 2-1: SerialNumber: syz [ 2868.075653][T29136] cdc_ncm 9-1:1.1: bind() failure [ 2868.320490][T26397] usb 2-1: 0:2 : does not exist [ 2868.326472][T26397] usb 2-1: unit 255 not found! [ 2869.000831][T26397] usb 2-1: USB disconnect, device number 36 [ 2869.422808][ T2830] udevd[2830]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2871.272215][T27056] usb 9-1: USB disconnect, device number 96 [ 2872.726982][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 2872.727005][ T30] audit: type=1800 audit(1764742334.479:3058): pid=2956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5819" name="nullb0" dev="devtmpfs" ino=3938 res=0 errno=0 [ 2874.611947][T26397] usb 9-1: new full-speed USB device number 97 using dummy_hcd [ 2875.767288][ T2982] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5823'. [ 2875.793996][ T2982] libceph: resolve '0..' (ret=-3): failed [ 2876.085486][ T2983] tipc: Failed to remove unknown binding: 66,1,1/4:3146587527/3146587529 [ 2876.108459][ T2983] tipc: Failed to remove unknown binding: 66,1,1/4:3146587527/3146587529 [ 2876.121489][ T2983] tipc: Failed to remove unknown binding: 66,1,1/4:3146587527/3146587529 [ 2876.182867][ T2985] input: syz0 as /devices/virtual/input/input92 [ 2877.873106][T26397] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 2877.910217][T26397] usb 9-1: can't read configurations, error -71 [ 2879.113474][ T2996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5827'. [ 2880.117828][ T3011] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5829'. [ 2880.144319][ T3011] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5829'. [ 2880.624723][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2881.370985][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2881.557610][ T3024] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5833'. [ 2882.050866][T18969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2882.785512][T18784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2882.821353][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2883.562085][ T1009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2883.861207][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2884.717092][ T3041] netlink: 'syz.4.5838': attribute type 1 has an invalid length. [ 2884.756104][T18868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2884.855510][ T3046] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5836'. [ 2884.895086][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2884.931262][ T3047] random: crng reseeded on system resumption [ 2885.861151][T18784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2886.006767][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2886.171013][T27056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2886.581439][T15227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2887.054991][T32489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2887.824637][ T6420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2888.012932][ T3065] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5839'. [ 2888.092739][T32489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2888.112099][ T3065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5839'. [ 2888.122243][ T3065] netlink: 91 bytes leftover after parsing attributes in process `syz.4.5839'. [ 2888.419927][ T3075] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5840'. [ 2888.890841][T31350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2889.265468][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2889.527409][ T6447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2890.743193][ T3095] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5845'. [ 2891.207100][T24112] net_ratelimit: 24 callbacks suppressed [ 2891.207132][T24112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2891.488198][T32489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2891.963492][T27056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2892.434958][ T3114] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5848'. [ 2892.515733][T32489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2893.005155][T15227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2893.714067][T32489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2894.098436][ T3134] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5851'. [ 2894.492365][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2894.731020][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2895.090804][T31350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2895.777468][T18785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2896.162339][ T3149] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5854'. [ 2896.825454][T29136] net_ratelimit: 2 callbacks suppressed [ 2896.825478][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2897.160827][T24112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2897.852366][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2898.171748][T30627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2898.517392][ T3173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5857'. [ 2898.527934][ T3173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5857'. [ 2898.540481][ T3173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5857'. [ 2898.714119][ T3172] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5858'. [ 2898.804282][ T3172] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5858'. [ 2898.815083][T25361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2898.890960][T18785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2899.844860][ T3186] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5860'. [ 2899.932425][T18785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2900.383149][T24112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2900.970926][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2901.212983][T30627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2901.611306][ T3202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5864'. [ 2901.784110][ T3202] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5864'. [ 2902.043092][T18785] net_ratelimit: 1 callbacks suppressed [ 2902.043115][T18785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2903.000267][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2903.061614][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2903.261690][ T3221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5867'. [ 2903.282819][ T3221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5867'. [ 2903.592571][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2903.600536][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2904.018280][ T3230] input: syz0 as /devices/virtual/input/input93 [ 2904.094239][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2904.256590][T18784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2904.514998][ T6420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2905.135760][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2905.373613][T27056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2905.701971][ T7327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2906.171476][T18785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2906.249964][ T3254] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5882'. [ 2906.876055][ T3264] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5873'. [ 2907.081296][ T3266] program syz.1.5874 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2907.121976][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2907.211211][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2907.291276][T30627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2908.216063][ T30] audit: type=1326 audit(1764742370.019:3059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3268 comm="syz.5.5875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2908.257532][T18785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2908.387923][ T30] audit: type=1326 audit(1764742370.049:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3268 