last executing test programs: 11m14.235534698s ago: executing program 3 (id=1798): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000080)={0x800, {{0x2, 0x4e20, @multicast2}}, 0x1}, 0x8c) r1 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d01, 0x0, 0x4}]}) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x7, 0x0, &(0x7f0000002200)=[{&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/153, 0x99}, {&(0x7f0000001e00)=""/196, 0xc4}, {&(0x7f0000001f00)=""/196, 0xc4}, {&(0x7f0000002000)=""/189, 0xbd}, {&(0x7f00000020c0)=""/70, 0x46}, {&(0x7f0000002140)=""/133, 0x85}]}, &(0x7f0000000240)='\x00\x00\x00\x00\x00\x00', 0x0, 0x7, 0x0, 0x8000000, 0x0}) fcntl$setsig(r1, 0xa, 0x3a) ioctl$FS_IOC_GETVERSION(r0, 0x80047601, &(0x7f0000000140)) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000040)) r6 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x309000) ioctl$BLKGETSIZE(r6, 0x1260, &(0x7f00000001c0)) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) 11m14.035271605s ago: executing program 3 (id=1801): syz_open_dev$media(0x0, 0x8, 0x80c00) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) semget$private(0x0, 0x4000, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, 0x0}, 0xdf) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000000100000400000008000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800150000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x4d4, 0x6c}, @in6=@remote, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x3, 0x0, 0x0, 0x800000000000}, {0x0, 0x1}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_crypt={0x48, 0x2, {{'ecb(blowfish)\x00'}}}]}, 0x180}}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, 0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x2, 0x2c0000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) msgctl$IPC_RMID(0x0, 0x0) write$binfmt_misc(r5, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0xc0, 0x1, 0x4, 0x0, 0x9}) sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405668, &(0x7f0000000140)={0x9, 0x1, 0x1, "0000087aba10fdfffffbe30b51751bc53051a30000000000000016ebffffff00", 0x34565559}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0, 0x0) 11m12.248741248s ago: executing program 3 (id=1813): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000100)={0x3, {{0x2, 0x4e23, @empty}}, 0x0, 0x6, [{{0x2, 0x4e24, @remote}}, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}}]}, 0x38c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000004c0)={0x6, @broadcast, 0x4e20, 0x3, 'nq\x00', 0x12, 0x3, 0x36}, 0x2c) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa018000000000000000000000119078e0000001e0000073c1cb075dd5050100"], 0x0) (async) r1 = syz_open_dev$mtd(&(0x7f0000000000), 0x58f1, 0x90001) ioctl$ECCGETSTATS(r1, 0x80104d12, &(0x7f00000000c0)) 11m12.01706953s ago: executing program 3 (id=1814): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') r4 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x9000000d}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r7, 0xffffffffffffffff, 0x4, 0xd) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@sha1={0x1, "4c68aed6f6038f814b9e6e3274df438bcb11f2ab"}, 0x15, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x3}, {0x1}, {0x2, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) 11m11.702268531s ago: executing program 3 (id=1815): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) connect$pptp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) socket$inet(0x2, 0x3, 0x33) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x3b, 0x660f537e, 0x7f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000440)={{0x84, @local, 0x4f2a, 0x1, 'ovf\x00', 0x5, 0xc, 0x6c}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x4e23, 0x3, 0x1, 0x1}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x0) 11m11.414104749s ago: executing program 3 (id=1817): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000140)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080", @ANYRESDEC], 0x24}}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)="0d32818e2cede722e231", 0xa, 0x1}]) 11m10.827771618s ago: executing program 32 (id=1817): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000140)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080", @ANYRESDEC], 0x24}}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)="0d32818e2cede722e231", 0xa, 0x1}]) 8.746209362s ago: executing program 5 (id=6389): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x86dd, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @multicast2}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\b@', 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "00001c050000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8675b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x22, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200fff500000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x4100, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) close(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x19, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x106a655, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xba}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2400}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_MASTER={0x8, 0x3, r6}]}, 0x40}}, 0x4000000) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f750800", 0x26) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000001380)=@urb_type_iso={0x0, {0xa}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x8, 0x1, 0xd508, 0x0, &(0x7f0000000380)="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", [{0x1, 0x8}]}) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r8) r9 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) r10 = openat$binder_debug(0xffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r10, 0xc00c6419, &(0x7f00000027c0)={0x1, &(0x7f00000000c0)=""/40, &(0x7f0000002780)=[{0xdb0, 0x1000, 0x6c2, &(0x7f0000001780)=""/4096}]}) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_ep_write(r8, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") recvmsg$can_bcm(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40000100) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 7.687946183s ago: executing program 1 (id=6393): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0xe, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1a6c2182da411ae}, 0x0) r0 = syz_io_uring_setup(0x49e, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040), &(0x7f0000000000)) r1 = eventfd2(0xff, 0x80001) io_setup(0x5, &(0x7f0000000240)=0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000280), 0x8, 0xcc282) ioctl$SNDRV_PCM_IOCTL_XRUN(r3, 0x4148, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x8401, 0x0) io_submit(r2, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x400000000000000, 0x0, 0x0, 0x8, 0x0, r4, &(0x7f0000000300)="87992d800d", 0x5, 0x4}]) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300)=r1, 0x1) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) r5 = syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0xfffffffe, 0x800, 0x3, 0x800000c3}, &(0x7f0000000580)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r5, 0xffffff, 0xfffffffd, 0x4b, 0x0, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r10 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r10, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r9, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) r11 = socket$inet6(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r12 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xc}, {0xffff, 0xffff}, {0x6, 0x9}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x80000000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendto$inet6(r11, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$sock_ifreq(r11, 0x8933, &(0x7f0000000180)={'bond0\x00', @ifru_hwaddr=@broadcast}) 7.421072275s ago: executing program 1 (id=6395): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2446a, 0x0, 0x4, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000ad80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mknodat$null(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x18c, 0x103) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0xffffffffc1001081, 0x800, 0x0, 0x7, 0xa14, 0x0, 0x0, 0x1, 0x400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004200)="0aca6c6a1bafd2989666a6014bd5e9e63945bda64c1239d970f0d349110c18fe029ac3e29dc9ff9ead2ed3cef0fe77ef8348a82d3da186ce2140d53dfeb34dc1c2d1a3de224233032fff8b85c85885c90e9d0c205001db3dfc55d17a7dab1761c1733c465113c056d3bcbaf6a52dbda820a1db5e7d777f6c716e5f60b04cc1c6a362d891cb08fa109c5a00e427f8636059d934f255021cf13d2bc9cff93f049018b8e48f6480d324f08eb83655d3eb5a379ec18c861f596db17bcc23ada65f26a02c4c0c9e3167cc582e93661cdd0dc7581ac1958d9cd08104af251d87d8b5d82150b8cc4ca6d23475f259a8b7d69839cf728a6c478eec56135bdfc6428a318cf2b838d16984d0498d33ac41fe67361bdf5752db6a5ae32979463b60ad6b99527affdcb2b4a0f23b2f140c981b00c99cd25d563ff6c3308b048371eb2e599880a2b67ef9a2282947dbb23a3f1944193a801187f206587a52ee7a33032a842b31fcc0db079c554c97a09e3812aea45702099ab648888d08ae48a187a5acee7b9a2edbc320c64514554e540286053dd2acb9f9ec83435f43193b45b324c8406cdf976bc7607cf9385e99bf5f5205110d0c27abcac49e7ec7deef560f953d2c64bfd014ddcb1b2cbccbe401a312436799235807f4fdf52a9f894656fcbe1e971163e8d743450c49875379522df77d5e8910df837701d135f4589d4d15355e1638eff568a18a0d6217a11acf8fdf0fed0216635215d248aff37d85b62edbc989bc6d4757e6347ec971ae2b1e0d194e6c11dd8f7c108219569e157eceb7c14a288aad98a24de9a81f9ba1dd5271c17adfdf41f3393789c30f9345f6ad4ad1a6bf46640f69f7c038c4fec6652853a3f4fece3c3d15bfdea15f37e961a03de54181724801808a3a9030ba4650ce6fa9e6822c794d7b9da548a2eab977ab0c08b2d985957d5cd70ec677637219c6ca7c7c4d0a7a7ca38c1862583735b46b3addfd1c72cf7f63f11bd85ed59b9ba94db5c2fbd48461ab735b439a992e3a4462545e042e3c863199c006ef3a3be4473b24b782f86a3c1dca9848283bc47f4322273681efa1c8c413dc81a459e4e755846a094971708eb7f428aa67d0c81ce7f33d856e13a342b05eb403af7b4cab191c4ab9d650158808ec74d04f4b765e513b94f10345322e48485d29eb8b1408d7776f98e3625a20220e94789476affdbd19b44bac6bd2fa2b0ba10e93582178a3ef4938dcda25bc6245621b1ced780ca089010e8e51493c1ac7817e949b67fe6e3858e60a1e45a657c080fdc0bcbfcac2ba9d027f02ce30cc7440ce71eac66bb2eb264dcb1306a6054fde6640ca51ec4ccaf500a87f073b58ab286daeefd8d3ec7ee882551f7b6a36ab79a8e10d1d3c234ffaa33e95026025cc39a057efe7823dcb689131b1e83572b4dd1f49097580976c046424618fd6047d46928087d483df952738448d164c9288b15a4982493bf7ebc1976d0942846c8310556732b4cabff937a51e926caa37ae54dea339c2a2a8d73be2ca3a39edcb4ef8bd58a3c4c98c48b9f37a1424b6a54919921d4429611d0dd503d1d357c3c1ad1cf68f36907f8d9c28a14ec2cf2510fe54510111ddd7a67fb8d2f449227da397c32b8dca19971ab9d76e1f6ce0c54c9de1cb1daa1936b62f838170b8b6e7f34168a099619a113c83347ce2c0f6086855385062b6e074b68391e59430236f9ec687a265072f7a40efbef3cfe5bc1cfb364d87a597507811d2bf6af59e20fcf4703caa63285decabcc367ccfb8e27efecb14db8b1167938f457d4117c62f440d807b5482bb223b4b14e9526f9ede33631cdf9fcab53b3fbebc9344ab130d793dad610f2fe41ef388acaebd6cf26aedf7c7c6aaee956cf92c14583bd45b189d43f7b44419df1e0adecc8fbedb357656b7649721f81c2207ebb37e3ae21bdce8c982cbbdec012c7fe587161ff741610fb8ea5883c758527873ca2197b5f1058083c40203cc4dbdf7f4f1388f2309d22a6a1767137703296ad3aeabdbb3529a290da9c6cc5631b2f1ad25c766e3cbd8d9f588bafd17495f572bf1cfe1e8b5bb22130963cca8832f846300bb6dc0baec85b500e1a48