last executing test programs: 20.093808651s ago: executing program 4 (id=4395): ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x5) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x210) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1004e1e}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) r4 = syz_io_uring_setup(0x4737, &(0x7f0000000480)={0x0, 0x9485, 0x20, 0x0, 0x18b}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r5, r6, 0x0) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) gettid() r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2000, 0x8000, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x12, 0x14, 0x20, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x41, 0x0}, @multicast1}}}}) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=@updpolicy={0xe28, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xc, 0x2000000}}, [@algo_aead={0xcbc, 0x12, {{'morus640-sse2\x00'}, 0x6380, 0x200, "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"}}, @user_kmaddress={0x2c, 0x13, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@empty, 0x0, 0x2}}, @offload={0xc, 0x1c, {0x0, 0x1}}, @lastused={0xc, 0xf, 0x4}, @etimer_thresh={0x8, 0xc, 0xffff}, @replay_esn_val={0x34, 0x17, {0x6, 0x70bd2b, 0x70bd26, 0x70bd2d, 0x70bd26, 0x9, [0x5, 0x8, 0xae8, 0x6, 0x5, 0x1000]}}, @offload={0xc, 0x1c, {0x0, 0x2}}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, @in=@rand_addr=0x64010100, 0x0, 0xa}}]}, 0xe28}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) 17.986072661s ago: executing program 3 (id=4398): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x4005, 0x0, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setfsuid(0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x356, 0x160, 0x10, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x10000004, 0x0, 0x6, 0xfffffffe, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = syz_io_uring_setup(0x90c, &(0x7f0000000200)={0x0, 0x5885, 0x0, 0x0, 0xfd, 0x0, r0}, &(0x7f0000000740)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r4, 0x0, 0x0, 0x0, 0x10}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x1e, 0x4, 0x0) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) dup3(r10, r9, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r11, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r8) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) mknodat$loop(r0, &(0x7f0000000080)='./file0\x00', 0x100, 0x1) 17.894585827s ago: executing program 0 (id=4399): syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb62", 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x8, 0x4, 0x0, 0x3c, 0x4c, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@ssrr={0x89, 0x7, 0x1e, [@multicast1]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000100)=0x1) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000000)=0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa9de, 0x0, &(0x7f0000000140)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000040000701feffffff00000000017c00000400d7002c00018006000600800a00000c001500030000000000000014001900fe8000000000000000000000000000190400028024aa864793ca6278a59d79dccb81e3e5fcad4939ea9d"], 0x48}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$TIOCMBIC(r5, 0x5417, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffb}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14}}, 0x70}}, 0x0) 15.623892565s ago: executing program 4 (id=4402): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{0x0}, {&(0x7f0000001bc0)=""/43, 0x2b}, {&(0x7f0000001c00)=""/24, 0x18}], 0x3}, 0x4}], 0x1, 0x10143, 0x0) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r3 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000001100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e308002", 0x1001, r3) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSACTIVE(r7, 0x40087446, &(0x7f00000007c0)={0x1fffffffffffff72, &(0x7f0000000080)=[{0x6, 0xd, 0x1, 0x2006}]}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@ipv4_newrule={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x4040) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000ffff27bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda45d0521860000140012800c0001006d616376746170000400028008000500", @ANYRESDEC=r9, @ANYBLOB="2f3dda96", @ANYRES32=r9], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) unshare(0x62040200) syz_usb_connect(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902"], 0x0) r11 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r11, 0x0, 0x40, &(0x7f00000000c0)={'filter\x00', 0x0, [0x8, 0x0, 0x7, 0x4, 0x8b32]}, &(0x7f0000000200)=0x54) 14.59821593s ago: executing program 3 (id=4403): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newroute={0x34, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x8}, [@RTA_PRIORITY={0x8, 0x6, 0x26}, @RTA_EXPIRES={0x8, 0x17, 0x80000001}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4805}, 0x84) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000740)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001c80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a4000000002300000000e0a3f0200000000080000000a0000000900010073797a31000000000900020073797a310000000004000380140000001100010000000000000000000100000a"], 0x94}, 0x1, 0x0, 0x0, 0x4000094}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1, 0x5, 0x808, 0x9, 0x3}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0xc000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r4, 0x0, 0x1, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'nicvf0\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x2, 0x0, 0x2}}) r6 = socket$kcm(0x10, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200}) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x13}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r8, 0x4010744d, &(0x7f0000000180)) 14.239431772s ago: executing program 0 (id=4404): syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb62", 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x8, 0x4, 0x0, 0x3c, 0x4c, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@ssrr={0x89, 0x7, 0x1e, [@multicast1]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000100)=0x1) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000000)=0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa9de, 0x0, &(0x7f0000000140)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000040000701feffffff00000000017c00000400d7002c00018006000600800a00000c001500030000000000000014001900fe80"], 0x48}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$TIOCMBIC(r5, 0x5417, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffb}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14}}, 0x70}}, 0x0) 11.326672658s ago: executing program 4 (id=4406): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1084189e, 0x82680) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x80, 0xffffffffffffffff, 0xfa11, 0xffffffff}, 0x0) futex_waitv(&(0x7f00000047c0)=[{0x5, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x1) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) r4 = openat$khugepaged_scan(0xffffff9c, &(0x7f00000002c0), 0x1, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_buf(r5, 0x1, 0x4c, 0x0, &(0x7f0000000080)) write$khugepaged_scan(r4, &(0x7f0000000040), 0x8) r6 = socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) bind$alg(r6, &(0x7f00000006c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)=0xffffffff) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(r9) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005bd30a20f0031d58a3200102030109021b0002000000000904250000ff0127000904"], 0x0) 10.868618499s ago: executing program 3 (id=4408): syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb62", 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x8, 0x4, 0x0, 0x3c, 0x4c, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@ssrr={0x89, 0x7, 0x1e, [@multicast1]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000100)=0x1) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000000)=0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa9de, 0x0, &(0x7f0000000140)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000040000701feffffff00000000017c00000400d7002c00018006000600800a00000c001500030000000000000014001900fe8000000000000000000000000000190400028024aa864793ca6278a59d79dccb81e3e5fcad4939ea9d"], 0x48}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$TIOCMBIC(r5, 0x5417, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffb}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14}}, 0x70}}, 0x0) 10.76987648s ago: executing program 1 (id=4409): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x4005, 0x0, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setfsuid(0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x356, 0x160, 0x10, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x10000004, 0x0, 0x6, 0xfffffffe, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = syz_io_uring_setup(0x90c, &(0x7f0000000200)={0x0, 0x5885, 0x0, 0x0, 0xfd, 0x0, r0}, &(0x7f0000000740)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r4, 0x0, 0x0, 0x0, 0x10}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x1e, 0x4, 0x0) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) dup3(r10, r9, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r11, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r8) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) mknodat$loop(r0, &(0x7f0000000080)='./file0\x00', 0x100, 0x1) 10.661371181s ago: executing program 2 (id=4410): syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb62", 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x8, 0x4, 0x0, 0x3c, 0x4c, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@ssrr={0x89, 0x7, 0x1e, [@multicast1]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000100)=0x1) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000000)=0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa9de, 0x0, &(0x7f0000000140)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000040000701feffffff00000000017c00000400d7002c00018006000600800a00000c001500030000000000000014001900fe8000000000000000000000000000190400028024aa864793ca6278a59d79dccb81e3e5fcad4939ea9d"], 0x48}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$TIOCMBIC(r5, 0x5417, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffb}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14}}, 0x70}}, 0x0) 10.131394928s ago: executing program 0 (id=4411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = creat(0x0, 0x4b) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) read$dsp(0xffffffffffffffff, 0x0, 0x0) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x3, [], [0x800000], [0x0, 0x1001000], [0x4, 0x0, 0x7]}) r6 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x9) syz_usb_disconnect(r6) writev(r7, &(0x7f0000003480)=[{&(0x7f00000021c0)="81", 0x1}], 0x1) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000080)=@ccm_128={{0x303}, "bade69b3eeb6e493", "1c648d388816db68c8e7059bc68ab049", "b3fec050", "fe770e7cf5f24b03"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$poke(0x5, r8, &(0x7f0000000380), 0x10000) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/221, 0xdd}], 0x1, 0x1c0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x10001, 0x0, 0x3000, 0x2000, &(0x7f0000990000/0x2000)=nil}) 9.508632667s ago: executing program 2 (id=4412): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x4005, 0x0, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setfsuid(0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x356, 0x160, 0x10, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x10000004, 0x0, 0x6, 0xfffffffe, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = syz_io_uring_setup(0x90c, &(0x7f0000000200)={0x0, 0x5885, 0x0, 0x0, 0xfd, 0x0, r0}, &(0x7f0000000740)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r4, 0x0, 0x0, 0x0, 0x10}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x1e, 0x4, 0x0) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) dup3(r10, r9, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r11, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_POWER_SAVE(r8, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) mknodat$loop(r0, &(0x7f0000000080)='./file0\x00', 0x100, 0x1) 8.590101136s ago: executing program 3 (id=4413): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = creat(0x0, 0x4b) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) read$dsp(0xffffffffffffffff, 0x0, 0x0) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x3, [], [0x800000], [0x0, 0x1001000], [0x4, 0x0, 0x7]}) r6 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x9) syz_usb_disconnect(r6) writev(r7, &(0x7f0000003480)=[{&(0x7f00000021c0)="81", 0x1}], 0x1) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000080)=@ccm_128={{0x303}, "bade69b3eeb6e493", "1c648d388816db68c8e7059bc68ab049", "b3fec050", "fe770e7cf5f24b03"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$poke(0x5, r8, &(0x7f0000000380), 0x10000) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/221, 0xdd}], 0x1, 0x1c0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x10001, 0x0, 0x3000, 0x2000, &(0x7f0000990000/0x2000)=nil}) 7.990928329s ago: executing program 0 (id=4414): syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb62", 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x8, 0x4, 0x0, 0x3c, 0x4c, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@ssrr={0x89, 0x7, 0x1e, [@multicast1]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000100)=0x1) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000000)=0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa9de, 0x0, &(0x7f0000000140)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000040000701feffffff00000000017c00000400d7002c00018006000600800a00000c001500030000000000000014001900fe8000000000000000000000000000190400028024aa864793ca6278a59d79dccb81e3e5fcad4939ea9d"], 0x48}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$TIOCMBIC(r5, 0x5417, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffb}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14}}, 0x70}}, 0x0) 7.942240913s ago: executing program 1 (id=4415): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r4 = syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x10000000, 0x13a, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) io_uring_enter(r4, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) write$vga_arbiter(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r7, 0x2284, &(0x7f0000000080)) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$unix(0x1, 0x2, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x4c, r11, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x7ff, 0x6d}}}}, [@NL80211_ATTR_IFNAME={0xfffffffffffffd4f, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) acct(&(0x7f0000000040)='./file0\x00') ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, r14, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x28}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r16 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r16, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x9}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) write$vga_arbiter(r3, &(0x7f0000000040)=@other={'unlock', ' ', 'io'}, 0xa) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 7.725067171s ago: executing program 4 (id=4416): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x26020480) socket(0x10, 0x80002, 0x2) r5 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="80000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038014000180080001000000000008000200ac1414000c0002800500010000000000240001800c00028005d7160a8800000014000180080001"], 0x80}}, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r4, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) r7 = socket$inet6(0xa, 0x3, 0x7) socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x4, &(0x7f00000001c0)={0x0, 0x4, 0x1, @thr={&(0x7f0000000100)="bb9e9debed1d5cbdb87d79d763eb20b6fa7ab1e9523200644d0e26c975c65ed19cf620be402f5df3d16d7227f1bbba5bf9e0e90122149eca57fce28dc78ed1b40845b04677f613e47777", &(0x7f0000000180)="393bfc01fb2e3a529a6a8764805b0b015c931c3537ffd3b1a5e11179eced228cb668bb1c2952163370b6082a1e8a"}}, &(0x7f0000000240)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x3, 0x0, 0x4, 0x2000, &(0x7f0000002000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x20780, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x23}, 0x94) 6.760451694s ago: executing program 2 (id=4417): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r1}}, 0x48) 6.545444132s ago: executing program 1 (id=4418): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000100)=""/212) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x2000400c) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x41, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x5, "340b784fceefd131b8e6238c25f5998e5bf421e48f4b0a501922de974a3300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000180)={"2486970284ed923431d400001f000000a9201be943f06f2f4000", r7, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000240)={"8c5d2ddcdba01c2b0e062db91ec2209d789c4dcce0ab20c5fa0b8a204e3b856a", r8, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r9, 0xc0383e04, &(0x7f0000000400)={""/32, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000500)=[{}, {}]}) recvmsg$kcm(r3, 0x0, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000003100)={'syztnl0\x00', &(0x7f0000003080)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0x41, 0x9, 0x8, @empty, @private0, 0x700, 0x7, 0x0, 0x9}}) sendmmsg$inet6(r3, &(0x7f0000005140)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x27}, 0x2}, 0x1c, &(0x7f00000017c0)=[{&(0x7f0000000240)="5a5e61557eb3d92810de4f6b6ed06d47b35c635101f253e6c50a9a38fa2245ee75f58b5c12e1d68b506ca9008f529a0a722383330fefe65c5ab09496", 0x3c}, {&(0x7f0000000380)="e8ae92cbd7e43349d40a97b9ba9a7950acd984c310dccaff1ed7c8422ac5f060c8f8f189af8e9ab017e059a3b0c57093e1ffd0c321cd4fd4cda4ecc5afa5112d9988f68d7c6fb6ae3952bd2515d72126ede228595111601d9464851804df7db9ebe85782f477586169b22975480a0e5e75f7bdd936a8539baedd72198a7004273060f7eca04019bff12d8c0c12f0effc45f47f7c3daa3d4b3740e81113c73bc8ff5ff6f6888bfcf89cca8d1b0dc56dfa3d6abe932e2ae4fad6701ac16e88d1e1b438c6bc3ade2029426d15e43bc590db95b816ccc0560d63eb8260cd252c43f020c710306f460c518a6e1c4bd9bf73f2", 0xf0}, {&(0x7f0000000280)="c29d1e7e2841c03f69c619d3bce8012703dee5eed629a4146e1f3f1ede6dea8e989851682ab993985265523f5c5227839ed93ce95a755181936191d3bf08cb26312bb515be998968cca97808132721255e2ebbd00b25b2c5dc42b467d53cb77dce48", 0x62}, {&(0x7f0000000480)="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", 0x800}, {&(0x7f0000001480)="57f454896dfcebcdb98b706f0606990541ceb3a7d4f22611786f9ca18059e88c4c6572290b33b23a079858b63d322cd0408f3da75127882978a20b7b748d7f84ec68c3c4ee2c092503fd965c3c997d46a21507ca27d31ce2ab2f97d95c79da6eef417acfe93dcaa6f5fb4204c9", 0x6d}, {&(0x7f0000001540)="39d0f369fba797433de2bc158aaddee5e95658922d69d27eb8b13e1f2820ff00b48421971cd3bddc3ec083a0034e273bf87400bd7536f971cbf4000d7471ee007a40aa23efc29be54e2ac16380ed5cdc0e186cf31ca70ce1740f4e9325694db820dd288818738fbbee2189a964e06c6eb53a35e11a9d59b4d030fee381bfd3f3", 0x80}, {&(0x7f00000015c0)="f7e1dded8dba96dcd0e74cbe60ceb679fdefa8849c92b06b5b0697f1834a5426b481d6a90359027bb413b5249ff1dbc25cf2e9fcda3e7446b37aa0d0bd26aace9f636bdc4e29fbc7f36d7e7291258dcf07bf18f4111d4a8d2311f1bb2258f887be65baba630498141cad5d0502a64b4304d0fbc9ee5feefc7925d24d5ebc17aa1542c4525a750069f53f1edbc5ef8f1653f72af411c4a4256c0fc8a2a7ca15f614bce06a03215b342cee901b168384efde9b4910b1f30550ed39fb287f9128c5a37831061af09b9794434020bb11d01882ed6e8e6fab0d5b8a2b7c016385209834c4fa191ae5a024b2644f2938", 0xed}, {&(0x7f00000016c0)="60c9d0cc66d9a7a9ab8e470ea973e263762fb5e721a49a3182306f5632a3ec4b37e7ba0ea1f3d2a868f709226e8f5bc7315b786c75f7c5f095316de628d1baf57fb16e48ba27bd6248266156125bc1df2872750ba0bfa8069da8cf2a3eba1178882bd3dae254c20009c2202646844b9e47775bb9746b06d7d988841ac7560b328f56bd71f896306854abeb05572a2f75bba6db763e7bdf72e8e1e9963c8bc63cad12d8208ef4f3460b0a47e803980b71c2828e04518b9e1314ad89978be495bceb10ffe5345fcb6fa1bd99b70bad60cf98ce3ef1d915c1a199322dcd2b7133003125", 0xe2}], 0x8, &(0x7f0000001800)=[@tclass={{0x10, 0x29, 0x43, 0xfffff3ee}}, @dontfrag={{0x10, 0x29, 0x3e, 0x80000001}}, @rthdr_2292={{0x34, 0x29, 0x39, {0x5c, 0x4, 0x1, 0x0, 0x0, [@local, @loopback]}}}, @dstopts_2292={{0x2c, 0x29, 0x4, {0x11, 0x2, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x5, 0x15e9, [0x9]}}]}}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0xc}}, @dontfrag={{0x10, 0x29, 0x3e, 0xffffffff}}, @hopopts={{0x2c, 0x29, 0x36, {0x6, 0x2, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}], 0xcc}}, {{&(0x7f0000001900)={0xa, 0x4e20, 0x1, @private1, 0x401}, 0x1c, &(0x7f0000001bc0)=[{&(0x7f0000001940)="d0bd8b875c7cc34d26a7085965186194783193e8558081f4fdfe498df0fbf84c24d662dd717907651b7cbfb36500c1cafa12e57b09d08af632ed8c68a5a3b6b4b3c193ed88b2a7bce75965a018ee27498abce6b48a7dd80e90681331da76a0219b18c1250569acf0846c5321a6ca63e9cc73e71dffc39c5d57f0649f93982c50c7123ac76b808c8a421c4942f57835c799620667cd89d8b0e9a257303e1f96757076d532aedbb02c00b0f36fa6089a9b2dff4faedeee79d263acff7b484439a010784a80a822351330e318190bb343184ead39ece513da81a18bd0", 