comm="syz.5.5875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2908.692004][ T3275] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5876'. [ 2909.024575][T24112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2909.088374][ T30] audit: type=1326 audit(1764742370.049:3061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3268 comm="syz.5.5875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2909.224149][ T30] audit: type=1326 audit(1764742370.049:3062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3268 comm="syz.5.5875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2909.291487][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2909.339524][ T30] audit: type=1326 audit(1764742370.049:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3268 comm="syz.5.5875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2909.451856][ T30] audit: type=1326 audit(1764742370.049:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3268 comm="syz.5.5875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2909.521865][ T30] audit: type=1326 audit(1764742370.049:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3268 comm="syz.5.5875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2909.697277][ T30] audit: type=1326 audit(1764742370.049:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3268 comm="syz.5.5875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2909.968162][ T30] audit: type=1326 audit(1764742370.049:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3268 comm="syz.5.5875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2910.047796][ T30] audit: type=1326 audit(1764742370.049:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3268 comm="syz.5.5875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2910.180781][T18841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2910.331591][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2910.392148][T18784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2910.437518][ T3292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5879'. [ 2910.530527][T26282] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 2910.713304][T26282] usb 6-1: Using ep0 maxpacket: 16 [ 2910.816419][T26282] usb 6-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 2910.847056][T26282] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2910.887778][T26282] usb 6-1: Product: syz [ 2910.896919][T26282] usb 6-1: Manufacturer: syz [ 2911.004039][T26282] usb 6-1: SerialNumber: syz [ 2911.044135][T26282] usb 6-1: config 0 descriptor?? [ 2911.144392][T26282] safe_serial 6-1:0.0: safe_serial converter detected [ 2911.293358][T26282] usb 6-1: safe_serial converter now attached to ttyUSB0 [ 2911.409755][T18841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2912.523814][T26282] net_ratelimit: 1 callbacks suppressed [ 2912.523835][T26282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2912.780731][T26282] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 2912.982537][T26282] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 10601, setting to 1024 [ 2913.170043][T26282] usb 5-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 1024 [ 2913.170181][T18803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2913.201895][T26282] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2913.223797][T26282] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2913.449848][T27056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2913.469866][T26282] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2913.631452][T18785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2913.651408][T26282] usb 5-1: Product: syz [ 2913.666129][T26282] usb 5-1: Manufacturer: syz [ 2913.684416][T26282] usb 5-1: SerialNumber: syz [ 2913.721675][T26282] usb 5-1: config 0 descriptor?? [ 2913.775153][T18785] usb 6-1: USB disconnect, device number 9 [ 2913.785622][T18785] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 2913.952056][T18785] safe_serial 6-1:0.0: device disconnected [ 2914.106403][ T3308] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2914.121275][T26282] usb 5-1: selecting invalid altsetting 0 [ 2914.791366][T18785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2914.969906][T27056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2914.978120][ T6447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2915.326554][ T3330] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5886'. [ 2915.765157][T27056] usb 5-1: USB disconnect, device number 43 [ 2915.855613][T18785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2916.312953][T18841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2916.493155][T30627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2916.941019][ T3337] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2916.947602][ T3337] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2917.142549][ T3340] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5885'. [ 2917.197120][ T3337] vhci_hcd vhci_hcd.0: Device attached [ 2917.625671][ T3338] vhci_hcd: connection closed [ 2917.642354][ T6093] vhci_hcd: stop threads [ 2917.652820][ T6093] vhci_hcd: release socket [ 2917.657731][ T6093] vhci_hcd: disconnect device [ 2917.759534][T18841] net_ratelimit: 1 callbacks suppressed [ 2917.759551][T18841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2917.932695][T18785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2918.744757][ T3358] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5890'. [ 2918.975189][T18785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2919.162560][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2919.542550][T30627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2920.015242][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2920.205059][T18785] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 2920.332333][ T3371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5891'. [ 2920.640081][T18785] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2920.652056][T18785] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2920.664975][T18785] usb 6-1: Product: syz [ 2920.671434][ T1961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2920.721006][T18785] usb 6-1: Manufacturer: syz [ 2920.725805][T18785] usb 6-1: SerialNumber: syz [ 2920.924425][T18785] usb 6-1: config 0 descriptor?? [ 2921.051281][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2921.130659][ T3377] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5893'. [ 2921.141413][ T3377] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5893'. [ 2921.522214][ T3382] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5894'. [ 2921.716814][T18785] hso 6-1:0.0: Failed to find INT IN ep [ 2921.731002][T18785] usb-storage 6-1:0.0: USB Mass Storage device detected [ 2921.796584][ T3387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5895'. [ 2922.140264][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2922.263344][T18841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2923.222070][ T3408] net_ratelimit: 1 callbacks suppressed [ 2923.222091][ T3408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2923.377974][T18785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2923.642048][ T6093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2924.441033][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2924.617514][ T3418] netlink: 320 bytes leftover after parsing attributes in process `syz.4.5900'. [ 2924.630542][T29136] usb 6-1: USB disconnect, device number 10 [ 2924.991961][T30627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2925.000329][T30627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2925.451950][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2925.650952][T30627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2926.291788][ T6093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2926.564250][T18785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2926.627317][ T3427] can: request_module (can-proto-3) failed. [ 2927.869515][T31350] usb 9-1: new high-speed USB device number 