last executing test programs: 6m6.637412478s ago: executing program 1 (id=1514): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000100005003390efffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db20200201a0100140003006e657464657673696d300000000000001800168014000180100006000000002f2f000000000000000500110006"], 0x54}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 6m6.306949489s ago: executing program 1 (id=1516): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a54000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d0400128008000340000001300c00098008000140ff"], 0x7c}, 0x1, 0x0, 0x100000000000000, 0x4044050}, 0x4000000) 6m6.169170501s ago: executing program 1 (id=1518): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f00000000c0)=0x8253, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x65dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000080)=0x13) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x1, 0x3}) sendmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r3], 0x108}}], 0x1, 0xc040) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x3a}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x24000000) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x40, r4, 0x200, 0x70bd2c, 0x6, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x81}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xca}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000014) 6m5.793380549s ago: executing program 1 (id=1522): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r3) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000240)={0x2001}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x202000, 0x13b) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2001, r5}, 0x0) landlock_restrict_self(r4, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x5e0e, 0x1}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040004) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0x2, 0xffff}, {0xffe0}, {0xc, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0x8}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) close(r10) open(&(0x7f0000000180)='./file0\x00', 0x410083, 0x2) r11 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r0, &(0x7f00000000c0)={0x4008}) 6m5.321593819s ago: executing program 1 (id=1526): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000120030808e010028bd7000fddbdf25fe8000000000dfffffff00000000b472932b04d30a"], 0x28}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/reserved_size', 0x149a82, 0x0) writev(r3, &(0x7f0000000a00)=[{&(0x7f00000004c0)="e3c838", 0x3}], 0x1) r4 = accept4(0xffffffffffffffff, &(0x7f0000000540)=@nl, &(0x7f00000005c0)=0x80, 0x80000) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x15, &(0x7f0000000600)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xf}, @exit, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], &(0x7f00000006c0)='syzkaller\x00', 0x5, 0x7a, &(0x7f0000000700)=""/122, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0x3, 0x4, 0xb}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000800)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000840)=[{0x3, 0x3, 0x8}, {0x5, 0x5, 0x0, 0x1}, {0x3, 0x2, 0x4, 0x3}, {0x5, 0x4, 0x9, 0xa}, {0x5, 0x5, 0xe, 0x2}, {0x2, 0x3, 0xa, 0x7}, {0x1, 0x4, 0x0, 0xc}]}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000980)={r4, r5}) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)) r6 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x110}) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8) r7 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) dup(r7) ptrace(0x10, 0x0) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x5, 0xaea, 0x1, 0x4000000000006, 0x21001a3a, 0x8, 0x8000000000000001, 0x6}, 0x0, &(0x7f00000000c0)={0x3ff, 0x9, 0xfffffffffffffffe, 0x3, 0x100200008, 0x80000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}}, 0x88}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="700000001000010425bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0317000021000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r9, @ANYBLOB='\f\x00\n\x00', @ANYRES32=r9], 0x70}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100006"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 6m4.514628008s ago: executing program 1 (id=1528): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000011d000/0x2000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x7, 0x0, 0x0, 0x1c3, 0x12, 0x2, 0x0, 0x6}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x98}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x401, 0xfffffe0800000001, 0xfa11, 0xf7ffffff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0xfffffe78) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r7, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) open_by_handle_at(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="08000000010000008000f4"], 0x4f0280) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r6, 0xc040583c, &(0x7f0000000180)={0xa, 0x63, 0xd, 0x1, 0x3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)=0x24) 6m2.30735546s ago: executing program 3 (id=1540): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x303, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) fanotify_mark(r4, 0x1, 0x48000046, 0xffffffffffffffff, 0x0) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r5, &(0x7f00000030c0)=""/4107, 0x100b) keyctl$read(0xb, r5, &(0x7f00000010c0)=""/4096, 0x1000) fchdir(0xffffffffffffffff) open(&(0x7f0000000240)='./file0\x00', 0x800, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="00082dbd7000fbd8df25"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x100a4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_PEC(r9, 0x708, 0x6) ioctl$I2C_SMBUS(r9, 0x720, &(0x7f0000000080)={0x1, 0x6, 0x2, &(0x7f0000000040)={0xf, "810556c721393f4084c89ea7f77d040b00"}}) 5m58.93174096s ago: executing program 3 (id=1554): r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x582, 0x25, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0xf8, 0x10, 0x5, {0x8, 0xb, 0x2, 0x0, 0x1, 0x5, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xfffd, 0xa, 0x11, 0x47}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x0, 0x5, 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x4, 0xd8, {0x8, 0x25, 0x1, 0x2, 0x30, 0xcc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xd, 0x7, 0x0, {0x8, 0x25, 0x1, 0x1, 0xf, 0x4, 0x10}}}}}}}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) bind$netlink(r1, &(0x7f0000000980)={0x10, 0x0, 0x25dfdbfd}, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd}, 0xc) syz_usb_control_io$uac2(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000140)={0x14, 0x0, 0x0}, &(0x7f0000000040)={0x44, &(0x7f00000000c0)={0x20}, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x81, 0x3, '\x00 \x00'}, 0x0, 0x0, 0x0, 0x0}) 5m55.829345091s ago: executing program 3 (id=1562): r0 = memfd_create(&(0x7f0000000180)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\t\t'}, {}], 0xa, "ee8f0ffb5f8212fb1b83014d609451c582b8b3a9c44c17cab60849fcea89b4995e3c148bdfc53b1d8dff78192af4aae32b201bae7fe29cb2441713a0da2a7f9d97879bbeca736831ae6ed5966e739cfe0e130fe3775af1ac1143b118544ecab45f21564131"}, 0x74) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) unshare(0x28000600) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0xc4) pwritev2(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="15", 0x1}], 0x1, 0x5401, 0x0, 0x0) copy_file_range(r1, &(0x7f0000000400)=0x3ff, r1, 0x0, 0x6, 0x0) r2 = syz_open_dev$vivid(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f00000005c0)={0x50, 0x54, &(0x7f00000004c0)="0c74fc3686e7fef751a3d01598bf919e56e408f763ba91aadef46f6cfad3659b4a4aa1ede57e70b1f8f6c628dfd4b52a6d96bd4cacd85a8b75856373c0a3eaf78b899745ccdde3439b1d524a3598bb62500b794134db9b1c0804b503ca31f1d79cc098d18e0c327a0082de26b85ee6fedda855f89451c0958c60bf1ecfaf913719ef588a8711e97091cbe6ad3b7611f2fd5a11b6d8daf573c251dbd391c4697abaa5b9100044708579895a5050ee5d9b1e6e4e4ace0857769faf59b9f6b2e1f96fcfd0f2aca27740491b3b37f79c09af3fab5b0e58ad5e", {0x80, 0x91a, 0x47314356, 0x7, 0x8, 0x7f, 0x0, 0x16b}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000f3000000f3000000040000000c00000000000008020000000d00000006000013046b00000009000000420000000100000004000000c3000000030000000e00000003000000030000000400000000100000020000000100000009000000090000000c000000030000040800000008000000010000007400000009000000030000000900ba8c00000600000003000000030000001000000000000012040000000f00000000000012030000000b0000000100000f030000000500000068720000faffffff6a89d8000000000300000d0000000009000000000000000100000005000000020000000400000000003030"], &(0x7f0000000380)=""/221, 0x110, 0xdd, 0x0, 0xfb5}, 0x28) memfd_create(&(0x7f0000000180)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x0) (async) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\t\t'}, {}], 0xa, "ee8f0ffb5f8212fb1b83014d609451c582b8b3a9c44c17cab60849fcea89b4995e3c148bdfc53b1d8dff78192af4aae32b201bae7fe29cb2441713a0da2a7f9d97879bbeca736831ae6ed5966e739cfe0e130fe3775af1ac1143b118544ecab45f21564131"}, 0x74) (async) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) unshare(0x28000600) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0xc4) (async) pwritev2(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="15", 0x1}], 0x1, 0x5401, 0x0, 0x0) (async) copy_file_range(r1, &(0x7f0000000400)=0x3ff, r1, 0x0, 0x6, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000100), 0x3, 0x2) (async) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f00000005c0)={0x50, 0x54, &(0x7f00000004c0)="0c74fc3686e7fef751a3d01598bf919e56e408f763ba91aadef46f6cfad3659b4a4aa1ede57e70b1f8f6c628dfd4b52a6d96bd4cacd85a8b75856373c0a3eaf78b899745ccdde3439b1d524a3598bb62500b794134db9b1c0804b503ca31f1d79cc098d18e0c327a0082de26b85ee6fedda855f89451c0958c60bf1ecfaf913719ef588a8711e97091cbe6ad3b7611f2fd5a11b6d8daf573c251dbd391c4697abaa5b9100044708579895a5050ee5d9b1e6e4e4ace0857769faf59b9f6b2e1f96fcfd0f2aca27740491b3b37f79c09af3fab5b0e58ad5e", {0x80, 0x91a, 0x47314356, 0x7, 0x8, 0x7f, 0x0, 0x16b}}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)=""/221, 0x110, 0xdd, 0x0, 0xfb5}, 0x28) (async) 5m55.584731298s ago: executing program 3 (id=1564): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r7, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) r8 = fcntl$dupfd(r7, 0x406, r7) sendmmsg$inet(r8, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001a00)="04", 0x1}], 0x1, &(0x7f0000001c40)=ANY=[], 0xc}}], 0x1, 0x8000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x4, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000050) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4801, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x2}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x4, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 5m54.314608225s ago: executing program 3 (id=1571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a3039ff000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 5m54.217315629s ago: executing program 3 (id=1572): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r1) write$snapshot(r0, 0x0, 0xd) (async) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) splice(r4, 0x0, r3, 0x0, 0x1ffffffffffffe, 0x1) (async) syz_emit_ethernet(0xd14, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x0) (async) ioctl$SNAPSHOT_FREE(r0, 0x3305) 5m53.31022794s ago: executing program 0 (id=1576): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000002200)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb00ed0000000000000200010000000000000000fdffffff00030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) 5m53.017271522s ago: executing program 0 (id=1577): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002880), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') preadv(r1, &(0x7f0000003240)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, 0x8, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f00000028c0)={0xe, 0x0, 0x1}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000018c0), 0x802, 0x0) read(r2, 0x0, 0x0) socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x8, 0x3, 0x7ffffdbd}]}) finit_module(0xffffffffffffffff, 0x0, 0x3) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) inotify_init() r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 5m51.633947299s ago: executing program 0 (id=1581): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a54000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d0400128008000340000001300c00098008000140ff"], 0x7c}, 0x1, 0x0, 0x4800000000000000, 0x4044050}, 0x4000000) 5m51.488914593s ago: executing program 0 (id=1582): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x20000000000000}) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x2, 0x0, 0x20000000000002, 0x59}) (async) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) (async) unshare(0x26020480) (async) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000640)=ANY=[], 0x1, 0x0, 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x0, &(0x7f0000004300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) linkat(r6, &(0x7f00000003c0)='./cgroup\x00', r6, &(0x7f0000000200)='./cgroup\x00', 0x1000) (async) write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000018b"], 0xfdef) 5m51.177736521s ago: executing program 0 (id=1586): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000040)=ANY=[], 0x118) ioctl$USBDEVFS_ALLOW_SUSPEND(r8, 0x5522) fsopen(&(0x7f00000000c0)='esdfs\x00', 0x0) r9 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000400)={0xf0f021}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r8, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x2e, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0xfb, 0xa, 0x67, 0x58, 0xa0, 0x2, 0x6, 0x2}}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x62050c00) ioctl$KVM_RUN(r10, 0xae80, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x80000008, 0x2c72ec2a, 0x5, 0x30003900, 0x6, 0x2, 0x9}]}) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102) 5m50.814968167s ago: executing program 0 (id=1589): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x4c, 0x10, 0xd03, 0x70bc2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20, 0x203}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x1}, @IFLA_BOND_ARP_ALL_TARGETS={0x8}, @IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x4c}, 0x1, 0x0, 0x3ffff, 0x24008011}, 0x16c3035550932880) 5m50.133150785s ago: executing program 32 (id=1589): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x4c, 0x10, 0xd03, 0x70bc2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20, 0x203}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x1}, @IFLA_BOND_ARP_ALL_TARGETS={0x8}, @IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x4c}, 0x1, 0x0, 0x3ffff, 0x24008011}, 0x16c3035550932880) 5m49.372810079s ago: executing program 33 (id=1528): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000011d000/0x2000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x7, 0x0, 0x0, 0x1c3, 0x12, 0x2, 0x0, 0x6}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x98}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x401, 0xfffffe0800000001, 0xfa11, 0xf7ffffff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0xfffffe78) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r7, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) open_by_handle_at(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="08000000010000008000f4"], 0x4f0280) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r6, 0xc040583c, &(0x7f0000000180)={0xa, 0x63, 0xd, 0x1, 0x3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)=0x24) 5m38.275761763s ago: executing program 34 (id=1572): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r1) write$snapshot(r0, 0x0, 0xd) (async) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) splice(r4, 0x0, r3, 0x0, 0x1ffffffffffffe, 0x1) (async) syz_emit_ethernet(0xd14, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x0) (async) ioctl$SNAPSHOT_FREE(r0, 0x3305) 30.142866604s ago: executing program 4 (id=2938): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtfilter={0x3b4, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xe, 0x1f}}, [@filter_kind_options=@f_matchall={{0xd}, {0x380, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x8, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xb, 0x3, 0x10000000, 0x2, 0xd03}}}]}, {0x4}, {0xc, 0x7, {0xd898c8bb8890b3ba}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_MATCHALL_ACT={0x1e0, 0x2, [@m_mpls={0x11c, 0x12, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd07, 0x0, 0x6, 0xfffffff7, 0x4}, 0x1}}]}, {0xd2, 0x6, "867425b4c281550cf3d6d10e3927788cdc399c4570d04b8f8398dcd570c736519b10b16b15a2337e562d16515b4a585d16238499281f87d3242a6e4c4c6536ea9bb0f33c709678ca24035434f5264137c30b83dd2f038145ad23f5e596df9b09db91e4dd883453591b17979e47ba8da5a6d98b38c96d7f294721699862f1f8ea79b47ae5aee80927300f915f36eb2b78799efb7fc63cfd587544991ddb7f40c1ceda6de77d0c6817acc8b0e59e70376693faaf32bb5425ae47572833b375cb5d66f3de99423aa05161c905561691"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0xc0, 0x4, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}]}, {0x8c, 0x6, "0ec477ca2da888d3f2456c06c547c123869d1ec77e2bdcc498db1dfccc5ae7d3695de2307d406dad853cc7606310794b75afabafb6436a13fbf386c70377121ed8b778e2e424eb92f343d7ece2ffd951033ebebd040fae2f62e61a2e1a068550301ce3e8f2a3779cf5efd50948ee625b2e8b23405887516bca0f54a0bebaabb6e65dd115dcb15511"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0xffff}}, @TCA_MATCHALL_ACT={0x140, 0x2, [@m_sample={0x40, 0xc, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x101}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0xfc, 0x1c, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "d8819741da775d88f82f5281f6991df6"}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0xb0, 0x6, "e0bcd458224309b4bddc10fb039096cc1585350e19e702b09f6a1f67b446b6f62d1c16ad110caa3b2902e1315b26c4306ccbb14467fd0f7d98f95bca46b1189c5b12f055dbf7d2b8d371608ab25ec2833cf487e0d6183de37de4d62cb170130972b7eef0f12c3de4c17b5e2aa1dc5785a9f23575760244cfbe2fff0499864bb7a328cf74f1b1db1f79f88564d9c27a6263289ac4c18f07de1ab09a9ed70701af7c2e79e19c1f97d5591649f2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x50}, 0x0) 29.998345782s ago: executing program 4 (id=2941): r0 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x8901) move_mount(r2, 0x0, r1, 0x0, 0x46) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0040d07, &(0x7f0000000040)=0x121) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x0, 0x40) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) socket(0x2, 0x80805, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "bc86299ab62e97b6", "2125e44cdf02000000000000003297f0", "8fc203e0", "c40330604dc13bd4"}, 0x28) add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000200)={{0x3a, @multicast1, 0x4e22, 0x3, 'none\x00', 0x0, 0x9, 0x15}, {@private=0xa010102, 0x4623, 0x4, 0x100000cd, 0x12d5f, 0x3}}, 0x44) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 8.771960714s ago: executing program 2 (id=3003): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2715, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_ublk_setup_io_uring(0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r0) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000003b40), 0x189000, 0x0) syz_ublk_setup_queues(r7, r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x8000, 0x2, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x683d, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffef}}], 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x20, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x100, 0x4, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x101}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e"], 0x48) 8.175861793s ago: executing program 2 (id=3005): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x200, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0xffffffff, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0xffffffff, 0xfffffffe, 0x0, 0xff, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe, 0xffffffff], [0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddc, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xc045, 0x10, 0x16, 0x0, 0x4, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0xfffd, 0xd}, 0x4d, [0x400, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xffffc3c3, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x3, 0x3, 0x0, 0x0, 0x6, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0xfffffffc, 0xfffffffe, 0x0, 0x4, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2842, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10e3, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0xf9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x7fffffc, 0x0, 0x0, 0x7fff, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7ff, 0x0, 0x6, 0x2], [0x81, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0xe, 0x0, 0x3, 0x0, 0x1, 0x1ff]}, 0x45c) 7.664943271s ago: executing program 2 (id=3007): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000200)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc815cbf392bcf9ce0b09f879bd7aaf9d086e3c2", 0x2d}], 0x2}}], 0x1, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x15, 0x105, 0x70bd2a, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x8, 0x3, 0x0, 0xa, 0xd0, 0x0, 0x33, 0x0, 0xee00}, {0x0, 0x2, 0x0, 0xb14, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0xfffffffffffffffd}, 0x1ff, 0x6e6bb5, 0x3, 0x0, 0x3, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x810}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x13, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf6bf, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x1, 0x1, 0x7, 0x0, 0x6}, @ldst={0x3, 0x2, 