fdd14cf0442fe4d441821d7e46fb5e2220c96bfb16ab8ca883a4477bc756dfc6622f320a648cfb57f9de9aef33f9986c6517d1a7eb59348541d6d3494ebe7bc1ed4a86f06411491d176da36de8c8a8d8ea28928bda63fe863277e4325b756421d4d2042428250ed526e538fb930671e9ad517aac494a58aecbc908b512016fe4d8f60b576e230b3206a0c7bd4fef717a8cda0029d13ecc3c8f8686f717adc1440353c236aa71f842839c5ce92c83fbfb57b221271aa6f4029219c3c2ed7a3a53d8ff065ce30d403c95cf69e7963d5bfb63bccb6fb8ca125f0d7094072273ce3108093d0ff83ab98393b8e9a87117f4933a8c8ecf353931da3b8dacb20685a65dd865bd6031cd2b0b7e237901c782c6e6ea8742e89dbb01eb925dd6e74c53bd28d3c424cee35eb29823f2138b92516075e00342fa4dbc5b27675a651032c8ffb3da6c5349d0f9b2779778d0cfa1c8d4cc34d4fe95fc435e4768e93d56d2c142f25df1b9afa7d103486842372b36261b96b7b3acc0e78ff20a535ed515ace0cf3300168a7ef42d6bd511c019d0ccd7599ba70cbabc95f34a052fe9d6f97b49dc1cde40d5ebf305797d7d572a61cd38a0cf85f28c5d018648b769327bd9559722d5422754f26c9e5439b42bedf34e31bbc845b99ce315eeeb0383fb3ae021084cedcd843b86831c78441ccc0d2c23de528e53cff785816a3a3d99b4a4684df9546a285203bb615eb480fa8385e90226b27b39a7d50c83babf5ba890da1a8848ba372971347dc34b76370544feb183b9292043f2ef072b69bcff45b1917c073222d50bd585f2173bdae673198b95b67f8387f6d2b2934597c5ce165fd420ddcc01d29d71d532b5d127afc98657845230e363cbb9ecc05b247996ecbfce0e8215ec7dc5e9be115de2e7ebe8fe3e191f455d244ad1ce75c828a2adbbe509589f389936e62dfd1ecdef105162d357cfb22412b64570dcb04fe18bbbe5518985d7316a75a19a16a482105b7fac923e1eefd780d036ccc39e3cc53d2002ccd10004be1694be4110fb062110e1a44ba88acfa282d9c7cdae0cb55f48f7caa3c324d9f52265d21606a20779accdc9f69dd0fc49e4bc2c49891e526561569abe5673533c8a9b6a3004c809d3f7452b02787047d4442df3f4cc5d47e5aa73b7994c113541ea312970f2e741d4fd50a83f5a0293fbd56d619aa4bb3b491606642fcb922b5ccd6bedb442e450609343e18f61abb3a4b2fc69e06a72edc7bcba0da06da3e80f59b737f088d01f0dbcad89003b505fe29bdc8118e3fbcdb90a4f464e0e70d20f093790ae1b9f6f8a904a268cb4bb116404de1bd4c3f9522c36893a902a3a90f52670b7ff2074815329f3fe2c8ccfabe2d812394e6b0e34741abece71b7db0fbf0a80e6c13bc7bba89a4ee01cad9dd76e49cd91690db6fe402640db8b3523c49bcf611a9da991123edcb64ef505906d8ab4b8586e631828402105f045cff3681f2f36e3713be5bcb6af157278b194a51f04d04507231aa6f4d77b4065f2a97894c201b23f7b5f79b029c74fc4c57fff87c03e01210674417c1297155ca7a7fbe855fdcf65561619ffca0099fa08ddc8ddd7f713b2b0c6af0fcc4bd4cba9e9f47debdc6d9e6e2dce63fec20efc51e15d013fadba2707a449dbfd025f1a7c329282c797b2071afb37a89f8d58c1e3b4f06586f00a433161373548b699fabd92771346a25ff10789ca89cbf00f92248c6b8468f22aa4cf7ba90aea16a3cc2b1ee598609dfbe75fb8e11c5003ad0c9ac7205cd35552a53703f06e465633f9653cd670952feb9e77db960ea18914235af757e75204d1f74de9829dfac217d87aecc1c80066426f12e52883bfcd982e54bfdae8ef55f3b70f78bae9e6a1e24388c642cba3b3215602294bb7d68bb6f8e0b24c0b6e99df504c30beb2a7f47b02f9af6511eda25407c30dfdee39ec8db32d93e1e09472474883a87b7b4664bef06d5c0a43793237187acaaa9654f74e5d3bf1ce389befc139fba61378e7b66b4b0d87334732592ebd0e4989373ca541b92d003e67e0292256c256344dbf03ad24540f11cdc17230000001c1da793a460ba671373a0fa082ba63f5418733c9907d360c9bc54ba0e2b374de7965a87316df1c7af17164e1b6dfe32d71fb5ba641bb8d6cd6299473f37e44a69e90a87cd2f8a486a0db4eb104bf87d9f7cc87dc294e6debec7e5819f3f26bdf4cac91f8ee94a826df99da39a4bd6d476943428e3f5009546ee569d6273f7ecb115538c6ce8fe150249c89452c2f0cf0796208a216fc2cb55e1b6c892778f15e7f8b78e6e97093572a29ca3600c72feb4e1ef42a225da695b3111777f3833e306f2a90b8ed6095127b0f13be495a3321bf8201955d40f6b486904a4e1f4c9965563d30277b30cb0d1ef375338a25314fc5abce41f1e95118e89455af9e786cdc460e4e48fda5f21cece9b4e5276523d6919e165df5efe59aff13067d3ef0e82259305942b5f25e831dcb72f5c7fa67ceba7678078d8311aefdc91916f8c1db2ac61188b46825707dd26d29aec734df8bebd7474277908b2ba9e77daea20c395253b3cc876e5dcac960556072bec36e14da26c335b509a38dbf3037d620f4765e63b946ef8ada1729b1323acc8b5e436f3967ab7cc033ccb7d0c9cc74d3a3faa2ff2afb1cd571e3749cb0203e70756273fc6a4d80cf646d551f3a801ca513ac587f0ddc8c58870d817ea2671b2ef30be91a45dc730c6636e7de2ec235044b837ed9861dc89e4df342cff52a29ae6b8d5817fe31bb3a74d0202efca5d94b4d232f3dff885bf52f8d43097d069ce81220e8578c630d496b01fc60562bfbfda22fce6ce68564ab31d1a3d38af2d7b73a970b9b30f6c48dc38991da402491b2d643e0f5e71bb9c0aa834006ddf24b7dbb180f68751535d8cc34823ba3d1ddfbfeb6a15655118d4e1e11b255b998006906017ad9978d6cf4a45a669eabf653363391e77a82a9da14d184a50f1421eeb61411e859cf6f98ab0846ed5345b63e3ad004d1ffd1e48e6574ba7d832f7ad1345b8df27f7707245b335ddff2e4ca1430ec44af208e633c25678b3cfee96424ca026b159bb18c1bdc51db6c66e8788e5aadce1d3e531c9b02edc65b846763ee64113c0cd0d23824c4baf3516e2c8e5192afb9fcd390e51b3bcdcc0a49f932a6907b38713e2229aaa9abc5305420f50a2016429012e835407dee7d8d0b8404655620c3df407e7be2a5a1e668341dd91224509ffd48db6861f558d098954f83aeb6e426099cc4291da311c37bd46c8d80c3ea975e0db6ce12dbdae9116bf08909431fd5483f7cb3076d33a900d56c26d6f151386abb32ea335f5337683201a1ce5d9df25c5df29a375d2680827e182b1aa0813ee7f9d273d7ce1b86194a8cf48d630a5be0b947245c1ee0a0645500ce2ced6dade1b63c0e7572260cce25636778d79ef11ed5e3c42835c8e53a6d26cf85293050cedee2a116e5f38b9cae91a503ec9e0cf784d9cfdccedf95971540ec37926eb43b27cbff1d96b83f80018e6afec70523b6672111a47f9922db34da15d7ca3cc3a77f1abe7221b72d43d2cb4c23fd2bff6cd5ef6b31b6a4c65babcdc918b0d99fad656e471a20a8f4b66d6e37877da1a8b7fb7a8692d6d578ff953b18deebea1353f915102e4d2064dcf8eb0965a2f4c2eeda70b4177dedd7597797ec76bb72ee422ec4d16e494ed77c9bd843ee01885cc3aba1f77806e8f501b856935494918ef83379ac5ae1e06697606053a8c5c880975d1f085c93f2adb1bd2c6ae07c29bbb245cac4726a20a2f61ded013722eee8878933a90319cc8cab7a2bc69dbc79767ba18fcdd8f9ba7de44e9f0575994b28aa9e3e7b4c1f2ce0eee264dfefe3e1600cd969683551894d28b690122093105133b22ee04a50f4883274cb929beb1bb45444ca5d470c0ac611c4990eefea25526f590b269ad40d23842c5b5996c1cb393dbff28a7e2f7cf04ac30fbc2d29ece6708fad830bc523fa52d2ebbfda27379e8c48d085b260a2dfc2e8d7e1a94a245b518612bfc9ca0260c8fdede5298bf584e5d71fc131f5eb6ad2dd7bfd42a77f523eb0aaa787003fb71b9a64fa783e918595af0413fcc0d7818a514c055a48ba9b1bbc6c974f7cb55c3af3edf117835d169e5e2b31e4278d0419b23625ae004171eb2ef8c231a61331886234b402886b4993ca6376f8664134cead1bea142bbed5d46e3bb71b0f8a4cec0c79a9b5f6c823128d02063967a5363b6bd6e242fa3fd21953fdb57725f1eda22984bcff8e40f2076fc0a462706dc2bd95dc447a2aec2a8a4808f2930ff1353348942e28204af42141fa120c8e5fa9c225d16f3624deb2ce178fdf594db504159bbf475e8bee281e3c8ebb29b404b3fbd13dea76df5aee05ad6a85054b838e149d0ebfabe61dcbda6c3494e170e75633843a01e2458b526ac5424177d6bc4706a09694be1c372cc79cf7c4d82ff4e62489d1fc7819d749710035a6fac239d716b57a1af1346c1e8420dc8ae46fd18245160d43a40c564bf11f0232bfd1fed67ba1aebce120ee93a0a000570b808d9fcd60b622c59ad53ef535c1db7de15b52ed2540708eb5baa7195e1a86990b6611ad5c50127f7e876f8031856e9a2c0566f357d6c75e6ca5f217d428602fa7c8f7fb9f3abbefee76d88b3b08c3be2f0d093ce96c6a00f3a157dc0a05e1fc5d8de583c25e09c77348f5825fcd4631396f3e8c26f5c1432784eb8c377fb520d28aedcaa5addfda6eed11da4d2cc91c2e3c3728c763c9d58283af32d00aa1910011a552adabee99d1387d14e582cf68fea46b729eddd0d3ad8eb9125d5fb060f4d6f70a166cc3ce9b02a7bc65200399fc2a47b90039ac23afb853925195e8079da20cbffea72365158fbd94a6e0a654f6c09a8032fb26df99913c2300e03428ab3cd1b3f7aee15460732d445b4797673b47a93a325b2e5157106ade0959be9c4562d5a4292a9ac94940c66375e559f34e57a1158b5d77a5dc9515bdab63799627301f19398d84c7afde812100a65a1642e9515a30434d344b380a92eeb2013a0f63cba648c37095bfd985c607b120f1769a79f1fd7c03f09f966b72945606ade67f9aaa631948bb82f9ae3f89ecf6db12c02d174f62ad6e1b60f4819ae19f4979e0f9dcf51bedf4b1bd1de73bc2adb1923544ede6dbd40ed4c559cf1f079f5dc8986691540e13f5a2505cc0923ca8fe2608ec92b95dbb5facc320e43b2049b79eb02618f6fab08b7e9dbe00fcd69b338b1bb6a9beae531972e16a19d94bd2273c4d042eca34dd7c5aebfbf16552681ad4e243824a9c5d0d8b8d3aba4c102fb76c216c230c2ec34838a0817b03a04480c61c899b2e442bcf2567d4e73000d9c9d4d0acb712df0183fc288634cfde234b94fdbbc0b7e66ea5b6437f312167b1ea93e2a6b2105308d8198a2d4054ba2ff2855250e0e6c952364056e2d3d09e5a2c578837d6521ffb82780f169d07f2f032b34d62f2712a77a56175017257ea1caea41acbbc520b429bd4e3ec3f9a6eafce46731dd3396f1ce1a6198927fd2dbefb3f77c9173be0934747ca47b98c6548c8cd07249d9715414b80000c8430575d8b8903d3923089282a3ccead6e11044c67f3d5d8ed8cc0c0331f2dc09e1bae77ab55307e6445ad382451eff64faca8a4c0cba7cfa2fc9b087afb040e594115c35ce1dbec69ef1e5af8003339afda5faa1be1a3da7c5cb84273009c32d300fba7d222d2dc783241a9414ee30c8bd7e655c09a7f50dfb249ae9b15284b971503f6ce8866a1b36f993acf28d387da88c8defd323d1cd91d4eb46ff87458269a134675556b067a1b71829b7706ba58c93a919884089dc333c9b5d8279dbcc20071991762d2569c8ff5f21783e2961228b2006f8805750c0f9f4f9dc3df86dae1ab98af22143966a6ba04ccbb2bdf90e91e1f2595b979b6934fe132eda34cec0f83132f3867a197a6dfd0d43528bd56613732704bb62b12f4ede7439b2150384fa04db658fda2ddf97ab571f02d150c50c95009d0aa2e553019ac1cf9bbaf15474bf66d69224913b11080badb47d4a085fa13e965de6e95b7aa6e07bb212774d0240738cc07ccc1670d33c100cead3fb99c3f32fdd97c9b16956b1c22a90cd5c7aa0d920dae9e2b149fb5f9870129a0e97d1edba0dbf8fc4fcca6c65c639dd3eaa8803b1e9e601907e086ed1079ff6bc6de941c91df0634ce3730b8035bfdfa699304666920bfb092354da1f0bdd28c9023bd2e152e931e82eeabb86b0323c789daac94422eb7855f18775917e12feb85019e2e017303002ff8e04513ae0fb03f334a76addd8fcbd69ed25931f44044eeffb5d66cab5a22b21e85324946ab15408dd5d68b17727d2e4779bc378750eaa6ef6e943966c0dc4d066c6b8b8945023a0fc49f81a9c15a35d350e3d741652b8a8014b3649dcfd028f25c0b38b7cc14f7e375acfd3960af2eefc49ac6589f38791c9c0b0ea4e55992274052eed15cb8de213794636c4db2385eb9bcfc28f8a97e7c7ac949cd519ab62d1ab10d855a7ac6acda00b78d35d80a9ab4b7099603782384c461dee90abcc14a539779435cf0677eb0b6ff7e47488667788f9b0fd7d5e0cf53aee5ca0071fa30c062da3c44e79096e24594c6e202b7cdbdc49be2ddac8058c7ded15f07d4c413886fdd7017b9fedb86e39917fd1e81b294675bde06c8fac0dbce7f4b90b3859c66f9f6fec640c6781728a8b347da28b4360924ef68c3c740ed5ddbf013720c6de54d9bce5232864f9e80a652cd778641c327876b2a3e1049355a58fb5054aa17064e97142d64be9daf5d1b162566a009c69133f60e3d4c2a53c153185c659d16236fcc1690eed8c6c2e4f8b172eec457a9407003ddad723e3b183e81b17ddbe46ba368ab3e3ff574d9e3fb82e102ab46d7f608e235d064ea963fdf1622ed7278a27fd8210ad39c3acd9069abba71ca051b64561683068ca6a1be906c196ddde1839b3897d5af8fee51614d73e51511b03a5763f3ed3e64bf7293118dc321cf5e940a2829c6b8550083d66d31680fb55af098d9ccebde9882f818c29f4cbb55c26a97c359d8606bff3744ff3efc22e8d34e67b7c97b567483963c574bd1dac8c46c911c48b6e29e73e52f8c9385729a73b70d2ebba9e744247d9003a962fd607686e6c5972b59616acfe327d8b736f38c703832d7690c6474641bf87538e785353c1fd7df1b5ecb1200eed8c5857abd16c26ae72d0147de475b0c4bc98dbff530b334c9c50607bd46ddbcb1ffebf7513cc842e4cdd6c8c00a284e81cb531a04f75210add4f73db3da9783694fc541cd470368c8776973f02835dc355ef54ca90a580a45a2df6137c43b151ade1e51bc879e7fb43141541bfab79b3eaf0eab323c7147ecce6eb3eb3eb02a204755cdcc7405ad903b91fa47b87262cf77fe395a18e269ec36bd534d4939e78719d7c312ce5205979b2fb92fbf9e1d1effb0f663b9361893fcb11bfd66c92af3394e899876990883e9f5374b5642c68e8468498612e3848d367598c2cb0806b7f0c7f4b004dde2b4cc50161a4d293f2ec89c4cd35a767736f9282f848b9d1cdf405f61abcb3e50ff4092d2afb86fdceeec4791d892546e29495f97876cd8015f193113f1b8584a9ff3f32650e29126b81254961e677b6f67023295567f574364b7320313db988616ac123368179beaabb5a56257f0b6df8f6956324ac31d3e8db83dc994425ad80e235051af62ec79a6dc4bfa36283af72af26136c8f5eeb32e1fa1b9e21a228a2a12aed39e717e8f404334d8367ef3edceab1f3e250ab9dc1e89f9b84e658d38806f4d4a09ff07ca539077a5a496699a9d7d4aafa78120eb90f404c2a6ae00aa1c813b25cb6ff9dab8b66b1dd83c80c1225aa24a47df3cbff7f6842d9486bbcd4179150e1bcad3caa604ac1db71aac913c9d3cbc154182187e2aeb852011b22e40b25f9cb31ab7f458a11b1836085c4a99a633215684e7fc