99 using dummy_hcd [ 2928.031809][T31350] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2928.042763][T31350] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2928.174885][T31350] usb 9-1: config 0 descriptor?? [ 2928.187416][T31350] cp210x 9-1:0.0: cp210x converter detected [ 2929.010462][T29136] net_ratelimit: 2 callbacks suppressed [ 2929.010483][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2929.077544][ T3424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2929.133612][T31350] usb 9-1: cp210x converter now attached to ttyUSB0 [ 2929.605189][ T3466] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5907'. [ 2929.817544][T18841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2929.942919][ T3462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2929.956399][ T3462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2930.021594][ T3462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2930.044220][ T3462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2930.096348][T18785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2930.624928][ T3477] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5910'. [ 2930.904290][ T3482] tipc: Enabling of bearer rejected, failed to enable media [ 2931.083384][T15227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2931.134774][T18785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2931.398131][ T3424] usb 9-1: USB disconnect, device number 99 [ 2931.499643][ T3424] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2931.547270][ T3424] cp210x 9-1:0.0: device disconnected [ 2932.153271][T30627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2932.272273][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2932.839870][T19428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2933.300394][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2934.056559][ T1961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2934.171849][ T3424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2934.354705][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2935.211652][T30627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2935.372186][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2935.462622][ T6447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2936.571916][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2936.685514][ T3538] tipc: New replicast peer: 255.255.255.255 [ 2936.693389][ T3538] tipc: Enabled bearer , priority 10 [ 2937.444556][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2937.610357][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2937.830279][T30627] tipc: Node number set to 3811807512 [ 2937.927078][ T3543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5923'. [ 2938.250658][T30627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2939.690827][T26397] net_ratelimit: 2 callbacks suppressed [ 2939.690850][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2939.783241][ T7327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2941.125967][T26282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2941.329613][T30627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2941.652899][T19428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2942.036859][ T3572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2942.046634][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2942.080256][ T3572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5927'. [ 2942.111936][ T3572] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5927'. [ 2942.170551][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2942.259718][ T3570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5928'. [ 2942.900109][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2943.240947][ T3588] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5931'. [ 2943.251449][ T3588] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5931'. [ 2943.261475][ T3588] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5931'. [ 2943.288363][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2943.457119][ T3592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5929'. [ 2943.473509][ T3592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5929'. [ 2944.789939][ T575] net_ratelimit: 8 callbacks suppressed [ 2944.789963][ T575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2944.822698][ T3599] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 2945.196846][ T3579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2945.370525][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2945.730955][ T1009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2946.515925][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2947.133157][T24112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2947.285250][ T3619] 8021q: VLANs not supported on syzkaller1 [ 2947.713973][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2947.855131][T31350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2948.059097][ T3624] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 2948.075922][ T3624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2949.607281][ T575] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 2949.849631][ T575] usb 6-1: Using ep0 maxpacket: 32 [ 2949.879889][T26282] net_ratelimit: 2 callbacks suppressed [ 2949.879906][T26282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2950.164135][ T575] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2950.198739][ T575] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2950.229149][ T575] usb 6-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 2950.238466][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2950.247006][ T575] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2950.285204][ T575] usb 6-1: config 0 descriptor?? [ 2950.713419][ T575] kye 0003:0458:501B.003C: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 2950.752068][ T575] kye 0003:0458:501B.003C: unknown main item tag 0x0 [ 2950.786085][ T575] kye 0003:0458:501B.003C: unknown main item tag 0x0 [ 2950.855001][ T575] kye 0003:0458:501B.003C: hidraw0: USB HID v0.04 Device [HID 0458:501b] on usb-dummy_hcd.5-1/input0 [ 2950.890221][T26282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2950.900353][T31350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2950.920132][ T575] kye 0003:0458:501B.003C: tablet-enabling feature report not found [ 2950.946244][ T3656] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5945'. [ 2951.174881][ T575] kye 0003:0458:501B.003C: tablet enabling failed [ 2951.794784][T18803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2951.870283][ T3664] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5946'. [ 2951.930393][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2951.951050][T31350] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 2952.139362][T31350] usb 5-1: Using ep0 maxpacket: 16 [ 2952.215040][T31350] usb 5-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 2952.224446][T31350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2952.237537][T31350] usb 5-1: Product: syz [ 2952.243286][T31350] usb 5-1: Manufacturer: syz [ 2952.260675][T31350] usb 5-1: SerialNumber: syz [ 2952.281979][T31350] usb 5-1: config 0 descriptor?? [ 2952.315451][T31350] safe_serial 5-1:0.0: safe_serial converter detected [ 2952.332844][T31350] usb 5-1: safe_serial converter now attached to ttyUSB0 [ 2952.990031][ T575] usb 6-1: USB disconnect, device number 11 [ 2953.020265][T26282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2953.054897][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2953.369072][T31350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2953.804725][ T3673] tipc: Enabling of bearer rejected, failed to enable media [ 2953.931223][ T3424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2954.028803][ T575] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 2954.189018][ T575] usb 6-1: Using ep0 maxpacket: 8 [ 2954.206720][ T575] usb 6-1: config 0 has no interfaces? [ 2954.223103][ T575] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 