0x5803ae0c9e831c82, 0x0, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0xe2, 0x3, 0x4, 0x6, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x6, 0xa2, &(0x7f0000000280)=""/162, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x2, 0x10001, 0x6}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x1, 0xffffffffffffffff], &(0x7f0000000480)=[{0x1, 0x3, 0xf, 0x6}, {0x6, 0x4, 0x4, 0x9}, {0x4, 0x3, 0x5, 0x6}, {0x0, 0x5, 0xd, 0x6}, {0x0, 0x4, 0xb, 0xa}, {0x5, 0x1, 0xd, 0x1}, {0x5, 0x592c, 0x9, 0x4}], 0x10, 0x3f}, 0x94) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000400)={0x6}, 0x8) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000640)={0xe}, 0x8) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000680)={0x2}, 0x8) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000006c0), 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4, 0x41}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup, 0xe, 0x0, 0xfffffff4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0}, 0x40) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r7, &(0x7f0000000580)=[{&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/202, 0xca}, {&(0x7f0000000000)=""/19, 0x13}, {&(0x7f0000000040)=""/22, 0x16}, {&(0x7f0000000080)=""/47, 0x2f}], 0x5, 0x1fe, 0x12) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x36, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40f7761f, 0x0, 0x0, 0x0, 0x566}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @generic={0xff, 0x8, 0x5, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcd3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0xfffffffa, 0xd4, &(0x7f0000000600)=""/212, 0x0, 0x4e, '\x00', r5, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0x8, 0x5, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f0000000780)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000007c0)=[{0x1, 0x5, 0x4, 0xa}, {0x2, 0x2, 0x10, 0x5}, {0x2, 0x3, 0x8, 0x3}, {0x1, 0x2, 0xd, 0x1}, {0x0, 0x2, 0x7, 0x3}, {0x3, 0x2, 0x9, 0xb}, {0x5, 0x2, 0xb, 0x1}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB='6\x00\x00\x00\b\x00\x00\x00', @ANYBLOB="ee60b85b30702b3d0017dc383b6cea583c07cdeb4b858cc30364e5692eb3c7aee8f5f6dcb0c1f7bfcecc3af9e67306cadfb83087e200951f3ea97e8149ce1aeaed728389e185653695ece09d692652f1b09cb6242b0a2651919927fba7bf9485440b4328ce", @ANYRES32=r8, @ANYBLOB, @ANYRES64=r6], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000009c0)={@map=r3, r3, 0x26, 0x0, r3, @void, @value=r3, @void, @void, r6}, 0x20) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400060000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c002a800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a3100000000140003"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r11 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) r12 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x26) ioctl$KVM_SET_PIT(r12, 0x8048ae66, &(0x7f0000000a00)={[{0x1000, 0x3f4b, 0xf9, 0x1, 0x40, 0x3, 0xa, 0x6, 0xd4, 0x1, 0x72, 0xc5, 0x8}, {0x0, 0x3, 0x3, 0xa, 0x1, 0x4, 0x3, 0x1, 0x9, 0x6, 0x86, 0x0, 0x40000000000000}, {0x9, 0x5, 0xc, 0x60, 0xb1, 0x6, 0xee, 0x5, 0x8, 0xfc, 0x3, 0x40, 0x5}], 0x69}) syz_usb_control_io$cdc_ncm(r11, 0x0, 0x0) 7.129173021s ago: executing program 7 (id=3011): r0 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f0000000100)=[{r0, 0x84}], 0x1, 0x3ff) sendto$inet(r0, &(0x7f0000000200)="009a9e5fa6c765ebf1782f9243efa7b70bebb1e7617f36a7a8d81a7d9f60ebd8b16cd00532de6dfd9875", 0x2a, 0x8040, 0x0, 0x0) listen(r0, 0xda90) getxattr(&(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000490000/0x2000)=nil, 0x2000) socket$inet6_tcp(0xa, 0x1, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r2, &(0x7f0000000f80)={'syz1\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0x1, 0x4, 0x9, 0x1, 0x4, 0x7, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x7, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0x1, 0x4, 0x10, 0x6, 0x3, 0x89, 0x804d7e, 0xff, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd9, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x48, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x1000, 0x1a9e1bfc, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x6ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x4, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x6, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x3, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x1, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x1000, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 6.69874618s ago: executing program 5 (id=3012): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xa, 0x2, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x5, 0x7, 0x5, 0x1, 0xfffffffd, 0x6}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x6, 0x4}}, @TCA_NETEM_JITTER64={0xc}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000070000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 5.995809156s ago: executing program 7 (id=3015): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a223010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000004c0)={0x40, 0x12, 0x6, "03000000a283"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000140)={r1, r2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)={0x70, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x400002}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xd}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000200)="d80000001e0081054e81f782db020000001d080006007c09e8fe08a104000e000a00142603600e1208000fc01e000406a80016c008000e400400027c035c0461c1967f6f94007134cff6d26efb8000a0ffa290457f01895416277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d25ccca95c9757c01deeb12c0e440f57d6cf23b1900360db7e5167fda40fad956d809d5e12a9ecbee5de6ccd40dd6e4edef3d93452a92950b0000000000000023f9a941000000000000000000007d59ef7e1359485303f720a1ed469c778f", 0xd8}], 0x1}, 0x804) r7 = socket(0x2a, 0x80000, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7, 0xfff3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x0) r10 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0x101c82, 0x0) write$FUSE_NOTIFY_RETRIEVE(r10, 0x0, 0x0) r11 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r11, &(0x7f0000000240)=ANY=[@ANYBLOB='LINE \''], 0xbb) close(r11) r12 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r12, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000080) setsockopt$sock_attach_bpf(r12, 0x6, 0x19, &(0x7f0000000200)=r12, 0x21) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 5.786199568s ago: executing program 6 (id=3016): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x200, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0xffffffff, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0xffffffff, 0xfffffffe, 0x0, 0xff, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe, 0xffffffff], [0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddc, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xc045, 0x10, 0x16, 0x0, 0x4, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0xfffd, 0xd}, 0x4d, [0x400, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xffffc3c3, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x3, 0x3, 0x0, 0x0, 0x6, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0xfffffffc, 0xfffffffe, 0x0, 0x4, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2842, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10e3, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0xf9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x7fffffc, 0x0, 0x0, 0x7fff, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7ff, 0x0, 0x6, 0x2], [0x81, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0xe, 0x0, 0x3, 0x0, 0x1, 0x1ff]}, 0x45c) 5.712180715s ago: executing program 5 (id=3017): syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000840)={0x9, {"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", 0x1000}}, 0x214) (async) write$UHID_INPUT(r0, &(0x7f0000000840)={0x9, {"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", 0x1000}}, 0x214) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/diskstats\x00', 0x0, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/diskstats\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) fsmount(0xffffffffffffffff, 0x0, 0xf7) fchdir(0xffffffffffffffff) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x4) recvfrom(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getdents(r3, &(0x7f0000000480)=""/202, 0xca) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000005c0)={0x2, 0x194, "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"/404}) (async) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000005c0)={0x2, 0x194, "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"/404}) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) (async) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) memfd_create(0x0, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r7 = socket$inet(0x2, 0x4, 0x3) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000280)={@dev={0xac, 0x14, 0x14, 0x37}, @remote}, 0xc) (async) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000280)={@dev={0xac, 0x14, 0x14, 0x37}, @remote}, 0xc) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x0, 0x2c, 0x200, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x5, 0x9}, {0x6, 0xffe8}, {0x8, 0xfff3}}, [@TCA_CHAIN={0x0, 0xb, 0x9}, @filter_kind_options=@f_flower={{}, {0x0, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0x0, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_FLOWER_KEY_MPLS_OPTS={0x0, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x0, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x0, 0x2, 0x8}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x0, 0x1, 0x2}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x0, 0x1, 0x4}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x0, 0x2, 0xd2}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x0, 0x3, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x0, 0x2, 0x26}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x16, 0x1, 0x5}]}}, @TCA_FLOWER_KEY_SCTP_SRC, @TCA_FLOWER_KEY_MPLS_LABEL={0x0, 0x46, 0x2}, @TCA_FLOWER_KEY_IPV4_SRC={0x0, 0xa, @broadcast}, @TCA_FLOWER_KEY_IP_PROTO={0x0, 0x9, 0x62}]}}]}, 0x44}}, 0x40000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x12, 0xffffffffffffffff, 0xb320a000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x12, 0xffffffffffffffff, 0xb320a000) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0x100000000, 0xf4056c3324515dee) (async) splice(r9, 0x0, r8, 0x0, 0x100000000, 0xf4056c3324515dee) socket$unix(0x1, 0x5, 0x0) (async) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.48151349s ago: executing program 6 (id=3018): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x2, 0xb1}, 0x8) r2 = syz_open_dev$video(&(0x7f00000004c0), 0x7, 0x80c00) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xf0f02a, 0x105}) syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6076b2af00072f0020010000000000000000000000000001ff020000000000000000000000000001000022eb"], 0x0) write$cgroup_subtree(r3, &(0x7f0000000940)=ANY=[@ANYBLOB="0007000042009103", @ANYRESDEC=r2, @ANYBLOB="d9fa44e233c5c24de38ea7d037904374852a8c7408c6e24d71ba5fdf5df15ec83683a44bdab879a53bdbed069baa9ada2f4775eda8008f991b7a45c3719aab60d761976268f2581331d450e4c317d5805125691571ea0c5d32a6667209b9f38a6cc7703eb269e57d179ea82bb1d063349b369c14d9a33f7ee6460bde947bc8205b0402830e620ea9e1c8c844c9d273d66da4bcfe2dca3836cddd5e1dd7dabf98e26ff8744be5ab41b564ab5ee429b2fadf5452cd4022a076f919d369246fa0abb0ce2cc9f9416ddf1e238741edb826250a2cfc64c2d53d9ad1279ec49bff269cc722a467beeba215bcccdcfdda70f1e52563026e2769f336", @ANYRESOCT=r2, @ANYRESOCT=r4, @ANYRES8=r1], 0xfe33) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201010200001020ac0523024000012f6a6bdafc402c0203010902240001010300e6b6a31eee1032d1ee6ad304002201030101340921a24e0c0122e00b090581036000088000"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000005700)=""/4087, 0xff7}, {&(0x7f0000004580)=""/4081, 0xff1}, {&(0x7f0000003540)=""/4125, 0x101d}, {&(0x7f0000000280)=""/115, 0x73}, {0x0}, {&(0x7f0000000500)=""/176, 0xb0}], 0x6}, 0x10100) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40, 0x11a) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB=',']) fsopen(&(0x7f0000000000)='overlay\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[]) ioctl$VIDIOC_G_AUDIO(r2, 0x80345621, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r5 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x34}, 0x18) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r5, 0x4008ae48, &(0x7f0000000180)=0x50000) ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f000000c3c0)={0xd3d, 0xffffffffffff0001, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000002380)=@raw={'raw\x00', 0x701, 0x3, 0x270, 0x0, 0xb, 0x108, 0x108, 0x0, 0x1d8, 0x1c8, 0x1c8, 0x1d8, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'ip6erspan0\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@esp={{0x30}, {[], 0xd2857df73be921dd}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'veth1_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x4, 0x1, [0x23, 0x9, 0x31, 0x1a, 0x36, 0x4, 0x31, 0x6, 0xd, 0x2f, 0x2a, 0x1f, 0x3b, 0x37, 0x2b, 0x20], 0x2, 0xa}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d0) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e227da77610425b2cd256fdc4c3fd8db5bf5fe139ebf5c6dd96b26f1c216ecf648900763cc90aad65a5bd2aeea486ea21a66b22a9c398711b3d538c5fc8a561c4d32fc6848f5964f4e6090f377ca9a6f02df5ccc7d44edecf8c5170a3acd2167699da384e60ff91f02939eb9ed6217bd532731115a852", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9b3}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000308000340000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 5.318027603s ago: executing program 2 (id=3019): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="7800000010004b0400000000000000167a000002", @ANYRES32=0x0, @ANYBLOB="129c000044100000580012800b0001006272696467650000480002800a0014000180c2000000000006000900000000000500240000000000050018000000000005001700000000"], 0x78}}, 0x40000000) 5.102277385s ago: executing program 5 (id=3020): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = memfd_create(&(0x7f0000000780)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r1, 0x0, 0x9, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x12, r1, 0x0) read(r1, &(0x7f0000000080)=""/221, 0xdd) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x29, 0x0, &(0x7f0000000040)=0x29) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x20000000000000}) fcntl$lock(r5, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x2005, 0x1fd}) fcntl$lock(r5, 0x26, &(0x7f0000000280)={0x1, 0x2, 0x2b, 0x9}) fcntl$lock(r5, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x20000000000001, 0x90}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="04010000", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542b0000880ac000080060005000000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a00fffc00000000ff020000000000000000000000000001000000001400040002000000ac1414aa00000000000000004800098028"], 0x104}}, 0x0) 4.839411054s ago: executing program 2 (id=3021): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a1", @ANYRES32], 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x90, 0xc9, "", [{{0x9, 0x4, 0x0, 0x40, 0x5, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x1f, 0xff, 0x6}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x2, 0x81, 0x8, 0xff, 0x7}, 0x3c, &(0x7f00000000c0)={0x5, 0xf, 0x3c, 0x3, [@ssp_cap={0x20, 0x10, 0xa, 0xff, 0x5, 0x1, 0xf00, 0x7, [0xcf, 0x8040cf, 0xff0000, 0xff3fc0, 0x3fff]}, @generic={0x3, 0x10, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "3b19714bae73afacadff5dab45f74b9a"}]}, 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1407}}, {0xe2, &(0x7f0000000380)=@string={0xe2, 0x3, "b50243c05b3e666aa88ef98ddbe39cfe3e83d7fb6c47dd27702f558f26c98fc0474165501a87ba74eefb0d1aebc5ecb06f352f96829b5f9e6b2acfc3754fe851e6132817071c4d3a65cd95bb1461e479f2e10a0eeee12e633482ac718ca8b20629c88a4f42b6ba80273ec474669256b4ce6439f9e6d9596cc4be0b863118741f18e5fbfea269cf4031398f55d29f9fc12e2b03a42fd7a4c85b3f3124dfb67ef53bf56bb3ea1a2bbd3e15e3eeaff1bc7cd1f52450225419a1de151b4d368c9bc5154c5bbe4b90ac2ed0beaf9dad20d3fd7a0a1c4fb1211e6ca732943abc91b84d"}}, {0x98, &(0x7f00000001c0)=@string={0x98, 0x3, "0b47863814ba805cfa2f810aaea1242cdab09fef3c9bf336a17cc85a296d659d0fd163d38a1697dc3a517ead81f2826438886905658564538d187993e371ce731cfd2c71a18498dda953af3cd19d1315f5cd44fad04c8e1ad290a3c5709b21a2fa4c4b06aa9ea00b1d5dbf8aa152e88548677d42ed45324fe228e6d02e7f3aa204b7e7f77d416d85815dce082abc2f0ab3abcc7c91ec"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x140a}}]}) 4.025528408s ago: executing program 5 (id=3022): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0xc0) 3.706202937s ago: executing program 5 (id=3023): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/mnt\x00') setns(r0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0xffdffffe, 0x7, 0x0, 0x6, 0x0, 0x3, 0x8d}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) keyctl$unlink(0x9, 0x0, 0x0) add_key$fscrypt_provisioning(0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='\x00\t\x00\x00\x00\x00\x00\x00a'], 0x18, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000002060108007800000000000000a329d94178f8000000050005000000000005000100070000000500040000000000090002007379"], 0x38}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty=0x1f}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r7 = getegid() fsetxattr$system_posix_acl(r1, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="02000000010000000000000002000100", @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="040006000000000008000100", @ANYRES32=0x0, @ANYRES64=r4, @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="10000600000000002000010000000000"], 0x84, 0x2) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"db4c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774c95d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa8afb8fa04b707410aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4759da0bee1fabe3f71dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7792a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34ca69c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240b0ffab9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883ca3648c27772fc5dbaea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc007fe029325d6078aef94d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea179a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbeaa970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad58377b0d6ae9b97034f94"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.210570523s ago: executing program 7 (id=3024): r0 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f0000000100)=[{r0, 0x84}], 0x1, 0x3ff) sendto$inet(r0, &(0x7f0000000200)="009a9e5fa6c765ebf1782f9243efa7b70bebb1e7617f36a7a8d81a7d9f60ebd8b16cd00532de6dfd9875", 0x2a, 0x8040, 0x0, 0x0) listen(r0, 0xda90) getxattr(&(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000490000/0x2000)=nil, 0x2000) socket$inet6_tcp(0xa, 0x1, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r2, &(0x7f0000000f80)={'syz1\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0x1, 0x4, 0x9, 0x1, 0x4, 0x7, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x7, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0x1, 0x4, 0x10, 0x6, 0x3, 0x89, 0x804d7e, 0xff, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd9, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x48, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x1000, 0x1a9e1bfc, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x6ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x4, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x6, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x3, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x1, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x1000, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 2.862777306s ago: executing program 2 (id=3025): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x5b) read$watch_queue(r3, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r2) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x10000, 0x1, 0x283}, 0x0, 0x0, 0x0) r5 = io_uring_setup(0x1d90, &(0x7f00000001c0)={0x0, 0x51ca, 0x20000, 0xfffffffd, 0x235, 0x0, r4}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f0000000500), 0x0) io_uring_register$IORING_REGISTER_PROBE(r5, 0x24, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = fsopen(&(0x7f00000000c0)='proc\x00', 0x1) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x24f6, 0x3, 0x2, 0x0, 0x9, 0x2}, 0x30, 0x0) landlock_restrict_self(r7, 0xa) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0xf) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) 2.500546322s ago: executing program 4 (id=2951): io_setup(0x5, &(0x7f0000000e80)=0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = syz_usb_connect(0x4, 0x2d, &(0x7f00000004c0)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r1, @ANYBLOB="53f5fba8600ad7b74409cdefba0ad64cb5fbf2c13f6a8fcff992e6e6ec1070b4c4ec40388efd3c16cc065bf57d417ea90eb892d8711bd61916a646a4ba66a0a85b495cfc9f96614c599736b0ca59fb409a47b915b681cc9abe23be80800e6e17e91a91168c06e620e0676e70d63e3271f18a605032c56f967d8e1023d4c5f8becdee976c636447a1bd2b85ff1f4e1d42764272309267b37dc98f6b1ac68f363b5a5be696d21545955b7115990f02e2c159a048866e8c6784fedaf07beb8c71578feed88072443188f5a2203b8b40c2528871269dfe4ee5c5ffe2b3440e", @ANYBLOB="1e7b0a3afe91841354c06cd1c3737dd4cd4a587e9e7d492925f26eac0c9f008221260c641cd4f80c2b48221772282ea8771e7e2363bdc9fe750c7d6c9c1c8eb5ab09efe1278f307ada0f0c2cc3e3de8674c63d2b6c0091e3605788b63930d2dd347f7c1f9fb4913fbe49a1c99807c7b4fa2f644acd717c6b449795bc3e72b0b7746cf0c5db22b4668a7c33d2d848cde404a8572ab414a42e48c39faf42dc89e66f633c7a962f3fb20ae3c7c39b41f2959bfb78f61b18ee0081114172ab3f4e8db4f882ec8b43b01c3e", @ANYRES8=r0, @ANYRES64=r1, @ANYBLOB="09a7f6d2ee364d59d74693682bbe6a2fb0b7304f387bc2d8e755e50237205bf96a788dd8d7fc814690569005b744027968fff75383ac91a364fcc3c62e30cfb181ee81a9c0160f86378bb0e799a338585bb1340959be233b3bc8829c1c71adc8022414a7b0251eea88c1f2b388cbf1bbe41ba9f6d8c454a428c074128650c615be66b2672e2f2f6bf2adf8716220e249fc92d044e1e527f02b7035a3b81cf1c086989e013bae966d4956585087822a3bea4ddef8", @ANYRES16=r0, @ANYRESHEX=r0], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, &(0x7f0000000280)='L', 