70646ee2158faf8329c320a3bc050cdbbac216a18a88af2dd1bb4d648110c5c90f7f5948128eafbe36c01ea709ca8b5fb8ad9eb7384feb7055220aed45690664b0312052792a5b9dfc90a1248995cf68f80b7822fa577724ad143b1d987d2fae7992d3ad270e6b1fc4f1bb3130f134607e8129a6b1442ac05f114062be3604d7cf1595022f49e7cc55282f0f666ad6ff3b03d692c2a66fc2eb5fd0751e4514229861e2343d43162dcbdec156aa5f2c5f9aafaf470f17e5ed688b3516647b9a1a220e843791ddda20fcc444ef63ba31fc27e62fee4676f097f3fecc625755b26ad48dc7ceec1920443c6c466c7bb36e91082f115f4e563a562af1ce5cf37c45bb2da72ab39ecf00e0349eed7e87994b6670e8bde4f4f9142cb99f6bf36eb41bb4dc72b6c6a6686b63fa21c167b1ba5ff481abcc2ca29905d6b75eff932296d75a90080f3a727690eab0e804aa95b545f55107d308f4cd9884d75c28388151a72e82291f79eb52921718903a8bf029a3e7c0ce28f204926dc221f78711a08834a917a0843d8249ca317c7154b88a5a10a09d7477fcf2d6296725bb6a69c2739964a768cd6ae51d7e7de63bb17fe7fabebb0ee46c285c683a41203d059a5c89024a7f3c59915121921000075ed397d30ada6d56e6caa685cb98cc0bf279fa2d96408611ae7e43c3bf70f73148c6615f20060b5c337c6555a3bdb1870bededac9eff951cf1c7fd4f0046d7661789bcfd56fe6198b502e01f90333ad6e9354db449435d0506526bb0c65595dead87be428eb1b988906de152f9a7f126ede6b933c2de1f7d20ec3e64c7468906fba2bdea8b300bab203542dec13a90e4195b3f7da1b669bfe9e8989440b24807ffd44d9e3d61e098caaa029a7063d25604cbacc5f2b3671a163b80a440948230ae90dc3bd7fd46b667cc7d6dba2f53775e9a2180ced0e1cdc6e1275e741607d6dfe40f91ec81602f9bc7c26c322b82114949fd17a9284dd2918326b7880f42db6e468b80f980db98e31ad57be1f131407a0d099cbad9eff25916048e4210c0eb0b68d4d11cc1545cb46114b3969ad0d7a6570b7571c877ed8060cf8b736f8c82ddb64d19fc29af3453f0efe33c68c21c7c8c054707790cf5c056d0ba408d077fb65cef8fb071398ce35cc95c48ba546230f4dd60ad633f81478c87019736044783599a17d4dafd30cc6f4278cae2384763ff2ef395b8e7265ebf0453cef5c98e62a0e48ad422af17a4eee1acc10a51a3fb6e98594309e4976f71027dfe7a9593cdb6860cba745f2346c8d4868b07f381d3c137b396780545e0ea331e586b176821e45f67761fd8b4c6cbbecfd34b72201f6145a6b06eaa8fa9872a54734acbccad497390ff69f676c496258479aa06d9fd1ecec02a01216fd66554afbd5e728608f4572a4d485e57ff5bfc3df00", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x90, 0x0, 0x0, {0x0, 0x400000000000, 0x10000000, 0x1000000000000000, 0x0, 0x22000000, {0x1, 0x1003, 0x0, 0x0, 0x4, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000002140)="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", 0x2000, &(0x7f000000acc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a580)={0x90, 0x0, 0x0, {0x2, 0x3, 0x4, 0x7, 0x9e3, 0x1003, {0x6, 0x5, 0x1ff, 0x9, 0x802, 0x20d, 0x80000000, 0x80000001, 0x100, 0x2000, 0x6909, r3, r4, 0x1, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_G_STD(r5, 0x80085617, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000016c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001509000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000080)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="200b20000000180809f3"], 0x0, 0x0, 0x0}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 7.309437922s ago: executing program 4 (id=6396): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) r4 = socket(0x18, 0x0, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl(0xffffffffffffffff, 0xa2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000040)=0x1) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001780)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000780)="38a6168a5ebd4d9fa5e5b51d43ac76b02c4a991f0c4be0185df40695c9cb71a0fb708be0724bb0afa4ef2f745c798656b52399f8e03ebe089655bb7fd6275c7d6b6c7efc6fb1c451fda065faeb73b39f0053b052cbaea3e8d737693411985598f55d1f38bc5e81fb6d62066a9b3d574d4c52e7775e86a7dc29234e9de85196f628edc83517fda41c906cde9db22ddf125e1420553239c6e354ef35e91892d003e1039fe0551159c5dcd2fd0ea0beeb1700540f47a17b229a9a341aad0abededfabc0dba3545ac3b00a527bc1e02e2a20df007ec0abb6e324dd798d34acf753b86a87659fc81be3fd0332152336ddf653e02c6f974d4bbb6ac4891de8cd1acb7ef26efdc17be2878c5d57ca0512f2a474ad85c0cfab2bc6185a1f58d95a8401e1c3a3a533e78dd6850f37673cc2344586661dbe958f6a7f548692a94c957f6c3b8be2dd534646938bba216202b4302d2a67409c4345d8be80cc17129a553480067ba5676360566328d6608e9e39b64ad6d4f3c7be3babdf8e7130ef132284accdbfb96da6a7457b00b0f298ea276ea85f9bbc72a2705afccb057d3ca4c75b4f738ab3f173071235ceb37bb49c0dd8c6f2397ae3b8169ae593782d8459a72dc156271ce44c7fe15a4c2af2bc957403c0fe890c96355ea5cde4a1397317192b7e9259c44ff264115d5cbee1b30eb2d6fbc3004ede2d5de3cc67a5ac9697ff12069a550705f8a73e5004e5bb337d8fd3aed0f97875a4a0535aa35059ad6019fe5fe9a001d1daa8bca3a7c0c07920dfed08be297ae37d5c72c6f81856bb912066c2171ef1ede78f35f54bc53a1e6084837803ca1fedb4299bfccc5eafc7f7b5ff3065d17dcafa009377646682355647cce4ac5014c474ae406ec11cddf5576aab5745475fd33a09eb5a847da0a54c8da9da62f058b14de4654e11556b716e1284eb13cb19b8e15335abf96c6a7827177afb50c73a06bc21aafa0c061cafc5346271bb5058b2a016979652f67e971f96fe7b0ea90f9343d226be8370798fa4e70bf9e9ec5141ae3202c15e5180d72545f93ddca6791a812b2af4b14bf3cacca183d9ddc6a02f333eb7a8a93aa2bb3655ea2907ee654ea674c9d8eb39ff693d3c6db35a90d41cc9fe640365f6cc1a8d8e431f3fea1ec17d908be180214ef4251732a572468f19ac99406fc92b2d79f26e17baa3438d893b324ba0bad4e322eb7a4f026a71c8e16897b1275a2429b4d9e95a73deeb924d7625c7abd284bf5b8fda48aea74ff647ac0184c57df8841ab88baf32bd6306f563a58940e01627ed3accfae46644ceabf79377f10833b86e269e3faf5353685dfdb912b678107e05ce5b988176f62e9d661385d3d16c94bbe97b7e3845af1716ee4bf5250783e592baa343cc3ac716b53b884e276e760863b713906a94a55ef3b2082ecdc6dc8d249e81956dc79098ed229460f9a82c008fd7a467751257aa5845ce244b20d7befc626416415123d3b1ce87ce1503ddf595dd41fd6c3c6727097a6fcc49a59e69e334b90dd578043910268feee89f62d45da7fb12f6a6c124bc768f66a71576c1c4790475b10faa48863079825085760860b2be291ffbe3e76c82bbf15578b3d289ced8494313dfbd6cf533c96f6b93fddf3a7ce307d7213374a41fc87cddd3b3153b1e4ec750af50ed85989ad4051b348771be44fdaf863183d59390444fb7fab02325cfa580d01e635d9031771dfa45d44c9a3f45d28abaa24ba78146efaf62eb2594d3c47fa4835120daa57aa3a828321f647ea6bd93786399a1d7607dd9e777753bffa336ae5e3f47e8b4283a3054b43c197ce5340296540fcd8f6dffc4dcc5c4391523c56b0a4a6fdd6576419e6ede9261df24ea60b71684f44652867c6c9a7de93ae6588da9d53c7c302a9a26758f282df7e97cf11ebb3c5084a033932ca1fe2ad5efbd47f158fb2e370fe2b831f819632d7ca074f9effaf9526e8985df459d1f7183afd0ffb06be6bf564b44cd601812f8882d32a13afd80144a90b98723f66d22554d673adf0ee48e91a70b4da68452d8f10ade398b1fd03854a9e83d1f02c0c1af6f77679a1a87baea69786cd4997e99ae90131d9588253c03fbdc56d5af9448e794c9d267a4d06cff3f73ca1b77d5c79027859ae6f6aa1a8690ca9663fe1949e5eb8b3f6ff71192df9336480e16b5ea52f79e0b5bf9599e2c39b836220fd59af3db63a0fd6795a061da937fc54143725ad3dd82f99564036cf927312982d62d1aeb0115f29fd21cb4c88fe023ae0d53cf8cb6815cdd6b4af706274a1311bd9bbf7914df414f9c4a2ccc34230445669fe84768a037261f7958e6a1b4945c30a57f9f7325c876c90f564b7f1abc869a8cadebd6da791f372f65f5b528011925e8708d6742c7caeb68b3ac65162e1f0964c8177124b16e748ca30869cfc6aaf904e79c53656905a221bdcbb149efde2bdfbc9256e4e9560cdc339d3b023bade3c1ad8e4d7f13c85294a796f9bb9151929b2008c83e77866c4c4ad2f2890539c59c184078721f7e917e20a1c55207224216f86b1d0f14028756e1978ee66b33e55a6b23160169ec2ad0bb277f8d82bc4f1a6d7d9605eca4e9dc90103d7fa55a1407f2ff562fa3d43bdfa6152259508d017ceaad6464af937632998eb006565fadb08a7deaf6c844929485285bdb872c8da3cfc11069ee0ede094af0a9f9e83e5b8a655351b20f148b96baf7557f46f53c5590df5789aabcbd1c95d2b81998a6c181e53b94ab16f65062c98b6a44512f100f6462ab227e184e8b9c47d9061558f4f9221009c91fdfa6846e5b3a62e92ad876a45b96435f635710aa42aaf7e60f4faf8f8d92074fcf166227776b9b1b4da56cefdf2f887c93dc9d25611e1db2ff73e8e98743a84c5c15fef45620980e5812b7a7f67a0492f0b7e62709dfe454c8e3f18670d2b7299cbd72c05a04627feacd93eb7f41ab8a8e282dcc977e543c170536af3650feaabc11e81b04db58f67a21a52f779a3d264defc26f71ab865869d6e66776edd35bc12656c6cfd6be1c0c4a00a8288946ef22e3becd3d5e7deb5dc7817f32620dd183af40e4de706e3a2bb0b65d42d64b487417f88fe1287f021d23564191f449287cd871e525b3dcc7a5f9910d9bbcf18982414769f1d67e550fcacf897941ed721b637a58d16add4c7bf8dd408ab040f03f58fe6b0f10cfbf1acf571617815eba2973ad5c295d677e819cfd9a65670c2786ff7b57dca06cb5403515f95722f75268fc90498a784c3cbb633c005aacf416c1e8b9075e25e643085cfa54fb5ce309351174b1d952cfc27fa8a084dc54bc0e3578f10ffc5d400f63ab7a2239fe5474dd23d0c4c6530fa5cfb3253e7775c78516095bbb0d8ee192bc1739e6a8eab9bcb7cb0f6334c3b3a89b80cf51848502d6e31708ee54b542f20266b623be2af23219f29ee64ccbe03a3a7734ff16384eb1bb5f3f51215d16c84f33a2b5b472791f8453be0eb23b780c049a0d04a5f5a4dd9eaf72ff952b093b7555830ef79284351b16c670c4cd5eaae3b29a9199e32ffb5125ad6b01ca531ca7055e31923dc0557cd513f5c18f57c4fb6f5f366da02c1b774508801443f50d400281382f117d0278e8c906c221f19cc54f9a78a579a10fa1f499d823908da531b4854c0924ccd4bd46571541c00f111c7e0056ea3ebb476045bcb75bd039df122f372d16e4a38b24989f687a97788db5cf9b5a51c17be8507a4832e2e3050e19b79cad821fc1239a15feb1dba69c39a473be3060ac7da9739df3194319177b8c8c063f243caf9e9455d862f3b6352cc0965235656ab4815b47bf3664a007f83f70266b4f15e20ac2a37a442c795491eaf4631a4ff198c70e46c32fba3893e1e3ea0284f179516503f57641d65448158575feac983d81a618dae404ce42b8bb716432cdf3a7b4b3ab91098bdc70057ecd5d62a107dd85356d7465f41d409274e752b1f02bb7c9a9f4e82a2e33f00b9b07d10f1df4209a0044bf52badd4077006795d913b992ebbc731c4d6a4301dc099e0ef50ffd4a140b2dbbb2672510802ae1739517d749f8e5ba0da1e615c34fba7b0fca9d94220b298ba0f07c09e74db9c3cbc8f27d4914e3e5e1c4d2aa2f20c07155b7f7597736830c531c5cd7c2eaa4969ec7ba8d43b5b2bae84fcc6b12dc97232c11e393e04be5168565d4c033c698d83bb88b34b9de91a52c0b868a7446d7ab65af9ee0179af9131e5e88d20d0b11a824da0b0509ae4f931eaaf8f36de02e62b23c8709f350357d0be3caf718474a7c3c99bdd68b709b99b7c030d0af7cf232a663480641596f12eae22ae9f33854b27013171381fc0a882c831730964d960ff55756e6cf94685966e8c0593d2b81f08be006af7956b6170b3017873beb5ab3022672f6e98e3ce220884e35961d830efc40874cbda090e140b174f77cd57b9940aa02b803646f2bc38eb6290bd08fbcfd48f9ae1225841255a7b39dfa8412095d436d6c1e59b6d87eb9e76338d55175f7a2c11c254bf3c963685e1de7d3062396f4b2f8488a16f876a0ab9da5f2efc75a5928c8366c707eb6eee06c39c07c6873950a4dafa12f0ced5eee698f82608e481231bea13a350e12d03a2f6e47b08467543ab882b221ed8637ed120ae96cbb68f260c3b991e58b556ed6812d4407e1cf71fe278b0ccce359ee25d1d8a7bc635911b35ee94c1c138d2e0fa43e842248168a6309ab480b504c5c3d50c3773181117949d03834985dcfa8be15a153b1f6ef37784431206e90fb10fe5940f65dbfe6cf191aab9c39cdebac65bf3a15eae1719e4765d2f20e054635cfb48af1bdce4b31d6b981ac595855f1c1a635a6d860cc1a3c1a49126a43640f84f314fbeba8e271fdff57daccd225e9fce83f4174606a079f0c303178af7ccb8d6f9e11b47ab8aeccfbf12e45249a5cb66eec606dfe91f8ee4bd460f8106e32f7c8b9f284473066135362938611d0c0091e8a50f4b6463f6ca9f52547882b6fa8fc1913dd4e4c22e27e6d356d0a3d53a200eea20c99cd4c85410f9ea86af0292f0948c61d439a5aa5b8061db1f8efdf789a18af522113f8f1caf8e2603b7215001cb04f2d462322906cb7fbdc29fb444fab31f2d9e4be98833c206eb2a44099a0d75ceccfed90ac0e03b4cdb926512be0add6322903232fd65b731baf23b0169558f78fc75af489b1c961dd7b3a885e6565022000b225a118a54ee905c040164afed2b6976340d2cab670ff2976747b97bfde6faeeece5568e68d94bcec5b741e9205c35070a1f2545dacc112b961f0c20a4419abf525bb67d060605908b25086c13f7b1c6a478aa6007058724db722d0f24cccfbe18a9dd231ac186b05cab72341f3dcc6ec58085b91f4e9efabf1898d8fcf20377443fe1a2b09832de3aae8f148f2de6967f2f514bbad7f1c5e59d09568cac42e90d9a4a8555936299f56dd48071c793e9a3444b693052df1720bac456f6460d4959b5eda131ed9e96360e8575a949eae42d61e5c3dce05f90712171bcd1c64ce9f5f8fd4991081b0131476fdb85593968215d68dbfa78f2e3d52bfbbd4dd1ad8dee557925c126d2dc897c6af29dd34a2112c6e7151dae646d569ff2bec5284ad869bb917fbd6df8f258672d5d7b53b2f95bee86f1383c662a899c03359a8f0a5c20ee8572650bbc759ee30a54cfb02e8f627fb74e87dbab8aff973f6bb6817dce88583a4f013db9cd75d3b15e5ed3874de52879c2a0c78eb90efc7a06383673c31f3f8148cc26d986b767ff82ba1849af02310fa0c", 