last executing test programs: 9m24.156351379s ago: executing program 1 (id=1990): connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000bc0)={0x0, [{0x2, 0x8, 0x108, &(0x7f0000000200)='m'}, {0x1, 0x5e8, 0x20027a6, &(0x7f0000000540)="a2f0173e40c0918ab2baad91e9dc29a1ca1cd2ed0803200d50e08e053af9bbdc5c4bc774f31f9ce16342e7ac020a446a62eb9b24106a5bc6482d68835e9f0ccb65af5f57f07170ae0b73d1cc03496b915859c9bcd64dfbd1cf230e621873929a9045cee6a725d8930dee201d7a30c9a9806f40925611843ad7853b7476e2b318cfcbfc5ebcd3ad47b6f2413a78228fe56ce80d9f859fd3a27c34caad3e2677aaf4b903ae6e1ae40a787e6edbcec253f56af0913b83a399da79ca8c603e"}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0x200007f, 0x0}, {0x2, 0x0, 0x85a2, 0x0}, {0x0, 0x0, 0xa, 0x0}, {0x2, 0x0, 0x7f, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x5, 0x0}, {0x2, 0x0, 0x80000001, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x10001, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x3f, 0x0}, {0x3, 0x6, 0x6, 0x0}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 9m23.859791819s ago: executing program 1 (id=1991): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2311}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x8, 0x3, 0x3a) sendmmsg$unix(r5, &(0x7f000000a280)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000026c0)=[{&(0x7f00000001c0)="6378e74dc6", 0x5}], 0x1, 0x0, 0x0, 0x10}}, {{&(0x7f0000002780)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000002840), 0x0, 0x48001}}], 0x2, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) bind$inet6(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r7, &(0x7f0000000180)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000040)={0xfffffffc, 0x1003, 0x4, {0x6, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001d0001002abd7000fddbdf2502000000", @ANYRES32=0x0, @ANYBLOB="fb0800"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40080) read$dsp(r1, &(0x7f0000003200)=""/4088, 0x57d) 9m21.434202642s ago: executing program 1 (id=1999): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001ac0)=""/4104, 0x1008}, {&(0x7f0000000300)=""/112, 0x70}, {&(0x7f00000000c0)=""/107, 0x6b}, {&(0x7f0000000080)=""/8, 0x8}, {&(0x7f0000000040)=""/48, 0x30}, {&(0x7f00000016c0)=""/170, 0xaa}, {&(0x7f0000000240)=""/13, 0xd}], 0x7}, 0xffffffff}], 0x3, 0x2030, 0x0) getpgrp(0x0) 9m20.478652906s ago: executing program 1 (id=2001): r0 = socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x89e1, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x208000, &(0x7f0000000640)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3c, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x1, 0x20040, 0x5, 0x41, 0xffffffffffffffff, 0x4}, 0x50) (async) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100280000000000000080158254200001800d00010016c0306d1b188eb692e5f854f6c3dd05bde796c85c86f71c08dfdddae45050dffe92cb91942d9f319a4eb5eaad3938d0078f05784632b6a379332081e70b7edaaedf6998157e10a8c4ec7b37bef55ca732002c9338932202dac87674401a8cf0c3635fd8e9301ff09d757759649c5518acf3ef868a2d143835895c8e887193ea884f4b7bbf8f9c5059aea2fb501a1f08d47368d4a4da2ac51202bbb677ade1b9927c330afda9f5973bb48d51b2c9f4f19ba86d1f3443920ea4ebb8df3b50a51b1cb388783fbbbbdf00dc14b19c02e1cc5c", @ANYRESDEC=r2], 0x34}}, 0x4040) unshare(0x20000400) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x21) (async) fcntl$getown(r6, 0x9) (async) r7 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast2, @private}, &(0x7f0000000100)=0xc) 9m20.268748456s ago: executing program 1 (id=2002): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4010aeeb, &(0x7f0000000000)={0x79}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101200, 0x12) getdents(r3, &(0x7f00000000c0), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4010aeeb, &(0x7f0000000000)={0x79}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x2) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101200, 0x12) (async) getdents(r3, &(0x7f00000000c0), 0x0) (async) 9m18.722028001s ago: executing program 1 (id=2005): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x50}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) timer_create(0x0, &(0x7f0000000100)={0x0, 0x11, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000580)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000880)={r3, 0x6}) times(&(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r2, 0x100, 0x70bd29, 0x8, {{}, {@val={0x8, 0x1, 0x1}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xb7, 0x4b}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x59}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0xc004}, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000ff07000009"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0d000000ff0f0000040000000600000001000000", @ANYRES32=r5], 0x50) r7 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x2281, 0x0) open_tree(r7, &(0x7f0000000400)='./file0\x00', 0x80a01) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r6}, &(0x7f0000000840), &(0x7f0000000340)=r6}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv6_getnetconf={0x1c, 0x52, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NETCONFA_FORWARDING={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9m18.101559611s ago: executing program 32 (id=2005): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x50}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) timer_create(0x0, &(0x7f0000000100)={0x0, 0x11, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000580)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000880)={r3, 0x6}) times(&(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r2, 0x100, 0x70bd29, 0x8, {{}, {@val={0x8, 0x1, 0x1}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xb7, 0x4b}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x59}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0xc004}, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000ff07000009"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0d000000ff0f0000040000000600000001000000", @ANYRES32=r5], 0x50) r7 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x2281, 0x0) open_tree(r7, &(0x7f0000000400)='./file0\x00', 0x80a01) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r6}, &(0x7f0000000840), &(0x7f0000000340)=r6}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv6_getnetconf={0x1c, 0x52, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NETCONFA_FORWARDING={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m41.442965881s ago: executing program 3 (id=2894): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x800, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x41800}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000084) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x2e, &(0x7f0000000000)=r3, 0x4) r4 = io_uring_setup(0x64e0, &(0x7f0000000a00)={0x0, 0x25f7, 0x40, 0x2, 0x38c}) close(r4) recvmmsg(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x0, 0x0) close(0x3) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) 5m40.396281523s ago: executing program 3 (id=2896): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x20, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r3, 0x9801}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x70bd2e, 0x25dfdbfe, {0x2, 0x0, 0x0, r3, 0x8, 0x10, 0x72748f52b8af0932}, [@NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, @NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x3c}}, 0x20024090) 5m40.191583954s ago: executing program 3 (id=2897): mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) (async) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000)=0x1, 0x1ff, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000a80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000240)={0x7e8, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x184, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xe8, 0x5, "ecc100ddc9e90560cb14dbefde17a9500ca00d77e3778a0010d587f49ee68d298bb6927e744a7696d94749f404dc4f2c355fe3c906dd8046090920ca791233b7021f104e47684a29ad17f0d0348ecf3e88e53d0473e1d71c0a5e803443fa84b4bde485c1bbcb229e2ea40d251b5a8c9e726c3e4940b0c13103bff99a239d2eb109ae431f82b1da9232bd4ea6a766e2ec04f65921b5381366dbe8cf090d0e29a3676df37edb8eca931f1bf51b3be3bcd2507be33ae00cde94493385f1320a1b36f43b47d8261a8867e90ba48e0a1d29ef761ff430501a3cfceb3fc7e2fa49fcde5c3462b7"}, @ETHTOOL_A_BITSET_MASK={0x96, 0x5, "0b176949c1417140643e6e915b20c5fb36433b4e7cea41ad8593c01fdc83d59c4b3eb932ab7f8d6c85f907f66c996c0c20a1f4a6d81c4b76f2c588e53a6807375f600bc0768d34725d399bcbdffb1ecfdffd70268d77c39e60c859e30a5f834141312eca70df8bc487ccb2d7fdf7f8254d3f7853979f7eab73db214f6f8af30dc432b8cc9c6d754a9542304a4238635dcd11"}]}, @ETHTOOL_A_FEATURES_WANTED={0x530, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x19c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '/dev/dri/card#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '/dev/dri/card#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '/dev/dri/card#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\t$@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '/dev/dri/card#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '/dev/dri/card#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '/dev/dri/card#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '.-/*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '/dev/dri/card#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '/dev/dri/card#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '/dev/dri/card#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x18e}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x38}, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xb5, 0x4, "d5a396d53fac5e12eec580b751993f8d1f9c39b7a6940df8d06f5b2ebbbaf7cc8dc631a62e6da55d7afb4be6eef6361d500514aa4e83a82b084a1d09bb06909db9067d739358f015f78e68a0a408cbeb6b31ea48ab91b355ae3e73df05dd30c94092f4fe9804af197f8fd64433dc374d8190e24ac23bc92685a9462250a5d42c7509d22f3fef1a3251ab3c8d1358b7bfdb0c238fd22a9a814165d56ca300eb5faac2f87a2642a7492231eda7e1412d442b"}, @ETHTOOL_A_BITSET_MASK={0x52, 0x5, "592656dda5d9816a51d00d6dede259ba3c50d0bf57fd6012a697acb0a1a3c6a6f85fd444d90329947b1494a5a5f2f36d981db3e94cab432df3882fdf38f6b16d585784f97bb0a02d094c159bb7bf"}, @ETHTOOL_A_BITSET_MASK={0xdc, 0x5, "0eba24dadcbc87403453d7909bdd96ed89c147a97605fb7b25e0c5fe3eb1c0a851da7f12d5dfa37e3f92013abd8f6369814d25f18de849d417b7411051082b245b5c9cd2262665a2c263b2c8da07e44ce2c43c0c2c4166052ed9c02742a3fe65e4a34c79c4efca896c68aea58449dd17e36fac9e324402efeed3fa13c32952686273267be160edbeceebf22fdbcf03197cc6f3ac7f6061764402c39a6a64c54aeca235fc41062c70bb7cba2e7700"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xf5, 0x5, "acf0a9dc0d156ee5557f7d2730109122e4dd93a27b10d75ddb1309b0f2a6c9c8cd7002ed7c25f583d6e64e024224aedc4d45a2ba35a738ae3d2bf566a175c3c90b125e006681c0b431c223a25876c788665f6f39bc1b129c88cfc0c1bd918fb6f434947461b3c16f4bdfc9d763f9847522b0b01b72124b463d05d690e6e6572c182758732769ea73ab938c19258f1eba8cbeaf1c616575984ea7cabd3ae16fc1c5b6a0879b9e7c04c92bc97a1eacc2e6b8f7b1fe2c209f9b19078a2170b8da0d0c207f95c405daa6c9ee3758ac3e727c251c0e465b236803c434e7de605226db07276a38a4bd8592de18b04ba921d6b519"}, @ETHTOOL_A_BITSET_MASK={0xce, 0x5, "d2fe3cd4fa2b09bf2bd3ae07d7ce14d07a2f0694d61431b675173299f0fe5eba4311cb8850576fffab543688cf308f688f1db6202c3fc5d064490ed5d75a1f25e0e281a9467c686756256f778f6216e866f36957c1b4f196122231683ca640022b0601d0908f3acf82c5b72f2e90ba7c25421f7b7062615736ae5409d84d65dc55eb60736e7c55ecf20e3f649a681e56783ac535b6c8dd98c58570ab51eed80a177cf8a827d1e481cfbadf085e2a1b8a50740a2f0bf18db9ff5da24d8d115de6267acf26449ffe71c025"}]}, @ETHTOOL_A_FEATURES_WANTED={0xac, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xd, 0x4, "6102b914cb9b83e816"}, @ETHTOOL_A_BITSET_VALUE={0x3c, 0x4, "0b6f647f82ce2d4732a1b8c03b2aea9989a0c405eeb50f0bb61b68f991bf1f7eb67983e1fdf8bc460dbc489c4396ee075d6793b865af1d8c"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x800}, @ETHTOOL_A_BITSET_MASK={0x3d, 0x5, "a24cf683140f7e18967142896bceadd41fc4fc542122e8ae1a02f92296cd26fa5883a5f96d6ae733c63c5fe24302cc0d7651142557aa842901"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x7e8}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) (async) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="001749000000fada9f037c5e111d9e702d4b5f8e0f21a5980a37acfa1a6c6b25c794b4164d9bbb2627ce275cd92a3279b002c881c1108a912e31d0429efb45f800e00d4d94617aee7656ac12a4d1d3fad5f2d58e255c973fc6226b13f0473b7b125789"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00000015000100fdffffff0000000802180000", @ANYRES32=r6, @ANYBLOB="1400030076"], 0x2c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f0000002200)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200001f000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000005900008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r9, 0xffffffffffffffff, 0x16, 0x0, @val=@tracing={0x0, 0x3}}, 0x20) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @dev, @dev}, &(0x7f0000000b00)=0xc) 5m39.983800941s ago: executing program 3 (id=2898): r0 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x89001) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) readahead(r3, 0x8800000000028, 0x1ff) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x4000000) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010025bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="002104004139040014000300626174616476300000000000000000001c0016801800018014000b0000000080000000000700000000000000493ac2a8aa85d646e6132bc1316c700febc09fbad2c2885920c9fabb733f8194665ac7520e0010000000000000f6d7b102cab837252815f68281370ffad3bce769a949ebb87a7a5c28b48a50b5326b0b132efffd08ec690ab442f8149c07c0489549d547"], 0x50}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12015002c777dc089a050185a0c0909c005dcea9fbe1eed3c7b75030369e51931b6f4001ff0950a7b9af8ccd5c78963b2def9c99488f31d1b63e"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300), 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r8 = syz_io_uring_setup(0x4b5, &(0x7f00000006c0)={0x0, 0xa238, 0x40, 0x8, 0x7c}, &(0x7f0000000380), &(0x7f0000000340), &(0x7f00000005c0)) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000003c0)=""/202, 0xca}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x3f, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000340)}], &(0x7f0000000500)=[0x0, 0x458, 0x0, 0x0, 0x6, 0x7, 0x196d4fd9, 0x800000000a, 0x85a0], 0x2}, 0x20) 5m36.816688082s ago: executing program 3 (id=2909): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000640)={{{@in=@broadcast, @in=@dev}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x123002, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$media(&(0x7f00000000c0), 0x8103, 0x125080) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x3, 0x2003) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$netlink(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x880}, 0x20004881) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYBLOB="0000000000aaa61e3f2fffe2a8e5fe138e000000000000800055ddffff000020", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) fcntl$lock(r2, 0x26, &(0x7f0000000400)={0x1, 0x0, 0x9, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000fcffffff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0400000000000000b702000014000000b703000000000000850000bf0900000000000055090100000000009500000000000000bf91000000000000b702000300000000000000ff84000000b7000000000000009500"/96], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(0x0, 0x1) (async, rerun: 64) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b33, &(0x7f0000000000)={'wlan1\x00'}) (async) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) (async) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205649, &(0x7f0000000100)={0x98f90a, 0x300, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90a, 0x8000, '\x00', @ptr=0x20002000}}) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) (async) sendfile(r4, 0xffffffffffffffff, 0x0, 0x20000023893) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x8010) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) 5m35.991481991s ago: executing program 3 (id=2911): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000000)=0x1e, 0x4) (async, rerun: 32) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20c8091) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4040100) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x3ff, 0x7, 0xfb6}) (async, rerun: 64) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)=0x33) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) r8 = syz_usb_connect$sierra_net(0x1, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xa, 0x2, 0x8, 0x6, 0xa3}, {0x9, 0x5, 0x80, 0x2, 0x3ff, 0x9, 0x50, 0x4}, {0x9, 0x5, 0x4, 0x3, 0x8, 0x98, 0x7, 0x9}}}}}}]}}, 0x0) syz_usb_disconnect(r8) (async) write$P9_RCREATE(r7, &(0x7f0000000180)={0x18, 0x73, 0xfffe, {{0x4, 0x3, 0x4}, 0xb}}, 0x16) (async) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x100000000, 0x7]}}) 5m35.31180794s ago: executing program 33 (id=2911): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000000)=0x1e, 0x4) (async, rerun: 32) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20c8091) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4040100) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x3ff, 0x7, 0xfb6}) (async, rerun: 64) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)=0x33) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) r8 = syz_usb_connect$sierra_net(0x1, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xa, 0x2, 0x8, 0x6, 0xa3}, {0x9, 0x5, 0x80, 0x2, 0x3ff, 0x9, 0x50, 0x4}, {0x9, 0x5, 0x4, 0x3, 0x8, 0x98, 0x7, 0x9}}}}}}]}}, 0x0) syz_usb_disconnect(r8) (async) write$P9_RCREATE(r7, &(0x7f0000000180)={0x18, 0x73, 0xfffe, {{0x4, 0x3, 0x4}, 0xb}}, 0x16) (async) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x100000000, 0x7]}}) 9.528150907s ago: executing program 2 (id=4170): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x68000, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendfile(r1, r0, 0x0, 0xf) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000005b80)={@loopback={0xfec0ffffffffffff}, 0x32, r4}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@local, 0x1000007d, r4}) 8.994083787s ago: executing program 0 (id=4172): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='target PCI:0:0:5.0'], 0x13) write$binfmt_script(r0, &(0x7f0000000080), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) fallocate(r0, 0x1, 0x3, 0x2d22) 8.750219197s ago: executing program 2 (id=4174): close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x0) (async) listen(r0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = accept(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) (async) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) signalfd4(r1, &(0x7f0000000000)={[0x5821]}, 0x8, 0x800) (async) signalfd4(r1, &(0x7f0000000000)={[0x5821]}, 0x8, 0x800) 8.572348485s ago: executing program 0 (id=4175): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000200001"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0xfffffedb, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000008160a01000000000000000000010000010900010073797a30294becc9889c2853a90000000900020073797a300000000038000000180a0101000b00000000000001000000090001005d067a30000000000c00030000000140000000000900020073797a30f9abb6f51400000010000100000000005061995989000000000700000a"], 0xac}}, 0x0) 8.267008534s ago: executing program 0 (id=4177): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect(0x2, 0x24, &(0x7f0000000fc0)={{0x12, 0x1, 0x200, 0x17, 0x73, 0xb4, 0x8, 0x46d, 0x900, 0xe179, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x9, 0x90, 0x7, "", [{{0x9, 0x4, 0xa2, 0x5, 0x0, 0x17, 0xc2, 0x3d, 0xff}}]}}]}}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@random={'trusted.', ']{!\x00'}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e20, 0x800000f, @private1, 0x14}, 0x1c, 0x0, 0x50}, 0x4044000) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f00000003c0)) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) 7.475997585s ago: executing program 4 (id=4178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010c007251100000000000109022400010000000009040000010300000009210010160122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x40, 0x8, 0x2, "a995"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000002a80)={0x1c, &(0x7f0000002540)=ANY=[@ANYBLOB="60000f"], 0x0, 0x0}) syz_usb_control_io$printer(r2, &(0x7f0000000480)={0x14, &(0x7f0000000180)={0x0, 0xe, 0x87, {0x87, 0x31, "c3e786e59fa98940aa0045f4cb9074f6c6d03e341772b0d05c3a7209e67de11146d7ac417052e3d954375c4e45be35f03fcfa945767e055e10afb1c852521c5ee180e57cf0bf60b376dfe4d7609e1f862e5cf30d603ea67818857917d3c316dffbc6036baf64dbbdc7491ab818adb7880a47fd28ca87a61fc34d735d7e7b4bbd1d194b77fa"}}, &(0x7f00000003c0)={0x0, 0x3, 0x90, @string={0x90, 0x3, "90a74b967b953374316c99ce6c1b98021f29f9f058001ed8a0a2d61d2406aa8e5da6d4b14b6ae4057069c141ec8f0467798f10b201b2cd1ba02392489d226b7525fec3a29787c069b6a93de448442ffb5256a63a7d5597826352dd87adf41a60be526ce03bd36526d354e9009a01b1402c024dc3a655ee81bf2414dbc53d0e5696d096bbc7e99ae5e2f002e1dc1a"}}}, &(0x7f0000000700)={0x34, &(0x7f00000004c0)={0x20, 0x14, 0x8b, "c5a52ce8c98ae06dabdb7038ddcf077ab0ab4d43e218d10e450a9340d547601656a728300ceaddad08850beb258116ced04b54a58e514b7752fee4352d0208ac4defa168e0b162938b6c7e651693beda528c36c6c344dbf8dfd2fd9c5b5a3d53690fcc0695a4e87acd79c1c273ac101827d05d5e6183a15bafe2a6473ade43a784b71964042c9f67c84bb5"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x19}, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="2000540000000052008e10bcb08f1dce8f032e57721f836897abfe50492d30d8d4dcddb3aebaabea0085f721a74a6faa922d4187b98a94664810910fb23b58b6951a760494f80ca58eaab79588a921ea07bf"], &(0x7f0000000680)={0x20, 0x1, 0x1, 0x21}, &(0x7f00000006c0)={0x20, 0x0, 0x1, 0xf3}}) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205000000cd0df66e4f"], 0x0}, 0x0) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYRES8=r1, @ANYRES8=r0], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000040)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="00007f00000009009197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0xfffffffe, 0x8, 0x4000004, 0x80500a}) 7.356977276s ago: executing program 2 (id=4179): inotify_init() r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000740)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x3}, @in6={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e23, 0x1, @local, 0x200000a}], 0x74) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000000c0)=0x2009, 0x4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r5 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000001380)='R', 0x1}], 0x1}}], 0x2, 0x48014) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) set_mempolicy(0x2, &(0x7f0000000000)=0x9, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a300000000e0a050000000000000000000a00000509000100b8797a310000000073797a3100000000140000ee1100000000000000000000000500000a"], 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r6 = syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', 