0x1) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) io_setup(0x5, &(0x7f0000000e80)) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) io_submit(r0, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) (async) syz_usb_connect(0x4, 0x2d, &(0x7f00000004c0)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r1, @ANYBLOB="53f5fba8600ad7b74409cdefba0ad64cb5fbf2c13f6a8fcff992e6e6ec1070b4c4ec40388efd3c16cc065bf57d417ea90eb892d8711bd61916a646a4ba66a0a85b495cfc9f96614c599736b0ca59fb409a47b915b681cc9abe23be80800e6e17e91a91168c06e620e0676e70d63e3271f18a605032c56f967d8e1023d4c5f8becdee976c636447a1bd2b85ff1f4e1d42764272309267b37dc98f6b1ac68f363b5a5be696d21545955b7115990f02e2c159a048866e8c6784fedaf07beb8c71578feed88072443188f5a2203b8b40c2528871269dfe4ee5c5ffe2b3440e", @ANYBLOB="1e7b0a3afe91841354c06cd1c3737dd4cd4a587e9e7d492925f26eac0c9f008221260c641cd4f80c2b48221772282ea8771e7e2363bdc9fe750c7d6c9c1c8eb5ab09efe1278f307ada0f0c2cc3e3de8674c63d2b6c0091e3605788b63930d2dd347f7c1f9fb4913fbe49a1c99807c7b4fa2f644acd717c6b449795bc3e72b0b7746cf0c5db22b4668a7c33d2d848cde404a8572ab414a42e48c39faf42dc89e66f633c7a962f3fb20ae3c7c39b41f2959bfb78f61b18ee0081114172ab3f4e8db4f882ec8b43b01c3e", @ANYRES8=r0, @ANYRES64=r1, @ANYBLOB="09a7f6d2ee364d59d74693682bbe6a2fb0b7304f387bc2d8e755e50237205bf96a788dd8d7fc814690569005b744027968fff75383ac91a364fcc3c62e30cfb181ee81a9c0160f86378bb0e799a338585bb1340959be233b3bc8829c1c71adc8022414a7b0251eea88c1f2b388cbf1bbe41ba9f6d8c454a428c074128650c615be66b2672e2f2f6bf2adf8716220e249fc92d044e1e527f02b7035a3b81cf1c086989e013bae966d4956585087822a3bea4ddef8", @ANYRES16=r0, @ANYRESHEX=r0], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) write$char_usb(r3, &(0x7f0000000280)='L', 0x1) (async) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) (async) 2.41330631s ago: executing program 5 (id=3026): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) mkdir(&(0x7f0000000040)='./cgroup/../file0\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x9) chdir(&(0x7f0000000340)='./cgroup/../file0/file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/../file0\x00', 0x9a) r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = epoll_create1(0x80000) fcntl$setstatus(r2, 0x4, 0x2800) sendmsg$nl_route_sched(r1, 0x0, 0x20040084) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) close(0x3) clock_nanosleep(0x7, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x0, 0x4044080) r5 = open(&(0x7f0000000100)='./file0\x00', 0x1d95ab03a3368f34, 0x1) r6 = openat$cgroup_type(r5, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000140), 0x9) syz_usb_connect$uac1(0x3, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0xa, 0x4, 0x6) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 2.098148802s ago: executing program 6 (id=3027): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) socket(0x11, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x266800, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a452f32640b7010203"], 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$key(0xf, 0x3, 0x2) openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x2080, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/mcfilter\x00') (async) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="de90bd25b2b34671fa2bd2b780bb9c7f7954345f550e4d8374f9c2d0e404e5ea30a7598eb2ea1676d30c32c271d0353aa995438beb2e3ed26a6e160121df2adbc39f57ca884abde8f40efe7acdbb2890e9d92696c0b446582795d3d62ff3c0565615845dfabcae6293274fa7ab6875acb0cd9060a59ad395382eae0fcd464dc8519209f076bc18ceaa", @ANYRES64=r2, @ANYRES64=r0, @ANYRESDEC=r4, @ANYRES64=r3], 0x38}, 0x1, 0x0, 0x0, 0x400c814}, 0x4011) (async) socket$alg(0x26, 0x5, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073013f000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb30f}, 0x90) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x2440, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYRES64=r6], &(0x7f0000000400)='syzkaller\x00', 0x8a8b, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_crypto(0x10, 0x3, 0x15) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x20}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000180)={0x201, 0x1, &(0x7f0000000340)=[r8], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7e}) 2.046029656s ago: executing program 7 (id=3028): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x8200, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f00000002c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x8, 0x0, 0x0}}, 0x10) r2 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000ffe000), &(0x7f0000ffe000), &(0x7f0000000000)) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newtfilter={0x2c, 0x2c, 0xd2f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r1, {0xfff3}, {0xd, 0x3}, {0x8, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0xde09}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@nl=@kern={0x10, 0x0, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x2, &(0x7f0000000180), 0xfe) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x100, 0x2070bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0xfff2}, {0xc, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x881}, 0x0) sendmsg$nl_route(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=r10, @ANYRES32=r0], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='sessionid\x00') select(0x40, &(0x7f0000000200)={0xfff, 0x8001, 0x6, 0x3, 0x4, 0x3, 0x7b0, 0x9}, &(0x7f0000000240)={0x7fff, 0x8000, 0x8, 0x8, 0x0, 0x8, 0x7fffffffffffffff, 0x7}, &(0x7f0000000280)={0x9, 0x3, 0xfffffffffffffffe, 0x5, 0x5, 0x401, 0x2, 0x6}, &(0x7f0000000300)={0x77359400}) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r12, &(0x7f00000001c0)={0x1000200d}) epoll_ctl$EPOLL_CTL_MOD(r12, 0x3, r11, &(0x7f0000000c40)={0x2000000b}) 1.866500994s ago: executing program 6 (id=3029): socket$inet(0x2, 0x2, 0x200002) (async) r0 = socket$inet(0x2, 0x2, 0x200002) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r2, &(0x7f0000000000)=@known='system.posix_acl_default\x00') close(r1) r3 = getpid() kcmp(r3, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) (async) kcmp(r3, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r5, 0x114, 0x1d, 0x0, 0x0) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) (async) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRES64=r3, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055364730a0fe97ba18d9c90b28"], 0x0, 0x47, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket$kcm(0x2, 0x5, 0x84) (async) r6 = socket$kcm(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x7c, &(0x7f0000000000)=r7, 0x62) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x5, 0x28e3, 0x5, 0x200}}}}]}, 0x48}}, 0x40) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) (async) r10 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='rdma.current\x00', 0x275a, 0x0) write$binfmt_misc(r11, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f00000002c0)={r11, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) (async) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f00000002c0)={r11, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) 1.61834571s ago: executing program 4 (id=3030): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000000000008001240000000000500050002000000050004000000000616000300686173683a6e6574"], 0x64}}, 0x0) 1.446084891s ago: executing program 4 (id=3031): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000101"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x0, 0xaf}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.36970612s ago: executing program 7 (id=3032): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[{[], [{}, {}, {0x0, 0x11}]}], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) 1.306653869s ago: executing program 6 (id=3033): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000440)={0x0, @sdr={0x34565559, 0x8}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000304280100000000080000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r10, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r11 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r11, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f903, 0x0, '\x00', @string=0x0}}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="a100000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='maps\x00') ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x50000, 0x14000}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(r12, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000003c0)="66b9b90b00000f320f72d6920f01c40f20d86635200000000f22d80f00900000f30f51a8802c9a070042000f009200800f01cbddcd", 0x35}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x21, 0xc, 0x0, 0x75, 0x81, 0x10, 0x0, 0x0, 0x82, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xff, 0x0, '\x00', 0x7}) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.186807471s ago: executing program 4 (id=3034): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x33, @private=0xa010101, 0x4e21, 0x3, 'none\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e20, 0x1, 0x7, 0x12d5f, 0x3}}, 0x44) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000ae0009040000024f69960009050f029d82297200090582"], 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYRES8], 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x10080, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x3) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') lseek(r12, 0x100000008, 0x0) ioctl$KVM_GET_FPU(r12, 0x81a0ae8c, &(0x7f0000000740)) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xc4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0xfe, 0x8, 0x100, 0x8, 0xd, 0x200, 0x8000, [{0x7, 0x5, 0x6, 0x8}, {0xfffffff0, 0x4, 0x100, 0x6}, {0x4, 0x0, 0xffff6e3f, 0x8}, {0x43ffcb0c, 0x3, 0x3, 0x3}, {0x5, 0xee, 0x7ff, 0x4}, {0x2, 0xd7, 0xfffffff9, 0x6}, {0x2, 0x749, 0x9, 0x5}, {0x9, 0x7, 0x4}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x10c}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000380)="da", 0x1}, {&(0x7f0000000700)="9103521c600add5ddd", 0x9}], 0x2}, 0x4000880) sendmsg$TIPC_NL_NET_SET(r9, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xcc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xaa}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r13 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r13, 0x40284504, &(0x7f0000000400)={0x3, 0x0, 0x84, 0x9, "b75fc47f994d6d4056b9b835c0a5dd0fcd70131cb9a8f007512701d3987e5821"}) 1.085432878s ago: executing program 7 (id=3035): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000380)={0x20, 0xc, 0x19, "bf495a5b239a899b93a08841e0369f2486cbd81b1be6cd2a42"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 6 (id=3036): syz_usb_connect$uac1(0x3, 0x82, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x582, 0x16, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x1, 0x60, 0x10, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfffd, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x4, 0x1002}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x7, 0x9, 0xe}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc0, 0x1, 0xf9, {0x7, 0x25, 0x1, 0x0, 0x2, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0x2, 0x20, {0x7, 0x25, 0x1, 0xc, 0x80, 0x7}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x1b, 0x5, 0x5d8, 0xe8, 0x438, 0xffffffff, 0x0, 0xe8, 0x540, 0x540, 0xffffffff, 0x540, 0x540, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x5, 0x0, 0x4, 0x7, 0x3, 0x4], 0x3, 0x1}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x30}, @port=0x4e21, @port=0x4e23}}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x100, 0x80, 0x1, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x5, 0x2, 0x4, 0x4, 0x2], 0x4, 0x2}, {0x4, [0x5, 0x4, 0x1, 0x4, 0x2, 0x1], 0x1, 0x4}}}}, {{@uncond, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@addrtype={{0x30}, {0x200, 0x6, 0x1}}, @common=@inet=@hashlimit2={{0x150}, {'pim6reg0\x00', {0x3b1f, 0x40, 0x44, 0xff, 0x1, 0x2, 0xff, 0x8, 0x18}, {0x3}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x6, 0xfc65b10921bce43b, 0x7, 0x3, 0x1], 0x4, 0x6}, {0x3, [0x0, 0x7, 0x2], 0x5, 0x7}}}}, {{@ip={@local, @multicast1, 0xffffff00, 0xffffffff, 'macsec0\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x3e, 0x0, 0x2}, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}, @common=@ttl={{0x28}, {0x2, 0x74}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@multicast2, @ipv6=@mcast1, @gre_key=0x9, @port=0x4e23}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x638) kernel console output (not intermixed with test programs): d USB device number 40 using dummy_hcd [ 670.654403][ T5705] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 670.761282][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 670.779104][ T5717] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 670.792241][ T29] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 670.812507][ T5705] usb 7-1: Using ep0 maxpacket: 8 [ 670.835617][ T29] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 670.856385][ T5705] usb 7-1: unable to get BOS descriptor or descriptor too short [ 670.878567][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.907781][ T29] usb 6-1: Product: syz [ 670.914499][ T29] usb 6-1: Manufacturer: syz [ 670.922036][ T5705] usb 7-1: config 4 has an invalid interface number: 202 but max is 0 [ 670.929685][ T29] usb 6-1: SerialNumber: syz [ 670.936807][ T5717] usb 8-1: USB disconnect, device number 44 [ 670.965900][ T5705] usb 7-1: config 4 has no interface number 0 [ 670.995622][ T5705] usb 7-1: config 4 interface 202 has no altsetting 0 [ 671.028597][ T5705] usb 7-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice=32.07 [ 671.074794][ T5705] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.104126][ T5705] usb 7-1: Product: syz [ 671.115809][ T5705] usb 7-1: Manufacturer: syz [ 671.137490][ T5705] usb 7-1: SerialNumber: syz [ 671.230994][ T5696] usb 3-1: unable to get BOS descriptor or descriptor too short [ 671.259679][ T5696] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 671.273207][ T29] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 671.290946][ T5696] usb 3-1: can't read configurations, error -71 [ 671.388880][T14605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.445328][ T29] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 671.454900][T14605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.471975][ T29] usb 6-1: found format II with max.bitrate = 4, frame size=7372 [ 671.518021][ T5705] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:4.202/input/input94 [ 671.557141][ T4976] bcm5974 7-1:4.202: could not read from device [ 671.579893][ T4976] bcm5974 7-1:4.202: could not read from device [ 671.600305][ T5705] usb 7-1: USB disconnect, device number 40 [ 671.872213][ T29] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 671.911921][ T29] usb 6-1: found format II with max.bitrate = 4, frame size=7372 [ 672.090079][ T29] usb 6-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 672.179392][T14616] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2736'. [ 672.248960][T14620] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2737'. [ 672.400111][ T29] usb 6-1: USB disconnect, device number 40 [ 672.578929][ T7996] udevd[7996]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 672.646711][T14629] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2741'. [ 673.617845][T14659] syz.2.2749: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 673.682077][T14659] CPU: 1 UID: 0 PID: 14659 Comm: syz.2.2749 Tainted: G L syzkaller #0 PREEMPT(full) [ 673.682116][T14659] Tainted: [L]=SOFTLOCKUP [ 673.682125][T14659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 673.682140][T14659] Call Trace: [ 673.682151][T14659] [ 673.682162][T14659] dump_stack_lvl+0xe8/0x150 [ 673.682206][T14659] warn_alloc+0x24c/0x270 [ 673.682239][T14659] ? stack_depot_save_flags+0x33/0x800 [ 673.682273][T14659] ? __pfx_warn_alloc+0x10/0x10 [ 673.682302][T14659] ? kasan_save_track+0x3e/0x80 [ 673.682329][T14659] ? __kasan_kmalloc+0x93/0xb0 [ 673.682362][T14659] ? xsk_setsockopt+0x52a/0x960 [ 673.682389][T14659] ? do_sock_setsockopt+0x17c/0x1b0 [ 673.682423][T14659] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 673.682456][T14659] ? do_syscall_64+0x174/0x580 [ 673.682487][T14659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.682522][T14659] __vmalloc_node_range_noprof+0x12c/0x1730 [ 673.682583][T14659] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 673.682615][T14659] ? __kasan_kmalloc+0x93/0xb0 [ 673.682638][ T191] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 673.682645][T14659] ? __kmalloc_cache_noprof+0x32d/0x660 [ 673.682673][T14659] ? __kmalloc_cache_noprof+0x150/0x660 [ 673.682795][T14659] vmalloc_user_noprof+0xad/0xe0 [ 673.682872][T14659] ? xskq_create+0xbf/0x170 [ 673.682954][T14659] xskq_create+0xbf/0x170 [ 673.683041][T14659] xsk_init_queue+0x8a/0xe0 [ 673.683130][T14659] xsk_setsockopt+0x52a/0x960 [ 673.683195][T14659] ? __fget_files+0x2a/0x420 [ 673.683267][T14659] ? __pfx_xsk_setsockopt+0x10/0x10 [ 673.683342][T14659] ? __pfx_aa_sk_perm+0x10/0x10 [ 673.683439][T14659] ? aa_sock_opt_perm+0xff/0x1a0 [ 673.683508][T14659] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 673.683570][T14659] ? __pfx_xsk_setsockopt+0x10/0x10 [ 673.683638][T14659] do_sock_setsockopt+0x17c/0x1b0 [ 673.683752][T14659] __x64_sys_setsockopt+0x13d/0x1b0 [ 673.683841][T14659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.683914][T14659] do_syscall_64+0x174/0x580 [ 673.683989][T14659] ? trace_irq_disable+0x3b/0x140 [ 673.684063][T14659] ? clear_bhb_loop+0x40/0x90 [ 673.684136][T14659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.684213][T14659] RIP: 0033:0x7fbe11b9de59 [ 673.684292][T14659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.684345][T14659] RSP: 002b:00007fbe12a3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 673.684408][T14659] RAX: ffffffffffffffda RBX: 00007fbe11e26090 RCX: 00007fbe11b9de59 [ 673.684453][T14659] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 673.684494][T14659] RBP: 00007fbe11c33e6f R08: 0000000000000029 R09: 0000000000000000 [ 673.684535][T14659] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 673.684569][T14659] R13: 00007fbe11e26128 R14: 00007fbe11e26090 R15: 00007fbe11f4fa48 [ 673.684664][T14659] [ 673.931171][T14659] Mem-Info: [ 674.058999][T14659] active_anon:9919 inactive_anon:0 isolated_anon:0 [ 674.058999][T14659] active_file:0 inactive_file:56173 isolated_file:0 [ 674.058999][T14659] unevictable:2816 dirty:244 writeback:0 [ 674.058999][T14659] slab_reclaimable:9668 slab_unreclaimable:111481 [ 674.058999][T14659] mapped:37571 shmem:1305 pagetables:1833 [ 674.058999][T14659] sec_pagetables:0 bounce:0 [ 674.058999][T14659] kernel_misc_reclaimable:0 [ 674.058999][T14659] free:1270652 free_pcp:12180 free_cma:0 [ 674.059073][T14659] Node 0 active_anon:39676kB inactive_anon:0kB active_file:0kB inactive_file:224428kB unevictable:9728kB isolated(anon):0kB isolated(file):0kB mapped:150344kB dirty:976kB writeback:0kB shmem:3684kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15904kB pagetables:7180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 674.059140][T14659] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:264kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 674.059204][T14659] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 674.059276][T14659] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 674.059330][T14659] Node 0 DMA32 free:1135096kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39676kB inactive_anon:0kB active_file:0kB inactive_file:224428kB unevictable:9728kB writepending:976kB zspages:0kB present:3129332kB managed:2548772kB mlocked:8192kB bounce:0kB free_pcp:33168kB local_pcp:17496kB free_cma:0kB [ 674.059402][T14659] lowmem_reserve[]: 0 0 0 0 0 [ 674.059453][T14659] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 674.059528][T14659] lowmem_reserve[]: 0 0 0 0 0 [ 674.059579][T14659] Node 1 Normal free:3932152kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:264kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15552kB local_pcp:0kB free_cma:0kB [ 674.059649][T14659] lowmem_reserve[]: 0 0 0 0 0 [ 674.059698][T14659] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 674.059838][T14659] Node 0 DMA32: 1134*4kB (UME) 502*8kB (UME) 417*16kB (UME) 348*32kB (UME) 256*64kB (UME) 36*128kB (UME) 19*256kB (UM) 15*512kB (UME) 22*1024kB (UME) 8*2048kB (UME) 253*4096kB (UM) = 1135096kB [ 674.060060][T14659] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 674.060197][T14659] Node 1 Normal: 2*4kB (UM) 2*8kB (U) 4*16kB (U) 9*32kB (U) 8*64kB (UM) 3*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 959*4096kB (UM) = 3932152kB [ 674.060963][T14659] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 674.060986][T14659] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 674.061007][T14659] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 674.061034][T14659] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 674.061059][T14659] 