2954.238623][ T575] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2954.260808][T26282] usb 5-1: USB disconnect, device number 44 [ 2954.270452][T26282] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 2954.290759][T26282] safe_serial 5-1:0.0: device disconnected [ 2954.318255][ T575] usb 6-1: Product: syz [ 2954.331833][ T575] usb 6-1: Manufacturer: syz [ 2954.361780][ T575] usb 6-1: SerialNumber: syz [ 2954.503993][ T575] usb 6-1: config 0 descriptor?? [ 2955.130235][T26397] net_ratelimit: 2 callbacks suppressed [ 2955.130260][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2955.606612][ T7327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2956.170023][T26282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2956.969302][ T3424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2957.125338][T26282] usb 6-1: USB disconnect, device number 12 [ 2957.210500][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2957.273812][ T6447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2957.594543][ T3706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5955'. [ 2958.250206][T26282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2958.287450][ T3724] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5959'. [ 2958.573089][ T1961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2959.290258][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2960.050216][ T6447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2960.350028][T26282] net_ratelimit: 1 callbacks suppressed [ 2960.350045][T26282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2960.624793][ T3734] tipc: Enabling of bearer rejected, failed to enable media [ 2960.961906][ T3739] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5962'. [ 2961.411029][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2961.428616][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2961.628048][ T3745] lo: left promiscuous mode [ 2961.636749][ T3745] tunl0: left promiscuous mode [ 2961.651183][ T3745] gre0: left promiscuous mode [ 2961.670982][ T3745] gretap0: left promiscuous mode [ 2961.721946][ T3745] erspan0: left promiscuous mode [ 2961.732101][ T3745] ip_vti0: left promiscuous mode [ 2961.740288][ T3745] ip6_vti0: left promiscuous mode [ 2961.753478][ T3745] sit0: left promiscuous mode [ 2962.094962][ T3745] ip6tnl0: left promiscuous mode [ 2962.263615][ T3745] ip6gre0: left promiscuous mode [ 2962.283549][ T3745] syz_tun: left promiscuous mode [ 2962.314768][ T3756] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5964'. [ 2962.434247][ T3745] ip6gretap0: left promiscuous mode [ 2962.490089][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2962.524622][ T3745] vcan0: left promiscuous mode [ 2962.550326][ T3745] dummy0: left promiscuous mode [ 2962.573161][ T3745] nlmon0: left promiscuous mode [ 2962.735760][ T3745] caif0: left promiscuous mode [ 2962.751251][T15227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2962.768222][ T3745] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2963.300103][T26397] usb 9-1: new high-speed USB device number 100 using dummy_hcd [ 2963.300182][T31350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2963.316474][T30627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2963.530477][T18785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2963.659836][T26397] usb 9-1: Using ep0 maxpacket: 32 [ 2963.667578][T26397] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 2963.797097][T26397] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2963.833068][T26397] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2963.858506][T26397] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2963.919828][T26397] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2964.041455][T26397] usb 9-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 2964.051743][T26397] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2964.090015][T26397] usb 9-1: Product: syz [ 2964.094243][T26397] usb 9-1: Manufacturer: syz [ 2964.109107][T26397] usb 9-1: SerialNumber: syz [ 2964.126818][T26397] usb 9-1: config 0 descriptor?? [ 2964.154646][ T3757] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2964.486755][T18868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2964.900521][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2964.907044][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2965.625342][T18785] net_ratelimit: 1 callbacks suppressed [ 2965.625366][T18785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2966.101431][T15227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2966.329023][T31350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2966.505247][T26397] usb 9-1: can't set config #0, error -71 [ 2966.540314][T26397] usb 9-1: USB disconnect, device number 100 [ 2966.651736][T26282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2967.248841][T30627] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2967.331748][ T1961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2967.693925][T26282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2967.749007][T30627] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2967.768370][T30627] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2967.792286][T30627] usb 2-1: Product: syz [ 2967.796624][T30627] usb 2-1: Manufacturer: syz [ 2967.825422][T30627] usb 2-1: SerialNumber: syz [ 2968.014762][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 2968.035839][ T30] audit: type=1800 audit(1764742429.799:3105): pid=3801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5972" name="nullb0" dev="devtmpfs" ino=3938 res=0 errno=0 [ 2968.120997][ T3803] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5971'. [ 2968.152653][T30627] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2968.325780][ T3424] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2968.831533][T26282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2969.259602][ T6420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2969.369158][T31350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2969.435657][ T3809] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5974'. [ 2969.449200][ T3424] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2969.495582][ T3424] ath9k_htc: Failed to initialize the device [ 2969.580840][ T3424] usb 2-1: ath9k_htc: USB layer deinitialized [ 2969.850667][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2970.890652][T26397] net_ratelimit: 1 callbacks suppressed [ 2970.890675][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2970.922733][T31350] usb 2-1: USB disconnect, device number 37 [ 2971.280315][ T3818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5975'. [ 2971.303413][ T3819] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5976'. [ 2971.559944][T24112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2971.980947][T26282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2972.055175][ T3823] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5977'. [ 2972.323190][ T3828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5978'. [ 2972.410944][ T3424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2972.571697][ T3424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2972.780094][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2973.070230][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2974.091514][T26282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2974.256086][ T3841] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5980'. [ 2974.860060][T19852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2975.137839][T26282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2976.202393][T26397] net_ratelimit: 1 callbacks suppressed [ 2976.202409][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2976.391551][ T1961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2976.524071][T31350] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2977.043181][ T3865] tipc: Enabling of bearer rejected, failed to enable media [ 2977.166472][T31350] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 