0x2002, &(0x7f0000000840)=ANY=[@ANYBLOB="66643da5102b5bc573b49e5ba9e4eff05caee027850fe0fbeb0de5eb26f24f5229fd85fa6222fef0d1866a63b4058b5047ecba459fcc992c3a0b8dc94e24e6351512221b0d068300bafb2bfe96e75450767f5f4c9538ac5abb25dc550a048209db453b9b4763e50ce0bc1f936c321129f1f2d41f2d83c42be426542a4dd5c8bb65b84a97b7346e508da9be86f5e61f0355cd48e30f2ac2155e0ec3d5066fc16634d00da9bf6ece16406fabeac3327c", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,default_permissions,default_permissions,allow_other,smackfsfloor=syz1\x00,measure,audit,subj_type=/%$+@,measure,pcr=00000000000000000057,subj_role=%\\^,\x00'], 0x1, 0x0, &(0x7f0000000580)="d2e214fbdf1a5a6bbc93165f87e5b9feb5739c") renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r6, &(0x7f00000005c0)='./file0\x00') name_to_handle_at(r6, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0xfffffffd}, 0x6, 0x2}}, &(0x7f0000000300), 0x2400) 5.965182446s ago: executing program 2 (id=4183): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'rose0\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r9 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) ftruncate(r9, 0x20000000003) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt(r2, 0x84, 0x7f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, 0x0, 0x8) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r1, 0x0, 0x6, 0x40000000009}) socket$nl_route(0x10, 0x3, 0x0) 4.899581938s ago: executing program 0 (id=4187): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b0102030109021b00010000000009040000014eaf32000905", @ANYRES64], 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="5e2e0900000000002400128009000100766c616e000000e0130002800600010000000000040003"], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240001801400018008000100ac14140008000200ac1414bb0c0002800500010000000000240002801400018008000100ac14140008000200ac1414aa0c000280050001000000000008000740000000002c000e80140001"], 0x90}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async, rerun: 64) r6 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0xfbfd, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x8}}, {{@in=@private=0xa010100, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4}}, 0xe8) (async) connect$pppl2tp(r6, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000007000000140008"], 0x34}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0}, {0x10, 0xffff}}}, 0x24}}, 0x4040004) 4.338359124s ago: executing program 5 (id=4189): r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x8, 0x141301) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040)) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x8, 0x20000) (rerun: 32) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000000c0)={0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000100)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000140)={0x0, r2, 0x9, 0x2, 0x6, 0x7ff, 0x1e2a000}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0xb0, "c8bd6417a0177e2dee2b7016b1b872d3d4e78e90ddd394950da8cf28958bb5ba8ebe6c184eeca36971e0f8484a074feb6ee2d5a15722482411e3fd385ad6a69e31164632d87321ae90f1746343b0e8bab154759e2f448329b00f4ed5e504154ce8a488c4f2fc9017052bbe00e987c333f780612ac48e6e95a7a0435c4cecb824461df6931c6174d2a2f3b0f9d710c4622eb0fee29a18828d268dae4a77194219ca21ffaf0dc045a95c915b498a41247c"}, &(0x7f0000000280)=0xb8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000002c0)={r4, 0x0, 0xd0, "ad4e9df1ae09c54e2401f9bf46d6bccf2c1ca41721328f50cefaf27beca075f069f74e9f35c5b349de174df5aaa053a9f2819bc739cd9fbe0ff24c3f0be98bec0e3b26a1f3d5ed05c5a1e6a78cde3e81a897021e62d982cf7cf2b7e1d40bac73ddcdb7cbc719d5a0a2011bf321b3f3495f5feb25c709f949ee2be197581cfc8f62266ad90eb6778383faadc480380a5956b76d9481e769803fbf6f8710781612fe14605371a2403e7a8d48ea08c91c77d10c4b4dc68920917778febe3d28a81a88b85b673a8daa76b95b340d564d5aef"}, 0xd8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000004c0)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0xa, 0x5, 0x6}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000600)={&(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x7, 0x1, 0x5, 0x3}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000740)={&(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0], 0x1, 0x1, 0x3, 0x2}) (rerun: 64) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000007c0)={&(0x7f0000000780)=[r5, r6, r7], 0x3, r2, 0x0, 0x3, 0xc9bb, 0x1, 0x2, {0x7e, 0x9, 0xf, 0x8, 0xfffc, 0xeb, 0x9, 0x7, 0x8e7e, 0x2, 0x3, 0x0, 0xa, 0x7, "dd9d61186b97576ce609276f6273c0db6f027a9aa3025d99a4fb81d267cc469f"}}) (async, rerun: 64) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000840)={0x1, 0x2, 0xc, 0x1, 0x1, 0x4, 0x6, 0xd, r4}, &(0x7f0000000880)=0x20) (rerun: 64) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f00000008c0)={r8, 0x8}, 0x8) (async) io_setup(0x7fff, &(0x7f0000000900)=0x0) (async) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) io_submit(r9, 0x2, &(0x7f0000000b00)=[&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x7, 0x8, r3, &(0x7f0000000940)="b9517509a24828a64979b6565e602060c088b90057343eff563529cf2345aa4916553cd6ed551834d69e4d86c67b232dda18ff18793767d46edb1766ac140bed2092fe57d3df56f3b2815db3fbbac130817dbc14bf4ac4e5e20484ba3858ae0aefade0ef75cba4188f4dc49cea74166a00d67a89a3acf1f3b35c70aee67d63d7689f69a3444131d9bf530f6349be77f35e022d199c393593b1b1430f3ae18d319ae51928e7fe8bd072e73624321f69e0fcca0609df271f075e35fcaf7eaa11", 0xbf, 0x8, 0x0, 0x1, r3}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x6, 0xdc, r10, &(0x7f0000000a80), 0x0, 0x8, 0x0, 0x7, r3}]) (async, rerun: 64) r11 = fsopen(&(0x7f0000000b40)='f2fs\x00', 0x1) (rerun: 64) ioctl$FS_IOC_ENABLE_VERITY(r10, 0x40806685, &(0x7f0000000cc0)={0x1, 0x3, 0x1000, 0x7e, &(0x7f0000000b80)="d37cc545f6642267d9daec5c1c9cf61066a71ebaf6e0aa976f8afc22172c0305b0b3aa164533a12a1e04562db559e6e6c296171b3984f3563a3d13d38104dd534b3f543824c6ea284663f8e6d4bacab67df4d26a02e47a9e29fcbdfc5cca6b940ccad7a7b1be7988b36037e30b55aab20347b1a4e179cffcf1e2a649ae74", 0x88, 0x0, &(0x7f0000000c00)="7f1df034720cef225f392fa18c37e401cf80824b942173efe94e8f69d1f6d81e8025acbd3007192bf5a005f72d1b5409756c7f0d23b4295df8293bc462a25e48b6728ecadd0f2e56a550078b4c472e760ccf81a86c5a8b90bfb100c2aedca4cf43770df1db9aa356f11f2e911836201f1505392b217757766196b42d934fc9220862b0c1c9cab84c"}) (async) ioctl$EXT4_IOC_MIGRATE(r11, 0x6609) (async) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000d40), 0x4) (async) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r3, 0xc0106441, &(0x7f0000000d80)={0x0, 0x0, 0x7fffffff}) (async) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r1, 0xc0106450, &(0x7f0000000dc0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000e00)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01864c2, &(0x7f0000000e40)={0x0, 0x1, r0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01864c2, &(0x7f0000000e80)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01864c2, &(0x7f0000000ec0)={0x0, 0x0, r3}) (async, rerun: 32) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000f40)={0x0, 0x0}) (rerun: 32) ioctl$DRM_IOCTL_PANTHOR_VM_BIND(r3, 0xc0186443, &(0x7f0000001840)={r12, 0x0, {0x30, 0x5, &(0x7f0000001740)=[{0x20000000, r13, 0x4, 0x8, 0x80000000, {0x10, 0x4, &(0x7f0000000f00)=[{0x1, r14, 0x7}, {0x80000000, r15, 0x6}, {0x1000000fe, r16, 0x6}, {0xff, r17, 0x1}]}}, {0x20000000, r18, 0x3, 0x0, 0x1, {0x10, 0x4, &(0x7f0000001040)=[{0x0, 0x0, 0x10000}, {0x80000000, 0x0, 0x7cf}, {0x0, 0x0, 0x6}, {0x80000000, 0x0, 0x7}]}}, {0xf0000000, 0x0, 0x3, 0xffff, 0x8000000000000001, {0x10, 0x9, &(0x7f00000012c0)=[{0xff, 0x0, 0x8000000000000001}, {0x80000000, 0x0, 0x8000000000000000}, {0x1, 0x0, 0x8000000000000000}, {}, {}, {0x1, 0x0, 0x8}, {0x80000000, 0x0, 0x4}, {0xff, 0x0, 0x7f}, {0x1, 0x0, 0x3a00}]}}, {0x10000000, 0x0, 0xe34, 0x8, 0x4e3, {0x10, 0x9, &(0x7f00000015c0)=[{0x1, 0x0, 0x1}, {0xff, 0x0, 0xfc41}, {0x80000000, 0x0, 0x8}, {0x0, 0x0, 0x2}, {0x1, 0x0, 0x1ff}, {0x0, 0x0, 0x8000000000}, {0x80000000, 0x0, 0x22}, {0x80000000, 0x0, 0x1d8000}, {0xff, 0x0, 0xfffffffeffffffff}]}}, {0x20000000, 0x0, 0x5, 0x5, 0x3, {0x10, 0x3, &(0x7f0000001700)=[{0x1, 0x0, 0xfffffffffffffff2}, {0x800000fe, 0x0, 0xba}, {0xff, 0x0, 0x5bda}]}}]}}) 4.243694784s ago: executing program 4 (id=4190): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000005c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d410000000000000002900000003000000", 0x30) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x80000000, 0x3, 0x9, 0xf, 0x1, 0x5, 0xfc, 0x0, 0xff, 0x0, 0x0, 0x6, 0xff, 0x0, 0x5}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x10, 0x803, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xfff2}, {0xffe0}}}, 0x24}}, 0x400c0) (rerun: 64) getsockname$packet(r6, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x5c, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, 0x2500}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r8}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xa}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x5}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x8}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004010) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r3, 0x30}) 4.117245151s ago: executing program 6 (id=4191): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x1000, 0xffffffffffffffff, 'id1\x00'}) read$char_usb(r0, &(0x7f0000000080)=""/187, 0xbb) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x4, &(0x7f0000ffc000/0x1000)=nil) r1 = ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) socket$nl_xfrm(0x10, 0x3, 0x6) pwritev2(r0, &(0x7f0000002280)=[{&(0x7f0000000180)="f8e44a4df4f128a536bbd5d36016317aad07a69737f3996a6a373adfa5b01ccb52c4a7a328927e20a48a73255077c8ad22c8ffae94f696b239a456ef724e6d2e6511f48ad23668247fb7e3168a70c8ef43344b7855cbc1db260284578bef5a296b1e1fe5219f35a9d17d1b462c433f4fc59837bdc3ba69df69a56bd56663ff991c9cc95f9d8538db0e2b6c4bdbbaff44d8024deff115d52f39f8253f34eac28a15d6756e75ba7db99e451397905bcdc63645504023fac0c6e0d32d50e2f36ac5aeda580dcec8966665e804e50a13dfae66000074dd4f2fda940934dfc10364b5557b074f918c07ad78b57ebef9046dc6833297a2f5089a2a3cec837f12825871f590d338af2f83c3da64eda43b0128dcfdf88b0641733add71a50147702526842defa2b9c5a95a60a367b34e78dcd89aa0ce7ea495ca42d71ace65c20ea4cd6ae5ef35b58e7305fde512d83cea954f383f19200c3afea573db2cce6799edd8af7dee738a5d56b01dbe9365d7bf78a53110f6b325cb88d60ca8db521c8709ccc32a9275ab49440e12e184ea75acfecd072ef42e4292b8633ebf5636a6c50377ba7c1e9889c108947383dc327e9a160a752693f8399ba9f24c3dd265e2de69d192c87aeee5da7edb9685c70836284b245d7475b554a1ee585f10903a6883855b5d46f174bf2a654709556b12517eaec7adc7b71c62a5d1ff90faa2c8d7daa22566157fc63348b601592a4e2ae61b6d232948f4d145af6dfe18e848a446975aa03eb5334e67803dd67fc4b57ae8cf2bb3bee0edeaa9d6a1113e6f8c66d57badc066f6cfd3364ae60f4b67055464033234c47785d42569c240b5384411bfae1e86481c896614fd63a3db2eb0002e7dcb6885b62385aa7df6c11a54f8730b88dc44f7f5b799dbb849a97b971c01a3944fb7ef8b294109a1e0f648b637745dc41a2c3319227e0178fbdce2f6a26dc1178ef2bbeec797ee5483e4ba760734bd6df440759445791ad8d153c3ca581991261db8962bff37b1a0445d443cf19d6f9928e541f93dd452dad9c9678b7ddb152283c9346093e166d4009581027aaa463b4139dd833c26921c238b9dd60d395832a7685bac66bfe92d087de22c579f0cd98632d204a0029f0d46d46301ec2dae597608063eb6a82bb6b0176b89f8953ceb33e1083ae83d7b36de4e8af3ed4b60d9e97443998e72c83ee5114b37ea8567e75ba32a544bbd8455ec851b1a26e84cc1d6fb8441a890a888374015802ff87053a34f957459dd4b54d85764820847ebe86176e4c5745c2fa5fa20c349fcdf0f4761ba9cdfc1decf7ca6dddb5b8e745ef213526b4d392fb9ff1d6eb70fc40a07afef3e6fa96152f44405a0a24edcdff4361326506c476b44a2afddfb9f1d75a09bf2e1e328a0aa81f5af563fc926664a6d67301335287f670a3d1888bdc123a118993d4553f81ca36e6874195d34f8445d46b75f717c76c23b0e70c86f3bf017c2043931d59a4b9968099f02aa358ec858fee3a748b9f5a38e66a6e5f43c54b134b5d44ff8b375d391feba6cd69c4a14ebb3e1a9c0574ae24d356f492dbcc52502ff4f89c25fc1bb7f3f3e3b9962d1a1d50b84eb1f25906df153056d63bf6c7fa66214b0b78f1010e55eb705cbfb18c79c076230825e03b4ec6616c6f0e9ddc399a8c76cb498aaa616b44688c99e61e2427c253121b4e74891bd5c161f6c4e227c785c6ff5b34e2c1ca2f89c6810f387d21774f5932f0bd0eb0520f59bc2e868d07a0a1b080622238d4b2a7517a1c009ef52e26d0c6aa94c62ecf70c763d832a64999b4a35b429f862e7200e2b2b833a2f0a552c0deae671265223ea2192f166399dbc4ba4ea974e938ed23a2188cd16357b9b65300d4cecddc54edbf347a428f13d3fdce41c0bd07d57cd3162d0517734fdea34e3da194ad3277fbce780e28556249065e5e7e96706d8d345566614f8cc6b5afbef8249efc4fc216b92396eab2708de888c22c59eb3c6b70659916dc6f6af6953665fbac7c1fdc941fd603804fb7d109d18bfda39923bf00ab43c49b7ac0deb60fa2661e98b27007e734e06483de5a7797cdf383c3416d9763c08b810f978fd9d18855cd6645db879cc6081472b21ace94e717a60a84269a3fde2add0c9465fd0906436c81eae0f7471f6b1076ba9efc12feb3926f33fc7539aeb9c753eb605e884646e2815d09f30d33532322a6d7afe8d60df2a77c7f572c70186277a60ee29920f2e39fe7189725796296909175ec405db8f429b3305180159911190215175056483160e95e08bf286716a1172433d2c007d87b34740ddf0e0c540cc0d8302e25baa247676a14381477ed7fc069c30963b1bb1f963fecba02101c7a90aaf264182c553055aabac42ae42a17bcafe6207db324cc57b6aa0dd487523b7dc26d1f463a2276f02841ec679624cb6fb97aebfbce2e029ca629ae044efdb53c2d0c79f0d4c2a9039833d36a8885f720e28b42c289642351c628374e5271d4e8e512e48522567c6bf095a8cdaa5477991b313693b0b4c7c6437d813d2d8f38491db11751633cae44f55e7bfe90e19ee9b25fb9cd2918bcb0e6d0741c7bd04499f620e2e9930ca2f97bc9034b06956a2847bf62fb533bc8529e6a11317a018bceb846a2eaf27f12e93407c568584f5ab2b6c86292e5ce5fe2ea40bb776c1a075669e51281372a4dad732626fe246ffde895827ec79aa3db249b0c2cb4f5eb452976bcc3ee227f977483ef1134449f305e8e794424d5242abd38b0d7c9426779f65ffe23c2026067344375121c0cecb4748420cb8ddcba9004348db84db712fb711f7863009aca6dc4b35f5d34fef16e3314b5de964ac00f0483fddcea36e7e0edb628f14e7ef573fff5d60e3ace9239b5e2c6aee238cb8a2b6cabd96d691525465f1ae3aca2497747ce3aa26191a16d82b0a58f1ad5367e0bdc692ef78f90791eb383d81f8a9f5e883873a67c20ee925f588b17fa8f9d90d993ab973e280339d01550c5b657d516b949e5797c51f0bc2acadb35667d61b31f5e6db67f2fbc2acb113f0eb985772b69d5f7840e9a8eb0eef642cb1073de96bcf49fa63f509c05fccb2ea371ab2a8af3cbb0858f4b867cbb05b71a8cd24c32d7c60404ba456d915565eecf8c66460d88b5f7d94edfe37e9e3a32ce2baa8d94db4212831e7009ad8ca4a24686201411fa186c92203b26d3553418ec24cbaa609da17d517d516982193588ddfaeb7b15a9bf4828c1045ea490d3d696a4734b4d3a99f3ba858d0a1ffc22f20ce914afcba27d59037f822484dec13b16a1caa4d61d716c3ee15f56ed8a9f2aa653dd7e3a164fbfc3a77d76c15baa06565173ade124b06fc1f8fe05c777724d103a510bf9916f3c7941829fac45014be4766b2fab6a26cb12a70b8a39c9ebd23ca8931ba6a87dca6c4750bea5dd1acafc37c23228023a5a03ffdeef18a71fe92c6e2d16d8028607eaacd4cac45dbc3e19f6bd738d295ddcf1ff80d74534f1b8920cfbf53566df8b6c6cf9a020481dc871b55ac628f7d9716f3558e739d8834cb3f545e82b08017910a78e6df2330f2379d13a0b48ad063521880b70505a1208070e94631ee48cc2a1a61c81b8108279bda31f16384e5a97016b287e55048ef7a89904da8f80afbc0fb762317e942cfe8fd993a4a3f0202596ca827da59457343ba17c2879996cdea13de2cd9a02406db0e113ec82be142c9a0a9f6e6477849b44d556f79dd70abe9a908b27cbba4e213f4905db37663d4899e266a7e5fb6fe4f886bfd2677994c93cb458791cfa7f6aed11df112783119cc1ebe7c9dd6960f2da76c720ca5085d0d634de713e713237e3bbfbbdf06bbe2d3602b00e9ad9ae71e471dbc42cc70ed75943f03d020000371f1f6eaf1483d495fa9c19247b31871c72073c76200eff5d8ff9c409d6302b5e6d27d3eca52f97a7b86143946abd51b2a5150bc4ff046d8bc47d1e882b66113c84e95ad73ad4e8918cf713bdd71dff520613f92caeee3633d5e15ea71c8f374d234316a9b5d1a332ca7fc11fce23466384bffdb5aebc6cc255d1e165d2d9bd3359075becc62b06ce4bf2a764d6cf8b1e58ac6c398631f63cfd9e6943ff385e1b4fb810942237cab534279a9b23eebc4b0a53e8c18da4bf40b82c16eb86a7267696b33b95ffe8e5d3ba9c1b3603ac1515ceca8019377732e5344f62a925776fc7545e24a8457ab047d9d43aa5e8b0ce427234c7f54f5f98376ec8a25c43ac2592f85fa1772e4392118e64ce3a06ede24cdfb23b1557825e30dd5b4acf01860c7354443954886a59034d5ed8ecb0e61957bc8a4ebbef3b3782448d3c07f216fb7bb9529888ee5ce16f8b455453bd2d1ea33980de804e1a6054fe86a73405e4e6711750ea1224786f95792ed8887fafdbfb32793b41a1b74ab3da58edb342dd56c044bebb3662b4f18e5a514241cff4e1b441fd6a6ac142fdb87458845f85694938c177c29477e0d907a8261cbe487e3006a45492a024d1e3da6ca669193f40ed3c24adf89cb1bdda560b4aa9bc8feddb622812eba52f6cb787119d59a5484409d606e2a712d74ba3ccffd3bdc720aa12b49cab45b27f40295ad854fbf65036e20d8b781fff5b8ca83219d5709847b3811e19a82218e0c31cced5d6dddb247658df5ebed36298791f202cc52528287288e6fa1b6503b50e4b3f381bd0176de32e0d13b8483f17ad586d84f49bd6e19098dfed8526b54fed344aa38b825663cd543dc2a83fe31412a06ae117bb12658d01688843c70a2123c5ef9f3d38aec8aafe39230655d071496ef3251ded4870a48ffbd54073ba4ad040b60b68e97da7d121669d9cc4a54fb9d47aaf88065b7d84cb4f5cbaa46182ae14bee8f6cd293d8fbb6349cafe4871c804be5a2db6373c85b461ec1263a7592e702027fcb07c863d21346973ffa1c0362af389b8f23074d3626272731c3d54dd78916b5917ad0f8ec5527cbd3f77fa49f56d8272f02fe51c71fc5174399da41acd606e20c1073f7e3a27d1554e11f1c6a6c75ae11ce187399c27a9eed80ae9db6e537f8f7e4aaf8839dd351eb3ba7e6546150372c1b8d82c259031dbad979ebfd4c7262750ef731723812f8f0c5508d20eb2af71b58944461a33fffdcd877572538db63bd6bca861f055acb1a84f648a27134e7819e994e202bac361b2450ba8cbb3806115df6f6c10495e7dd962173c3fcbfb5fbca69ab6845ae77c2d02bfa00ed30146bc0c406405d29036dcc8d9e2439dedb18f4cd9198afddc751c900fbc8bdf0737e109049345f910a758c65c4abcda817a3e706167e16321d3eeb0f4bdeeaf4c0e188799be0c23ea3507941e2dd520c77817602b4f8569a70f5d5449de246213fb8c3f70c258969a5a10fb5b7e70c8bb07dd40e51ae0523abd0a7d7ea95db854b4965525911f930a40f1af468da85e372d569ef4b24cd6788ad1330aa7c02e6a0f7911efba39b10841db092436f1fe9ca6cf989304354d395197ed1815a0e4998d5cda0fad1568f2c350660084927052db53ff2f2148ea7111b55d5dafb96f2f1e9f77ccb2ef16631ba0d9f2641650b82c380770083c0dde7523295f4b76d3578db61073fef44703175f3115601aefeabc59218951cc8e266740fdecafd1e2cb166047e7c752ae0432558de96ebfa0fcf48051ad949f2b49945193969d00b8336ae7d64182de8f0fe6793e6ad9388e275269861c54fd68ee8e969a4232ecce2784a154ffe6b2df349557cf2c5e9c7e9fca22c8b5353444b90df16a19cb9e98b56b84637e064f49d", 0x1000}, {&(0x7f0000001180)="aa3a99cd76156e50b3888038206268e467ccf2f03b75eda662dba14b993b7f2cb8d000542916a3f6e3e61b68b3531ef7f13e1a7502f5dadff16cd2c06a2877399b3cedcfbd5a66ed413abc4bf47cade3a317ee8120fc1260387690e8df924dc33c293c4ccd1e0d767a3f25310f200b33f99d72b4c88091bbb1ea3996b8cdaca2c0b6e0e16550d16fa668e22e434c0aec4b368fdc12bb169019389b7794fceb6a58813b3105ae5000529fa72161fc6876136b522401202c3ffcdcddded99230668cfd6690c17f001829cc5edc5fb2cf928de79ac39d4e36ea9fa12378d9fbb57708c85c0ca8fa6c17a6e7ad48f5", 0xed}, {&(0x7f0000001280)="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", 0x1000}], 0x3, 0x10, 0x10, 0x2) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x40010, r0, 0x8) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000022c0), 0x20400, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) syz_genetlink_get_family_id$l2tp(&(0x7f0000002300), r0) r3 = syz_open_dev$sndctrl(&(0x7f0000002340), 0x6, 0x10000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f0000002380)=0x3) close_range(r3, r1, 0x2) r4 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ff9000/0x1000)=nil) shmat(r4, &(0x7f0000ffb000/0x3000)=nil, 0x4000) syz_open_dev$usbfs(&(0x7f00000023c0), 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002400)={0xaa, 0x550}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002440)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000002480)={0x1d, r6, 0x0, {0x2, 0x0, 0x1}, 0xff}, 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000024c0)={0x800, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "097aba3c1a1983"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000034c0)={r7, 0x2}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000044c0)={[0x955, 0xf9f0, 0x7, 0x3, 0x4d, 0x3, 0x3, 0x6, 0x2fc8000000, 0x4, 0x901, 0x2, 0x3, 0x100000000, 0x1], 0xaaad7002, 0x4}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000004580)={0x6, 0x6908, 0xe86, 0x84000, 0xffffffffffffffff}) ioctl$XFS_IOC_START_COMMIT(r8, 0x80585882, &(0x7f00000045c0)) memfd_create(&(0x7f0000004640)='&!.[!$(\x00', 0x2) ioctl$OCFS2_IOC_GROUP_ADD64(r3, 0x40186f03, &(0x7f0000004680)={0x5edc000000000000, 0x7fffffff, 0xfffff069, 0x5}) ioctl$NILFS_IOCTL_SET_SUINFO(r2, 0x40186e8d, &(0x7f0000004780)={&(0x7f00000046c0)=[{0x0, 0x1, 0x0, {0x4, 0xff}}, {0x7, 0x1}, {0x4, 0x0, 0x0, {0x86, 0xdc}}, {0x1, 0x0, 0x0, {0xfff, 0xeb, 0x1}}, {0xfffffffffffffffd, 0x1, 0x0, {0xa, 0x4}}], 0x5, 0x20, 0x7, 0x8c6}) 3.901740632s ago: executing program 5 (id=4192): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x1c, 0x2e, 0x9, 0x70bd2d, 0x0, {0x4}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic='/']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42841}, 0x4810) semop(r0, &(0x7f00000000c0)=[{0x2}], 0x1) semop(r0, &(0x7f0000000000)=[{0x2, 0x0, 0x2000}, {0x3, 0x1, 0x1000}], 0x2) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) semctl$GETZCNT(r0, 0x2, 0xf, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x15) msgsnd(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000000000000b8e184b45b5614a17a77074ed7ca9a15371c0824b046fa3bf5418fc93298e290a3f0f5f5b43e3bfcfc081ef2971019b2449bf4925004d7e9127e5bb4585203914f5d6681ccac2c8bcc02b5905ce64ec7cb2606ccdd5553a48275fa09425c925ad6a8d81e67f0da4a0bde3408c8f595b7c0c18c7e486b3ad54cfdbc88d186db8f7c20"], 0x8a, 0x0) write$uinput_user_dev(r2, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0x48, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x10001, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x1, 0x0, 0x0, 0x5, 0x2000, 0xfa, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x58c51ee, 0x80, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0x9, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x1000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x2aa6, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x0, 0xb, 0x1, 0x4000000, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x10000, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x4]}, 0x45c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={r4, 0x23aa}, 0xc) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r2, 0x5501) 3.90086353s ago: executing program 6 (id=4193): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x100000000, 0x7]}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x8}]}) socket$inet6(0x10, 0x3, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x208, 0x1a, 0x7, 0x8, 0x0, {{@in6=@mcast2, @in6=@private1, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x5}, {0x1a7761c0, 0x0, 0x7f}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x71}, [@coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x2a}}, @migrate={0xe8, 0x11, [{@in6=@empty, @in=@broadcast, @in6=@mcast1, @in=@private=0xa010102, 0xff, 0x2, 0x0, 0x3504, 0xa, 0x2}, {@in6=@private2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, @in6=@remote, 0x3c, 0x1, 0x0, 0x0, 0x2, 0x2}, {@in=@private=0xa010102, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, @in=@remote, 0x32, 0x3, 0x0, 0x3503, 0x2, 0xa}]}, @lastused={0xc, 0xf, 0x400}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffffb}]}, 0x208}}, 0x4000040) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000d40)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r8) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r10, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000400)={0x2d8, r7, 0x0, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x80000000, 