57474 total pagecache pages [ 674.061071][T14659] 0 pages in swap cache [ 674.061082][T14659] Free swap = 124996kB [ 674.061092][T14659] Total swap = 124996kB [ 674.061105][T14659] 2097051 pages RAM [ 674.061116][T14659] 0 pages HighMem/MovableOnly [ 674.061126][T14659] 428177 pages reserved [ 674.061136][T14659] 0 pages cma reserved [ 674.482421][ T191] usb 6-1: Using ep0 maxpacket: 8 [ 674.486279][ T191] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 674.486340][ T191] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 674.486357][ T191] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 674.486377][ T191] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 674.486396][ T191] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 674.486428][ T191] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 674.486447][ T191] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.694038][ T191] usb 6-1: GET_CAPABILITIES returned 0 [ 674.694079][ T191] usbtmc 6-1:16.0: can't read capabilities [ 674.974456][T14670] sctp: [Deprecated]: syz.5.2747 (pid 14670) Use of int in maxseg socket option. [ 674.974456][T14670] Use struct sctp_assoc_value instead [ 675.027015][ T30] kauditd_printk_skb: 148 callbacks suppressed [ 675.027034][ T30] audit: type=1326 audit(1783194549.195:4250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.6.2753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd889d9de59 code=0x7ffc0000 [ 675.027088][ T30] audit: type=1326 audit(1783194549.195:4251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.6.2753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd889d9de59 code=0x7ffc0000 [ 675.027558][ T30] audit: type=1326 audit(1783194549.195:4252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.6.2753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd889d9de59 code=0x7ffc0000 [ 675.027791][ T30] audit: type=1326 audit(1783194549.195:4253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.6.2753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd889d9de59 code=0x7ffc0000 [ 675.032638][ T30] audit: type=1326 audit(1783194549.205:4254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.6.2753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd889d9de59 code=0x7ffc0000 [ 675.033232][ T30] audit: type=1326 audit(1783194549.205:4255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.6.2753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd889d9de59 code=0x7ffc0000 [ 675.033619][ T30] audit: type=1326 audit(1783194549.205:4256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.6.2753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd889d9de59 code=0x7ffc0000 [ 675.034196][ T30] audit: type=1326 audit(1783194549.205:4257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.6.2753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd889d9de59 code=0x7ffc0000 [ 675.037848][ T30] audit: type=1326 audit(1783194549.205:4258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.6.2753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd889d9de59 code=0x7ffc0000 [ 675.041662][ T30] audit: type=1326 audit(1783194549.205:4259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14668 comm="syz.6.2753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd889d9de59 code=0x7ffc0000 [ 675.107008][T14669] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 675.512521][ T191] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 675.684382][ T191] usb 7-1: unable to get BOS descriptor or descriptor too short [ 675.689677][ T191] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 675.698071][ T191] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 676.329083][T14688] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 676.371786][ T5705] usb 6-1: USB disconnect, device number 41 [ 676.407406][ T191] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.508635][ T191] usb 7-1: Product: syz [ 676.562683][ T29] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 676.579550][ T191] usb 7-1: Manufacturer: syz [ 676.610792][T14694] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2762'. [ 676.611269][ T191] usb 7-1: SerialNumber: syz [ 676.725428][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 676.746913][ T29] usb 3-1: config 5 has an invalid interface number: 149 but max is 0 [ 676.777129][ T29] usb 3-1: config 5 has no interface number 0 [ 676.804915][ T29] usb 3-1: config 5 interface 149 has no altsetting 0 [ 676.836523][ T29] usb 3-1: New USB device found, idVendor=07c9, idProduct=000f, bcdDevice=e1.a3 [ 676.859578][ T191] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 676.880634][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.909204][ T29] usb 3-1: Product: syz [ 676.920284][ T29] usb 3-1: Manufacturer: syz [ 676.947321][ T29] usb 3-1: SerialNumber: syz [ 677.058827][ T191] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 677.069184][ T191] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 677.176706][ T29] ax88179_178a 3-1:5.149: probe with driver ax88179_178a failed with error -22 [ 677.197511][ T29] usb 3-1: USB disconnect, device number 110 [ 677.312385][ T5695] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 677.464112][ T5695] usb 8-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 677.476681][ T191] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 677.485624][ T191] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 677.495585][ T5695] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 677.509746][ T5695] usb 8-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 677.520413][ T5695] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.532350][ T5695] usb 8-1: Product: syz [ 677.539484][ T5695] usb 8-1: Manufacturer: syz [ 677.546755][ T5695] usb 8-1: SerialNumber: syz [ 677.561698][ T5695] usb 8-1: config 0 descriptor?? [ 677.584131][ T5695] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 677.691727][ T191] usb 7-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 677.850360][ T191] usb 7-1: USB disconnect, device number 41 [ 677.998971][ T7996] udevd[7996]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 678.208524][ T5695] usb 8-1: USB disconnect, device number 45 [ 679.793449][ T191] usb 7-1: new full-speed USB device number 42 using dummy_hcd [ 679.976352][ T191] usb 7-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 680.012065][ T191] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.049881][ T191] usb 7-1: Product: syz [ 680.068405][ T191] usb 7-1: Manufacturer: syz [ 680.078643][ T191] usb 7-1: SerialNumber: syz [ 680.120520][ T191] usb 7-1: config 0 descriptor?? [ 680.540983][T14753] syzkaller0: entered promiscuous mode [ 680.552084][T14753] syzkaller0: entered allmulticast mode [ 680.600899][ T30] kauditd_printk_skb: 138 callbacks suppressed [ 680.600920][ T30] audit: type=1326 audit(1783194554.765:4398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14749 comm="syz.2.2781" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe11b9de59 code=0x7ffc0000 [ 680.680677][T14752] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 680.696094][T14753] tipc: Enabled bearer , priority 5 [ 680.725256][ T30] audit: type=1326 audit(1783194554.765:4399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14749 comm="syz.2.2781" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe11b9de59 code=0x7ffc0000 [ 680.774872][T14751] tipc: Resetting bearer [ 680.837518][ T30] audit: type=1326 audit(1783194554.805:4400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14749 comm="syz.2.2781" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe11b9de59 code=0x7ffc0000 [ 680.882715][T14751] tipc: Disabling bearer [ 680.919386][ T30] audit: type=1326 audit(1783194554.805:4401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14749 comm="syz.2.2781" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe11b9de59 code=0x7ffc0000 [ 681.066311][ T30] audit: type=1326 audit(1783194554.805:4402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14749 comm="syz.2.2781" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fbe11b9de59 code=0x7ffc0000 [ 681.163822][ T30] audit: type=1326 audit(1783194554.805:4403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14749 comm="syz.2.2781" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe11b9de59 code=0x7ffc0000 [ 681.269076][ T30] audit: type=1326 audit(1783194554.805:4404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14749 comm="syz.2.2781" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe11b9de59 code=0x7ffc0000 [ 681.364047][ T30] audit: type=1326 audit(1783194554.805:4405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14749 comm="syz.2.2781" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe11b9de59 code=0x7ffc0000 [ 681.449920][ T30] audit: type=1326 audit(1783194554.805:4406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14749 comm="syz.2.2781" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbe11b9de59 code=0x7ffc0000 [ 681.542761][ T30] audit: type=1326 audit(1783194554.805:4407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14749 comm="syz.2.2781" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe11b9de59 code=0x7ffc0000 [ 681.882464][ T191] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 682.050761][ T191] usb 3-1: unable to get BOS descriptor or descriptor too short [ 682.061332][ T191] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 682.085389][ T191] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 682.100619][ T191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.113807][ T191] usb 3-1: Product: syz [ 682.120788][ T191] usb 3-1: Manufacturer: syz [ 682.130884][ T191] usb 3-1: SerialNumber: syz [ 682.357943][ T191] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 682.554279][ T191] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 682.636978][ T191] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 682.660793][T14769] No such timeout policy "syz1" [ 682.709964][T14773] xt_bpf: check failed: parse error [ 682.731254][ T5743] usb 7-1: USB disconnect, device number 42 [ 682.957572][ T191] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 682.988948][ T191] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 683.170356][ T191] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 683.372215][ T191] usb 3-1: USB disconnect, device number 111 [ 683.474034][ T24] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 683.490857][ T7996] udevd[7996]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 683.662399][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 683.680544][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.707625][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 683.715580][T14790] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 683.742412][ T24] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 683.764226][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.801047][ T24] usb 8-1: config 0 descriptor?? [ 683.932491][ T5695] usb 5-1: new low-speed USB device number 107 using dummy_hcd [ 684.080756][T14800] openvswitch: netlink: Actions may not be safe on all matching packets [ 684.118048][ T5695] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 684.146905][ T5695] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 684.175940][ T5695] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 684.231993][ T5695] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 684.274421][ T24] HID 045e:07da: Invalid code 65791 type 1 [ 684.299458][ T5695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.344827][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.0016/input/input95 [ 684.376163][T14795] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 684.450573][T14787] netlink: 'syz.7.2794': attribute type 2 has an invalid length. [ 684.476532][ T5695] hub 5-1:1.0: bad descriptor, ignoring hub [ 684.492163][ T24] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 684.512532][ T191] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 684.518434][ T5695] hub 5-1:1.0: probe with driver hub failed with error -5 [ 684.563282][ T5695] cdc_wdm 5-1:1.0: skipping garbage [ 684.594524][ T5695] cdc_wdm 5-1:1.0: skipping garbage [ 684.612016][ T5695] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 684.669275][ T5695] cdc_wdm 5-1:1.0: Unknown control protocol [ 684.690252][T14814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.713541][ T191] usb 7-1: config 255 has an invalid interface number: 235 but max is 0 [ 684.744853][ T191] usb 7-1: config 255 has no interface number 0 [ 684.754219][T14814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.772033][ T191] usb 7-1: config 255 interface 235 has no altsetting 0 [ 684.802363][ T191] usb 7-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 684.829814][ T191] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.858857][ T191] usb 7-1: Product: syz [ 684.871111][ T191] usb 7-1: Manufacturer: syz [ 684.907362][ T191] usb 7-1: SerialNumber: syz [ 684.922749][ T5717] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 685.070971][ C0] wdm_int_callback: 276 callbacks suppressed [ 685.071075][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 685.083772][ C0] wdm_int_callback: 276 callbacks suppressed [ 685.083796][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 685.096485][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 685.103139][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 685.109532][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 685.116173][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 685.131556][ T5717] usb 6-1: device descriptor read/64, error -71 [ 685.151624][ T5695] usb 8-1: USB disconnect, device number 46 [ 685.197519][T14809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.249239][T14809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.300222][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 685.306990][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 685.313387][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 685.320027][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 685.326866][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 685.333605][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 685.340048][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 685.346700][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 685.353402][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 685.360110][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 685.366805][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 685.373431][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 685.380098][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 685.386803][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 685.453655][ T5717] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 685.477824][ T191] usb 7-1: USB disconnect, device number 43 [ 685.605015][ T5717] usb 6-1: device descriptor read/64, error -71 [ 685.746404][ T5717] usb usb6-port1: attempt power cycle [ 685.878290][T14824] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 685.966349][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.973191][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.024400][T14828] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 686.102933][ T5717] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 686.144282][ T5717] usb 6-1: device descriptor read/8, error -71 [ 686.332716][ T24] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 686.392807][ T5717] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 686.443194][ T5717] usb 6-1: device descriptor read/8, error -71 [ 686.478271][ T30] kauditd_printk_skb: 138 callbacks suppressed [ 686.478288][ T30] audit: type=1326 audit(1783194560.645:4546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14827 comm="syz.6.2810" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd889d9de59 code=0x0 [ 686.511196][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 686.519983][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 686.538714][ T24] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 686.570754][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.574698][ T5717] usb usb6-port1: unable to enumerate USB device [ 686.607584][ T24] usb 8-1: config 0 descriptor?? [ 686.802774][ T191] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 686.833324][ T24] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 686.875084][ T5717] usb 5-1: USB disconnect, device number 107 [ 686.942435][ T191] usb 3-1: device descriptor read/64, error -71 [ 687.036862][T14830] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 687.062881][ T24] usb 8-1: USB disconnect, device number 47 [ 687.084794][T14843] fuse: Bad value for 'fd' [ 687.215833][ T191] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 687.276399][T14848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2818'. [ 687.372433][ T191] usb 3-1: device descriptor read/64, error -71 [ 687.493856][ T191] usb usb3-port1: attempt power cycle [ 687.854111][ T191] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 687.893467][ T191] usb 3-1: device descriptor read/8, error -71 [ 688.004873][ T5717] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 688.018204][T14863] warn_alloc: 2 callbacks suppressed [ 688.018224][T14863] syz.4.2823: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 688.065918][T14863] CPU: 1 UID: 0 PID: 14863 Comm: syz.4.2823 Tainted: G L syzkaller #0 PREEMPT(full) [ 688.065960][T14863] Tainted: [L]=SOFTLOCKUP [ 688.065966][T14863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 688.065977][T14863] Call Trace: [ 688.065984][T14863] [ 688.065991][T14863] dump_stack_lvl+0xe8/0x150 [ 688.066021][T14863] warn_alloc+0x24c/0x270 [ 688.066044][T14863] ? stack_depot_save_flags+0x33/0x800 [ 688.066066][T14863] ? __pfx_warn_alloc+0x10/0x10 [ 688.066087][T14863] ? kasan_save_track+0x3e/0x80 [ 688.066106][T14863] ? __kasan_kmalloc+0x93/0xb0 [ 688.066128][T14863] ? xsk_setsockopt+0x52a/0x960 [ 688.066169][T14863] ? do_sock_setsockopt+0x17c/0x1b0 [ 688.066200][T14863] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 688.066232][T14863] ? do_syscall_64+0x174/0x580 [ 688.066264][T14863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.066288][T14863] __vmalloc_node_range_noprof+0x12c/0x1730 [ 688.066328][T14863] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 688.066351][T14863] ? __kasan_kmalloc+0x93/0xb0 [ 688.066373][T14863] ? __kmalloc_cache_noprof+0x32d/0x660 [ 688.066394][T14863] ? __kmalloc_cache_noprof+0x150/0x660 [ 688.066435][T14863] vmalloc_user_noprof+0xad/0xe0 [ 688.066469][T14863] ? xskq_create+0xbf/0x170 [ 688.066490][T14863] xskq_create+0xbf/0x170 [ 688.066512][T14863] xsk_init_queue+0x8a/0xe0 [ 688.066533][T14863] xsk_setsockopt+0x52a/0x960 [ 688.066551][T14863] ? __fget_files+0x2a/0x420 [ 688.066573][T14863] ? __pfx_xsk_setsockopt+0x10/0x10 [ 688.066592][T14863] ? __pfx_aa_sk_perm+0x10/0x10 [ 688.066620][T14863] ? aa_sock_opt_perm+0xff/0x1a0 [ 688.066639][T14863] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 688.066657][T14863] ? __pfx_xsk_setsockopt+0x10/0x10 [ 688.066676][T14863] do_sock_setsockopt+0x17c/0x1b0 [ 688.066702][T14863] __x64_sys_setsockopt+0x13d/0x1b0 [ 688.066728][T14863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.066745][T14863] do_syscall_64+0x174/0x580 [ 688.066766][T14863] ? trace_irq_disable+0x3b/0x140 [ 688.066786][T14863] ? clear_bhb_loop+0x40/0x90 [ 688.066806][T14863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.066822][T14863] RIP: 0033:0x7f6b4479de59 [ 688.066838][T14863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.066852][T14863] RSP: 002b:00007f6b45703028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 688.066869][T14863] RAX: ffffffffffffffda RBX: 00007f6b44a26180 RCX: 00007f6b4479de59 [ 688.066881][T14863] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 688.066891][T14863] RBP: 00007f6b44833e6f R08: 0000000000000029 R09: 0000000000000000 [ 688.066901][T14863] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 688.066911][T14863] R13: 00007f6b44a26218 R14: 00007f6b44a26180 R15: 00007f6b44b4fa48 [ 688.066935][T14863] [ 688.066942][T14863] Mem-Info: [ 688.238545][ T191] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 688.432069][T14863] active_anon:9687 inactive_anon:0 isolated_anon:0 [ 688.432069][T14863] active_file:0 inactive_file:56179 isolated_file:0 [ 688.432069][T14863] unevictable:2816 dirty:190 writeback:0 [ 688.432069][T14863] slab_reclaimable:9657 slab_unreclaimable:111845 [ 688.432069][T14863] mapped:36984 shmem:1298 pagetables:1842 [ 688.432069][T14863] sec_pagetables:0 bounce:0 [ 688.432069][T14863] kernel_misc_reclaimable:0 [ 688.432069][T14863] free:1266167 free_pcp:16480 free_cma:0 [ 688.482177][T14863] Node 0 active_anon:38748kB inactive_anon:0kB active_file:0kB inactive_file:224452kB unevictable:9728kB isolated(anon):0kB isolated(file):0kB mapped:147904kB dirty:760kB writeback:0kB shmem:3656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15772kB pagetables:7216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 688.517619][ T5717] usb 6-1: config 0 interface 0 has no altsetting 0 [ 688.532443][ T5695] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 688.540774][ T5717] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 688.550608][ T191] usb 3-1: device descriptor read/8, error -71 [ 688.556933][ T5717] usb 6-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 688.566891][ T5717] usb 6-1: Product: syz [ 688.572506][T14863] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:264kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 688.612521][ T5717] usb 6-1: config 0 descriptor?? [ 688.612535][T14863] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 