2977.175269][T31350] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2977.211079][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2977.265909][T31350] usb 2-1: config 0 has no interfaces? [ 2977.403152][T31350] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2977.432086][T31350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2977.470621][T31350] usb 2-1: config 0 descriptor?? [ 2977.990254][ T6447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2978.251153][T26282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2978.489250][ T3424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2978.765376][T31350] usb 2-1: can't set config #0, error -71 [ 2978.815901][T31350] usb 2-1: USB disconnect, device number 38 [ 2978.852091][ T3881] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5988'. [ 2978.974228][ T3885] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5989'. [ 2979.114727][T18969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2979.251252][ T3887] can: request_module (can-proto-3) failed. [ 2979.291215][T26282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2979.311147][T31350] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2979.511503][T31350] usb 2-1: Using ep0 maxpacket: 8 [ 2979.521955][T31350] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2979.533093][T31350] usb 2-1: New USB device found, idVendor=056a, idProduct=0012, bcdDevice= 0.40 [ 2979.684834][T31350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2979.721515][T31350] usb 2-1: Product: syz [ 2979.728200][T31350] usb 2-1: SerialNumber: syz [ 2980.338023][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2980.394381][T31350] usbhid 2-1:1.0: can't add hid device: -71 [ 2980.408837][T31350] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 2980.560816][ T7327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2980.612205][T31350] usb 2-1: USB disconnect, device number 39 [ 2981.456714][ T3909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5993'. [ 2981.490746][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2981.549456][T31350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2981.740258][T18803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2981.904243][ T3916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6004'. [ 2982.058556][ T3919] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5994'. [ 2982.180637][T31350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2982.570473][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2983.102898][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2983.610213][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2984.584360][T31350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2984.778392][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2984.883236][T24112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2985.739181][ T3948] netlink: 'syz.8.5998': attribute type 13 has an invalid length. [ 2985.815950][ T3939] bond2: invalid ARP target 0.0.0.0 specified for addition [ 2985.838361][ T3939] bond2: option arp_ip_target: invalid value (0) [ 2985.845060][ T3950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6000'. [ 2985.984881][ T3939] bond2 (unregistering): Released all slaves [ 2987.033853][T29136] net_ratelimit: 2 callbacks suppressed [ 2987.033875][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2987.444097][ T6447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2987.618397][T31350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2988.367119][T26282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2988.930488][T18841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2989.129847][ T3983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2989.161887][ T30] audit: type=1800 audit(1764742450.959:3106): pid=3981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6002" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 2989.302384][ T3983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2989.316585][ T3983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2989.384536][ T3987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6006'. [ 2989.393873][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2989.409654][ T3983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2989.458349][ T3987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6006'. [ 2991.971819][ T4001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6010'. [ 2992.051578][ T7327] net_ratelimit: 65 callbacks suppressed [ 2992.051600][ T7327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2992.659906][ T4012] netlink: 'syz.8.6021': attribute type 10 has an invalid length. [ 2993.299861][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2993.689077][ T3424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2993.859389][T18969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2994.330827][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2994.832228][ T4034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6016'. [ 2995.269065][ T6447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2995.549833][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2996.348838][ T3424] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 2996.514875][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2996.591484][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2996.651040][ T3424] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2996.703187][ T3424] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2996.729264][T30627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2996.782492][ T3424] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2996.829945][ T3424] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2996.934342][ T4044] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2996.946467][ T3424] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2997.132682][ T4054] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6019'. [ 2997.645827][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2997.819859][ T4059] netlink: 320 bytes leftover after parsing attributes in process `syz.7.6020'. [ 2998.100182][T18803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2998.651085][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2999.333112][ T1009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2999.598433][ T4073] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6024'. [ 2999.650399][ T4073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6024'. [ 2999.700245][T26282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2999.938706][T31350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3000.069040][ T4078] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6025'. [ 3000.099420][T31350] usb 5-1: USB disconnect, device number 45 [ 3000.680888][ T7327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3000.733051][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3001.376604][T30627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3001.433779][T18803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3002.890613][T29136] net_ratelimit: 4 callbacks suppressed [ 3002.890633][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3002.975617][ T3424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3003.970181][ T7327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3003.983382][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3004.532370][ T4121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6032'. [ 3004.701985][ T4123] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6040'. [ 3005.063345][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3005.530051][T19852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3006.010298][ T3424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3006.090148][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3006.508757][ T4134] vivid-002: disconnect [ 3006.835834][ T1009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3007.129293][T25361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3007.162561][ T4141] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6034'. [ 3007.291854][ T4152] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6036'. [ 3007.656882][ T4141] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6034'. [ 3008.197669][T29136] net_ratelimit: 3 callbacks suppressed [ 3008.197688][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3008.218030][ T4154] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6035'. [ 3008.268338][ T4154] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6035'. [ 3008.298363][T25361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3009.050384][ T3424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3009.220608][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3009.649916][ T4166] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6039'. [ 3009.758270][T25361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3010.010028][ T4170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6041'. [ 3010.285637][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3011.310316][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3011.331646][ T4178] input: syz1 as /devices/virtual/input/input94 [ 3011.370371][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3012.114372][ T4192] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 3012.188508][T31350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3012.441063][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3013.450548][T26397] net_ratelimit: 4 callbacks suppressed [ 3013.450565][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3014.385962][T18868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3014.522209][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3015.230877][T30627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3015.497665][ T4214] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6049'. [ 3015.600288][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3016.091009][ T6519] kworker/1:11 (6519) used greatest stack depth: 15768 bytes left [ 3016.150251][ T4221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6050'. [ 3016.210115][T19852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3016.350623][ T4220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3016.573575][ T4228] netlink: 320 bytes leftover after parsing attributes in process `syz.5.6052'. [ 3016.657754][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3016.754378][ T4220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3016.834348][ T4220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3018.387037][ T4245] program syz.4.6055 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3019.076260][T26397] net_ratelimit: 7 callbacks suppressed [ 3019.076277][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3019.278390][ T4252] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 3019.307314][ T1009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3019.968206][ T4256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6058'. [ 3020.089391][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3020.652355][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3021.130686][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3021.547587][ T3424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3021.765641][ T4268] binder: 4266:4268 ioctl c0306201 0 returned -14 [ 3021.805397][ T4268] binder: 4266:4268 ioctl c0306201 0 returned -14 [ 3021.876264][T15227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3022.289809][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3022.549826][ T3424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3023.321369][T19852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3024.620208][T26397] net_ratelimit: 1 callbacks suppressed [ 3024.620223][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3024.715199][ T1009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3024.772888][ T575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3025.712276][ T4310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6066'. [ 3025.722824][ T4310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6066'. [ 3025.772503][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3026.344790][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 3026.352205][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 3026.380848][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3026.810862][T18785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3027.550325][T18868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3027.857579][T32489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3027.868166][ T4278] veth1_macvtap: left allmulticast mode [ 3027.906086][ T3424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3028.376872][T18868] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3028.386670][T18868] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3028.409897][T18868] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3028.449152][T18868] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3028.770801][ T7327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3028.949972][ T4329] netlink: 320 bytes leftover after parsing attributes in process `syz.1.6067'. [ 3028.972126][ T4330] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 3029.321048][ T4341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6071'. [ 3029.450249][ T4340] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6070'. [ 3030.049696][T32489] net_ratelimit: 3 callbacks suppressed [ 3030.049713][T32489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3030.500341][ T6447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3030.690662][ T4349] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6072'. [ 3030.970465][T18803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3030.982215][T32489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3030.992877][T30627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3031.129088][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3031.660069][T18803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3032.210605][T29136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3032.221724][ T1961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3032.232148][ T575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3033.405899][ T4370] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6075'. [ 3033.521826][ T4370] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6075'. [ 3035.437473][ T4371] net_ratelimit: 12 callbacks suppressed [ 3035.437496][ T4371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3036.079981][T19852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3036.089606][ T6420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3036.098548][T32489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3036.143225][ T575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3036.455131][ T4391] program syz.1.6082 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3037.593090][ T1961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3039.025144][ T6420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3039.210291][ T3424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3039.247058][ T4415] random: crng reseeded on system resumption [ 3039.770757][ T6447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3039.789514][ T3424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3040.268960][ T4420] ptrace attach of "./syz-executor exec"[5853] was attempted by "./syz-executor exec"[4420] [ 3040.556523][ T4420] 8021q: adding VLAN 0 to HW filter on device bond6 [ 3040.610620][T25361] net_ratelimit: 2 callbacks suppressed [ 3040.610643][T25361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3040.969972][T18785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3041.020741][ T4430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6089'. [ 3041.691709][ T7327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3041.700046][ T7327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3041.709962][T30627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3041.718498][T18785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3041.728240][T30627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3041.738299][ T575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3042.010831][ T7327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3042.022327][T18785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3042.429948][ T4447] netlink: 'syz.4.6092': attribute type 10 has an invalid length. [ 3045.282690][ T4463] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6094'. [ 3046.261529][ T4463] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6094'. [ 3046.884598][ T6420] net_ratelimit: 9 callbacks suppressed [ 3046.884618][ T6420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3046.968994][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3047.555507][ T6420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3047.640213][ T3424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3047.879156][ T575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3047.967348][T30627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3048.010772][T18785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3048.614663][T24112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3049.049945][T18785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3050.464219][T32489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3052.060390][T18803] net_ratelimit: 3 callbacks suppressed [ 3052.060412][T18803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3052.254715][ T4520] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6105'. [ 3052.421278][ T4526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6106'. [ 3052.665748][T32489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3052.912310][ T4534] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6108'. [ 3053.750502][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3053.800731][ T4539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3054.002106][ T6093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3054.130328][ T4539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3054.149155][ T4539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3054.171365][ T3424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3054.188328][ T4539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3054.200645][ T4539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3057.211620][ T575] net_ratelimit: 59 callbacks suppressed [ 3057.211642][ T575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3057.492364][ T4575] program syz.7.6118 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3057.736904][T18841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3057.859686][ T4578] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 3057.960615][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3058.658112][ T4582] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6120'. [ 3058.996388][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3059.261592][T25361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3059.861548][ T4590] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6131'. [ 3060.072336][T32489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3060.331721][ T3424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3060.870290][T18868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3061.113928][ T4604] ptrace attach of "./syz-executor exec"[16833] was attempted by "./syz-executor exec"[4604] [ 3061.216434][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3061.404403][ T4604] 8021q: adding VLAN 0 to HW filter on device bond4 [ 3062.285399][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3062.362052][ T4615] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6125'. [ 3062.418274][ T6093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3063.293222][T32489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3063.376417][ T575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3064.563379][T25361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3064.604730][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3065.238360][ T4638] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6130'. [ 3065.678035][T26397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3066.136589][ T6093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3066.418475][ T575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3066.660664][ T3424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3067.213566][ T4657] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6136'. [ 3067.238760][ T30] audit: type=1800 audit(1764742529.039:3107): pid=4657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.6136" name="bus" dev="tmpfs" ino=3795 res=0 errno=0 [ 3067.272717][ T4658] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6135'. [ 3067.492569][T18868] net_ratelimit: 1 callbacks suppressed [ 3067.492595][T18868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3067.783365][T32489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3068.190801][ T4666] netlink: 'syz.5.6137': attribute type 10 has an invalid length. [ 3068.606109][ T31] INFO: task kworker/0:3:27056 blocked for more than 143 seconds. [ 3068.643059][ T31] Not tainted syzkaller #0 [ 3068.687750][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3068.860054][T32489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3068.902483][ T31] task:kworker/0:3 state:D stack:20064 pid:27056 tgid:27056 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 3068.936726][ T31] Workqueue: usb_hub_wq hub_event [ 3068.952230][ T31] Call Trace: [ 3068.965877][ T31] [ 3068.973677][ T31] __schedule+0x14bc/0x5000 [ 3069.032268][ T31] ? __pfx___schedule+0x10/0x10 [ 3069.240093][ T31] ? schedule+0x91/0x360 [ 3069.291700][ T31] schedule+0x165/0x360 [ 3069.314777][ T31] schedule_preempt_disabled+0x13/0x30 [ 3069.340676][ T31] __mutex_lock+0x7e6/0x1350 [ 3069.375929][ T31] ? __mutex_lock+0x5bb/0x1350 [ 3069.479199][ T3424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3069.491811][ T6093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3069.522378][ T31] ? hub_event+0x21e5/0x4a20 [ 3069.554987][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 3069.583037][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3069.634416][ T31] hub_event+0x21e5/0x4a20 [ 3069.662676][ T31] ? __pfx_hub_event+0x10/0x10 [ 3069.696793][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 3069.890317][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 3069.895629][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 3069.904221][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 3069.930270][T32489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3069.980596][ T31] process_scheduled_works+0xad1/0x1770 [ 3069.987149][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 3070.087381][ T31] worker_thread+0x8a0/0xda0 [ 3070.110010][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 3070.287815][ T31] ? __kthread_parkme+0x7b/0x200 [ 3070.321687][ T31] kthread+0x711/0x8a0 [ 3070.326921][ T31] ? __pfx_worker_thread+0x10/0x10 [ 3070.358317][ T31] ? __pfx_kthread+0x10/0x10 [ 3070.379737][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 3070.388159][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 3070.440186][ T31] ? __pfx_kthread+0x10/0x10 [ 3070.445872][ T31] ret_from_fork+0x599/0xb30 [ 3070.476223][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 3070.511315][ T31] ? __switch_to_asm+0x39/0x70 [ 3070.518143][ T31] ? __switch_to_asm+0x33/0x70 [ 3070.526197][ T31] ? __pfx_kthread+0x10/0x10 [ 3070.539914][ T31] ret_from_fork_asm+0x1a/0x30 [ 3070.545137][ T31] [ 3070.548278][ T31] [ 3070.548278][ T31] Showing all locks held in the system: [ 3070.579255][ T31] 1 lock held by khungtaskd/31: [ 3070.585508][ T31] #0: ffffffff8df42000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 3070.620093][ T31] 4 locks held by kworker/u8:7/1009: [ 3070.626751][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 3070.659969][ T31] #1: ffffc90003c4fb80 