0x7e}}}}, [@NL80211_ATTR_REKEY_DATA={0x9c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e3ebe3a23144fc52dc47c84314fea29c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ce68e8efbb542b7c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "41c95fd4281b2757"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="458c26f50b56703fd144ecd60b314051"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "189c0c0fabf914dc"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "22d9e9aaba2764e2"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="dd9a223a6a4b60787b486b93d2d77c2e7c8a8f8aa3d2b10dfd088aa687ff1b5b"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="807f1167609c64fea3777f1a4f6df826"}]}, @NL80211_ATTR_REKEY_DATA={0xd0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a2fc57085fac7012a3ac881f14946130df7853b179739f70"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ce645c18de0cfe95"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="99e83673987629c986d7da4b5c2214b0"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="254e45c9cbb7c63a6bb07808d479dbf605320e8d7629097924b22514b28b2c10"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="4af0481d62e89c8f1539bdf3cf92fd457d9e13da45f4cdc8"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="18d52f22e43079b84690938dd54934e0293dbf61053a14f04ec3e4ee3f80d807"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffffd}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="73eeba63adca09e57f9f9dd172e27739df0067416bd8478018247db1336332ed"}]}, @NL80211_ATTR_REKEY_DATA={0x7c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b49dc653579a5a34733b7ccaaba6594bdd14752062711bf5194b19aa1fb26ab2"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9e1f7d010c8817cd06ddb3f8b0fc9984"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e4b05a0099c472e58d91d061ea501189"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6a2a557132b761536d4f155f5383b32d"}]}, @NL80211_ATTR_REKEY_DATA={0xc8, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="390b2f5d566e08a08ec6568acbd01fc5"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4a56d792d4794e8767bb48710b41383e"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="e21db3317f9b4379a9d4b975b2428a74bc8ccf5bab8447bda57729dd0e9bc7f5"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="86f7ff3d8b6e94bd83775009f9c9a11a"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6ee2}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1362ce8042f5983bda0365f2e73ef9c6c83cfd4c8cedae1dd908b061f1a470f6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b06506ad05232a5a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="70cfc039831639b677ae69722ba9fdd6f6dcd6226076bac3"}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x4004081}, 0x0) 3.800228716s ago: executing program 4 (id=4194): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000000)=[@wr_crn={0x67, 0x20, {0x0, 0x9}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @uexit={0x0, 0x18, 0x8}, @rdmsr={0x66, 0x18, {0x865}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x8, 0x2, 0x7fffffffffffffff}}, @nested_amd_invlpga={0x17d, 0x20, {0x80a0000, 0x2461}}, @wrmsr={0x65, 0x20, {0x27b, 0x5}}, @wrmsr={0x65, 0x20, {0x585, 0x3}}, @code={0xa, 0x60, {"f3400faee9b805000000b9459a38670f01c1c462a19606b805000000b989a371350f01c166baf80cb80c767b89ef66bafc0cec26666546aa2ef3430fa6d0c4e37bf0f69f66b8c2008ee8c4e219ab02"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x5, 0x0, 0x9036, 0xff}}, @in_dx={0x69, 0x20, {0xcea5, 0x6}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control64=0x2033, 0x3, 0x4}}, @wr_drn={0x68, 0x20, {0x2, 0x3}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x73, 0x3}}], 0x248}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r0, 0xc008aec1, &(0x7f00000002c0)={0x9, 0x0, [{0x1, 0x6, 0x4, 0xfffeffff, 0x1, 0x19a3, 0x200000}, {0x6, 0x0, 0x4, 0xb3, 0x8, 0x8}, {0xa, 0x6, 0x1, 0x7, 0x8, 0x384, 0x25f0ae6a}, {0xd, 0x17, 0x1, 0x3, 0xffffffff, 0x80000001, 0x5}, {0x80000008, 0x84, 0x0, 0x1, 0x6, 0x8, 0xb}, {0x40000001, 0xe, 0x2, 0x6, 0xfffffff8, 0x1000, 0x3}, {0x80000001, 0x9, 0x3, 0x9, 0xb3, 0x59, 0x7fff}, {0x6, 0x2, 0x0, 0xb, 0x9, 0x7, 0x7fff}, {0xc0000001, 0x0, 0x3, 0xffffff7d, 0xffff8001, 0xee6, 0x9}]}) (async) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(0xffffffffffffffff, 0xc008aec1, &(0x7f0000000440)={0x9, 0x0, [{0x40000000, 0x4, 0xc3a22bc702af035c, 0x4, 0x3, 0x1, 0x7}, {0xc0000000, 0x4, 0x2, 0x8, 0x5, 0x7ae8901}, {0x80000019, 0x2, 0x6, 0xc, 0x0, 0x1, 0x8}, {0x1, 0x4db, 0x1, 0x8, 0x5d, 0xf9, 0xa}, {0xc0000000, 0x7b, 0x0, 0xd1a9, 0x0, 0x2, 0xf365}, {0xc0000000, 0x80000001, 0x1, 0x4, 0xb67c, 0xffff48c4, 0x9}, {0xc0000000, 0xffffff01, 0x1, 0x7, 0x5, 0xffff, 0x3}, {0x1, 0x5, 0x0, 0x8000, 0x5, 0x7, 0x3}, {0xc0000000, 0x100, 0x4, 0x0, 0xe6, 0x5, 0x5}]}) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000800)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000880)={0x5, 0x10, 0xfa00, {&(0x7f0000000600), r2}}, 0x18) (async) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x25, 0x1a, @void}, 0x10) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000900)={r3}, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000940)={r4, 0x4192, 0x7, 0x9}) sendto$inet6(r5, &(0x7f0000000980)="8ddedb04255db9801a076698c553821b1f5943dc99bd3d1384fd713eea501c14323fef6949b9d5dbbd4a4ac295306b61d07640260c7daf7adc35c132d38d02d6ffb4cb99c30d4a78dedf95da3e6f2c22b6288d17f6d18b0d08199796acf359a70fedba63ae8d6bb77e5be9c837af7db026eedcc8373cd2dbf34b90b5496b0161df1f49f80e98707d4b9b6acfad8022487b8fd42f406f84b2890f9a58b048aa8eadb74d94ac5005a7a1f04cb0cd4dac1225b17acc14b05e2f5982a370a0842a31c7710183c54f4462b9508bf013a1c8083e374c9adabc88c4044d2c7744254f8713", 0xe1, 0x24000800, &(0x7f0000000a80)={0xa, 0x4e22, 0x0, @mcast1, 0x8}, 0x1c) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r4, 0x7b3, &(0x7f0000000ac0)) write$cgroup_int(r5, &(0x7f0000000b00)=0xfffffffffffff801, 0x12) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r4, 0x4068aea3, &(0x7f0000000b40)={0xa4, 0x0, 0x1}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r4, {0xffffffff}}, './file0\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000c80)={'syztnl0\x00', &(0x7f0000000c00)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0x2, 0x5, 0x0, @mcast1, @mcast2, 0x8, 0x7, 0x7, 0x6}}) bind$can_j1939(r6, &(0x7f0000000cc0)={0x1d, r7, 0x2, {0x0, 0x0, 0x3}, 0x100}, 0x18) ioctl$KVM_HAS_DEVICE_ATTR_vm(r4, 0x4018aee3, &(0x7f0000000d40)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000d00)={0x800, 0x4}}) (async) bind(r5, &(0x7f0000000d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x4, 0x0, 0x4, 0x2, {0xa, 0x4e24, 0xfc07, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x80) (async) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000000e00)) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r4, 0x80184153, &(0x7f0000000f00)={0x0, &(0x7f0000000ec0)=[&(0x7f0000000e40)="8ddb2a2d6e03c09c904320648858e32e71f61fbfdd2fbc64358d83016df8d210dc3ce37876165ee9bfc7efad689878990dba9386cc265520248133919c1c7440449b93d3702a6160ebf4"]}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r4, 0xc004aea7, &(0x7f0000000f40)=0x7) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000f80)='\x00', &(0x7f0000000fc0)=']/-^@\x00', 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001100)={@ifindex=r7, 0x12, 0x1, 0x10000, &(0x7f0000001000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000001040)=[0x0, 0x0], &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f00000011c0)=[0x0], &(0x7f0000001200)=[0x0, 0x0, 0x0], 0x0, 0xaf, &(0x7f0000001240)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001280), &(0x7f00000012c0), 0x8, 0x89, 0x8, 0x8, &(0x7f0000001300)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001140)={@fallback=r6, r5, 0x10, 0x28, 0x0, @void, @void, @void, @value=r10, r9}, 0x20) ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) shutdown(r4, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x8008202}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x54, 0x0, 0x1, 0x6, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x62}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xdf29}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffffe}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb1}]}, 0x54}}, 0x1) 3.600961173s ago: executing program 4 (id=4195): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x8000000000000000) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x4000}, {r0, 0x88}], 0x2, 0x7) 2.861803702s ago: executing program 6 (id=4196): syz_usb_connect$uac3(0x3, 0xb3, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003000000208205eb004000010203010902a1000301062005080b0001010130c60904008000010130000a24010e3d00060000000d2408040100000000020000001324030201040404"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$uac3(0x3, 0xb3, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003000000208205eb004000010203010902a1000301062005080b0001010130c60904008000010130000a24010e3d00060000000d2408040100000000020000001324030201040404"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f00000003c0), 0x61) r1 = socket$inet6(0xa, 0x5, 0xff) pipe2$9p(0x0, 0x4000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioprio_set$pid(0x2, 0x0, 0x4000) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x18c00, 0x0) (async) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x18c00, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) socket$netlink(0x10, 0x3, 0xf) (async) socket$netlink(0x10, 0x3, 0xf) listen(0xffffffffffffffff, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xa) (async) r4 = socket$netlink(0x10, 0x3, 0xa) dup(r4) (async) r5 = dup(r4) r6 = open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x14c) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) (async) sendfile(r5, r6, 0x0, 0x80001d00c0d1) socket$rxrpc(0x21, 0x2, 0x2) (async) r7 = socket$rxrpc(0x21, 0x2, 0x2) io_uring_setup(0x1612, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000043000/0x1000)=nil, 0x1000, 0xb) (async) madvise(&(0x7f0000043000/0x1000)=nil, 0x1000, 0xb) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$BTRFS_IOC_ENCODED_WRITE(r7, 0x40809440, &(0x7f0000001540)={&(0x7f0000000440)=[{&(0x7f0000001680)}, {&(0x7f0000001180)}, {&(0x7f0000001280)="2ca9d421ecd639c433d1e3bb8c3fbd563255ce5c1e6cce52ba7983120acf9c3b1767da2c3c736c233c9bbd7ee57772de68c84f44638a372a6d3e5e3ce7cc0bbb49f33a34188085e70df201", 0x4b}, {&(0x7f0000001300)="246fa80faa53ad48a689561ac9136219817a2d5aac1ce3f5601c4dbabd030901000000585f46b78270f4d4794cd6e6d86c517c59f8614dd4a525809c51893ce4c6395c564ff4b33aba22bccafd792cce29281c", 0x53}, {&(0x7f00000013c0)="13efc3e04d9ba42bc87de21a9367451603d39dee5a4c64f6f9a3998dfcb87ec812aa88f9ca6503fd14f37c407d17ceb024e1cfefae9d3cc21b7c", 0x3a}, {&(0x7f00000002c0)="d924ec5fc3757b24d27191191026cd77f11aefee7fd8320808885d523c638eb58b3dbb1904b5bbfc7261610f6834eb5f84f87ead11520d3f3d629f056e92a9baf24c63f8d677206434291ed64a4566e0e6e22bd46e26849a2ba8d9a7c14293bd7ece6614a89c4e997070e089f57e7f858f1a8619cbf185f1ee5309bac0196d07f93887ae34f4478e3246de9bc170d788b54941631100179a00fe7e38ec24c91479acffe39d66747b209339a814dfcc62f6650bbdb9f2cef9f47deb982afb5c470b2bdb67141f0a798ef3c49f96d19fd1f630000000000000000000", 0xdb}, {&(0x7f0000000040)="f01135cc189d44de149ff4535a1298cfce2b47c44b414948d53ddd3e", 0x1c}, {&(0x7f00000001c0)="19288daf524333a9800cc782c0da7ed1f6635e85ba2ebdc9f0f1b581efc8920629b7a900232c5a71f335cb6693b211f7236459a519863c65bc539a3143146bb70c69ac4057fcd573d2a6ec34721dd9f84f266ccad3dc02606c36063ebf0a20d80c6c40eb6cff62e3f7149410f998d4acd74e509479997897acde2996f093b3c838713064fbd4337a", 0x88}, {&(0x7f0000000280)="3865002d6e76166ee5ec0f85f53efa54142fc03c82696b4ccda932c93c2862b5776a170f1f92a5b2d2246aa87aebc8fbe7d7", 0x32}], 0x9, 0x7e21, 0x0, 0x200000000001, 0x8dc, 0x0, 0x5, 0x2}) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4) 2.792471723s ago: executing program 5 (id=4197): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087900060000000000000109022400010000200209040000090300030009210b00100122290009058103"], 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0xf, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x80, "d30580c9042b7275077bafe6410c2087850000000000000000000090001500", 0x47314356}) (async, rerun: 32) syz_usb_control_io$hid(r0, 0x0, 0x0) (rerun: 32) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3, 0x1}, 0x0, 0x4, 'id0\x00', 'timer0\x00', 0x0, 0x7, 0x9, 0x6, 0x4}) (async) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002229000000835d2e6def0bf745506883672f3d98a0a3675ca97899660b22391c804a441bc338adf9e1c3f718"], 0x0}, 0x0) 2.491703488s ago: executing program 6 (id=4198): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001400)=ANY=[@ANYBLOB="2000000010000104000000000001000000000000", @ANYRES32=r7, @ANYBLOB="c700010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r8], 0x54}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1201}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) 2.127902089s ago: executing program 4 (id=4199): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0200001200000828bd", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB, @ANYRES32], 0x22c}, 0x1, 0x0, 0x0, 0x8800}, 0x40085) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x800) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_MCE_KILL(0x29, 0x1, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48090}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x28}}, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x6, 0x1) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {0x0}, {0x0}], 0x6, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000140)={0x170001, 0x0, {[0x4, 0x2, 0x6, 0x9a4a, 0x7, 0x4, 0x80, 0x1000]}}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@nested_load_code={0x12e, 0x4d, {0x0, "48b800800000000000000f23c80f21f8350c0020000f23f86d3266b864000f00d03500010000b8050002000f006080000f01b00f30"}}], 0x4d}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a00000405b40798f77397ff41e40774cd7f8000010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 2.023723028s ago: executing program 5 (id=4200): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x2) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x4, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000000)={0x19a1, 0x2, 0x1}, 0x21, 0x0) landlock_restrict_self(r6, 0x0) bind$unix(r5, &(0x7f0000003000)=@abs={0x0, 0x0, 0x4e20}, 0x6e) listen(r5, 0x0) connect$unix(r4, &(0x7f0000000640)=@file={0x1}, 0x6e) 1.947646562s ago: executing program 6 (id=4201): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x40000002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r7 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004a40)={0x58, 0x0, &(0x7f0000000800)=[@free_buffer={0x40086303, r7}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000880)={@fd={0x66642a85, 0x0, r5}, @flat=@handle={0x73682a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x19}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, 0x0, &(0x7f0000000040)) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 1.778633052s ago: executing program 0 (id=4202): socket$nl_route(0x10, 0x3, 0x0) (async) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0}, 0x94) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001ff0), 0x10) (async) sendmsg$can_raw(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000140)=@canfd={{0x1}, 0xf8, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x38}, 0xee, 0x0, 0x0, 0x40041}, 0x88801) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, 0x0, 0x0, 0x2090) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) syz_open_procfs$userns(r4, &(0x7f0000000580)) (async) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) (async) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) (async) move_pages(r4, 0x0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 1.678671461s ago: executing program 4 (id=4203): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123301, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRESDEC=r2, @ANYBLOB="100026bd7000fedbdf256900000008000300", @ANYRES32=r4, @ANYBLOB="0500d300020000000a0006000802110000010000000500d2000d0000000600d400250c00000a00060008021100000000000500d3ff0600"/68, @ANYRESOCT=r4, @ANYRES64=0x0, @ANYRES16=r3, @ANYRES32], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) close(0x3) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000001c0)={0x5813, 0x5, 0x0, 0x3}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e008d2a00000100000000000a00e000", @ANYRES32=0x0, @ANYBLOB="040000338aef53d84078f908f1b8b8fff0afc761e52e5c07d01841b061998db8b9450bfb26849d840f0d0007d917580dadd7b445a3856c5f9e7b422e47984fc7fa54162de1c67ab7deab8665ff42b7fc1b"], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_pressure(r7, &(0x7f0000000240)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(r8) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x80) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, 0x0) 1.52754219s ago: executing program 0 (id=4204): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xe8, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010000773604202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) 1.449919019s ago: executing program 2 (id=4205): r0 = syz_usb_connect(0x0, 0x5f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d0001000000000904"], 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000100)=""/229, 0xe5) getdents(r1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0100000007000100a003080001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r3}, 0x38) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000900)=[@nested_load_code={0x12e, 0x66, {0x3, "410f01df0f3266b800018ed0470f01c2b9800000c00f3235000400000f30430f01cbc74424009b000000c744240207000000ff2c24c4c26508bdbc00c0fe66450f38807f06f3470fc735d9e5e5aa"}}, @uexit={0x0, 0x18, 0x4}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x3, 0x7}}, @wrmsr={0x65, 0x20, {0x34e, 0xb8}}, @uexit={0x0, 0x18, 0x6705dd4b}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x282, 0x8000000000000000, 0x1}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x42, 0x1, 0x6}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x97, 0x7, 0x4, 0x3}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_amd_vmload={0x182, 0x18, 0x1}, @uexit={0x0, 0x18, 0x3}, @cpuid={0x64, 0x18, {0x1, 0xfce88e1}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @cpuid={0x64, 0x18, {0x80, 0x2}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x657, 0x0, 0x2bd, 0x2}}], 0x27e}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="34010000", @ANYRES8=r0, @ANYBLOB="595300000000fddbdf256bc80b0008000300", @ANYBLOB="6fc0ce6a6fed33c564414e7bc9e253bb3bfcfaf9a3c493f445c99519e5c655e5df4809e7fbbd5a8b2a2919abe974e7bec03ebc84923d1ed628487ca41d19f7d5bb5024c4fa97600b865e7036650a9fcc73b371da9bc4b8b16951cf579af90600a62a3c3a5b18eff2a6c22e04e8505d322cf88b02f52509f8b1c1399d77837a2f1d0517f2130d598ea84d80227709d95124f1d7efd556512231aef38b5b1c8fcb102dc82870f572b15a405d845863c4baef90077904c769260db20ea2f24b57f021823b23443431963b07b94da24efd9f2ba567557d4346f2801fc8", @ANYRES32=r0], 0x134}, 0x1, 0x0, 0x0, 0x84a0}, 0x5ef768c147daadb0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000080)={0xdddd1000, 0x1000}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r3, &(0x7f0000000000), 0x0}, 0x20) socket$netlink(0x10, 0x3, 0x12) 1.095368895s ago: executing program 5 (id=4206): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40) r1 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x80}}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x6, 0x8b22, 0x0, 0x4, 0x16, 0x11, "fee8a2ab78fc979fd1e00d96072000000ba89de2b7fb0000e6a180b8785d960001000000000041eb8109af00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f42274cb7a323405f400003fe2000000000000000400000000000000002a00", [0x0, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) r3 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x1, 0xb51b, 0x654, 0xfffff04b, 0x0, 0x8}) prctl$PR_CAPBSET_DROP(0x18, 0x11) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000001c0)={r5, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000100)={r5, 0xc7, "8bbcf57adfc30e58885c9345d76a1978319f3890ca14cbb34fed6ff18e2e6f74084ef9f1ff8211a6bfc3db9e7b6bcbd05193746be5877526b16179ac7c56ecbce2d9da07e5c711f1a76c733c25e473133f236731b0e72654c96143d79be86b5a42c69bf93a1d3f920f7e9d3259807a01fa8d965e0d79b533956b24a8f286d3973965fd2c98dbf0c07edb33e0648f7bd8bb35df665849743dfc66f8917f7e525cadc94c6e0c891dc744fdf7323b4396f63e553ee4d0fb529c83fe656ea584799547fbc4529b0b98"}, &(0x7f0000000200)=0xcf) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180b00, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x300, 0x150, 0xa0, 0x3f, 0x9, 0x3, 0x0, 0x0, {}, {0x1ff}, {0x7, 0x62e, 0x1}, {0x0, 0x3}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffe, 0xf, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) 994.548278ms ago: executing program 6 (id=4207): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b14, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf0, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) 626.665811ms ago: executing program 5 (id=4208): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960400000001030200010006000609240305050306058109240306010104050507240405"], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYRESDEC=r1]) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file0\x00', r2, 0x4000, r2}, 0x18) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file0\x00', r2, 0x4000, r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sync() r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x500, 0x0) ioctl$VIDIOC_DECODER_CMD(r4, 0xc0485660, &(0x7f0000000540)={0x3, 0x2, @stop_pts=0x1}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x12) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) (async) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0xb}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0xb}, 0x94) syz_usb_control_io$uac2(r5, 0x0, 0x0) (async) syz_usb_control_io$uac2(r5, 0x0, 0x0) 0s ago: executing program 2 (id=4209): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close(r1) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0xffff, 0xf}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2008085}, 0x41) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012000f1048108cd060202d4c34e01000109021b1901000000d40904150001da40df000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a000014000280100017800c0001"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)={0x3, 0x0, [{0xa000, 0x3e, &(0x7f0000000140)=""/62}, {0x80a0000, 0xc6, &(0x7f00000002c0)=""/198}, {0x1000, 0x90, &(0x7f00000003c0)=""/144}]}) fstatfs(r2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = eventfd(0x8c69) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x4, r10, 0x11}) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000240)={0x8, 0x0, 0x4, r10, 0x1}) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x4, r10, 0x1}) close(r7) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(r11, 0x40085874, &(0x7f0000000000)={r2, 0x8001}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fddbdf250200000008000300", @ANYRES64=r5], 0x40}}, 0x48000) kernel console output (not intermixed with test programs): id=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20379 comm="syz.5.3727" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 987.251664][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.258208][ T30] audit: type=1326 audit(1778660947.705:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20379 comm="syz.5.3727" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 987.330235][ T30] audit: type=1326 audit(1778660947.705:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20379 comm="syz.5.3727" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 987.428507][ T30] audit: type=1326 audit(1778660947.705:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20379 