688.662745][ T191] usb usb3-port1: unable to enumerate USB device [ 688.687772][ T5717] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 688.708093][T14863] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 688.723352][ T5695] usb 8-1: Using ep0 maxpacket: 16 [ 688.731504][ T5695] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.744964][ T5695] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.761901][T14863] Node 0 DMA32 free:1117156kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38648kB inactive_anon:0kB active_file:0kB inactive_file:224452kB unevictable:9728kB writepending:760kB zspages:0kB present:3129332kB managed:2548772kB mlocked:8192kB bounce:0kB free_pcp:50564kB local_pcp:18428kB free_cma:0kB [ 688.808395][ T5695] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 688.830724][ T5695] usb 8-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 688.850056][T14863] lowmem_reserve[]: 0 0 0 0 0 [ 688.855051][ T5695] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.867740][T14868] netlink: 'syz.6.2826': attribute type 5 has an invalid length. [ 688.896833][T14863] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 688.941655][ T5695] usb 8-1: config 0 descriptor?? [ 688.959065][ T5695] usbhid 8-1:0.0: fixing wrong optional hid class descriptors count [ 688.987137][T14863] lowmem_reserve[]: 0 0 0 0 0 [ 688.993030][ T5695] usbhid 8-1:0.0: can't add hid device: -22 [ 689.004534][T14863] Node 1 Normal free:3932152kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:264kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15552kB local_pcp:0kB free_cma:0kB [ 689.037024][ T5695] usbhid 8-1:0.0: probe with driver usbhid failed with error -22 [ 689.107272][T14863] lowmem_reserve[]: 0 0 0 0 0 [ 689.128873][T14863] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 689.169973][T14863] Node 0 DMA32: 23*4kB (E) 57*8kB (E) 200*16kB (UME) 305*32kB (UME) 270*64kB (UME) 52*128kB (UME) 21*256kB (UM) 17*512kB (UME) 22*1024kB (UME) 6*2048kB (UE) 252*4096kB (UM) = 1118532kB [ 689.170916][T14872] netlink: 'syz.6.2827': attribute type 3 has an invalid length. [ 689.205763][ T5695] usb 8-1: USB disconnect, device number 48 [ 689.260009][T14863] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 689.303236][T14863] Node 1 Normal: 2*4kB (UM) 2*8kB (U) 4*16kB (U) 9*32kB (U) 8*64kB (UM) 3*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 959*4096kB (UM) = 3932152kB [ 689.356099][T14863] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 689.388836][T14863] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 689.419755][T14863] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 689.459524][T14863] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 689.490126][T14863] 57478 total pagecache pages [ 689.527698][T14863] 0 pages in swap cache [ 689.536323][T14863] Free swap = 124996kB [ 689.548547][T14863] Total swap = 124996kB [ 689.578230][T14863] 2097051 pages RAM [ 689.593636][T14863] 0 pages HighMem/MovableOnly [ 689.618857][T14863] 428177 pages reserved [ 689.648417][T14863] 0 pages cma reserved [ 689.987984][ T30] audit: type=1326 audit(1783194564.145:4547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14883 comm="syz.6.2832" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd889d9de59 code=0x7ffc0000 [ 690.067494][ T30] audit: type=1326 audit(1783194564.155:4548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14883 comm="syz.6.2832" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd889d9de59 code=0x7ffc0000 [ 690.092235][T14888] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2832'. [ 690.120633][ T30] audit: type=1326 audit(1783194564.155:4549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14883 comm="syz.6.2832" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd889d9de59 code=0x0 [ 690.152524][ T5695] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 690.177612][ T30] audit: type=1326 audit(1783194564.185:4550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14883 comm="syz.6.2832" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd889d9de59 code=0x7ffc0000 [ 690.202613][ T24] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 690.212660][ T29] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 690.276408][ T30] audit: type=1326 audit(1783194564.185:4551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14883 comm="syz.6.2832" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd889d9de59 code=0x7ffc0000 [ 690.322514][ T5695] usb 5-1: Using ep0 maxpacket: 8 [ 690.331003][ T5695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 690.346454][ T30] audit: type=1326 audit(1783194564.185:4552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14883 comm="syz.6.2832" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd889d9de59 code=0x7ffc0000 [ 690.377942][ T5695] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 690.387943][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 690.396160][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.415940][ T5695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.424281][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.444242][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.470994][ T29] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 690.484659][ T5695] usb 5-1: config 0 descriptor?? [ 690.489698][ T30] audit: type=1326 audit(1783194564.185:4553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14883 comm="syz.6.2832" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd889d9de59 code=0x7ffc0000 [ 690.514321][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 690.537083][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.551114][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 690.567214][ T29] usb 8-1: config 0 descriptor?? [ 690.620996][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.629593][ T30] audit: type=1326 audit(1783194564.185:4554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14883 comm="syz.6.2832" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd889d9de59 code=0x7ffc0000 [ 690.669449][ T30] audit: type=1326 audit(1783194564.185:4555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14883 comm="syz.6.2832" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd889d9de59 code=0x7ffc0000 [ 690.695138][ T24] usb 3-1: config 0 descriptor?? [ 690.737240][ T24] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 690.752179][ T5695] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 690.878637][T11245] usb 6-1: USB disconnect, device number 46 [ 690.940990][T14881] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 691.314360][ T29] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0 [ 691.329992][ T29] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0 [ 691.364385][ T29] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0 [ 691.385674][T11245] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 691.416884][ T29] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0 [ 691.442744][ T29] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0 [ 691.464213][ T29] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0 [ 691.482011][ T29] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0 [ 691.518540][ T29] pyra 0003:1E7D:2CF6.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.7-1/input0 [ 691.594948][T11245] usb 7-1: Using ep0 maxpacket: 32 [ 691.632990][T11245] usb 7-1: config index 0 descriptor too short (expected 3659, got 75) [ 691.665573][T11245] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.765921][T11245] usb 7-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 691.829832][T11245] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.855872][T11245] usb 7-1: Product: syz [ 691.862382][T11245] usb 7-1: Manufacturer: syz [ 691.868864][T11245] usb 7-1: SerialNumber: syz [ 691.920264][T11245] usb 7-1: config 0 descriptor?? [ 692.004284][T11245] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 692.088749][ T29] pyra 0003:1E7D:2CF6.0017: couldn't init struct pyra_device [ 692.106304][ T29] pyra 0003:1E7D:2CF6.0017: couldn't install mouse [ 692.149480][ T29] pyra 0003:1E7D:2CF6.0017: probe with driver pyra failed with error -71 [ 692.188060][ T29] usb 8-1: USB disconnect, device number 49 [ 692.308552][ T5717] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 692.485148][ T5717] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 692.502244][ T5717] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 692.541177][ T5717] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64 [ 692.552734][ T5717] usb 6-1: config 0 interface 0 has no altsetting 0 [ 692.572324][ T5717] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 692.585531][ T5717] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 692.606434][ T5717] usb 6-1: Product: syz [ 692.615886][ T5717] usb 6-1: Manufacturer: syz [ 692.627365][ T5717] usb 6-1: SerialNumber: syz [ 692.658444][ T5717] usb 6-1: config 0 descriptor?? [ 692.683377][T14905] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 692.738155][ T5717] usb 6-1: selecting invalid altsetting 0 [ 692.938791][T14905] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 692.984345][ T24] usb 5-1: USB disconnect, device number 108 [ 692.998745][T14905] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 693.175371][ T191] usb 6-1: USB disconnect, device number 47 [ 693.354136][ T5717] usb 8-1: new full-speed USB device number 50 using dummy_hcd [ 693.388702][T11245] gspca_sunplus: reg_w_1 err -71 [ 693.401444][T11245] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 693.473631][T11245] usb 7-1: USB disconnect, device number 44 [ 693.534769][ T5717] usb 8-1: config 0 has an invalid interface number: 120 but max is 0 [ 693.568801][ T5717] usb 8-1: config 0 has no interface number 0 [ 693.594270][ T5717] usb 8-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xD2, changing to 0x82 [ 693.641033][ T5717] usb 8-1: config 0 interface 120 altsetting 0 endpoint 0x82 has invalid maxpacket 24019, setting to 64 [ 693.681805][ T5717] usb 8-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 693.717088][ T5717] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.789927][ T5717] usb 8-1: config 0 descriptor?? [ 693.817740][T14910] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 693.910492][ T5717] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.120/input/input96 [ 694.045292][ C1] usbtouchscreen 8-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 694.217413][T14910] usb usb7: usbfs: process 14910 (syz.7.2839) did not claim interface 0 before use [ 694.307379][T14925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2844'. [ 694.582780][ T5695] usb 3-1: USB disconnect, device number 116 [ 694.912391][ T5717] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 695.092398][ T5717] usb 7-1: Using ep0 maxpacket: 32 [ 695.113233][ T5717] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1056, setting to 1024 [ 695.159908][ T5717] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 132, changing to 7 [ 695.202800][ T5717] usb 7-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 695.222041][ T5717] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.245222][ T5717] usb 7-1: Product: syz [ 695.255383][ T5717] usb 7-1: Manufacturer: syz [ 695.268218][ T5717] usb 7-1: SerialNumber: syz [ 695.277024][T14946] netlink: 'syz.5.2850': attribute type 12 has an invalid length. [ 695.286272][T11245] usb 3-1: new low-speed USB device number 117 using dummy_hcd [ 695.462893][T11245] usb 3-1: Invalid ep0 maxpacket: 16 [ 695.622627][T11245] usb 3-1: new low-speed USB device number 118 using dummy_hcd [ 695.635080][ T191] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 695.842541][T11245] usb 3-1: Invalid ep0 maxpacket: 16 [ 695.857694][ T191] usb 6-1: not running at top speed; connect to a high speed hub [ 695.872748][T11245] usb usb3-port1: attempt power cycle [ 695.898894][ T191] usb 6-1: config 1 has an invalid interface number: 243 but max is 2 [ 695.915203][ T191] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 695.930199][ T191] usb 6-1: config 1 has an invalid interface number: 10 but max is 2 [ 695.946945][ T191] usb 6-1: config 1 has an invalid interface number: 173 but max is 2 [ 695.979725][ T191] usb 6-1: config 1 has no interface number 0 [ 695.999942][ T191] usb 6-1: config 1 has no interface number 1 [ 696.019522][ T191] usb 6-1: config 1 has no interface number 2 [ 696.045892][ T191] usb 6-1: config 1 interface 243 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 696.070760][ T5717] usb 7-1: Fast Track Pro switching to config #2 [ 696.111790][ T191] usb 6-1: config 1 interface 243 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 696.152005][ T5717] usb 7-1: USB disconnect, device number 45 [ 696.168445][ T191] usb 6-1: config 1 interface 243 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 696.189202][ T24] usb 8-1: USB disconnect, device number 50 [ 696.218184][ T191] usb 6-1: config 1 interface 243 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 696.259578][ T191] usb 6-1: config 1 interface 243 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 696.271984][T11245] usb 3-1: new low-speed USB device number 119 using dummy_hcd [ 696.309748][ T191] usb 6-1: config 1 interface 10 altsetting 6 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 696.327496][T11245] usb 3-1: Invalid ep0 maxpacket: 16 [ 696.361446][ T191] usb 6-1: config 1 interface 10 altsetting 6 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 696.404333][ T191] usb 6-1: config 1 interface 10 altsetting 6 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 696.450107][ T191] usb 6-1: config 1 interface 10 altsetting 6 has an endpoint descriptor with address 0x23, changing to 0x3 [ 696.482939][T11245] usb 3-1: new low-speed USB device number 120 using dummy_hcd [ 696.504100][ T191] usb 6-1: config 1 interface 10 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 696.544044][T11245] usb 3-1: Invalid ep0 maxpacket: 16 [ 696.570333][T11245] usb usb3-port1: unable to enumerate USB device [ 696.577396][ T191] usb 6-1: config 1 interface 10 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 696.620553][ T191] usb 6-1: config 1 interface 10 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 696.632541][T14961] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2854'. [ 696.653301][ T191] usb 6-1: config 1 interface 10 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 696.695209][ T191] usb 6-1: config 1 interface 173 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 696.729077][ T191] usb 6-1: config 1 interface 173 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 696.769411][ T191] usb 6-1: config 1 interface 173 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 696.808395][ T191] usb 6-1: config 1 interface 173 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 696.865828][ T191] usb 6-1: config 1 interface 173 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 696.920556][ T191] usb 6-1: config 1 interface 173 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 696.974155][T14967] kvm: pic: non byte write [ 696.981146][ T191] usb 6-1: config 1 interface 173 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 697.021639][ T191] usb 6-1: config 1 interface 173 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 697.051985][ T191] usb 6-1: config 1 interface 10 has no altsetting 0 [ 697.070211][ T191] usb 6-1: config 1 interface 173 has no altsetting 0 [ 697.094588][T14963] IPVS: dh: FWM 3 0x00000003 - no destination available [ 697.097020][ T191] usb 6-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=a5.80 [ 697.117489][ T5695] IPVS: starting estimator thread 0... [ 697.131760][ T191] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.150152][ T191] usb 6-1: Product: syz [ 697.150184][ T191] usb 6-1: Manufacturer: syz [ 697.150198][ T191] usb 6-1: SerialNumber: syz [ 697.170660][T14947] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 697.193800][T11245] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 697.232508][T14978] IPVS: using max 28 ests per chain, 67200 per kthread [ 697.353272][T11245] usb 8-1: Using ep0 maxpacket: 32 [ 697.360808][T11245] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 697.372125][T11245] usb 8-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 697.402936][T11245] usb 8-1: config 0 interface 0 has no altsetting 0 [ 697.438130][T11245] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 697.452404][T11245] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.492807][T11245] usb 8-1: Product: syz [ 697.498471][ T191] cdc_mbim 6-1:1.10: CDC Union missing and no IAD found [ 697.510188][T11245] usb 8-1: Manufacturer: syz [ 697.524797][ T191] cdc_mbim 6-1:1.10: bind() failure [ 697.531870][T11245] usb 8-1: SerialNumber: syz [ 697.559231][T11245] usb 8-1: config 0 descriptor?? [ 697.597365][ T191] usb 6-1: USB disconnect, device number 48 [ 697.986443][T11245] gs_usb 8-1:0.0: Configuring for 1 interfaces [ 698.268660][T14991] input: syz0 as /devices/virtual/input/input97 [ 698.377254][T14993] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2863'. [ 698.472468][ T5705] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 698.593553][T14993] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2863'. [ 698.616881][T14993] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 698.672550][ T5705] usb 5-1: Using ep0 maxpacket: 8 [ 698.743926][ T5695] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 698.754206][ T5705] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 698.776111][ T5705] usb 5-1: config 0 has no interface number 0 [ 698.795280][ T5717] usb 8-1: USB disconnect, device number 51 [ 698.853302][ T5705] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 698.888110][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.905636][ T5705] usb 5-1: Product: syz [ 698.915643][ T5705] usb 5-1: Manufacturer: syz [ 698.926184][ T5705] usb 5-1: SerialNumber: syz [ 698.941886][ T5705] usb 5-1: config 0 descriptor?? [ 698.962706][ T5695] usb 3-1: Using ep0 maxpacket: 8 [ 698.978532][ T5695] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 698.999572][ T5695] usb 3-1: config 0 has no interface number 0 [ 699.014832][ T5695] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 699.051905][ T5695] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 699.079008][ T5695] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 699.094328][ T5695] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 699.108445][ T5695] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 699.120354][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.154369][T14989] nfs: Unknown parameter '' [ 699.190673][ T5705] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 699.217756][ T5705] uvcvideo 5-1:0.31: Entity type for entity Output 32774 was not initialized! [ 699.282427][ T5705] usb 5-1: USB disconnect, device number 109 [ 699.300007][ T5695] usb 3-1: config 0 descriptor?? [ 699.361687][T15001] netlink: 'syz.5.2866': attribute type 4 has an invalid length. [ 699.409283][ T5695] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 699.560150][ T5695] usb 3-1: USB disconnect, device number 121 [ 699.607867][ T5695] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 699.667672][T15006] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2867'. [ 699.726211][T15006] netlink: 92 bytes leftover after parsing attributes in process `syz.7.2867'. [ 700.312501][ T5695] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 700.461750][T15027] GUP no longer grows the stack in syz.4.2873 (15027): 200000005000-200000008000 (200000004000) [ 700.482913][T15024] netlink: 'syz.2.2872': attribute type 1 has an invalid length. [ 700.494439][ T5695] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 700.518434][T15027] CPU: 1 UID: 0 PID: 15027 Comm: syz.4.2873 Tainted: G L syzkaller #0 PREEMPT(full) [ 700.518472][T15027] Tainted: [L]=SOFTLOCKUP [ 700.518481][T15027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 700.518495][T15027] Call Trace: [ 700.518505][T15027] [ 700.518516][T15027] dump_stack_lvl+0xe8/0x150 [ 700.518560][T15027] fixup_user_fault+0x637/0x6f0 [ 700.518606][T15027] fault_in_user_writeable+0x71/0xd0 [ 700.518642][T15027] futex_lock_pi+0x7ba/0xab0 [ 700.518681][T15027] ? __pfx_futex_lock_pi+0x10/0x10 [ 700.518732][T15027] ? futex_private_hash_put+0x14e/0x180 [ 700.518769][T15027] ? __pfx_futex_wake_mark+0x10/0x10 [ 700.518804][T15027] ? userfaultfd_unmap_complete+0x292/0x310 [ 700.518842][T15027] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 700.518886][T15027] do_futex+0x330/0x4e0 [ 700.518926][T15027] ? __pfx_do_futex+0x10/0x10 [ 700.518971][T15027] ? __vm_munmap+0x2fe/0x3e0 [ 700.519000][T15027] __se_sys_futex+0x3a8/0x450 [ 700.519042][T15027] ? __pfx___se_sys_futex+0x10/0x10 [ 700.519078][T15027] ? rcu_is_watching+0x15/0xb0 [ 700.519120][T15027] ? __x64_sys_futex+0x21/0xf0 [ 700.519155][T15027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.519181][T15027] do_syscall_64+0x174/0x580 [ 700.519214][T15027] ? trace_irq_disable+0x3b/0x140 [ 700.519243][T15027] ? clear_bhb_loop+0x40/0x90 [ 700.519272][T15027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.519296][T15027] RIP: 0033:0x7f6b4479de59 [ 700.519317][T15027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.519337][T15027] RSP: 002b:00007f6b45745028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 700.519362][T15027] RAX: ffffffffffffffda RBX: 00007f6b44a25fa0 RCX: 00007f6b4479de59 [ 700.519380][T15027] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 700.519396][T15027] RBP: 00007f6b44833e6f R08: 0000000000000000 R09: 0000000000000000 [ 700.519411][T15027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.519425][T15027] R13: 00007f6b44a26038 R14: 00007f6b44a25fa0 R15: 00007f6b44b4fa48 [ 700.519462][T15027] [ 700.821391][ T5695] usb 6-1: config 1 has an invalid descriptor of length 91, skipping remainder of the config [ 700.832956][ T5695] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 700.842080][ T5695] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 250, changing to 11 [ 700.875732][T15024] bond27: entered promiscuous mode [ 700.881323][T15024] 8021q: adding VLAN 0 to HW filter on device bond27 [ 700.925115][ T5695] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 700.934479][ T5695] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 700.954636][ T5695] usb 6-1: Product: syz [ 700.958883][ T5695] usb 6-1: Manufacturer: syz [ 700.982055][ T5695] cdc_wdm 6-1:1.0: skipping garbage [ 700.992722][ T5695] cdc_wdm 6-1:1.0: skipping garbage [ 701.028697][T15030] vlan12: entered allmulticast mode [ 701.052709][ T5695] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 701.092423][T15030] bond27: entered allmulticast mode [ 701.099008][ T5695] cdc_wdm 6-1:1.0: Unknown control protocol [ 701.152366][ T191] usb 8-1: new full-speed USB device number 52 using dummy_hcd [ 701.243585][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 701.243605][ T30] audit: type=1326 audit(1783194575.395:4573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15022 comm="syz.2.2872" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe11b9de59 code=0x0 [ 701.252996][ T5717] usb 6-1: USB disconnect, device number 49 [ 701.469388][ T191] usb 8-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 701.497039][ T30] audit: type=1326 audit(1783194575.665:4574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15043 comm="syz.4.2876" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b4479de59 code=0x0 [ 701.569341][ T191] usb 8-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 701.619860][T15039] bond27: (slave bridge18): making interface the new active one [ 701.630479][ T191] usb 8-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 701.692911][T15039] bridge18: entered promiscuous mode [ 701.713632][ T191] usb 8-1: config 0 interface 0 has no altsetting 0 [ 701.736151][ T191] usb 8-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 701.757697][T15039] bridge18: entered allmulticast mode [ 701.771235][ T191] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.819403][T15039] bond27: (slave bridge18): Enslaving as an active interface with an up link [ 701.847793][ T191] usb 8-1: config 0 descriptor?? [ 701.879619][T15038] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 701.912654][ T5736] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 702.112590][ T5736] usb 7-1: Using ep0 maxpacket: 32 [ 702.147103][ T5736] usb 7-1: unable to get BOS descriptor set [ 702.186664][ T5736] usb 7-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 702.240867][ T5736] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 702.332718][ T5736] usb 7-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 702.389839][ T5736] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.402704][ T191] playstation 0003:054C:05C4.0018: unknown main item tag 0x2 [ 702.433884][ T5736] usb 7-1: Product: syz [ 702.438450][ T191] playstation 0003:054C:05C4.0018: unknown global tag 0xe [ 702.467291][ T5736] usb 7-1: Manufacturer: syz [ 702.483779][ T191] playstation 0003:054C:05C4.0018: item 0 2 1 14 parsing failed [ 702.495437][ T5736] usb 7-1: SerialNumber: syz [ 702.510516][T15056] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2878'. [ 702.519872][ T191] playstation 0003:054C:05C4.0018: Parse failed [ 702.564910][ T191] playstation 0003:054C:05C4.0018: probe with driver playstation failed with error -22 [ 702.777248][ T5736] usb 7-1: USB disconnect, device number 46 [ 702.901101][T15064] netlink: 'syz.7.2871': attribute type 10 has an invalid length. [ 702.945268][ T29] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 703.058203][T15064] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 703.083760][T15070] netlink: 'syz.7.2871': attribute type 10 has an invalid length. [ 703.137551][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 703.156500][ T29] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 703.188031][ T29] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 703.201770][T15038] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2871'. [ 703.237211][ T29] usb 5-1: string descriptor 0 read error: -22 [ 703.260366][T15064] team0: Port device netdevsim1 added [ 703.271519][ T29] usb 5-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice= 0.40 [ 703.309799][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.359046][T15070] team0: Port device netdevsim1 removed [ 703.427170][ T29] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 703.457713][ T29] gspca_stv06xx: st6422 sensor detected [ 703.475906][T15070] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 703.561302][T15070] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 703.715793][T15089] input: syz0 as /devices/virtual/input/input98 [ 704.691745][T15110] netlink: 'syz.5.2890': attribute type 4 has an invalid length. [ 704.752861][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 704.775315][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 704.785958][T15114] netlink: 'syz.5.2890': attribute type 4 has an invalid length. [ 704.798615][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 704.819183][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 704.827528][T15111] syzkaller0: entered promiscuous mode [ 704.836895][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 704.886662][T15111] syzkaller0: entered allmulticast mode [ 704.980268][T15111] tipc: Enabled bearer , priority 10 [ 705.054271][T15109] tipc: Resetting bearer [ 705.083950][T15110] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2890'. [ 705.260869][T15109] tipc: Disabling bearer [ 706.033809][ T29] STV06xx 5-1:1.0: probe with driver STV06xx failed with error -71 [ 706.246661][T15125] netlink: 'syz.5.2895': attribute type 1 has an invalid length. [ 706.362643][ T29] usb 5-1: USB disconnect, device number 110 [ 706.511813][ T191] usb 8-1: USB disconnect, device number 52 [ 706.555915][T15128] netlink: 'syz.5.2895': attribute type 2 has an invalid length. [ 706.579599][T15128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 706.677437][T15139] No such timeout policy "syz1" [ 706.757094][T15133] bond7: (slave geneve3): making interface the new active one [ 706.820531][T15133] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 706.869096][ T6198] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 706.894801][ T6198] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 706.922505][ T50] Bluetooth: hci1: command tx timeout [ 706.998374][ T6198] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 707.087547][ T6198] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 707.144458][T15150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2902'. [ 707.183124][T15153] vivid-000: ================= START STATUS ================= [ 707.214643][T15153] vivid-000: Radio HW Seek Mode: Bounded [ 707.247442][T15153] vivid-000: Radio Programmable HW Seek: false [ 707.282785][T15153] vivid-000: RDS Rx I/O Mode: Block I/O [ 707.317523][T15153] vivid-000: Generate RBDS Instead of RDS: false [ 707.364124][T15153] vivid-000: RDS Reception: true [ 707.409725][T15153] vivid-000: RDS Program Type: 0 inactive [ 707.444484][T15153] vivid-000: RDS PS Name: inactive [ 707.489189][T15153] vivid-000: RDS Radio Text: inactive [ 707.521386][T15153] vivid-000: RDS Traffic Announcement: false inactive [ 707.553829][T15153] vivid-000: RDS Traffic Program: false inactive [ 707.611235][T15153] vivid-000: RDS Music: false inactive [ 707.652474][T15153] vivid-000: ================== END STATUS ================== [ 707.841722][T15117] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.858712][T15117] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.880173][T15117] bridge_slave_0: entered allmulticast mode [ 707.893387][T11245] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 707.915696][T15117] bridge_slave_0: entered promiscuous mode [ 707.957799][T15117] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.982728][T15117] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.004612][T15117] bridge_slave_1: entered allmulticast mode [ 708.031438][T15117] bridge_slave_1: entered promiscuous mode [ 708.064658][T11245] usb 6-1: unable to get BOS descriptor or descriptor too short [ 708.090430][T11245] usb 6-1: config 43 has an invalid interface number: 2 but max is 0 [ 708.104642][T11245] usb 6-1: config 43 has no interface number 0 [ 708.125170][T11245] usb 6-1: config 43 interface 2 has no altsetting 0 [ 708.134655][T15168] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 708.165379][T11245] usb 6-1: Dual-Role OTG device on HNP port [ 708.173916][T11245] usb 6-1: New USB device found, idVendor=1410, idProduct=a011, bcdDevice=4b.61 [ 708.208847][T11245] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.247395][T11245] usb 6-1: Product: syz [ 708.269254][T11245] usb 6-1: Manufacturer: syz [ 708.287274][T11245] usb 6-1: SerialNumber: syz [ 708.287615][T15117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.373544][T15117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.592889][T15117] team0: Port device team_slave_0 added [ 708.647197][T15117] team0: Port device team_slave_1 added [ 708.755440][T11245] hub 6-1:43.2: bad descriptor, ignoring hub [ 708.775604][T11245] hub 6-1:43.2: probe with driver hub failed with error -5 [ 708.843271][T15117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.854745][T11245] usb 6-1: USB disconnect, device number 50 [ 708.872984][T15117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.962823][T15117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 709.006420][ T50] Bluetooth: hci1: command tx timeout [ 709.050116][T15117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 709.090181][T15117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 709.179749][T15117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 709.596602][T15117] hsr_slave_0: entered promiscuous mode [ 709.620833][T15117] hsr_slave_1: entered promiscuous mode [ 709.651393][T15117] debugfs: 'hsr0' already exists in 'hsr' [ 709.686003][T15117] Cannot create hsr debugfs directory [ 709.700327][T15179] netlink: 'syz.4.2908': attribute type 12 has an invalid length. [ 709.858560][ T5695] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 709.921019][T15187] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2911'. [ 710.013556][ T5695] usb 6-1: device descriptor read/64, error -71 [ 710.274202][ T5695] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 710.290791][ T30] audit: type=1326 audit(1783194584.455:4575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15192 comm="syz.4.2913" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b4479de59 code=0x0 [ 710.392463][ T29] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 710.442464][ T5695] usb 6-1: device descriptor read/64, error -71 [ 710.553282][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 710.559616][ T5695] usb usb6-port1: attempt power cycle [ 710.575720][ T29] usb 7-1: config 1 interface 0 altsetting 200 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 710.623142][ T29] usb 7-1: config 1 interface 0 has no altsetting 0 [ 710.647083][ T29] usb 7-1: New USB device found, idVendor=056a, idProduct=0069, bcdDevice= 0.40 [ 710.673346][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.705160][ T29] usb 7-1: Product: 穙龥豼ﺏ棱榮星銮碑ᾮ号ྎ槬퓌䨃 [ 710.743323][ T29] usb 7-1: SerialNumber: ⒀ٽ﵂ġ㝹ጽ枋⒀桋꯱刄靡퀈鞻䌤 [ 710.812071][T15197] netlink: 'syz.7.2914': attribute type 4 has an invalid length. [ 710.863829][T15198] netlink: 'syz.7.2914': attribute type 4 has an invalid length. [ 710.906825][T15117] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 710.932595][ T5695] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 710.948648][T15117] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.972181][ T5695] usb 6-1: device descriptor read/8, error -71 [ 711.082479][ T50] Bluetooth: hci1: command tx timeout [ 711.171356][ T29] usbhid 7-1:1.0: can't add hid device: -71 [ 711.189773][ T29] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 711.212490][ T5695] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 711.230412][ T29] usb 7-1: USB disconnect, device number 47 [ 711.263226][ T5695] usb 6-1: device descriptor read/8, error -71 [ 711.382969][ T5695] usb usb6-port1: unable to enumerate USB device [ 711.494128][T15205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 711.517256][T15117] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 711.539239][T15117] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.564029][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 711.694798][T15117] bond0: (slave netdevsim1): Releasing backup interface [ 711.704780][T15117] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 711.704833][T15117] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.962002][T15117] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 711.980146][T15117] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.019527][T15218] netlink: 'syz.7.2920': attribute type 12 has an invalid length. [ 712.635033][T15228] netlink: 'syz.4.2923': attribute type 3 has an invalid length. [ 713.091019][T15117] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 713.162515][ T50] Bluetooth: hci1: command tx timeout [ 713.171414][T15117] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 713.204770][T15117] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 713.259509][T15117] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 713.281235][T15238] input: syz0 as /devices/virtual/input/input99 [ 713.324957][T15117] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 713.391063][T15117] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 713.430855][T15117] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 713.491321][T15117] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 714.165263][T15117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.360353][T15117] 8021q: adding VLAN 0 to HW filter on device team0 [ 714.473045][ T6202] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.480490][ T6202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.616758][ T6198] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.624155][ T6198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.076060][T15117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 715.241697][T15117] veth0_vlan: entered promiscuous mode [ 715.338276][T15117] veth1_vlan: entered promiscuous mode [ 715.480271][T15117] veth0_macvtap: entered promiscuous mode [ 715.503084][ T5717] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 715.529256][T15117] veth1_macvtap: entered promiscuous mode [ 715.628143][T15117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 715.692215][T15117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 715.703142][T15260] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2931'. [ 715.728498][ T5717] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 715.751961][ T5717] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 715.782660][ T5717] usb 7-1: Product: syz [ 715.794576][ T6202] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.807637][ T5717] usb 7-1: SerialNumber: syz [ 715.818580][ T6202] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.839276][ T5717] usb 7-1: config 0 descriptor?? [ 715.855799][ T6202] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.904306][ T6202] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.074135][T15258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.120964][T15266] netlink: 'syz.7.2934': attribute type 3 has an invalid length. [ 716.173830][T15258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.413350][ T6202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.450768][ T6202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.602189][ T24] usb 7-1: USB disconnect, device number 48 [ 716.647561][T11399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.694672][T11399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.830115][T15275] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 717.607427][T15303] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2943'. [ 718.376647][T15324] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2950'. [ 718.837713][T15327] netlink: 'syz.7.2952': attribute type 1 has an invalid length. [ 719.054592][T15327] bond15: entered promiscuous mode [ 719.095146][ T30] audit: type=1800 audit(1783194593.265:4576): pid=15322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2949" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 719.153669][ T5635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 719.180978][T15327] 8021q: adding VLAN 0 to HW filter on device bond15 [ 719.195214][ T5635] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 719.208615][ T5635] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 719.229911][ T5635] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 719.251646][ T5635] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 719.354113][ T30] audit: type=1326 audit(1783194593.525:4577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15326 comm="syz.7.2952" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72dcf9de59 code=0x0 [ 719.478202][T15328] vlan7: entered allmulticast mode [ 719.506281][T15328] bond15: entered allmulticast mode [ 719.819200][T15330] bond15: (slave bridge11): making interface the new active one [ 719.872516][T15330] bridge11: entered promiscuous mode [ 719.923323][T15330] bridge11: entered allmulticast mode [ 720.003677][T15330] bond15: (slave bridge11): Enslaving as an active interface with an up link [ 720.376548][T15340] netlink: 'syz.6.2954': attribute type 12 has an invalid length. [ 720.641300][T15344] xt_bpf: check failed: parse error [ 720.720219][T15346] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 720.778086][T15348] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 721.035454][T15335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.137933][ T6203] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.290562][T15364] syzkaller0: entered promiscuous mode [ 721.302536][T15364] syzkaller0: entered allmulticast mode [ 721.325548][ T24] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 721.333530][T15358] input: syz0 as /devices/virtual/input/input100 [ 721.340162][ T5635] Bluetooth: hci3: command tx timeout [ 721.372416][ T5695] usb 8-1: new full-speed USB device number 53 using dummy_hcd [ 721.434204][T15361] tipc: Enabled bearer , priority 0 [ 721.502455][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 721.509838][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 721.523902][ T24] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 721.566762][ T5695] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 721.596682][ T5695] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.606574][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 721.619745][ T5695] usb 8-1: Product: syz [ 721.625122][ T5695] usb 8-1: Manufacturer: syz [ 721.631362][ T6203] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.648968][ T5695] usb 8-1: SerialNumber: syz [ 721.656186][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 721.667519][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.690008][ T24] usb 6-1: Product: syz [ 721.700772][ T24] usb 6-1: Manufacturer: syz [ 721.713324][ T24] usb 6-1: SerialNumber: syz [ 721.721900][ T5695] usb 8-1: config 0 descriptor?? [ 721.767332][ T5695] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 721.781180][ T24] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 721.826879][T15357] tipc: Resetting bearer [ 721.842925][ T24] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 721.854034][ T24] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 721.930806][T15357] tipc: Disabling bearer [ 721.969915][T15335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.004915][T15335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.076904][T11245] usb 6-1: USB disconnect, device number 55 [ 722.372968][ T6203] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.664777][ T6203] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.084572][ T6202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.100737][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.111466][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.122123][T11245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.184845][T11245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.294945][T15332] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.337409][T15332] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.368776][T15332] bridge_slave_0: entered allmulticast mode [ 723.402614][ T5635] Bluetooth: hci3: command tx timeout [ 723.409236][T15332] bridge_slave_0: entered promiscuous mode [ 723.485044][T15332] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.516009][T15332] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.534759][T15332] bridge_slave_1: entered allmulticast mode [ 723.553698][T15332] bridge_slave_1: entered promiscuous mode [ 723.628230][T15382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2963'. [ 723.701367][T15382] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2963'. [ 723.739888][ T142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.752777][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.765326][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.775581][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.797254][T15383] netlink: 'syz.5.2963': attribute type 4 has an invalid length. [ 723.888613][T15383] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2963'. [ 723.961955][T15378] 8021q: adding VLAN 0 to HW filter on device bond8 [ 724.217128][T15383] .`: renamed from bond0 [ 724.303002][ T5695] gspca_stk1135: reg_w 0x352 err -110 [ 724.309595][ T5695] gspca_stk1135: serial bus timeout: status=0x00 [ 724.334385][T15332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.351597][ T5695] gspca_stk1135: Sensor write failed [ 724.372484][ T5695] gspca_stk1135: serial bus timeout: status=0x00 [ 724.401657][ T5695] gspca_stk1135: Sensor write failed [ 724.420424][T15332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 724.453087][ T5695] gspca_stk1135: serial bus timeout: status=0x00 [ 724.475499][ T5695] gspca_stk1135: Sensor read failed [ 724.500637][ T5695] gspca_stk1135: serial bus timeout: status=0x00 [ 724.529207][ T5695] gspca_stk1135: Sensor read failed [ 724.550084][ T5695] gspca_stk1135: Detected sensor type unknown (0x0) [ 724.576278][ T5695] gspca_stk1135: serial bus timeout: status=0x00 [ 724.607314][ T5695] gspca_stk1135: Sensor read failed [ 724.621349][ T5695] gspca_stk1135: serial bus timeout: status=0x00 [ 724.657504][ T5695] gspca_stk1135: Sensor read failed [ 724.701907][ T5695] gspca_stk1135: serial bus timeout: status=0x00 [ 724.744863][ T5695] gspca_stk1135: Sensor write failed [ 724.764782][ T5695] gspca_stk1135: serial bus timeout: status=0x00 [ 724.782638][ T5695] gspca_stk1135: Sensor write failed [ 724.790778][ T5695] stk1135 8-1:0.0: probe with driver stk1135 failed with error -110 [ 724.803855][ T5695] usb 8-1: USB disconnect, device number 53 [ 724.905680][T15332] team0: Port device team_slave_0 added [ 724.935115][ T30] audit: type=1326 audit(1783194599.105:4578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15400 comm="syz.7.2969" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72dcf9de59 code=0x0 [ 724.994530][T15405] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 725.021807][T15332] team0: Port device team_slave_1 added [ 725.261466][ T6203] bridge_slave_1: left allmulticast mode [ 725.280989][ T6203] bridge_slave_1: left promiscuous mode [ 725.300799][ T6203] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.340986][ T6203] bridge_slave_0: left allmulticast mode [ 725.352093][ T6203] bridge_slave_0: left promiscuous mode [ 725.368429][ T6203] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.483221][ T5635] Bluetooth: hci3: command tx timeout [ 725.492490][T11245] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 725.493482][ T29] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 725.685372][T11245] usb 7-1: Using ep0 maxpacket: 8 [ 725.693516][ T29] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 725.711054][T11245] usb 7-1: unable to get BOS descriptor or descriptor too short [ 725.759362][T11245] usb 7-1: config 1 has an invalid interface number: 8 but max is 0 [ 725.778384][T11245] usb 7-1: config 1 has no interface number 0 [ 725.796258][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.833972][ T29] usb 6-1: Product: syz [ 725.844187][T11245] usb 7-1: config 1 interface 8 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 725.870467][T11245] usb 7-1: config 1 interface 8 altsetting 7 has an endpoint descriptor with address 0x11, changing to 0x1 [ 725.876685][ T29] usb 6-1: Manufacturer: syz [ 725.925554][T11245] usb 7-1: config 1 interface 8 altsetting 7 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 725.936628][ T29] usb 6-1: SerialNumber: syz [ 725.991208][ T29] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 726.018583][T11245] usb 7-1: config 1 interface 8 altsetting 7 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 726.034664][T15418] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2972'. [ 726.047941][ T5696] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 726.062952][T11245] usb 7-1: config 1 interface 8 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.124224][ T5743] net_ratelimit: 6 callbacks suppressed [ 726.124315][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.148606][T11245] usb 7-1: config 1 interface 8 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 726.198719][T11245] usb 7-1: config 1 interface 8 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 726.262213][T11245] usb 7-1: config 1 interface 8 has no altsetting 0 [ 726.308646][T11245] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=44.07 [ 726.368898][T11245] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.392378][T11245] usb 7-1: Product: syz [ 726.402484][T11245] usb 7-1: Manufacturer: syz [ 726.412384][T11245] usb 7-1: SerialNumber: syz [ 726.484529][T15396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.527429][T15396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.598198][T15396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.642708][ T5743] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 726.666873][T15396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.714974][T11245] cxacru 7-1:1.8: submit of read urb for cm 0x90 failed (-90) [ 726.764432][T11245] cxacru 7-1:1.8: usbatm_usb_probe: invalid endpoint 02! [ 726.802548][T11245] cxacru 7-1:1.8: probe with driver cxacru failed with error -22 [ 726.832795][ T5743] usb 3-1: Using ep0 maxpacket: 32 [ 726.856522][ T191] usb 6-1: USB disconnect, device number 56 [ 726.871761][ T5743] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 726.882833][T11245] usb 7-1: USB disconnect, device number 49 [ 726.922103][ T5743] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.949787][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.998107][ T5743] usb 3-1: Product: syz [ 727.011616][ T5743] usb 3-1: Manufacturer: syz [ 727.047918][ T5743] usb 3-1: SerialNumber: syz [ 727.093519][ T5743] usb 3-1: config 0 descriptor?? [ 727.167877][ T5696] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 727.227457][ T5696] ath9k_htc: Failed to initialize the device [ 727.243027][ T191] usb 6-1: ath9k_htc: USB layer deinitialized [ 727.381664][ T6203] bond5 (unregistering): (slave bridge1): Releasing backup interface [ 727.390948][ T6203] bridge1 (unregistering): left promiscuous mode [ 727.400426][ T6203] bridge1 (unregistering): left allmulticast mode [ 727.447242][ T6203] bond6 (unregistering): (slave bridge3): Releasing backup interface [ 727.471017][ T6203] bridge3 (unregistering): left promiscuous mode [ 727.494919][ T6203] bridge3 (unregistering): left allmulticast mode [ 727.540680][ T5743] airspy 3-1:0.0: Board ID: 00 [ 727.547382][ T5743] airspy 3-1:0.0: Firmware version: [ 727.563036][ T5635] Bluetooth: hci3: command tx timeout [ 727.591830][ T6203] bond10 (unregistering): (slave bridge5): Releasing backup interface [ 727.612442][ T6203] bridge5 (unregistering): left promiscuous mode [ 727.618921][ T6203] bridge5 (unregistering): left allmulticast mode [ 727.687502][ T6203] bond11 (unregistering): (slave bridge6): Releasing backup interface [ 727.711134][ T6203] bridge6 (unregistering): left promiscuous mode [ 727.732998][ T6203] bridge6 (unregistering): left allmulticast mode [ 727.829995][ T6203] bond12 (unregistering): (slave bridge8): Releasing backup interface [ 727.860360][ T6203] bridge8 (unregistering): left promiscuous mode [ 727.887197][ T6203] bridge8 (unregistering): left allmulticast mode [ 727.963212][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.997188][ T6203] bond13 (unregistering): (slave bridge9): Releasing backup interface [ 728.014773][ T6203] bridge9 (unregistering): left promiscuous mode [ 728.031721][ T6203] bridge9 (unregistering): left allmulticast mode [ 728.040492][T15452] netlink: 'syz.2.2973': attribute type 1 has an invalid length. [ 728.063586][T15452] netlink: 'syz.2.2973': attribute type 2 has an invalid length. [ 728.094436][ T6203] bond15 (unregistering): (slave bridge10): Releasing backup interface [ 728.115029][ T6203] bridge10 (unregistering): left promiscuous mode [ 728.133558][ T6203] bridge10 (unregistering): left allmulticast mode [ 728.149702][T15456] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2979'. [ 728.165997][T15456] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2979'. [ 728.198687][ T6203] bond16 (unregistering): (slave bridge11): Releasing backup interface [ 728.221839][ T6203] bridge11 (unregistering): left promiscuous mode [ 728.239388][ T6203] bridge11 (unregistering): left allmulticast mode [ 728.285218][ T142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.301264][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.311694][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.330346][ T6203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 728.351158][ T6203] bond0 (unregistering): (slave team0): Releasing backup interface [ 728.365200][ T6203] bond0 (unregistering): Released all slaves [ 728.389428][ T6203] bond1 (unregistering): Released all slaves [ 728.424212][ T6203] bond2 (unregistering): Released all slaves [ 728.461768][ T6203] bond3 (unregistering): Released all slaves [ 728.501721][ T6203] bond4 (unregistering): Released all slaves [ 728.509539][ T5695] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 728.574336][ T6203] bond5 (unregistering): Released all slaves [ 728.628019][ T6203] bond6 (unregistering): Released all slaves [ 728.652520][ T5695] usb 6-1: device descriptor read/64, error -71 [ 728.670630][ T6203] bond7 (unregistering): Released all slaves [ 728.706902][ T6203] bond8 (unregistering): Released all slaves [ 728.744657][ T6203] bond9 (unregistering): Released all slaves [ 728.794451][ T191] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 728.809789][ T6203] bond10 (unregistering): Released all slaves [ 728.865507][ T6203] bond11 (unregistering): Released all slaves [ 728.892770][ T5695] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 728.922543][ T6203] bond12 (unregistering): Released all slaves [ 728.957545][ T191] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 728.968967][ T191] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 728.995437][ T191] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 729.006709][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.016390][ T6203] bond13 (unregistering): Released all slaves [ 729.028971][ T191] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 729.038392][ T191] usb 7-1: SerialNumber: syz [ 729.042829][ T5695] usb 6-1: device descriptor read/64, error -71 [ 729.077398][ T6203] bond14 (unregistering): Released all slaves [ 729.138087][ T6203] bond15 (unregistering): Released all slaves [ 729.164226][ T5695] usb usb6-port1: attempt power cycle [ 729.198455][ T6203] bond16 (unregistering): Released all slaves [ 729.235991][T15332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.254879][T15332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.339558][T15332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.353746][T15457] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2979'. [ 729.408881][ T5743] airspy 3-1:0.0: usb_control_msg() failed -110 request 0f [ 729.438963][ T5286] 8021q: adding VLAN 0 to HW filter on device eth9 [ 729.477575][ T5743] airspy 3-1:0.0: Registered as swradio24 [ 729.488673][ T6202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.503787][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.514920][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.524372][T15444] tipc: Enabling of bearer rejected, failed to enable media [ 729.527458][ T5743] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 729.582775][ T5695] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 729.615330][ T5743] usb 3-1: USB disconnect, device number 122 [ 729.630425][T15332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.656335][ T5695] usb 6-1: device descriptor read/8, error -71 [ 729.669218][T15332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.784830][T15332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.942770][ T5695] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 729.961798][ T6202] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 729.974252][ T5695] usb 6-1: device descriptor read/8, error -71 [ 730.064830][ T6202] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 730.083953][ T5695] usb usb6-port1: unable to enumerate USB device [ 730.119336][ T6202] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 730.319888][ T6203] tipc: Left network mode [ 730.320224][ T6202] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 730.380119][T15332] hsr_slave_0: entered promiscuous mode [ 730.423009][T15332] hsr_slave_1: entered promiscuous mode [ 730.441703][T15332] debugfs: 'hsr0' already exists in 'hsr' [ 730.456661][T15332] Cannot create hsr debugfs directory [ 731.343646][ T191] usb 7-1: invalid UAC_HEADER (v1) [ 731.403302][ T5736] net_ratelimit: 1 callbacks suppressed [ 731.403322][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.567802][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.730445][T15486] netlink: 'syz.2.2986': attribute type 12 has an invalid length. [ 731.772632][ T191] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 731.844909][T15490] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 731.863450][T15491] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2987'. [ 731.876868][ T191] usb 7-1: USB disconnect, device number 50 [ 731.946019][T15492] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 731.990996][ T7996] udevd[7996]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 732.082982][T15498] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 732.603863][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.710271][T15505] tipc: Enabled bearer , priority 0 [ 732.803170][T15505] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2988'. [ 732.822570][T15505] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2988'. [ 732.845771][ T30] audit: type=1326 audit(1783194607.015:4579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.6.2989" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd889d9de59 code=0x7ffc0000 [ 732.918175][ T30] audit: type=1326 audit(1783194607.015:4580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.6.2989" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd889d9de59 code=0x7ffc0000 [ 732.996953][ T30] audit: type=1326 audit(1783194607.045:4581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.6.2989" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7fd889d9de59 code=0x7ffc0000 [ 733.038655][ T30] audit: type=1326 audit(1783194607.045:4582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.6.2989" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd889d9de59 code=0x7ffc0000 [ 733.124581][ T30] audit: type=1326 audit(1783194607.045:4583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.6.2989" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd889d9de59 code=0x7ffc0000 [ 733.170736][ T30] audit: type=1326 audit(1783194607.045:4584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.6.2989" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd889d5e68e code=0x7ffc0000 [ 733.173152][ T191] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 733.281095][ T30] audit: type=1326 audit(1783194607.045:4585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.6.2989" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd889d9daeb code=0x7ffc0000 [ 733.314233][ T6203] hsr_slave_0: left promiscuous mode [ 733.328703][ T6203] hsr_slave_1: left promiscuous mode [ 733.344992][ T6203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 733.364509][ T30] audit: type=1326 audit(1783194607.055:4586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.6.2989" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd889d9daeb code=0x7ffc0000 [ 733.414960][ T6203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 733.442924][ T30] audit: type=1326 audit(1783194607.055:4587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.6.2989" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd889d9daeb code=0x7ffc0000 [ 733.449578][T15515] netlink: 'syz.2.2990': attribute type 1 has an invalid length. [ 733.498272][ T6203] veth1_macvtap: left promiscuous mode [ 733.508880][ T6203] veth0_macvtap: left promiscuous mode [ 733.515216][ T191] usb 7-1: Using ep0 maxpacket: 32 [ 733.522096][ T6203] veth1_vlan: left promiscuous mode [ 733.528159][ T6203] veth0_vlan: left promiscuous mode [ 733.537533][ T191] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 733.550685][ T191] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 733.556917][ T30] audit: type=1326 audit(1783194607.075:4588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.6.2989" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd889d9daeb code=0x7ffc0000 [ 733.605659][ T191] usb 7-1: config 0 interface 0 has no altsetting 0 [ 733.643764][ T191] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 733.643807][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.663476][ T191] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.685088][ T191] usb 7-1: Product: syz [ 733.720812][ T191] usb 7-1: Manufacturer: syz [ 733.739997][ T191] usb 7-1: SerialNumber: syz [ 733.769859][ T191] usb 7-1: config 0 descriptor?? [ 733.963327][ T142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.988810][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.999799][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.022640][T15509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.031309][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.052874][T15509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.624576][T15531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.660936][T15531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.685994][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.709960][ T6203] team0 (unregistering): Port device team_slave_1 removed [ 734.724260][T15531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.793826][T15531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.846739][ T6203] team0 (unregistering): Port device team_slave_0 removed [ 735.165414][ T191] gs_usb 7-1:0.0: Couldn't get device config: (err=-110) [ 735.199759][ T191] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -110 [ 735.244784][ T6199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.539794][T15513] tipc: Resetting bearer [ 735.605106][ T5286] 8021q: adding VLAN 0 to HW filter on device eth10 [ 735.638343][T15503] tipc: Disabling bearer [ 735.674106][T15516] 8021q: VLANs not supported on xfrm0 [ 735.846924][ T5696] tipc: Node number set to 1628796472 [ 736.293046][ T5710] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 736.349877][T15544] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 736.455952][ T5710] usb 6-1: Using ep0 maxpacket: 32 [ 736.471067][ T5695] usb 7-1: USB disconnect, device number 51 [ 736.519822][ T5710] usb 6-1: config index 0 descriptor too short (expected 6701, got 45) [ 736.532951][ T5710] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.549172][ T5710] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.560607][ T5710] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.572434][ T5710] usb 6-1: config 0 interface 0 has no altsetting 0 [ 736.580245][ T5710] usb 6-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.9d [ 736.642507][ T5710] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.695516][ T5710] usb 6-1: config 0 descriptor?? [ 737.045785][ T5695] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 737.129269][ T5743] net_ratelimit: 4 callbacks suppressed [ 737.129290][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.173582][ T5710] logitech 0003:046D:CA03.0019: unknown main item tag 0x0 [ 737.214719][ T5710] logitech 0003:046D:CA03.0019: unknown main item tag 0x0 [ 737.226300][ T5710] logitech 0003:046D:CA03.0019: unknown main item tag 0x0 [ 737.249555][ T5695] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 737.261452][ T5695] usb 7-1: config 0 has no interface number 0 [ 737.274484][ T5710] logitech 0003:046D:CA03.0019: unknown main item tag 0x0 [ 737.289771][ T5695] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 737.303293][ T5710] logitech 0003:046D:CA03.0019: unknown main item tag 0x0 [ 737.325793][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.340713][ T5710] logitech 0003:046D:CA03.0019: unknown main item tag 0x0 [ 737.362719][ T5695] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 737.388777][ T5710] logitech 0003:046D:CA03.0019: unknown main item tag 0x0 [ 737.404003][ T5695] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 737.446680][ T5710] logitech 0003:046D:CA03.0019: hidraw0: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.5-1/input0 [ 737.469805][ T5695] usb 7-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 737.488496][ T5710] logitech 0003:046D:CA03.0019: no inputs found [ 737.525052][ T5695] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.540294][T15558] syzkaller0: entered promiscuous mode [ 737.558709][T15558] syzkaller0: entered allmulticast mode [ 737.585550][ T5695] usb 7-1: config 0 descriptor?? [ 737.608988][ T5710] usb 6-1: USB disconnect, device number 61 [ 737.783481][T15560] fido_id[15560]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 737.921207][T15558] tipc: Started in network mode [ 737.930345][T15558] tipc: Node identity 32dc46e0ee41, cluster identity 4711 [ 737.954433][T15558] tipc: Enabled bearer , priority 0 [ 737.995551][T15557] tipc: Resetting bearer [ 738.041668][ T191] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 738.136952][T15557] tipc: Disabling bearer [ 738.156210][ T191] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 738.364955][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.431619][T15572] netlink: 'syz.7.3002': attribute type 12 has an invalid length. [ 738.824111][T15332] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 738.879637][T15332] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 739.035042][T15332] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 739.080801][T15332] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 739.100309][ T6201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.111123][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.129009][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.156897][T15332] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 739.228352][T15332] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 739.277426][T15332] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 739.293041][T15586] input: syz0 as /devices/virtual/input/input101 [ 739.338621][T15332] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 739.405737][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.594249][T15547] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2996'. [ 739.682693][ T5695] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:28BD:0042.001B/input/input102 [ 739.925594][ T5695] uclogic 0003:28BD:0042.001B: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.6-1/input1 [ 740.003045][ T5743] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 740.042550][ T5695] usb 7-1: USB disconnect, device number 52 [ 740.203809][T15332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.234187][ T5743] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 740.248309][T15608] fido_id[15608]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 740.264001][ T5743] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.277496][ T5743] usb 3-1: Product: syz [ 740.281844][ T5743] usb 3-1: Manufacturer: syz [ 740.287771][ T6203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.296451][ T5743] usb 3-1: SerialNumber: syz [ 740.297081][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.311002][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.314628][ T5743] usb 3-1: config 0 descriptor?? [ 740.371575][T15332] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.451458][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.458720][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.570933][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.578207][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.737981][T15620] syzkaller0: entered promiscuous mode [ 740.753153][T15620] syzkaller0: entered allmulticast mode [ 740.845895][T15603] syz_tun: entered promiscuous mode [ 740.881077][T15624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.917158][T15603] syz_tun: left promiscuous mode [ 740.945143][T15624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.088595][T15620] tipc: Enabled bearer , priority 0 [ 741.125276][T15619] tipc: Resetting bearer [ 741.241137][ T5743] usb 3-1: Firmware version (0.0) predates our first public release. [ 741.281244][ T5743] usb 3-1: Please update to version 0.2 or newer [ 741.301191][T15619] tipc: Disabling bearer [ 741.482659][ T5743] usb 3-1: USB disconnect, device number 123 [ 741.565438][T15638] input: syz0 as /devices/virtual/input/input103 [ 741.593829][ T5710] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 741.789253][ T5710] usb 8-1: Using ep0 maxpacket: 8 [ 741.817227][ T5710] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 741.862100][ T5710] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.916426][ T5710] usb 8-1: Product: syz [ 741.935696][ T5710] usb 8-1: Manufacturer: syz [ 741.969731][ T5710] usb 8-1: SerialNumber: syz [ 741.997367][T15332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.007566][ T5710] usb 8-1: config 0 descriptor?? [ 742.149931][T15651] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3019'. [ 742.203333][ T5743] net_ratelimit: 1 callbacks suppressed [ 742.203353][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.296664][ T5710] usb 8-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 742.333538][T15332] veth0_vlan: entered promiscuous mode [ 742.363424][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.384126][ T24] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 742.410917][T15332] veth1_vlan: entered promiscuous mode [ 742.573158][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 742.597219][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 742.619109][ T24] usb 7-1: too many configurations: 107, using maximum allowed: 8 [ 742.641093][ T24] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 742.664574][ T24] usb 7-1: can't read configurations, error -61 [ 742.738817][T15664] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3020'. [ 742.802451][ T29] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 742.812690][ T24] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 742.972864][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 742.981848][ T29] usb 3-1: config 0 has an invalid interface number: 168 but max is 0 [ 742.999476][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 743.011782][ T29] usb 3-1: config 0 has no interface number 0 [ 743.025091][ T24] usb 7-1: too many configurations: 107, using maximum allowed: 8 [ 743.039324][ T29] usb 3-1: config 0 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 743.054165][T15332] veth0_macvtap: entered promiscuous mode [ 743.081088][ T24] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 743.091662][T15332] veth1_macvtap: entered promiscuous mode [ 743.101146][ T29] usb 3-1: config 0 interface 168 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 743.116164][ T24] usb 7-1: can't read configurations, error -61 [ 743.133578][ T24] usb usb7-port1: attempt power cycle [ 743.149393][ T29] usb 3-1: config 0 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 743.209812][T15332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.236424][ T29] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 743.276988][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.291763][ T5710] usb write operation failed. (-71) [ 743.313697][T15332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.377278][ T6203] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.387897][ T5710] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 743.401396][ T29] usb 3-1: config 0 descriptor?? [ 743.409036][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.426086][ T6198] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.437670][T15661] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 743.451795][ T5710] dvbdev: DVB: registering new adapter (Terratec H7) [ 743.480191][ T5710] usb 8-1: media controller created [ 743.482799][ T6198] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.502666][ T24] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 743.531957][ T6198] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.542812][ T5710] usb read operation failed. (-71) [ 743.567568][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 743.568257][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.583466][ T5710] usb write operation failed. (-71) [ 743.612666][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 743.648550][ T24] usb 7-1: too many configurations: 107, using maximum allowed: 8 [ 743.659991][ T5710] dvb_usb_az6007 8-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 743.688887][ T29] usb 3-1: string descriptor 0 read error: -71 [ 743.711554][ T24] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 743.733718][ T24] usb 7-1: can't read configurations, error -61 [ 743.747812][ T29] keyspan 3-1:0.168: Keyspan 2 port adapter converter detected [ 743.765500][ T5710] usb 8-1: USB disconnect, device number 54 [ 743.794408][ T29] keyspan 3-1:0.168: found no endpoint descriptor for endpoint 1 [ 743.849213][ T29] keyspan 3-1:0.168: found no endpoint descriptor for endpoint 84 [ 743.884719][ T29] keyspan 3-1:0.168: found no endpoint descriptor for endpoint 2 [ 743.914328][ T24] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 743.994115][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 744.016965][ T29] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 744.058001][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 744.084731][ T29] keyspan 3-1:0.168: found no endpoint descriptor for endpoint 88 [ 744.096614][ T24] usb 7-1: too many configurations: 107, using maximum allowed: 8 [ 744.118549][ T29] keyspan 3-1:0.168: found no endpoint descriptor for endpoint 6 [ 744.137617][ T24] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 744.197727][ T29] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 744.207468][ T142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.219292][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.230958][ T24] usb 7-1: can't read configurations, error -61 [ 744.241935][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.267432][ T24] usb usb7-port1: unable to enumerate USB device [ 744.290586][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.305966][ T29] usb 3-1: USB disconnect, device number 124 [ 744.329072][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.416923][ T29] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 744.443275][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.487581][ T29] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 744.540369][ T29] keyspan 3-1:0.168: device disconnected [ 744.569887][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.599189][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.222966][ T5717] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 745.336841][T15696] syzkaller0: entered promiscuous mode [ 745.354502][T15696] syzkaller0: entered allmulticast mode [ 745.397949][T15696] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3028'. [ 745.419477][ T5717] usb 6-1: Using ep0 maxpacket: 32 [ 745.454042][ T5717] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.479151][ T5717] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.497098][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.536220][ T5717] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 745.574187][ T5717] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.587201][T15702] netlink: 'syz.6.3029': attribute type 4 has an invalid length. [ 745.604830][T15701] netlink: 'syz.6.3029': attribute type 4 has an invalid length. [ 745.639884][ T5717] usb 6-1: config 0 descriptor?? [ 745.677312][ T5717] hub 6-1:0.0: USB hub found [ 745.899541][ T5717] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 746.044708][T15711] No such timeout policy "syz1" [ 746.161616][T15712] netlink: 'syz.6.3033': attribute type 1 has an invalid length. [ 746.386303][T15712] bond7: entered promiscuous mode [ 746.392497][ T24] usb 5-1: new full-speed USB device number 111 using dummy_hcd [ 746.408919][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 746.408938][ T30] audit: type=1326 audit(1783194620.575:4653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15710 comm="syz.6.3033" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd889d9de59 code=0x0 [ 746.422575][T15712] 8021q: adding VLAN 0 to HW filter on device bond7 [ 746.523281][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.595560][ T5695] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 746.624533][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 746.659512][ T24] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 746.677394][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.697203][T15715] bond7: (slave bridge6): making interface the new active one [ 746.717604][ T24] usb 5-1: Product: syz [ 746.739675][ T24] usb 5-1: Manufacturer: syz [ 746.754964][ T24] usb 5-1: SerialNumber: syz [ 746.761145][ T5695] usb 8-1: Using ep0 maxpacket: 32 [ 746.807901][ T5717] usbhid 6-1:0.0: can't add hid device: -71 [ 746.819226][ T5695] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.823113][ T5717] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 746.867144][ T24] usb 5-1: config 0 descriptor?? [ 746.875347][T15715] bridge6: entered promiscuous mode [ 746.892934][ T5695] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.907806][T15714] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 746.928344][ T5695] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 746.964665][ T5717] usb 6-1: USB disconnect, device number 62 [ 746.987150][ C1] port100 5-1:0.0: NFC: Urb failure (status -71) [ 746.996027][T15715] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 747.006043][ T5695] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.109389][ T5695] usb 8-1: config 0 descriptor?? [ 747.156171][T15714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.193306][T15714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.322790][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.383474][ T5695] ft260 0003:0403:6030.001C: unknown main item tag 0x0 [ 747.404444][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.410932][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.418909][ T5695] ft260 0003:0403:6030.001C: unknown main item tag 0x0 [ 747.426981][T10395] ------------[ cut here ]------------ [ 747.432712][T10395] time_after(jiffies, warn_timeout) [ 747.432748][T10395] WARNING: io_uring/io-wq.c:1370 at io_wq_put_and_exit+0x736/0xaa0, CPU#0: syz.1.1528/10395 [ 747.448266][T10395] Modules linked in: [ 747.452323][T10395] CPU: 0 UID: 0 PID: 10395 Comm: syz.1.1528 Tainted: G L syzkaller #0 PREEMPT(full) [ 747.463388][T10395] Tainted: [L]=SOFTLOCKUP [ 747.467759][T10395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 747.478088][T10395] RIP: 0010:io_wq_put_and_exit+0x736/0xaa0 [ 747.484459][T10395] Code: 78 22 e8 7d 5b f9 fc 4c 89 e7 4c 89 fe e8 a2 d4 02 07 48 85 c0 75 18 e8 68 5b f9 fc 80 3c 2b 00 75 bb eb c5 e8 5b 5b f9 fc 90 <0f> 0b 90 eb d8 e8 50 5b f9 fc 4c 8b 2c 24 4d 8d 7d 08 4c 89 fd 48 [ 747.505153][T10395] RSP: 0018:ffffc900079c7838 EFLAGS: 00010293 [ 747.511868][T10395] RAX: ffffffff84cd16e5 RBX: 1ffffffff1d01e50 RCX: ffff888029d90000 [ 747.519958][T10395] RDX: 0000000000000000 RSI: ffffffffffffe87c RDI: 0000000000000000 [ 747.528050][T10395] RBP: dffffc0000000000 R08: ffffffff90576ff7 R09: 1ffffffff20aedfe [ 747.536114][T10395] R10: dffffc0000000000 R11: fffffbfff20aedff R12: ffff888025a8d018 [ 747.544206][T10395] R13: 000000010000967e R14: 000000010000ae02 R15: 0000000000001b58 [ 747.552215][T10395] FS: 00007f1d56e546c0(0000) GS:ffff888124f59000(0000) knlGS:0000000000000000 [ 747.561438][T10395] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 747.569063][T10395] CR2: 00007f92bd65cd58 CR3: 000000007f55c000 CR4: 00000000003526f0 [ 747.577279][T10395] Call Trace: [ 747.580599][T10395] [ 747.583659][T10395] ? io_wq_put_and_exit+0x15a/0xaa0 [ 747.588931][T10395] io_uring_clean_tctx+0x12e/0x1b0 [ 747.591752][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.596620][T10395] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 747.608464][T10395] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 747.614388][T10395] ? io_uring_drop_tctx_refs+0x135/0x1d0 [ 747.620080][T10395] io_uring_cancel_generic+0x6c0/0x7d0 [ 747.625699][T10395] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 747.631756][T10395] ? __fput_deferred+0x216/0x380 [ 747.636827][T10395] ? __pfx___fput_deferred+0x10/0x10 [ 747.642145][T10395] ? do_raw_spin_lock+0x12b/0x2f0 [ 747.647347][T10395] ? __pfx_autoremove_wake_function+0x10/0x10 [ 747.653629][T10395] ? io_uring_unreg_ringfd+0x531/0x540 [ 747.659156][T10395] do_exit+0x39f/0x2360 [ 747.663411][T10395] ? __pfx_do_exit+0x10/0x10 [ 747.668047][T10395] ? do_raw_spin_lock+0x12b/0x2f0 [ 747.673221][T10395] do_group_exit+0x22d/0x2f0 [ 747.677859][T10395] ? _raw_spin_unlock_irq+0x23/0x50 [ 747.683268][T10395] get_signal+0x121b/0x12c0 [ 747.687918][T10395] arch_do_signal_or_restart+0xbb/0x860 [ 747.693604][T10395] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 747.700674][T10395] exit_to_user_mode_loop+0x104/0x730 [ 747.706701][T10395] ? rcu_is_watching+0x15/0xb0 [ 747.711517][T10395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.717711][T10395] do_syscall_64+0x353/0x580 [ 747.722864][T10395] ? trace_irq_disable+0x3b/0x140 [ 747.727923][T10395] ? clear_bhb_loop+0x40/0x90 [ 747.732741][T10395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.738681][T10395] RIP: 0033:0x7f1d55f9de59 [ 747.743230][T10395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.763002][T10395] RSP: 002b:00007f1d56e540e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 747.771451][T10395] RAX: fffffffffffffe00 RBX: 00007f1d56225fa8 RCX: 00007f1d55f9de59 [ 747.779618][T10395] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1d56225fa8 [ 747.787819][T10395] RBP: 00007f1d56225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 747.796013][T10395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.805029][T10395] R13: 00007f1d56226038 R14: 00007f1d5634f960 R15: 00007f1d5634fa48 [ 747.813664][T10395] [ 747.816749][T10395] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 747.824072][T10395] CPU: 0 UID: 0 PID: 10395 Comm: syz.1.1528 Tainted: G L syzkaller #0 PREEMPT(full) [ 747.835061][T10395] Tainted: [L]=SOFTLOCKUP [ 747.839423][T10395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 747.849512][T10395] Call Trace: [ 747.852832][T10395] [ 747.855823][T10395] vpanic+0x56c/0xa60 [ 747.859873][T10395] ? __pfx__printk+0x10/0x10 [ 747.864509][T10395] ? __pfx_vpanic+0x10/0x10 [ 747.869057][T10395] ? is_bpf_text_address+0x292/0x2b0 [ 747.874396][T10395] ? is_bpf_text_address+0x26/0x2b0 [ 747.879636][T10395] panic+0xc5/0xd0 [ 747.883419][T10395] ? __pfx_panic+0x10/0x10 [ 747.887896][T10395] __warn+0x315/0x4c0 [ 747.891927][T10395] ? io_wq_put_and_exit+0x736/0xaa0 [ 747.897189][T10395] ? io_wq_put_and_exit+0x736/0xaa0 [ 747.902453][T10395] __report_bug+0x331/0x530 [ 747.907120][T10395] ? io_wq_put_and_exit+0x736/0xaa0 [ 747.912372][T10395] ? __pfx___report_bug+0x10/0x10 [ 747.917439][T10395] ? do_raw_spin_lock+0x12b/0x2f0 [ 747.922521][T10395] ? _raw_spin_unlock_irq+0x23/0x50 [ 747.927765][T10395] ? lockdep_hardirqs_on+0x7a/0x110 [ 747.933030][T10395] ? io_wq_put_and_exit+0x736/0xaa0 [ 747.938284][T10395] report_bug+0x16a/0x220 [ 747.942666][T10395] ? io_wq_put_and_exit+0x736/0xaa0 [ 747.947916][T10395] ? io_wq_put_and_exit+0x738/0xaa0 [ 747.953175][T10395] handle_bug+0x9c/0x200 [ 747.957468][T10395] exc_invalid_op+0x1a/0x50 [ 747.962012][T10395] asm_exc_invalid_op+0x1a/0x20 [ 747.966910][T10395] RIP: 0010:io_wq_put_and_exit+0x736/0xaa0 [ 747.972753][T10395] Code: 78 22 e8 7d 5b f9 fc 4c 89 e7 4c 89 fe e8 a2 d4 02 07 48 85 c0 75 18 e8 68 5b f9 fc 80 3c 2b 00 75 bb eb c5 e8 5b 5b f9 fc 90 <0f> 0b 90 eb d8 e8 50 5b f9 fc 4c 8b 2c 24 4d 8d 7d 08 4c 89 fd 48 [ 747.992483][T10395] RSP: 0018:ffffc900079c7838 EFLAGS: 00010293 [ 747.998606][T10395] RAX: ffffffff84cd16e5 RBX: 1ffffffff1d01e50 RCX: ffff888029d90000 [ 748.006627][T10395] RDX: 0000000000000000 RSI: ffffffffffffe87c RDI: 0000000000000000 [ 748.014816][T10395] RBP: dffffc0000000000 R08: ffffffff90576ff7 R09: 1ffffffff20aedfe [ 748.022841][T10395] R10: dffffc0000000000 R11: fffffbfff20aedff R12: ffff888025a8d018 [ 748.031132][T10395] R13: 000000010000967e R14: 000000010000ae02 R15: 0000000000001b58 [ 748.039163][T10395] ? io_wq_put_and_exit+0x735/0xaa0 [ 748.044438][T10395] ? io_wq_put_and_exit+0x735/0xaa0 [ 748.049721][T10395] ? io_wq_put_and_exit+0x15a/0xaa0 [ 748.054979][T10395] io_uring_clean_tctx+0x12e/0x1b0 [ 748.060161][T10395] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 748.065928][T10395] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 748.071790][T10395] ? io_uring_drop_tctx_refs+0x135/0x1d0 [ 748.077525][T10395] io_uring_cancel_generic+0x6c0/0x7d0 [ 748.083039][T10395] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 748.089056][T10395] ? __fput_deferred+0x216/0x380 [ 748.094037][T10395] ? __pfx___fput_deferred+0x10/0x10 [ 748.099389][T10395] ? do_raw_spin_lock+0x12b/0x2f0 [ 748.104457][T10395] ? __pfx_autoremove_wake_function+0x10/0x10 [ 748.110575][T10395] ? io_uring_unreg_ringfd+0x531/0x540 [ 748.116093][T10395] do_exit+0x39f/0x2360 [ 748.120309][T10395] ? __pfx_do_exit+0x10/0x10 [ 748.124977][T10395] ? do_raw_spin_lock+0x12b/0x2f0 [ 748.130046][T10395] do_group_exit+0x22d/0x2f0 [ 748.134689][T10395] ? _raw_spin_unlock_irq+0x23/0x50 [ 748.139931][T10395] get_signal+0x121b/0x12c0 [ 748.144490][T10395] arch_do_signal_or_restart+0xbb/0x860 [ 748.150087][T10395] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 748.156317][T10395] exit_to_user_mode_loop+0x104/0x730 [ 748.161746][T10395] ? rcu_is_watching+0x15/0xb0 [ 748.166566][T10395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.172678][T10395] do_syscall_64+0x353/0x580 [ 748.177308][T10395] ? trace_irq_disable+0x3b/0x140 [ 748.182387][T10395] ? clear_bhb_loop+0x40/0x90 [ 748.187296][T10395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.193225][T10395] RIP: 0033:0x7f1d55f9de59 [ 748.197668][T10395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.217466][T10395] RSP: 002b:00007f1d56e540e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 748.225942][T10395] RAX: fffffffffffffe00 RBX: 00007f1d56225fa8 RCX: 00007f1d55f9de59 [ 748.233951][T10395] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1d56225fa8 [ 748.241985][T10395] RBP: 00007f1d56225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 748.249991][T10395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.258012][T10395] R13: 00007f1d56226038 R14: 00007f1d5634f960 R15: 00007f1d5634fa48 [ 748.266048][T10395] [ 748.269721][T10395] Kernel Offset: disabled [ 748.274055][T10395] Rebooting in 86400 seconds..