0xdb}, {&(0x7f0000001a40)="f14c6a273f61a556b76b521f3013def1823e81a9f9bc6528b8254ee95b0dddbea703dd845cf50e373c44eeb107d2afadedce75013fbcf7b3ae663971deef1473b9546621998af178ee104fc42fa4055d71ef11156b934a57a2d92010fc7022aebae8875d5a0bdd5fe2e6b81215feddb044755db95f3bbcb2f061ce5fe29074f2d17c0c8ac5a9d4", 0x87}, {&(0x7f0000001b00)="592fb08a8c94ea0b2873f14aa9203102fbb6fcaadf17c2fa1935c89308041ac68dccac0a7a0ad6a7303afa1cb102bc18507fc95b1b160729bae06d11aeb58c71bb5a65dabf42702114838a83bb466795c1bd9c036e8b3cf9679ca10d47", 0x5d}, {&(0x7f0000001b80)="323245ceb9391e4f62b1127dae764ea64730143df35d4c3c29765ce7ffa66d6685db9ffa815c", 0x26}], 0x4, &(0x7f0000001c00)=[@hoplimit_2292={{0x10, 0x29, 0x8, 0x8}}, @dstopts={{0x174, 0x29, 0x37, {0x3a, 0x2b, '\x00', [@generic={0x0, 0xc0, "20b40775472de88f948ac8cf60253156aa913e59b88e8ab4fbd75f03731da732dc678521b348add872b5d184099d4beeded8aa750c9ea9070c5f3df6366a2b6913705ea8d4631eeeb14de49599ee24839eae6b30775b0bdacb068c1532e841bcb880ff1608d6b947a8d5874aad9f721b2956a5c15ba3bca08584e00fe18a5062c3b1864d7fbb6a62aaa1e1bc0cffb1d26493fa4db3193552ae31be8a68c32883ce58bfa472b520e14a435f91e6a195f88e87c41dd9ce8b3f505f640c3ad5a890"}, @calipso={0x7, 0x18, {0x0, 0x4, 0x2, 0x8001, [0xf67c, 0x0]}}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @ra={0x5, 0x2, 0xff}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @calipso={0x7, 0x28, {0x1, 0x8, 0x9, 0x3c, [0x7ff, 0x6bf, 0x5, 0x2a9]}}, @calipso={0x7, 0x30, {0x2, 0xa, 0x5, 0x6f, [0x6, 0x9b40, 0x3ff, 0x5, 0x0]}}]}}}, @tclass={{0x10}}, @rthdrdstopts={{0x5c, 0x29, 0x37, {0x2f, 0x9, '\x00', [@ra={0x5, 0x2, 0x2}, @calipso={0x7, 0x30, {0x2, 0xa, 0x3, 0x10, [0x8, 0x0, 0x2, 0x8, 0x7]}}, @hao={0xc9, 0x10, @mcast1}]}}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0x6}}, @flowinfo={{0x10, 0x29, 0xb, 0x7}}, @rthdr_2292={{0x14, 0x29, 0x39, {0x3b, 0x0, 0x1, 0x1}}}, @hopopts_2292={{0x2c, 0x29, 0x36, {0x29, 0x3, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast1}]}}}, @hopopts={{0x64, 0x29, 0x36, {0x29, 0x9, '\x00', [@padn={0x1, 0x1, [0x0]}, @ra, @pad1, @calipso={0x7, 0x40, {0x2, 0xe, 0x9, 0xf, [0x0, 0x1, 0x0, 0x32, 0xfffffffffffffffa, 0x5, 0x3]}}]}}}], 0x2b4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003140)=[@pktinfo={{0x20, 0x29, 0x32, {@loopback, r10}}}, @rthdr_2292={{0x54, 0x29, 0x39, {0x5c, 0x8, 0x1, 0xb, 0x0, [@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback]}}}, @tclass={{0x10, 0x29, 0x43, 0xf18}}, @hopopts={{0x24, 0x29, 0x36, {0x73, 0x1, '\x00', [@ra={0x5, 0x2, 0x4}, @jumbo={0xc2, 0x4, 0x1}]}}}, @dstopts_2292={{0x3c, 0x29, 0x4, {0x1d, 0x4, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @pad1, @ra, @enc_lim={0x4, 0x1, 0x2}, @jumbo={0xc2, 0x4, 0x800}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0xe4}}, {{&(0x7f0000003280)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c, &(0x7f0000004900)=[{&(0x7f00000032c0)="2cba09f49e30575cf91cbc3b3076ce3cd5", 0x11}, {&(0x7f0000003300)="d8f36330066c21b20bca348f936590c88110af327b731ba81f7bc88f5d85d0355fdbdd64303dde58ef491172e8d7f590bc1e2c4e3a44ef46fa64ca892a7a4d50f60206e9ebf534706f7bb9ee8dae3d", 0x4f}, {&(0x7f0000003380)="3f7b0c30aedbfa5c1e0240298ffca06dee42c917cdfc824b41888e4b925bb406c6ecdd5f792bf1b95caa44940b32de2efbb9eee463cc85faa768ac426c2c4b80b84b9b62e072475f2d19b19fcea75a71f33384ec5042117a62bd202454e97c9810df7902a55ce5f1cff99fc1cce3a78e6b30532f0305ffb98911ce", 0x7b}, {&(0x7f0000003480)="98d70440f1d77bbf751e9cf137009eeb909c5614394c573016b3c0543d2aed89ec3b0e5f9d427eac3632d413d5062dd9223a73bbff5b6de323d87efbe49e5ced8c6b40e9b14a3fd74fd1777f97ba3a6bb4d78a157563ca3dbd408de9aa81186613374a354d7a78c070a92b0284ac2e08ca72b4698b1941d21097575df3f89d9a974866fc3728f5866bc6a6cf08a7b80a418e452ba29ca64ce58cda92e0e413d18ef228bfcf02e260", 0xa8}, {&(0x7f0000003540)="b6a9c03c07e760e6f68383ac497654445ebd9fec5237c823b4e2ee87787529f01f9011363da3831265e0959f735ab1a76882da1fe9e7508391d0ace748a75a0c356a0b9c8c266644e618eb74a170b4bf565318e43aabc6e23f4efc01352d7ff62c1e964afc8aac8ace6974b9f27de6720b43be7820e2dd73102d031e17a0c1f93003781d87bb1e68c7c5f64969e61807b891e0b35129c24505e7ef137429f8621541506ca34549edef68e406a01ba73dc746d5ba68ba8987762884cfeeb6961505101d91e02eaf7010824eac5448de2b5499da6623ae744f2a7255034e20b783fa71772354f1", 0xe6}, {&(0x7f0000005200)="4dd93f122c822ec1d01a40f515e570cd81c2c1773b8081a1af8b1b533003c4b346ed6ffd7de1abb39a514fa8373b8feafc833d365a4533581244e3b282b1edd769a323686a4f62c8a9ee32426ae969406e58bb575a937a5d3ec26a360058614c937395574d552a3d5a5edeca10", 0x6d}, {&(0x7f00000036c0)="66889ecea54fa21d9b11bc95a3d79da542b15e2ec08bebe4e39aa23134fc88fb1f57b6963c420efc7edfff317492d037fd637ebf1ae18dd47633a6680f6506dd6d2a900801bd1c47a9695b73c7475e373de88efe04c54f774f8da89dbaf80a422c92d28f8c57b59c648953679eed5e9b4b2eb2a910f10ad1046b8a7504062e6bf521ab9ae1b31f1505e4193d7380eccfc22d8f6e02f8419970d541601131743217cff2a62664cc630e4a920065be1072512ef0c941ad35ea2dc9cded64c75a22a63e8b0995c648a7eac247d6", 0xcc}, {&(0x7f00000037c0)="5ff3a33b4877e88a5ffbaeea2f980e8c7fb84eb6f4f75c772297acd092c6e6281a8783d61bb4a75989e08013f3f80e4169cac1f7d741340cd3fe9665c62af7ca355013d21422e9ae60bc8764f45ec78b8094ca2ad458b1ab7bf51ad745b546616990bfca1048e3ab90d69ec9e681f724a0e4e5ab251a2616f7df13c0cdce544b1ec9e1cc01bdc11470608ea40739a987ad343e1dbb7dfaf26d0d9989324944c774b6e5854f76ff63f85bdda9364412fd8b9e6a45536a0a220d4a21f246936dcef4613f8a91b2e86cb1f5b9364200b885d4bed5a1b867650e83e9dc7987aaff21dc", 0xe1}, {&(0x7f00000038c0)="0e4d632b1339c8b24d8aed3438f7211ca76057b34507bea9fb9dd4d8dd705392d4e8c11be28251e6f64b632854b4f6f15cfffbe3fcd71e03dc16e07cd959f760e377251d473cd7a2e67837b3a9dc48fb119c35490914fbd444f7bdc1875739bf75b9ece7a6254d3e9c01bae2c6b88d492c595642c0a49f3ae6a64c9ff523b7329423ba795469285d422e1e87d0c24c1725a4c240e95340d5c93ee244b714793df97b44647056beddd1a18020b2a767af71505fdeaf811d2448ded74eca5e936dde4768dfd608b0cbbd2ed240e7cb6d7cc19185fbe1d85a0f1ec9154afbee1d296034f7de9841f08902ac9a4a3b1ef2478b4fcf30151a512cfd8a5ef0c3bc4dd3a57eb6dc5d10917a3380b5414d6fe8aefc6502008f9d8c30513ae8888066a9ca2d986a28b7b09234ae01cc3fcdff1bed738707d621c69b8f59763733eb814364f454419454d1187f140e8b1293a94c9e864743892c92ced807a488a905d7cc113dbfd12076d2e1e9380c52df68c6e343543c0294d2686c23529be319d56af4d5c115e4b53d6f8ecfd2f532cc5743daac29f09bdd10013abb232857380e549868cbcdfe4b206a6634cdd8804c0e780b517e2d87186207bb8408c86cb570c5797bd25bfebf9a36e612830f6a57e3948967c58ff2e3d5f0dff58104903bd0a6967ec4a43c16d280a1419016edb62ee19a4343864aefbeac01bd5856f7b8141deaf3054c634090a4be5866a6110c2402da0851a07024eaf79ac4c4774829f733f53724fbc8fb5c6c47c37564377427eaacfc3438ba7872d9a3d8c81bd0c0a00d89ada05cf4b8ccdafcde8f12fc0bf1c022fccc5a62c47e314aa02a132f6828b1195aecea7257c2f5451b62f5d9c1a026f4737294721727357cdd860de42f4fbb59b72c1557e416234f626eb6c437cdcb5c50d4bcf8e08d5c726be6b2710c254fa3be234f0ee319e8a320335adc0015574faa04011607601c3eaa2c8b9908a34837810a6b142d3daf465885c2aa336efd0fa5d5289dbf643a70ccb8cfaf607b9ac71d8b8009474dfd4d21249f8b61fe1dbdbb2287e5256913556b80735ba4caa81e93be88eabb457c8ad35ed877aa5f7bcd5c43652b12c1aec807373df5dc6bb76fb950ba7f462c9ac258f396b82ff565afb6c9aaf7aad3b67c668c8aae336344140c302c1653b96263a58562660bdf925415fd6f8c09d31d07fa69ee02bfc83e94c87a8336c0d410ab7e20df547dd8105f15bfefeb02f54e2596554b7d5a284af0220cdcbd2ac7ba692ade534cb22f6ba8cc3f34eb78aab2b2a8d9a5e9afb9113050a515514db2a6db877971c405b671ed2a0666d83a75e8c0abc4bc04e1d8e1698c6ad6218dda420677b67e6a01ce868c8cbd0c00e696a9d398f368dc809d63d3d1bab9dedb2ef30942c2eb9b06a35646f10e265d194887b9704a7bd89ab59785898820d30690d048224300bf691cd6f99dc046a04dc20000929bca8ee770d8f79fb84224c649a8c04b17a295d870f41f3548429e55360c8f435c83d288d58be3745b05c0c92a75f80c7c7941dd14fe8857937b1bd500bb20bbfc7d1a7a29ca855a6261af1dad92766ea07afa27c1a247e668eaa720b76fd46ff668094cb0cd48841088ea476f3c129afb8dc0a444d546245ac75530036b933146af13edbfb819482933edb853a79141bbd5b1db70db0efdaa08d9d07efc46059aa9daedb7cfcbda1479be9a30ba0422a09e7da507cd55db21dded49c2561f8d849baebabd273eb8a114f1160ae50c424fb7a0aa4cf9b4a78eb3996b37a15ef0f534f8c056471469401c0a7701eba7eccb277cedf104418a8a9f283322cf7b74addd0863b254570308d573ddfc0859865546fdfce5807eccc856018901b974791ac60210733711aab5518aeb53832eb4e3e8e4d0a5934706fb402b2adc7fe07880d71d0b85339146df7e3661518a8e7e94732779f6f626c9bf8d7471cb7699aeab965666de305c98a0e831d4ba79c7c706ae98feb26083112f0732befeeba29f25a9c124e959e27750711b0e9366101893adbaf28014ce17b8b53dc0d65aa1fa2fbd95791a04a38880e1c8aee0297a67e5ef26b2fe17e48bc9007bb3e955515a6e1df8a6eff8ef62b8de07b5032c81fee0d04ddd2666f47dec8d8d9bc9bc8ee6e8386659bb7c4a59bcdf004b111228d761ba3aae3244721ad01857805fc2966ca8cf0955cf5a91ac60ab2d0276284632f218dfd6e93ee0151008bb0a87d0a14cef32c79b5fb8513986a631307c0afc3765b6cda667ba291fd1136bd3730cf47930bc8299672b1cd026ce46bbfa25a2247940413ae27ed0528c80cbf961521d2a49225b9852ee95df0ce453bd198cc1b050416ec75bfd66a4da3e3d67e14abd244bd8366e8a95d4df16f0d15c34f7f81f186686d62271b175f26c461bcab3220c95ae28e3bd066e307867d2ea524cc842752ae4571b62ea0c7328027f1db59971d0ef3cd680469bf513b448ebf0fbf04ce82ec13d7b361c49290d0e0b20965ec8adf4be0d963faf1db1d945e0435bfe49bc9913d635c97af46196af7f485718c3813ca8f17efe1e87938fb3873a64e5370b267511222536b2894ef5ef5996b6cacda0d39dfe28f78229011fc5ef9412f0038fdc13941360dfed201268d2dafbf26b5d7723ed7b23693cdc8a6dbe1bf8c0a0acaa739ea9b5a7704f02698a7699500281a3f38f3a82d827005dc802bad87271471f4018d1bb5d350e6d54778e06dc775252e2ff6da81bf6652a91eb0fffa10c30a9dc01d29bd01f421aaedc146f78f636720b09b3b891f429cd97a55932b780bd281edae3cf2dbeecd99e61ecfb74d8cc91c38877fa8bf5a4fcbdf9e57c9f1f68eeee370357cbfd467346d7939a15f6a953ab965eae6dba441ca17231aff27568e73e21645667d3ee9a1b3ae5552e0751122ddbd952fad62a4490a8c3bffeb2a7efa6086389e7870f429cdd8cbe535404cd64091187ee919103f81cda95969b1b7ef903f2a5e40fb69de9827e7afa296ae99890de6d1dbfee6c237bfbb25dada50ca9675f96f482945cea2f5588a18faa0279ce2f5616539d527892d1a88b68e1588d326f4f92e1e30ae599a307c7a438e27ef96a0a4104663fe95f74c56b9244f8b99c288d7a2f62389d9de0882f5e8fca10081ea2c29e66fe15d37e39e9b93871548ad9064411c0232fe9c2847bd9db557b0d70c3dc1112aaf22b239c4bb54793ecc1ee1cd5ca330cdd08b70ac87756d678830be26ebbcea2a73dcfb2b37c7d7f751c48d4a1d9015fe755943e44a09d4ca4448f95cfcfa5d9ed680327cb59eba82e8fc6e5c522d8a9624541348fedef7e6feca4589d9ccffb3398cdd8a6821642489b265bb0fca09c248f7aa3438a5a281439b21056bd5596e14481c736933c411e620ad3ceb36f6db47b94be339955978ba885e62a83351c964f158c94c705bb249f05e2df64488dab0f489c762c3b7e57b52af1789401a8fa79ab940b57814b76925a4af86116cf11c35a6631c80967e634bf91c956bacff7b995a029dc080268babdc61212a0d0898b6cce3b6a5c2c008f0cb22d456e8825eac135f5c2f81c6e4cc8cef8ea7e67218131ff149e072993596909133af4c4f8ed075817f82132d84b1fdb02b1d57c7fbcad48a9eaee898929d4d9c8cba7980540874cbe01c9bc278814bd53bba8443ad96377ff97eaaf31a68a51db6a1f95a348c2e153f7dbddb573446f55e30f16d2c633e3cf50d5c1d9a74a9316f418420f553e6d18ab71984a789019e3455871d1c69ab0cf88a66a1df7b404aaf9f8ff15783a9271da89fba0ee316d6e3ac6d1f9220d68e1989469c53626f374716741a986a4df3891aa3582495b0e012f32eb2b78f3a6bd754019db55ff770ae6cd3a4a0c76b714d7d5b3cf46cbb4135eb2a4ff4d413630d4de82d19810d31ab06419625a33f8371dc3ea5e6fde9f94104f5322c9f189da2da57716d95609d25f2967c795479c925896c0c5bbe7e33975729261d97637b7a6c2323bf7ede27a69afea4ffdf59601e15b4213622f19ea88eed782c8c402259a5744c9974bf0ce66659b6f5d76af2d462bd7701fc35f1c0e77fc9d5a528a59a9ce5461c056b32a2486b753a179e75f4cd04bdd217beb6d1754ff97a494830db6f816ddd90d5fe8891e45dad4ee6609bb30d4fae3dd7a2682a35b4557acc9806058f8e84446cf0a3d35fa6ac7fbb4ebf7dadd05eb92d6ef140e8cd12429e76992babe6e345ab2cc57c61330ad402939fab75e7be529ce2a795382b6dfcaa951696e605b542cf537497a48f414d9d5fe35900321d67bf038623d0f28abf6aa24739c1ba08861573495b94acdcd5dfce05b781c0970234f6be92f3a2b22fc78659cbf7cf5854db139f3456a4bf77aa014bfa92becf9be00f41b393876bccc31015e0d5bd120145d5e581113c144feb9c51eb6c590916544db4dcd871ca05d8a4d3470be31d929d69910d270eaa5b369837adca69f819c596400a0057301ea23d14dd65974b2fa43b615b05a401ef05385d7731f9ef296611b91cd591e3e4beefdf46a627a8435b8e5451846a4073900c15c3e0d6b2db49cb2195307c09dabcb05c1b9b4844f7fa8cb08561de20f914293db2b0437fe4e3df724c997dacb5d10b1df64d4552fead3c7237969faf1713b84da640f4e8dc29b2ffe1a746b017dbb6e939f553947caef629fa4e695cd8a2e3bcfa81e64fb9763866681e5c3c0731b722075537108e72d3538237a47a1da11503b508ec3c039610feb9844b78d2eab74f2417ac4fdcdd8b058359c93aab4044fc5486ccab0bfa96daeac33dcb3cdd8e76a95cc9ee79b38a404b5951d633df0e2e3f5357a18bd624c0ca2344960dc6a1046ac179e8d6317c214ebf0026998eb042c90e9bca3cbe4cca4ec3223052116eddc1b3cb7e9e365c7812c3db794ed783428cbda813ee351c65c42b6a0f69292aa8fb19fcec2e0dfc038d0a7a93a840a18d50c97d5ff3bedc02007eec176939ff88bf109de455e37c61669a36bc83166cbe2b45eb733aa10566a7ebec1a7bbf29cdcd34d53955dccd865f8853b67b669b24970a541cb1eba04702b750abeb4f4c1f68e1753bfae63bb4d7ab19203eaad152a7ff0399bd612a789bbda59124b2b7abf9bace3efb671aa89348c5991632ce104f663513fee053bed675e488954d978ebe0e9f52c07f33e27f87a013ab0ae345f869f3cc2360621d33fe0b71adca28ca260eabac7c9f6559177ee2bc301f02ab97299105c8e5732fc4c61accf9a994a1287620ad1002a3ddeb8ad7721bfe734a3a1acce1c2dbeb2950849de151f3aada5e7fdb4aa147d6299cc2d5c5460160c863651216b1b45df613d44a9935d5558ee2f8149cf43f203717b470db1c918766bab90fb74a679c8947087e2b7b62e5a35442fe3edeb8f566fb022c6faa77c4edaea3f7a08310fe62c6cb922e633bc2a6bfdf5f5c174eac25b8d0d859c0047d0ecfac516a1fca68784e4547cef139c8d79fed520236e9d3521f2b5cbcb4dcf06dfceea3aa68be66fc5fea08ed64cd2bf805a2faa1c2f50a4dfd4fc2bd3b890a8200a45e48c908e5ac00cbb3b745523ceaab3f8a723f06c3f454d8682912b2cdddd3124abf428d9e2edd62e7c596f75e36b343696dd343eaf6898df0c60d4e95f937e5212c97a6ed8ea12946144faa651ca7040936a54d2c3672a25ad1b05021ea2da6115710d618a05ce168e38be705cb99ed5de8482dd59cb5140ad417f6282e8d8eb2415b41096efa39e4c2ec8b7f492a86279df", 0xffd}, {&(0x7f00000048c0)="1cd030eb572610c66dc73fb2ec99265119588c510c007ab9015be7f248b7d315f3a7f14b923702", 0x27}], 0xa}}, {{&(0x7f00000049c0)={0xa, 0x4e22, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x70}, 0x1c, &(0x7f0000004d80)=[{&(0x7f0000004c80)="9bfbc8d634c0d054debbdfc77a8636385d0493ef4bdbd4719fbf25226a4d4e9aed937e3597f5", 0x26}, {&(0x7f0000004a40)="98cebda5ec798915146266d36317792fbfdf86507ad9ce857685e36f2c17c6e06960394cd53f7c747e1abdb995d06413ce11f32e06d869ac02ca7076a50248e13f89be92a47f8d9528df6863f201f3f9da8f29e82ace52af316cdbb5d9a62dfd1048dbc974094be2bc253ff1ef4f9d1bbf0c15fc5b963e777fa79e8c03033faf3c3c0add903f23c4718244a14bb8c682a57a6e99d843519b241ca0c75386fb7ca951fd493ac1b8", 0xa7}, {&(0x7f0000004b00)="22b1a6861256014e30b2657e52f24db1eea1562d780a07d3dcb114c471bca4f35a8b34b9d7a6ae04030cc59618a72ab2a659", 0x32}, {&(0x7f0000004b40)="251b5d70b3988f4ededa", 0xa}, {&(0x7f0000004b80)="c2afe44b23bb11021c6bb8e8b0eb72e69dc484ba64c4bb9f48d69861b708060bb246d1d50979a1a5d5874f0013f1b322f1e26cdf8561000fa81879a28c9f882334c2d9b9d111d0f236b0bbf389cb736ab69c6fd6a3398a51b84a51c82f705349050c545e05e98d66ab8b", 0x6a}, {&(0x7f0000004c80)}, {&(0x7f0000004cc0)="46245b0af1fe3b560f0c3f501a0212a4ef1163cd1515118693a26dec1b4c0ca6bd62d99d62f2b6b6f95a5d5906c3d7c3f667f80f459be5b241f1bd022b8645c72420989c0d712fd1499eb1dce45b2f02933ee39abf4c460acd77f770054277da9658a4dfcfd07b9c7718a53c89f4f05a84edea414bc5ab8e811073a7658f068a2cabdb9a21993110a215f9ebb79bf0241c", 0x91}], 0x7, &(0x7f0000003640)=ANY=[@ANYBLOB="1000000029000000340a0000ffffff7f440000001700000039000000870600b00000000020010000000000000000000000000000ff0200000000f5ffffffff1f00000001ff0100000000000100000000000000004b94795e681caff8d4698b6746"], 0x54}}, {{&(0x7f0000004e40)={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0xe}}, 0x1c, 0x0}}], 0x6, 0x20000801) write(0xffffffffffffffff, &(0x7f0000000000)="2600000022004701", 0x8) r11 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r11, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r11, 0xc0045005, &(0x7f0000000640)=0x10) close(r11) set_mempolicy_home_node(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0) r12 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r12, 0xc0145b0e, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000003240), 0x4) ioctl$FS_IOC_GETVERSION(r12, 0xc0145b0e, &(0x7f0000000000)) ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000000)={'bond_slave_0\x00'}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000200)) 6.529032741s ago: executing program 3 (id=4419): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x1, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x68, 0x0, 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r7, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r9, 0x40045612, &(0x7f0000000080)=0x2) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) 6.454143774s ago: executing program 2 (id=4420): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) socket$kcm(0x2d, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc04c560f, &(0x7f0000000040)=@fd={0x7, 0x2, 0x4, 0x800, 0xb, {0x0, 0xea60}, {0x1, 0x1, 0xe, 0x4, 0xf9, 0x8, "e012dd35"}, 0x8, 0x4, {}, 0x1}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6790d53a7ee639fd59183391125f69643d81c935868a9d992791235849b290ca51affc831244ed6c073ebc9afbb13e822b61c2c7f01d68a811d6828adfe31a2b528dc0f3f2be47568b86a3f1862d3c231847498c686eca007a2dcbc40bcb35afb4441c1ea2241a538865f40532e44a185120c9d7e9b1b6e76d00836b25d7b2bc1ca070f77a05ebf49b16decd1e377b1d9641ca407492297fbb0edbe3ee750a09dba4a59e62a0b19d544ad14c92875ebd66d80e58bb573996525052c09f8f8f7984a96f008d672a3284ee74bb84e6a0e0f171db8bf250f75612933019dbdf78f41ea0329a931efd550ccd76e6c6d67dad43646927390325d8c228b63459886a7cf4eb1e8047b02eb6a1e48905eb8a315e", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2a000000060000000000000020000000010000000087ab4b4054a5ccac7c775c4a3870db0000000004"], 0x2a) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r5}}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340), &(0x7f0000000600)) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x1) 5.257195364s ago: executing program 0 (id=4421): r0 = syz_io_uring_setup(0x50fb, &(0x7f00000002c0)={0x0, 0x7d4d, 0x200, 0x0, 0xa}, &(0x7f00000003c0), &(0x7f0000000440)) mmap$IORING_OFF_SQ_RING(&(0x7f00005d2000/0x4000)=nil, 0x4000, 0x1, 0x50, r0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) rt_tgsigqueueinfo(0x0, 0x0, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x6}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f000000cec0)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000004200)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000006200)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x224}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r4, &(0x7f0000000140)={0x38, 0x6, 0x3c, 0xe, 0x4, 0x2, 0x3fc0000000000, 0x40, 0x9, 0x8}, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x122) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=@v3={0x3000000, [{0x9, 0x1}, {0x0, 0x3d9b}]}, 0x18, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0e000000050000000e806c00faf87ccd471fa181336284f47817f04d0cb6ea48528f87"], 0x78) r5 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000100)=0x5d1c, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r7}, 0x14) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r5, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 4.242753468s ago: executing program 2 (id=4422): syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb62", 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x8, 0x4, 0x0, 0x3c, 0x4c, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@ssrr={0x89, 0x7, 0x1e, [@multicast1]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000100)=0x1) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000000)=0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa9de, 0x0, &(0x7f0000000140)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000040000701feffffff00000000017c00000400d7002c00018006000600800a00000c001500030000000000000014001900fe8000000000000000000000000000190400028024aa864793ca6278a59d79dccb81e3e5fcad4939ea9d"], 0x48}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$TIOCMBIC(r5, 0x5417, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffb}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14}}, 0x70}}, 0x0) 4.163891686s ago: executing program 1 (id=4423): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x4005, 0x0, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setfsuid(0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x356, 0x160, 0x10, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x10000004, 0x0, 0x6, 0xfffffffe, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = syz_io_uring_setup(0x90c, &(0x7f0000000200)={0x0, 0x5885, 0x0, 0x0, 0xfd, 0x0, r0}, &(0x7f0000000740)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r4, 0x0, 0x0, 0x0, 0x10}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x1e, 0x4, 0x0) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) dup3(r10, r9, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r11, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_POWER_SAVE(r8, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) mknodat$loop(r0, &(0x7f0000000080)='./file0\x00', 0x100, 0x1) 3.000023646s ago: executing program 1 (id=4424): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = creat(0x0, 0x4b) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) read$dsp(0xffffffffffffffff, 0x0, 0x0) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x3, [], [0x800000], [0x0, 0x1001000], [0x4, 0x0, 0x7]}) r6 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x9) syz_usb_disconnect(r6) writev(r7, &(0x7f0000003480)=[{&(0x7f00000021c0)="81", 0x1}], 0x1) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000080)=@ccm_128={{0x303}, "bade69b3eeb6e493", "1c648d388816db68c8e7059bc68ab049", "b3fec050", "fe770e7cf5f24b03"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$poke(0x5, r8, &(0x7f0000000380), 0x10000) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/221, 0xdd}], 0x1, 0x1c0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x10001, 0x0, 0x3000, 0x2000, &(0x7f0000990000/0x2000)=nil}) 2.404679384s ago: executing program 4 (id=4425): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x4005, 0x0, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setfsuid(0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x356, 0x160, 0x10, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x10000004, 0x0, 0x6, 0xfffffffe, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = syz_io_uring_setup(0x90c, &(0x7f0000000200)={0x0, 0x5885, 0x0, 0x0, 0xfd, 0x0, r0}, &(0x7f0000000740)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r4, 0x0, 0x0, 0x0, 0x10}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x1e, 0x4, 0x0) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) dup3(r10, r9, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r11, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r8) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) mknodat$loop(r0, &(0x7f0000000080)='./file0\x00', 0x100, 0x1) 1.388744375s ago: executing program 3 (id=4426): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000280)=0x7, 0x4) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x44}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) syz_emit_ethernet(0xfa, &(0x7f0000000480)={@local, @remote, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@ipv6={0x86dd, @dccp_packet={0x7, 0x6, "91749c", 0xc0, 0x21, 0x1, @private2, @ipv4={'\x00', '\xff\xff', @multicast2}, {[@hopopts={0x33, 0x9, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0xc}, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x18, {0x2, 0x4, 0x90, 0x4, [0x88a5, 0x1]}}, @jumbo={0xc2, 0x4, 0x7}]}, @dstopts={0xff, 0x1, '\x00', [@pad1, @enc_lim, @ra={0x5, 0x2, 0x6}]}, @hopopts={0x6c, 0x2, '\x00', [@hao={0xc9, 0x10, @loopback}]}, @hopopts={0x2b, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x37}, @enc_lim={0x4, 0x1, 0x80}]}, @hopopts={0x2}], {{0x4e22, 0x4e20, 0x4, 0x1, 0x8, 0x0, 0x0, 0x4, 0x0, "148a96", 0x9, "1f8e33"}}}}}}}, 0x0) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000340)={0x166422e6, 0x3, 0xe}) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c9d064bbd27b2aa57459cff33a3a9831ac46b8829b48fff3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) keyctl$setperm(0x5, r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @auto=[0x34, 0x62, 0x34, 0x35, 0x65, 0x31, 0x38, 0x37, 0x66, 0x32, 0x65, 0x33, 0x39, 0x63, 0x66, 0x62]}, &(0x7f00000001c0)={0x0, "ed7775e65eafd28c998ed46d479658881ccacd0c245ad4d444213a00202509c5accfa410081d82ce2a4905411dee1154155efeb6111658c4224f35d6d4f57692", 0x22}, 0x48, 0xfffffffffffffffd) syz_emit_ethernet(0x12, &(0x7f00000000c0)={@random="dfa473846208", @random="cc4a363554da", @val={@void, {0x8100, 0x2, 0x1}}, {@generic={0x8906}}}, 0x0) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000002c0)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x24, 0x0, 0x6, 0x23}) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x2, 0xb2, &(0x7f0000000a00)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902a000030156c0020904000000010100000a24010101bb02010211240601040507000a00080003000200050524050e0f0f2406020504020002000a000900040a2404020104000000120924060502010600000924030303030505"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.101582876s ago: executing program 0 (id=4427): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) socket$kcm(0x2d, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc04c560f, &(0x7f0000000040)=@fd={0x7, 0x2, 0x4, 0x800, 0xb, {0x0, 0xea60}, {0x1, 0x1, 0xe, 0x4, 0xf9, 0x8, "e012dd35"}, 0x8, 0x4, {}, 0x1}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2a000000060000000000000020000000010000000087ab4b4054a5ccac7c775c4a3870db0000000004"], 0x2a) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r5}}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340), &(0x7f0000000600)) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x1) 638.854491ms ago: executing program 4 (id=4428): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) socket$kcm(0x2d, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc04c560f, &(0x7f0000000040)=@fd={0x7, 0x2, 0x4, 0x800, 0xb, {0x0, 0xea60}, {0x1, 0x1, 0xe, 0x4, 0xf9, 0x8, "e012dd35"}, 0x8, 0x4, {}, 0x1}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2a000000060000000000000020000000010000000087ab4b4054a5ccac7c775c4a3870db0000000004"], 0x2a) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r5}}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340), &(0x7f0000000600)) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x1) 37.97637ms ago: executing program 1 (id=4429): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xa, 0xffffffff}, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0281, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000022c0)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(ghash-generic)\x00'}, 0x58) close(0x3) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r4 = epoll_create1(0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000780)={0x10000000}) write$dsp(r2, &(0x7f0000000380)="a5f6b4e928d758f38a1c517223ddff5cc989a1e4eb7c29d63cea9ebb6286784ca35aeb011e0aa5e8314b62d537d549e1827e872d77a7b699d3b0698541ca3e5fb64ba33ec60c3df48e087e5b7188bae4db49b2549177928ddba727a0291ae5f6011f49928ce742d94b9d351a92f6afddbdc01855900c5d74f58a26d2ea3bf9889d6a6611a4fe46015c3ee229fbdfc4b1efafb236ea73f5095046ba00", 0x9c) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') lseek(r6, 0xfffffffffffffffe, 0x0) ioctl$BLKPG(r6, 0x1269, &(0x7f0000000000)={0x1, 0x0, 0x94, &(0x7f00000001c0)={0x1, 0x0, 0x4}}) read$dsp(r5, &(0x7f0000000140)=""/40, 0x28) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f0000000740)={@broadcast, @remote}, 0xffffffffffffff38) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000000c0)="b11502e772034700a24251edc9654594e7", 0x11}], 0x1) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @multicast1}, 0xc) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) socket$packet(0x11, 0x2, 0x300) 0s ago: executing program 2 (id=4430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r1) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) read$dsp(0xffffffffffffffff, 0x0, 0x0) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x3, [], [0x800000], [0x0, 0x1001000], [0x4, 0x0, 0x7]}) r6 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x9) syz_usb_disconnect(r6) writev(r7, &(0x7f0000003480)=[{&(0x7f00000021c0)="81", 0x1}], 0x1) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000080)=@ccm_128={{0x303}, "bade69b3eeb6e493", "1c648d388816db68c8e7059bc68ab049", "b3fec050", "fe770e7cf5f24b03"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$poke(0x5, r8, &(0x7f0000000380), 0x10000) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/221, 0xdd}], 0x1, 0x1c0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x10001, 0x0, 0x3000, 0x2000, &(0x7f0000990000/0x2000)=nil}) kernel console output (not intermixed with test programs): nufacturer: syz [ 2241.056637][T25862] usb 3-1: SerialNumber: syz [ 2241.102196][T25862] usb 3-1: config 0 descriptor?? [ 2241.117954][T25862] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 2241.148385][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2241.152114][ T30] audit: type=1326 audit(1769900896.246:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31433 comm="syz.1.4033" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 2241.342655][T31444] bridge62: port 1(veth0_to_bond) entered blocking state [ 2241.353329][T31444] bridge62: port 1(veth0_to_bond) entered disabled state [ 2241.370088][T31444] veth0_to_bond: entered allmulticast mode [ 2241.486396][T31444] veth0_to_bond: entered promiscuous mode [ 2241.524805][ T30] audit: type=1326 audit(1769900896.246:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31433 comm="syz.1.4033" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 2241.837271][ T30] audit: type=1326 audit(1769900896.246:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31433 comm="syz.1.4033" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 2242.039282][T25862] gspca_sonixj: reg_w1 err -110 [ 2242.057156][T25862] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 2242.065155][ T30] audit: type=1326 audit(1769900896.246:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31433 comm="syz.1.4033" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 2242.065210][ T30] audit: type=1326 audit(1769900896.246:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31433 comm="syz.1.4033" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 2242.065254][ T30] audit: type=1326 audit(1769900896.246:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31433 comm="syz.1.4033" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71f572b code=0x7ffc0000 [ 2242.065297][ T30] audit: type=1326 audit(1769900896.246:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31433 comm="syz.1.4033" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 2242.065343][ T30] audit: type=1326 audit(1769900896.246:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31433 comm="syz.1.4033" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 2242.188270][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2242.570249][T25862] usb 3-1: USB disconnect, device number 90 [ 2243.228416][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2243.664306][T31465] : renamed from bridge_slave_0 [ 2244.045017][T24851] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 2244.124733][T24851] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2244.268269][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2244.437461][T31481] netlink: 'syz.0.4040': attribute type 2 has an invalid length. [ 2244.558236][T25862] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 2244.712607][T31481] : entered promiscuous mode [ 2244.818249][T25862] usb 3-1: Using ep0 maxpacket: 32 [ 2244.999738][T25862] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 2245.008254][T25862] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2245.019122][T25862] usb 3-1: config 0 has no interface number 0 [ 2245.025504][T25862] usb 3-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2245.090370][T25862] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 2245.201797][T25862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2245.292016][T25862] usb 3-1: Product: syz [ 2245.308245][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2245.329429][T25862] usb 3-1: Manufacturer: syz [ 2245.334337][T25862] usb 3-1: SerialNumber: syz [ 2245.381086][T25862] usb 3-1: config 0 descriptor?? [ 2245.439752][T25862] hub 3-1:0.89: bad descriptor, ignoring hub [ 2245.508606][T25862] hub 3-1:0.89: probe with driver hub failed with error -5 [ 2246.158846][T25862] option 3-1:0.89: GSM modem (1-port) converter detected [ 2246.358248][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2246.530091][T31490] xt_CT: No such helper "snmp" [ 2247.388247][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2247.897219][T31502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4044'. [ 2248.117847][T24851] usb 3-1: USB disconnect, device number 91 [ 2248.140215][T24851] option 3-1:0.89: device disconnected [ 2248.428363][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2248.952890][T31510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4045'. [ 2249.084119][T31510] netlink: 'syz.0.4045': attribute type 4 has an invalid length. [ 2249.099382][T31510] netlink: 'syz.0.4045': attribute type 4 has an invalid length. [ 2249.468354][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2250.518262][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2251.240137][T31531] macsec0: entered promiscuous mode [ 2251.245703][T31531] bridge0: entered promiscuous mode [ 2251.329219][T25862] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 2251.548278][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2251.680037][T25862] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2251.704440][T25862] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 2251.714391][T25862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2251.722660][T25862] usb 1-1: Product: syz [ 2251.727371][T25862] usb 1-1: Manufacturer: syz [ 2251.742198][T25862] usb 1-1: SerialNumber: syz [ 2251.897318][T31537] veth0_to_bond: left allmulticast mode [ 2251.903135][T31537] veth0_to_bond: left promiscuous mode [ 2251.909274][T31537] bridge62: port 1(veth0_to_bond) entered disabled state [ 2251.929798][T25862] usb 1-1: config 0 descriptor?? [ 2251.951299][T25862] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 2252.194977][T31537] batman_adv: batadv0: Removing interface: ip6gretap1 [ 2252.237097][T31537] bond2: (slave gretap1): Releasing active interface [ 2252.245563][T31537] gretap1: left allmulticast mode [ 2252.309249][T31537] bond3: (slave ip6gre1): Releasing backup interface [ 2252.588281][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2252.755045][T31540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2252.847761][T31530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2252.878907][T31530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2253.298671][T25862] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 2253.305799][T25862] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 2253.628259][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2253.639090][T31545] sctp: [Deprecated]: syz.4.4054 (pid 31545) Use of int in maxseg socket option. [ 2253.639090][T31545] Use struct sctp_assoc_value instead [ 2254.255502][T25862] usb 1-1: USB disconnect, device number 98 [ 2254.668232][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2254.765402][T25862] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 2254.811400][T25862] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2255.444724][T31561] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 2255.498474][T25862] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 2255.718247][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2255.788313][T25862] usb 4-1: Using ep0 maxpacket: 32 [ 2255.796125][T25862] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 2255.913224][T25862] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2255.958378][T25862] usb 4-1: config 0 has no interface number 0 [ 2255.964584][T25862] usb 4-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2256.347047][T25862] usb 4-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 2256.460095][T25862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2256.473498][T25862] usb 4-1: Product: syz [ 2256.477885][T25862] usb 4-1: Manufacturer: syz [ 2256.488824][T25862] usb 4-1: SerialNumber: syz [ 2256.625419][T25862] usb 4-1: config 0 descriptor?? [ 2256.642772][T25862] hub 4-1:0.89: bad descriptor, ignoring hub [ 2256.650490][T25862] hub 4-1:0.89: probe with driver hub failed with error -5 [ 2256.748350][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2256.829069][T25862] option 4-1:0.89: GSM modem (1-port) converter detected [ 2257.788273][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2258.119481][T31572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4060'. [ 2258.143026][T31572] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 2258.330251][T24851] usb 4-1: USB disconnect, device number 77 [ 2258.339424][T24851] option 4-1:0.89: device disconnected [ 2258.503343][T31576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4061'. [ 2258.754733][T31579] QAT: failed to copy from user. [ 2258.828346][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2259.868268][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2260.908326][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2261.143953][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 2261.143973][ T30] audit: type=1326 audit(1769900916.466:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31589 comm="syz.1.4065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 2261.351339][ T30] audit: type=1326 audit(1769900916.496:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31589 comm="syz.1.4065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 2261.646066][T31599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2261.655214][T31599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2261.948223][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2261.965422][ T30] audit: type=1326 audit(1769900916.496:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31589 comm="syz.1.4065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 2262.291728][T31609] openvswitch: netlink: Message has 1 unknown bytes. [ 2262.298769][T31609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2262.486260][ T30] audit: type=1326 audit(1769900916.496:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31589 comm="syz.1.4065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 2262.630765][ T30] audit: type=1326 audit(1769900916.496:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31589 comm="syz.1.4065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 2262.730169][ T30] audit: type=1326 audit(1769900916.496:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31589 comm="syz.1.4065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 2262.808588][T25862] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 2262.998254][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2263.028311][ T30] audit: type=1326 audit(1769900916.496:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31589 comm="syz.1.4065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 2263.088937][T25862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2263.130883][T25862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2263.148611][T25862] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2263.227958][T25862] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2263.237670][ T30] audit: type=1326 audit(1769900916.496:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31589 comm="syz.1.4065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 2263.335790][ T30] audit: type=1326 audit(1769900916.506:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31589 comm="syz.1.4065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 2263.448785][ T30] audit: type=1326 audit(1769900916.506:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31589 comm="syz.1.4065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 2263.508835][T25862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2263.743094][T25862] usb 4-1: config 0 descriptor?? [ 2264.038310][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2264.559713][T31617] fuse: Unknown parameter '' [ 2265.068274][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2265.762888][T24851] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 2265.941874][T24851] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2265.973242][T24851] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2266.029940][T24851] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 2266.040122][T24851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2266.088146][T24851] usb 1-1: Product: syz [ 2266.102943][T24851] usb 1-1: Manufacturer: syz [ 2266.108387][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2266.118474][T24851] usb 1-1: SerialNumber: syz [ 2266.152418][T24851] usb 1-1: config 0 descriptor?? [ 2266.308791][T24851] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 2266.410045][T24851] hid-generic 0000:0000:0000.0037: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2266.618905][T31639] xt_CT: No such helper "snmp" [ 2266.688312][T15093] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 2266.916331][T15093] usb 2-1: Using ep0 maxpacket: 32 [ 2266.940564][T15093] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 2266.967333][T15093] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2267.014080][T15093] usb 2-1: config 0 has no interface number 0 [ 2267.052610][T15093] usb 2-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2267.099636][T15093] usb 2-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 2267.111187][T15093] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2267.119665][T15093] usb 2-1: Product: syz [ 2267.123932][T15093] usb 2-1: Manufacturer: syz [ 2267.128781][T15093] usb 2-1: SerialNumber: syz [ 2267.143725][T15093] usb 2-1: config 0 descriptor?? [ 2267.149176][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2267.174720][T15093] hub 2-1:0.89: bad descriptor, ignoring hub [ 2267.184201][T15093] hub 2-1:0.89: probe with driver hub failed with error -5 [ 2267.202034][T15093] option 2-1:0.89: GSM modem (1-port) converter detected [ 2267.211647][T25862] usbhid 4-1:0.0: can't add hid device: -71 [ 2267.217723][T25862] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2267.270667][T25862] usb 4-1: USB disconnect, device number 78 [ 2267.342502][T24851] usb 1-1: USB disconnect, device number 99 [ 2267.786865][T31650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4076'. [ 2267.847056][T24851] usb 2-1: USB disconnect, device number 78 [ 2267.855928][T24851] option 2-1:0.89: device disconnected [ 2267.880870][T31650] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 2268.198390][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2268.702398][T31659] QAT: failed to copy from user. [ 2269.228249][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2270.268340][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2271.208258][T25862] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 2271.318385][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2271.391808][T25862] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 2271.403793][T25862] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2271.489024][T25862] usb 3-1: config 0 has no interface number 0 [ 2271.611954][T25862] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2271.674678][T25862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2271.725626][T25862] usb 3-1: Product: syz [ 2271.753626][T25862] usb 3-1: Manufacturer: syz [ 2271.771823][T25862] usb 3-1: SerialNumber: syz [ 2271.794074][T25862] usb 3-1: config 0 descriptor?? [ 2272.348264][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2273.398242][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2273.880442][T31703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4087'. [ 2273.918316][T31704] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4086'. [ 2273.941505][T31703] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 2274.428337][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2274.468917][T31707] binder: 31698:31707 ioctl 4018620d 0 returned -22 [ 2274.654735][T25862] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 2274.678710][T25862] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 82 [ 2274.698784][T25862] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 2274.788001][T25862] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 2274.796185][T25862] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 2274.806861][T25862] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2274.823900][T25862] usb 3-1: USB disconnect, device number 92 [ 2274.893096][T25862] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2275.012437][T25862] keyspan 3-1:0.133: device disconnected [ 2275.468230][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2276.122880][T25862] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 2276.144452][T25862] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2276.288138][T24851] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 2276.483246][T24851] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2276.507719][T24851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2276.518271][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2276.526634][ T936] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 2276.559167][T24851] usb 4-1: Product: syz [ 2276.563396][T24851] usb 4-1: Manufacturer: syz [ 2276.568020][T24851] usb 4-1: SerialNumber: syz [ 2276.623610][T24851] usb 4-1: config 0 descriptor?? [ 2276.665082][T31718] veth0_to_bond: left allmulticast mode [ 2276.671462][T31718] veth0_to_bond: left promiscuous mode [ 2276.677788][T31718] bridge49: port 1(veth0_to_bond) entered disabled state [ 2276.709662][ T936] usb 3-1: Using ep0 maxpacket: 32 [ 2276.717100][ T936] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 2276.727646][ T936] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2276.760394][T31718] bond2: (slave ip6gre1): Releasing backup interface [ 2276.787614][ T936] usb 3-1: config 0 has no interface number 0 [ 2276.809554][ T936] usb 3-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2276.862295][ T936] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 2276.874953][ T936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2276.914204][T24851] hso 4-1:0.0: Failed to find BULK IN ep [ 2276.928888][ T936] usb 3-1: Product: syz [ 2276.946869][T24851] usb-storage 4-1:0.0: USB Mass Storage device detected [ 2276.954740][ T936] usb 3-1: Manufacturer: syz [ 2276.965068][ T936] usb 3-1: SerialNumber: syz [ 2277.010909][ T936] usb 3-1: config 0 descriptor?? [ 2277.087427][ T936] hub 3-1:0.89: bad descriptor, ignoring hub [ 2277.285243][ T936] hub 3-1:0.89: probe with driver hub failed with error -5 [ 2277.347748][T31712] netlink: 'syz.3.4089': attribute type 16 has an invalid length. [ 2277.355750][T31712] netlink: 'syz.3.4089': attribute type 17 has an invalid length. [ 2277.364119][T31712] netlink: 'syz.3.4089': attribute type 27 has an invalid length. [ 2277.424308][T25862] usb 4-1: USB disconnect, device number 79 [ 2277.474849][ T936] option 3-1:0.89: GSM modem (1-port) converter detected [ 2277.548234][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2277.824450][T25862] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 2277.861024][T25862] hid-generic 0000:0000:0000.0039: hidraw1: HID v0.00 Device [syz1] on syz0 [ 2278.228327][T25862] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 2278.279688][T31733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4102'. [ 2278.308340][T31733] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 2278.439136][T25862] usb 1-1: Using ep0 maxpacket: 32 [ 2278.444702][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 2278.444808][ T30] audit: type=1326 audit(1769900933.746:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31730 comm="syz.3.4092" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2278.598228][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2278.616157][T25862] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 2278.628825][T25862] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2278.657302][ T30] audit: type=1326 audit(1769900933.746:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31730 comm="syz.3.4092" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2278.686698][T25862] usb 1-1: config 0 has no interface number 0 [ 2278.697246][T25862] usb 1-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2278.722269][ T30] audit: type=1326 audit(1769900933.746:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31730 comm="syz.3.4092" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2278.756944][T25862] usb 1-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 2278.771395][T25862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2278.792241][T25862] usb 1-1: Product: syz [ 2278.800766][ T30] audit: type=1326 audit(1769900933.746:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31730 comm="syz.3.4092" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2278.825816][T25862] usb 1-1: Manufacturer: syz [ 2278.837211][T25862] usb 1-1: SerialNumber: syz [ 2278.871105][T25862] usb 1-1: config 0 descriptor?? [ 2278.894005][T25862] hub 1-1:0.89: bad descriptor, ignoring hub [ 2278.900975][ T30] audit: type=1326 audit(1769900933.746:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31730 comm="syz.3.4092" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2278.925037][T25862] hub 1-1:0.89: probe with driver hub failed with error -5 [ 2279.044822][T25862] option 1-1:0.89: GSM modem (1-port) converter detected [ 2279.074587][ T30] audit: type=1326 audit(1769900933.746:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31730 comm="syz.3.4092" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2279.545250][T31740] QAT: failed to copy from user. [ 2279.580573][T25862] usb 1-1: USB disconnect, device number 100 [ 2279.590050][T25862] option 1-1:0.89: device disconnected [ 2279.608270][ T30] audit: type=1326 audit(1769900933.746:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31730 comm="syz.3.4092" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2279.631831][ T30] audit: type=1326 audit(1769900933.746:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31730 comm="syz.3.4092" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2279.636524][T15093] usb 3-1: USB disconnect, device number 93 [ 2279.654250][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2279.654341][ T30] audit: type=1326 audit(1769900933.756:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31730 comm="syz.3.4092" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2279.654404][ T30] audit: type=1326 audit(1769900933.756:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31730 comm="syz.3.4092" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2279.743981][T15093] option 3-1:0.89: device disconnected [ 2280.521343][T31747] can: request_module (can-proto-3) failed. [ 2280.598473][T15093] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 2280.668233][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2280.771746][T31754] netlink: 'syz.0.4096': attribute type 5 has an invalid length. [ 2280.788997][T31754] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4096'. [ 2280.820223][T15093] usb 3-1: Using ep0 maxpacket: 32 [ 2280.861958][T15093] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2280.928888][T15093] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2281.003289][T15093] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2281.266100][T15093] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2281.359260][T15093] usb 3-1: config 0 descriptor?? [ 2281.510123][T31758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4097'. [ 2281.708388][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2282.115017][T15093] ft260 0003:0403:6030.003A: unknown main item tag 0x7 [ 2282.215340][T15093] ft260 0003:0403:6030.003A: chip code: 0000 0000 [ 2282.409596][T31768] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 2282.436653][T31768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2282.453002][T15093] ft260 0003:0403:6030.003A: failed to retrieve system status [ 2282.461427][T31768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2282.466644][T15093] ft260 0003:0403:6030.003A: probe with driver ft260 failed with error -32 [ 2282.748402][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2282.934728][T31776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4100'. [ 2283.788217][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2284.130385][T15093] usb 3-1: USB disconnect, device number 94 [ 2284.828201][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2285.153111][T31781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4101'. [ 2285.868246][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2286.094946][T31791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4104'. [ 2286.188921][T31794] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 2286.908250][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2287.176390][T31798] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4104'. [ 2287.398215][T31799] veth0_to_bond: left allmulticast mode [ 2287.403854][T31799] veth0_to_bond: left promiscuous mode [ 2287.433332][T31799] bridge56: port 2(veth0_to_bond) entered disabled state [ 2287.664248][T31799] bridge58: port 1(veth0_to_bond) entered blocking state [ 2287.671681][T31799] bridge58: port 1(veth0_to_bond) entered disabled state [ 2287.679131][T31799] veth0_to_bond: entered allmulticast mode [ 2287.687003][T31799] veth0_to_bond: entered promiscuous mode [ 2287.897491][T31811] : renamed from bridge_slave_0 [ 2287.948312][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2288.663464][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2288.670320][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2288.988267][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2289.314277][T31822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4111'. [ 2289.332873][T31822] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 2289.405138][T31824] QAT: failed to copy from user. [ 2290.028347][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2290.598201][T24851] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 2290.813738][T24851] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 2290.844532][T24851] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2290.874121][T24851] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2290.900317][T24851] usb 3-1: Manufacturer: syz [ 2290.931065][T24851] usb 3-1: config 0 descriptor?? [ 2291.068380][T24851] rc_core: IR keymap rc-hauppauge not found [ 2291.078257][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2291.087020][T24851] Registered IR keymap rc-empty [ 2291.099534][T24851] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 2291.200546][T24851] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input58 [ 2291.222045][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 2291.265433][T31803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2291.279620][T31803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2291.671963][ T936] usb 3-1: USB disconnect, device number 95 [ 2292.118324][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2292.380713][T31849] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2293.079598][T15093] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 2293.122544][T15093] hid-generic 0000:0000:0000.003B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2293.148404][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2293.718377][ T936] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 2293.898429][ T936] usb 2-1: Using ep0 maxpacket: 32 [ 2293.924571][ T936] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 2294.188245][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2294.408720][ T936] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2294.480488][T31872] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4120'. [ 2294.499022][T31872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4120'. [ 2294.682695][ T936] usb 2-1: config 0 has no interface number 0 [ 2294.702825][ T936] usb 2-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2294.935793][ T936] usb 2-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 2294.954094][ T936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2295.228205][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2295.554352][ T936] usb 2-1: Product: syz [ 2295.571108][ T936] usb 2-1: Manufacturer: syz [ 2295.604258][ T936] usb 2-1: SerialNumber: syz [ 2295.653303][ T936] usb 2-1: config 0 descriptor?? [ 2295.716768][ T936] hub 2-1:0.89: bad descriptor, ignoring hub [ 2295.796982][ T936] hub 2-1:0.89: probe with driver hub failed with error -5 [ 2295.859381][ T936] option 2-1:0.89: GSM modem (1-port) converter detected [ 2296.268303][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2296.323119][T31882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4123'. [ 2296.805844][T31886] macsec0: entered allmulticast mode [ 2296.822217][T31886] syz_tun: entered allmulticast mode [ 2296.993421][T31889] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4123'. [ 2297.133676][T31886] syz_tun: left allmulticast mode [ 2297.318326][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2297.547279][T31895] binder: BINDER_SET_CONTEXT_MGR already set [ 2297.559278][T31895] binder: 31892:31895 ioctl 4018620d 80000040 returned -16 [ 2297.859395][T31895] syz.3.4124 (31895): drop_caches: 2 [ 2298.138610][T15093] usb 2-1: USB disconnect, device number 79 [ 2298.182844][T15093] option 2-1:0.89: device disconnected [ 2298.348329][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2298.469981][T31900] QAT: failed to copy from user. [ 2298.609942][T31890] bridge51: port 1(veth0_to_bond) entered blocking state [ 2298.679013][T31890] bridge51: port 1(veth0_to_bond) entered disabled state [ 2298.732349][T31890] veth0_to_bond: entered allmulticast mode [ 2298.799771][T31890] veth0_to_bond: entered promiscuous mode [ 2299.028392][T24851] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 2299.236577][T24851] usb 3-1: Using ep0 maxpacket: 16 [ 2299.340226][T24851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2299.388228][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2299.397195][T24851] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2299.409846][T24851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2299.448907][T24851] usb 3-1: Product: syz [ 2299.453144][T24851] usb 3-1: Manufacturer: syz [ 2299.457772][T24851] usb 3-1: SerialNumber: syz [ 2299.514421][T24851] usb 3-1: config 0 descriptor?? [ 2299.547926][T24851] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2299.588186][T24851] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 2299.609663][T31906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2299.653073][T31906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2299.904272][T31909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4127'. [ 2299.919370][T31909] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 2300.189244][T31906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4128'. [ 2300.258760][T24851] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 2300.428216][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2300.698472][ T936] usb 4-1: new low-speed USB device number 80 using dummy_hcd [ 2300.862911][ T936] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2300.892669][ T936] usb 4-1: config 0 has no interface number 0 [ 2300.913112][ T936] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2300.949432][ T936] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 2300.978860][ T936] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2300.998449][ T936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2301.028782][ T936] usb 4-1: config 0 descriptor?? [ 2301.069355][T31913] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 2301.086063][ T936] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 2301.478250][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2301.611094][T15093] usb 4-1: USB disconnect, device number 80 [ 2301.682696][T24851] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2301.705043][T24851] em28xx 3-1:0.0: board has no eeprom [ 2301.809974][T24851] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2301.817938][T24851] em28xx 3-1:0.0: dvb set to bulk mode. [ 2301.825819][ T936] em28xx 3-1:0.0: Binding DVB extension [ 2302.005488][T24851] usb 3-1: USB disconnect, device number 96 [ 2302.040043][T24851] em28xx 3-1:0.0: Disconnecting em28xx [ 2302.148989][T31930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4132'. [ 2302.199376][ T936] em28xx 3-1:0.0: Registering input extension [ 2302.257087][T24851] em28xx 3-1:0.0: Closing input extension [ 2302.268508][T25862] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 2302.508355][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2302.580646][T24851] em28xx 3-1:0.0: Freeing device [ 2302.645309][T25862] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2302.655159][T25862] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 2302.670982][T25862] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2302.751385][T25862] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 2302.813374][T25862] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 2302.953411][T25862] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2302.999426][T25862] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2303.036276][T25862] usb 2-1: Product: syz [ 2303.095791][T25862] usb 2-1: Manufacturer: syz [ 2303.219534][T25862] cdc_wdm 2-1:1.0: skipping garbage [ 2303.241527][T25862] cdc_wdm 2-1:1.0: skipping garbage [ 2303.278799][T25862] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 2303.288139][T25862] cdc_wdm 2-1:1.0: Unknown control protocol [ 2303.392641][T31943] openvswitch: netlink: Message has 1 unknown bytes. [ 2303.399592][T31943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2303.548382][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2303.868481][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2303.879560][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2304.588263][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2304.812639][T24851] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 2304.830978][T24851] hid-generic 0000:0000:0000.003C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2304.880093][T31950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4136'. [ 2305.112201][T31954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4136'. [ 2305.123209][T31954] bridge52: port 1(veth0_to_bond) entered blocking state [ 2305.130586][T31954] bridge52: port 1(veth0_to_bond) entered disabled state [ 2305.138382][T31954] veth0_to_bond: entered allmulticast mode [ 2305.146430][T31954] veth0_to_bond: entered promiscuous mode [ 2305.228515][T24851] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 2305.517461][T31956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4137'. [ 2305.526797][T24851] usb 3-1: Using ep0 maxpacket: 32 [ 2305.541077][T31956] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 2305.574233][T24851] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 2305.601112][T24851] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2305.626024][T24851] usb 3-1: config 0 has no interface number 0 [ 2305.638251][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2305.642887][T24851] usb 3-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2305.679793][T24851] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 2305.691625][T24851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2305.789303][T24851] usb 3-1: Product: syz [ 2305.793647][T24851] usb 3-1: Manufacturer: syz [ 2305.801979][T24851] usb 3-1: SerialNumber: syz [ 2306.219109][T24851] usb 3-1: config 0 descriptor?? [ 2306.335894][T24851] hub 3-1:0.89: bad descriptor, ignoring hub [ 2306.342846][T24851] hub 3-1:0.89: probe with driver hub failed with error -5 [ 2306.668236][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2306.780538][T24851] option 3-1:0.89: GSM modem (1-port) converter detected [ 2306.944728][T25862] usb 2-1: USB disconnect, device number 80 [ 2306.977996][T24851] usb 3-1: USB disconnect, device number 97 [ 2307.010158][T24851] option 3-1:0.89: device disconnected [ 2307.708431][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2307.724141][T31977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4141'. [ 2307.741565][T31977] netlink: 277 bytes leftover after parsing attributes in process `syz.2.4141'. [ 2307.751169][T31977] netlink: 277 bytes leftover after parsing attributes in process `syz.2.4141'. [ 2308.748372][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2309.187682][T31984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4142'. [ 2309.798259][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2310.828234][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2311.574508][T31998] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 2311.868244][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2312.908205][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2313.948213][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2314.061594][T32018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2314.070406][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2314.169159][T32012] can: request_module (can-proto-3) failed. [ 2314.247244][T32012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2314.868745][T32030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4149'. [ 2314.886593][T32030] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 2314.988215][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2315.345579][T32037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4150'. [ 2315.845393][T32037] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 2315.898711][T25862] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 2315.919118][T32035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2315.928919][T32035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2316.038296][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2316.219178][T25862] hid-generic 0000:0000:0000.003D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2317.068229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2318.108177][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2319.158224][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2320.188248][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2320.892815][T32068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4157'. [ 2320.926913][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 2320.926928][ T30] audit: type=1326 audit(1769900976.196:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32057 comm="syz.3.4157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2320.958817][ T30] audit: type=1326 audit(1769900976.206:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32057 comm="syz.3.4157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2320.969298][T32062] fuse: Unknown parameter '' [ 2320.984962][ T30] audit: type=1326 audit(1769900976.206:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32057 comm="syz.3.4157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2321.016596][T32070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4159'. [ 2321.112484][ T30] audit: type=1326 audit(1769900976.206:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32057 comm="syz.3.4157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2321.176997][ T30] audit: type=1326 audit(1769900976.206:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32057 comm="syz.3.4157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2321.206352][ T30] audit: type=1326 audit(1769900976.206:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32057 comm="syz.3.4157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2321.238202][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2321.358205][T32071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4156'. [ 2322.038151][ T30] audit: type=1326 audit(1769900976.206:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32057 comm="syz.3.4157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2322.268225][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2322.298740][ T30] audit: type=1326 audit(1769900976.206:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32057 comm="syz.3.4157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2322.528218][ T30] audit: type=1326 audit(1769900976.206:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32057 comm="syz.3.4157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2322.604688][ T30] audit: type=1326 audit(1769900976.206:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32057 comm="syz.3.4157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2323.308199][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2323.892228][T32084] QAT: failed to copy from user. [ 2324.348231][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2324.523342][T24851] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 2324.538731][T24851] hid-generic 0000:0000:0000.003E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2324.928185][T24851] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 2325.398255][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2325.809377][T24851] usb 4-1: Using ep0 maxpacket: 32 [ 2325.823720][T24851] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 2325.834205][T24851] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2325.865479][T24851] usb 4-1: config 0 has no interface number 0 [ 2325.903711][T24851] usb 4-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2326.143970][T24851] usb 4-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 2326.154340][T24851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2326.175288][T24851] usb 4-1: Product: syz [ 2326.189818][T24851] usb 4-1: Manufacturer: syz [ 2326.281218][T24851] usb 4-1: SerialNumber: syz [ 2326.419764][T24851] usb 4-1: config 0 descriptor?? [ 2326.438257][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2326.480003][T24851] usb 4-1: can't set config #0, error -71 [ 2326.554206][T24851] usb 4-1: USB disconnect, device number 81 [ 2326.734957][T32104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4165'. [ 2327.427708][T32112] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4167'. [ 2327.478179][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2328.508202][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2328.943692][T24851] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 2328.998290][T24851] hid-generic 0000:0000:0000.003F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2329.107071][T32120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2329.159278][T32120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2329.326443][T32126] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4170'. [ 2329.558254][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2330.588203][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2330.721392][T32138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4172'. [ 2330.757906][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 2330.757931][ T30] audit: type=1326 audit(1769900986.026:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32130 comm="syz.2.4172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 2331.628217][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2331.676526][ T30] audit: type=1326 audit(1769900986.026:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32130 comm="syz.2.4172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 2331.948409][ T30] audit: type=1326 audit(1769900986.026:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32130 comm="syz.2.4172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 2332.089063][T32145] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4174'. [ 2332.119141][T32145] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4174'. [ 2332.128258][ T30] audit: type=1326 audit(1769900986.026:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32130 comm="syz.2.4172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 2332.151693][ T30] audit: type=1326 audit(1769900986.026:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32130 comm="syz.2.4172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 2332.173912][ T30] audit: type=1326 audit(1769900986.026:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32130 comm="syz.2.4172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 2332.197060][ T30] audit: type=1326 audit(1769900986.026:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32130 comm="syz.2.4172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 2332.220786][ T30] audit: type=1326 audit(1769900986.026:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32130 comm="syz.2.4172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 2332.393646][T24851] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 2332.448830][T24851] hid-generic 0000:0000:0000.0040: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2332.557243][ T30] audit: type=1326 audit(1769900986.026:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32130 comm="syz.2.4172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 2332.661427][T32134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2332.670076][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2332.693736][T32134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2332.862846][ T30] audit: type=1326 audit(1769900986.026:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32130 comm="syz.2.4172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 2333.718235][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2334.350258][T32154] syz_tun: entered promiscuous mode [ 2334.356078][T32154] macsec0: entered allmulticast mode [ 2334.398207][T32154] syz_tun: entered allmulticast mode [ 2334.532205][T32154] syz_tun: left allmulticast mode [ 2334.538690][T32154] syz_tun: left promiscuous mode [ 2334.748476][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2334.768256][T25862] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 2334.948366][T25862] usb 1-1: Using ep0 maxpacket: 32 [ 2334.968579][T32164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4179'. [ 2335.090907][T32165] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4178'. [ 2335.143521][T25862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2335.198244][T25862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2335.255586][T25862] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2335.339208][T25862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2335.369506][T24851] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 2335.551518][T25862] usb 1-1: config 0 descriptor?? [ 2335.788218][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2335.808634][T24851] usb 4-1: Using ep0 maxpacket: 16 [ 2335.853196][T24851] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 2336.036670][T25862] ft260 0003:0403:6030.0041: unknown main item tag 0x7 [ 2336.109200][T24851] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 2336.228584][T25862] ft260 0003:0403:6030.0041: chip code: 0000 0000 [ 2336.472401][T25862] ft260 0003:0403:6030.0041: failed to retrieve system status [ 2336.536054][T25862] ft260 0003:0403:6030.0041: probe with driver ft260 failed with error -32 [ 2336.828206][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2337.193584][T32175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4181'. [ 2337.447801][T32175] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4181'. [ 2337.460637][T32175] veth0_to_bond: left allmulticast mode [ 2337.466396][T32175] veth0_to_bond: left promiscuous mode [ 2337.472814][T32175] bridge58: port 1(veth0_to_bond) entered disabled state [ 2337.566937][T32175] bridge59: port 1(veth0_to_bond) entered blocking state [ 2337.574581][T32175] bridge59: port 1(veth0_to_bond) entered disabled state [ 2337.583300][T32175] veth0_to_bond: entered allmulticast mode [ 2337.592864][T32175] veth0_to_bond: entered promiscuous mode [ 2337.878230][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2338.785883][T24851] usb 4-1: string descriptor 0 read error: -71 [ 2338.818292][T24851] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2338.896189][T24851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2338.918213][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2338.997481][T25862] usb 1-1: USB disconnect, device number 101 [ 2339.095263][T24851] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 2339.148716][T24851] usb 4-1: no configuration chosen from 1 choice [ 2339.219775][T24851] usb 4-1: USB disconnect, device number 82 [ 2339.263769][T32187] netlink: 196 bytes leftover after parsing attributes in process `syz.3.4182'. [ 2339.275758][T32187] netlink: 'syz.3.4182': attribute type 8 has an invalid length. [ 2339.958219][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2340.290368][T32197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4184'. [ 2340.964369][T32202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4186'. [ 2340.983536][T32202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4186'. [ 2340.988766][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2341.046470][T24851] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 2341.079783][T24851] hid-generic 0000:0000:0000.0042: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2341.478210][T25862] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 2341.668667][T25862] usb 3-1: Using ep0 maxpacket: 32 [ 2341.698619][T25862] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 2341.714562][T25862] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2341.806082][T25862] usb 3-1: config 0 has no interface number 0 [ 2341.839548][T25862] usb 3-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2341.899870][T25862] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 2341.915890][T25862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2341.939628][T25862] usb 3-1: Product: syz [ 2341.953943][T25862] usb 3-1: Manufacturer: syz [ 2341.966907][T25862] usb 3-1: SerialNumber: syz [ 2342.008474][T25862] usb 3-1: config 0 descriptor?? [ 2342.038278][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2342.048847][T25862] hub 3-1:0.89: bad descriptor, ignoring hub [ 2342.062935][T25862] hub 3-1:0.89: probe with driver hub failed with error -5 [ 2342.186443][T25862] option 3-1:0.89: GSM modem (1-port) converter detected [ 2343.078195][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2343.138438][T32212] ptrace attach of "./syz-executor exec"[5839] was attempted by "./syz-executor exec"[32212] [ 2344.108303][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2344.157682][T32208] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4187'. [ 2345.148334][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2345.523816][T32220] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 2345.530510][T32220] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2345.831001][T32220] vhci_hcd vhci_hcd.0: Device attached [ 2345.941702][T24851] usb 3-1: USB disconnect, device number 98 [ 2346.032763][T24851] option 3-1:0.89: device disconnected [ 2346.188226][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2346.723059][T32230] syz_tun: entered promiscuous mode [ 2346.738935][T32230] macsec0: entered allmulticast mode [ 2346.744331][T32230] syz_tun: entered allmulticast mode [ 2346.881970][T32230] syz_tun: left allmulticast mode [ 2346.908397][T32230] syz_tun: left promiscuous mode [ 2347.045605][T32221] vhci_hcd: connection closed [ 2347.054305][T21662] vhci_hcd vhci_hcd.0: stop threads [ 2347.067679][T21662] vhci_hcd vhci_hcd.0: release socket [ 2347.075028][T21662] vhci_hcd vhci_hcd.0: disconnect device [ 2347.228307][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2347.816950][T32243] trusted_key: encrypted_key: insufficient parameters specified [ 2347.931861][T32242] program syz.4.4193 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2348.268245][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2349.318320][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2349.541689][T32251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4196'. [ 2349.988264][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2349.995092][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2350.348245][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2350.489054][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 2350.489076][ T30] audit: type=1326 audit(1769901005.716:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32258 comm="syz.0.4197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 2350.638748][ T30] audit: type=1326 audit(1769901005.726:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32258 comm="syz.0.4197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 2350.664254][ T30] audit: type=1326 audit(1769901005.726:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32258 comm="syz.0.4197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 2350.698212][ T30] audit: type=1326 audit(1769901005.726:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32258 comm="syz.0.4197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 2350.728167][ T30] audit: type=1326 audit(1769901005.726:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32258 comm="syz.0.4197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 2351.069720][T32267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4198'. [ 2351.120628][T32267] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 2351.131645][ T30] audit: type=1326 audit(1769901005.726:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32258 comm="syz.0.4197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 2351.255143][ T30] audit: type=1326 audit(1769901005.726:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32258 comm="syz.0.4197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 2351.368218][ T30] audit: type=1326 audit(1769901005.726:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32258 comm="syz.0.4197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 2351.390566][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2351.584364][T32268] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4196'. [ 2351.608293][ T30] audit: type=1326 audit(1769901005.726:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32258 comm="syz.0.4197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 2351.688842][T32269] bridge65: port 1(veth0_to_bond) entered blocking state [ 2351.696060][T32269] bridge65: port 1(veth0_to_bond) entered disabled state [ 2351.725238][ T30] audit: type=1326 audit(1769901005.726:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32258 comm="syz.0.4197" exe="/root/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 2351.770969][T32269] veth0_to_bond: entered allmulticast mode [ 2351.790402][T32269] veth0_to_bond: entered promiscuous mode [ 2352.428315][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2352.689916][T32273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4200'. [ 2353.084958][T32284] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4200'. [ 2353.109871][T32284] veth0_to_bond: left allmulticast mode [ 2353.115553][T32284] veth0_to_bond: left promiscuous mode [ 2353.121611][T32284] bridge61: port 2(veth0_to_bond) entered disabled state [ 2353.226667][T32286] netlink: 'syz.4.4201': attribute type 2 has an invalid length. [ 2353.281098][T32284] bridge62: port 1(veth0_to_bond) entered blocking state [ 2353.298380][T32284] bridge62: port 1(veth0_to_bond) entered disabled state [ 2353.305924][T32284] veth0_to_bond: entered allmulticast mode [ 2353.315755][T32284] veth0_to_bond: entered promiscuous mode [ 2353.468333][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2353.637298][T32286] : entered promiscuous mode [ 2353.686836][T32277] netlink: 184 bytes leftover after parsing attributes in process `syz.0.4199'. [ 2354.508361][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2355.548195][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2355.850221][T32302] netlink: 'syz.0.4206': attribute type 10 has an invalid length. [ 2355.866306][T32302] syz_tun: entered allmulticast mode [ 2356.598242][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2356.820717][T32311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4207'. [ 2357.628202][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2358.668335][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2359.210816][T32322] netlink: 'syz.4.4209': attribute type 13 has an invalid length. [ 2359.508560][T32317] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 2359.515240][T32317] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2359.544585][T32317] vhci_hcd vhci_hcd.0: Device attached [ 2359.708194][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2360.401725][T32323] vhci_hcd: connection closed [ 2360.403353][T30160] vhci_hcd vhci_hcd.1: stop threads [ 2360.414485][T30160] vhci_hcd vhci_hcd.1: release socket [ 2360.424538][T30160] vhci_hcd vhci_hcd.1: disconnect device [ 2360.748170][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2361.044907][ T936] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 2361.493728][ T936] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 2361.752877][ T936] usb 3-1: config 0 has no interface number 0 [ 2361.788213][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2361.911071][ T936] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2361.928289][ T936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2361.960508][ T936] usb 3-1: Product: syz [ 2361.986441][ T936] usb 3-1: Manufacturer: syz [ 2361.995303][ T936] usb 3-1: SerialNumber: syz [ 2362.048894][ T936] usb 3-1: config 0 descriptor?? [ 2362.827676][T32351] fuse: Bad value for 'fd' [ 2362.832488][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2363.142312][T32358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4216'. [ 2363.371215][T32360] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4216'. [ 2363.868316][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2363.930777][T32360] veth0_to_bond: left allmulticast mode [ 2363.936544][T32360] veth0_to_bond: left promiscuous mode [ 2363.942942][T32360] bridge65: port 1(veth0_to_bond) entered disabled state [ 2363.995605][T32360] bridge66: port 1(veth0_to_bond) entered blocking state [ 2364.003849][T32360] bridge66: port 1(veth0_to_bond) entered disabled state [ 2364.039416][T32360] veth0_to_bond: entered allmulticast mode [ 2364.050937][T32360] veth0_to_bond: entered promiscuous mode [ 2364.908204][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2365.137170][ T936] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 2365.187505][ T936] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 2365.258856][ T936] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 2365.286182][ T936] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 2365.366061][ T936] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2365.448216][ T936] usb 3-1: USB disconnect, device number 99 [ 2365.513454][ T936] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2365.544992][ T936] keyspan 3-1:0.133: device disconnected [ 2365.772427][T32366] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 2365.958483][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2366.311714][T32372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4219'. [ 2366.988187][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2367.082996][ T936] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 2367.439160][ T936] usb 1-1: config 0 has an invalid descriptor of length 253, skipping remainder of the config [ 2367.490593][ T936] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2367.521585][T32389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4222'. [ 2367.853440][ T936] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 2367.881513][ T936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2367.910425][ T936] usb 1-1: Product: syz [ 2367.933185][ T936] usb 1-1: Manufacturer: syz [ 2367.980128][ T936] usb 1-1: SerialNumber: syz [ 2368.034097][ T936] usb 1-1: config 0 descriptor?? [ 2368.038784][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2368.212937][ T936] hub 1-1:0.0: bad descriptor, ignoring hub [ 2368.263191][ T936] hub 1-1:0.0: probe with driver hub failed with error -5 [ 2369.068339][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2370.108365][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2370.619554][T32409] netlink: 'syz.2.4226': attribute type 13 has an invalid length. [ 2370.703309][T32404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4225'. [ 2371.148335][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2371.268740][T21275] usb 1-1: USB disconnect, device number 102 [ 2371.847654][T32418] syz.0.4227 (32418): drop_caches: 2 [ 2372.188347][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2372.943221][T32426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4228'. [ 2373.058796][T21275] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2373.069767][T21275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2373.228392][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2373.935219][T32435] fuse: Bad value for 'fd' [ 2373.949551][T21275] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2373.960517][T21275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2374.278298][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2375.318221][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2375.882816][T32446] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4232'. [ 2376.348203][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2376.569689][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 2376.569709][ T30] audit: type=1326 audit(1769901031.896:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32457 comm="syz.3.4235" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2376.729737][ T30] audit: type=1326 audit(1769901031.926:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32457 comm="syz.3.4235" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2376.826902][ T30] audit: type=1326 audit(1769901031.926:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32457 comm="syz.3.4235" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2376.978382][ T30] audit: type=1326 audit(1769901031.926:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32457 comm="syz.3.4235" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2377.064080][ T30] audit: type=1326 audit(1769901031.926:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32457 comm="syz.3.4235" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2377.155826][T32466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4236'. [ 2377.226061][ T30] audit: type=1326 audit(1769901031.926:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32457 comm="syz.3.4235" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2377.388166][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2377.534685][ T30] audit: type=1326 audit(1769901031.926:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32457 comm="syz.3.4235" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2377.745213][ T30] audit: type=1326 audit(1769901031.926:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32457 comm="syz.3.4235" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2377.798462][ T30] audit: type=1326 audit(1769901031.926:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32457 comm="syz.3.4235" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2377.985445][T32475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4238'. [ 2378.017960][ T30] audit: type=1326 audit(1769901031.926:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32457 comm="syz.3.4235" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2378.428190][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2378.916926][T32480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4240'. [ 2379.267696][T32485] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4240'. [ 2379.310861][T32485] veth0_to_bond: left allmulticast mode [ 2379.316695][T32485] veth0_to_bond: left promiscuous mode [ 2379.364432][T32485] bridge66: port 1(veth0_to_bond) entered disabled state [ 2379.468312][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2380.301752][T32485] bridge67: port 1(veth0_to_bond) entered blocking state [ 2380.312737][T32485] bridge67: port 1(veth0_to_bond) entered disabled state [ 2380.325073][T32485] veth0_to_bond: entered allmulticast mode [ 2380.333751][T32485] veth0_to_bond: entered promiscuous mode [ 2380.508221][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2381.001570][T32497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4242'. [ 2381.558180][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2382.588184][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2383.177109][T32508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4244'. [ 2383.449017][T32508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4244'. [ 2383.638221][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2383.657254][T32521] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4245'. [ 2383.884064][T32523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2384.668226][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2384.812764][T30160] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 2384.840990][T32539] netlink: 'syz.2.4247': attribute type 2 has an invalid length. [ 2384.999145][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 2384.999161][ T30] audit: type=1326 audit(1769901040.326:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32515 comm="syz.2.4247" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff3539 code=0x0 [ 2385.646236][T32539] : entered promiscuous mode [ 2385.708363][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2386.519189][T32546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4249'. [ 2386.758389][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2386.776317][T32549] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4249'. [ 2386.798637][T32549] veth0_to_bond: left allmulticast mode [ 2386.804463][T32549] veth0_to_bond: left promiscuous mode [ 2386.811985][T32549] bridge51: port 1(veth0_to_bond) entered disabled state [ 2386.878964][T32549] bridge53: port 1(veth0_to_bond) entered blocking state [ 2386.886898][T32549] bridge53: port 1(veth0_to_bond) entered disabled state [ 2386.895021][T32549] veth0_to_bond: entered allmulticast mode [ 2386.906334][T32549] veth0_to_bond: entered promiscuous mode [ 2387.381105][T32557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2387.788332][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2388.099911][T32564] netlink: 'syz.0.4252': attribute type 10 has an invalid length. [ 2388.165427][T32561] netlink: 'syz.0.4252': attribute type 10 has an invalid length. [ 2388.190263][T32561] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4252'. [ 2388.590551][T32566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4253'. [ 2388.828243][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2389.868260][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2390.707673][T32579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4256'. [ 2390.908470][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2391.464123][T32590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4258'. [ 2391.571876][T32593] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4256'. [ 2391.583079][T32593] veth0_to_bond: left allmulticast mode [ 2391.593095][T32593] veth0_to_bond: left promiscuous mode [ 2391.600103][T32593] bridge67: port 1(veth0_to_bond) entered disabled state [ 2391.619974][T32594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4259'. [ 2391.687023][T32593] bridge68: port 1(veth0_to_bond) entered blocking state [ 2391.694743][T32593] bridge68: port 1(veth0_to_bond) entered disabled state [ 2391.707791][T32593] veth0_to_bond: entered allmulticast mode [ 2391.721402][T32593] veth0_to_bond: entered promiscuous mode [ 2391.851572][T32594] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4259'. [ 2391.919605][T32600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4260'. [ 2391.948168][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2392.002321][T32594] veth0_to_bond: left allmulticast mode [ 2392.007951][T32594] veth0_to_bond: left promiscuous mode [ 2392.107793][T32602] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4260'. [ 2392.495578][T32594] bridge59: port 1(veth0_to_bond) entered disabled state [ 2392.766196][T32594] bridge61: port 1(veth0_to_bond) entered blocking state [ 2392.896251][T32594] bridge61: port 1(veth0_to_bond) entered disabled state [ 2392.905000][T32594] veth0_to_bond: entered allmulticast mode [ 2392.998452][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2393.017395][T32594] veth0_to_bond: entered promiscuous mode [ 2394.028298][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2394.543425][T32613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2394.746480][T21276] usb 4-1: new low-speed USB device number 83 using dummy_hcd [ 2394.849594][T21664] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2394.875123][T21664] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2394.909058][T21664] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2394.941542][T21664] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2395.020347][T21276] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2395.033106][T32619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4264'. [ 2395.087432][T21276] usb 4-1: config 0 has no interface number 0 [ 2395.098174][T32543] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 2395.120615][T21276] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2395.160286][T21276] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 2395.188708][T21276] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2395.248515][T21276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2395.294782][T21276] usb 4-1: config 0 descriptor?? [ 2395.357473][T32543] usb 3-1: Using ep0 maxpacket: 8 [ 2395.364625][T32611] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2395.381030][T21276] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 2395.413664][T32543] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 2395.468496][T32543] usb 3-1: config 179 has no interface number 0 [ 2395.513056][T32543] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2395.555141][T32543] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2395.585460][T32543] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2395.623803][T15093] usb 4-1: USB disconnect, device number 83 [ 2395.627203][T32543] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2395.709433][T32543] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2396.082877][T32543] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2396.105314][T32543] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2396.274437][T32617] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2399.775993][T21160] usb 3-1: USB disconnect, device number 100 [ 2399.776011][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2399.782101][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2400.332136][T32653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4270'. [ 2400.342024][T32655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4268'. [ 2400.468875][T32656] netlink: 'syz.2.4269': attribute type 10 has an invalid length. [ 2400.478816][T32656] netlink: 'syz.2.4269': attribute type 10 has an invalid length. [ 2400.487010][T32656] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4269'. [ 2402.790907][T32668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4273'. [ 2403.373435][T32671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4276'. [ 2404.087002][T32686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4278'. [ 2404.439429][T32674] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4276'. [ 2404.519931][T32674] veth0_to_bond: left allmulticast mode [ 2404.525575][T32674] veth0_to_bond: left promiscuous mode [ 2404.568454][T32674] bridge68: port 1(veth0_to_bond) entered disabled state [ 2404.681040][T32674] bridge69: port 1(veth0_to_bond) entered blocking state [ 2404.700739][T32674] bridge69: port 1(veth0_to_bond) entered disabled state [ 2404.731506][T32674] veth0_to_bond: entered allmulticast mode [ 2405.352388][T32674] veth0_to_bond: entered promiscuous mode [ 2409.491587][T32543] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 2409.522497][T32543] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2410.031063][T32543] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 2410.095362][T32733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4288'. [ 2410.108580][T32731] fuse: Bad value for 'fd' [ 2410.278124][T32543] usb 3-1: Using ep0 maxpacket: 32 [ 2410.286309][T32543] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 2410.296665][T32543] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2410.318351][T32543] usb 3-1: config 0 has no interface number 0 [ 2410.326061][T32543] usb 3-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2410.422889][T32543] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 2410.433308][T32543] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2410.449361][T32543] usb 3-1: Product: syz [ 2410.461358][T32543] usb 3-1: Manufacturer: syz [ 2410.483494][T32543] usb 3-1: SerialNumber: syz [ 2410.517429][T32543] usb 3-1: config 0 descriptor?? [ 2410.541095][T32543] hub 3-1:0.89: bad descriptor, ignoring hub [ 2410.565121][T32543] hub 3-1:0.89: probe with driver hub failed with error -5 [ 2410.719595][T32543] option 3-1:0.89: GSM modem (1-port) converter detected [ 2411.394814][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2411.401434][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2413.313023][T21160] usb 3-1: USB disconnect, device number 101 [ 2413.321668][T21160] option 3-1:0.89: device disconnected [ 2413.613662][T32741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4290'. [ 2414.428868][T32752] tipc: Resetting bearer [ 2414.500684][T21160] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 2414.522079][T32750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4291'. [ 2414.724940][T21160] usb 2-1: Using ep0 maxpacket: 8 [ 2414.743595][T21160] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 2414.756401][T21160] usb 2-1: config 179 has no interface number 0 [ 2414.779214][T21160] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2414.865008][T21160] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2415.198214][T21160] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2415.333028][T21160] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2415.384059][T21160] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2415.468587][T21160] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2415.498364][T21160] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2415.740062][T32753] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2415.841066][T32761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4294'. [ 2416.435782][T32763] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4294'. [ 2416.463130][T32763] veth0_to_bond: left allmulticast mode [ 2416.469108][T32763] veth0_to_bond: left promiscuous mode [ 2416.475784][T32763] bridge69: port 1(veth0_to_bond) entered disabled state [ 2416.562071][T32763] bridge70: port 1(veth0_to_bond) entered blocking state [ 2416.571094][T32763] bridge70: port 1(veth0_to_bond) entered disabled state [ 2416.579663][T32763] veth0_to_bond: entered allmulticast mode [ 2416.595659][T32763] veth0_to_bond: entered promiscuous mode [ 2418.098364][ T311] support for the xor transformation has been removed. [ 2419.220127][T32543] usb 2-1: USB disconnect, device number 81 [ 2419.220152][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2419.234575][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2419.808735][ T304] fuse: Unknown parameter 'g:~9Y3_id' [ 2420.525727][ T327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4301'. [ 2422.775899][ T339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4303'. [ 2422.878718][ T340] lo: Caught tx_queue_len zero misconfig [ 2422.920883][ T344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4305'. [ 2423.207636][ T349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4306'. [ 2423.249156][T32543] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 2423.418483][T32543] usb 3-1: Using ep0 maxpacket: 32 [ 2423.427264][T32543] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2423.439965][T32543] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2423.451666][T32543] usb 3-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2423.530913][ T354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4307'. [ 2423.552397][T32543] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2423.875633][T32543] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 2423.946968][T32543] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2423.989749][T32543] usb 3-1: config 0 descriptor?? [ 2424.444484][ T340] input: syz1 as /devices/virtual/input/input61 [ 2424.777733][T32543] usbhid 3-1:0.0: can't add hid device: -71 [ 2424.790519][T32543] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2424.839698][T32543] usb 3-1: USB disconnect, device number 102 [ 2426.749378][ T368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4311'. [ 2426.834899][ T371] usb usb8: usbfs: process 371 (syz.0.4312) did not claim interface 0 before use [ 2426.849257][ T371] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2426.946469][ T374] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4311'. [ 2426.980926][ T374] veth0_to_bond: left allmulticast mode [ 2426.987767][ T374] veth0_to_bond: left promiscuous mode [ 2427.028609][ T374] bridge53: port 1(veth0_to_bond) entered disabled state [ 2427.111212][ T366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4309'. [ 2427.486398][ T374] bridge55: port 1(veth0_to_bond) entered blocking state [ 2427.496119][ T374] bridge55: port 1(veth0_to_bond) entered disabled state [ 2427.506594][ T374] veth0_to_bond: entered allmulticast mode [ 2427.522386][ T374] veth0_to_bond: entered promiscuous mode [ 2430.910869][ T415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4318'. [ 2432.178881][ T430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4321'. [ 2432.238674][ T433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4322'. [ 2432.983773][ T30] audit: type=1326 audit(1769901088.246:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=439 comm="syz.3.4324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2433.056980][ T30] audit: type=1326 audit(1769901088.246:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=439 comm="syz.3.4324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2433.197844][ T30] audit: type=1326 audit(1769901088.246:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=439 comm="syz.3.4324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2433.665939][ T30] audit: type=1326 audit(1769901088.246:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=439 comm="syz.3.4324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2433.869025][ T30] audit: type=1326 audit(1769901088.246:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=439 comm="syz.3.4324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2433.891959][ T30] audit: type=1326 audit(1769901088.246:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=439 comm="syz.3.4324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2433.914297][ T30] audit: type=1326 audit(1769901088.246:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=439 comm="syz.3.4324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2434.138257][ T30] audit: type=1326 audit(1769901088.246:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=439 comm="syz.3.4324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2434.208177][ T30] audit: type=1326 audit(1769901088.246:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=439 comm="syz.3.4324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2434.258129][ T30] audit: type=1326 audit(1769901088.246:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=439 comm="syz.3.4324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed539 code=0x7ffc0000 [ 2435.454399][T21160] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 2435.774491][T21160] usb 3-1: Using ep0 maxpacket: 8 [ 2435.910448][T21160] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 2435.928340][T21160] usb 3-1: config 179 has no interface number 0 [ 2435.958472][T21160] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2436.120109][T21160] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2436.181618][T21160] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2436.514086][T21160] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2436.579310][T21160] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2436.594807][T21160] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2436.699797][T21160] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2436.812563][ T454] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2436.904070][ T471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4331'. [ 2437.310067][ T473] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4331'. [ 2437.337239][ T473] veth0_to_bond: left allmulticast mode [ 2437.349040][ T473] veth0_to_bond: left promiscuous mode [ 2437.407427][ T473] bridge70: port 1(veth0_to_bond) entered disabled state [ 2437.466958][ T473] bridge71: port 1(veth0_to_bond) entered blocking state [ 2437.508230][ T473] bridge71: port 1(veth0_to_bond) entered disabled state [ 2437.587459][ T473] veth0_to_bond: entered allmulticast mode [ 2437.702225][ T473] veth0_to_bond: entered promiscuous mode [ 2439.446554][ T489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4334'. [ 2439.490924][ T489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4334'. [ 2439.698523][ T489] openvswitch: netlink: Flow actions attr not present in new flow. [ 2439.722217][ T496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4337'. [ 2439.766585][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2439.766583][T32543] usb 3-1: USB disconnect, device number 103 [ 2439.775358][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2439.958259][ T490] fuse: Unknown parameter 'g:~9Y3_id' [ 2440.830111][ T501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4338'. [ 2441.534541][ T509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4340'. [ 2443.334788][ T524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4343'. [ 2443.528234][T21160] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 2443.834751][T21160] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 2443.843812][T21160] usb 4-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config [ 2443.874223][T21160] usb 4-1: config 0 has no interface number 0 [ 2443.914846][T21160] usb 4-1: config 0 interface 113 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2443.965010][T21160] usb 4-1: config 0 interface 113 has no altsetting 0 [ 2444.051106][T21160] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 2444.135549][T21160] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2444.168654][T21160] usb 4-1: Product: syz [ 2444.173030][T21160] usb 4-1: Manufacturer: syz [ 2444.177692][T21160] usb 4-1: SerialNumber: syz [ 2444.524333][T21160] usb 4-1: config 0 descriptor?? [ 2444.534021][T21160] pn533_usb 4-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 2444.728480][ T534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4345'. [ 2445.756881][ T536] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4345'. [ 2445.835032][ T536] veth0_to_bond: left allmulticast mode [ 2445.841004][ T536] veth0_to_bond: left promiscuous mode [ 2445.846763][ T536] bridge61: port 1(veth0_to_bond) entered disabled state [ 2445.887610][ T536] bridge62: port 1(veth0_to_bond) entered blocking state [ 2445.901185][ T536] bridge62: port 1(veth0_to_bond) entered disabled state [ 2445.908689][ T536] veth0_to_bond: entered allmulticast mode [ 2446.069116][ T536] veth0_to_bond: entered promiscuous mode [ 2447.015228][ T548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4348'. [ 2447.191838][T21160] usb 4-1: USB disconnect, device number 84 [ 2447.209748][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 2447.209824][ T30] audit: type=1326 audit(1769901102.426:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=540 comm="syz.4.4347" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 2447.275620][ T551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2447.298317][ T551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2447.339653][ T30] audit: type=1326 audit(1769901102.426:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=540 comm="syz.4.4347" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 2447.397555][ T30] audit: type=1326 audit(1769901102.426:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=540 comm="syz.4.4347" exe="/root/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 2447.503797][ T30] audit: type=1326 audit(1769901102.426:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=540 comm="syz.4.4347" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 2447.568301][ T30] audit: type=1326 audit(1769901102.426:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=540 comm="syz.4.4347" exe="/root/syz-executor" sig=0 arch=40000003 syscall=40 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 2447.884559][ T30] audit: type=1326 audit(1769901102.426:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=540 comm="syz.4.4347" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 2447.909994][ T30] audit: type=1326 audit(1769901102.426:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=540 comm="syz.4.4347" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 2447.948173][ T30] audit: type=1326 audit(1769901102.436:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=540 comm="syz.4.4347" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 2448.041402][ T30] audit: type=1326 audit(1769901102.436:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=540 comm="syz.4.4347" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 2448.338158][ T30] audit: type=1326 audit(1769901102.436:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=540 comm="syz.4.4347" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 2448.904247][ T565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4351'. [ 2450.279661][ T572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4352'. [ 2450.303786][ T572] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 2450.585801][ T575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4353'. [ 2451.708413][T32543] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 2451.865595][ T585] kAFS: unable to lookup cell '({^@' [ 2451.930321][T32543] usb 3-1: Using ep0 maxpacket: 32 [ 2451.969301][T32543] usb 3-1: config 0 has an invalid interface number: 136 but max is 0 [ 2452.173907][ T591] fuse: Unknown parameter 'g:~9Y3_id' [ 2452.279382][T32543] usb 3-1: config 0 has no interface number 0 [ 2452.285567][T32543] usb 3-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 2452.342863][T32543] usb 3-1: config 0 interface 136 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2452.375872][T32543] usb 3-1: config 0 interface 136 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 2452.408605][T32543] usb 3-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 2452.481050][T32543] usb 3-1: config 0 interface 136 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2452.511050][T32543] usb 3-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 2452.559184][T32543] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2452.600423][T32543] usb 3-1: config 0 descriptor?? [ 2452.701187][T32543] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2453.175105][ T594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4357'. [ 2453.376157][ T597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4357'. [ 2453.506986][ T594] veth0_to_bond: left allmulticast mode [ 2453.517486][ T594] veth0_to_bond: left promiscuous mode [ 2453.544749][ T594] bridge52: port 1(veth0_to_bond) entered disabled state [ 2453.583633][ T594] bridge53: port 1(veth0_to_bond) entered blocking state [ 2453.601776][ T594] bridge53: port 1(veth0_to_bond) entered disabled state [ 2453.693906][ T594] veth0_to_bond: entered allmulticast mode [ 2453.806416][ T594] veth0_to_bond: entered promiscuous mode [ 2454.028964][T21276] usb 3-1: USB disconnect, device number 104 [ 2454.378559][ T612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4359'. [ 2454.564216][ T611] bridge63: entered promiscuous mode [ 2455.145171][ T618] netlink: 'syz.3.4361': attribute type 1 has an invalid length. [ 2455.298850][ T621] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4361'. [ 2455.432871][ T618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2455.700001][ T621] bond0: entered promiscuous mode [ 2455.739525][ T621] bond0: entered allmulticast mode [ 2456.100323][T21276] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 2456.129444][T21276] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2456.708945][T32543] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 2456.718426][T21276] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 2456.908067][T32543] usb 4-1: Using ep0 maxpacket: 32 [ 2456.913412][T21276] usb 3-1: Using ep0 maxpacket: 32 [ 2457.081129][ T636] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 2457.282173][T32543] usb 4-1: config 0 has an invalid interface number: 79 but max is 0 [ 2457.309143][T21276] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 2457.317388][T21276] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2457.338890][T32543] usb 4-1: config 0 has no interface number 0 [ 2457.418269][T21276] usb 3-1: config 0 has no interface number 0 [ 2457.430195][T32543] usb 4-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 2457.446804][T21276] usb 3-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2457.466335][T32543] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2457.835140][T32543] usb 4-1: Product: syz [ 2457.844445][T32543] usb 4-1: Manufacturer: syz [ 2457.869169][T21276] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 2457.905580][T32543] usb 4-1: SerialNumber: syz [ 2457.971316][T21276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2458.130070][T32543] usb 4-1: config 0 descriptor?? [ 2458.147405][T21276] usb 3-1: Product: syz [ 2458.194204][T21276] usb 3-1: Manufacturer: syz [ 2458.211967][T21276] usb 3-1: SerialNumber: syz [ 2458.279840][T21276] usb 3-1: config 0 descriptor?? [ 2458.310929][T21276] hub 3-1:0.89: bad descriptor, ignoring hub [ 2458.348990][T21276] hub 3-1:0.89: probe with driver hub failed with error -5 [ 2458.357811][T21276] option 3-1:0.89: GSM modem (1-port) converter detected [ 2458.765045][T21276] usb 3-1: USB disconnect, device number 105 [ 2458.919888][T21276] option 3-1:0.89: device disconnected [ 2459.141863][ T647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4366'. [ 2459.940916][ T651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4367'. [ 2459.966309][ T651] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 2460.805145][T32543] cp210x 4-1:0.79: cp210x converter detected [ 2460.828227][T32543] cp210x 4-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 2460.877747][T32543] cp210x 4-1:0.79: querying part number failed [ 2460.909424][T32543] usb 4-1: cp210x converter now attached to ttyUSB0 [ 2460.956813][T32543] usb 4-1: USB disconnect, device number 85 [ 2461.007653][T32543] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2461.109951][ T655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4368'. [ 2461.143932][ T655] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 2461.152860][T32543] cp210x 4-1:0.79: device disconnected [ 2461.264130][ T657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4369'. [ 2461.699146][ T660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4369'. [ 2461.715774][ T660] veth0_to_bond: left allmulticast mode [ 2461.722088][ T660] veth0_to_bond: left promiscuous mode [ 2461.783659][ T660] bridge71: port 1(veth0_to_bond) entered disabled state [ 2461.843108][ T660] bridge72: port 1(veth0_to_bond) entered blocking state [ 2461.858835][ T660] bridge72: port 1(veth0_to_bond) entered disabled state [ 2461.872673][ T660] veth0_to_bond: entered allmulticast mode [ 2461.966930][ T660] veth0_to_bond: entered promiscuous mode [ 2463.258472][ T672] fuse: Unknown parameter 'g:~9Y3_id' [ 2464.878329][ T690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4375'. [ 2465.410343][T32543] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 2465.447236][T32543] hid-generic 0000:0000:0000.0045: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2465.874281][T21276] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 2465.887360][T21276] hid-generic 0000:0000:0000.0046: hidraw1: HID v0.00 Device [syz1] on syz0 [ 2465.909073][T32543] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 2465.926734][ T700] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 2466.069022][T32543] usb 4-1: Using ep0 maxpacket: 32 [ 2466.084711][T32543] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 2466.108997][T32543] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2466.133705][T32543] usb 4-1: config 0 has no interface number 0 [ 2466.149779][T32543] usb 4-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2466.369123][T32543] usb 4-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 2466.389309][T32543] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2466.400074][T21276] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 2466.634495][T32543] usb 4-1: Product: syz [ 2466.652498][T32543] usb 4-1: Manufacturer: syz [ 2466.662606][T32543] usb 4-1: SerialNumber: syz [ 2466.684171][T32543] usb 4-1: config 0 descriptor?? [ 2466.695414][T32543] hub 4-1:0.89: bad descriptor, ignoring hub [ 2466.704618][T32543] hub 4-1:0.89: probe with driver hub failed with error -5 [ 2466.712281][T21276] usb 1-1: Using ep0 maxpacket: 32 [ 2466.727489][T21276] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 2466.736113][T21276] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2466.747208][T32543] option 4-1:0.89: GSM modem (1-port) converter detected [ 2466.791694][T21276] usb 1-1: config 0 has no interface number 0 [ 2466.804177][T21276] usb 1-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2466.918929][T21276] usb 1-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 2466.928701][T21276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2466.936738][T21276] usb 1-1: Product: syz [ 2467.243657][T21276] usb 1-1: Manufacturer: syz [ 2467.313299][T21276] usb 1-1: SerialNumber: syz [ 2467.365505][T21276] usb 1-1: config 0 descriptor?? [ 2467.399393][T21276] hub 1-1:0.89: bad descriptor, ignoring hub [ 2467.424243][T21276] hub 1-1:0.89: probe with driver hub failed with error -5 [ 2467.438494][T15093] usb 4-1: USB disconnect, device number 86 [ 2467.446276][T15093] option 4-1:0.89: device disconnected [ 2467.481991][T21276] option 1-1:0.89: GSM modem (1-port) converter detected [ 2468.808170][T31719] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 2468.936529][ T718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4382'. [ 2468.985973][T31719] usb 3-1: Using ep0 maxpacket: 32 [ 2469.001292][T31719] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 2469.020250][T31719] usb 3-1: config 0 has no interface number 0 [ 2469.056241][ T719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4382'. [ 2469.071480][ T719] veth0_to_bond: left allmulticast mode [ 2469.121849][ T719] veth0_to_bond: left promiscuous mode [ 2469.128876][ T719] bridge72: port 1(veth0_to_bond) entered disabled state [ 2469.178123][T31719] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2469.239000][T31719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2469.263142][ T719] bridge73: port 1(veth0_to_bond) entered blocking state [ 2469.291522][T31719] usb 3-1: Product: syz [ 2469.315036][T31719] usb 3-1: Manufacturer: syz [ 2469.345079][T31719] usb 3-1: SerialNumber: syz [ 2469.350203][ T719] bridge73: port 1(veth0_to_bond) entered disabled state [ 2469.380432][T31719] usb 3-1: config 0 descriptor?? [ 2469.412761][T31719] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2469.422340][ T719] veth0_to_bond: entered allmulticast mode [ 2469.534169][ T719] veth0_to_bond: entered promiscuous mode [ 2469.598443][T31719] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 2469.611368][ T724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4384'. [ 2469.628596][ T724] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 2469.752716][T31719] quatech2 3-1:0.51: probe with driver quatech2 failed with error -8 [ 2470.290752][ T728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4383'. [ 2470.311039][ T728] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 2470.839262][T31719] usb 1-1: USB disconnect, device number 103 [ 2470.869420][T31719] option 1-1:0.89: device disconnected [ 2470.987335][ T733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4385'. [ 2471.697501][T31719] usb 3-1: USB disconnect, device number 106 [ 2472.831339][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2472.837735][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2472.984151][ T751] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2473.081457][ T751] block device autoloading is deprecated and will be removed. [ 2473.110420][ T752] Lens A: ================= START STATUS ================= [ 2473.118393][ T752] Lens A: Focus, Absolute: 0 [ 2473.123384][ T752] Lens A: ================== END STATUS ================== [ 2475.238127][T31719] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 2475.418077][T31719] usb 3-1: Using ep0 maxpacket: 32 [ 2475.445504][T31719] usb 3-1: config 0 has an invalid interface number: 138 but max is 0 [ 2475.476246][T31719] usb 3-1: config 0 has no interface number 0 [ 2475.555865][T31719] usb 3-1: config 0 interface 138 has no altsetting 0 [ 2475.652626][T31719] usb 3-1: New USB device found, idVendor=0e41, idProduct=4642, bcdDevice=d1.a3 [ 2475.661868][T31719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2475.690723][T31719] usb 3-1: Product: syz [ 2475.718861][T31719] usb 3-1: Manufacturer: syz [ 2475.762954][T31719] usb 3-1: SerialNumber: syz [ 2475.845529][T31719] usb 3-1: config 0 descriptor?? [ 2475.997154][ T769] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2476.163282][ T766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2476.538310][ T766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2477.232897][ T783] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2477.684986][ T783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4396'. [ 2479.728498][ T808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4399'. [ 2480.168844][ T807] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 2480.800055][T31719] snd_usb_pod 3-1:0.138: Line 6 BassPODxt Live found [ 2480.847740][T31719] snd_usb_pod 3-1:0.138: set_interface failed [ 2480.866003][T31719] snd_usb_pod 3-1:0.138: Line 6 BassPODxt Live now disconnected [ 2480.910596][T31719] snd_usb_pod 3-1:0.138: probe with driver snd_usb_pod failed with error -71 [ 2480.965503][T31719] usb 3-1: USB disconnect, device number 107 [ 2481.770613][ T823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4401'. [ 2481.890437][ T821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4402'. [ 2482.447000][T31719] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 2482.721077][ T821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2482.788844][ T821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2482.829198][T31719] usb 2-1: Using ep0 maxpacket: 32 [ 2482.910207][ T833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4404'. [ 2482.934078][ T833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4404'. [ 2482.945913][ T833] openvswitch: netlink: Flow actions attr not present in new flow. [ 2483.077867][T31719] usb 2-1: config 0 has an invalid interface number: 136 but max is 0 [ 2483.088357][ T835] IPv6: Can't replace route, no match found [ 2483.104865][T31719] usb 2-1: config 0 has no interface number 0 [ 2483.188371][T31719] usb 2-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 2483.201040][T31719] usb 2-1: config 0 interface 136 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2483.211543][T31719] usb 2-1: config 0 interface 136 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 2483.221674][T31719] usb 2-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 2483.238101][T31719] usb 2-1: config 0 interface 136 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2483.248170][T31719] usb 2-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 2483.257291][T31719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2483.278740][T31719] usb 2-1: config 0 descriptor?? [ 2483.585568][T31719] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2484.157159][T32711] udevd[32711]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.136/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2484.646290][T21276] usb 2-1: USB disconnect, device number 82 [ 2486.085202][ T847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2486.096317][ T847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2486.591432][ T856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4408'. [ 2486.606074][ T856] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 2486.809005][ T853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4410'. [ 2486.930593][ T853] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 2487.277433][T21160] usb 1-1: new low-speed USB device number 104 using dummy_hcd [ 2487.484391][T21160] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 2487.492698][T21160] usb 1-1: config 0 has no interface number 0 [ 2487.499563][T21160] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2487.568514][T21160] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 2487.622484][T21160] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2487.666217][T21160] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2487.778783][T21160] usb 1-1: config 0 descriptor?? [ 2487.788159][ T861] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2487.812527][T21160] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 2488.048275][T21160] usb 1-1: USB disconnect, device number 104 [ 2488.808150][T21160] usb 4-1: new low-speed USB device number 87 using dummy_hcd [ 2488.990238][T21160] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2489.019306][T21160] usb 4-1: config 0 has no interface number 0 [ 2489.043954][T21160] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2489.088167][T21160] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 2489.120902][T21160] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2489.148090][T21160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2489.184382][T21160] usb 4-1: config 0 descriptor?? [ 2489.221143][ T872] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2489.266631][T21160] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 2489.286384][ T876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4414'. [ 2489.418831][ T881] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 2489.429388][ T878] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4415'. [ 2489.465431][T21276] usb 4-1: USB disconnect, device number 87 [ 2489.728651][ T885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4416'. [ 2490.975047][T21276] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 2491.125092][ T899] fuse: Unknown parameter 'g:~9Y3_id' [ 2491.387334][T21276] usb 2-1: Using ep0 maxpacket: 8 [ 2491.397241][T21276] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2491.417332][T21276] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2491.440119][T21276] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2491.506300][T21276] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2491.565344][T21276] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2491.600581][T21276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2491.880706][T21276] usb 2-1: GET_CAPABILITIES returned 0 [ 2491.896585][T21276] usbtmc 2-1:16.0: can't read capabilities [ 2491.963401][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 2491.963420][ T30] audit: type=1326 audit(1769901147.276:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=901 comm="syz.0.4421" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 2492.155640][ T30] audit: type=1326 audit(1769901147.316:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=901 comm="syz.0.4421" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 2492.167152][T21276] usb 2-1: USB disconnect, device number 83 [ 2492.229059][ T30] audit: type=1326 audit(1769901147.346:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=901 comm="syz.0.4421" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 2492.304084][ T30] audit: type=1326 audit(1769901147.346:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=901 comm="syz.0.4421" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 2492.438959][ T30] audit: type=1326 audit(1769901147.346:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=901 comm="syz.0.4421" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 2492.534467][ T30] audit: type=1326 audit(1769901147.346:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=901 comm="syz.0.4421" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 2492.649716][ T30] audit: type=1326 audit(1769901147.346:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=901 comm="syz.0.4421" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 2492.776768][ T30] audit: type=1326 audit(1769901147.346:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=901 comm="syz.0.4421" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 2492.847374][ T30] audit: type=1326 audit(1769901147.346:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=901 comm="syz.0.4421" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 2493.647500][ T920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4422'. [ 2493.665496][ T920] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 2493.749005][ T30] audit: type=1326 audit(1769901147.346:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=901 comm="syz.0.4421" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 2494.638108][T21160] usb 2-1: new low-speed USB device number 84 using dummy_hcd [ 2494.817012][T21160] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2494.829143][T21160] usb 2-1: config 0 has no interface number 0 [ 2494.878180][T21160] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2494.930705][T21160] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 2495.228411][T21160] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2495.237572][T21160] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2495.309984][T21160] usb 2-1: config 0 descriptor?? [ 2495.377450][ T925] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2495.470322][T21160] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 2495.628567][T21276] usb 2-1: USB disconnect, device number 84 [ 2496.128877][T21276] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 2496.382646][ T953] fuse: Unknown parameter 'g:~9Y3_id' [ 2496.685699][T21276] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2496.719690][T21276] usb 4-1: not running at top speed; connect to a high speed hub [ 2496.851414][T21276] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2496.913610][T21276] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2496.984284][T21276] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2497.017832][T21276] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2497.052545][T21276] usb 4-1: Product: syz [ 2497.134932][T21276] usb 4-1: Manufacturer: syz [ 2497.180395][T21276] usb 4-1: SerialNumber: syz [ 2497.908930][T32543] usb 3-1: new low-speed USB device number 108 using dummy_hcd [ 2497.980229][ T961] fuse: Unknown parameter 'g:~9Y3_id' [ 2498.107436][T32543] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2498.136937][T32543] usb 3-1: config 0 has no interface number 0 [ 2498.172969][T32543] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2498.430380][ T31] INFO: task kworker/0:0:25862 blocked for more than 143 seconds. [ 2498.455039][T32543] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 2498.469594][ T31] Tainted: G L syzkaller #0 [ 2498.486491][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2498.507343][T32543] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2498.536799][T32543] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2498.565740][T32543] usb 3-1: config 0 descriptor?? [ 2498.573870][ T31] task:kworker/0:0 state:D stack:20832 pid:25862 tgid:25862 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2498.597080][ T958] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2498.642707][ T31] Workqueue: usb_hub_wq hub_event [ 2498.651460][T32543] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 2498.752840][ T31] Call Trace: [ 2498.784124][ T31] [ 2498.882720][T32543] usb 3-1: USB disconnect, device number 108 [ 2498.896522][ T31] __schedule+0x14ea/0x5050 [ 2498.939458][ T31] ? wq_worker_sleeping+0xfe/0x250 [ 2498.992780][ T31] ? __pfx___schedule+0x10/0x10 [ 2499.040437][ T31] ? schedule+0x90/0x360 [ 2499.155656][ T31] schedule+0x164/0x360 [ 2499.214235][ T31] schedule_preempt_disabled+0x13/0x30 [ 2499.248370][ T31] __mutex_lock+0x7fe/0x1300 [ 2499.267107][ T31] ? __mutex_lock+0x5ac/0x1300 [ 2499.279843][ T31] ? hub_event+0x21a2/0x4f30 [ 2499.291241][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2499.302284][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2499.317140][ T31] hub_event+0x21a2/0x4f30 [ 2499.339744][ T31] ? __perf_event_task_sched_in+0xf2/0x1800 [ 2499.365564][ T31] ? irqentry_exit+0x59c/0x620 [ 2499.379428][ T31] ? __pfx_hub_event+0x10/0x10 [ 2499.390540][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 2499.404745][ T31] ? lock_acquire+0x221/0x330 [ 2499.419538][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 2499.433213][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 2499.448216][ T31] process_scheduled_works+0xaec/0x17a0 [ 2499.454339][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2499.460611][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 2499.469105][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2499.488108][ T31] ? schedule+0x90/0x360 [ 2499.522034][ T31] worker_thread+0xda6/0x1360 [ 2499.546655][ T31] ? __kthread_parkme+0x19c/0x1f0 [ 2499.600640][ T31] kthread+0x726/0x8b0 [ 2499.604965][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2499.610378][ T31] ? __pfx_kthread+0x10/0x10 [ 2499.622656][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2499.628122][ T31] ? __pfx_kthread+0x10/0x10 [ 2499.700110][ T31] ret_from_fork+0x51b/0xa40 [ 2499.707100][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2499.719066][ T31] ? __switch_to+0xc82/0x1410 [ 2499.725578][ T31] ? __pfx_kthread+0x10/0x10 [ 2499.738290][ T31] ret_from_fork_asm+0x1a/0x30 [ 2499.748345][ T31] [ 2499.751979][ T31] [ 2499.751979][ T31] Showing all locks held in the system: [ 2499.859635][ T31] 1 lock held by khungtaskd/31: [ 2499.865146][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2499.875915][ T31] 5 locks held by kworker/0:2/797: [ 2499.881263][ T31] #0: ffff888142e81d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 2499.893135][ T31] #1: ffffc90003177bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 2499.936367][ T31] #2: ffff888029d7f198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 2499.987422][ T31] #3: ffff888029d9a518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 2500.023819][ T31] #4: ffff888029869168 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 2500.064529][ T31] 2 locks held by getty/5587: [ 2500.082439][ T31] #0: ffff88814e9a80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2500.116667][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 2500.127426][ T31] 5 locks held by kworker/0:3/5825: [ 2500.132917][ T31] #0: ffff888142e81d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 2500.158283][ T31] #1: ffffc900041ffbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 2500.173072][ T31] #2: ffff888145722198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 2500.185012][ T31] #3: ffff888145387518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 2500.195977][ T31] #4: ffff888144ffc468 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 2500.228131][ T31] 5 locks held by kworker/0:6/5919: [ 2500.240505][T21276] usb 4-1: 0:2 : does not exist [ 2500.245528][T21276] usb 4-1: unit 4 not found! [ 2500.261295][ T31] #0: ffff888142e81d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 2500.273108][T21276] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 2500.299493][ T31] #1: ffffc90004f17bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 2500.316045][T21276] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2500.319032][ T31] #2: ffff8881457eb198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 2500.335916][ T31] #3: ffff8881457ee518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 2500.358530][ T31] #4: ffff888027f80368 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 2500.368716][ T31] 5 locks held by kworker/0:7/6545: [ 2500.374116][ T31] #0: ffff888142e81d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 2500.386141][ T31] #1: ffffc9000bab7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 2500.389628][T21276] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2500.398517][ T31] #2: ffff888029c8c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 2500.398601][ T31] #3: ffff888029c8f518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 2500.398733][ T31] #4: ffff888029af5868 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 2500.398806][ T31] 10 locks held by kworker/1:3/21276: [ 2500.398886][ T31] 5 locks held by kworker/1:5/24851: [ 2500.398901][ T31] #0: ffff888142e81d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 2500.398986][ T31] #1: ffffc9001c627bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 2500.399118][ T31] #2: ffff88814577c198 (&dev->mutex){....}-{4:4} [ 2500.494535][T21276] usb 4-1: USB disconnect, device number 88 [ 2500.526764][ T31] , at: hub_event+0x17f/0x4f30 [ 2500.531801][ T31] #3: ffff88814577f518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 2500.542008][ T31] #4: ffff888029af5868 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 2500.554538][ T31] 5 locks held by kworker/0:0/25862: [ 2500.560118][ T31] #0: ffff888142e81d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 2500.570501][ T632] udevd[632]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2500.572128][ T31] #1: ffffc9000b9a7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 2500.607524][ T31] #2: ffff88814577a198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 2500.617202][ T31] #3: ffff888029c78518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 2500.630208][ T31] #4: ffff888144ffc468 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 2500.640657][ T31] 2 locks held by dhcpcd/974: [ 2500.645475][ T31] #0: ffff888050410260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 2500.655744][ T31] #1: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 2500.667227][ T31] [ 2500.669838][ T31] ============================================= [ 2500.669838][ T31] [ 2500.678654][ T31] NMI backtrace for cpu 0 [ 2500.678680][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2500.678720][ T31] Tainted: [L]=SOFTLOCKUP [ 2500.678729][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2500.678740][ T31] Call Trace: [ 2500.678749][ T31] [ 2500.678758][ T31] dump_stack_lvl+0xe8/0x150 [ 2500.678794][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 2500.678822][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2500.678874][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2500.678907][ T31] sys_info+0x135/0x170 [ 2500.678931][ T31] watchdog+0xf90/0xfe0 [ 2500.678963][ T31] ? watchdog+0x209/0xfe0 [ 2500.678993][ T31] kthread+0x726/0x8b0 [ 2500.679020][ T31] ? __pfx_watchdog+0x10/0x10 [ 2500.679041][ T31] ? __pfx_kthread+0x10/0x10 [ 2500.679068][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2500.679100][ T31] ? __pfx_kthread+0x10/0x10 [ 2500.679123][ T31] ret_from_fork+0x51b/0xa40 [ 2500.679156][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2500.679184][ T31] ? __switch_to+0xc82/0x1410 [ 2500.679216][ T31] ? __pfx_kthread+0x10/0x10 [ 2500.679238][ T31] ret_from_fork_asm+0x1a/0x30 [ 2500.679282][ T31] [ 2500.679356][ T31] Sending NMI from CPU 0 to CPUs 1: [ 2500.812171][ C1] NMI backtrace for cpu 1 [ 2500.812194][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 2500.812218][ C1] Tainted: [L]=SOFTLOCKUP [ 2500.812225][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2500.812236][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2500.812262][ C1] Code: a8 60 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 67 12 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 2500.812277][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 2500.812294][ C1] RAX: 00000000027ff4e9 RBX: ffffffff8199570d RCX: 0000000080000001 [ 2500.812308][ C1] RDX: 0000000000000001 RSI: ffffffff8dcc9170 RDI: ffffffff8c073a00 [ 2500.812320][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 2500.812334][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8fef1b70 [ 2500.812347][ C1] R13: 1ffff110039dcb70 R14: 0000000000000001 R15: 0000000000000001 [ 2500.812359][ C1] FS: 0000000000000000(0000) GS:ffff8881257f5000(0000) knlGS:0000000000000000 [ 2500.812373][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2500.812386][ C1] CR2: 0000564c8adfe168 CR3: 0000000075eec000 CR4: 00000000003526f0 [ 2500.812402][ C1] Call Trace: [ 2500.812410][ C1] [ 2500.812417][ C1] default_idle+0x9/0x20 [ 2500.812438][ C1] default_idle_call+0x72/0xb0 [ 2500.812461][ C1] do_idle+0x1bd/0x500 [ 2500.812476][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2500.812498][ C1] ? __pfx_do_idle+0x10/0x10 [ 2500.812518][ C1] cpu_startup_entry+0x43/0x60 [ 2500.812534][ C1] start_secondary+0x101/0x110 [ 2500.812560][ C1] common_startup_64+0x13e/0x147 [ 2500.812591][ C1] [ 2500.992273][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2500.999180][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2501.009897][ T31] Tainted: [L]=SOFTLOCKUP [ 2501.014259][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2501.024354][ T31] Call Trace: [ 2501.027680][ T31] [ 2501.030648][ T31] vpanic+0x1e0/0x670 [ 2501.034687][ T31] panic+0xc5/0xd0 [ 2501.038451][ T31] ? __pfx_panic+0x10/0x10 [ 2501.042916][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2501.048351][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2501.054558][ T31] watchdog+0xfda/0xfe0 [ 2501.058763][ T31] ? watchdog+0x209/0xfe0 [ 2501.063148][ T31] kthread+0x726/0x8b0 [ 2501.067287][ T31] ? __pfx_watchdog+0x10/0x10 [ 2501.072000][ T31] ? __pfx_kthread+0x10/0x10 [ 2501.076652][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2501.081891][ T31] ? __pfx_kthread+0x10/0x10 [ 2501.086513][ T31] ret_from_fork+0x51b/0xa40 [ 2501.091168][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2501.096332][ T31] ? __switch_to+0xc82/0x1410 [ 2501.101056][ T31] ? __pfx_kthread+0x10/0x10 [ 2501.105679][ T31] ret_from_fork_asm+0x1a/0x30 [ 2501.110512][ T31] [ 2501.114189][ T31] Kernel Offset: disabled [ 2501.118526][ T31] Rebooting in 86400 seconds..