comm="syz.5.3727" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 987.462892][ T30] audit: type=1326 audit(1778660947.705:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20379 comm="syz.5.3727" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 987.494082][ T30] audit: type=1326 audit(1778660947.705:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20379 comm="syz.5.3727" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 987.554588][ T30] audit: type=1326 audit(1778660947.705:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20379 comm="syz.5.3727" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 987.582360][ T30] audit: type=1326 audit(1778660947.705:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20379 comm="syz.5.3727" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 987.609629][ T30] audit: type=1326 audit(1778660947.705:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20379 comm="syz.5.3727" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 987.636294][ T30] audit: type=1326 audit(1778660947.705:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20379 comm="syz.5.3727" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 987.938901][ T5690] usb 7-1: USB disconnect, device number 51 [ 988.277472][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.595567][T20406] loop2: detected capacity change from 0 to 7 [ 988.707140][T20406] loop2: [ 988.751238][T20406] loop2: partition table partially beyond EOD, truncated [ 988.803284][ T5682] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 988.819366][T20409] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 989.114231][ T4992] loop2: [ 989.124937][ T4992] loop2: partition table partially beyond EOD, truncated [ 989.314654][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.322835][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.504607][ T4992] loop2: [ 989.512421][ T4992] loop2: partition table partially beyond EOD, truncated [ 989.635020][T16500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.069820][T20446] SET target dimension over the limit! [ 990.187150][T20448] sch_tbf: burst 197 is lower than device lo mtu (65550) ! [ 990.354045][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.467932][T20444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.500034][T20444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.893181][T16500] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 991.063202][T16500] usb 5-1: Using ep0 maxpacket: 8 [ 991.087928][T16500] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 991.120191][T16500] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.152514][T16500] usb 5-1: Product: syz [ 991.182139][T16500] usb 5-1: Manufacturer: syz [ 991.200918][T16500] usb 5-1: SerialNumber: syz [ 991.393940][T13445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.644136][T20459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3746'. [ 991.667002][T20459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3746'. [ 991.844705][T20471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.855518][T20471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.329132][T20481] xt_TPROXY: Can be used only with -p tcp or -p udp [ 992.435046][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.495847][T20488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3757'. [ 992.676838][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.721408][T20499] netlink: 'syz.2.3760': attribute type 9 has an invalid length. [ 992.743339][ T5682] usb 7-1: new low-speed USB device number 52 using dummy_hcd [ 992.884231][ T5682] usb 7-1: device descriptor read/64, error -71 [ 993.153513][ T5682] usb 7-1: new low-speed USB device number 53 using dummy_hcd [ 993.162628][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.167276][ T5690] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 993.170267][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.313625][ T5682] usb 7-1: device descriptor read/64, error -71 [ 993.333909][ T5690] usb 3-1: Using ep0 maxpacket: 16 [ 993.341448][ T5690] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 993.350949][ T5690] usb 3-1: config 0 has no interface number 0 [ 993.359093][ T5690] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 993.371095][ T5690] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 993.385949][ T5690] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 993.395258][ T5690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.403356][ T5690] usb 3-1: Product: syz [ 993.409576][ T5690] usb 3-1: Manufacturer: syz [ 993.415615][ T5690] usb 3-1: SerialNumber: syz [ 993.424557][ T5690] usb 3-1: config 0 descriptor?? [ 993.433543][ T5682] usb usb7-port1: attempt power cycle [ 993.439865][T20501] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 993.448425][T20501] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 993.474248][T13445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.660481][T20501] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 993.671277][T20501] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 993.681300][T16500] mxuport 5-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 993.696852][T16500] mxuport 5-1:254.0: probe with driver mxuport failed with error -5 [ 993.723799][T16500] usb 5-1: USB disconnect, device number 36 [ 993.793561][ T5682] usb 7-1: new low-speed USB device number 54 using dummy_hcd [ 993.824082][ T5682] usb 7-1: device descriptor read/8, error -71 [ 994.063495][ T5682] usb 7-1: new low-speed USB device number 55 using dummy_hcd [ 994.094064][ T5682] usb 7-1: device descriptor read/8, error -71 [ 994.224658][ T5682] usb usb7-port1: unable to enumerate USB device [ 994.321411][ T5690] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 994.336336][T20501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.357248][ T5690] asix 3-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 994.372243][T20501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.382975][ T5690] asix 3-1:0.251: probe with driver asix failed with error -32 [ 994.455360][ T5690] usb 3-1: USB disconnect, device number 87 [ 994.514001][T13445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.750712][T20516] program syz.4.3765 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 994.832173][ T30] kauditd_printk_skb: 124 callbacks suppressed [ 994.832197][ T30] audit: type=1326 audit(1778660955.355:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20515 comm="syz.4.3765" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa4fdf9ce59 code=0x0 [ 994.892038][T20519] bond3: option updelay: invalid value (18446744073709551615) [ 994.902974][T20519] bond3: option updelay: allowed values 0 - 2147483647 [ 994.915505][T20519] bond3 (unregistering): Released all slaves [ 995.328997][T20532] bond3: option tlb_dynamic_lb: invalid value (16) [ 995.356276][T20532] bond3 (unregistering): Released all slaves [ 995.554182][T13445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.715733][ T5682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.868613][T20546] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3772'. [ 996.023462][T20550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 996.068539][T20546] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3772'. [ 996.138398][T20553] syzkaller0: entered promiscuous mode [ 996.154604][T20553] syzkaller0: entered allmulticast mode [ 996.352247][T20561] ip6gretap1: entered promiscuous mode [ 996.596499][T13445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.643251][T16497] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 996.784236][ T5682] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 996.813610][T16497] usb 7-1: Using ep0 maxpacket: 8 [ 996.814002][ T5690] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 996.836000][T16497] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 996.848545][T16497] usb 7-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 996.865838][T16497] usb 7-1: config 1 interface 0 has no altsetting 0 [ 996.879227][T16497] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 996.889887][T16497] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.899637][T16497] usb 7-1: Product: syz [ 996.904708][T16497] usb 7-1: Manufacturer: syz [ 996.909754][T16497] usb 7-1: SerialNumber: syz [ 996.965995][ T5682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 95, changing to 10 [ 996.977928][ T5682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26209, setting to 1024 [ 996.990841][ T5682] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 997.008408][ T5690] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 997.019268][ T5682] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 997.019301][ T5682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.037811][ T5690] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 997.062877][ T5682] usb 3-1: config 0 descriptor?? [ 997.067214][ T5690] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 997.074415][T20564] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 997.099471][ T5690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 997.112377][ T5690] usb 5-1: SerialNumber: syz [ 997.123243][T20538] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3769'. [ 997.144268][T20538] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3769'. [ 997.347559][ T5690] usb 5-1: 0:2 : does not exist [ 997.407153][ T5690] usb 5-1: USB disconnect, device number 37 [ 997.426831][T20584] bridge0: port 1(veth0_to_bridge) entered disabled state [ 997.439421][T20585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.456064][T20585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.487419][ T6484] udevd[6484]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 997.540443][ T5682] plantronics 0003:047F:FFFF.004E: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 997.617371][T20587] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3783'. [ 997.637192][T13445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.720316][ T5682] usb 3-1: USB disconnect, device number 88 [ 997.808311][T20584] batman_adv: batadv0: Interface deactivated: ipvlan0 [ 997.877751][T20587] batman_adv: batadv0: Removing interface: ipvlan0 [ 997.930477][T10223] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.942981][T10223] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.956450][T10223] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.968015][T10223] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.180535][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033911c00: rx timeout, send abort [ 998.546979][T20602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3787'. [ 998.595343][T16497] cdc_ether 7-1:1.0: GUID doesn't match [ 998.624570][T16497] usb 7-1: USB disconnect, device number 56 [ 998.675257][T13445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.681080][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033911000: rx timeout, send abort [ 998.692919][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033911c00: abort rx timeout. Force session deactivation [ 998.754832][ T5682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.806358][T20606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3789'. [ 998.924607][T16497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.191859][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033911000: abort rx timeout. Force session deactivation [ 999.195236][ T5690] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 999.365875][ T5690] usb 5-1: config 251 has an invalid interface number: 254 but max is 0 [ 999.376893][ T5690] usb 5-1: config 251 has no interface number 0 [ 999.384501][ T5690] usb 5-1: config 251 interface 254 has no altsetting 0 [ 999.396108][ T5690] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=e1.c1 [ 999.406899][ T5690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.416759][ T5690] usb 5-1: Product: syz [ 999.421667][ T5690] usb 5-1: Manufacturer: syz [ 999.427652][ T5690] usb 5-1: SerialNumber: syz [ 999.610225][T20623] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3793'. [ 999.661438][ T5690] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:251.254/input/input88 [ 999.700160][ T5690] usb 5-1: USB disconnect, device number 38 [ 999.714064][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.028755][T20634] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3794'. [ 1000.096060][T20636] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3798'. [ 1000.279138][T20629] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1000.287103][ T5690] IPVS: starting estimator thread 0... [ 1000.353463][ T5627] Bluetooth: hci2: command 0x0406 tx timeout [ 1000.375607][ T5713] usb 7-1: new full-speed USB device number 57 using dummy_hcd [ 1000.393240][T20641] IPVS: using max 38 ests per chain, 91200 per kthread [ 1000.477740][T20647] loop5: detected capacity change from 0 to 7 [ 1000.502939][T20647] Dev loop5: unable to read RDB block 7 [ 1000.525908][T20647] loop5: unable to read partition table [ 1000.538911][T20647] loop5: partition table beyond EOD, truncated [ 1000.547553][T20647] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1000.557532][ T5713] usb 7-1: not running at top speed; connect to a high speed hub [ 1000.586195][ T5713] usb 7-1: config 254 has an invalid interface number: 22 but max is 0 [ 1000.611625][ T5713] usb 7-1: config 254 has no interface number 0 [ 1000.628735][ T5713] usb 7-1: config 254 interface 22 has no altsetting 0 [ 1000.661859][ T5713] usb 7-1: New USB device found, idVendor=9968, idProduct=5158, bcdDevice=59.23 [ 1000.678676][ T5713] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.700829][ T5713] usb 7-1: Product: syz [ 1000.717421][ T5713] usb 7-1: Manufacturer: syz [ 1000.744843][ T5713] usb 7-1: SerialNumber: syz [ 1000.754322][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.868481][T20654] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3803'. [ 1000.992763][ T5713] usb-storage 7-1:254.22: USB Mass Storage device detected [ 1001.120072][ T5713] usb 7-1: USB disconnect, device number 57 [ 1001.470222][T20670] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1001.801918][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.810359][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.853776][T20673] netlink: 'syz.6.3807': attribute type 21 has an invalid length. [ 1001.924582][T20673] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3807'. [ 1002.253933][T16493] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1002.264809][T20679] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3809'. [ 1002.278819][T20679] netlink: 'syz.5.3809': attribute type 11 has an invalid length. [ 1002.403799][T16493] usb 7-1: device descriptor read/64, error -71 [ 1002.643713][T16493] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1002.726883][T20691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1002.783977][T16493] usb 7-1: device descriptor read/64, error -71 [ 1002.834077][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.905044][T16493] usb usb7-port1: attempt power cycle [ 1003.025158][T20701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.037227][T20701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1003.263748][T16493] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1003.293977][T16493] usb 7-1: device descriptor read/8, error -71 [ 1003.543284][T16493] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1003.595289][T16493] usb 7-1: device descriptor read/8, error -71 [ 1003.642463][T20721] libceph: resolve '96.' (ret=-3): failed [ 1003.712337][ T30] audit: type=1326 audit(1778660964.235:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20720 comm="syz.2.3821" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c6439ce59 code=0x0 [ 1003.739357][T16493] usb usb7-port1: unable to enumerate USB device [ 1003.874398][T16493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.004037][T13445] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1004.154174][T13445] usb 3-1: Using ep0 maxpacket: 16 [ 1004.169982][T13445] usb 3-1: too many configurations: 112, using maximum allowed: 8 [ 1004.235663][T13445] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1004.275388][T13445] usb 3-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 1004.294259][T13445] usb 3-1: Product: syz [ 1004.308269][T13445] usb 3-1: Manufacturer: syz [ 1004.339208][T13445] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1004.362559][T13445] r8152-cfgselector 3-1: config 0 descriptor?? [ 1004.481711][T20732] syzkaller0: entered promiscuous mode [ 1004.503946][T20732] syzkaller0: entered allmulticast mode [ 1004.641938][T20739] netlink: 'syz.0.3822': attribute type 13 has an invalid length. [ 1004.835843][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.913978][T15827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.423775][ T5713] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1005.574710][ T5713] usb 7-1: device descriptor read/64, error -71 [ 1005.825423][ T5713] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1005.954270][T15827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.973982][ T5713] usb 7-1: device descriptor read/64, error -71 [ 1006.094820][ T5713] usb usb7-port1: attempt power cycle [ 1006.433475][ T5713] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1006.454544][ T5713] usb 7-1: device descriptor read/8, error -71 [ 1006.694853][ T5713] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1006.710933][T13445] rndis_host 3-1:0.0: rndis: master #0/ffff88807d960000 slave #1/0000000000000000 [ 1006.770545][T13445] r8152-cfgselector 3-1: USB disconnect, device number 89 [ 1006.779522][ T5713] usb 7-1: device descriptor read/8, error -71 [ 1006.894112][ T5713] usb usb7-port1: unable to enumerate USB device [ 1006.997461][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.373663][T13445] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1007.544130][T13445] usb 3-1: Using ep0 maxpacket: 32 [ 1007.619603][T13445] usb 3-1: string descriptor 0 read error: -22 [ 1007.626677][T13445] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1007.638162][T13445] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.661365][T13445] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1007.669335][T13445] usb 3-1: MIDIStreaming interface descriptor not found [ 1007.873514][T16497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.937650][T13445] usb 3-1: USB disconnect, device number 90 [ 1008.033867][T15827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.539490][T16497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.079777][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.132828][T20758] netlink: 'syz.2.3828': attribute type 1 has an invalid length. [ 1009.192594][T20759] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3828'. [ 1010.113934][T13445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.926370][T16500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.164332][T13445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.162406][T20748] tipc: Enabling of bearer rejected, failed to enable media [ 1012.194286][T13445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.210098][T20757] syzkaller0: entered promiscuous mode [ 1012.217777][T20757] syzkaller0: entered allmulticast mode [ 1012.271495][T20758] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1012.279679][ T30] audit: type=1326 audit(1778660972.795:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20762 comm="syz.5.3829" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 1012.420246][ T30] audit: type=1326 audit(1778660972.805:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20762 comm="syz.5.3829" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 1012.488266][T20771] netlink: 'syz.6.3831': attribute type 32 has an invalid length. [ 1012.518817][ T30] audit: type=1326 audit(1778660972.805:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20762 comm="syz.5.3829" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 1012.588239][ T30] audit: type=1326 audit(1778660972.805:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20762 comm="syz.5.3829" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 1012.739024][ T30] audit: type=1326 audit(1778660972.855:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20762 comm="syz.5.3829" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 1012.785130][ T30] audit: type=1326 audit(1778660972.855:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20762 comm="syz.5.3829" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 1012.811211][ T30] audit: type=1326 audit(1778660972.855:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20762 comm="syz.5.3829" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 1012.875143][T20782] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3833'. [ 1012.885584][ T30] audit: type=1326 audit(1778660972.855:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20762 comm="syz.5.3829" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 1012.929860][ T30] audit: type=1326 audit(1778660972.855:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20762 comm="syz.5.3829" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 1012.984917][T20779] netlink: 'syz.6.3833': attribute type 1 has an invalid length. [ 1013.044003][ T30] audit: type=1326 audit(1778660972.855:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20762 comm="syz.5.3829" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 1013.151457][T20782] bond1: entered promiscuous mode [ 1013.178208][T20782] bond1: entered allmulticast mode [ 1013.210980][T20782] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1013.234499][T16493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.445500][T20793] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3836'. [ 1013.637122][T16497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.666194][T17993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.677340][T16493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.695291][T16497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.953454][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.053214][T16497] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1014.183995][T16493] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1014.216931][T16497] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1014.226669][T16497] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.241133][T16497] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1014.250740][T16497] usb 7-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1014.263574][T16497] usb 7-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1014.278359][T16497] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1014.292585][T16497] usb 7-1: config 1 interface 1 has no altsetting 0 [ 1014.306801][T16497] usb 7-1: string descriptor 0 read error: -22 [ 1014.325460][T16497] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1014.341831][T16497] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.360632][T16493] usb 3-1: Using ep0 maxpacket: 16 [ 1014.380019][T16493] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1014.394430][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.415906][T16493] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1014.448257][T16493] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1014.473155][T16493] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.510495][T16493] usb 