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 3070.685526][ T31] #2: ffffffff8f2e6830 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0 [ 3070.688774][ T1134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3070.731708][ T31] #3: ffffffff8f2f37c8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 3070.761132][ T31] 1 lock held by syslogd/5187: [ 3070.767351][ T31] #0: ffff8880b883a698 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 3070.783138][ T31] 2 locks held by getty/5597: [ 3070.791443][ T31] #0: ffff88814e5250a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 3070.803149][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 3070.815889][ T31] 5 locks held by kworker/1:8/5965: [ 3070.821598][ T31] #0: ffff888144e86d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 3070.835905][ T31] #1: ffffc90004ebfb80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 3070.854258][ T31] #2: ffff88814777a198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 3070.867402][ T31] #3: ffff888028a87518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 3070.883227][ T31] #4: ffff888146ff7a68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 3070.894008][ T31] 5 locks held by kworker/0:3/27056: [ 3070.900443][ T31] #0: ffff888144e86d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 3070.914084][ T31] #1: ffffc9000deffb80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 3070.928248][ T31] #2: ffff88814777f198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 3070.940154][ T31] #3: ffff888028b21518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 3070.951558][ T31] #4: ffff888146ff7a68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 3070.963507][ T31] 3 locks held by kworker/1:6/32489: [ 3070.970619][T18785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3070.970855][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 3070.994991][ T31] #1: ffffc9000e4dfb80 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 3071.006097][ T31] #2: ffffffff8df47af8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 3071.028828][ T31] [ 3071.031321][ T31] ============================================= [ 3071.031321][ T31] [ 3071.058854][ T31] NMI backtrace for cpu 0 [ 3071.058881][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 3071.058905][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3071.058920][ T31] Call Trace: [ 3071.058929][ T31] [ 3071.058940][ T31] dump_stack_lvl+0x189/0x250 [ 3071.058973][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3071.058998][ T31] ? __pfx__printk+0x10/0x10 [ 3071.059040][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 3071.059076][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 3071.059110][ T31] ? __pfx__printk+0x10/0x10 [ 3071.059144][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3071.059178][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 3071.059214][ T31] watchdog+0xf3c/0xf80 [ 3071.059246][ T31] ? watchdog+0x1e2/0xf80 [ 3071.059277][ T31] kthread+0x711/0x8a0 [ 3071.059308][ T31] ? __pfx_watchdog+0x10/0x10 [ 3071.059332][ T31] ? __pfx_kthread+0x10/0x10 [ 3071.059359][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 3071.059380][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 3071.059402][ T31] ? __pfx_kthread+0x10/0x10 [ 3071.059429][ T31] ret_from_fork+0x599/0xb30 [ 3071.059465][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 3071.059507][ T31] ? __switch_to_asm+0x39/0x70 [ 3071.059532][ T31] ? __switch_to_asm+0x33/0x70 [ 3071.059556][ T31] ? __pfx_kthread+0x10/0x10 [ 3071.059592][ T31] ret_from_fork_asm+0x1a/0x30 [ 3071.059635][ T31] [ 3071.059644][ T31] Sending NMI from CPU 0 to CPUs 1: [ 3071.217672][ C1] NMI backtrace for cpu 1 [ 3071.217694][ C1] CPU: 1 UID: 0 PID: 61 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 3071.217715][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3071.217729][ C1] Workqueue: events_unbound toggle_allocation_gate [ 3071.217759][ C1] RIP: 0010:insn_get_immediate+0xad6/0x1280 [ 3071.217782][ C1] Code: 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 0f 85 e0 02 00 00 45 88 2f 49 bd 00 00 00 00 00 fc ff df <48> 8b 3c 24 42 0f b6 44 2d 00 84 c0 0f 85 9d 02 00 00 8b 2f 89 ee [ 3071.217799][ C1] RSP: 0018:ffffc9000212f6b8 EFLAGS: 00000293 [ 3071.217814][ C1] RAX: ffffffff8b45ce79 RBX: 1ffff92000425efb RCX: ffff88801c328000 [ 3071.217829][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 3071.217840][ C1] RBP: 1ffff92000425efd R08: ffff88801c328000 R09: 0000000000000003 [ 3071.217854][ C1] R10: 0000000000000008 R11: 0000000000000000 R12: ffffc9000212f7dc [ 3071.217866][ C1] R13: dffffc0000000000 R14: ffffc9000212f7a0 R15: 0000000000000001 [ 3071.217879][ C1] FS: 0000000000000000(0000) GS:ffff8881261c0000(0000) knlGS:0000000000000000 [ 3071.217894][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3071.217907][ C1] CR2: 0000000080202018 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 3071.217924][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3071.217935][ C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3071.217947][ C1] Call Trace: [ 3071.217956][ C1] [ 3071.217970][ C1] ? kmem_cache_alloc_noprof+0x96/0x6e0 [ 3071.217988][ C1] insn_decode+0x30e/0x4f0 [ 3071.218007][ C1] ? kmem_cache_alloc_noprof+0x87/0x6e0 [ 3071.218024][ C1] __jump_label_patch+0xe5/0x450 [ 3071.218052][ C1] ? __pfx___jump_label_patch+0x10/0x10 [ 3071.218080][ C1] ? kmem_cache_alloc_noprof+0x87/0x6e0 [ 3071.218096][ C1] ? kmem_cache_alloc_noprof+0x96/0x6e0 [ 3071.218112][ C1] ? kmem_cache_alloc_noprof+0x8c/0x6e0 [ 3071.218136][ C1] arch_jump_label_transform_queue+0x69/0x110 [ 3071.218162][ C1] __jump_label_update+0x185/0x380 [ 3071.218187][ C1] static_key_disable_cpuslocked+0xc5/0x1a0 [ 3071.218206][ C1] static_key_disable+0x1a/0x20 [ 3071.218222][ C1] toggle_allocation_gate+0x1a1/0x240 [ 3071.218245][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 3071.218267][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 3071.218302][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 3071.218330][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 3071.218359][ C1] process_scheduled_works+0xad1/0x1770 [ 3071.218403][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 3071.218441][ C1] worker_thread+0x8a0/0xda0 [ 3071.218475][ C1] kthread+0x711/0x8a0 [ 3071.218504][ C1] ? __pfx_worker_thread+0x10/0x10 [ 3071.218521][ C1] ? __pfx_kthread+0x10/0x10 [ 3071.218544][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 3071.218562][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 3071.218581][ C1] ? __pfx_kthread+0x10/0x10 [ 3071.218603][ C1] ret_from_fork+0x599/0xb30 [ 3071.218637][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 3071.218671][ C1] ? __switch_to_asm+0x39/0x70 [ 3071.218693][ C1] ? __switch_to_asm+0x33/0x70 [ 3071.218715][ C1] ? __pfx_kthread+0x10/0x10 [ 3071.218737][ C1] ret_from_fork_asm+0x1a/0x30 [ 3071.218769][ C1] [ 3072.011584][T32489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3072.140470][ T1009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3073.050014][T32489] net_ratelimit: 1 callbacks suppressed [ 3073.050036][T32489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3073.262003][T18868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3074.090267][T18785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3074.399975][T18868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3075.130049][T18785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3075.529519][ T1134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3075.546163][ T3424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3076.170741][T18785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3076.260378][ T3424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3076.649991][ T1009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3078.250450][T18785] net_ratelimit: 2 callbacks suppressed [ 3078.250467][T18785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3078.570318][ T3424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog