last executing test programs: 26m1.051887789s ago: executing program 1 (id=1061): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0x42, @empty}}, 0x5, 0x400}, 0x90) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xc, @private1, 0x14}, 0xfffffffffffffecb, 0x0, 0x0, 0x0, 0x56}, 0x20000800) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1800) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) getpeername(0xffffffffffffffff, &(0x7f0000000240)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0xfffffeb1) 26m0.482098931s ago: executing program 1 (id=1065): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) close(r1) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000180)='W', 0x1}], 0x1}}], 0x1, 0x4008084) r4 = accept(r2, 0x0, 0x0) recvmsg(r4, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002400)=""/116, 0x74}], 0x1}, 0x10140) 26m0.365974561s ago: executing program 1 (id=1067): landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000002000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c00048010000180080001006c6f6700040002802800018008000100666962001c00028008000140000000110800034000000005080002400000000114000000110001"], 0xec}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 26m0.236618464s ago: executing program 1 (id=1068): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 25m59.246548951s ago: executing program 1 (id=1075): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x4, 0xee}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4024000) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x96, 0x0, 0x100, 0x10000, 0x1, '\x00', 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 25m58.796503049s ago: executing program 1 (id=1078): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x805, 0x0) socket(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r1, 0xfe, 0xdcb6, 0xfffffffffffffffe}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 25m58.525008574s ago: executing program 32 (id=1078): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x805, 0x0) socket(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r1, 0xfe, 0xdcb6, 0xfffffffffffffffe}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 19m52.120903469s ago: executing program 3 (id=2484): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000280), &(0x7f00000002c0)=0x4) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) syz_usb_connect(0x0, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005cdd2e106307151088560000000109023d00010000d00009047e0004ffd234000905b74318860809050725018705ee7b09050a000002810bac090504"], 0x0) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x300) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0x3}, {0xfff3}}}, 0x24}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r7, &(0x7f0000000200)={0xa5, 0x20, 0x1ff, 0x20, 0x8}, 0x48) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb8}}, 0x5) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 19m48.556306349s ago: executing program 3 (id=2496): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000100)={@mcast2, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x74, r2, {0x4, 0xfff2}, {0xafabc05531515610, 0xd}, {0x8, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602ffa100000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40) r6 = openat$autofs(0xffffffffffffff9c, 0x0, 0x20001, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close(0x4) 19m46.699213291s ago: executing program 3 (id=2505): syz_open_dev$loop(0x0, 0xffff, 0x109041) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000300)) open(0x0, 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x800002000000008, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) setpriority(0x0, 0x1, 0xa7a8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) 19m45.532358246s ago: executing program 3 (id=2509): socket$kcm(0x21, 0x2, 0xa) r0 = socket(0x23, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100a, 0x3}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000000)={0x2}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r4, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000400)=""/157, 0x9d}], 0x2) 19m42.400521275s ago: executing program 3 (id=2525): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000a80), 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x10000042, 0x3}, 0x10) bind$tipc(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close(r2) syz_usb_connect(0x2, 0x18b, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0xad, 0x48, 0xe8, 0x40, 0x19d2, 0x1255, 0x3be9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x179, 0x1, 0x8, 0x80, 0x30, 0x3e, "", [{{0x9, 0x4, 0x14, 0x1, 0x2, 0xff, 0xff, 0xff, 0x40, [@generic={0x41, 0xae4a8fcd21e5273b, "dac9fd3c90f943cfa0ebeb68a1b318d1a3ff1d9401814d17d4323abee6aee8e9cda73f815c3b706b0510a3dc003c3b7508ae590aaf52e7e86efd18fb234c6d"}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "08b384"}, {0x5, 0x24, 0x0, 0x5272}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1, 0x3ff, 0x1}, [@mdlm_detail={0x51, 0x24, 0x13, 0x3, "c49b175a691f08451c120593e0ebaeca5ebff56561cc35764dc8f6759caf08325ddaa1ebba925821f2b41adafb4a7be69a63352fbcbdc5472e3941acb55387052b14c8be41c3268632a2059928"}]}], [{{0x9, 0x5, 0xe, 0x0, 0x400, 0x0, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x7}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0xc0, 0x1, 0x3, [@generic={0xa0, 0x23, "4848d90a8c8d97543e0751d7e9c043cb4fa7c95cd63420bbd7d6847cd98375480addf99dc4fbf6bc3c72a8f9373b4abf9a87750069d43d4c6354b48893966a5481ef7ab20d5df55126e2762cb7351c74f3d5d21f41f32716734d3e8dbf47c16c98aa61693425b09f9ab4ca599734b13baf85a78aa37a5e0c310009e6b7c55161061047893be1f5175f6b9a99135db9d7a683a295bacc644f8e76e3f1df1c"}, @generic={0x2}]}}]}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x201, 0xc7, 0x3, 0x20, 0x8, 0xa}, 0xc, &(0x7f0000000480)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x3, 0x3, 0x4}]}, 0x5, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x42f}}, {0x26, &(0x7f0000000700)=@string={0x26, 0x3, "1dd92c7882bcdfba69a88dc0615f50291674aa665b7abe856d65a62ab5c967186a08ca0b"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x2c01}}]}) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4400ae8f, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 19m36.887772748s ago: executing program 3 (id=2530): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pwritev(0xffffffffffffffff, 0x0, 0xffffff1e, 0x10800003, 0x9) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap$xdp(&(0x7f0000872000/0x3000)=nil, 0x3000, 0x2000004, 0x810, 0xffffffffffffffff, 0x80000000) ptrace(0x10, 0x1) syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000001c0)='X', 0x1, 0x20000880, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x6, 0xfe, 0xfd, 0xfe, 0x9, 0x5, 0x1, 0x0, 0x0, 0x20, 0xff, 0x0, 0x2}, 0xe) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 19m21.845387864s ago: executing program 33 (id=2530): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pwritev(0xffffffffffffffff, 0x0, 0xffffff1e, 0x10800003, 0x9) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap$xdp(&(0x7f0000872000/0x3000)=nil, 0x3000, 0x2000004, 0x810, 0xffffffffffffffff, 0x80000000) ptrace(0x10, 0x1) syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000001c0)='X', 0x1, 0x20000880, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x6, 0xfe, 0xfd, 0xfe, 0x9, 0x5, 0x1, 0x0, 0x0, 0x20, 0xff, 0x0, 0x2}, 0xe) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 17.409170226s ago: executing program 6 (id=5620): setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f0000000680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r3, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000640)="97452a307eb495fe223600"/28, 0x1c}], 0x1, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @private=0xa010101}}}], 0x20}, 0x400c804) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$inet6(0xa, 0x3, 0x3) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x8) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000080000004200000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r8}, 0x38) socket$netlink(0x10, 0x3, 0x0) 14.641595305s ago: executing program 4 (id=5624): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0xdddd1000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0x6000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0xb2, 0x8, 0x7, 0x0, 0xff}, {0x3000, 0x0, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0xe2, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x10000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x8000000, 0x0, 0x6, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x4, 0x0, 0x1]}) close(0x5) close(0x4) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0xc000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r5, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0x2, {0x0, 0x0, 0x0, '\x00', {0x7ff, 0x0, 0xadf, 0x10, r7, r8, 0xc000, '\x00', 0x6, 0x181, 0x1, 0xffffffffffffffff, {0x4, 0x6}, {0x1, 0xb}, {0x2000001, 0x20000d}, {0x1000000000, 0xa00}, 0x2, 0x6, 0xfff, 0x5}}}}) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x10400005}}, 0x50) munlockall() 14.195507817s ago: executing program 6 (id=5626): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r4, &(0x7f0000000800)={0xa, 0x4e24, 0xc0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc58e}, 0x1c) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_open_dev$sg(0x0, 0x0, 0x40100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) preadv(r5, &(0x7f0000000300), 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'bridge_slave_1\x00', @link_local}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000640)=""/13, 0x2}, 0x20) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000680)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r3, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440606769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e9759321652280ecb", 0xffe3, 0x6000000000000000, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 12.595804565s ago: executing program 5 (id=5630): socket(0x1e, 0x4, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000040)={0x2, 0x0, [{0x203, 0x0, 0x3}, {0x119, 0x0, 0x10000}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x45, 0x5, 0x6, 0xffffffff, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0xfd71, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x7, 0x2f, 0xe, 0x1, 0x66abcbd1, 0xea4, 0x0, 0x4, 0x6, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x800, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x4381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x2, 0x6, 0x47, 0x3, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x8, 0xb, 0x2, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbb, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x229, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x200000b, 0xfff]}, 0x45c) r3 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) r4 = epoll_create1(0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r7 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r7, 0x2219, 0xcf74, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x20040800) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='+'], 0xfe33) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) keyctl$clear(0x7, 0xfffffffffffffffb) unshare(0x2a020400) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) r8 = getpgid(0x0) r9 = syz_pidfd_open(r8, 0x0) pidfd_send_signal(r9, 0x21, 0x0, 0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000040)={0x20000013}) 11.792097194s ago: executing program 5 (id=5631): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000123000/0x1000)=nil, 0x1000, 0xf) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, 0x0) fsopen(0x0, 0x0) timer_create(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001640), 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r2, &(0x7f0000000f40), 0x0, 0xe000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11.248843463s ago: executing program 6 (id=5632): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) poll(&(0x7f0000000440)=[{r0, 0x5510}], 0x1, 0xa) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(0x0, 0x1, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) memfd_secret(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=0x7b, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_redirect(r3, 0x0, 0x0, 0x0, 0x1) syz_io_uring_setup(0x5793, &(0x7f0000000100)={0x0, 0x1650a, 0x14000, 0x1, 0x51}, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000001c0)={@mcast2={0xff, 0x5}, @remote, @ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x400, 0x7, 0x4450290}) connect$inet6(r5, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @private2, 0x5}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 11.130217388s ago: executing program 4 (id=5633): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) setsockopt$sock_int(r0, 0x1, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1808000008000000000000001a00000086000000b40000009500000000000076ce6c9afb33a3288749705b5645d31f56a3d4bc4d4a4c51a33e8b1f5c75ab4247033134cb82b400315e28d6c63f2c875cfed4a08f74ddb0b9b93f3b9ec21770bcc7633eb9895e9edaf9cea738bd56c1a2"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) capset(&(0x7f00000000c0)={0x20071026, r3}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) socket$l2tp(0x2, 0x2, 0x73) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x98bc00) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r5, 0x4068aea3, &(0x7f0000000040)) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x2000000) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregset(0x4205, r6, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7ada3fef6a118d35304b67af29c1f7c9313e60500719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad5a248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f", 0x87}) syz_usb_disconnect(0xffffffffffffffff) 9.560162641s ago: executing program 5 (id=5637): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x105401, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) unshare(0x20000400) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r4, &(0x7f0000002f40)=""/4098, 0x1002) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f00000002c0)}], 0x3, 0x0, 0x0, 0x10}], 0x1, 0x40800) recvmsg$unix(r2, &(0x7f0000002200)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000020c0)=[{&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000300)=""/128, 0x80}, {&(0x7f0000000500)=""/237, 0xed}, {&(0x7f0000000600)=""/203, 0xcb}, {&(0x7f0000000900)=""/211, 0xd3}, {&(0x7f0000000a00)=""/136, 0x88}, {&(0x7f0000000ac0)=""/127, 0x7f}, {&(0x7f0000000b40)=""/253, 0xfd}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000002040)=""/107, 0x6b}], 0xa, &(0x7f0000002180)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0xffff, @multicast2}, {0x2, 0x4e22, @empty}, {0x2, 0x4e20, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x401}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x14, r6, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2008081}, 0x4000) 9.116392791s ago: executing program 6 (id=5638): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f00000003c0)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) fcntl$lock(r1, 0x24, &(0x7f0000000440)={0x1, 0x2, 0x6, 0x6, r3}) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x9}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, 0x0, 0x0, 0x4000000) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, 0x0, 0x4c01c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c00000040000701fefeffff00000000017c0010040042800c000180060006006558000008000280040011"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f0000000100)=0x8b, 0x4) syz_usb_connect$cdc_ncm(0x0, 0x9f, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x2, 0x1, 0x8, 0x60, 0x80, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9ae, 0xb, 0xdf, 0x7}, {0x6, 0x24, 0x1a, 0xe400, 0x20}, [@network_terminal={0x7, 0x24, 0xa, 0x4c, 0x8f, 0x94, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x823a}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x6, 0xf9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x0, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3fd, 0x8, 0x8c, 0x4}}}}}}}]}}, &(0x7f00000000c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x4, 0x8, 0xf, 0x10, 0x1}, 0x5}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20}, @in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, &(0x7f0000000280)=0x10) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0xffffff07, 0x3afd}, @generic={0x0, 0x5, "d58838"}]}}}}}}, 0x4a) 8.703725449s ago: executing program 4 (id=5640): r0 = socket(0x200000000000011, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x12, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xff2e) recvmmsg(r0, &(0x7f00000061c0)=[{{&(0x7f0000000540)=@x25, 0x80, &(0x7f00000039c0)=[{&(0x7f00000005c0)=""/130, 0x82}, {&(0x7f0000000680)=""/68, 0x44}, {&(0x7f0000000700)=""/199, 0xc7}, {0x0}, {0x0}, {&(0x7f0000002900)}, {0x0}, {&(0x7f0000002980)=""/3, 0x3}, {&(0x7f00000029c0)=""/4096, 0x1000}], 0x9, &(0x7f0000003a80)=""/73, 0x49}, 0xfffffff9}, {{&(0x7f0000003b00)=@alg, 0x80, &(0x7f0000004e40)=[{&(0x7f0000003b80)=""/4096, 0x1000}, {0x0}, {0x0}], 0x3, &(0x7f0000004e80)=""/4096, 0x1000}, 0xfff}, {{&(0x7f0000005e80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000006100)=[{&(0x7f0000005f00)=""/181, 0xb5}, {&(0x7f0000005fc0)=""/224, 0xe0}, {&(0x7f00000060c0)=""/28, 0x1c}], 0x3}, 0x53}], 0x3, 0x40, 0x0) unshare(0x6a040000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) pread64(r6, &(0x7f0000001840)=""/4096, 0x1000, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = epoll_create1(0x80000) r11 = fcntl$dupfd(r9, 0x0, r9) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000080)={0x20000000}) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r13 = getpid() kcmp$KCMP_EPOLL_TFD(r13, r12, 0x7, r11, &(0x7f0000000100)={r10, r11, 0x500}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) 7.541277211s ago: executing program 0 (id=5642): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r6, &(0x7f0000002780)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r7 = fsopen(&(0x7f0000000100)='bfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x77) unlinkat(r8, &(0x7f0000000700)='./file0\x00', 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4002000ff9, 0xf) io_setup(0x8, &(0x7f0000000600)=0x0) r10 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r9, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0xb, r10, &(0x7f00000000c0)="01", 0x1}]) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000480)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x7, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x6, 0x9, 0x3, 0x3ff, 0x7], 0xeeee8000, 0x2c2}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000003, 0xfffffefa, 0x6}, 0x10) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x4000, 0xeeee0000, 0xa, 0x8, 0xb, 0xe4, 0x40, 0x10, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0xfec00000, 0x1, 0xe, 0x5, 0x23, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x54000, 0x58000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xb000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0xfd, 0x3, 0xf7, 0x83}, {0x1000, 0xeeee0000, 0x9, 0xa0, 0x4, 0x8, 0x5, 0xa0, 0x82, 0xf, 0x5, 0x7}, {0xeeef0000, 0x26000, 0x4, 0x5, 0xf3, 0xd1, 0x7, 0x3, 0x9, 0x81, 0x9, 0x70}, {0x200000, 0x4000, 0x14, 0x5, 0xcb, 0x7, 0x1, 0x9, 0x2, 0x19, 0xb0, 0x9}, {0x25000, 0x30}, {0x2, 0x7}, 0x10000, 0x0, 0x0, 0x2024, 0x0, 0x4400, 0x8080000, [0x9, 0x100000000000202, 0x1000, 0xb]}) 6.089590486s ago: executing program 5 (id=5643): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0x5b) read$watch_queue(r5, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r4) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x1fc7, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, &(0x7f0000000000)) r8 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r9, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(r6, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x1fe, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0xfffffffe, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x80000086, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd9, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x3f00000000000000) 5.991738643s ago: executing program 0 (id=5644): openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x10c000) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, 0x0, 0x0, 0x200000) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0xff, 0x800, 0xffbffffffffffffb, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x800, 0x10000000}, 0x0, 0x0) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000000240)=0x4, 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000140)={0xb, 0x3, 0x2, {0x4, 0x7, 0x80000000, 0x2}}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000000)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000240)) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000340)=0x1) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) 5.766166702s ago: executing program 6 (id=5645): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x581200, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000440)='v2\x00ul\x00\x00\x00\x00\xc7\xa9v\x80!\x02\x93r\xb93\x85\x00loc\xad\x8b#\xe2\xb9\xbd\"\xeb.\xc7]\xa67\x06 \xc9\x02|\x85o7Z\xdc\n\xaa?4/\x00\x00\x00(\xe6\x9em_\x1a\xbfTi\x15\x81\xd47\x8e\x86\xa2u~\x8cv\xe4\\\x91\xa8G!mm\f\xcf\xfb\x00'/97, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) madvise(&(0x7f0000758000/0x1000)=nil, 0x1000, 0xc) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0xdddd1000, 0x0, 0x7f, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0x6000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x7, 0xb2, 0x8, 0x3, 0x0, 0xff}, {0x1000, 0x0, 0x4, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0xe2, 0x7f, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x10000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xd, 0x0, 0x3c, 0x2}, {0x0, 0x0, 0x10, 0x0, 0x0, 0x96, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0xa000, 0xa, 0x6, 0x0, 0x80, 0x4, 0x0, 0x2}, {0x0, 0x8000000, 0x4, 0x9, 0x1, 0x5, 0x83, 0xa, 0x26, 0x5}, {0x4000, 0x2}, {0xd000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x222070, 0xfffffffffffffffe, 0xd801, 0x0, [0x0, 0xffffffffffffffff, 0x1]}) close(0x5) close(0x4) munlockall() socket$netlink(0x10, 0x3, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 5.5806922s ago: executing program 2 (id=5646): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0, 0x800, r0}, 0x38) 5.381721592s ago: executing program 4 (id=5647): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000123000/0x1000)=nil, 0x1000, 0xf) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, 0x0) fsopen(0x0, 0x0) timer_create(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001640), 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r2, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000f40), 0x0, 0xe000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.14986272s ago: executing program 2 (id=5648): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000680)=ANY=[@ANYRESOCT=r1, @ANYRES64=r8, @ANYBLOB="010000000000000000000c000000100023800400040004000200fd7f0000180001801400020064756d6d7930"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, r8, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xd3}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x4c}}, 0xc001) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r10, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x38}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r10, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r10, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x3, 0x1}, 0x8) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.782521971s ago: executing program 0 (id=5649): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0x200c89f, 0xc000, 0x7, 0x20002f6}) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffd) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)=0xf3b, 0x4) io_uring_enter(r1, 0x2219, 0xb, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r2, 0x0, 0x0, 0x12, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setregid(0xffffffffffffffff, 0x0) r4 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40) ioctl$VIDIOC_G_AUDIO(r4, 0x80345621, &(0x7f0000000080)) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x401, 0xc, 0x2, 0x0, 0x9}) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f00000000c0), 0x4) setsockopt$MRT_DEL_MFC_PROXY(r5, 0x0, 0xd0, 0x0, 0x0) 3.585669976s ago: executing program 0 (id=5650): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f00000003c0)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) fcntl$lock(r1, 0x24, &(0x7f0000000440)={0x1, 0x2, 0x6, 0x6, r3}) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x9}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, 0x0, 0x0, 0x4000000) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, 0x0, 0x4c01c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c00000040000701fefeffff00000000017c0010040042800c000180060006006558000008000280040011"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f0000000100)=0x8b, 0x4) syz_usb_connect$cdc_ncm(0x0, 0x9f, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x2, 0x1, 0x8, 0x60, 0x80, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9ae, 0xb, 0xdf, 0x7}, {0x6, 0x24, 0x1a, 0xe400, 0x20}, [@network_terminal={0x7, 0x24, 0xa, 0x4c, 0x8f, 0x94, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x823a}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x6, 0xf9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x0, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3fd, 0x8, 0x8c, 0x4}}}}}}}]}}, &(0x7f00000000c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x4, 0x8, 0xf, 0x10, 0x1}, 0x5}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20}, @in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, &(0x7f0000000280)=0x10) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0xffffff07, 0x3afd}, @generic={0x0, 0x5, "d58838"}]}}}}}}, 0x4a) 3.04478968s ago: executing program 4 (id=5651): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x80800) sendto(r5, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000180), 0x55}, 0x5d1}], 0x1, 0x4002, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x20000023896) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) socket$inet(0x2, 0x2, 0x20000006) r8 = fsopen(&(0x7f0000000280)='hfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0}) setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x6, r11, 0x1}, 0xc) r12 = socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x4b, r11, 0x2}, 0xc) sendmsg$netlink(r12, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 2.803829887s ago: executing program 6 (id=5652): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000021fd382d732b2a4270d0ec6e2e9a657af060101000000000003c91b0ffa93840000050000000900020073797a3100000000050001000700000005000500000000000c00078008000b4000000000050005000500000011000300686173683a69702c6d61726b000000000500"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x40000) lsm_get_self_attr(0x66, 0x0, &(0x7f0000000100), 0x1) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000040)="ad56000081000008000d00"/24, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) ioctl$FIBMAP(r4, 0x1, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) r6 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r6, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r6, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r7 = accept4(r5, 0x0, 0x0, 0x80000) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000040), 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000040), 0x12) sendmsg$NL80211_CMD_LEAVE_IBSS(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010027bd700f4633f7257d00000008000300", @ANYRES32=r2, @ANYBLOB="0c009900020000007c000000"], 0x28}}, 0xc04c081) read$FUSE(r2, 0x0, 0x0) 2.671293985s ago: executing program 2 (id=5653): ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x5) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0xf1ba, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close(0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e22, 0xfff, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) r4 = syz_open_dev$admmidi(0x0, 0x20, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r4, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000000)=@e={0xff, 0xa, 0x2, 0x4, @SEQ_CONTROLLER=0xfe, 0x7f, 0x7, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp6\x00') read$snddsp(r6, &(0x7f0000000180)=""/26, 0x1a) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000100)=""/66, 0x42}], 0x1, 0x103c, 0xd) write$vga_arbiter(r6, &(0x7f0000000200)=@unlock_all, 0xb) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r2) connect$inet(r6, &(0x7f00000001c0)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000280)={0xa, 0x4e24, 0x8000, @local, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "b86290069962eb21", "c0ca6b79955b9fcb0f8045ab47a09c4b4a94ff7ad3d8b71e5492e37315f600d4", "e421626a", "85866235ad1782a2"}, 0x38) 2.070156766s ago: executing program 5 (id=5654): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x188c1) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="800000001000ffff27bd7000fbdbdf", @ANYRES32=0x0, @ANYBLOB="1720000021200000600012800b000100697036746e6c00005000028014000200fc0100000000000000000000000000000400130014000300fe8000000000000000000000000000aa0500060002000000080008003b00000008000800240000000800010002"], 0x80}, 0x1, 0x0, 0x0, 0x44}, 0x8000002) r2 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r3 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x189e42) r4 = fsopen(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x800000032) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.time_recursive\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000780)='source', &(0x7f0000000140)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae\x01\x91&6n \xf2<\xd6\xcf\x15.9\x8b|\xe9H\xa7a>\xd3\xd7\x1d\xa7=\xef\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa0\xbbL}\xcc\'(;\xdcjN\xab\xcf\xa0\x1dN\xbeA\x17\n\f\xcd=\'\x11\x1b\b>Z\x8e\xb1\xc3j$v\xef,\x06/\x02\x00\x00\x00\x00\xc7\x0f\xaa\t\x00\x00\x00;\xd5\x014g+\xbd\xd1\xe0R\x9d\x18\x19a:', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x10}]}}, @TCA_RATE={0x4, 0x5, {0x5, 0x9}}]}, 0x40}}, 0x4800) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f00000002c0)) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x140, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x118, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @mcast2, 0x5d}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x6c, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x404c844}, 0x40000) syz_usb_disconnect(r2) r9 = dup2(r3, r3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r9, 0x0) r10 = syz_open_dev$dvb_frontend(&(0x7f0000002180), 0x7b0c, 0x40000) ioctl$FE_GET_PROPERTY(r10, 0x80106f53, &(0x7f00000024c0)={0x9, &(0x7f0000002200)=[{0x26, '\x00', @st={0x4, [{0x3, @svalue=0xe}, {0x1, @svalue=0x7}, {0x0, @uvalue=0x101}, {0x3, @svalue=0x7}]}}, {0xd, '\x00', @st={0x4, [{0x3, @svalue=0xfda}, {0x0, @svalue=0x2}, {0x2, @svalue=0x6}, {0x0, @svalue=0x1}]}, 0x74}, {0x2f, '\x00', @data, 0x2}, {0x9, '\x00', @st={0x4, [{0x1, @svalue=0x4}, {0x1, @uvalue=0x3a5}, {0x1, @svalue=0xb}, {0x5d1ae71d15d461ec, @uvalue=0x7}]}, 0x6}, {0x16, '\x00', @buffer={"6286ae8c1979f873ab4c4e4f62f4ee8901a6f20bb586484243639abe77012d1a", 0x20}, 0x6}, {0x11, '\x00', @buffer={"8bf85060e37980b2ca188f430e1a6042d644127f6bdf9e9421b9cb87f1be9fcb", 0x20}, 0x367}, {0x39, '\x00', @st={0x4, [{0x0, @uvalue=0x8000000000000001}, {0x3, @svalue=0x4}, {0x1, @svalue}, {0x2, @uvalue=0x3ff}]}, 0x1b}, {0x1c, '\x00', @data=0x7fffffff, 0x7}, {0x2a, '\x00', @st={0x4, [{0x2, @uvalue=0xc}, {0x0, @svalue=0xffffffffffffffff}, {0x3, @svalue}, {0x1, @svalue=0x3ff}]}, 0x3}]}) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000100)) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r12, r11, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000006c0)={0x10, 0x0, &(0x7f0000000380)=[@increfs, @decrefs], 0x0, 0x0, 0x0}) 1.802273957s ago: executing program 0 (id=5655): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f00000003c0)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) fcntl$lock(r1, 0x24, &(0x7f0000000440)={0x1, 0x2, 0x6, 0x6, r3}) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x9}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, 0x0, 0x0, 0x4000000) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, 0x0, 0x4c01c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c00000040000701fefeffff00000000017c0010040042800c000180060006006558000008000280040011"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f0000000100)=0x8b, 0x4) syz_usb_connect$cdc_ncm(0x0, 0x9f, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x2, 0x1, 0x8, 0x60, 0x80, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9ae, 0xb, 0xdf, 0x7}, {0x6, 0x24, 0x1a, 0xe400, 0x20}, [@network_terminal={0x7, 0x24, 0xa, 0x4c, 0x8f, 0x94, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x823a}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x6, 0xf9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x0, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3fd, 0x8, 0x8c, 0x4}}}}}}}]}}, &(0x7f00000000c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x4, 0x8, 0xf, 0x10, 0x1}, 0x5}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20}, @in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, &(0x7f0000000280)=0x10) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0xffffff07, 0x3afd}, @generic={0x0, 0x5, "d58838"}]}}}}}}, 0x4a) 1.763006172s ago: executing program 4 (id=5656): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) r4 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = syz_io_uring_setup(0x1d46, &(0x7f00000002c0)={0x0, 0x1992, 0x20000, 0x1, 0x15a}, &(0x7f0000000340), &(0x7f00000001c0), &(0x7f0000000640)) io_uring_enter(r5, 0x542d, 0xeaba, 0x0, &(0x7f0000000400)={[0x9b34]}, 0x8) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) r7 = fsopen(&(0x7f0000000000)='erofs\x00', 0x0) r8 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x7a400) ioctl$CEC_ADAP_G_LOG_ADDRS(r8, 0x805c6103, &(0x7f00000005c0)) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000006c0)='\x00\x00\x00\x00\x00.\x8b;\x18bh\xd3\xe8\x9a\xb4V\x81\x00', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\'Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14\\/\\\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x8824) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) close(r3) r5 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) pread64(r5, 0x0, 0x0, 0x5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x5840400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000640)=0x10) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x20) r8 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r8, &(0x7f0000002800)={0x2020}, 0x2020) ioctl$BLKGETSIZE64(r8, 0x80041272, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) 615.504358ms ago: executing program 2 (id=5658): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0, 0x800, r0}, 0x38) 454.480375ms ago: executing program 2 (id=5659): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0xd, 0x42, 0x44}, 0x50) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x2c, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r4}]}]}, 0x50}}, 0x40) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$video(&(0x7f0000000080), 0x7f, 0x0) ioctl$VIDIOC_CROPCAP(r5, 0xc02c563a, &(0x7f0000000000)={0x9, {0x0, 0xfffff88f, 0x200000e7}, {0x0, 0x0, 0x3, 0x3}, {0xfdfd, 0x3}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$FE_READ_BER(r8, 0x80046f46, &(0x7f00000003c0)) syz_ublk_add_dev(r6, r7, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) socket$inet6(0xa, 0x3, 0x401) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r9, 0xc0105500, &(0x7f0000000000)={0x80, 0x8, 0x303, 0x4, 0xfe, 0x0, 0x0}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'lo\x00', 0x3}, 0x18) unshare(0x26020480) r10 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r11, 0x0}, 0x20) creat(&(0x7f0000000040)='./file0\x00', 0xc0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d33b16266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38) socket$inet6_sctp(0xa, 0x5, 0x84) openat$kvm(0x0, &(0x7f0000000080), 0x2a01, 0x0) 97.685233ms ago: executing program 0 (id=5660): syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r0 = syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x33, 0x0, @val=@netfilter={0x2, 0x1, 0xc5d, 0x1}}, 0x20) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x7fffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) select(0x40, &(0x7f0000000080)={0x8, 0x62dc, 0x5, 0x0, 0x800, 0x8000000000000000, 0x6, 0x1ff}, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3, 0x1, {}, 0x0, 0x0, r4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xbd) unshare(0x400) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7d, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x0, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x3, 0x8, 0x286, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x20000038, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x4, 0x60a7, 0x6, 0x16, 0xffffffff, 0x8, 0x4, 0x5, 0xca, 0x1, 0x1, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0xf, 0x0, 0xffffefff}, {0x6}]}, 0x10) timer_create(0x1, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0xc03e) 0s ago: executing program 2 (id=5661): syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x1, 0x3, 0x5c, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = memfd_create(0x0, 0x3) write$binfmt_script(r2, 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)=@userptr={0x0, 0xa, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d39bce7d"}, 0x0, 0x2, {0x0}}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x201, 0x40000036, r3, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r5, 0x5b) setrlimit(0x40000000000008, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r6, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000014c0)='\x00', 0x1}], 0x1}}], 0x1, 0x400c405) keyctl$revoke(0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r7 = syz_open_dev$vim2m(&(0x7f0000000280), 0x400000000000404, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r7, 0xc0585611, &(0x7f0000000200)=@userptr={0xfffffff7, 0x2, 0x4, 0x100000, 0xffff, {}, {0x4, 0xc, 0x88, 0x20, 0xc, 0x6, "2097d12c"}, 0xffff8001, 0x2, {0x0}, 0x5692}) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, 0x0, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): idProduct=a4a1, bcdDevice= 0.40 [ 1726.636198][ T1235] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1726.646754][ T1235] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1021 [ 1726.659130][ T1235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.667854][ T1235] usb 5-1: Product: syz [ 1726.674542][ T1235] usb 5-1: Manufacturer: syz [ 1726.679611][ T1235] usb 5-1: SerialNumber: syz [ 1726.726074][T25424] bond14: entered promiscuous mode [ 1726.739536][T25424] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1726.919297][ T1235] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1726.930740][ T1235] cdc_ncm 5-1:1.0: bind() failure [ 1726.943864][ T1235] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1726.953325][ T1235] cdc_ncm 5-1:1.1: bind() failure [ 1726.964726][ T1235] usb 5-1: USB disconnect, device number 93 [ 1727.430299][T25432] random: crng reseeded on system resumption [ 1728.129482][T25447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5342'. [ 1728.252981][T25453] netlink: 'syz.6.5345': attribute type 1 has an invalid length. [ 1728.594212][T25457] EXT4-fs: Conflicting test_dummy_encryption options [ 1728.754204][T25459] trusted_key: encrypted_key: insufficient parameters specified [ 1729.028648][T13448] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 1729.226412][T25459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1729.252863][T25459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1729.308201][T13457] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1729.317840][T13448] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1729.330018][T13448] usb 3-1: no configurations [ 1729.334649][T13448] usb 3-1: can't read configurations, error -22 [ 1729.458153][T13457] usb 5-1: Using ep0 maxpacket: 8 [ 1729.464580][T13457] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1729.475367][T13457] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1729.487417][T13457] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.496192][T13457] usb 5-1: Product: syz [ 1729.500552][T13457] usb 5-1: Manufacturer: syz [ 1729.505199][T13457] usb 5-1: SerialNumber: syz [ 1729.512566][T13457] usb 5-1: config 0 descriptor?? [ 1729.523015][T13457] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1730.710682][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.717404][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.912308][T25472] nvme nvme0: failed to connect socket: -512 [ 1731.223276][T25485] netlink: 'syz.2.5353': attribute type 1 has an invalid length. [ 1731.418964][T25487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1731.444460][T25487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1731.478203][T13448] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1731.628051][T13448] usb 3-1: Using ep0 maxpacket: 8 [ 1731.637105][T13448] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1731.648271][T13448] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1731.659433][T13448] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1021 [ 1731.673124][T13448] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1731.681708][T13448] usb 3-1: Product: syz [ 1731.686036][T13448] usb 3-1: Manufacturer: syz [ 1731.691248][T13448] usb 3-1: SerialNumber: syz [ 1731.860343][T25462] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1731.913800][T13448] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 1731.920829][T13448] cdc_ncm 3-1:1.0: bind() failure [ 1731.931539][T13448] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1731.938412][T13448] cdc_ncm 3-1:1.1: bind() failure [ 1731.948262][T13448] usb 3-1: USB disconnect, device number 61 [ 1732.277683][T13457] gspca_zc3xx: i2c_r status error 8d [ 1732.697783][T13457] gspca_zc3xx: reg_r err -71 [ 1732.893562][T25506] fuse: Unknown parameter 'jkfd' [ 1733.150775][T25508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.165481][T25508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.219224][T25508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.233263][T25509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1733.240850][T25511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.267728][T25511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.279166][T25511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.288270][T25511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.289432][T25509] 8021q: adding VLAN 0 to HW filter on device team0 [ 1733.299554][T13457] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1733.310179][T13457] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1733.326215][T13457] usb 5-1: USB disconnect, device number 94 [ 1733.359991][T12255] udevd[12255]: setting mode of /dev/bus/usb/005/094 to 020664 failed: No such file or directory [ 1733.371837][T12255] udevd[12255]: setting owner of /dev/bus/usb/005/094 to uid=0, gid=0 failed: No such file or directory [ 1733.442858][T25511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.456025][T25511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.472374][T25511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.557529][T25510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5358'. [ 1733.652314][T25509] veth1_to_hsr: left allmulticast mode [ 1733.681603][T25509] veth1_vlan: left promiscuous mode [ 1733.693833][T25509] veth0_vlan: left promiscuous mode [ 1733.703283][T25509] veth0_vlan: entered promiscuous mode [ 1733.715278][T25509] veth1_vlan: entered promiscuous mode [ 1733.766040][T25509] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1733.782498][T25509] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1733.791629][T25509] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1733.811412][T25509] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1733.838081][T17358] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 1733.858511][T25509] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1733.871560][T25509] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1733.922607][T25509] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1733.951678][T25509] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1734.011226][T17358] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1734.021604][T17358] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1734.030618][T17358] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1734.040976][T17358] usb 5-1: config 0 has no interface number 0 [ 1734.047124][T17358] usb 5-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1734.064251][T25509] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1734.071778][T17358] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1734.080761][T17358] usb 5-1: Product: syz [ 1734.085641][T17358] usb 5-1: SerialNumber: syz [ 1734.100536][T17358] usb 5-1: config 0 descriptor?? [ 1734.165214][T25519] trusted_key: encrypted_key: insufficient parameters specified [ 1734.174048][T25509] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1734.201817][T25519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1734.212041][T25509] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1734.225074][T25519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1734.286656][T25519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1734.320827][T25519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1734.419270][T23417] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1734.428561][T23417] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.437345][T23417] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1734.447592][T23417] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.483339][T23448] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1734.492862][T23448] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.510443][T23448] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1734.520182][T23448] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.606989][T17358] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 1734.617501][T17358] usb 5-1: USB disconnect, device number 95 [ 1734.882914][T25529] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5363'. [ 1735.163472][T25532] netlink: 'syz.5.5364': attribute type 1 has an invalid length. [ 1735.179594][T25532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1735.209740][T25532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1735.228611][T13448] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1735.388188][T13448] usb 3-1: Using ep0 maxpacket: 16 [ 1735.394075][T13448] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1735.405796][T13448] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1735.419487][T13448] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.438910][T13448] usb 3-1: config 0 descriptor?? [ 1735.548951][ T1235] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 1735.560203][ T1235] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1735.860176][T25529] nfs: Unknown parameter 'cgroup2' [ 1737.308193][T17358] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1737.472648][T17358] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1737.483813][T17358] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1737.497592][T17358] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1737.525251][T17358] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1737.539617][T17358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1737.548488][T17358] usb 1-1: Product: syz [ 1737.553105][T17358] usb 1-1: Manufacturer: syz [ 1737.557866][T17358] usb 1-1: SerialNumber: syz [ 1737.575169][T17358] usb 1-1: selecting invalid altsetting 1 [ 1737.581927][T17358] usb 1-1: unit 6 not found! [ 1737.816455][T25538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1737.857151][T25538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1738.117305][T25538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1738.154576][T25538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1738.202743][T25538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1738.233890][T25538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1738.342293][T17358] usb 1-1: 2:0: cannot get min/max values for control 1 (id 2) [ 1738.425009][T17358] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1738.436923][T17358] usb 1-1: USB disconnect, device number 116 [ 1738.464366][T12255] udevd[12255]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1738.553490][T23417] net_ratelimit: 621 callbacks suppressed [ 1738.553513][T23417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.572085][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.584304][T20831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.598616][T20407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.957052][T25555] syzkaller0: entered promiscuous mode [ 1738.963380][T25555] syzkaller0: entered allmulticast mode [ 1738.979836][T13448] usbhid 3-1:0.0: can't add hid device: -71 [ 1738.986522][T13448] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1738.999851][T13448] usb 3-1: USB disconnect, device number 62 [ 1739.028802][T23450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1739.042626][T10524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1739.052907][T10524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1739.061058][T10524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1739.078401][T13457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1739.090675][T17358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1739.729885][T25572] netlink: 'syz.4.5374': attribute type 1 has an invalid length. [ 1740.018068][T20831] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1740.178047][T20831] usb 5-1: Using ep0 maxpacket: 8 [ 1740.184502][T20831] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1740.199120][T20831] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1740.209573][T20831] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1021 [ 1740.232113][T20831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.240423][T20831] usb 5-1: Product: syz [ 1740.244649][T20831] usb 5-1: Manufacturer: syz [ 1740.249367][T20831] usb 5-1: SerialNumber: syz [ 1740.393787][T25579] lo: Caught tx_queue_len zero misconfig [ 1740.496144][T20831] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1740.504013][T20831] cdc_ncm 5-1:1.0: bind() failure [ 1740.514197][T20831] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1740.522498][T20831] cdc_ncm 5-1:1.1: bind() failure [ 1740.532849][T20831] usb 5-1: USB disconnect, device number 96 [ 1740.590953][T25580] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5376'. [ 1741.008403][T20407] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1741.168091][T20407] usb 3-1: Using ep0 maxpacket: 8 [ 1741.175637][T20407] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1741.192403][T20407] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.200789][T20407] usb 3-1: Product: syz [ 1741.205072][T20407] usb 3-1: Manufacturer: syz [ 1741.209847][T20407] usb 3-1: SerialNumber: syz [ 1741.223808][T20407] usb 3-1: config 0 descriptor?? [ 1741.235447][T20407] gspca_main: se401-2.14.0 probing 047d:5003 [ 1741.791674][T20407] gspca_se401: Bayer format not supported! [ 1743.603033][T25607] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1744.051619][T17358] usb 3-1: USB disconnect, device number 63 [ 1744.158722][T23448] net_ratelimit: 4 callbacks suppressed [ 1744.158742][T23448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1744.173698][T20831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1744.185867][T24567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1744.404669][T25621] lo: Caught tx_queue_len zero misconfig [ 1744.789098][T23450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1744.798855][T23448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1744.810132][T23448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.198335][T17358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.898415][T20407] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1746.000285][T25640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1746.032164][T25640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1746.053056][T20407] usb 1-1: Using ep0 maxpacket: 32 [ 1746.066849][T20407] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1746.076436][T20407] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1746.088865][T20407] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 2080, setting to 1024 [ 1746.100230][T20407] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1746.115283][T20407] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1746.124013][T20407] usb 1-1: Product: syz [ 1746.128555][T20407] usb 1-1: Manufacturer: syz [ 1746.133207][T20407] usb 1-1: SerialNumber: syz [ 1746.149941][T25633] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1746.188860][T20407] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1746.196209][T20407] usb 1-1: MIDIStreaming interface descriptor not found [ 1746.418396][T25633] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5388'. [ 1746.496164][T25633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1746.523562][T25633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1746.578190][T25633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1746.624752][T25633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1746.749420][T25633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1746.794993][T25633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1746.963273][T20407] usb 1-1: USB disconnect, device number 117 [ 1747.016206][T12924] udevd[12924]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1747.348764][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1747.359743][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1747.953280][T25651] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 1748.115944][T25651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.172998][T25651] nvme nvme0: failed to connect socket: -111 [ 1748.907763][T25659] IPv6: sit2: Disabled Multicast RS [ 1749.561468][T25662] bridge0: left allmulticast mode [ 1749.667262][T25662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1749.894336][T25675] netlink: 'syz.5.5396': attribute type 1 has an invalid length. [ 1749.909877][T10524] net_ratelimit: 3 callbacks suppressed [ 1749.909899][T10524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1749.930794][T25662] veth1_vlan: left promiscuous mode [ 1749.953987][T25675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1749.977553][T25662] veth0_vlan: left promiscuous mode [ 1750.000700][T25662] veth0_vlan: entered promiscuous mode [ 1750.012628][T25675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1750.044142][T25662] veth1_vlan: entered promiscuous mode [ 1750.097069][T25662] veth0_macvtap: left promiscuous mode [ 1750.126372][T25662] veth0_macvtap: entered promiscuous mode [ 1750.220427][T25662] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1750.261154][T25662] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1750.289305][T25662] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1750.313567][T25662] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1750.349736][T25662] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1750.378678][T25662] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1750.397493][T25662] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1750.414167][T25662] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1750.420470][T25680] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5397'. [ 1750.431404][T25662] vlan2: left allmulticast mode [ 1750.436770][T25662] bond4: left allmulticast mode [ 1750.479588][T10524] bond2: (slave ip6gretap1): link status up again after 0 ms [ 1750.505947][T25662] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1750.513550][T23452] bond2: (slave ip6gretap1): link status up again after 0 ms [ 1750.527114][T25662] vlan3: left allmulticast mode [ 1750.532555][T25662] bond5: left allmulticast mode [ 1750.539831][T25662] bridge1: left allmulticast mode [ 1750.539866][T23452] bond2: (slave ip6gretap1): link status up again after 0 ms [ 1750.553016][T23448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1750.562048][T23452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1750.570619][T23414] bond2: (slave ip6gretap1): link status up again after 0 ms [ 1750.595962][T25662] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1750.600021][T25685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5398'. [ 1750.612912][T23448] bond2: (slave ip6gretap1): link status up again after 0 ms [ 1750.635004][T25662] vlan4: left allmulticast mode [ 1750.640399][T23448] bond2: (slave ip6gretap1): link status up again after 0 ms [ 1750.658274][T25662] bond6: left allmulticast mode [ 1750.658835][T25685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5398'. [ 1750.673102][T23448] bond2: (slave ip6gretap1): link status up again after 0 ms [ 1750.681556][T25662] geneve3: left allmulticast mode [ 1750.689895][T25685] netlink: 1932 bytes leftover after parsing attributes in process `syz.0.5398'. [ 1750.699835][T25662] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1750.716930][T25685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5398'. [ 1750.728998][T25685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5398'. [ 1750.741228][T25662] bond7: entered allmulticast mode [ 1750.747188][T25662] bridge2: entered allmulticast mode [ 1750.765990][T25662] macvtap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1750.775527][T25662] macvtap1: left allmulticast mode [ 1750.781805][T25662] bond7: left allmulticast mode [ 1750.789894][T25662] bridge2: left allmulticast mode [ 1750.802335][T25662] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1750.813738][T25662] bond7: entered allmulticast mode [ 1750.828861][T25662] bridge2: entered allmulticast mode [ 1750.847097][T25662] macvtap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1750.864658][T25662] macvtap2: left allmulticast mode [ 1750.874850][T25662] bond7: left allmulticast mode [ 1750.881531][T25662] bridge2: left allmulticast mode [ 1750.899477][T25662] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1750.931226][T25662] bridge2: entered promiscuous mode [ 1750.956072][T25662] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1750.985525][T25662] vlan5: left promiscuous mode [ 1750.990596][T25662] bridge0: left promiscuous mode [ 1751.082089][T25662] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 1751.141214][T25662] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1751.181944][T25662] veth0_to_team: entered promiscuous mode [ 1751.241409][T25662] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1751.293683][T25662] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1751.342060][T25662] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1751.363945][T25662] bond12: left promiscuous mode [ 1751.375269][T25662] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1751.417574][T23450] bridge0: port 1(veth1_to_bridge) entered blocking state [ 1751.424873][T23450] bridge0: port 1(veth1_to_bridge) entered listening state [ 1751.651356][T23417] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1751.668841][T23417] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 35703 - 0 [ 1751.679149][T23417] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 1751.688820][T23417] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1751.697846][T23417] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 35703 - 0 [ 1751.707670][T23417] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 1751.728360][T23450] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1751.737544][T23450] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 35703 - 0 [ 1751.747348][T23450] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 1751.768457][T23450] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1751.777294][T23450] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 35703 - 0 [ 1751.786480][T23450] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 1752.355541][T25705] netlink: 'syz.4.5403': attribute type 1 has an invalid length. [ 1752.638539][T20831] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1752.798155][T20831] usb 5-1: Using ep0 maxpacket: 8 [ 1752.804775][T20831] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1752.815474][T20831] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1752.825340][T20831] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1021 [ 1752.838110][T17358] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 1752.849310][T20831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1752.857637][T20831] usb 5-1: Product: syz [ 1752.862270][T20831] usb 5-1: Manufacturer: syz [ 1752.866898][T20831] usb 5-1: SerialNumber: syz [ 1753.009612][T17358] usb 1-1: New USB device found, idVendor=0499, idProduct=1039, bcdDevice= c.76 [ 1753.022177][T17358] usb 1-1: config 0 has an invalid interface number: 176 but max is 0 [ 1753.033954][T17358] usb 1-1: config 0 has no interface number 0 [ 1753.042247][T17358] usb 1-1: config 0 interface 176 altsetting 0 endpoint 0x4 has invalid maxpacket 59391, setting to 64 [ 1753.062699][T17358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.071542][T17358] usb 1-1: Product: syz [ 1753.076112][T17358] usb 1-1: Manufacturer: syz [ 1753.083638][T17358] usb 1-1: SerialNumber: syz [ 1753.096205][T17358] usb 1-1: config 0 descriptor?? [ 1753.114642][T25701] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1753.136628][T25701] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1753.172525][T20831] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1753.179738][T20831] cdc_ncm 5-1:1.0: bind() failure [ 1753.202253][T20831] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1753.210269][T20831] cdc_ncm 5-1:1.1: bind() failure [ 1753.230477][T20831] usb 5-1: USB disconnect, device number 97 [ 1753.273110][T17358] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1754.146966][T25718] program syz.2.5405 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1754.741915][T25719] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5406'. [ 1755.008173][T23454] net_ratelimit: 78 callbacks suppressed [ 1755.008199][T23454] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1755.032744][T23454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.130041][T23448] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1755.248518][T23448] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1755.321954][T13448] usb 1-1: USB disconnect, device number 118 [ 1755.374298][T23452] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1755.499908][T23452] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1755.609285][T23452] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1755.728260][T23452] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1755.774245][T25740] netlink: 'syz.0.5410': attribute type 9 has an invalid length. [ 1755.836787][T25740] netlink: 'syz.0.5410': attribute type 7 has an invalid length. [ 1755.848112][T23452] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1755.912453][T25740] netlink: 'syz.0.5410': attribute type 8 has an invalid length. [ 1755.968465][T23452] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1756.906565][T25745] netlink: 'syz.4.5412': attribute type 2 has an invalid length. [ 1756.930871][T25745] netlink: 'syz.4.5412': attribute type 2 has an invalid length. [ 1756.958607][T25745] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5412'. [ 1757.178080][T13448] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1757.302936][T25749] netlink: 'syz.0.5414': attribute type 1 has an invalid length. [ 1757.338679][T13448] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1757.354117][T13448] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1757.366083][T13448] usb 3-1: config 0 descriptor?? [ 1757.568196][T17354] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1757.582870][T13448] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1757.718161][T17354] usb 1-1: Using ep0 maxpacket: 8 [ 1757.724859][T17354] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1757.735566][T17354] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1757.745684][T17354] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1021 [ 1757.760234][T17354] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1757.768511][T17354] usb 1-1: Product: syz [ 1757.772904][T17354] usb 1-1: Manufacturer: syz [ 1757.777666][T17354] usb 1-1: SerialNumber: syz [ 1757.810964][T13448] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 1757.818405][T20831] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1757.822883][T13448] [drm] Initialized udl on minor 1 [ 1757.968087][T20831] usb 5-1: Using ep0 maxpacket: 32 [ 1757.975991][T20831] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1757.984543][T20831] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1757.996136][T13448] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1757.996951][T20831] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 2080, setting to 1024 [ 1758.008553][T13448] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1758.017768][T20831] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1758.038574][T20831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1758.047826][T20831] usb 5-1: Product: syz [ 1758.052391][T20831] usb 5-1: Manufacturer: syz [ 1758.057707][T20831] usb 5-1: SerialNumber: syz [ 1758.070998][T25753] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 1758.085820][T20831] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1758.093817][T20831] usb 5-1: MIDIStreaming interface descriptor not found [ 1758.106582][T17354] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1758.113885][T17354] cdc_ncm 1-1:1.0: bind() failure [ 1758.125108][T17354] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1758.132651][T17354] cdc_ncm 1-1:1.1: bind() failure [ 1758.144543][T17354] usb 1-1: USB disconnect, device number 119 [ 1758.292316][T25753] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5416'. [ 1758.372698][T25747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1758.404311][T25753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1758.404840][T25747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1758.444928][T25753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1758.463138][T25753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1758.479345][T25753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1758.497467][T25753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1758.510092][T25753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1758.515175][T17358] usb 3-1: USB disconnect, device number 64 [ 1758.518446][T20407] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1758.532708][T20407] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1758.671220][T20831] usb 5-1: USB disconnect, device number 98 [ 1758.969994][T25759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1759.048912][ T30] audit: type=1326 audit(1787316622.603:6664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25756 comm="syz.5.5417" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea1f9e0d9 code=0x7ffc0000 [ 1759.075642][ T30] audit: type=1326 audit(1787316622.623:6665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25756 comm="syz.5.5417" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea1f9e0d9 code=0x7ffc0000 [ 1759.102286][ T30] audit: type=1326 audit(1787316622.653:6666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25756 comm="syz.5.5417" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea1f9e0d9 code=0x7ffc0000 [ 1759.127376][ T30] audit: type=1326 audit(1787316622.653:6667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25756 comm="syz.5.5417" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea1f9e0d9 code=0x7ffc0000 [ 1759.156389][ T30] audit: type=1326 audit(1787316622.703:6668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25756 comm="syz.5.5417" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbea1f9e0d9 code=0x7ffc0000 [ 1759.168203][T20407] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1759.195350][ T30] audit: type=1326 audit(1787316622.753:6669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25756 comm="syz.5.5417" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbea1f9de42 code=0x7ffc0000 [ 1759.221493][ T30] audit: type=1326 audit(1787316622.753:6670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25756 comm="syz.5.5417" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea1f9e0d9 code=0x7ffc0000 [ 1759.246286][ T30] audit: type=1326 audit(1787316622.753:6671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25756 comm="syz.5.5417" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea1f9e0d9 code=0x7ffc0000 [ 1759.273008][ T30] audit: type=1326 audit(1787316622.823:6672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25756 comm="syz.5.5417" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbea1f9de42 code=0x7ffc0000 [ 1759.338339][T20407] usb 1-1: Using ep0 maxpacket: 32 [ 1759.352065][T20407] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1759.360593][T20407] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1759.374415][T20407] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 2080, setting to 1024 [ 1759.385534][T20407] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1759.399021][T20407] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1759.407087][T20407] usb 1-1: Product: syz [ 1759.412852][T20407] usb 1-1: Manufacturer: syz [ 1759.417630][T20407] usb 1-1: SerialNumber: syz [ 1759.426968][T25761] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1759.434618][ T30] audit: type=1326 audit(1787316622.983:6673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25756 comm="syz.5.5417" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea1f9e0d9 code=0x7ffc0000 [ 1759.504987][T20407] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1759.512540][T20407] usb 1-1: MIDIStreaming interface descriptor not found [ 1759.707644][T25770] random: crng reseeded on system resumption [ 1759.730360][T25761] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5418'. [ 1759.834105][T25761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1759.884573][T25761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1759.942887][T25761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1759.995623][T25761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1760.048265][T25761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1760.101474][T25761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1760.118181][T10528] net_ratelimit: 37 callbacks suppressed [ 1760.118204][T10528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1760.238257][T23450] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1760.312702][T20407] usb 1-1: USB disconnect, device number 120 [ 1760.397736][T12924] udevd[12924]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1760.420293][T20831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1760.431328][T23450] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1760.548732][T23448] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1760.658100][T23448] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1760.779968][T23448] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1760.788552][T23448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1760.898357][T23452] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1761.008111][T10528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1761.129152][T20831] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 1761.308979][T20831] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1761.320367][T20831] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x7 has invalid maxpacket 112, setting to 64 [ 1761.331551][T20831] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1761.342105][T20831] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1761.350682][T20831] usb 5-1: Product: syz [ 1761.354992][T20831] usb 5-1: Manufacturer: syz [ 1761.359783][T20831] usb 5-1: SerialNumber: syz [ 1761.370151][T20831] usb 5-1: config 0 descriptor?? [ 1761.390424][T20831] usb 5-1: selecting invalid altsetting 0 [ 1761.411656][T25779] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1152 (2304 ns) > initial count (768 ns). Using initial count to start timer. [ 1761.438172][T25784] netlink: 'syz.2.5423': attribute type 1 has an invalid length. [ 1761.451741][T25784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5423'. [ 1761.652678][T25765] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1761.661477][T25765] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1761.669749][T25765] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1761.678820][T25765] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1761.687282][T25765] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1761.901951][T25792] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5424'. [ 1762.824197][T25801] EXT4-fs: Conflicting test_dummy_encryption options [ 1763.044535][T25768] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1763.101568][T20831] usb 5-1: USB disconnect, device number 99 [ 1763.722657][T25807] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1764.410948][T25814] netlink: 165 bytes leftover after parsing attributes in process `syz.5.5428'. [ 1764.490148][T25817] netlink: 'syz.5.5428': attribute type 10 has an invalid length. [ 1764.541655][T25814] netlink: 'syz.5.5428': attribute type 10 has an invalid length. [ 1765.151077][ T30] kauditd_printk_skb: 438 callbacks suppressed [ 1765.151098][ T30] audit: type=1326 audit(1787316628.703:7112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25803 comm="syz.4.5426" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e0d9 code=0x0 [ 1765.208923][T23454] net_ratelimit: 37 callbacks suppressed [ 1765.208942][T23454] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1765.271836][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1765.330025][T23417] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1765.438417][T23417] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1765.538704][T17354] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1765.549792][T10528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1765.658471][T23454] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1765.688135][T17354] usb 3-1: Using ep0 maxpacket: 32 [ 1765.696489][T17354] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1765.705617][T17354] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1765.716105][T17354] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 2080, setting to 1024 [ 1765.727890][T17354] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1765.741162][T17354] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.751550][T17354] usb 3-1: Product: syz [ 1765.755759][T17354] usb 3-1: Manufacturer: syz [ 1765.761177][T17354] usb 3-1: SerialNumber: syz [ 1765.770085][T23454] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1765.787038][T25827] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1765.814403][T17354] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1765.822304][T17354] usb 3-1: MIDIStreaming interface descriptor not found [ 1765.878724][T23417] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1765.911575][T23417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1765.989467][T10528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1766.048499][T25825] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5430'. [ 1766.137228][T25825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1766.176279][T25825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1766.216360][T25825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1766.265616][T25825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1766.332018][T25825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1766.373351][T25825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1766.527433][T17354] usb 3-1: USB disconnect, device number 65 [ 1766.550187][ C1] bridge0: port 1(veth1_to_bridge) entered learning state [ 1766.594050][T12924] udevd[12924]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1766.782611][ T30] audit: type=1326 audit(1787316630.323:7113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25834 comm="syz.0.5433" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75f799e0d9 code=0x0 [ 1766.927904][T25837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5433'. [ 1766.950497][T25837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5433'. [ 1767.220101][T25842] sg_write: data in/out 548828/136 bytes for SCSI command 0x0-- guessing data in; [ 1767.220101][T25842] program syz.4.5436 not setting count and/or reply_len properly [ 1767.310887][T25843] tipc: Enabling of bearer rejected, already enabled [ 1767.538344][T25850] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5437'. [ 1767.656225][T25855] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1767.741140][T25855] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5437'. [ 1767.773143][T25853] overlayfs: missing 'lowerdir' [ 1768.018048][T17358] usb 1-1: new full-speed USB device number 121 using dummy_hcd [ 1768.407853][T25857] netlink: 'syz.0.5440': attribute type 3 has an invalid length. [ 1768.449380][T25857] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5440'. [ 1769.085808][T17358] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1769.096756][T17358] usb 1-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 1769.106621][T17358] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1769.116685][T17358] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1769.124496][T17358] usb 1-1: can't read configurations, error -71 [ 1770.288512][T23417] net_ratelimit: 2086 callbacks suppressed [ 1770.288532][T23417] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1770.408503][T23448] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1770.528232][T23448] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1770.638156][T23454] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1770.795177][T23448] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1770.918122][T20831] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1770.939324][T23448] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1770.974458][T25890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1770.990312][T25890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1771.031808][T25890] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5447'. [ 1771.051246][T23417] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1771.089069][T20831] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1771.111971][T20831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1771.120841][T20831] usb 5-1: Product: syz [ 1771.125105][T20831] usb 5-1: Manufacturer: syz [ 1771.129976][T20831] usb 5-1: SerialNumber: syz [ 1771.150129][T25890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1771.169399][T23417] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1771.188603][T25890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1771.225058][T25890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1771.256470][T25890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1771.278739][T23454] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1771.302712][T25890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1771.322899][T25890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1771.399147][T23454] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1771.434251][T20831] rtl8150 5-1:1.0: couldn't reset the device [ 1771.441288][T20831] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 1771.454999][T20831] usb 5-1: USB disconnect, device number 100 [ 1772.139996][T25901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1772.180717][T25901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1772.198671][T25901] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5451'. [ 1772.215292][T25901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1772.254985][T25901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1772.331690][T25901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1772.395518][T25901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1772.448209][T20831] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1772.494776][T25901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1772.550625][T25901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1772.608672][T20831] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1772.619574][T20831] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1772.647819][T20831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1772.656729][T20831] usb 3-1: Product: syz [ 1772.661309][T20831] usb 3-1: Manufacturer: syz [ 1772.666442][T20831] usb 3-1: SerialNumber: syz [ 1772.891989][T20831] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 66 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1772.907586][T20831] usb 3-1: USB disconnect, device number 66 [ 1772.918186][T20831] usblp0: removed [ 1773.513561][T25915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1773.545950][T25915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1773.718490][T20831] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1773.781586][T25915] netlink: 'syz.5.5453': attribute type 3 has an invalid length. [ 1773.804319][T25915] netlink: 666 bytes leftover after parsing attributes in process `syz.5.5453'. [ 1773.888065][T20831] usb 1-1: Using ep0 maxpacket: 32 [ 1773.895533][T20831] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1773.903920][T20831] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1773.921213][T20831] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 2080, setting to 1024 [ 1773.932676][T20831] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1773.946518][T20831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.954874][T20831] usb 1-1: Product: syz [ 1773.959994][T20831] usb 1-1: Manufacturer: syz [ 1773.964656][T20831] usb 1-1: SerialNumber: syz [ 1773.977133][T25913] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1773.988325][T20831] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1773.996155][T20831] usb 1-1: MIDIStreaming interface descriptor not found [ 1774.195040][T25913] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5463'. [ 1774.262576][T25913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1774.275906][T25913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1774.299929][T25913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1774.316457][T25913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1774.346808][T25913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1774.377419][T25913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1774.463952][T20831] usb 1-1: USB disconnect, device number 123 [ 1774.530491][T12131] udevd[12131]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1775.299217][T23417] net_ratelimit: 35 callbacks suppressed [ 1775.299241][T23417] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1775.418224][T23417] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1775.538120][T23452] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1775.588815][T20831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1775.613687][T25928] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1775.650639][T23454] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1775.768182][T23452] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1775.813765][T25933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5456'. [ 1775.878193][T23454] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1775.914925][T25933] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5456'. [ 1775.989867][T23414] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1776.098113][T23417] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1776.208088][T23414] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1776.768052][T25939] bond9: entered promiscuous mode [ 1776.783651][T25939] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1777.305318][T25942] input: syz1 as /devices/virtual/input/input102 [ 1777.588599][T17354] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1777.750719][T17354] usb 5-1: Using ep0 maxpacket: 16 [ 1777.757833][T17354] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1777.777792][T17354] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.786954][T17354] usb 5-1: Product: syz [ 1777.791697][T17354] usb 5-1: Manufacturer: syz [ 1777.796483][T17354] usb 5-1: SerialNumber: syz [ 1777.803450][T17354] usb 5-1: config 0 descriptor?? [ 1778.101838][T25947] netlink: 'syz.6.5459': attribute type 1 has an invalid length. [ 1778.137322][T25947] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5459'. [ 1778.159384][T25951] trusted_key: encrypted_key: insufficient parameters specified [ 1778.237483][T17354] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1778.248447][T17354] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1778.259522][T17354] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1778.267707][T17354] usb 5-1: media controller created [ 1778.281623][T17354] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1778.398158][T20407] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1778.468114][T20831] usb 1-1: new full-speed USB device number 124 using dummy_hcd [ 1778.550965][T13457] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 1778.558708][T20407] usb 3-1: Using ep0 maxpacket: 32 [ 1778.567109][T13457] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1778.578879][T20407] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1778.588684][T20407] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1778.646349][T20407] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 2080, setting to 1024 [ 1778.658734][T20407] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1778.730987][T20407] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1778.741523][T20407] usb 3-1: Product: syz [ 1778.742810][T25959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1778.745788][T20407] usb 3-1: Manufacturer: syz [ 1778.745811][T20407] usb 3-1: SerialNumber: syz [ 1778.753794][T25950] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1778.829753][T17354] zl10353_read_register: readreg error (reg=127, ret==0) [ 1778.831300][T25959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1778.858460][T17354] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1778.866637][T17354] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1778.975081][T20407] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1778.982827][T20407] usb 3-1: MIDIStreaming interface descriptor not found [ 1779.021208][T20831] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1779.032221][T20831] usb 1-1: no configurations [ 1779.043399][T20831] usb 1-1: can't read configurations, error -22 [ 1779.172517][T25950] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5461'. [ 1779.262850][T25950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1779.303682][T25950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1779.342162][T25950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1779.396119][T25950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1779.426533][T25950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1779.453695][T25950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1779.529284][T25957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1779.715804][T20407] usb 3-1: USB disconnect, device number 67 [ 1779.771746][T12131] udevd[12131]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1779.940162][ T30] audit: type=1400 audit(1787316643.493:7114): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=25967 comm="syz.0.5464" [ 1780.057085][T20831] usb 5-1: USB disconnect, device number 101 [ 1780.094570][T20831] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1780.358214][T23452] net_ratelimit: 35 callbacks suppressed [ 1780.358238][T23452] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1780.408906][T20407] usb 1-1: new full-speed USB device number 126 using dummy_hcd [ 1780.478259][T23454] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1780.568832][T20407] usb 1-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 1780.579383][T20407] usb 1-1: config 0 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1780.593207][T20407] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1780.598127][T23452] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1780.600397][T20407] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1780.624306][T20407] usb 1-1: config 0 descriptor?? [ 1780.648874][T20407] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1780.677088][T25982] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1780.708255][T23454] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1780.818044][T23454] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1780.928108][T23454] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1781.048229][T23452] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1781.135247][T25984] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5468'. [ 1781.158131][T23452] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1781.278956][T23454] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1781.388149][T23414] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1781.409921][T20407] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 1781.568852][T20407] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1781.585948][T20407] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 351, setting to 64 [ 1781.596878][T20407] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.607113][T20407] usb 5-1: config 0 descriptor?? [ 1781.615868][T25984] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 1781.834568][T25989] bond0: Device is already in use. [ 1781.885093][T20407] ath6kl: Failed to submit usb control message: -71 [ 1781.892840][T20407] ath6kl: unable to send the bmi data to the device: -71 [ 1781.900303][T20407] ath6kl: Unable to send get target info: -71 [ 1781.927501][ C1] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 1781.935130][ C1] bridge0: topology change detected, propagating [ 1781.956549][T20407] ath6kl: Failed to init ath6kl core: -71 [ 1781.974475][T20407] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1782.027084][T20407] usb 5-1: USB disconnect, device number 102 [ 1782.538482][T17354] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1782.690156][T17354] usb 3-1: Using ep0 maxpacket: 16 [ 1782.699340][T17354] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1782.707183][T17354] usb 3-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1782.718176][T17354] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1782.728916][T17354] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1782.742298][T17354] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.750944][T17354] usb 3-1: Product: syz [ 1782.755238][T17354] usb 3-1: Manufacturer: syz [ 1782.760240][T17354] usb 3-1: SerialNumber: syz [ 1782.898942][T13457] usb 1-1: USB disconnect, device number 126 [ 1783.080722][T25998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1783.093245][T25998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1783.123046][T17354] usb 3-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1783.140484][T17354] usb 3-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1783.186981][T17354] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1783.201919][T17354] usb 3-1: USB disconnect, device number 68 [ 1783.223951][T12255] udevd[12255]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1783.467842][T26003] fuse: blksize only supported for fuseblk [ 1783.573437][T26006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1783.596815][T26006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1783.625052][T26006] netlink: 'syz.5.5473': attribute type 12 has an invalid length. [ 1783.641464][T26006] program syz.5.5473 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1785.368342][T20831] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1785.388327][T23417] net_ratelimit: 39 callbacks suppressed [ 1785.388345][T23417] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1785.508217][T23450] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1785.539499][T20831] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1785.551198][T20831] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1785.562235][T20831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1785.581777][T20831] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1785.607638][T26026] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 1785.623383][T26026] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 1785.648223][T26026] mac80211_hwsim hwsim11 syzkaller0: Caught tx_queue_len zero misconfig [ 1785.728120][T23450] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1785.753966][T26026] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1785.838308][T23450] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1785.948398][T23450] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1786.035316][T26033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5476'. [ 1786.100104][T26030] bond13: Unable to set up delay as MII monitoring is disabled [ 1786.143636][T26030] bond13 (unregistering): Released all slaves [ 1786.230207][T23417] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1786.359117][T23417] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1786.478399][T23417] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1786.588229][T23417] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1786.698408][T23414] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1786.792217][ T30] audit: type=1326 audit(1787316650.343:7115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26028 comm="syz.0.5479" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75f799e0d9 code=0x0 [ 1786.959080][T20831] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 1786.967393][T20831] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 1786.968371][T26044] netlink: 'syz.4.5480': attribute type 1 has an invalid length. [ 1787.001155][T20831] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1787.014375][T20831] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 1787.032339][T20831] usb 3-1: USB disconnect, device number 69 [ 1788.362763][T26057] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1789.248712][T17354] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1789.408111][T17354] usb 5-1: Using ep0 maxpacket: 32 [ 1789.414301][T17354] usb 5-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 1789.425911][T17354] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1789.439310][T17354] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1789.450908][T17354] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1789.464076][T17354] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.475397][T17354] usb 5-1: config 0 descriptor?? [ 1789.719004][ T30] audit: type=1326 audit(1787316653.273:7116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26060 comm="syz.6.5484" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe9e39e0d9 code=0x0 [ 1789.816033][ T30] audit: type=1326 audit(1787316653.363:7117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26062 comm="syz.4.5485" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ff399e0d9 code=0x0 [ 1789.888340][T26063] nvme nvme0: rdma connection establishment failed (-104) [ 1789.975047][T20831] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 1789.982899][T20831] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 1789.990822][T20831] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 1789.999123][T20831] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 1790.006742][T20831] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 1790.016963][T20831] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 1790.031333][T20831] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [] on [ 1790.123690][T26059] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1790.218294][T17354] usbhid 5-1:0.0: can't add hid device: -71 [ 1790.224669][T17354] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1790.246038][T17354] usb 5-1: USB disconnect, device number 103 [ 1790.428272][T10528] net_ratelimit: 36 callbacks suppressed [ 1790.428290][T10528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1790.553631][T23450] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1790.679231][T23450] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1790.788564][T20831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1790.808090][T23450] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1790.928616][T10528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1791.048162][T23417] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1791.158728][T23452] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1791.275655][T10528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1791.388739][T10528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1791.513096][T26086] fuse: Invalid rootmode [ 1792.160092][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.166570][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.418507][T20831] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1792.582674][T20831] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1792.591669][T20831] usb 5-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=7a.1f [ 1792.607314][T20831] usb 5-1: config 3 has an invalid interface number: 4 but max is 0 [ 1792.617255][T20831] usb 5-1: config 3 has no interface number 0 [ 1792.624110][T20831] usb 5-1: config 3 interface 4 altsetting 184 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1792.639018][T20831] usb 5-1: config 3 interface 4 has no altsetting 0 [ 1792.649512][T20831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1792.657859][T20831] usb 5-1: Product: syz [ 1792.662579][T20831] usb 5-1: Manufacturer: syz [ 1792.667331][T20831] usb 5-1: SerialNumber: syz [ 1792.917037][T26099] tipc: Resetting bearer [ 1792.924155][T26102] netlink: 'syz.2.5492': attribute type 1 has an invalid length. [ 1792.986514][T20831] radio-si470x 5-1:3.4: could not find interrupt in endpoint [ 1792.994335][T20831] radio-si470x 5-1:3.4: probe with driver radio-si470x failed with error -5 [ 1793.004030][T20831] usbhid 5-1:3.4: couldn't find an input interrupt endpoint [ 1793.023644][T20831] usb 5-1: USB disconnect, device number 104 [ 1793.228846][T17354] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1793.398879][T17354] usb 3-1: Using ep0 maxpacket: 8 [ 1793.405744][T17354] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1793.418409][T17354] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1793.430120][T17354] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1021 [ 1793.451022][T17354] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.459307][T17354] usb 3-1: Product: syz [ 1793.467245][T17354] usb 3-1: Manufacturer: syz [ 1793.473016][T17354] usb 3-1: SerialNumber: syz [ 1793.722422][T17354] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 1793.730041][T17354] cdc_ncm 3-1:1.0: bind() failure [ 1793.740821][T17354] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1793.753075][T17354] cdc_ncm 3-1:1.1: bind() failure [ 1793.764634][T17354] usb 3-1: USB disconnect, device number 70 [ 1793.948070][T13457] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1794.109342][T13457] usb 1-1: Using ep0 maxpacket: 32 [ 1794.118479][T13457] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1794.127821][T13457] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1794.140687][T13457] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 2080, setting to 1024 [ 1794.157670][T13457] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1794.190619][T13457] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.199254][T13457] usb 1-1: Product: syz [ 1794.203448][T13457] usb 1-1: Manufacturer: syz [ 1794.208495][T13457] usb 1-1: SerialNumber: syz [ 1794.219918][T26111] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1794.244702][T13457] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1794.253019][T13457] usb 1-1: MIDIStreaming interface descriptor not found [ 1794.368550][ T188] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1794.462448][T26109] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5494'. [ 1794.527883][T26111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1794.528126][ T188] usb 5-1: Using ep0 maxpacket: 8 [ 1794.544880][T26111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1794.556184][ T188] usb 5-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 1794.579707][ T188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.587819][ T188] usb 5-1: Product: syz [ 1794.592538][ T188] usb 5-1: Manufacturer: syz [ 1794.597255][ T188] usb 5-1: SerialNumber: syz [ 1794.664257][T26109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1794.702012][T26109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1794.757328][T26109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1794.801487][T26109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1795.007050][ T188] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1795.010539][T13457] usb 1-1: USB disconnect, device number 127 [ 1795.100116][ T188] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1795.117054][ T188] usb 5-1: USB disconnect, device number 105 [ 1795.146108][T15934] udevd[15934]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1795.499067][T23454] net_ratelimit: 31 callbacks suppressed [ 1795.499111][T23454] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1795.618179][T10528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1795.728607][T23414] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1795.838226][T23450] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1795.952415][T23450] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1796.082915][T23417] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1796.199168][T10528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1796.308286][T23417] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1796.365446][T26137] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5499'. [ 1796.416318][T26137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1796.428297][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1796.488801][T26131] netlink: 'syz.6.5497': attribute type 61 has an invalid length. [ 1797.058739][T26143] syzkaller0: entered promiscuous mode [ 1797.080048][T26143] syzkaller0: entered allmulticast mode [ 1797.158625][T13457] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1797.328286][T13457] usb 5-1: Using ep0 maxpacket: 32 [ 1797.334805][T13457] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1797.346397][T13457] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1797.356279][T13457] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1797.365137][T13457] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1797.374713][T13457] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1797.385325][T13457] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1797.395182][T13457] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1797.408795][T13457] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1797.419965][T13457] usb 5-1: config 0 descriptor?? [ 1797.645333][T13457] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 106 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1797.800207][T26153] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5502'. [ 1797.848390][T26153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1797.903351][T26153] loop8: detected capacity change from 0 to 7 [ 1797.976717][T26153] Dev loop8: unable to read RDB block 7 [ 1797.998202][T26153] loop8: unable to read partition table [ 1798.005948][T26153] loop8: partition table beyond EOD, truncated [ 1798.019993][T26153] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1798.372710][T20831] usb 5-1: USB disconnect, device number 106 [ 1798.396657][T20831] usblp0: removed [ 1798.750392][T26157] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1800.428040][T13457] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1800.538238][T10528] net_ratelimit: 48 callbacks suppressed [ 1800.538258][T10528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1800.578045][T13457] usb 3-1: Using ep0 maxpacket: 32 [ 1800.587792][T13457] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1800.596081][T13457] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1800.607595][T13457] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 2080, setting to 1024 [ 1800.619198][T13457] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1800.637768][T13457] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.646421][T13457] usb 3-1: Product: syz [ 1800.651084][T13457] usb 3-1: Manufacturer: syz [ 1800.656754][T13457] usb 3-1: SerialNumber: syz [ 1800.658153][T23450] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1800.698661][T26182] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1800.726610][T13457] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1800.733949][T13457] usb 3-1: MIDIStreaming interface descriptor not found [ 1800.778117][T23450] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1800.888077][T23414] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1800.946914][T26182] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5509'. [ 1800.998717][T23450] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1801.028904][T26182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1801.072722][T26182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1801.109593][T10528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1801.123013][T26182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1801.148451][T26182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1801.186943][T26182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1801.210687][T26182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1801.228142][T23414] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1801.355920][T13457] usb 3-1: USB disconnect, device number 71 [ 1801.450516][T12924] udevd[12924]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1801.488882][T23417] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1801.601341][T23454] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1801.718552][T23454] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1801.728785][T26189] netlink: 'syz.0.5520': attribute type 1 has an invalid length. [ 1801.783332][T26195] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 1801.913270][T26195] nvme nvme0: failed to connect socket: -101 [ 1802.048079][ T188] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1802.208471][ T188] usb 1-1: Using ep0 maxpacket: 8 [ 1802.219563][ T188] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1802.231810][ T188] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1802.242546][ T188] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1021 [ 1802.256009][ T188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.266131][ T188] usb 1-1: Product: syz [ 1802.271535][ T188] usb 1-1: Manufacturer: syz [ 1802.276591][ T188] usb 1-1: SerialNumber: syz [ 1802.442918][T26205] netlink: 'syz.5.5512': attribute type 4 has an invalid length. [ 1802.457989][T26206] netlink: 'syz.2.5513': attribute type 4 has an invalid length. [ 1802.531168][ T188] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1802.539028][ T188] cdc_ncm 1-1:1.0: bind() failure [ 1802.550137][ T188] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1802.557503][ T188] cdc_ncm 1-1:1.1: bind() failure [ 1802.574175][ T188] usb 1-1: USB disconnect, device number 2 [ 1802.973760][T26194] xt_nfacct: accounting object `syz0' does not exist [ 1803.730631][T26213] bridge0: entered allmulticast mode [ 1803.824608][T26215] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5514'. [ 1803.865744][T26215] tipc: Enabling of bearer rejected, media not registered [ 1804.522162][ T30] audit: type=1326 audit(1787316668.073:7118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26218 comm="syz.6.5516" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe9e39e0d9 code=0x0 [ 1805.138836][T17354] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 1805.153963][T17354] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1805.463323][T26237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1805.481927][T26237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1805.589025][T23417] net_ratelimit: 38 callbacks suppressed [ 1805.589049][T23417] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1805.598777][T10528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1805.609187][T23417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1805.708112][T23454] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1805.818881][T23414] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1805.929592][T23414] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1805.989561][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1806.038283][T23414] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1806.155223][T23414] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1806.231032][T23452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1806.244012][T17354] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1806.399654][T17354] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1806.412833][T17354] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 1806.423923][T17354] usb 3-1: config 0 has no interface number 0 [ 1806.430418][T17354] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1806.446905][T17354] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1806.456589][T17354] usb 3-1: Product: syz [ 1806.461457][T17354] usb 3-1: Manufacturer: syz [ 1806.466324][T17354] usb 3-1: SerialNumber: syz [ 1806.474329][T17354] usb 3-1: config 0 descriptor?? [ 1806.489202][T17354] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 1806.798152][T17354] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1806.914606][ C1] usb 3-1: yurex_control_callback - control failed: -2 [ 1806.950296][T17354] usb 1-1: Using ep0 maxpacket: 32 [ 1806.964105][T17354] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1806.972523][T17354] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1806.982478][T26248] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1806.983561][T17354] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 2080, setting to 1024 [ 1807.002102][T17354] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1807.027068][T17354] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1807.035733][T17354] usb 1-1: Product: syz [ 1807.040127][T17354] usb 1-1: Manufacturer: syz [ 1807.044933][T17354] usb 1-1: SerialNumber: syz [ 1807.064979][T26250] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1807.090369][T17354] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1807.098278][T17354] usb 1-1: MIDIStreaming interface descriptor not found [ 1807.310369][T26250] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5524'. [ 1807.419188][T26250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1807.484175][T26250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1807.552427][T26250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1807.622440][T26250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1807.714162][T26250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1807.793759][T26250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1808.071406][T17354] usb 1-1: USB disconnect, device number 3 [ 1808.180527][T12924] udevd[12924]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1808.403782][T26266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1808.421172][T26266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1808.783782][T26268] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5527'. [ 1808.822693][T26268] ip6tnl3: entered allmulticast mode [ 1808.847242][T26268] netlink: 156 bytes leftover after parsing attributes in process `syz.6.5527'. [ 1809.193844][T26275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1809.209080][T26275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1809.301999][T26275] input: syz1 as /devices/virtual/input/input103 [ 1809.370470][T25614] usb 3-1: USB disconnect, device number 72 [ 1809.372885][T26275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1809.390617][T25614] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 1809.405256][T26275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1809.588315][T17354] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1809.610465][T26283] syz_tun: entered allmulticast mode [ 1809.619398][T26283] gre0: Caught tx_queue_len zero misconfig [ 1809.719509][T26286] tipc: Failed to remove unknown binding: 66,0,0/3106904214:729186848/729186849 [ 1809.731428][T26286] tipc: Failed to remove unknown binding: 66,0,0/3106904214:729186848/729186849 [ 1809.741326][T17354] usb 5-1: Using ep0 maxpacket: 16 [ 1809.749283][T17354] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1809.757313][T17354] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 1809.771026][T17354] usb 5-1: config 9 has an invalid interface number: 57 but max is 0 [ 1809.779745][T17354] usb 5-1: config 9 has no interface number 0 [ 1809.786084][T17354] usb 5-1: config 9 interface 57 has no altsetting 0 [ 1809.801800][T17354] usb 5-1: string descriptor 0 read error: -22 [ 1809.808621][T17354] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1810.000832][T26289] pim6reg: entered allmulticast mode [ 1810.030852][T26289] pim6reg: left allmulticast mode [ 1810.095942][T26277] bond3: entered allmulticast mode [ 1810.111280][T26277] ip6gre1: entered allmulticast mode [ 1810.231462][T26277] dvmrp8: entered allmulticast mode [ 1810.580282][ T30] audit: type=1800 audit(1787316674.133:7119): pid=26294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5534" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1810.789291][T23452] net_ratelimit: 57 callbacks suppressed [ 1810.789314][T23452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1810.806848][T23452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1810.858211][T23452] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1810.869151][T26276] bond3: left allmulticast mode [ 1810.907022][T26276] ip6gre1: left allmulticast mode [ 1811.066198][T17354] video4linux radio48: keene_cmd_set failed (-71) [ 1811.078770][T17354] radio-keene 5-1:9.57: V4L2 device registered as radio48 [ 1811.091299][T17354] usb 5-1: USB disconnect, device number 107 [ 1811.178663][T23414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1811.350840][T23414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1811.362901][T25614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1811.378344][T23414] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1811.488729][T23414] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1811.604072][T23452] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1811.758916][T23452] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1812.783329][T26313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1812.835981][T26313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1813.585730][T26321] netlink: 'syz.2.5539': attribute type 1 has an invalid length. [ 1813.878090][T17354] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1814.028105][T17354] usb 3-1: Using ep0 maxpacket: 8 [ 1814.036683][T17354] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1814.051092][T17354] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1814.066373][T17354] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1021 [ 1814.083092][T17354] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1814.092551][T17354] usb 3-1: Product: syz [ 1814.097275][T17354] usb 3-1: Manufacturer: syz [ 1814.102089][T17354] usb 3-1: SerialNumber: syz [ 1814.240049][T26325] netlink: 'syz.6.5540': attribute type 1 has an invalid length. [ 1814.416741][T17354] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 1814.424117][T17354] cdc_ncm 3-1:1.0: bind() failure [ 1814.433963][T17354] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1814.442570][T17354] cdc_ncm 3-1:1.1: bind() failure [ 1814.461167][T17354] usb 3-1: USB disconnect, device number 73 [ 1815.898472][T23414] net_ratelimit: 53 callbacks suppressed [ 1815.898497][T23414] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1816.018451][T10528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1816.138370][T10528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1816.248311][T10528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1816.338056][T25614] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1816.358089][T23417] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1816.358410][T10528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1816.376904][T10528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1816.468070][T26344] bridge0: port 3(vlan6) entered blocking state [ 1816.474708][T26344] bridge0: port 3(vlan6) entered disabled state [ 1816.484101][T26344] vlan6: entered allmulticast mode [ 1816.489930][T26344] geneve0: entered allmulticast mode [ 1816.490394][T25614] usb 3-1: Using ep0 maxpacket: 32 [ 1816.504109][T25614] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1816.515888][T26344] vlan6: entered promiscuous mode [ 1816.521516][T26344] geneve0: entered promiscuous mode [ 1816.527390][T25614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1816.535871][T25614] usb 3-1: Product: syz [ 1816.540459][T25614] usb 3-1: Manufacturer: syz [ 1816.545186][T25614] usb 3-1: SerialNumber: syz [ 1816.563433][T25614] usb 3-1: config 0 descriptor?? [ 1816.573084][T25614] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1816.581884][T25614] dvb-usb: bulk message failed: -22 (2/0) [ 1816.600211][T25614] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1816.613348][T25614] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1816.622102][T25614] usb 3-1: media controller created [ 1816.628382][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1816.660196][T25614] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1816.684056][T25614] usb 3-1: selecting invalid altsetting 7 [ 1816.690857][T25614] cxusb: set interface failed [ 1816.695692][T25614] dvb-usb: bulk message failed: -22 (1/0) [ 1816.728211][T25614] DVB: Unable to find symbol lgdt330x_attach() [ 1816.734684][T25614] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1816.768550][T10528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1816.809299][T25614] rc_core: IR keymap rc-dvico-portable not found [ 1816.820299][T25614] Registered IR keymap rc-empty [ 1816.833094][T25614] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 1816.845975][T25614] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input104 [ 1816.858361][T25614] dvb-usb: schedule remote query interval to 100 msecs. [ 1816.865490][T25614] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1816.958123][T23417] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1816.971888][T25614] dvb-usb: bulk message failed: -22 (1/0) [ 1817.117521][T25614] dvb-usb: bulk message failed: -22 (1/0) [ 1817.228603][ T188] dvb-usb: bulk message failed: -22 (1/0) [ 1817.339331][ T188] dvb-usb: bulk message failed: -22 (1/0) [ 1817.449112][ T188] dvb-usb: bulk message failed: -22 (1/0) [ 1817.558739][ T188] dvb-usb: bulk message failed: -22 (1/0) [ 1817.675098][ T188] dvb-usb: bulk message failed: -22 (1/0) [ 1817.788458][ T188] dvb-usb: bulk message failed: -22 (1/0) [ 1817.903909][ T188] dvb-usb: bulk message failed: -22 (1/0) [ 1818.018009][ T188] dvb-usb: bulk message failed: -22 (1/0) [ 1818.128069][ T188] dvb-usb: bulk message failed: -22 (1/0) [ 1818.238046][ T188] dvb-usb: bulk message failed: -22 (1/0) [ 1818.348036][ T188] dvb-usb: bulk message failed: -22 (1/0) [ 1818.458102][ T188] dvb-usb: bulk message failed: -22 (1/0) [ 1818.568020][ T188] dvb-usb: bulk message failed: -22 (1/0) [ 1818.678043][ T188] dvb-usb: bulk message failed: -22 (1/0) [ 1818.788115][ T188] dvb-usb: bulk message failed: -22 (1/0) [ 1818.898032][ T188] dvb-usb: bulk message failed: -22 (1/0) [ 1819.008068][ T188] dvb-usb: bulk message failed: -22 (1/0) [ 1819.118088][ T188] dvb-usb: bulk message failed: -22 (1/0) [ 1819.228055][ T188] dvb-usb: bulk message failed: -22 (1/0) [ 1819.314866][T26363] bond6: entered promiscuous mode [ 1819.339024][T25614] dvb-usb: bulk message failed: -22 (1/0) [ 1819.353238][T26366] fuse: Unknown parameter 'max_re' [ 1819.360513][T26363] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1819.448105][ T188] dvb-usb: bulk message failed: -22 (1/0) [ 1819.558056][ T188] dvb-usb: bulk message failed: -22 (1/0) [ 1819.669153][ T188] dvb-usb: bulk message failed: -22 (1/0) [ 1819.778426][ T188] dvb-usb: bulk message failed: -22 (1/0) [ 1819.839640][T26370] bridge0: entered promiscuous mode [ 1819.857064][T26370] bridge0: entered allmulticast mode [ 1819.888529][ T188] dvb-usb: bulk message failed: -22 (1/0) [ 1819.932615][T26377] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5549'. [ 1819.955713][T26377] tipc: Enabling of bearer rejected, media not registered [ 1819.998317][ T188] dvb-usb: bulk message failed: -22 (1/0) [ 1820.089931][ T188] usb 3-1: USB disconnect, device number 74 [ 1820.135986][ T188] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1820.631990][ T30] audit: type=1326 audit(1787316684.183:7120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26381 comm="syz.6.5552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9e39e0d9 code=0x7ffc0000 [ 1820.660823][ T30] audit: type=1326 audit(1787316684.183:7121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26381 comm="syz.6.5552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9e39e0d9 code=0x7ffc0000 [ 1820.689478][ T30] audit: type=1326 audit(1787316684.183:7122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26381 comm="syz.6.5552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9e39e0d9 code=0x7ffc0000 [ 1820.724073][ T30] audit: type=1326 audit(1787316684.183:7123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26381 comm="syz.6.5552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9e39e0d9 code=0x7ffc0000 [ 1820.749302][ T30] audit: type=1326 audit(1787316684.183:7124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26381 comm="syz.6.5552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7efe9e39e0d9 code=0x7ffc0000 [ 1820.774799][ T30] audit: type=1326 audit(1787316684.183:7125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26381 comm="syz.6.5552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9e39e0d9 code=0x7ffc0000 [ 1820.804637][ T30] audit: type=1326 audit(1787316684.183:7126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26381 comm="syz.6.5552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9e39e0d9 code=0x7ffc0000 [ 1820.838655][ T30] audit: type=1326 audit(1787316684.183:7127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26381 comm="syz.6.5552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9e39e0d9 code=0x7ffc0000 [ 1820.864427][ T30] audit: type=1326 audit(1787316684.183:7128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26381 comm="syz.6.5552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9e39e0d9 code=0x7ffc0000 [ 1820.892947][ T30] audit: type=1326 audit(1787316684.183:7129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26381 comm="syz.6.5552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7efe9e39e0d9 code=0x7ffc0000 [ 1820.938664][T10524] net_ratelimit: 50 callbacks suppressed [ 1820.938688][T10524] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1820.956516][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1821.058241][T10524] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1821.180189][T23454] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1821.189058][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1821.229318][T23454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1821.288423][T10524] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1821.402799][T26376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1821.416410][T10528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1821.475870][T26376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1821.512333][T26394] netlink: 'syz.4.5550': attribute type 61 has an invalid length. [ 1821.999425][T26398] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1822.207091][T26399] xt_NFQUEUE: number of total queues is 0 [ 1824.090581][T26425] misc userio: Invalid payload size [ 1825.482954][T26448] random: crng reseeded on system resumption [ 1825.958123][T23417] net_ratelimit: 59 callbacks suppressed [ 1825.958146][T23417] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1826.273060][T26462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1826.365955][T26462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1826.429549][T23417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1826.439780][T23417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1826.486028][T26462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1826.533937][T26462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1826.586372][T26462] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1826.597592][T26462] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1826.751935][T26462] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1826.806620][T23414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1826.818542][T23454] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1826.938203][T23417] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1827.050805][T23452] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1827.114017][T26469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1827.126083][T26469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1827.142994][T26469] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5570'. [ 1827.154148][T26469] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5570'. [ 1827.166934][T26469] fuse: Invalid rootmode [ 1827.171475][T23454] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1827.228617][T26467] netlink: 'syz.0.5571': attribute type 1 has an invalid length. [ 1827.266175][T26467] bond15: entered promiscuous mode [ 1827.268633][T17358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1827.278505][T26467] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1827.476609][T26467] vlan5: entered allmulticast mode [ 1827.489864][T26467] bond15: entered allmulticast mode [ 1827.552951][ T30] kauditd_printk_skb: 114 callbacks suppressed [ 1827.552972][ T30] audit: type=1326 audit(1787316691.103:7244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26466 comm="syz.0.5571" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f75f799e0d9 code=0x0 [ 1827.607135][T26470] bond15: (slave bridge6): making interface the new active one [ 1827.628100][T26470] bridge6: entered promiscuous mode [ 1827.645613][T26470] bridge6: entered allmulticast mode [ 1827.676332][T26470] bond15: (slave bridge6): Enslaving as an active interface with an up link [ 1827.894123][T26478] program syz.2.5572 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1828.197033][T26482] trusted_key: encrypted_key: insufficient parameters specified [ 1828.379217][T26488] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5574'. [ 1828.423939][T26490] input input105: cannot allocate more than FF_MAX_EFFECTS effects [ 1828.468285][T20407] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 1828.685876][T26482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1828.729013][T26482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1828.773527][T20407] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1828.783242][T20407] usb 1-1: no configurations [ 1828.791236][T20407] usb 1-1: can't read configurations, error -22 [ 1829.609816][T26503] trusted_key: encrypted_key: insufficient parameters specified [ 1829.910979][T26501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1829.946058][T26501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1830.008112][T20407] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 1830.220388][T26503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1830.274954][T26503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1830.359702][T20407] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1830.369464][T20407] usb 1-1: no configurations [ 1830.377510][T20407] usb 1-1: can't read configurations, error -22 [ 1831.078512][T10528] net_ratelimit: 47 callbacks suppressed [ 1831.078529][T10528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1831.189381][T10528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1831.201068][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1831.208280][T10524] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1831.245925][T10524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1831.318205][T10524] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1831.382708][T26519] tunl0: Caught tx_queue_len zero misconfig [ 1831.389374][T26519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5583'. [ 1831.418020][T25614] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1831.498141][T10524] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1831.589590][T25614] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1831.600586][T25614] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1831.608100][T10528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1831.629337][T25614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1831.642887][T25614] usb 5-1: Product: syz [ 1831.647141][T25614] usb 5-1: Manufacturer: syz [ 1831.653040][T25614] usb 5-1: SerialNumber: syz [ 1831.728208][T10524] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1831.833622][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1831.885214][T25614] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 108 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1832.165013][T20407] usb 5-1: USB disconnect, device number 108 [ 1832.182002][T20407] usblp0: removed [ 1832.346006][T26526] loop6: detected capacity change from 0 to 524288000 [ 1832.801076][T26531] tipc: New replicast peer: 127.0.0.2 [ 1832.832626][T26531] tipc: Enabled bearer , priority 10 [ 1832.867360][T26531] tipc: Disabling bearer [ 1832.996672][T26531] ipt_REJECT: ECHOREPLY no longer supported. [ 1833.065577][T26532] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1833.139921][T26532] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1833.307626][T26535] netlink: 'syz.6.5587': attribute type 1 has an invalid length. [ 1833.716693][T26542] trusted_key: encrypted_key: insufficient parameters specified [ 1833.886925][T26545] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5589'. [ 1834.009352][T17358] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 1834.210136][T26542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1834.239643][T26542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1834.289506][T17358] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1834.299352][T17358] usb 1-1: no configurations [ 1834.305228][T17358] usb 1-1: can't read configurations, error -22 [ 1834.398769][T26548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5591'. [ 1834.617813][T26551] binder: BINDER_SET_CONTEXT_MGR already set [ 1834.629220][T26551] binder: 26550:26551 ioctl 4018620d 200000000100 returned -16 [ 1834.662675][T26551] binder: BINDER_SET_CONTEXT_MGR already set [ 1834.677111][T26551] binder: 26550:26551 ioctl 4018620d 200000004a80 returned -16 [ 1834.802847][T25614] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1834.978924][T25614] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1834.999384][T25614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.008136][T25614] usb 3-1: Product: syz [ 1835.012476][T25614] usb 3-1: Manufacturer: syz [ 1835.017213][T25614] usb 3-1: SerialNumber: syz [ 1836.128845][T23452] net_ratelimit: 53 callbacks suppressed [ 1836.128878][T23452] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1836.249147][T23417] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1836.312174][T23452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1836.390882][T17358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1836.508516][T23414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1836.518935][T23414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1836.558120][T10528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1836.668096][T23414] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1836.780801][T23414] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1836.808194][T23414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1837.484214][T25614] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1837.500093][T25614] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1837.510934][T25614] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1837.523910][T25614] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1837.542307][T25614] usb 3-1: USB disconnect, device number 75 [ 1837.786605][T26590] kvm_pr_unimpl_wrmsr: 284 callbacks suppressed [ 1837.786621][T26590] kvm: kvm [26589]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x2 [ 1837.921200][T26590] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5602'. [ 1838.018189][T25614] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1838.188110][T25614] usb 3-1: Using ep0 maxpacket: 8 [ 1838.196310][T25614] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1838.208560][T25614] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1838.218487][T25614] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1838.229355][T25614] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1838.241374][T25614] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1838.252450][T25614] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1838.266837][T25614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1838.548565][T25614] usb 3-1: usb_control_msg returned -32 [ 1838.564129][T25614] usbtmc 3-1:16.0: can't read capabilities [ 1838.979813][T26593] syz.5.5602 (26593): drop_caches: 2 [ 1839.070603][T26595] usbtmc 3-1:16.0: control status returned 0 [ 1839.412162][T25614] usb 3-1: USB disconnect, device number 76 [ 1839.587650][T26599] trusted_key: encrypted_key: insufficient parameters specified [ 1839.848151][T25614] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 1840.074146][T26599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1840.121300][T26599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1840.183485][T25614] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1840.195584][T25614] usb 1-1: no configurations [ 1840.200896][T25614] usb 1-1: can't read configurations, error -22 [ 1840.342552][T10528] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 1840.360355][T26610] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 1840.528174][T17354] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1840.709164][T17354] usb 3-1: Using ep0 maxpacket: 8 [ 1840.724413][T17354] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1840.736667][T17354] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1840.747428][T17354] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1840.757670][T17354] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1840.770783][T17354] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.778896][T17354] usb 3-1: Product: syz [ 1840.783431][T17354] usb 3-1: Manufacturer: syz [ 1840.789019][T17354] usb 3-1: SerialNumber: syz [ 1841.037204][T26608] nvme nvme0: failed to connect socket: -101 [ 1841.061788][T26618] xt_l2tp: invalid flags combination: 4 [ 1841.231347][T23452] net_ratelimit: 59 callbacks suppressed [ 1841.231369][T23452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1841.233395][T10528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1841.256169][T26622] input: syz1 as /devices/virtual/input/input106 [ 1841.358270][T10524] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1841.478140][T10524] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1841.492696][T17354] usb 3-1: clock source 0 is not valid, cannot use [ 1841.568012][T17358] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1841.588124][T10524] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1841.708317][T23414] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1841.728172][T17358] usb 1-1: Using ep0 maxpacket: 16 [ 1841.734551][T17358] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1841.747818][T17358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1841.756534][T17358] usb 1-1: Product: syz [ 1841.761251][T17358] usb 1-1: Manufacturer: syz [ 1841.765894][T17358] usb 1-1: SerialNumber: syz [ 1841.775664][T17358] usb 1-1: config 0 descriptor?? [ 1841.791822][T26612] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 1841.818583][T23414] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1841.928339][T23452] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1842.019347][T17354] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 1842.026362][T17354] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1842.039272][T23452] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1842.068484][T23452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1842.119426][T17354] usb 3-1: USB disconnect, device number 77 [ 1842.240912][T17358] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1842.263809][T17358] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1842.275533][T17358] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1842.284078][T17358] usb 1-1: media controller created [ 1842.297725][T17358] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1842.554774][T17354] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 1842.581934][T17354] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1842.848507][T17358] zl10353_read_register: readreg error (reg=127, ret==0) [ 1842.856057][T17358] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1842.865063][T17358] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1842.898171][T26628] netlink: 'syz.5.5609': attribute type 1 has an invalid length. [ 1842.956263][T26628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1842.987370][T26628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1843.398196][T26635] xt_CT: No such helper "netbios-ns" [ 1843.659945][T26623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1844.017073][T20407] usb 1-1: USB disconnect, device number 12 [ 1844.055476][T20407] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1845.419849][T26656] netlink: 'syz.0.5617': attribute type 1 has an invalid length. [ 1845.681110][T20407] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1845.818454][T25614] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1845.838315][T20407] usb 1-1: Using ep0 maxpacket: 8 [ 1845.848427][T20407] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1845.860828][T20407] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1845.871075][T20407] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1021 [ 1845.886286][T20407] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1845.895429][T20407] usb 1-1: Product: syz [ 1845.899836][T20407] usb 1-1: Manufacturer: syz [ 1845.904522][T20407] usb 1-1: SerialNumber: syz [ 1846.132301][T20407] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1846.139730][T20407] cdc_ncm 1-1:1.0: bind() failure [ 1846.151665][T20407] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1846.158730][T20407] cdc_ncm 1-1:1.1: bind() failure [ 1846.169530][T20407] usb 1-1: USB disconnect, device number 13 [ 1846.239677][T10528] net_ratelimit: 56 callbacks suppressed [ 1846.239701][T10528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1846.469667][T23454] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1846.592231][T23417] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1846.618748][T23452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1846.627667][T23452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1846.709957][T23417] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1846.810473][T23454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1846.828509][T23417] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1846.938033][T23454] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1847.030635][T17358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1847.669593][T26678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1849.336809][T26690] netlink: 'syz.5.5625': attribute type 1 has an invalid length. [ 1849.396831][T26686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1849.419839][T26686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1849.860516][T26697] netlink: 'syz.6.5626': attribute type 4 has an invalid length. [ 1850.389351][T26702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1850.415927][T26702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1850.968427][T26710] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1850.975017][T26710] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1851.067642][T26710] vhci_hcd vhci_hcd.0: Device attached [ 1851.231041][T26710] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 1851.248104][ C0] net_ratelimit: 1224 callbacks suppressed [ 1851.248137][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1851.268516][T26706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1851.280631][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1851.289963][T10528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1851.301822][T26706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1851.310599][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1851.322442][T23454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1851.333075][T26706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1851.341795][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1851.362775][T17354] usb 38-1: SetAddress Request (10) to port 0 [ 1851.376950][T17354] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 1851.409976][T10528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1851.727822][T26711] vhci_hcd: connection reset by peer [ 1851.737958][T23452] vhci_hcd vhci_hcd.2: stop threads [ 1851.748595][T23452] vhci_hcd vhci_hcd.2: release socket [ 1851.759256][T23452] vhci_hcd vhci_hcd.2: disconnect device [ 1853.603226][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.612099][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.088580][T26748] program syz.2.5636 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1854.173007][T26748] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1854.913168][T26754] netlink: 'syz.6.5638': attribute type 1 has an invalid length. [ 1854.990855][T26757] xt_connbytes: Forcing CT accounting to be enabled [ 1855.298284][T25614] usb 3-1: new low-speed USB device number 78 using dummy_hcd [ 1855.472669][T25614] usb 3-1: No LPM exit latency info found, disabling LPM. [ 1855.480413][T25614] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1855.495063][T25614] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 1855.511374][T25614] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x82 is Bulk; changing to Interrupt [ 1855.523387][T25614] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x3 is Bulk; changing to Interrupt [ 1855.534008][T25614] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1855.559477][T25614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1855.567552][T25614] usb 3-1: Manufacturer: ࠠ [ 1855.572688][T25614] usb 3-1: SerialNumber: ﾃ䳯ᢽ㫂쓨㷃緾罰෿屮ᵮ冒穐⦊叓떍洘좲䕰調ﺧ䎪姯첗蓲怏켦缭ᦋᑦ陑䏄侅폏炢䃁掞芭ꭺ㴽붴誃鹭鳓몆貔䅷♵챩큣ퟲс⬒풣툹ၱ葝詺갗ⶉᮘଭ䬯2ἓ蒖ণ푗熗懞ѕ [ 1855.609063][T26757] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1855.648620][T26757] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1855.669572][T26757] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1855.778442][T13457] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1855.928338][T13457] usb 5-1: Using ep0 maxpacket: 16 [ 1855.935033][T13457] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1855.947045][T13457] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1855.959013][T13457] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1855.965750][T13457] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1855.980205][T13457] usb 5-1: config 0 descriptor?? [ 1856.310789][T23454] net_ratelimit: 937 callbacks suppressed [ 1856.310824][T23454] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1856.428316][T23454] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1856.468213][T17354] usb 38-1: device descriptor read/8, error -110 [ 1856.538341][T23454] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1856.648237][T23454] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1856.758609][T23450] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1856.769530][T23454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1856.779540][T23454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1856.860350][T17354] usb usb38-port1: attempt power cycle [ 1856.869741][T10524] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1856.969844][T23452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1856.979585][T23450] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1857.432522][T17354] usb usb38-port1: unable to enumerate USB device [ 1858.055739][T26781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1858.144076][T25614] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1858.165487][T25614] usb 3-1: USB disconnect, device number 78 [ 1858.201707][T26781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1858.285401][T13457] usbhid 5-1:0.0: can't add hid device: -71 [ 1858.292198][T13457] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1858.311958][T13457] usb 5-1: USB disconnect, device number 110 [ 1860.403095][T26810] netlink: 'syz.0.5650': attribute type 1 has an invalid length. [ 1860.698065][T25614] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1860.848385][T25614] usb 1-1: Using ep0 maxpacket: 8 [ 1860.855372][T25614] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1860.866125][T25614] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1860.876096][T25614] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1021 [ 1860.888440][T25614] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1860.896619][T25614] usb 1-1: Product: syz [ 1860.901270][T25614] usb 1-1: Manufacturer: syz [ 1860.906767][T25614] usb 1-1: SerialNumber: syz [ 1861.147665][T25614] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1861.160589][T25614] cdc_ncm 1-1:1.0: bind() failure [ 1861.173327][T25614] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1861.180774][T25614] cdc_ncm 1-1:1.1: bind() failure [ 1861.205333][T25614] usb 1-1: USB disconnect, device number 14 [ 1861.378127][T23414] net_ratelimit: 63 callbacks suppressed [ 1861.378150][T23414] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1861.439027][T10524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1861.498470][T10524] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1861.608613][T23414] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1861.718426][T10528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1861.817848][T26823] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5654'. [ 1861.830951][T10528] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1861.854827][T26823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1861.883952][T26823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1861.911889][T26823] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5654'. [ 1861.958041][T23454] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1862.069285][T10524] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1862.157644][T26828] netlink: 'syz.0.5655': attribute type 1 has an invalid length. [ 1862.178119][T10524] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1862.238423][T25614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1862.408154][T17354] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1862.558466][T17354] usb 1-1: Using ep0 maxpacket: 8 [ 1862.564781][T17354] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1862.575834][T17354] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1862.586543][T17354] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1021 [ 1862.599944][T17354] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.608673][T17354] usb 1-1: Product: syz [ 1862.612974][T17354] usb 1-1: Manufacturer: syz [ 1862.617574][T17354] usb 1-1: SerialNumber: syz [ 1862.821228][T26831] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1862.855210][T17354] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1862.862776][T17354] cdc_ncm 1-1:1.0: bind() failure [ 1862.873299][T17354] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1862.881913][T17354] cdc_ncm 1-1:1.1: bind() failure [ 1862.912476][T17354] usb 1-1: USB disconnect, device number 15 [ 1863.208053][T13457] usb 5-1: new full-speed USB device number 111 using dummy_hcd [ 1863.358885][T13457] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1863.371945][T13457] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1863.382965][T13457] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1863.395975][T13457] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 1863.407725][T13457] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 1863.419649][T13457] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1863.436061][T13457] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1863.444616][T13457] usb 5-1: Product: syz [ 1863.449141][T13457] usb 5-1: Manufacturer: syz [ 1863.454137][T13457] usb 5-1: SerialNumber: syz [ 1863.469818][T13457] usb 5-1: config 0 descriptor?? [ 1863.479055][T26831] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1863.513928][T13457] ati_remote 5-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 1863.870729][T26848] ================================================================== [ 1863.879049][T26848] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1220/0x22b0 [ 1863.888108][T26848] Write of size 2560 at addr ffffc90002dfb620 by task vivid-000-vid-c/26848 [ 1863.896920][T26848] [ 1863.899310][T26848] CPU: 0 UID: 0 PID: 26848 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 1863.899343][T26848] Tainted: [L]=SOFTLOCKUP [ 1863.899352][T26848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1863.899365][T26848] Call Trace: [ 1863.899374][T26848] [ 1863.899384][T26848] dump_stack_lvl+0xe8/0x150 [ 1863.899420][T26848] print_address_description+0x55/0x1e0 [ 1863.899448][T26848] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 1863.899471][T26848] print_report+0x58/0x70 [ 1863.899494][T26848] kasan_report+0x117/0x150 [ 1863.899527][T26848] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 1863.899553][T26848] kasan_check_range+0x264/0x2c0 [ 1863.899581][T26848] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 1863.899604][T26848] __asan_memcpy+0x40/0x70 [ 1863.899627][T26848] tpg_fill_plane_buffer+0x1220/0x22b0 [ 1863.899662][T26848] vivid_thread_vid_cap_tick+0x115c/0x6340 [ 1863.899780][T26848] ? __lock_acquire+0x683/0x2cf0 [ 1863.899823][T26848] ? __lock_acquire+0x683/0x2cf0 [ 1863.899850][T26848] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1863.899878][T26848] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1863.899907][T26848] ? vivid_thread_vid_cap+0x491/0x11e0 [ 1863.899938][T26848] ? cgroup1_freezing+0x29a/0x350 [ 1863.899962][T26848] vivid_thread_vid_cap+0x927/0x11e0 [ 1863.899990][T26848] ? __lock_acquire+0x683/0x2cf0 [ 1863.900028][T26848] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1863.900055][T26848] ? do_raw_spin_lock+0x12b/0x2f0 [ 1863.900083][T26848] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1863.900105][T26848] ? __kthread_parkme+0x71/0x1f0 [ 1863.900141][T26848] ? __kthread_parkme+0x199/0x1f0 [ 1863.900177][T26848] kthread+0x38b/0x480 [ 1863.900204][T26848] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1863.900232][T26848] ? __pfx_kthread+0x10/0x10 [ 1863.900260][T26848] ret_from_fork+0x514/0xb70 [ 1863.900309][T26848] ? __pfx_ret_from_fork+0x10/0x10 [ 1863.900336][T26848] ? __switch_to+0xc89/0x1420 [ 1863.900361][T26848] ? __pfx_kthread+0x10/0x10 [ 1863.900389][T26848] ret_from_fork_asm+0x1a/0x30 [ 1863.900425][T26848] [ 1863.900434][T26848] [ 1864.104187][T26848] The buggy address belongs to a 6-page vmalloc region starting at 0xffffc90002df6000 allocated at vb2_vmalloc_alloc+0xef/0x360 [ 1864.117698][T26848] The buggy address belongs to the physical page: [ 1864.124262][T26848] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x650e1 [ 1864.134343][T26848] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1864.141467][T26848] raw: 00fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 1864.150070][T26848] raw: ffffffffffffffff 0000000000000000 00000001ffffffff 0000000000000000 [ 1864.158836][T26848] page dumped because: kasan: bad access detected [ 1864.165282][T26848] page_owner tracks the page as allocated [ 1864.171005][T26848] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 26847, tgid 26844 (syz.0.5660), ts 1863855368252 [ 1864.189682][T26848] post_alloc_hook+0x1f9/0x250 [ 1864.194655][T26848] get_page_from_freelist+0x2209/0x2280 [ 1864.200214][T26848] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 1864.206115][T26848] alloc_pages_mpol+0x21e/0x390 [ 1864.211013][T26848] alloc_pages_noprof+0xb1/0x2b0 [ 1864.215959][T26848] __vmalloc_node_range_noprof+0x709/0x1560 [ 1864.221859][T26848] vmalloc_user_noprof+0xad/0xe0 [ 1864.226798][T26848] vb2_vmalloc_alloc+0xef/0x360 [ 1864.231656][T26848] __vb2_queue_alloc+0xa0b/0x1660 [ 1864.236862][T26848] vb2_core_reqbufs+0xc3f/0x1470 [ 1864.241940][T26848] vb2_ioctl_reqbufs+0x4bb/0x850 [ 1864.247016][T26848] __video_do_ioctl+0x8af/0xc70 [ 1864.251961][T26848] video_usercopy+0x860/0x1430 [ 1864.256743][T26848] v4l2_ioctl+0x18d/0x1e0 [ 1864.261101][T26848] __se_sys_ioctl+0xfc/0x170 [ 1864.265798][T26848] do_syscall_64+0x166/0x520 [ 1864.270408][T26848] page last free pid 26839 tgid 26838 ts 1863342601717 stack trace: [ 1864.278419][T26848] __free_frozen_pages+0xc93/0xd90 [ 1864.283627][T26848] __mmdrop+0xf3/0x510 [ 1864.287803][T26848] exit_mm+0x221/0x2d0 [ 1864.292060][T26848] do_exit+0x6cd/0x2360 [ 1864.296220][T26848] do_group_exit+0x22d/0x2f0 [ 1864.300989][T26848] get_signal+0x121b/0x12c0 [ 1864.305534][T26848] arch_do_signal_or_restart+0xbb/0x860 [ 1864.311204][T26848] exit_to_user_mode_loop+0x10e/0x770 [ 1864.316605][T26848] do_syscall_64+0x328/0x520 [ 1864.321294][T26848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1864.327284][T26848] [ 1864.329618][T26848] Memory state around the buggy address: [ 1864.335710][T26848] ffffc90002dfbf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1864.343792][T26848] ffffc90002dfbf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1864.352500][T26848] >ffffc90002dfc000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1864.360919][T26848] ^ [ 1864.364988][T26848] ffffc90002dfc080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1864.373157][T26848] ffffc90002dfc100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1864.381403][T26848] ================================================================== [ 1864.537016][T26848] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1864.544249][T26848] CPU: 1 UID: 0 PID: 26848 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 1864.555657][T26848] Tainted: [L]=SOFTLOCKUP [ 1864.560262][T26848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1864.570544][T26848] Call Trace: [ 1864.573832][T26848] [ 1864.576773][T26848] vpanic+0x56d/0xa60 [ 1864.580789][T26848] ? __pfx_vpanic+0x10/0x10 [ 1864.585606][T26848] panic+0xc5/0xd0 [ 1864.589397][T26848] ? __pfx_panic+0x10/0x10 [ 1864.593863][T26848] ? preempt_schedule_thunk+0x16/0x40 [ 1864.599272][T26848] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 1864.605024][T26848] ? preempt_schedule_thunk+0x16/0x40 [ 1864.610448][T26848] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 1864.616148][T26848] check_panic_on_warn+0x89/0xb0 [ 1864.621148][T26848] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 1864.626897][T26848] end_report+0x73/0x170 [ 1864.631175][T26848] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 1864.636851][T26848] kasan_report+0x128/0x150 [ 1864.641489][T26848] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 1864.647168][T26848] kasan_check_range+0x264/0x2c0 [ 1864.652143][T26848] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 1864.657909][T26848] __asan_memcpy+0x40/0x70 [ 1864.662413][T26848] tpg_fill_plane_buffer+0x1220/0x22b0 [ 1864.668001][T26848] vivid_thread_vid_cap_tick+0x115c/0x6340 [ 1864.673943][T26848] ? __lock_acquire+0x683/0x2cf0 [ 1864.678956][T26848] ? __lock_acquire+0x683/0x2cf0 [ 1864.683955][T26848] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1864.689798][T26848] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1864.696071][T26848] ? vivid_thread_vid_cap+0x491/0x11e0 [ 1864.701737][T26848] ? cgroup1_freezing+0x29a/0x350 [ 1864.706968][T26848] vivid_thread_vid_cap+0x927/0x11e0 [ 1864.712277][T26848] ? __lock_acquire+0x683/0x2cf0 [ 1864.717265][T26848] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1864.723174][T26848] ? do_raw_spin_lock+0x12b/0x2f0 [ 1864.728858][T26848] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1864.735591][T26848] ? __kthread_parkme+0x71/0x1f0 [ 1864.740558][T26848] ? __kthread_parkme+0x199/0x1f0 [ 1864.745601][T26848] kthread+0x38b/0x480 [ 1864.749794][T26848] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1864.755636][T26848] ? __pfx_kthread+0x10/0x10 [ 1864.760276][T26848] ret_from_fork+0x514/0xb70 [ 1864.764883][T26848] ? __pfx_ret_from_fork+0x10/0x10 [ 1864.770001][T26848] ? __switch_to+0xc89/0x1420 [ 1864.774777][T26848] ? __pfx_kthread+0x10/0x10 [ 1864.779560][T26848] ret_from_fork_asm+0x1a/0x30 [ 1864.784341][T26848] [ 1864.787886][T26848] Kernel Offset: disabled [ 1864.792488][T26848] Rebooting in 86400 seconds..