3-1: config 0 descriptor?? [ 1014.928134][T20803] kvm: user requested TSC rate below hardware speed [ 1014.969250][T16493] konepure 0003:1E7D:2DB4.004F: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.2-1/input0 [ 1015.162426][T16493] usb 3-1: USB disconnect, device number 91 [ 1015.228242][T20796] ip6gretap0: refused to change device tx_queue_len [ 1015.236720][T20796] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1015.430420][T20808] netlink: 'syz.5.3840': attribute type 5 has an invalid length. [ 1015.438746][T20808] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3840'. [ 1015.458032][T16497] usb 7-1: 2:0: failed to get current value for ch 1 (-71) [ 1015.591228][T16497] usb 7-1: USB disconnect, device number 66 [ 1015.937461][T20822] cifs: Unknown parameter 'fd' [ 1016.002280][T20824] input: syz1 as /devices/virtual/input/input89 [ 1016.194090][ T5690] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1016.347296][ T5690] usb 5-1: device descriptor read/64, error -71 [ 1016.513935][ T5713] net_ratelimit: 1 callbacks suppressed [ 1016.513956][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.563397][ T5751] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 1016.613935][ T5690] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1016.736326][ T5751] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 1016.762638][ T5751] usb 3-1: config 0 has no interface number 0 [ 1016.769037][ T5690] usb 5-1: device descriptor read/64, error -71 [ 1016.790628][ T5751] usb 3-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1016.843146][ T5751] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1016.876577][ T5751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.900917][ T5751] usb 3-1: Product: syz [ 1016.902180][ T5690] usb usb5-port1: attempt power cycle [ 1016.944428][ T5751] usb 3-1: Manufacturer: syz [ 1016.957715][ T5751] usb 3-1: SerialNumber: syz [ 1016.992508][ T5751] usb 3-1: config 0 descriptor?? [ 1017.014688][T16497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.067263][ T5751] asix 3-1:0.251: probe with driver asix failed with error -22 [ 1017.294550][ T5690] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1017.334975][ T5690] usb 5-1: device descriptor read/8, error -71 [ 1017.553957][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.603476][ T5690] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1017.639298][ T5690] usb 5-1: device descriptor read/8, error -71 [ 1017.764017][ T5690] usb usb5-port1: unable to enumerate USB device [ 1017.994329][T20855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1018.012662][T20855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1018.058576][T20855] pim6reg: entered allmulticast mode [ 1018.114816][T20854] pim6reg: left allmulticast mode [ 1018.594149][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.727255][T20857] IPv6: Can't replace route, no match found [ 1018.736798][T20858] IPv6: Can't replace route, no match found [ 1018.768353][T16497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.777084][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.361884][T16493] usb 3-1: USB disconnect, device number 92 [ 1019.408428][T10073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.423893][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.441383][T16497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.570781][T20873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3858'. [ 1019.640640][T16493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.691998][T20880] fuse: Bad value for 'fd' [ 1019.883424][T16497] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1019.884957][ T5690] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1020.006498][T20893] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3863'. [ 1020.053775][ T5690] usb 7-1: device descriptor read/64, error -71 [ 1020.085295][T16497] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.113244][T16497] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1020.146559][T16497] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1020.190133][T16497] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1020.216678][T16497] usb 5-1: SerialNumber: syz [ 1020.314229][ T5690] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1020.363994][T16493] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1020.396020][T20902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1020.411569][T20902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1020.454250][ T5690] usb 7-1: device descriptor read/64, error -71 [ 1020.464200][T16497] usb 5-1: 0:2 : does not exist [ 1020.523747][T16493] usb 3-1: Using ep0 maxpacket: 32 [ 1020.535577][T16493] usb 3-1: config 0 has no interfaces? [ 1020.536888][T16497] usb 5-1: USB disconnect, device number 43 [ 1020.553975][T16493] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 1020.574292][T16493] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.584784][ T5690] usb usb7-port1: attempt power cycle [ 1020.594245][T16493] usb 3-1: Product: syz [ 1020.602258][T16493] usb 3-1: Manufacturer: syz [ 1020.619126][T16493] usb 3-1: SerialNumber: syz [ 1020.629490][T20787] udevd[20787]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1020.661949][T16493] usb 3-1: config 0 descriptor?? [ 1020.805831][T20909] sg_write: process 433 (syz.0.3867) changed security contexts after opening file descriptor, this is not allowed. [ 1020.923810][ T5690] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1020.965995][ T5690] usb 7-1: device descriptor read/8, error -71 [ 1021.203911][ T5690] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1021.235647][ T5690] usb 7-1: device descriptor read/8, error -71 [ 1021.364008][ T5690] usb usb7-port1: unable to enumerate USB device [ 1021.433202][T16497] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1021.573628][T16497] usb 5-1: device descriptor read/64, error -71 [ 1021.714441][T16493] net_ratelimit: 1 callbacks suppressed [ 1021.714462][T16493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.799358][T16500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.836191][T16497] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1021.971662][T20948] veth5: entered promiscuous mode [ 1021.977647][T16497] usb 5-1: device descriptor read/64, error -71 [ 1022.041856][T20950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.057666][T20950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.072490][T20950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.084113][T20950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.093465][T16497] usb usb5-port1: attempt power cycle [ 1022.105019][T20950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.115056][T20950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.453372][T16497] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1022.473863][T16497] usb 5-1: device descriptor read/8, error -71 [ 1022.665095][T16493] usb 3-1: USB disconnect, device number 93 [ 1022.734956][T16497] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1022.745957][T20952] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3878'. [ 1022.774793][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.794228][T16497] usb 5-1: device descriptor read/8, error -71 [ 1022.830259][T20957] x_tables: unsorted entry at hook 2 [ 1022.850503][T20959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3879'. [ 1022.925564][T16497] usb usb5-port1: unable to enumerate USB device [ 1023.113282][ T5682] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1023.263129][ T5682] usb 3-1: Using ep0 maxpacket: 32 [ 1023.279565][ T5682] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1023.291402][ T5682] usb 3-1: config 0 has no interface number 0 [ 1023.307617][ T5682] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1023.321896][ T5682] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.336194][ T5682] usb 3-1: Product: syz [ 1023.342253][ T5682] usb 3-1: Manufacturer: syz [ 1023.349732][ T5682] usb 3-1: SerialNumber: syz [ 1023.362706][ T5682] usb 3-1: config 0 descriptor?? [ 1023.379248][ T5682] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1023.583669][ T5682] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1023.616696][ T5682] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1023.794264][T16493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.818294][T20959] syzkaller1: entered promiscuous mode [ 1023.831821][T20959] syzkaller1: entered allmulticast mode [ 1023.924739][T20972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1023.976505][T20972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1024.006309][T20970] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3882'. [ 1024.019313][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 250 [ 1024.700605][T20989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3886'. [ 1024.848514][T16493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.856831][T16493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.884483][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1024.893899][ T5751] usb 3-1: USB disconnect, device number 94 [ 1024.919724][T20993] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1024.927589][ T5682] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 1024.953869][ T5751] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1025.026268][ T5751] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1025.052998][ T5751] quatech2 3-1:0.51: device disconnected [ 1025.070145][T20989] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1025.097702][T20990] bond1: option mode: unable to set because the bond device is up [ 1025.140987][ T5682] usb 5-1: config 5 has no interfaces? [ 1025.154226][T10221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.168442][T15827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.190202][T16497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.207621][ T5682] usb 5-1: New USB device found, idVendor=2c7c, idProduct=030a, bcdDevice=2f.89 [ 1025.218737][ T5682] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.228860][ T5682] usb 5-1: Product: syz [ 1025.244836][ T5682] usb 5-1: Manufacturer: syz [ 1025.251555][ T5682] usb 5-1: SerialNumber: syz [ 1025.499218][ T5682] usb 5-1: USB disconnect, device number 48 [ 1025.807330][T21009] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1025.836115][T21014] x_tables: duplicate underflow at hook 3 [ 1025.874026][T15827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.273504][T15827] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1026.445805][T15827] usb 3-1: Using ep0 maxpacket: 16 [ 1026.461869][T15827] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.486614][T15827] usb 3-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f [ 1026.504682][T15827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.515753][T15827] usb 3-1: Product: syz [ 1026.523385][T15827] usb 3-1: Manufacturer: syz [ 1026.531872][T15827] usb 3-1: SerialNumber: syz [ 1026.552314][T15827] usb 3-1: config 0 descriptor?? [ 1026.576386][T15827] kobil_sct 3-1:0.0: required endpoints missing [ 1026.673396][ T5751] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1026.810619][T21047] netlink: 'syz.4.3901': attribute type 10 has an invalid length. [ 1026.829375][T21047] veth0_vlan: left promiscuous mode [ 1026.831114][T21047] veth0_vlan: entered promiscuous mode [ 1026.840676][T15827] usb 3-1: USB disconnect, device number 95 [ 1026.856363][T21047] `: Device veth0_vlan failed to register rx_handler [ 1026.863869][ T5751] usb 7-1: Using ep0 maxpacket: 16 [ 1026.870714][ T5751] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1026.873222][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1026.873240][ T30] audit: type=1326 audit(1778660987.395:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21021 comm="syz.2.3895" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6439ce59 code=0x7ffc0000 [ 1026.873293][ T30] audit: type=1326 audit(1778660987.395:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21021 comm="syz.2.3895" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6439ce59 code=0x7ffc0000 [ 1026.874118][ T30] audit: type=1326 audit(1778660987.405:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21021 comm="syz.2.3895" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f9c6439ce59 code=0x7ffc0000 [ 1026.874242][ T30] audit: type=1326 audit(1778660987.405:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21021 comm="syz.2.3895" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6439ce59 code=0x7ffc0000 [ 1026.874344][ T5751] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.874391][ T5751] usb 7-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1026.874420][ T5751] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1026.874553][ T30] audit: type=1326 audit(1778660987.405:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21021 comm="syz.2.3895" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c6435d68e code=0x7ffc0000 [ 1026.875155][ T30] audit: type=1326 audit(1778660987.405:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21021 comm="syz.2.3895" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c6439caeb code=0x7ffc0000 [ 1026.875389][ T30] audit: type=1326 audit(1778660987.405:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21021 comm="syz.2.3895" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c6439caeb code=0x7ffc0000 [ 1026.876923][ T30] audit: type=1326 audit(1778660987.405:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21021 comm="syz.2.3895" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c6439caeb code=0x7ffc0000 [ 1026.877116][ T30] audit: type=1326 audit(1778660987.405:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21021 comm="syz.2.3895" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c6439caeb code=0x7ffc0000 [ 1026.890455][ T5751] usb 7-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 1026.890488][ T5751] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.890510][ T5751] usb 7-1: Product: syz [ 1026.890528][ T5751] usb 7-1: Manufacturer: syz [ 1026.890545][ T5751] usb 7-1: SerialNumber: syz [ 1026.915480][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.951797][ T5751] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input90 [ 1027.077584][ T30] audit: type=1326 audit(1778660987.605:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21021 comm="syz.2.3895" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c6439caeb code=0x7ffc0000 [ 1027.346473][ T4977] bcm5974 7-1:1.0: could not read from device [ 1027.347138][ T5682] usb 7-1: USB disconnect, device number 71 [ 1027.355732][ T4977] bcm5974 7-1:1.0: could not read from device [ 1027.358579][ T4977] bcm5974 7-1:1.0: could not read from device [ 1027.359668][ T4977] bcm5974 7-1:1.0: could not read from device [ 1027.463707][T15827] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 1027.594775][T21055] bond0: (slave bond_slave_1): Releasing backup interface [ 1027.617318][T15827] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1027.630458][T15827] usb 3-1: not running at top speed; connect to a high speed hub [ 1027.648458][T15827] usb 3-1: config index 0 descriptor too short (expected 89, got 27) [ 1027.661712][T15827] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 1027.672514][T15827] usb 3-1: config 4 has an invalid descriptor of length 10, skipping remainder of the config [ 1027.686161][T15827] usb 3-1: config 4 has no interface number 0 [ 1027.694870][T15827] usb 3-1: string descriptor 0 read error: -22 [ 1027.701594][T15827] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1027.730672][T15827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 1027.767369][T15827] uvcvideo 3-1:4.147: Found UVC 0.00 device (04f2:b746) [ 1027.808911][T15827] uvcvideo 3-1:4.147: No valid video chain found. [ 1027.880877][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.954065][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.981640][T21022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.997177][T21022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.227086][ T5690] usb 3-1: USB disconnect, device number 96 [ 1028.964268][T21084] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3914'. [ 1028.995391][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.005435][T16493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.031765][T17993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.098410][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.119202][T16493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.589258][T21107] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3921'. [ 1029.613617][T21107] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3921'. [ 1029.774353][T21111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.822211][T21111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.853186][T21111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.880930][T21111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.022693][T21117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.034468][T21117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.133245][T16500] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 1030.273486][T16500] usb 3-1: device descriptor read/64, error -71 [ 1030.533223][T16500] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 1030.567073][T21133] netlink: 'syz.5.3931': attribute type 1 has an invalid length. [ 1030.673835][T16500] usb 3-1: device descriptor read/64, error -71 [ 1030.701048][T21133] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1030.758002][T21133] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 1030.793772][T16500] usb usb3-port1: attempt power cycle [ 1030.889894][T21142] macvlan0: entered allmulticast mode [ 1030.898571][T21142] bond3: entered promiscuous mode [ 1030.905364][T21142] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1030.932041][T21142] bond3: left promiscuous mode [ 1030.969401][T21141] bond3: (slave bridge1): Enslaving as an active interface with a down link [ 1031.087875][T21148] xt_cgroup: invalid path, errno=-2 [ 1031.105847][T21148] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3934'. [ 1031.115917][T21148] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3934'. [ 1031.123476][ T5751] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 1031.127025][T16493] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1031.141322][T21148] netlink: 'syz.5.3934': attribute type 6 has an invalid length. [ 1031.153426][T16500] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 1031.180500][T21148] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3934'. [ 1031.180695][T10221] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1031.191719][T21148] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3934'. [ 1031.199982][T16500] usb 3-1: device descriptor read/8, error -71 [ 1031.208523][T10221] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1031.226908][T21148] netlink: 'syz.5.3934': attribute type 6 has an invalid length. [ 1031.236371][T10221] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1031.245701][T10221] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1031.303871][T16493] usb 7-1: Using ep0 maxpacket: 8 [ 1031.311816][T16493] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 1031.321467][T16493] usb 7-1: config 0 has no interface number 0 [ 1031.332982][T16493] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1031.333410][ T5751] usb 5-1: config index 0 descriptor too short (expected 8192, got 36) [ 1031.354091][ T5751] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.354122][ T5751] usb 5-1: config 0 has no interfaces? [ 1031.354161][ T5751] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1031.354187][ T5751] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.391842][T16493] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1031.398551][ T5751] usb 5-1: config 0 descriptor?? [ 1031.405339][T16493] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1031.422654][T16493] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1031.439252][T16493] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1031.448931][T16500] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 1031.465230][T16493] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1031.485143][T16500] usb 3-1: device descriptor read/8, error -71 [ 1031.495077][T16493] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1031.507403][T16493] usb 7-1: New USB device strings: Mfr=1, Product=14, SerialNumber=3 [ 1031.516203][T16493] usb 7-1: Product: syz [ 1031.520410][T16493] usb 7-1: Manufacturer: syz [ 1031.526559][T16493] usb 7-1: SerialNumber: syz [ 1031.535467][T16493] usb 7-1: config 0 descriptor?? [ 1031.551388][T16493] iowarrior 7-1:0.186: no interrupt-out endpoint found [ 1031.606097][T16500] usb usb3-port1: unable to enumerate USB device [ 1031.773865][T16500] usb 7-1: USB disconnect, device number 72 [ 1031.792148][T21158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.808413][T21158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.114120][ T5690] net_ratelimit: 5 callbacks suppressed [ 1032.114136][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.193531][T16500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.823854][T16493] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1032.959455][T21170] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1032.983819][T16493] usb 7-1: Using ep0 maxpacket: 8 [ 1032.998866][T16493] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1033.009391][T16493] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.019129][T16493] usb 7-1: Product: syz [ 1033.024213][T16493] usb 7-1: Manufacturer: syz [ 1033.029266][T16493] usb 7-1: SerialNumber: syz [ 1033.041525][T16493] usb 7-1: config 0 descriptor?? [ 1033.059466][T16493] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1033.153900][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.374027][ T5690] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1033.517685][T21178] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3942'. [ 1033.547021][T21178] libceph: resolve '0..' (ret=-3): failed [ 1033.549655][ T5690] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1033.569116][ T5690] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1033.593783][ T5690] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1033.630666][ T5690] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 1033.643453][ T5690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.656704][ T5690] usb 3-1: Product: syz [ 1033.661668][ T5690] usb 3-1: Manufacturer: syz [ 1033.667524][ T5690] usb 3-1: SerialNumber: syz [ 1033.681717][ T5713] usb 5-1: USB disconnect, device number 49 [ 1033.966201][ T5690] usb 3-1: 0:2 : does not exist [ 1034.118898][ T5690] usb 3-1: USB disconnect, device number 101 [ 1034.195932][T15827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.230580][T20787] udevd[20787]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1034.365656][T16493] gspca_sonixj: reg_w1 err -71 [ 1034.444221][T16493] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 1034.482877][T16493] usb 7-1: USB disconnect, device number 73 [ 1034.610747][T21200] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3947'. [ 1035.233377][T16500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.241685][T16500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.497082][T21218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.524399][T21218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.620186][T21210] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1035.873240][T16500] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1036.044887][T16500] usb 3-1: Using ep0 maxpacket: 16 [ 1036.059133][T16500] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1036.086819][T16500] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1036.109376][T16500] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1036.127334][T16500] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.152058][T16500] usb 3-1: config 0 descriptor?? [ 1036.274806][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.424044][T16493] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 1036.586886][T16493] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.600575][T16500] usbhid 3-1:0.0: can't add hid device: -71 [ 1036.619818][T16500] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1036.632301][T16493] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1036.646321][T16500] usb 3-1: USB disconnect, device number 102 [ 1036.670599][T16493] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.700639][T16493] usb 5-1: Product: syz [ 1036.727191][T16493] usb 5-1: Manufacturer: syz [ 1036.752288][T16493] usb 5-1: SerialNumber: syz [ 1036.767380][T16493] usb 5-1: config 0 descriptor?? [ 1036.781232][T16493] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1037.123970][T16500] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1037.263145][T16500] usb 3-1: device descriptor read/64, error -71 [ 1037.314129][T15827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.343180][ T5751] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1037.516472][ T5751] usb 7-1: config 253 has an invalid interface number: 130 but max is 0 [ 1037.527343][T16500] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1037.541178][ T5751] usb 7-1: config 253 has no interface number 0 [ 1037.555660][ T5751] usb 7-1: config 253 interface 130 has no altsetting 0 [ 1037.573724][ T5751] usb 7-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 1037.589469][ T5751] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.598816][ T5751] usb 7-1: Product: syz [ 1037.603691][ T5751] usb 7-1: Manufacturer: syz [ 1037.609327][ T5751] usb 7-1: SerialNumber: syz [ 1037.673462][T16500] usb 3-1: device descriptor read/64, error -71 [ 1037.793585][T16500] usb usb3-port1: attempt power cycle [ 1038.033970][T16493] gspca_pac7302: reg_w() failed i: 78 v: 40 error -110 [ 1038.050315][T16493] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 1038.153183][T16500] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1038.206143][T16500] usb 3-1: device descriptor read/8, error -71 [ 1038.241167][ T5751] dvb-usb: found a 'EvolutePC TVWay+' in warm state. [ 1038.260135][ T5751] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1038.274271][T10073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.288719][T21252] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1038.295691][ T5682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.309071][ T5751] dvbdev: DVB: registering new adapter (EvolutePC TVWay+) [ 1038.323595][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.337769][ T5751] usb 7-1: media controller created [ 1038.344524][T21252] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1038.355782][T17993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.371719][T16493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.396370][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.399188][ T5751] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1038.414031][T21252] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1038.473872][T16500] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1038.512303][ T5751] DVB: Unable to find symbol dib8000_attach() [ 1038.527922][T16500] usb 3-1: device descriptor read/8, error -71 [ 1038.540652][ T5751] dvb-usb: no frontend was attached by 'EvolutePC TVWay+' [ 1038.557988][T21252] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1038.598417][T21252] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1038.648242][T21252] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1038.659760][T21252] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1038.666673][ T5751] rc_core: IR keymap rc-dib0700-nec not found [ 1038.672950][T16500] usb usb3-port1: unable to enumerate USB device [ 1038.681602][ T5751] Registered IR keymap rc-empty [ 1038.689251][ T5751] dvb-usb: could not initialize remote control. [ 1038.699173][ T5751] dvb-usb: EvolutePC TVWay+ successfully initialized and connected. [ 1038.724402][ T5751] dib0700: There's no endpoint for remote controller [ 1038.734273][T21252] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1038.757939][T21252] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1038.929869][ T5713] usb 7-1: USB disconnect, device number 74 [ 1039.081101][ T5713] dvb-usb: EvolutePC TVWay+ successfully deinitialized and disconnected. [ 1039.258298][ T2173] kworker/0:2 (2173) used greatest stack depth: 13248 bytes left [ 1039.403710][ T5626] Bluetooth: hci1: command 0x0c1a tx timeout [ 1039.495516][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.569069][T21266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.581118][T21266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.156294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1040.330619][T21281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1040.351762][T21281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.366660][ T5626] Bluetooth: hci5: command 0x0406 tx timeout [ 1040.518957][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.567627][T10221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.603685][ T5626] Bluetooth: hci0: command 0x0406 tx timeout [ 1040.683701][ T5626] Bluetooth: hci4: command 0x0406 tx timeout [ 1040.726041][T21285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3972'. [ 1040.753741][ T5626] Bluetooth: hci2: command 0x0406 tx timeout [ 1041.473975][ T5713] usb 5-1: USB disconnect, device number 50 [ 1041.818601][T21311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.892260][T21312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.913256][T21311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.915074][T21312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.366192][T21322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1042.391697][T21297] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3978'. [ 1042.402978][T21297] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3978'. [ 1042.414320][T21322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.436114][ T5626] Bluetooth: hci5: command 0x0406 tx timeout [ 1042.619002][ T5713] net_ratelimit: 4 callbacks suppressed [ 1042.619024][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.679114][ T5626] Bluetooth: hci0: command 0x0406 tx timeout [ 1042.755515][ T5626] Bluetooth: hci4: command 0x0406 tx timeout [ 1042.834898][ T5626] Bluetooth: hci2: command 0x0406 tx timeout [ 1043.473635][ T1181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.482646][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.493836][T16500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.624607][T21337] netlink: 'syz.5.3990': attribute type 2 has an invalid length. [ 1043.640427][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.714782][T10221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.734038][T21342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.749648][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.763104][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.778400][T21335] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 1043.794534][T21342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1043.805017][T21335] bond2: option packets_per_slave: allowed values 0 - 65535 [ 1043.845792][T21345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.858230][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.887734][T21335] bond2 (unregistering): Released all slaves [ 1043.899641][T21342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.924677][T21342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.662125][T21358] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3992'. [ 1044.782958][T21325] syzkaller0: entered promiscuous mode [ 1044.791568][T21325] syzkaller0: entered allmulticast mode [ 1044.933715][T21366] fuse: Bad value for 'fd' [ 1045.115289][T21370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.144181][T21370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.402241][ T5751] hid-generic 0000:0004:0004.0050: unknown main item tag 0x0 [ 1045.432654][ T5751] hid-generic 0000:0004:0004.0050: unknown main item tag 0x0 [ 1045.454132][ T5751] hid-generic 0000:0004:0004.0050: unknown main item tag 0x0 [ 1045.477262][ T5751] hid-generic 0000:0004:0004.0050: unknown main item tag 0x0 [ 1045.499320][ T5751] hid-generic 0000:0004:0004.0050: unknown main item tag 0x0 [ 1045.528922][ T5751] hid-generic 0000:0004:0004.0050: unknown main item tag 0x0 [ 1045.546369][ T5751] hid-generic 0000:0004:0004.0050: unknown main item tag 0x0 [ 1045.555273][ T5751] hid-generic 0000:0004:0004.0050: unknown main item tag 0x0 [ 1045.571585][ T5751] hid-generic 0000:0004:0004.0050: unknown main item tag 0x0 [ 1045.588331][ T5751] hid-generic 0000:0004:0004.0050: unknown main item tag 0x0 [ 1045.651042][ T5751] hid-generic 0000:0004:0004.0050: hidraw0: HID v0.03 Device [syz1] on syz0 [ 1045.865375][ T5681] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1045.992410][T21387] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4001'. [ 1046.023239][ T5681] usb 3-1: device descriptor read/64, error -71 [ 1046.273287][ T5681] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1046.384536][T21391] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4002'. [ 1046.434542][ T5681] usb 3-1: device descriptor read/64, error -71 [ 1046.564309][ T5681] usb usb3-port1: attempt power cycle [ 1046.923363][ T5681] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1046.968060][ T5681] usb 3-1: device descriptor read/8, error -71 [ 1046.998043][T21398] netlink: 212344 bytes leftover after parsing attributes in process `syz.6.4005'. [ 1047.032692][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 1047.032710][ T30] audit: type=1326 audit(1778661007.555:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21397 comm="syz.6.4005" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6dad9ce59 code=0x7ffc0000 [ 1047.095103][ T30] audit: type=1326 audit(1778661007.595:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21397 comm="syz.6.4005" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff6dad9ce59 code=0x7ffc0000 [ 1047.166154][ T30] audit: type=1326 audit(1778661007.595:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21397 comm="syz.6.4005" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6dad9ce59 code=0x7ffc0000 [ 1047.223213][ T5681] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1047.244786][ T30] audit: type=1326 audit(1778661007.595:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21397 comm="syz.6.4005" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff6dad9ce59 code=0x7ffc0000 [ 1047.280501][ T5681] usb 3-1: device descriptor read/8, error -71 [ 1047.314045][ T30] audit: type=1326 audit(1778661007.595:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21397 comm="syz.6.4005" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6dad9ce59 code=0x7ffc0000 [ 1047.388406][ T30] audit: type=1326 audit(1778661007.595:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21397 comm="syz.6.4005" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7ff6dad9ce59 code=0x7ffc0000 [ 1047.417740][ T5681] usb usb3-port1: unable to enumerate USB device [ 1047.474369][ T30] audit: type=1326 audit(1778661007.595:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21397 comm="syz.6.4005" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6dad9ce59 code=0x7ffc0000 [ 1047.546995][ T30] audit: type=1326 audit(1778661007.595:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21397 comm="syz.6.4005" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7ff6dad9ce59 code=0x7ffc0000 [ 1047.610566][ T30] audit: type=1326 audit(1778661007.605:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21397 comm="syz.6.4005" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6dad9ce59 code=0x7ffc0000 [ 1047.673725][ T30] audit: type=1326 audit(1778661007.605:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21397 comm="syz.6.4005" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7ff6dad9ce59 code=0x7ffc0000 [ 1047.903153][ T5681] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1047.954108][T15827] net_ratelimit: 2053 callbacks suppressed [ 1047.954131][T15827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.053155][ T5681] usb 5-1: Using ep0 maxpacket: 8 [ 1048.065248][ T5681] usb 5-1: config 0 has an invalid interface number: 33 but max is 1 [ 1048.092290][ T5681] usb 5-1: config 0 has no interface number 1 [ 1048.100145][ T5681] usb 5-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1048.122817][ T5681] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 1048.143674][ T5751] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1048.160707][ T5681] usb 5-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 1048.188158][ T5681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.197150][ T5681] usb 5-1: Product: syz [ 1048.201380][ T5681] usb 5-1: Manufacturer: syz [ 1048.206091][ T5681] usb 5-1: SerialNumber: syz [ 1048.216483][ T5681] usb 5-1: config 0 descriptor?? [ 1048.266733][T21406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1048.282912][T21406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.294260][ T5681] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 1048.335842][ T5751] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.357483][ T5751] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1048.391439][ T5751] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.427910][ T5751] usb 7-1: config 0 descriptor?? [ 1048.454657][ T5751] pwc: Askey VC010 type 2 USB webcam detected. [ 1048.690092][ T5751] pwc: recv_control_msg error -32 req 02 val 2700 [ 1048.729305][ T5751] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1048.748813][ T5681] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 1048.794438][ T2365] pvrusb2: Invalid read control endpoint [ 1048.816133][ T5681] usb 5-1: USB disconnect, device number 51 [ 1048.904284][ T2365] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 1048.929208][ T5751] pwc: recv_control_msg error -71 req 04 val 1000 [ 1048.947448][ T2365] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 1048.958696][ T5751] pwc: recv_control_msg error -71 req 04 val 1300 [ 1048.968781][ T5751] pwc: recv_control_msg error -71 req 04 val 1400 [ 1048.990516][ T5751] pwc: recv_control_msg error -71 req 02 val 2000 [ 1048.997618][T15827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.017181][ T5751] pwc: recv_control_msg error -71 req 02 val 2100 [ 1049.040557][ T5751] pwc: recv_control_msg error -71 req 04 val 1500 [ 1049.074665][ T5751] pwc: recv_control_msg error -71 req 02 val 2500 [ 1049.097927][ T5751] pwc: recv_control_msg error -71 req 02 val 2400 [ 1049.121189][ T5751] pwc: recv_control_msg error -71 req 02 val 2600 [ 1049.138740][ T5751] pwc: recv_control_msg error -71 req 02 val 2900 [ 1049.147588][ T5751] pwc: recv_control_msg error -71 req 02 val 2800 [ 1049.158893][ T5751] pwc: recv_control_msg error -71 req 04 val 1100 [ 1049.170169][ T5751] pwc: recv_control_msg error -71 req 04 val 1200 [ 1049.202411][ T5751] pwc: Registered as video103. [ 1049.219667][ T5751] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input94 [ 1049.263694][ T5751] usb 7-1: USB disconnect, device number 75 [ 1049.479792][ T1181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.490075][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.498401][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.508688][T15827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.519036][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.530396][T16500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.541002][ T5682] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1049.639373][T21422] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4011'. [ 1049.703142][ T5682] usb 3-1: Using ep0 maxpacket: 16 [ 1049.719164][ T5682] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1049.730735][ T5682] usb 3-1: config 0 has no interface number 0 [ 1049.732650][T21425] openvswitch: netlink: IPv4 tun info is not correct [ 1049.742196][ T5682] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1049.752671][T21426] lo: Caught tx_queue_len zero misconfig [ 1049.764354][ T5682] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1049.782839][ T5682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.806195][ T5682] usb 3-1: config 0 descriptor?? [ 1049.877471][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.097105][T21429] could not allocate digest TFM handle tgr160 [ 1050.230140][T21416] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4010'. [ 1050.291082][T21416] netlink: 'syz.2.4010': attribute type 12 has an invalid length. [ 1050.309979][T21416] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4010'. [ 1050.374998][ T5682] mcp2221 0003:04D8:00DD.0051: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input2 [ 1050.793998][ T5713] usb 3-1: USB disconnect, device number 111 [ 1051.361156][T21446] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4018'. [ 1051.563522][T21453] netlink: 'syz.6.4020': attribute type 19 has an invalid length. [ 1051.572025][T21453] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4020'. [ 1051.665906][T10221] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1051.677949][T21453] netlink: 'syz.6.4020': attribute type 19 has an invalid length. [ 1051.690719][T10221] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1051.710683][ T5626] Bluetooth: hci0: ISO packet too small [ 1051.713438][T21453] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4020'. [ 1051.734655][T10221] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1051.760142][T10221] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1051.872482][T21460] syzkaller1: entered promiscuous mode [ 1051.894283][T21460] syzkaller1: entered allmulticast mode [ 1052.843194][ T5751] usb 7-1: new full-speed USB device number 76 using dummy_hcd [ 1052.994198][ T5713] net_ratelimit: 7 callbacks suppressed [ 1052.994220][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.017538][ T5751] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.045165][ T5751] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1053.070192][ T5751] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1053.095524][ T5751] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.125025][ T5751] usb 7-1: config 0 descriptor?? [ 1053.152321][ T5751] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1053.152386][ T5751] dvb-usb: bulk message failed: -22 (3/0) [ 1053.186186][ T5751] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1053.188137][ T5751] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1053.253410][ T5751] usb 7-1: media controller created [ 1053.274908][ T5751] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1053.296042][ T5751] dvb-usb: bulk message failed: -22 (6/0) [ 1053.305735][ T5751] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1053.334783][ T5751] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input95 [ 1053.357231][T21484] x_tables: duplicate underflow at hook 1 [ 1053.387097][T21484] sctp: [Deprecated]: syz.6.4029 (pid 21484) Use of int in max_burst socket option. [ 1053.387097][T21484] Use struct sctp_assoc_value instead [ 1053.425220][ T5751] dvb-usb: schedule remote query interval to 150 msecs. [ 1053.443172][ T5751] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1053.609776][ T5751] dvb-usb: bulk message failed: -22 (1/0) [ 1053.653777][ T5751] dvb-usb: error while querying for an remote control event. [ 1053.715760][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.857502][ T5751] dvb-usb: bulk message failed: -22 (1/0) [ 1053.873108][ T5751] dvb-usb: error while querying for an remote control event. [ 1054.033252][ T5751] dvb-usb: bulk message failed: -22 (1/0) [ 1054.041626][ T5751] dvb-usb: error while querying for an remote control event. [ 1054.057077][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.213496][ T5682] dvb-usb: bulk message failed: -22 (1/0) [ 1054.219352][ T5682] dvb-usb: error while querying for an remote control event. [ 1054.367639][ T5682] usb 7-1: USB disconnect, device number 76 [ 1054.459459][ T5682] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1054.546715][T21507] mac80211_hwsim hwsim28 wlan1: Caught tx_queue_len zero misconfig [ 1054.558480][T21507] netem: change failed [ 1054.567144][T21495] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1054.598239][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.604843][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.629764][T21508] netlink: 'syz.5.4035': attribute type 10 has an invalid length. [ 1054.644934][T21508] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4035'. [ 1054.753644][ T5682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.758614][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.070001][T21516] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 1055.089454][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.236939][T10221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.265974][ T5682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.277660][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.630349][ T30] kauditd_printk_skb: 97 callbacks suppressed [ 1055.630371][ T30] audit: type=1326 audit(1778661016.155:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21530 comm="syz.5.4042" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 1055.662546][ T5682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.721173][ T30] audit: type=1326 audit(1778661016.155:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21530 comm="syz.5.4042" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 1055.767118][ T30] audit: type=1326 audit(1778661016.235:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21530 comm="syz.5.4042" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 1055.861925][ T30] audit: type=1326 audit(1778661016.235:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21530 comm="syz.5.4042" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 1055.938181][ T30] audit: type=1326 audit(1778661016.235:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21530 comm="syz.5.4042" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 1056.016837][ T30] audit: type=1326 audit(1778661016.235:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21530 comm="syz.5.4042" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 1056.092324][ T30] audit: type=1326 audit(1778661016.235:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21530 comm="syz.5.4042" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 1056.161543][T21537] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4045'. [ 1056.175235][ T30] audit: type=1326 audit(1778661016.235:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21530 comm="syz.5.4042" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 1056.253870][ T30] audit: type=1326 audit(1778661016.235:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21530 comm="syz.5.4042" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f141df9e6c7 code=0x7ffc0000 [ 1056.342075][ T30] audit: type=1326 audit(1778661016.235:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21530 comm="syz.5.4042" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f141df5d68e code=0x7ffc0000 [ 1056.558420][T21547] vivid-000: ================= START STATUS ================= [ 1056.569497][T21547] vivid-000: Radio HW Seek Mode: Bounded [ 1056.576435][T21547] vivid-000: Radio Programmable HW Seek: false [ 1056.584098][T21547] vivid-000: RDS Rx I/O Mode: Block I/O [ 1056.611802][T21547] vivid-000: Generate RBDS Instead of RDS: false [ 1056.642765][T21547] vivid-000: RDS Reception: true [ 1056.657290][T21547] vivid-000: RDS Program Type: 0 inactive [ 1056.667136][T21547] vivid-000: RDS PS Name: inactive [ 1056.672727][T21547] vivid-000: RDS Radio Text: inactive [ 1056.681391][T21547] vivid-000: RDS Traffic Announcement: false inactive [ 1056.689317][T21547] vivid-000: RDS Traffic Program: false inactive [ 1056.699602][T21547] vivid-000: RDS Music: false inactive [ 1056.708656][T21547] vivid-000: ================== END STATUS ================== [ 1057.709596][T21569] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4052'. [ 1057.808921][T21568] syzkaller0: entered promiscuous mode [ 1057.831831][T21568] syzkaller0: entered allmulticast mode [ 1057.861157][T10223] syzkaller0: tun_net_xmit 48 [ 1057.910083][T21561] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 1058.199104][ T5690] net_ratelimit: 6 callbacks suppressed [ 1058.199119][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.433727][ T5682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.434891][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.689689][ T5682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.256482][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.476303][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.278944][T15827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.524488][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.686056][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.833433][ T5682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.411510][T15827] net_ratelimit: 5 callbacks suppressed [ 1063.411526][T15827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.650966][T15827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.885228][T16500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.440552][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.673963][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.753432][T16500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.841486][T16500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.869923][T21599] syzkaller1: entered promiscuous mode [ 1064.888698][T21599] syzkaller1: entered allmulticast mode [ 1064.897592][T21602] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4058'. [ 1065.474327][T16500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.474489][T15827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.595376][T21624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.689577][T21624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.713884][T15827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.949331][T21634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.981532][T21634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1066.416619][T21645] xt_hashlimit: size too large, truncated to 1048576 [ 1066.799515][T21658] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4072'. [ 1066.897076][T21656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1066.924030][T21656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.893406][T16500] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1068.064974][T16500] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.075679][T16500] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1068.084876][T16500] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.095817][T16500] usb 3-1: config 0 descriptor?? [ 1068.104942][T16500] rndis_host 3-1:0.0: probe with driver rndis_host failed with error -22 [ 1068.311690][ T5690] usb 3-1: USB disconnect, device number 113 [ 1068.599743][ T5690] net_ratelimit: 6 callbacks suppressed [ 1068.599767][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.683348][T16500] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1068.728901][T21685] loop4: detected capacity change from 0 to 2640 [ 1068.736597][T21685] buffer_io_error: 11 callbacks suppressed [ 1068.736617][T21685] Buffer I/O error on dev loop4, logical block 0, async page read [ 1068.751314][T21685] Buffer I/O error on dev loop4, logical block 0, async page read [ 1068.760252][T21685] Buffer I/O error on dev loop4, logical block 0, async page read [ 1068.768410][T21685] Buffer I/O error on dev loop4, logical block 0, async page read [ 1068.777979][T21685] Buffer I/O error on dev loop4, logical block 0, async page read [ 1068.787191][T21685] Buffer I/O error on dev loop4, logical block 0, async page read [ 1068.795601][T21685] Buffer I/O error on dev loop4, logical block 0, async page read [ 1068.803837][T21685] Buffer I/O error on dev loop4, logical block 0, async page read [ 1068.811756][T21685] ldm_validate_partition_table(): Disk read failed. [ 1068.819108][T21685] Buffer I/O error on dev loop4, logical block 0, async page read [ 1068.834262][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.837458][T21685] Buffer I/O error on dev loop4, logical block 0, async page read [ 1068.862694][T21685] Dev loop4: unable to read RDB block 0 [ 1068.870424][T21685] loop4: unable to read partition table [ 1068.883148][T16500] usb 7-1: Using ep0 maxpacket: 16 [ 1068.900119][T16500] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1068.911968][T16500] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1068.923983][T21685] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1068.949906][T16500] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1068.964719][T16500] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1068.974263][T16500] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.002970][ T4992] ldm_validate_partition_table(): Disk read failed. [ 1069.008972][T16500] usb 7-1: config 0 descriptor?? [ 1069.021742][ T4992] Dev loop4: unable to read RDB block 0 [ 1069.035078][ T4992] loop4: unable to read partition table [ 1069.224022][ T5713] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1069.387254][ T5713] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 1069.397540][ T5713] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1069.408805][ T5713] usb 3-1: config 0 has no interface number 0 [ 1069.419876][ T5713] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1069.430466][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.440085][ T5713] usb 3-1: Product: syz [ 1069.445116][ T5713] usb 3-1: Manufacturer: syz [ 1069.449802][ T5713] usb 3-1: SerialNumber: syz [ 1069.459883][ T5713] usb 3-1: config 0 descriptor?? [ 1069.472274][ T5713] uvcvideo 3-1:0.64: probe with driver uvcvideo failed with error -22 [ 1069.521425][T16500] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0052/input/input96 [ 1069.641627][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.662498][T16500] microsoft 0003:045E:07DA.0052: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1069.702442][T21692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.715213][T21692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.799937][ T5713] usb 7-1: USB disconnect, device number 77 [ 1069.856229][T21701] fido_id[21701]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1069.876968][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.955507][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.199030][ T5626] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 1070.557925][T21723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.569570][T21723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.691324][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.834675][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.913808][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.213166][T21725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.226794][T21725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.001882][ T5713] usb 3-1: USB disconnect, device number 114 [ 1072.151121][T21734] binder: 21733:21734 ioctl c018937c 200000000440 returned -22 [ 1072.161913][T21734] binder: 21733:21734 ioctl ae03 8000000000000001 returned -22 [ 1072.412798][T21739] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4092'. [ 1072.474617][ T5713] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1072.492317][T21739] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4092'. [ 1072.657024][ T5713] usb 3-1: config index 0 descriptor too short (expected 1051, got 27) [ 1072.687812][ T5713] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1072.706478][ T5713] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1072.720854][ T5713] usb 3-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149 [ 1072.762300][ T5713] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1072.777120][ T5713] usb 3-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 1072.789423][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.800881][ T5713] usb 3-1: Product: syz [ 1072.808316][ T5713] usb 3-1: Manufacturer: syz [ 1072.816128][ T5713] usb 3-1: SerialNumber: syz [ 1072.831838][ T5713] usb 3-1: config 0 descriptor?? [ 1072.848145][T21734] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1073.069545][ T5713] keyspan 3-1:0.0: Keyspan 4 port adapter converter detected [ 1073.112505][ T5713] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 1073.146891][ T5713] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 1073.169006][ T5713] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 1073.216711][ T5713] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1073.268207][ T5713] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 82 [ 1073.280304][ T5713] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 1073.296291][ T5713] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1073.325561][ T5713] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 1073.356333][ T5713] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 1073.385685][ T5713] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1073.419349][ T5713] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 84 [ 1073.438864][ T5713] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 1073.469958][ T5713] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1073.531172][ T5713] usb 3-1: USB disconnect, device number 115 [ 1073.588820][ T5713] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1073.665826][ T5713] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1073.775449][ T5713] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1073.805854][ T5690] net_ratelimit: 5 callbacks suppressed [ 1073.805876][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.842172][ T5713] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1073.884028][T16500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.939013][ T5713] keyspan 3-1:0.0: device disconnected [ 1074.033728][T15827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.044401][T21755] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4095'. [ 1074.315315][ T5713] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1074.436316][T16500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.478069][ T5713] usb 3-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1074.515430][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.548740][ T5713] usb 3-1: Product: syz [ 1074.562850][ T5713] usb 3-1: Manufacturer: syz [ 1074.581269][ T5713] usb 3-1: SerialNumber: syz [ 1074.638797][ T5713] usb 3-1: config 0 descriptor?? [ 1074.671745][ T5713] hub 3-1:0.0: bad descriptor, ignoring hub [ 1074.692029][ T5713] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1074.728111][ T5713] f81232 3-1:0.0: f81534a converter detected [ 1074.834183][T15827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.076574][T15827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.088229][T16500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.892769][T15827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.928420][T21795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.954537][T21795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.035773][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.113845][T15827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.143896][ T5713] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 1076.189777][ T5713] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 1076.270789][ T5713] usb 3-1: USB disconnect, device number 116 [ 1076.330073][ T5713] f81232 3-1:0.0: device disconnected [ 1076.830359][T21815] tipc: Started in network mode [ 1076.846212][T21815] tipc: Node identity 369bb891a347, cluster identity 4711 [ 1076.871108][T21815] tipc: Enabled bearer , priority 0 [ 1076.898631][T21817] syzkaller0: entered promiscuous mode [ 1076.923145][T21817] syzkaller0: entered allmulticast mode [ 1077.058451][T21815] tipc: Resetting bearer [ 1077.096026][T21814] tipc: Resetting bearer [ 1077.196137][T21814] tipc: Disabling bearer [ 1077.532766][T21819] gretap0: entered promiscuous mode [ 1077.556193][T21819] macsec1: entered promiscuous mode [ 1077.606821][T21819] gretap0: left promiscuous mode [ 1078.166305][T21828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.236478][T21828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.350385][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1078.350404][ T30] audit: type=1326 audit(1778661038.875:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21829 comm="syz.4.4108" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fdf9ce59 code=0x7ffc0000 [ 1078.420473][ T30] audit: type=1326 audit(1778661038.945:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21829 comm="syz.4.4108" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4fdf9ce59 code=0x7ffc0000 [ 1079.021606][ T5713] net_ratelimit: 7 callbacks suppressed [ 1079.021628][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.083480][T16497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.214572][T21855] wg0: Caught tx_queue_len zero misconfig [ 1079.236425][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.246709][T21855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4114'. [ 1079.308856][T21855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4114'. [ 1079.953956][T16500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.038076][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.061229][T21871] netlink: 'syz.4.4118': attribute type 1 has an invalid length. [ 1080.073238][ T5751] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1080.185010][T21871] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1080.195340][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.247988][ T5751] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.273734][T16493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.280042][ T5751] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1080.323518][ T5751] usb 7-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.00 [ 1080.348720][ T5751] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.394426][ T5751] usb 7-1: config 0 descriptor?? [ 1080.466609][T21874] bond4: (slave geneve2): making interface the new active one [ 1080.571419][T21874] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 1080.648834][T21869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1080.701420][T21869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1080.944133][ T5751] logitech-djreceiver 0003:046D:C53F.0053: item fetching failed at offset 5/7 [ 1080.964235][ T5751] logitech-djreceiver 0003:046D:C53F.0053: logi_dj_probe: parse failed [ 1080.984691][ T5751] logitech-djreceiver 0003:046D:C53F.0053: probe with driver logitech-djreceiver failed with error -22 [ 1081.074250][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.093458][T16497] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1081.137881][ T5713] usb 7-1: USB disconnect, device number 78 [ 1081.253216][T16497] usb 3-1: Using ep0 maxpacket: 16 [ 1081.266758][T16497] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1081.290182][T16497] usb 3-1: config 0 has no interface number 0 [ 1081.303989][T16497] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1081.315361][T15827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.338325][T16497] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1081.353883][T16497] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.388515][T16497] usb 3-1: config 0 descriptor?? [ 1081.850296][T21877] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4119'. [ 1081.887321][T21893] netlink: 'syz.6.4123': attribute type 1 has an invalid length. [ 1081.918758][T21893] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4123'. [ 1081.952924][T21891] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4123'. [ 1081.981098][T21894] netlink: 'syz.2.4119': attribute type 12 has an invalid length. [ 1082.011620][T21894] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4119'. [ 1082.074866][T16497] mcp2221 0003:04D8:00DD.0054: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input2 [ 1082.122299][T15827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.288467][ T5713] usb 7-1: new full-speed USB device number 79 using dummy_hcd [ 1082.320833][T15827] usb 3-1: USB disconnect, device number 118 [ 1082.457955][ T5713] usb 7-1: not running at top speed; connect to a high speed hub [ 1082.480420][ T5713] usb 7-1: config 8 has an invalid interface number: 109 but max is 1 [ 1082.508415][ T5713] usb 7-1: config 8 has an invalid interface descriptor of length 8, skipping [ 1082.534341][ T5713] usb 7-1: config 8 has an invalid interface number: 23 but max is 1 [ 1082.561817][ T5713] usb 7-1: config 8 has no interface number 0 [ 1082.580754][ T5713] usb 7-1: config 8 has no interface number 1 [ 1082.599234][ T5713] usb 7-1: config 8 interface 109 altsetting 52 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 1082.635016][ T5713] usb 7-1: config 8 interface 109 altsetting 52 has an endpoint descriptor with address 0xCD, changing to 0x8D [ 1082.671204][ T5713] usb 7-1: config 8 interface 109 altsetting 52 endpoint 0xB has invalid maxpacket 975, setting to 64 [ 1082.685354][ T5713] usb 7-1: config 8 interface 109 altsetting 52 has a duplicate endpoint with address 0xC, skipping [ 1082.699934][ T5713] usb 7-1: config 8 interface 109 altsetting 52 has a duplicate endpoint with address 0xD, skipping [ 1082.718719][ T5713] usb 7-1: config 8 interface 109 altsetting 52 has 6 endpoint descriptors, different from the interface descriptor's value: 9 [ 1082.757389][ T5713] usb 7-1: config 8 interface 23 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1082.786151][ T5713] usb 7-1: config 8 interface 23 altsetting 9 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1082.815291][ T5713] usb 7-1: config 8 interface 23 altsetting 9 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1082.841196][ T5713] usb 7-1: config 8 interface 23 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 1082.858537][ T5713] usb 7-1: config 8 interface 23 altsetting 9 endpoint 0x3 has invalid maxpacket 544, setting to 64 [ 1082.874929][ T5713] usb 7-1: config 8 interface 23 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 1082.886541][ T5713] usb 7-1: config 8 interface 23 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 1082.898287][ T5713] usb 7-1: config 8 interface 23 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 1082.910620][ T5713] usb 7-1: config 8 interface 23 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 1082.926343][ T5713] usb 7-1: config 8 interface 23 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 1082.938612][ T5713] usb 7-1: config 8 interface 23 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 1082.950381][ T5713] usb 7-1: config 8 interface 109 has no altsetting 0 [ 1082.958245][ T5713] usb 7-1: config 8 interface 23 has no altsetting 0 [ 1082.981215][ T5713] usb 7-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=6d.ef [ 1082.992973][ T5713] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.010158][ T5713] usb 7-1: Product: syz [ 1083.017544][ T5713] usb 7-1: Manufacturer: syz [ 1083.022271][ T5713] usb 7-1: SerialNumber: syz [ 1083.117613][T21902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.155947][T21902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.290461][ T5713] keyspan 7-1:8.109: Keyspan 1 port adapter converter detected [ 1083.304491][ T5713] keyspan 7-1:8.109: found no endpoint descriptor for endpoint 87 [ 1083.328128][ T5713] keyspan 7-1:8.109: unsupported endpoint type 0 [ 1083.351556][ T5713] keyspan 7-1:8.109: found no endpoint descriptor for endpoint 81 [ 1083.371798][ T5713] keyspan 7-1:8.109: found no endpoint descriptor for endpoint 1 [ 1083.386794][ T5713] keyspan 7-1:8.109: found no endpoint descriptor for endpoint 2 [ 1083.395744][ T5713] keyspan 7-1:8.109: found no endpoint descriptor for endpoint 85 [ 1083.404553][ T5713] keyspan 7-1:8.109: found no endpoint descriptor for endpoint 5 [ 1083.417308][ T5713] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1083.435942][ T5713] keyspan 7-1:8.23: Keyspan 1 port adapter converter detected [ 1083.447439][ T5713] keyspan 7-1:8.23: found no endpoint descriptor for endpoint 87 [ 1083.457897][ T5713] keyspan 7-1:8.23: found no endpoint descriptor for endpoint 7 [ 1083.469033][ T5713] keyspan 7-1:8.23: found no endpoint descriptor for endpoint 81 [ 1083.478571][ T5713] keyspan 7-1:8.23: found no endpoint descriptor for endpoint 1 [ 1083.490105][ T5713] keyspan 7-1:8.23: unsupported endpoint type 0 [ 1083.497610][ T5713] keyspan 7-1:8.23: found no endpoint descriptor for endpoint 85 [ 1083.511252][ T5713] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB1 [ 1083.544728][ T5713] usb 7-1: USB disconnect, device number 79 [ 1083.588676][ T5713] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1083.617606][ T5713] keyspan 7-1:8.109: device disconnected [ 1083.651347][ T5713] keyspan_1 ttyUSB1: Keyspan 1 port adapter converter now disconnected from ttyUSB1 [ 1083.665875][ T5713] keyspan 7-1:8.23: device disconnected [ 1083.773548][T21925] tipc: Started in network mode [ 1083.778545][T21925] tipc: Node identity 16f52922e273, cluster identity 4711 [ 1083.786200][T21925] tipc: Enabled bearer , priority 0 [ 1083.796553][T21925] syzkaller0: entered promiscuous mode [ 1083.802154][T21925] syzkaller0: entered allmulticast mode [ 1083.814463][T21925] tipc: Resetting bearer [ 1083.887423][T21924] tipc: Resetting bearer [ 1083.937751][T21924] tipc: Disabling bearer [ 1084.035547][T21931] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4137'. [ 1084.048757][T21931] netlink: 'syz.5.4137': attribute type 8 has an invalid length. [ 1084.049458][ T5751] net_ratelimit: 5 callbacks suppressed [ 1084.049502][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.059606][T21931] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4137'. [ 1084.195653][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.434172][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.483236][ T5751] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1084.658305][ T5751] usb 3-1: Using ep0 maxpacket: 8 [ 1084.669461][ T5751] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1084.682887][ T5751] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1084.694892][T16500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.709822][ T5751] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1084.729663][ T5751] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1084.742427][ T5751] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1084.763585][ T5751] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1084.783138][ T5751] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.155111][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.224475][T21958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.235076][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.248550][T21958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.473878][T15827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.554758][ T30] audit: type=1326 audit(1778661046.085:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21940 comm="syz.2.4139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c6439ce59 code=0x0 [ 1085.625262][T21963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.635666][T21963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.005350][T15827] usb 7-1: new low-speed USB device number 80 using dummy_hcd [ 1086.046940][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.072341][T21976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1086.090026][T21976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1086.183174][T15827] usb 7-1: Invalid ep0 maxpacket: 16 [ 1086.313675][T15827] usb 7-1: new low-speed USB device number 81 using dummy_hcd [ 1086.473911][T15827] usb 7-1: Invalid ep0 maxpacket: 16 [ 1086.479891][T15827] usb usb7-port1: attempt power cycle [ 1086.828903][T15827] usb 7-1: new low-speed USB device number 82 using dummy_hcd [ 1086.875403][T15827] usb 7-1: Invalid ep0 maxpacket: 16 [ 1086.901932][ T30] audit: type=1326 audit(1778661047.425:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21989 comm="syz.5.4154" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 1086.957306][ T30] audit: type=1326 audit(1778661047.425:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21989 comm="syz.5.4154" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 1087.008016][ T30] audit: type=1326 audit(1778661047.425:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21989 comm="syz.5.4154" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 1087.044786][T15827] usb 7-1: new low-speed USB device number 83 using dummy_hcd [ 1087.075219][T15827] usb 7-1: Invalid ep0 maxpacket: 16 [ 1087.086565][T15827] usb usb7-port1: unable to enumerate USB device [ 1087.102759][T21988] syz.0.4153(21988): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1087.117036][ T30] audit: type=1326 audit(1778661047.425:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21989 comm="syz.5.4154" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 1087.177099][ T30] audit: type=1326 audit(1778661047.425:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21989 comm="syz.5.4154" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 1087.202872][ T30] audit: type=1326 audit(1778661047.425:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21989 comm="syz.5.4154" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 1087.238302][ T30] audit: type=1326 audit(1778661047.425:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21989 comm="syz.5.4154" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 1087.269567][ T30] audit: type=1326 audit(1778661047.425:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21989 comm="syz.5.4154" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 1087.295036][ T30] audit: type=1326 audit(1778661047.425:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21989 comm="syz.5.4154" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141df9ce59 code=0x7ffc0000 [ 1087.324034][T15827] usb 3-1: USB disconnect, device number 119 [ 1087.697431][T22002] kvm: user requested TSC rate below hardware speed [ 1088.081767][T22007] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4154'. [ 1088.105641][T22009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4159'. [ 1088.270275][T21990] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4154'. [ 1088.597281][T22019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.654044][T22019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.738105][T22019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.787084][T22019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1089.338863][ T5751] net_ratelimit: 9 callbacks suppressed [ 1089.338883][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.406377][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.637255][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.958300][T22042] netlink: 7060 bytes leftover after parsing attributes in process `syz.6.4166'. Stopping sshd: stopped /usr/sbin/sshd (pid 5377) OK Stopping crond: [ 1090.442267][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.463887][ T5690] usb 7-1: new full-speed USB device number 84 using dummy_hcd stopped /usr/sbin/crond (pid 5365) OK [ 1090.638639][ T5690] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1090.673885][T15827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.695513][ T5690] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1090.743867][ T5690] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 23859, setting to 64 [ 1090.764872][ T5690] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1090.794618][ T5690] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.832172][ T5690] usb 7-1: config 0 descriptor?? [ 1090.858065][T22050] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 Stopping dhcpcd... [ 1091.031318][T22066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.053712][T22066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 stopped /sbin/dhcpcd (pid 5287) [ 1091.216977][T22074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.234600][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.264193][T22074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1091.281974][T16500] bridge0: entered promiscuous mode [ 1091.328593][T22076] syzkaller1: entered promiscuous mode [ 1091.374948][ T5690] ath6kl: Failed to submit usb control message: -71 [ 1091.393614][T22076] syzkaller1: entered allmulticast mode [ 1091.399319][ T5690] ath6kl: unable to send the bmi data to the device: -71 [ 1091.438073][ T5690] ath6kl: Unable to send get target info: -71 [ 1091.479780][T15827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.499508][ T5690] ath6kl: Failed to init ath6kl core: -71 [ 1091.537351][ T5690] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1091.548647][T22076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.600777][ T5690] usb 7-1: USB disconnect, device number 84 [ 1091.655223][T22076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1091.719178][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog Stopping network: [ 1091.986414][T22088] netlink: 160 bytes leftover after parsing attributes in process `syz.0.4175'. [ 1092.354886][T16500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.574884][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog OK Stopping iptables: OK Stopping system message bus: [ 1094.674380][ T5713] net_ratelimit: 6 callbacks suppressed [ 1094.674400][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.835181][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.208848][T22160] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4186'. done [ 1095.405593][T16500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.731330][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.876556][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.459807][T22190] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1096.629322][T22195] loop3: detected capacity change from 0 to 7 [ 1096.692019][ T30] kauditd_printk_skb: 146 callbacks suppressed [ 1096.692039][ T30] audit: type=1326 audit(1778661057.215:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22193 comm="syz.6.4193" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6dad9ce59 code=0x0 [ 1096.718812][T22195] Dev loop3: unable to read RDB block 7 [ 1096.760393][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.770347][T22195] loop3: AHDI p1 p2 [ 1096.781517][T22195] loop3: partition table partially beyond EOD, truncated [ 1096.815580][T22195] loop3: p1 start 1702000233 is beyond EOD, truncated [ 1096.914629][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.149624][T22202] input: syz0 as /devices/virtual/input/input97 [ 1097.323939][T16500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.652193][T22212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.688648][T22214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.699407][T22212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 Stopping klogd: [ 1097.728698][T22214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.814333][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.953903][T16493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog OK Stopping acpid: [ 1098.176587][T22227] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1098.301247][T22224] bond4: (slave ip6gretap1): making interface the new active one [ 1098.340396][T22224] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1098.554742][T22235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4199'. [ 1098.922690][T22249] kAFS: unable to lookup cell 'ÿ' [ 1098.932968][T22249] kAFS: unable to lookup cell '(,c¾Ì' [ 1099.253107][ T5751] usb 3-1: new high-speed USB device number 120 using dummy_hcd OK [ 1099.416532][ T5751] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.420791][ T5751] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1099.420825][ T5751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 Stopping syslogd: [ 1099.420848][ T5751] usb 3-1: Product: syz [ 1099.420865][ T5751] usb 3-1: Manufacturer: syz [ 1099.420882][ T5751] usb 3-1: SerialNumber: syz [ 1099.429519][ T5751] usb 3-1: config 0 descriptor?? [ 1099.446321][ T5751] garmin_gps 3-1:0.0: Garmin GPS usb/tty converter detected [ 1099.448637][ T5751] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 1099.448683][ T5751] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 stopped /sbin/syslogd (pid 4974) OK [ 1099.750823][T16500] usb 3-1: USB disconnect, device number 120 [ 1099.764868][T16500] garmin_gps 3-1:0.0: device disconnected [ 1099.777813][ T5751] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 1099.880822][T16493] net_ratelimit: 3 callbacks suppressed [ 1099.880844][T16493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.953410][ T5751] usb 7-1: Using ep0 maxpacket: 8 [ 1099.971235][ T5751] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1099.989331][ T5751] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1100.009677][ T5751] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1100.021350][ T5751] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1100.033516][ T5751] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1100.035200][T16493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.064839][T22263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1100.087825][T22263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.106703][ T5751] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1100.116005][ T5751] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 umount: can't remount debugfs read-only umount: tmpfs busy - remounted read-only [ 1100.373503][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.517545][T22270] fuse: Invalid uid '00000000000000000004' umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! [ 1100.765985][ T4992] udevd[4992]: could not touch /run/udev/queue: Read-only file system [ 1100.780074][T16493] usb 3-1: new high-speed USB device number 121 using dummy_hcd Sent SIGTERM to all processes [ 1100.914173][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.992437][ T5713] usb 7-1: USB disconnect, device number 86 Connection to 10.128.0.50 closed by remote host. [ 1101.076746][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.242168][ T5690] usb 6-1: USB disconnect, device number 101 [ 1101.487231][ T5682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.970816][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog Sent SIGKILL to all processes Requesting system poweroff [ 1102.126581][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.490596][T10220] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.656005][T10220] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.851486][T10220] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.969203][T10220] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.993841][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.085680][T22273] smc: removing smcd device lo [ 1103.154082][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.197195][ T2365] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 1103.223132][ T2365] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 1103.251058][ T2365] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-29xxx-01.fw [ 1103.276592][ T2365] pvrusb2: Failure uploading firmware1 [ 1103.287134][ T2365] pvrusb2: Device initialization was not successful. [ 1103.304095][ T2365] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 1103.325229][T10220] bridge_slave_0: left allmulticast mode [ 1103.331151][T10220] bridge_slave_0: left promiscuous mode [ 1103.335017][ T2365] pvrusb2: Failed to submit write-control URB status=-19 [ 1103.348447][T10220] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.356860][ T5681] pvrusb2: Device being rendered inoperable [ 1103.364746][ T2365] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 1103.393703][ T2365] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 1103.414846][ T2365] ------------[ cut here ]------------ [ 1103.420385][ T2365] ret [ 1103.420405][ T2365] WARNING: drivers/base/firmware_loader/fallback.c:148 at firmware_fallback_sysfs+0x746/0xa30, CPU#0: pvrusb2-context/2365 [ 1103.438060][ T2365] Modules linked in: [ 1103.443786][ T2365] CPU: 0 UID: 0 PID: 2365 Comm: pvrusb2-context Tainted: G L syzkaller #0 PREEMPT(full) [ 1103.456241][ T2365] Tainted: [L]=SOFTLOCKUP [ 1103.460595][ T2365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1103.471966][ T2365] RIP: 0010:firmware_fallback_sysfs+0x746/0xa30 [ 1103.478933][ T2365] Code: bb fb e9 5d fc ff ff e8 c8 de bb fb c6 05 27 cc 10 0a 01 48 c7 c7 60 f2 53 8c e8 25 ca 1d fb e9 85 fc ff ff e8 ab de bb fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 60 f3 53 8c 4c 89 e2 e8 25 6a 22 fb e9 [ 1103.499642][ T2365] RSP: 0018:ffffc900074f7670 EFLAGS: 00010293 [ 1103.506522][ T2365] RAX: ffffffff8609e325 RBX: dffffc0000000000 RCX: ffff88802cf10000 [ 1103.515235][ T2365] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 1103.524259][ T2365] RBP: 0000000000000001 R08: ffffffff9030b6f7 R09: 1ffffffff20616de [ 1103.532411][ T2365] R10: dffffc0000000000 R11: fffffbfff20616df R12: ffffffff8cae5340 [ 1103.541063][ T2365] R13: 0000000000001770 R14: ffff88807fe5a0b0 R15: 00000000fffffff5 [ 1103.549714][ T2365] FS: 0000000000000000(0000) GS:ffff88812528d000(0000) knlGS:0000000000000000 [ 1103.560393][ T2365] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1103.568281][ T2365] CR2: 0000200000404030 CR3: 0000000033b18000 CR4: 00000000003526f0 [ 1103.576938][ T2365] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 1103.585905][ T2365] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1103.594060][ T2365] Call Trace: [ 1103.597553][ T2365] [ 1103.600564][ T2365] ? kfree+0x1c5/0x640 [ 1103.604728][ T2365] ? _request_firmware+0xf11/0x1780 [ 1103.610032][ T2365] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1103.616554][ T2365] _request_firmware+0x1052/0x1780 [ 1103.621771][ T2365] ? __pfx__request_firmware+0x10/0x10 [ 1103.627918][ T2365] request_firmware+0x36/0x50 [ 1103.632718][ T2365] pvr2_locate_firmware+0xb3/0x500 [ 1103.638604][ T2365] pvr2_upload_firmware1+0x1ba/0x910 [ 1103.644853][ T2365] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1103.650937][ T2365] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 1103.658112][ T2365] ? pvr2_hdw_initialize+0x461/0x3c50 [ 1103.664891][ T2365] pvr2_hdw_initialize+0x428/0x3c50 [ 1103.670210][ T2365] ? lockdep_hardirqs_on+0x7a/0x110 [ 1103.676466][ T2365] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1103.682467][ T2365] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 1103.688781][ T2365] ? rcu_is_watching+0x15/0xb0 [ 1103.694297][ T2365] ? trace_contention_end+0x3d/0x140 [ 1103.699723][ T2365] ? pvr2_context_thread_func+0x26a/0xb40 [ 1103.706405][ T2365] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1103.712104][ T2365] ? pvr2_context_thread_func+0x102/0xb40 [ 1103.718610][ T2365] ? __pfx___schedule+0x10/0x10 [ 1103.724136][ T2365] ? __pfx___mutex_lock+0x10/0x10 [ 1103.729240][ T2365] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1103.736345][ T2365] ? schedule+0x90/0x360 [ 1103.740679][ T2365] ? schedule+0x16e/0x360 [ 1103.745876][ T2365] pvr2_context_thread_func+0x490/0xb40 [ 1103.751525][ T2365] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 1103.759011][ T2365] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1103.766518][ T2365] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1103.772623][ T2365] ? __kthread_parkme+0x7a/0x1f0 [ 1103.778337][ T2365] kthread+0x388/0x470 [ 1103.782682][ T2365] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 1103.789528][ T2365] ? __pfx_kthread+0x10/0x10 [ 1103.795146][ T2365] ret_from_fork+0x514/0xb70 [ 1103.799867][ T2365] ? __pfx_ret_from_fork+0x10/0x10 [ 1103.805661][ T2365] ? __switch_to+0xc79/0x1410 [ 1103.810495][ T2365] ? __pfx_kthread+0x10/0x10 [ 1103.815778][ T2365] ret_from_fork_asm+0x1a/0x30 [ 1103.820631][ T2365] [ 1103.824561][ T2365] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1103.831899][ T2365] CPU: 0 UID: 0 PID: 2365 Comm: pvrusb2-context Tainted: G L syzkaller #0 PREEMPT(full) [ 1103.843220][ T2365] Tainted: [L]=SOFTLOCKUP [ 1103.847760][ T2365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1103.858027][ T2365] Call Trace: [ 1103.861354][ T2365] [ 1103.864322][ T2365] vpanic+0x56c/0xa60 [ 1103.868349][ T2365] ? __pfx__printk+0x10/0x10 [ 1103.872995][ T2365] ? __pfx_vpanic+0x10/0x10 [ 1103.877629][ T2365] ? is_bpf_text_address+0x292/0x2b0 [ 1103.882954][ T2365] ? is_bpf_text_address+0x26/0x2b0 [ 1103.888205][ T2365] panic+0xc5/0xd0 [ 1103.892165][ T2365] ? __pfx_panic+0x10/0x10 [ 1103.896722][ T2365] ? ret_from_fork_asm+0x1a/0x30 [ 1103.901805][ T2365] __warn+0x315/0x4c0 [ 1103.905843][ T2365] ? firmware_fallback_sysfs+0x746/0xa30 [ 1103.911861][ T2365] ? firmware_fallback_sysfs+0x746/0xa30 [ 1103.917535][ T2365] __report_bug+0x29a/0x540 [ 1103.922173][ T2365] ? firmware_fallback_sysfs+0x746/0xa30 [ 1103.927884][ T2365] ? __pfx___report_bug+0x10/0x10 [ 1103.932965][ T2365] ? __up_read+0x291/0x6b0 [ 1103.937476][ T2365] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1103.943709][ T2365] ? firmware_fallback_sysfs+0x746/0xa30 [ 1103.949660][ T2365] report_bug+0x16a/0x220 [ 1103.954150][ T2365] ? firmware_fallback_sysfs+0x746/0xa30 [ 1103.959950][ T2365] ? firmware_fallback_sysfs+0x748/0xa30 [ 1103.965629][ T2365] handle_bug+0x9c/0x200 [ 1103.970031][ T2365] exc_invalid_op+0x1a/0x50 [ 1103.974660][ T2365] asm_exc_invalid_op+0x1a/0x20 [ 1103.979557][ T2365] RIP: 0010:firmware_fallback_sysfs+0x746/0xa30 [ 1103.986006][ T2365] Code: bb fb e9 5d fc ff ff e8 c8 de bb fb c6 05 27 cc 10 0a 01 48 c7 c7 60 f2 53 8c e8 25 ca 1d fb e9 85 fc ff ff e8 ab de bb fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 60 f3 53 8c 4c 89 e2 e8 25 6a 22 fb e9 [ 1104.005989][ T2365] RSP: 0018:ffffc900074f7670 EFLAGS: 00010293 [ 1104.012287][ T2365] RAX: ffffffff8609e325 RBX: dffffc0000000000 RCX: ffff88802cf10000 [ 1104.020295][ T2365] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 1104.028481][ T2365] RBP: 0000000000000001 R08: ffffffff9030b6f7 R09: 1ffffffff20616de [ 1104.036491][ T2365] R10: dffffc0000000000 R11: fffffbfff20616df R12: ffffffff8cae5340 [ 1104.044592][ T2365] R13: 0000000000001770 R14: ffff88807fe5a0b0 R15: 00000000fffffff5 [ 1104.052822][ T2365] ? firmware_fallback_sysfs+0x745/0xa30 [ 1104.058525][ T2365] ? kfree+0x1c5/0x640 [ 1104.062730][ T2365] ? _request_firmware+0xf11/0x1780 [ 1104.068081][ T2365] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1104.074126][ T2365] _request_firmware+0x1052/0x1780 [ 1104.079333][ T2365] ? __pfx__request_firmware+0x10/0x10 [ 1104.085059][ T2365] request_firmware+0x36/0x50 [ 1104.089820][ T2365] pvr2_locate_firmware+0xb3/0x500 [ 1104.095171][ T2365] pvr2_upload_firmware1+0x1ba/0x910 [ 1104.100688][ T2365] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1104.107080][ T2365] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 1104.113042][ T2365] ? pvr2_hdw_initialize+0x461/0x3c50 [ 1104.118475][ T2365] pvr2_hdw_initialize+0x428/0x3c50 [ 1104.123734][ T2365] ? lockdep_hardirqs_on+0x7a/0x110 [ 1104.129008][ T2365] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1104.134960][ T2365] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 1104.140650][ T2365] ? rcu_is_watching+0x15/0xb0 [ 1104.145462][ T2365] ? trace_contention_end+0x3d/0x140 [ 1104.150981][ T2365] ? pvr2_context_thread_func+0x26a/0xb40 [ 1104.156844][ T2365] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1104.162526][ T2365] ? pvr2_context_thread_func+0x102/0xb40 [ 1104.168380][ T2365] ? __pfx___schedule+0x10/0x10 [ 1104.173413][ T2365] ? __pfx___mutex_lock+0x10/0x10 [ 1104.178491][ T2365] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1104.184611][ T2365] ? schedule+0x90/0x360 [ 1104.188994][ T2365] ? schedule+0x16e/0x360 [ 1104.193383][ T2365] pvr2_context_thread_func+0x490/0xb40 [ 1104.198992][ T2365] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 1104.205122][ T2365] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1104.211422][ T2365] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1104.217277][ T2365] ? __kthread_parkme+0x7a/0x1f0 [ 1104.222271][ T2365] kthread+0x388/0x470 [ 1104.226389][ T2365] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 1104.232588][ T2365] ? __pfx_kthread+0x10/0x10 [ 1104.237324][ T2365] ret_from_fork+0x514/0xb70 [ 1104.242154][ T2365] ? __pfx_ret_from_fork+0x10/0x10 [ 1104.247312][ T2365] ? __switch_to+0xc79/0x1410 [ 1104.252052][ T2365] ? __pfx_kthread+0x10/0x10 [ 1104.256695][ T2365] ret_from_fork_asm+0x1a/0x30 [ 1104.261520][ T2365] [ 1104.265574][ T2365] Kernel Offset: disabled [ 1104.270089][ T2365] Rebooting in 86400 seconds..