0x1000, r5}, 0x64) syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0xd6ff, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0xe4, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x80000250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0xffffff58) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) r16 = ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r16, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x26d, 0x0, 0x2000000}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="1e0000004402000006abbf27df00000008000000", @ANYRES32, @ANYBLOB="01000000000000000000000000000000000000008f8b9051994f5a4e0c5ef7ecf70ae8e047fa5f5ffcd358112f85daa0eeacb94cb61ce1b4a85e8242af20b87ddc48498be326b603e946fda1377b8f5b606bdb7670e9314220", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000005000000000000000200"/28], 0x50) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88000, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x20, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004811}, 0x80) 6.49499439s ago: executing program 2 (id=6400): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@ipv4_delroute={0x38, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @multicast2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x18, &(0x7f0000000000)=0x9, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002340)={0x50, 0x0, r3, {0x7, 0x2d, 0x3, 0x280000, 0x2, 0xf, 0x7fffffff, 0x3, 0x0, 0x0, 0x100}}, 0x50) 6.310964936s ago: executing program 2 (id=6401): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x1, 0x0, 0x9, 0x4, 0xfffffdffffffffff, 0xfa11, 0x2}, 0x0) madvise(&(0x7f000035a000/0x2000)=nil, 0x2000, 0x16) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101900, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2392420, &(0x7f0000000340)=ANY=[@ANYRES16, @ANYRESOCT, @ANYBLOB="773af15ed21806e34720c3b45f458a3c87a06c9f4caa20d4f5f7d28816edf924767fcd9ab113ad86d7458e8a78297d9125f0439a0fa34fecb8b23b3cb196d46e112dbd91f1e2ad098545a4a2f3406fcf5f77c5c9072b9cfe39da4c24ac11c556115c32e438376e3997ac13e57c4b9c99d3dcfac0389174bcd8e2c9d30ef24ff54e1260d47d17c03fc71428e4b46e46d405337aa520d43d8c7ee4d75a491a3eec9529b1a1bb1e27271928def26f4cdc31a2bff8ffeb2197f7f1af02c3cb", @ANYRESHEX=0x0]) r5 = io_uring_setup(0x4cad, &(0x7f00000002c0)={0x0, 0x31cd, 0x10000, 0x2, 0x12d}) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) write$binfmt_script(r7, 0x0, 0x0) write$binfmt_elf64(r7, 0x0, 0x1cb) close(r7) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0) r8 = socket$inet(0xa, 0x0, 0x84) listen(r8, 0x8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(r1, 0x0, &(0x7f00000000c0)={0x0, 0x6336, 0x4, 0x1, 0x392, 0x0, r1}, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5188, 0x10, 0x2, 0xab, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x62c8, 0x2, 0x2, 0x69, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x52eb, 0x8, 0x2, 0x2d6, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1352, 0x800, 0x2, 0x3e7, 0x0, r5}}], 0x4, &(0x7f00000016c0)={0x2e, 0x0, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x7b6c}, 0x0, 0x0, '\x00', {0x1, 0x5e7, 0x0, &(0x7f00000006c0)=@buf_1k="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"}}, &(0x7f0000001740)) dup3(r9, r5, 0x80000) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r10 = inotify_init1(0x80000) inotify_add_watch(r10, &(0x7f0000000080)='.\x00', 0x2000775) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000040)='bic', 0x3) 5.920552664s ago: executing program 1 (id=6402): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f01b, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r3, 0x0, &(0x7f0000000980)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r4) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400)) getpid() sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20000080) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f00000001c0), 0x10) sendmsg$can_raw(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xd209f6d83486bb56) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_emit_ethernet(0x68, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[], 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8dc3, 0x900) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r7, 0xc0045520, &(0x7f0000000080)=0xffffbf7f) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000e40)={'filter\x00', 0x5, 0x4, 0x3f0, 0xe8, 0x0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @unspec=@NFQUEUE1={0x0, 'NFQUEUE\x00', 0x1, {0x2, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNMARK={0x0, 'CONNMARK\x00', 0x1, {0x6, 0x40000000, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xffffffffffffff78) 5.844220414s ago: executing program 4 (id=6403): syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x800) mq_open(0x0, 0x42, 0x1f0, 0x0) socket(0x1, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) bind$alg(0xffffffffffffffff, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000200)={{0x6, @multicast2, 0x15, 0x0, 'wrr\x00', 0xc, 0x2000000}, {@loopback, 0x15, 0x0, 0x1, 0x0, 0x5}}, 0x44) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) write(r2, &(0x7f0000000400)='PASV\r\n', 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = accept4(r0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)', 0x2c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000600)={0x1, 'lo\x00'}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0xfcc, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0xf9c, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x8001}, @TCA_FLOW_KEYS={0x8, 0x1, 0x17c00}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x9, 0xffffffffffffffff, 0xfffffffd, 0x526}, 0xd7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x6}, @TCA_FLOW_EMATCHES={0x344, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x2, 0x8, 0x84}, {0xffffffffffffffff, 0x4, 0x7}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc34}}, @TCA_EMATCH_TREE_LIST={0xb4, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xc, 0x3, 0x82a}, {0x0, 0x2, 0x8, 0x8000000}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x901c}, {0x7, 0x6, 0x1, "8652c41d345f"}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xffc3, 0x3, 0xfff7}, {0x8, 0x4c, 0x8, 0x6}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0x8}, {0x3, 0x6, 0x101, 0x200}}}, @TCF_EM_CONTAINER={0x44, 0x1, 0x0, 0x0, {{0x9678, 0x0, 0x7e}, "8f462fea7c7f1cbd9dd96e43617c5952adbd13a1bcd52fce3aed513ca66ae8c654252f74d09167844fff89b03548fef915af17ee89309851"}}]}, @TCA_EMATCH_TREE_LIST={0xb4, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7ac, 0x3, 0x2}, {0xf3, 0x8, 0x1, 0x81}}}, @TCF_EM_CONTAINER={0x94, 0x2, 0x0, 0x0, {{0x0, 0x0, 0x8}, "90a7bd157ac9649bd44e7396a3ab6f980cd2a32e2199c86136a92341bb7699fef3b0a1c34c98495d0879e27eedc01ffdb620d38819244b987083d42e117e9986f6ac88715a20831b1b30955ac92fe31eae7b2cd8a0160b495b4130556ad2069a88398bf3eb5119a78c1492b9598ac396980e88eb4194064a96f4106cbb84b2395f94335cbfd458"}}]}, @TCA_EMATCH_TREE_LIST={0x1bc, 0x2, 0x0, 0x1, [@TCF_EM_META={0x88, 0x3, 0x0, 0x0, {{0xa, 0x4, 0x101}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7ff, 0x9}, {0x4, 0xa, 0x2}}}, @TCA_EM_META_RVALUE={0x17, 0x3, [@TCF_META_TYPE_VAR="fd05", @TCF_META_TYPE_VAR="f7264adfc71f4d", @TCF_META_TYPE_VAR="7c84", @TCF_META_TYPE_VAR="ca8b5022cb5a5f3d"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x8, 0x1}, {0xf, 0x4, 0x2}}}, @TCA_EM_META_LVALUE={0x22, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="88cbda543079fa", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="7aac04", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="9057be345c37b9"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x2, 0x1}, {0x3, 0x8}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x40}, {0x3, 0x7, 0x1}}}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x8, 0x8, 0xc}, {0xffffffffffffffff, 0x3, 0x4}}}, @TCF_EM_IPT={0x104, 0x2, 0x0, 0x0, {{0x4, 0x9, 0x8000}, [@TCA_EM_IPT_MATCH_DATA={0xe1, 0x5, "eb9cca96ecf9dd888c7ed96c4826519a954d8fc917c74ed6b762bfa4a7975325cc1b9f0969f347b724e7f64cd6c39b9a0381d8c26c192b3a14f20fad598368b11105313b557eb5de3c7a950604b81a4314e3d18d879ae095539456e8464222cb24552460339d2b749aad416d367bf1a709a330ce49e24cad3d056051151eec50946618c11daf6b6dac9f193385e0ce2599f03cbf611adb4e4e09aac0c9b8eee46e5c58ae88819c0286b8cb5e35d7ad2db70f04ce3e552dc8e03f94f5dd9238274d67950a446762caebde7c2b9eb19aec17755fb6bc155a2caa4438166c"}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xd, 0x3, 0x9}, {0x8, 0x3f, 0xf478, 0x1}}}]}]}, @TCA_FLOW_ACT={0xb2c, 0x9, 0x0, 0x1, [@m_gact={0x830, 0x15, 0x0, 0x0, {{0x9}, {0x4}, {0x804, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x74, 0x1b, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x0, 0x8, 0x9988, 0x9}, 0x3}}, @TCA_MPLS_TTL={0x5, 0x7, 0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x3}, @TCA_MPLS_LABEL={0x8, 0x5, 0x6}, @TCA_MPLS_BOS={0x5, 0x8, 0xfc}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x78, 0x1c, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}]}, {0x44, 0x6, "ee36f4b3e59068d068156f40fe16c21894810c97b2077ff181fdcb117aa423bc2501ef43a267f3795c557636c3b0fe40910aed19ebed159aa52bc5ea9c960334"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0x5c, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x2f, 0x6, "9c132568a7dc37a27649ac9c6691eb57f119e7b5ea84ea23f147f6ee0a82571010a2cd517452b97bd9466e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0xa4, 0xd, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3ff, 0xffff, 0x0, 0x15c4000, 0x34}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x8, 0x10000000, 0xc441, 0x8}}]}, {0x3f, 0x6, "9fef29919ea4ee615af8b9fc27a71734bb49a16384b574a7eea3d8682cad104583362fffa1e9467d55625861f062569643cdee9086b5b90e06a991"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_vlan={0x10c, 0x1c, 0x0, 0x0, {{0x9}, {0x4}, {0xdf, 0x6, "32499fcb01d7dc8c9422c6c03286784b0f940eae65e44959193a3ed168a8bf052a541f1d6fc8a8f22aa342a7155bdcabde665cd254668fb73ed8bd8be94c767e1e750b8196095833f0c72547f60a8c2834526f506141ebb243c9911c9b958fef817683bb2584399a4a76d712a69e68e48857c69c4e5a46201ac5c444b63f31ada7a08f7f115d3578bc18d2c12afffb7096e7fd1cf7fc8cfbf91b9d31862684248dc2772711fc5f4c21616671df0229d090270118ebf04ebee4fdc768c781cc56efe1bbc9815dc93a46a6f26407b6d4ee2e10cfdba8acbb29c00fec"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x5}, @TCA_FLOW_EMATCHES={0xb8, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xe400}}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xe, 0x3, 0x2}, {0x4, 0x3, 0x42f1, 0x10000}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x10, 0x8, 0x1}, {0x1, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3f92, 0x1, 0xff}, {0x9b, 0x9, 0xb, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x5c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xfffe, 0x8, 0xe}, {0x3, 0x6, 0x5}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x80, 0x8, 0x3}, {0x1, 0x5, 0x4}}}, @TCF_EM_META={0x38, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="f118"]}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="af3fb797daf0daf3a6", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0xfcc}, 0x1, 0x0, 0x0, 0x4894}, 0x42) 5.61335639s ago: executing program 5 (id=6405): r0 = epoll_create1(0x80000) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x1ff, &(0x7f0000000080), 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000040)=0x10000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd26, 0x1, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x0, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x2000000, 0x0, 0x2000c844}, 0x20000114) io_uring_setup(0x9, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100, 0x2}, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000000000040ac05240300000000000109022d00010000e80b0904000001030082000921fd7f000122e30109058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r5 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r5}, &(0x7f0000000080)) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) read$FUSE(r4, &(0x7f0000002900)={0x2020}, 0x2020) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x2, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 4.886325967s ago: executing program 0 (id=6407): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r0, 0xc17a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r3) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r4 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x4161, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 4.87478889s ago: executing program 2 (id=6408): syz_open_dev$hiddev(&(0x7f0000000000), 0x1, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0x1a4, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x3f, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_test', 0x82802, 0x1f8) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28041, 0x0) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000200)=0x4081ff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r4, 0x1, 0x0, 0x0, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87, 0x3}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x10000000, 0x3, 0x4}, 0x1}}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000240), 0xc, &(0x7f0000000f40)={&(0x7f0000000c00)={0x31c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0xfb, 0x7}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5a08}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r11}}}]}}]}, 0x31c}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000006c0)={0x50, r7, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0xf}, @device_a, @device_a, @random="b5b9f3033437", {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}]]}, 0x50}, 0x1, 0x0, 0x0, 0x48058}, 0x8800) 4.831105621s ago: executing program 4 (id=6409): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x60, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_SEL={0x54, 0x5, {0x2, 0x7, 0x4, 0x6, 0x9, 0x8000, 0x80, 0x7, [{0xffffff59, 0x9, 0xe, 0x4}, {0x80000000, 0xb92, 0x7ff, 0xe}, {0x7ff, 0x10005, 0x2, 0x350}, {0x1, 0xbe1, 0x4cd72bd8, 0x69ce}]}}]}}]}, 0x8c}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bffff3, 0x12, r4, 0x0) munmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ff8000/0x2000)=nil) close_range(r3, 0xffffffffffffffff, 0x0) 4.514287879s ago: executing program 4 (id=6410): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x84) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f00000002c0)=@generic={0x4, 0x2, 0x0, "f1c99655"}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x4004084, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001dc0), 0x1, 0x0) (fail_nth: 16) 3.845312822s ago: executing program 2 (id=6411): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002e00000036000000d2e057c89500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x348, &(0x7f0000000480)=""/195}, 0x48) (fail_nth: 15) 3.578036582s ago: executing program 2 (id=6412): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2446a, 0x0, 0x4, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000ad80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mknodat$null(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x18c, 0x103) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0xffffffffc1001081, 0x800, 0x0, 0x7, 0xa14, 0x0, 0x0, 0x1, 0x400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004200)="0aca6c6a1bafd2989666a6014bd5e9e63945bda64c1239d970f0d349110c18fe029ac3e29dc9ff9ead2ed3cef0fe77ef8348a82d3da186ce2140d53dfeb34dc1c2d1a3de224233032fff8b85c85885c90e9d0c205001db3dfc55d17a7dab1761c1733c465113c056d3bcbaf6a52dbda820a1db5e7d777f6c716e5f60b04cc1c6a362d891cb08fa109c5a00e427f8636059d934f255021cf13d2bc9cff93f049018b8e48f6480d324f08eb83655d3eb5a379ec18c861f596db17bcc23ada65f26a02c4c0c9e3167cc582e93661cdd0dc7581ac1958d9cd08104af251d87d8b5d82150b8cc4ca6d23475f259a8b7d69839cf728a6c478eec56135bdfc6428a318cf2b838d16984d0498d33ac41fe67361bdf5752db6a5ae32979463b60ad6b99527affdcb2b4a0f23b2f140c981b00c99cd25d563ff6c3308b048371eb2e599880a2b67ef9a2282947dbb23a3f1944193a801187f206587a52ee7a33032a842b31fcc0db079c554c97a09e3812aea45702099ab648888d08ae48a187a5acee7b9a2edbc320c64514554e540286053dd2acb9f9ec83435f43193b45b324c8406cdf976bc7607cf9385e99bf5f5205110d0c27abcac49e7ec7deef560f953d2c64bfd014ddcb1b2cbccbe401a312436799235807f4fdf52a9f894656fcbe1e971163e8d743450c49875379522df77d5e8910df837701d135f4589d4d15355e1638eff568a18a0d6217a11acf8fdf0fed0216635215d248aff37d85b62edbc989bc6d4757e6347ec971ae2b1e0d194e6c11dd8f7c108219569e157eceb7c14a288aad98a24de9a81f9ba1dd5271c17adfdf41f3393789c30f9345f6ad4ad1a6bf46640f69f7c038c4fec6652853a3f4fece3c3d15bfdea15f37e961a03de54181724801808a3a9030ba4650ce6fa9e6822c794d7b9da548a2eab977ab0c08b2d985957d5cd70ec677637219c6ca7c7c4d0a7a7ca38c1862583735b46b3addfd1c72cf7f63f11bd85ed59b9ba94db5c2fbd48461ab735b439a992e3a4462545e042e3c863199c006ef3a3be4473b24b782f86a3c1dca9848283bc47f4322273681efa1c8c413dc81a459e4e755846a094971708eb7f428aa67d0c81ce7f33d856e13a342b05eb403af7b4cab191c4ab9d650158808ec74d04f4b765e513b94f10345322e48485d29eb8b1408d7776f98e3625a20220e94789476affdbd19b44bac6bd2fa2b0ba10e93582178a3ef4938dcda25bc6245621b1ced780ca089010e8e51493c1ac7817e949b67fe6e3858e60a1e45a657c080fdc0bcbfcac2ba9d027f02ce30cc7440ce71eac66bb2eb264dcb1306a6054fde6640ca51ec4ccaf500a87f073b58ab286daeefd8d3ec7ee882551f7b6a36ab79a8e10d1d3c234ffaa33e95026025cc39a057efe7823dcb689131b1e83572b4dd1f49097580976c046424618fd6047d46928087d483df952738448d164c9288b15a4982493bf7ebc1976d0942846c8310556732b4cabff937a51e926caa37ae54dea339c2a2a8d73be2ca3a39edcb4ef8bd58a3c4c98c48b9f37a1424b6a54919921d4429611d0dd503d1d357c3c1ad1cf68f36907f8d9c28a14ec2cf2510fe54510111ddd7a67fb8d2f449227da397c32b8dca19971ab9d76e1f6ce0c54c9de1cb1daa1936b62f838170b8b6e7f34168a099619a113c83347ce2c0f6086855385062b6e074b68391e59430236f9ec687a265072f7a40efbef3cfe5bc1cfb364d87a597507811d2bf6af59e20fcf4703caa63285decabcc367ccfb8e27efecb14db8b1167938f457d4117c62f440d807b5482bb223b4b14e9526f9ede33631cdf9fcab53b3fbebc9344ab130d793dad610f2fe41ef388acaebd6cf26aedf7c7c6aaee956cf92c14583bd45b189d43f7b44419df1e0adecc8fbedb357656b7649721f81c2207ebb37e3ae21bdce8c982cbbdec012c7fe587161ff741610fb8ea5883c758527873ca2197b5f1058083c40203cc4dbdf7f4f1388f2309d22a6a1767137703296ad3aeabdbb3529a290da9c6cc5631b2f1ad25c766e3cbd8d9f588bafd17495f572bf1cfe1e8b5bb22130963cca8832f846300bb6dc0baec85b500e1a48fdd14cf0442fe4d441821d7e46fb5e2220c96bfb16ab8ca883a4477bc756dfc6622f320a648cfb57f9de9aef33f9986c6517d1a7eb59348541d6d3494ebe7bc1ed4a86f06411491d176da36de8c8a8d8ea28928bda63fe863277e4325b756421d4d2042428250ed526e538fb930671e9ad517aac494a58aecbc908b512016fe4d8f60b576e230b3206a0c7bd4fef717a8cda0029d13ecc3c8f8686f717adc1440353c236aa71f842839c5ce92c83fbfb57b221271aa6f4029219c3c2ed7a3a53d8ff065ce30d403c95cf69e7963d5bfb63bccb6fb8ca125f0d7094072273ce3108093d0ff83ab98393b8e9a87117f4933a8c8ecf353931da3b8dacb20685a65dd865bd6031cd2b0b7e237901c782c6e6ea8742e89dbb01eb925dd6e74c53bd28d3c424cee35eb29823f2138b92516075e00342fa4dbc5b27675a651032c8ffb3da6c5349d0f9b2779778d0cfa1c8d4cc34d4fe95fc435e4768e93d56d2c142f25df1b9afa7d103486842372b36261b96b7b3acc0e78ff20a535ed515ace0cf3300168a7ef42d6bd511c019d0ccd7599ba70cbabc95f34a052fe9d6f97b49dc1cde40d5ebf305797d7d572a61cd38a0cf85f28c5d018648b769327bd9559722d5422754f26c9e5439b42bedf34e31bbc845b99ce315eeeb0383fb3ae021084cedcd843b86831c78441ccc0d2c23de528e53cff785816a3a3d99b4a4684df9546a285203bb615eb480fa8385e90226b27b39a7d50c83babf5ba890da1a8848ba372971347dc34b76370544feb183b9292043f2ef072b69bcff45b1917c073222d50bd585f2173bdae673198b95b67f8387f6d2b2934597c5ce165fd420ddcc01d29d71d532b5d127afc98657845230e363cbb9ecc05b247996ecbfce0e8215ec7dc5e9be115de2e7ebe8fe3e191f455d244ad1ce75c828a2adbbe509589f389936e62dfd1ecdef105162d357cfb22412b64570dcb04fe18bbbe5518985d7316a75a19a16a482105b7fac923e1eefd780d036ccc39e3cc53d2002ccd10004be1694be4110fb062110e1a44ba88acfa282d9c7cdae0cb55f48f7caa3c324d9f52265d21606a20779accdc9f69dd0fc49e4bc2c49891e526561569abe5673533c8a9b6a3004c809d3f7452b02787047d4442df3f4cc5d47e5aa73b7994c113541ea312970f2e741d4fd50a83f5a0293fbd56d619aa4bb3b491606642fcb922b5ccd6bedb442e450609343e18f61abb3a4b2fc69e06a72edc7bcba0da06da3e80f59b737f088d01f0dbcad89003b505fe29bdc8118e3fbcdb90a4f464e0e70d20f093790ae1b9f6f8a904a268cb4bb116404de1bd4c3f9522c36893a902a3a90f52670b7ff2074815329f3fe2c8ccfabe2d812394e6b0e34741abece71b7db0fbf0a80e6c13bc7bba89a4ee01cad9dd76e49cd91690db6fe402640db8b3523c49bcf611a9da991123edcb64ef505906d8ab4b8586e631828402105f045cff3681f2f36e3713be5bcb6af157278b194a51f04d04507231aa6f4d77b4065f2a97894c201b23f7b5f79b029c74fc4c57fff87c03e01210674417c1297155ca7a7fbe855fdcf65561619ffca0099fa08ddc8ddd7f713b2b0c6af0fcc4bd4cba9e9f47debdc6d9e6e2dce63fec20efc51e15d013fadba2707a449dbfd025f1a7c329282c797b2071afb37a89f8d58c1e3b4f06586f00a433161373548b699fabd92771346a25ff10789ca89cbf00f92248c6b8468f22aa4cf7ba90aea16a3cc2b1ee598609dfbe75fb8e11c5003ad0c9ac7205cd35552a53703f06e465633f9653cd670952feb9e77db960ea18914235af757e75204d1f74de9829dfac217d87aecc1c80066426f12e52883bfcd982e54bfdae8ef55f3b70f78bae9e6a1e24388c642cba3b3215602294bb7d68bb6f8e0b24c0b6e99df504c30beb2a7f47b02f9af6511eda25407c30dfdee39ec8db32d93e1e09472474883a87b7b4664bef06d5c0a43793237187acaaa9654f74e5d3bf1ce389befc139fba61378e7b66b4b0d87334732592ebd0e4989373ca541b92d003e67e0292256c256344dbf03ad24540f11cdc17230000001c1da793a460ba671373a0fa082ba63f5418733c9907d360c9bc54ba0e2b374de7965a87316df1c7af17164e1b6dfe32d71fb5ba641bb8d6cd6299473f37e44a69e90a87cd2f8a486a0db4eb104bf87d9f7cc87dc294e6debec7e5819f3f26bdf4cac91f8ee94a826df99da39a4bd6d476943428e3f5009546ee569d6273f7ecb115538c6ce8fe150249c89452c2f0cf0796208a216fc2cb55e1b6c892778f15e7f8b78e6e97093572a29ca3600c72feb4e1ef42a225da695b3111777f3833e306f2a90b8ed6095127b0f13be495a3321bf8201955d40f6b486904a4e1f4c9965563d30277b30cb0d1ef375338a25314fc5abce41f1e95118e89455af9e786cdc460e4e48fda5f21cece9b4e5276523d6919e165df5efe59aff13067d3ef0e82259305942b5f25e831dcb72f5c7fa67ceba7678078d8311aefdc91916f8c1db2ac61188b46825707dd26d29aec734df8bebd7474277908b2ba9e77daea20c395253b3cc876e5dcac960556072bec36e14da26c335b509a38dbf3037d620f4765e63b946ef8ada1729b1323acc8b5e436f3967ab7cc033ccb7d0c9cc74d3a3faa2ff2afb1cd571e3749cb0203e70756273fc6a4d80cf646d551f3a801ca513ac587f0ddc8c58870d817ea2671b2ef30be91a45dc730c6636e7de2ec235044b837ed9861dc89e4df342cff52a29ae6b8d5817fe31bb3a74d0202efca5d94b4d232f3dff885bf52f8d43097d069ce81220e8578c630d496b01fc60562bfbfda22fce6ce68564ab31d1a3d38af2d7b73a970b9b30f6c48dc38991da402491b2d643e0f5e71bb9c0aa834006ddf24b7dbb180f68751535d8cc34823ba3d1ddfbfeb6a15655118d4e1e11b255b998006906017ad9978d6cf4a45a669eabf653363391e77a82a9da14d184a50f1421eeb61411e859cf6f98ab0846ed5345b63e3ad004d1ffd1e48e6574ba7d832f7ad1345b8df27f7707245b335ddff2e4ca1430ec44af208e633c25678b3cfee96424ca026b159bb18c1bdc51db6c66e8788e5aadce1d3e531c9b02edc65b846763ee64113c0cd0d23824c4baf3516e2c8e5192afb9fcd390e51b3bcdcc0a49f932a6907b38713e2229aaa9abc5305420f50a2016429012e835407dee7d8d0b8404655620c3df407e7be2a5a1e668341dd91224509ffd48db6861f558d098954f83aeb6e426099cc4291da311c37bd46c8d80c3ea975e0db6ce12dbdae9116bf08909431fd5483f7cb3076d33a900d56c26d6f151386abb32ea335f5337683201a1ce5d9df25c5df29a375d2680827e182b1aa0813ee7f9d273d7ce1b86194a8cf48d630a5be0b947245c1ee0a0645500ce2ced6dade1b63c0e7572260cce25636778d79ef11ed5e3c42835c8e53a6d26cf85293050cedee2a116e5f38b9cae91a503ec9e0cf784d9cfdccedf95971540ec37926eb43b27cbff1d96b83f80018e6afec70523b6672111a47f9922db34da15d7ca3cc3a77f1abe7221b72d43d2cb4c23fd2bff6cd5ef6b31b6a4c65babcdc918b0d99fad656e471a20a8f4b66d6e37877da1a8b7fb7a8692d6d578ff953b18deebea1353f915102e4d2064dcf8eb0965a2f4c2eeda70b4177dedd7597797ec76bb72ee422ec4d16e494ed77c9bd843ee01885cc3aba1f77806e8f501b856935494918ef83379ac5ae1e06697606053a8c5c880975d1f085c93f2adb1bd2c6ae07c29bbb245cac4726a20a2f61ded013722eee8878933a90319cc8cab7a2bc69dbc79767ba18fcdd8f9ba7de44e9f0575994b28aa9e3e7b4c1f2ce0eee264dfefe3e1600cd969683551894d28b690122093105133b22ee04a50f4883274cb929beb1bb45444ca5d470c0ac611c4990eefea25526f590b269ad40d23842c5b5996c1cb393dbff28a7e2f7cf04ac30fbc2d29ece6708fad830bc523fa52d2ebbfda27379e8c48d085b260a2dfc2e8d7e1a94a245b518612bfc9ca0260c8fdede5298bf584e5d71fc131f5eb6ad2dd7bfd42a77f523eb0aaa787003fb71b9a64fa783e918595af0413fcc0d7818a514c055a48ba9b1bbc6c974f7cb55c3af3edf117835d169e5e2b31e4278d0419b23625ae004171eb2ef8c231a61331886234b402886b4993ca6376f8664134cead1bea142bbed5d46e3bb71b0f8a4cec0c79a9b5f6c823128d02063967a5363b6bd6e242fa3fd21953fdb57725f1eda22984bcff8e40f2076fc0a462706dc2bd95dc447a2aec2a8a4808f2930ff1353348942e28204af42141fa120c8e5fa9c225d16f3624deb2ce178fdf594db504159bbf475e8bee281e3c8ebb29b404b3fbd13dea76df5aee05ad6a85054b838e149d0ebfabe61dcbda6c3494e170e75633843a01e2458b526ac5424177d6bc4706a09694be1c372cc79cf7c4d82ff4e62489d1fc7819d749710035a6fac239d716b57a1af1346c1e8420dc8ae46fd18245160d43a40c564bf11f0232bfd1fed67ba1aebce120ee93a0a000570b808d9fcd60b622c59ad53ef535c1db7de15b52ed2540708eb5baa7195e1a86990b6611ad5c50127f7e876f8031856e9a2c0566f357d6c75e6ca5f217d428602fa7c8f7fb9f3abbefee76d88b3b08c3be2f0d093ce96c6a00f3a157dc0a05e1fc5d8de583c25e09c77348f5825fcd4631396f3e8c26f5c1432784eb8c377fb520d28aedcaa5addfda6eed11da4d2cc91c2e3c3728c763c9d58283af32d00aa1910011a552adabee99d1387d14e582cf68fea46b729eddd0d3ad8eb9125d5fb060f4d6f70a166cc3ce9b02a7bc65200399fc2a47b90039ac23afb853925195e8079da20cbffea72365158fbd94a6e0a654f6c09a8032fb26df99913c2300e03428ab3cd1b3f7aee15460732d445b4797673b47a93a325b2e5157106ade0959be9c4562d5a4292a9ac94940c66375e559f34e57a1158b5d77a5dc9515bdab63799627301f19398d84c7afde812100a65a1642e9515a30434d344b380a92eeb2013a0f63cba648c37095bfd985c607b120f1769a79f1fd7c03f09f966b72945606ade67f9aaa631948bb82f9ae3f89ecf6db12c02d174f62ad6e1b60f4819ae19f4979e0f9dcf51bedf4b1bd1de73bc2adb1923544ede6dbd40ed4c559cf1f079f5dc8986691540e13f5a2505cc0923ca8fe2608ec92b95dbb5facc320e43b2049b79eb02618f6fab08b7e9dbe00fcd69b338b1bb6a9beae531972e16a19d94bd2273c4d042eca34dd7c5aebfbf16552681ad4e243824a9c5d0d8b8d3aba4c102fb76c216c230c2ec34838a0817b03a04480c61c899b2e442bcf2567d4e73000d9c9d4d0acb712df0183fc288634cfde234b94fdbbc0b7e66ea5b6437f312167b1ea93e2a6b2105308d8198a2d4054ba2ff2855250e0e6c952364056e2d3d09e5a2c578837d6521ffb82780f169d07f2f032b34d62f2712a77a56175017257ea1caea41acbbc520b429bd4e3ec3f9a6eafce46731dd3396f1ce1a6198927fd2dbefb3f77c9173be0934747ca47b98c6548c8cd07249d9715414b80000c8430575d8b8903d3923089282a3ccead6e11044c67f3d5d8ed8cc0c0331f2dc09e1bae77ab55307e6445ad382451eff64faca8a4c0cba7cfa2fc9b087afb040e594115c35ce1dbec69ef1e5af8003339afda5faa1be1a3da7c5cb84273009c32d300fba7d222d2dc783241a9414ee30c8bd7e655c09a7f50dfb249ae9b15284b971503f6ce8866a1b36f993acf28d387da88c8defd323d1cd91d4eb46ff87458269a134675556b067a1b71829b7706ba58c93a919884089dc333c9b5d8279dbcc20071991762d2569c8ff5f21783e2961228b2006f8805750c0f9f4f9dc3df86dae1ab98af22143966a6ba04ccbb2bdf90e91e1f2595b979b6934fe132eda34cec0f83132f3867a197a6dfd0d43528bd56613732704bb62b12f4ede7439b2150384fa04db658fda2ddf97ab571f02d150c50c95009d0aa2e553019ac1cf9bbaf15474bf66d69224913b11080badb47d4a085fa13e965de6e95b7aa6e07bb212774d0240738cc07ccc1670d33c100cead3fb99c3f32fdd97c9b16956b1c22a90cd5c7aa0d920dae9e2b149fb5f9870129a0e97d1edba0dbf8fc4fcca6c65c639dd3eaa8803b1e9e601907e086ed1079ff6bc6de941c91df0634ce3730b8035bfdfa699304666920bfb092354da1f0bdd28c9023bd2e152e931e82eeabb86b0323c789daac94422eb7855f18775917e12feb85019e2e017303002ff8e04513ae0fb03f334a76addd8fcbd69ed25931f44044eeffb5d66cab5a22b21e85324946ab15408dd5d68b17727d2e4779bc378750eaa6ef6e943966c0dc4d066c6b8b8945023a0fc49f81a9c15a35d350e3d741652b8a8014b3649dcfd028f25c0b38b7cc14f7e375acfd3960af2eefc49ac6589f38791c9c0b0ea4e55992274052eed15cb8de213794636c4db2385eb9bcfc28f8a97e7c7ac949cd519ab62d1ab10d855a7ac6acda00b78d35d80a9ab4b7099603782384c461dee90abcc14a539779435cf0677eb0b6ff7e47488667788f9b0fd7d5e0cf53aee5ca0071fa30c062da3c44e79096e24594c6e202b7cdbdc49be2ddac8058c7ded15f07d4c413886fdd7017b9fedb86e39917fd1e81b294675bde06c8fac0dbce7f4b90b3859c66f9f6fec640c6781728a8b347da28b4360924ef68c3c740ed5ddbf013720c6de54d9bce5232864f9e80a652cd778641c327876b2a3e1049355a58fb5054aa17064e97142d64be9daf5d1b162566a009c69133f60e3d4c2a53c153185c659d16236fcc1690eed8c6c2e4f8b172eec457a9407003ddad723e3b183e81b17ddbe46ba368ab3e3ff574d9e3fb82e102ab46d7f608e235d064ea963fdf1622ed7278a27fd8210ad39c3acd9069abba71ca051b64561683068ca6a1be906c196ddde1839b3897d5af8fee51614d73e51511b03a5763f3ed3e64bf7293118dc321cf5e940a2829c6b8550083d66d31680fb55af098d9ccebde9882f818c29f4cbb55c26a97c359d8606bff3744ff3efc22e8d34e67b7c97b567483963c574bd1dac8c46c911c48b6e29e73e52f8c9385729a73b70d2ebba9e744247d9003a962fd607686e6c5972b59616acfe327d8b736f38c703832d7690c6474641bf87538e785353c1fd7df1b5ecb1200eed8c5857abd16c26ae72d0147de475b0c4bc98dbff530b334c9c50607bd46ddbcb1ffebf7513cc842e4cdd6c8c00a284e81cb531a04f75210add4f73db3da9783694fc541cd470368c8776973f02835dc355ef54ca90a580a45a2df6137c43b151ade1e51bc879e7fb43141541bfab79b3eaf0eab323c7147ecce6eb3eb3eb02a204755cdcc7405ad903b91fa47b87262cf77fe395a18e269ec36bd534d4939e78719d7c312ce5205979b2fb92fbf9e1d1effb0f663b9361893fcb11bfd66c92af3394e899876990883e9f5374b5642c68e8468498612e3848d367598c2cb0806b7f0c7f4b004dde2b4cc50161a4d293f2ec89c4cd35a767736f9282f848b9d1cdf405f61abcb3e50ff4092d2afb86fdceeec4791d892546e29495f97876cd8015f193113f1b8584a9ff3f32650e29126b81254961e677b6f67023295567f574364b7320313db988616ac123368179beaabb5a56257f0b6df8f6956324ac31d3e8db83dc994425ad80e235051af62ec79a6dc4bfa36283af72af26136c8f5eeb32e1fa1b9e21a228a2a12aed39e717e8f404334d8367ef3edceab1f3e250ab9dc1e89f9b84e658d38806f4d4a09ff07ca539077a5a496699a9d7d4aafa78120eb90f404c2a6ae00aa1c813b25cb6ff9dab8b66b1dd83c80c1225aa24a47df3cbff7f6842d9486bbcd4179150e1bcad3caa604ac1db71aac913c9d3cbc154182187e2aeb852011b22e40b25f9cb31ab7f458a11b1836085c4a99a633215684e7fc70646ee2158faf8329c320a3bc050cdbbac216a18a88af2dd1bb4d648110c5c90f7f5948128eafbe36c01ea709ca8b5fb8ad9eb7384feb7055220aed45690664b0312052792a5b9dfc90a1248995cf68f80b7822fa577724ad143b1d987d2fae7992d3ad270e6b1fc4f1bb3130f134607e8129a6b1442ac05f114062be3604d7cf1595022f49e7cc55282f0f666ad6ff3b03d692c2a66fc2eb5fd0751e4514229861e2343d43162dcbdec156aa5f2c5f9aafaf470f17e5ed688b3516647b9a1a220e843791ddda20fcc444ef63ba31fc27e62fee4676f097f3fecc625755b26ad48dc7ceec1920443c6c466c7bb36e91082f115f4e563a562af1ce5cf37c45bb2da72ab39ecf00e0349eed7e87994b6670e8bde4f4f9142cb99f6bf36eb41bb4dc72b6c6a6686b63fa21c167b1ba5ff481abcc2ca29905d6b75eff932296d75a90080f3a727690eab0e804aa95b545f55107d308f4cd9884d75c28388151a72e82291f79eb52921718903a8bf029a3e7c0ce28f204926dc221f78711a08834a917a0843d8249ca317c7154b88a5a10a09d7477fcf2d6296725bb6a69c2739964a768cd6ae51d7e7de63bb17fe7fabebb0ee46c285c683a41203d059a5c89024a7f3c59915121921000075ed397d30ada6d56e6caa685cb98cc0bf279fa2d96408611ae7e43c3bf70f73148c6615f20060b5c337c6555a3bdb1870bededac9eff951cf1c7fd4f0046d7661789bcfd56fe6198b502e01f90333ad6e9354db449435d0506526bb0c65595dead87be428eb1b988906de152f9a7f126ede6b933c2de1f7d20ec3e64c7468906fba2bdea8b300bab203542dec13a90e4195b3f7da1b669bfe9e8989440b24807ffd44d9e3d61e098caaa029a7063d25604cbacc5f2b3671a163b80a440948230ae90dc3bd7fd46b667cc7d6dba2f53775e9a2180ced0e1cdc6e1275e741607d6dfe40f91ec81602f9bc7c26c322b82114949fd17a9284dd2918326b7880f42db6e468b80f980db98e31ad57be1f131407a0d099cbad9eff25916048e4210c0eb0b68d4d11cc1545cb46114b3969ad0d7a6570b7571c877ed8060cf8b736f8c82ddb64d19fc29af3453f0efe33c68c21c7c8c054707790cf5c056d0ba408d077fb65cef8fb071398ce35cc95c48ba546230f4dd60ad633f81478c87019736044783599a17d4dafd30cc6f4278cae2384763ff2ef395b8e7265ebf0453cef5c98e62a0e48ad422af17a4eee1acc10a51a3fb6e98594309e4976f71027dfe7a9593cdb6860cba745f2346c8d4868b07f381d3c137b396780545e0ea331e586b176821e45f67761fd8b4c6cbbecfd34b72201f6145a6b06eaa8fa9872a54734acbccad497390ff69f676c496258479aa06d9fd1ecec02a01216fd66554afbd5e728608f4572a4d485e57ff5bfc3df00", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x90, 0x0, 0x0, {0x0, 0x400000000000, 0x10000000, 0x1000000000000000, 0x0, 0x22000000, {0x1, 0x1003, 0x0, 0x0, 0x4, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000002140)="573cdae347c841118fe35ea61e94536ce653941986f87c98ee6a76ac724af9b565026a463ad91208a4922133daed949a8bdf7ebc28bace2fdcbd2b54faeb28918a14c0fc77da3c4a5e7e71f8b06d0841a18f58c298b9f7649af6363fe6316a5ea1b011fb1910052857da033090bfc25d333da985ed403dfd9ce95857d66e396db86f44573b2043baa49ff4a6580d46400231d21c9cacde2794d306215ff4b64b639c0330f4299c8ee81bb9e9ef49b13695c3fcdfa961fd1aec5d9536aa64a7131df4085dda0eb96a8e4286b40e07f62b8c3e7addc13b8471b5d1c0b5d4c72f9b04114fdc9a6279dc0999815f21972d6a751116b26e7b6fe7d6d6d606d70cab5ed3dd16b809528188b2c87f9595995e26b1aaf8fd4b924cfdb7547050148900202c6b723eb23a29c745c590d347f297a498558815a8c8cabd9159d4e4d7129d211a978ede65d6b2c44682ffe3d69ead35dacb5e5974dc680103f4050db345d6dda7528c0ac554e09c60d2efa507be27039fb7c426a51075f9c1384e6485efdf6f8355d1d9838e15a46b355a3fc1cc6adf8e62f71a421e5781291fe5631db40c91db7929ab7110dfe9ec72087117b87e3ecbeb21b4cc08f7100e228541521aa303e1d1264f535eb21c13c599718d4e818048f7a5ddd636f7b515a0b77aef7785020888d1a2cc215b9de1e531a441245bf37c4ec8dd1c2e3ed27a493c1de3e7aa80fdfa1f5620f1fd970f6859acf5c7b689bd727bb89dcabfc134a524af057864d6cbd3225ce75975d3ee1180cee44630e252c26df1df91072121df45b29d61fc198f9e23c45e98fb18dfb0efca8bf58c00a10134dccc58ce891a3196f7f64f4b04dc6baea622b6eef7e5629b23a106b1bd303b6b120241eccf07d77e62f000738c0509fefe00b818198be36b2952198a6a4f0212fa9452bef1619789542aea5ef4f34e5e6ef57e69b5009b1896d126f5ad20343cc26469757adf22b2efa381161fefdde73ac5d2314eea115316011478d7418b571490905c4f056c1c70e0c7bb39ef8c4ee0fe1af19b5409460f8735b88733dba56d4fab48ef71e7079098f76fbe8f7f7ebc07b9bc27ed34322c67941d4044f9dac9b71e0ce9f4a59f04109ddad37dc6cf55c757344d04ba5a33b7fba3f11545b0e4976bca2ba4afc6559514e134f3a19e0854586e10bba23f674acacb712ba651923fcd80d1eeb5b6c7d737535fdeb7b93d2f4ee081529ac62c915575fdafd469fa386fb4a54c56b2afada227de28a27a1e4d2c09319497abc65487a50ce28d1fa6c6ca75aa7360c8433cf03aa501dee178d046160473607a5fd5d88aefbf52a8d34b5e806ca905a9cbdba7039dffad3e01164505d64ccfc8b9adca84b6d7b3048d4a3accf3873976d806e084fb2d1265daa3a535c88560abdd3c4aa74a9be6a790ff569b1bbb3a6d64c393c793005c86167e2f9435617a591e4917363baab0344bc5fec9cb4a737685470a98ff126a482d276a3a20ae8e162c52921d23cb23a3a68cbe0c49eebb3449aa3cfdac7ae6e87d05f208ac11d6540779f1085d83bc7fbb37932be95af8bf224ef54ac86c4afc72843d658f3a4862ac8e8dc011d259705708ee0f15277649cba4f62c40d0d1305054ae42a2b7cc2496f6dd8579a1969359b0544d2a11d94a482850a135ab05517d3fc1e2545b622a5438c9f1dba636baadd09ecf30350a5871af20dc665a6ef9ca89395566ce45284ad28d6533d86bbf404303140dadcb31b8b921578ac0d5b20445635457d7f263c8f2914bd3fe3f0cf92c6196965f0fb5d6c89a3e9b98fa559d0f680b9bb6d4d03f8ab941e8c73c1eeb7ff4a974571369fd9f5f36261892ebf91ef74db3dc9d8a7899bfe1d98a697ed8be84ba408ccafef6f40ecc0cb01904a2c07d5a615335cbbb7f63c331871f5438294ee179941867ecffe8b098dd02798675f4ba191d8c2426b76c358fc24614b49090265a34d94d724969613ed7a1ae37ae3c3c14cf81a901c747e7418681b5c8bc1fdae7517d21baabd812781b409ee8b21e6509cd51409412f4c2ccdbfc97914bbf93d10a122a028c8b29cf936073e9fbb11f22cafc36e9c7241d8c3bc36832393edfa2bc80f5d5edf96b8dd6528a0d6c4d34a8a5599286405f2e3a17df7b79ceba0ec7b89f36a0b92d364db2dfb8dc4043660af7da6f8aae5289fdee41cda0fb90d5b5a05f9face68d564196053e353085caf64320cc17c824160ed91c1f3633eaead4ed527690581ebb0eebef44217df34c40a038a83a419b5868f357aa03f85b99159cc1998f4f47f6c48d0e36d267bd8343f4ed36b00436245a49114d3e843ebf058d94116b314f6b47f90a743c1fcab1d4e84b06a005668d2c627a483bf6bb862ad003cb543dc5f462286ffebbbac5cbebbea5859aabb33695359afcd67bdd07bf018d738f895dbd2f17d76e1bceb04fcd1a6cbeb98f4c9cfb2803b77cd80ac6469814c8dae0f365ed5d6c14bde17ce0966ee117ebb272730c246aac3a61ba784682efa1bad7e194d940836c8c897b10749c15504b1eaa8bb9e46ce70b57da51f6a4fac9aa72394cc12fad56468138459378c175d986391faed6e48c2164998841c1c7501b6821a4f2b94ef7e97183148aac4f550f70d58037f16248f5ba6c03f750e96c0024489130be01acf9b6c61131db565debd6103a5c3dec340b6b35d2f29ba3170cab2b1328f6b178e333c0d90b3e9fe742faaed2733d45661c08b9501dda609bbf4bb701f67b817ca7270a9c3f5f04259284835b4b1397ae2171ca35f7254b25b42bfbbfec7f752b8bffacf50b84a667df0822f08b749dd73b66b8151f96c841168f22c735eb6f1334d0dcbb643213909bc2c3c4eb8f4cc3525e59c6c34597c384b4ae99ae6fd6d8fba87acf83197c54e580fa937a9c3df756873b9b323f984b391342c817f4a7d5194595b9f3b325ef9e976ca4d998823763b3cf6ded38d153fc19e56759c6b56006ef1ea84ffa61fdf0d49558f1a49907d429b4e91f8286bedfbec35e7e253330e9f04a41b998b08919e7b29fd3c6c43fe12a3b910775fc2375b3fa264936590b6a3f5620a6dfee19a865cae72214e6f59960270d1aab7747228396073a6695f06915645266b99bf92a0e92aec58489b74f0fe58edf334d3bd696bba8b69425e5eda5af893a84ba5d91e57b6707e68aea67aac95ecaf4cfac07e56faf1dedeee51231213f3fef9993965354172a5d5a6eceee95a7a722d8982b4776fa5a202a4899cd3c6185c4d30b520e116cc8c54645f4ca58ca9c9d863a0d75cd968ea2a0f4732f9202e2ca5460261a07a7b67560bc92fac2764f62943cdb510adfb1fe022e72c46d47b47028720ed3fb7941992f121b41a12e1179dd556c5a7f9e35741125915039298534d2d2dc8a497c43ea0d3e87c34141e5b4615afc523374ce801c0bc11a6fce09c9ead5a9aed2a9fc2dc37b7004c797e16e300982ca09bca1700ccf661c75b2b9690186b8f703cdf99daf8aaad6185ba250269c1e73a0c26dc630836d1620166a35903811e6d117e5a3c930512277a225de9cc608bdf9a45eb85e6d1e2884d49d69db12a7b6b7e2ed62540bedcc823e199f8b58de4e554b92abda0296d88ad407ab486a1dafa2c10df2ce4bb963033387d1ea87374dcefeeb3ef1d244a0bf634e430566423065590a2c7adc5b2c44b198aa0c6af049e13c932588948c6eb626a962f22fff9f16f56efdc1558ccc8b318c4c33ac26bd6ca9e817712abb951024478dcec2d666edf93b726b67acccec6b681d800ce61f526170ebbf27841d7c34f40aa4fff268f70d0c51b87fbe90875d06da1de6ee8f162c6fb28dc96a8fac1792426b21de1722fb613a78e1f91b0594343f27e1447b5682f32ccd987bf417d2f352da3f84d0137389310612ada9a7288b665906eb0c0d1a4e3faf336fa7431e8213f7442cd2a41bb844adf8ce45359e8014b1fd953dbef1488253bd20521ee8f8b599b66771fc1acf1c6329117b676a0755e71e01d857595633d7bbf169ec3eb8412e7c6db2b5d5e57529587d0eff89571ef00d4bb2df8247f9118d0e7d6b84a0313ea2bd45600c9aed93578322155d4981fb1e767699701599465a22c82d11f6605785bb3829356f2f5c65f51360adc2cec8db38a4fd7c9cdb67df973ecece36bc7ec107b413e6a7877951214694cc9788477f51fc47a80b0f7f2b442cd73bcd2e4d2bb9ea0857c69fc5a80a0bbdbe916f98d77c5db6576f725f093133448ac90612046b8ef8996c006b555cbc36fd8655add691b745e1f3a53cc72c1c78b1f1763b03b4beb5094711ba1f38373f248cb31d790e368f458cc414141543f7ee08819a6af5990bb88ef70dfd9439adc1381e51b829073469e100a0d13f3291d19f988df805d3f03dfc1f6329de690b121c540837396657138d43e2478002e39cf3333097c40394cde59b05ff5990bb84242b8a1cf01390f3b775f0292f0ef71d0991ec18ce1938a762e4e4ffbe25fcb5e3e1e78fd3893714746001a006b477aef0c7350b0c9dfd08a816b7c20bdbf0667843266ff008295a2e5e6634bfd86c3d2e89b8471f67f2b6a6cd640cf7cf5e648700db74e82694f16e38ca803e1b30054c5f326f3e6957f1c9dbda0cd51d9eac0004000023beef69842b27ef72d9f12a082b54a03e89c55133ac25fb57b37a7f8c0e5c2a92caeb25bcd5da24aee54ed167f8d4fc913131f08004a50d2f1bd82b2e3063dfe64b1bfee55c9088f2ab0ca114125dd5893c7abd9be8134d7ae75a1d37f99e790412ed3e7cab53d3d121878e261398340add810f573b3cb18cb5a163b0a431c6d583f4dc4f385926517878b33abde2f28eed2e60101b9e02a49678fe72f0b0edf125728edb3a9fd569ab63b4f6125d5542885e1c8a9db87fae063ecfcce0d580bdeb204401baa3c53f765f9098b7e6e4b45014c448c1b6e956d536b6be2aa82ebdb9d7084fec2786d525e154c4df8696ac125c0320ca9ebf949ec8f2d3143b6a133be6f3cd31ba714ba4ecd56926f039e5ebc7c63a2c7d493607a588b250aba69d8632d161b3d76a272fef47add93916149a21b1c4827de5306ba3df41ffd0505a4788a162e00ed74074a6a1324034ce6ddee588ff51b1ec4528a992f6c1e8ef8dce1e6e63d7af3f6af2984c9372fc5338b91c354f36cb8b0a10461441438da76a9a230dd46c5051f584a4a9e54b0e265fe03c83d45c36ed5fff39b1d28b760bf9c2570f60b0ecde3436681897ffe9b5c0e2626fae3f637e3e74bd7f08fe4996bc999cec606de4398191a33103fc78998351b806df07bafc56fbfb83bc23d3d6f74544cc3938ebe5f74df23f47aa427648f56139ec33ece6acd1dac435ac6e5920e327d063226ba4730c4db9ba0820470810438f0985f4c64c3b0b65188f95e0420f45f525a0603d21a344d4126a97ca0d8f3cd89ec5bfcf3985937647894d223da88c90e98e02bc006171ef3f736e0ebab139527d3dece3f5df204eeb4639588d5d476ab4264124c63652b2bd4b6127785220521b88d207f3e471245aef9c8e1d23ded80b2a5b797058e2ad0c153f1ed89c8aa3127979806dcdafd2d9482bf5727bdf21e064e428996ba14dc42f61ff4874808f539f113679edc7ae20df1a011234a0c502e393a13354733ea9f4289c1e71ef22f553d634c24d1d782e083f392d0b75ceaf35419e1562c426a654e7d83a8f7c6f4c6430f798349cbb833c738c0955911085d1d69201b1e27effb26e1ca11aabb1dc199a8f89dd3329544549ad4b333caccba41cfe744a3157d48db7db8ab612585903febb995484e4978cc5c64c94f51bda5755cd20fa3599acac5b874e975ac95344047ade8249a0a4068437ae3788e1b58a75db801e43542482963170772b6bbf050268f1feadaa238105f2f3fa36e22c1ffe9306b1293fd4a35b880f8ce5143823ad09000000613ded842051b9f4136fe2130d1799d35804de729151295143fe980fac1eeecd67e3e3caa7b369595edbe6110d89b2a7e3e47015e58d1d45e6da442720499eee974c7d6078ee14f593cbda9fe55a222e59fc026575268d0bae8081c1b7aa0f241c360604d4b66ec6e487e46419ad5916ff2a317bd70a47ca4e908ed02028be4a7f6b5f1f525623ac4ee3df1612290d2fec30344c03aaa12f372f88c7f0d56c9075230dc5a2c182040598a0ae4131e149e51e84c0b1acf866d0df0f04c42740dd5c6a0fcfc62cc1a3a7820e4d25c2e6928d2fae8c78fdfb729347cd1a0bbbc22e884a4923f66e911a7040d1709933ff8ee983c246c4c22d80ca5973a94bb6435ab5cfbe325e4510ed560477971ceb204b9fb4ba2a7004469915615b284c66a4f61bc2b805b3b61860a3f5bce470d39741edb9fe6c9daea74ecb8335d6ae9ca7d586bcef9b715ffd762793e759673f223a793b5ef6d9f85be2a566a523cadacd9e0d7bdc674a9ebff9adfc44b022b6f383a40f2e7a033b7dfe1984991ade07740837de45338e0baa0dcd32232f03749cfcf37393fc3ec34545a1a2b913d95f46865ef46f6d7a0f1f70de6d7127dd529a9236c90be6ff323ef15069c8984676ce9dcd219210c9073d09eba1b6a205750abfdd0ed82c70e1d77380c11c9dd702f510e7d2785bd7ab3aa83e3763cc8e55ed1902160124adad81ea73733e8c09eeb7e4257649889259b8485a22ae41c945ebdd06612a4680f5a0d9419b08f2759e35c1f0a638f2d9a88c284e9fd636a96ba9f91a9d59e9752be2841fa9f825d66f8142656ebef15f98e58a7aeb81c9dd60c5e7aa291778abfd4512ae4a41c4c001a5837866bf7f4893ec6e528879b33a63ad25a2eced6eb974ef02f7450cf1cf11845a6688d9d52e6c95dbda0095a7a490af58eca8f42bc0ab5091e711594479a163334870d30cea52b9d9117c419e6efb8ea082615ae594071bcef0602e28d2ec77b6c83dcedf9d6ef8237934cee246a08ccdc7ff9d691b10d18c997a71d6cbc4c0892a3c2e2a82938d26575fd72ec7e432e1401b1f7c0679db72d8c7fe53a2fbe6623d10dba4e530b18682142180beeb389c02a936fb348bbf882869267268092348471631f1724299475c4fe82db45c30c3f09e33b0f0d51b1f6f1cb9e2f26b9a324364c15058074552c4f1199158d5fd6bc527b583b38c18afe3ee94cc8021ba7ab6695c75bdbbeb9b1626e15db0e04c443832912f838e2d01d0adb1c619df5ac8e75af1a124d1d493f8b4297dc56652711464f47784d6bb605e10d744434b653515dc44658bbe217824cf6bc0839bdcdc6ea767ac0446355e40b6a00c783b9a9b1b5fc8a4835301c8cb351151dfc5701cc5f6b8d11a1a6d12a7134faceabba8c4ac0d322b75c61e9ebebdaa754b67c0b4fcbe396ceec8d92fc81073b18e0e6b90d6af899a8b25e9badf49eedca63d8e1c2c48f7dbd6232202f04aac68f68c8906be95ba00027295ab2ade0c2ce873c900561f42a2d24ab6190978edc030a96c189669fa0a5c2b7e5957d3e94738df859d4845886ffdd9f1b8c5037e238010b923e10faf48dd6cd472d2912f5d126cfec0dce1afdc6b5e952c361f1857fce6a13ceb70256bd710b77ba0a6e35a31c3d87566404467cc0655f43cf0d900ec46a8b8e0d356540f6a60354bdfdab4a40832105f2d54ef62d0d0d0c266932bc2281f54432d26af40f1b487e6b969da6f26603c8808cd82187356f80ed726e0626320d7a49fcce63eaff547133dbaf33c9913956da039f3d7c65706af18012317ae9b0825cfca24bfa8a2eaac09afe1ad1caeedf130951da1a6f4da1a0e72c0c91df35759fa279449cf479b37be2df309835a50055cffd511d3fe2e259bb5d7f0a8fcf33d854ac53560700d79e1a7b5a5638bad33b5e60083379d562156278b431e42c2ad24ea6e9fae6073cce7833d0eb9adbccd180ae4d49cf4fddcf804986735b446d70dd3221e05a5f17c1f4cccb42da992db1e211641f23027985a89d6c5cbf51cd927919c6f125919e6558232d5eab16edf965609e028194323dfac5ad55f83e979bba312aa4d6be6f6a4c4440b0e6d5787d45da93e6df38434978083bacaef48977aaaf253ec064fad3854eb47b5d5343c991750bcf9105457ea81fd3fa2cf2971b106c4b1f83e7cd51bd985bef38b0ab08c7ccf6af406e2a14c15281d47b8c94dbad41971a26fbf0f2b5f51863939b94e12cc42aeb7e2eeaf866b18aeb147065e3888759b2f72bdebcf10003fb05cf8b176f1398d0f90381dec9236c310f3625dbd4f71266df17d9f1032cdc9d13a6e0aa4ffc192c1b150be795079ca97bf6b5287180c5669481edbe824ec0b30350b6519afa66dd41eaf6a6ae07d7621453ffbd5297e41bf4c87fa81a2c1b54a683e6261968e7660ca1e1d657903428f0d927d8ede3375b59aebd5533dbfc7d4205fcb28980e70407aa2050efcc02aad4b59c8ad4035b9f5e9942b18f1b146923f5589dbe177f9a9e1433f86384031f06db50792ed27bb1d2f5b34329f260672b22f56c6a0689481c801e269469baddd48ce38d63cbcc01e7bed9c0a27854e7e8441d21b3ced8cc89b7d96360cc2b5a611de591af80bf2a4fef52b697aa8b1c246b4a7972c5f3bf33522d5edf327afdab982c87b9ab1e130fa3c42cdce3f5371fde593f2daf1181a470c8b12d0fbebbc29946932394990d95de80fec6c59fc25e8c5c8515d2ae055976eba91c0149508247390b0dfe506dde29790121f85e002ce79f5e1d6adb6de156ddd210de5dff80c16624cd0353dd6d49706a0a387bcef4bdbab8773b2d06ab377e4daeba4f47c1af76d9e4bb6131632f7c252dbb0edd4402678e9c38128ea1c81eeb4eeb77d3caf187d1a78518952c3c899c1b80d2be25e4c4c5e9cce4fd461523be18d7485895c2ceaf9d84bb60068bfa6a6ad52a91b34d0a296807b2ab4a3b0851c8de14f3dc61cbb7c0d90da931748b5ea2153778ada4e77706bb50502f856dfad67b94a81ebb865ad5bde577a6f0b3daf72b11b3ae5690f454a04a6e8139b8958f5eb870c3a4b9f680c4c9487d95737eb645735257677a63674e70073c80c6e7a041b0b442c47fe50c6f9595213833dca92ffc5f201d5e982ea6cf49616ff842349e295d4652b364553fd1aa75cb57e10efd6b71a6617bb620d62f7ee269311571a6d1f7b5b9d63c394c91b19888f5f08c7f7d52a8780111c45b88b32c69c61a2d052d133133bfca1670540757117029075a402e67a117a13a9eeb25471e02d12c4fa9c3975dcdb2a921284eac037a679a05449a6e928548307498b31a26ecda266d700f574fd7ee2cb3a711348cec877ced4748f9350f89df40739bbd656cfee2b5344e540e2e0659826d3345e2d887fd46d2cfdb0417e0616ef60207c5174844a208f64081d3f4b020b2322d6afa6b1de44690c4d0c66dc55981430056f8d44ad19fd4704d0919f41668cfe68f375e823b6dd52f9d3de2aaf02ec8f75e87130f241da7e74c9518434cb9defd359cd52639d5392baf81e11376c1762b4e7c74f0bdb93e0aed049f4ab9e3c54d635807eb01792084123efc0ee741fb3874320201d5c00f99d1830f0024b956dca56af8127b154a0ac091dd34e1de456e34f380f75549c0ffcdd5e4a49e6c486eb7880d09a81e9e81420644edd637c3761a511921d95d0639d56c7a0391b60bd2865c0a95354ab401cece64164f4248e943683b72e4c1024a7106a70ee7d59fd83701887fb5635a2328c417d34e7fb34879a0e15f35af788299b3b5751ccefc8df22f721d6f43cc334abb3c0c72cbfc6d25bcc33932e812f280889736d2f2c2b79bb59ae9724a3d8957b40fd554769855548a1dca26d38c80a5e813a08067c5b9bb298e3e20e7cc0e8830e9c89dab4b08a5cb1c23deaa98ede5a612a5dccf4f0b9ebd22ca6410009575506bddcab11046045b08499bb5bbe503f73b5ba47c73237c40eb220e24e01cf879b1a5df7e2ac6d4e7af963bc85bacce34e71d069c5400c615f28e62d6e0326b8406cac40d5eb1afdcf9b3ebafc458677e4f818f97c05c6c1add989f3bf58e3ae730c58c54d265a890790fb2587bf7c188e4e46a56995a597c6f85c31328b362124135fa0d2caddb182dd82988fab7f0db7d48fb8d2bc6b2d13ae6a3c00e0b07e1e43a1dcfe9236adc55ef9d6e9b0c0b28e7ffa383f07959bd29b0707bd158020a67d7ba7eb038249a98502db09e4bb76e1d924287bc8b2dec7764ace6be80a8965972a6827f8ad0f36e204717285dd27cf10a7acfc8a5f300d8f06a6f6f79a4436b7c372fcf960472f7f45a38804dae9f5482468aa7af8d62ed33b760d54922f6a23b7a7d73c1ba8f500f4fb61c3cb200ccfe6fae6b5053aa1dd96b74f40b3eaf485dee7cb7a27d4b06b03790d1dd470aceb0be995ab219a7b7fb2d0c33d687638d26c38ad0348e6e1cb358aec5d70139f7557ee32187d0a0a2f4250c534c89aecdc6c2afb4ce4dea63c4df9402f69946c6efa2327be435e821c5f6c81a3cce35c95370cf033617dbf31433aa09e37771e585e019a26f7f75618b3a516059da7f4f3731ec6d43e185201e7182c6426ea9194fbd4a46f739bd0a5db377e3b71fcf315c01f5d0262c0f4bbd04256958446e0b6641a31061aa4310dd64035a73091e8963d6773cfe52c64a0bd88d61fff24b8a3e7ef9e76b5baf6c7a4e97c1d801be74a8f8eed00c299b3d041743f18b31369722a340372efb38cd70f70bb4946dabc95aa9baa7011b7fcdec83f452d9a14155251d2d88566fa0056ac04836573db2e89971dedf5f1d11f143b0d8f137ddc2bf31a346ae4c8569902ad848bbce50c2efc6c399aa066f7036eecc80a9217170bbc46326b08ad43068d6abcfd67e7a90019afcf0f42bb12f9c0d65bb1081bb0dc758eb311b7f50f5649240392834daa83771dac27f5afff87513e3b65931e2bf63b98dcb46c6b0511af3219a362864bfef035ce9f8120f679533d6ae3fe4928d082ce93dcc930756f5ef8d1220714a389819362ac67b3e0032be4c0f1f659bf10e2ce7d6f086ab8c76ca87a9e563fa6a2334bd2f321bf5e3ff8a3aecd379362f40b730b569fde8910fd9ead5d49a118ab93db512cb0822595904981f5997115ea6441a6250aa11f460385bf36e072d0cbd8c54ecc39cc957a45fa35095d4f682453f14297e5cb1fa55b8a49622142e7ffe39af270868dbd578dfd0f4756dcf1dc15f752eea0da07d599263c08bd7c0c9ce9a411ac93dc5eaf0a0678d9d1d893950b02447b30dc3692ab919a991a7e538349ad3bb75a9dd7da8cd311610397ec1fdb6550c4a5ffba2ec9a2036f2e2d0b0862669429984a12425ea873480df6f2baf9135d8ce2dfa212d8bfbf0eafe1a6bd088ebec63e46f0a7b299986f5a7f33fbe8832e89a45f0af8b6d1fac58e9d4eb283009551ad20bdb9ae84d4dfc441d03b9e07ef4167bc90031a2f22ea3e348777b52bd00eb960d245e13ff542e18f82cf10ae0d584754b3336cd17e29262a59ac28ccb5760b3705c0048b5cde36052a74b2c863c481f4c25d1f2e76538a7836b2b4e1df4200", 0x2000, &(0x7f000000acc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a580)={0x90, 0x0, 0x0, {0x2, 0x3, 0x4, 0x7, 0x9e3, 0x1003, {0x6, 0x5, 0x1ff, 0x9, 0x802, 0x20d, 0x80000000, 0x80000001, 0x100, 0x2000, 0x6909, r3, r4, 0x1, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_G_STD(r5, 0x80085617, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000016c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001509000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000080)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="200b20000000180809f3"], 0x0, 0x0, 0x0}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 2.576431015s ago: executing program 0 (id=6413): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x14}, 0x10) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) openat$dlm_monitor(0xffffff9c, &(0x7f0000000080), 0xa0000, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x14, 0x14, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809eac6e108598948224ad54afac11d875397bdb22dd100b420a1a93c527d3d458dd4992861ac000000000000000000000004000000000000c700", "f4bd000000801900000000000000070000deb70900000000000000eb00", [0x8, 0x6]}}) 2.479988118s ago: executing program 1 (id=6414): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x4d}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x48}, 0x1, 0x0, 0x0, 0x8050}, 0x240048c0) close(0x3) socket(0x10, 0x3, 0x0) ioctl(r0, 0x8914, &(0x7f0000000300)='veth0:') 2.330832427s ago: executing program 5 (id=6415): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xd4}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x2, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) sync_file_range(r3, 0xc, 0x2000000006, 0x6) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x40, 0x2, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_EXPECT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f00000001c0)={0x2c, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010102}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendto$inet6(r1, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x6}, 0x1c) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) writev(r5, &(0x7f0000000800)=[{&(0x7f0000000e80)="b8336ce8a5202841ae02ea3c08e8d50d35aee99b56c23b4da5da17913bb9b3e311ffb048eeb74520d71218c9b35be0ca98753b71dd6bcc73b4aa146399e269ab8397c4a82d2182af4b0e12b349383464ece5b56af496e9af3f4411a2ab7013629fc3f6975f077c12256c6d4ae9f226aaffe5a578261681e0be270ea401e518c723c6872d887fcd4b2ddd04b6935f651f7d8b2749cc7f61742f5981dfe83dbb47f0f16e3e01f5587edce11308964d3dbd4dbffea0ceef934f52714378529c21ca7c8d3241be2405aa62e43fdaecc48df2a2ffd24a5f81243bb7962fc375c02bc889c5a47c94f0ef4cb0f15691565fcd2890bc2ab2cc19b637d619ef1aaa04dd4352a2df8535150ef7fc98cadcec179a1e9456790f285c10c871d69fecf3a96fffc9ad629cd7a57ece6a9fa7578c6623fd0562d1c787ac3ee48f56f177928edfc4222c1a0eac7a767b30264c3bef2a4b6446e2ce162be0bd6ccadc89b264aafae2d7e72c5992fb3993af42c4719c21979b3e75f94fd60356b8ba230350b06c088386e9e6f07f37903e53d165cea4fe7cccbd364b250646632dca799fc3e74ac99c585bc8746e15b5e9ccb3ba55d31c8ebbc42f383fcd06876f765834a2fb41578469e0cd0a7c04249adb3dec4ad648f05697cc3c66ac451e733a0b1c6833704945b6385a0d7cb85a6b8a2e16d70dfb3e0bce384ae27d8a7f21b7b2c68d428abc9d", 0x200}], 0x1) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000000303010000000000000000000a0000000c0002000000230100000001"], 0x54}}, 0x0) 2.329825538s ago: executing program 0 (id=6425): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f0000000040)) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x30a32c3, 0x1, @qpsk={0x60b721a, 0x1e}}) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, 0x0, &(0x7f00000003c0)) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x7}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x4d5, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x3}}, 0xe4) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = gettid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = getpgrp(r4) rt_tgsigqueueinfo(r5, r4, 0x1f, &(0x7f0000000280)={0xb, 0x0, 0x40}) ioctl$DVB_DVR_DMX_QUERYBUF(r3, 0xc0186f3d, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x150) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@map=0x1, 0xffffffffffffffff, 0x3d, 0x24}, 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r6, 0x0, r7, 0x0, 0x0, 0x4) r8 = dup(r6) write$FUSE_ENTRY(r8, &(0x7f0000004f80)={0x90, 0xfffffffffffffff5, 0x0, {0x1, 0xf5fffffe, 0x81, 0x93ee, 0xd, 0x1ff, {0x2, 0x1ff, 0x80000001, 0x6, 0x1ff, 0x1ff, 0xa2c, 0x3, 0x5, 0x8000, 0x6, 0x0, 0x0, 0x9, 0x200}}}, 0x90) openat$cgroup_ro(r8, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x0, 0x0) 2.269996254s ago: executing program 5 (id=6416): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001c00010a00000000fbc2989a"], 0x14}}, 0x20008000) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1000000000, 0x5, 0x41, 0x4, 0x0, 0x2004cb, 0x0, 0x8, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000240)={{0xd000, 0x80a0000, 0x8, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0xf9}, {0xffff1000, 0xdddd1000, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0xff, 0x0, 0xd}, {0xeeee0000, 0x6000, 0xc, 0x3, 0x7, 0xc4, 0x0, 0x1, 0x48, 0x3, 0x1, 0x9}, {0x1, 0xffff1000, 0xf, 0x0, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4, 0xd}, {0x6000, 0xffff1000, 0x3, 0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x40}, {0x50000, 0x4, 0x0, 0x74, 0x5, 0x2, 0xa, 0x0, 0x0, 0x2, 0x5}, {0x0, 0xeeee8000, 0x8, 0x4, 0x0, 0x2, 0xa1, 0x20, 0x0, 0x82}, {0x0, 0x6000, 0x10, 0xfc, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x1}, {0xeeef0000, 0x3}, {0x6000, 0x400}, 0x5df8ffe3, 0x0, 0x0, 0x400, 0xffffffffffffffff, 0xf801, 0x8000000, [0x80000002, 0x0, 0x4001]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe80"], 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) sendfile(r2, 0xffffffffffffffff, &(0x7f00000001c0)=0x1, 0x8) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa, 0x4}, 0x20) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x3ff}, 0x1c) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x404c840) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.211565572s ago: executing program 1 (id=6417): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x84) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f00000002c0)=@generic={0x4, 0x2, 0x0, "f1c99655"}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x4004084, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001dc0), 0x1, 0x1800) 2.094087072s ago: executing program 0 (id=6418): r0 = socket(0x2, 0x3, 0xff) r1 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[r1, r0], 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = epoll_create1(0x0) epoll_create1(0x0) (async) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r4, &(0x7f00000001c0)=[{}, {}], 0x2, 0xffffffd7, 0x0, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000200)={0xe0002004}) r7 = dup3(r3, r5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000300)={0x200f}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rmdir(0x0) (async) rmdir(0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r9 = socket(0x840000000002, 0x3, 0x100) connect$inet(r9, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async) connect$inet(r9, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r9, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r9, 0x0, 0x29, 0x0, 0x0) (async) setsockopt$inet_buf(r9, 0x0, 0x29, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000000240)={r10, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x4, 0x8, 0x70e00000, 0x7fff, 0x5}, &(0x7f0000000340)=0x98) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newtfilter={0xd8, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xa8, 0x2, [@TCA_BASIC_ACT={0xa4, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}, @m_tunnel_key={0x5c, 0x17, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}]}, {0x16, 0x6, "67abe386efc2447f4687121a1b4bf30dd4bd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0xd8}}, 0x0) sendmmsg$inet(r1, &(0x7f0000000100)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000001980)}, 0xf5ffffff}, {{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r8, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x18}}], 0x2, 0x4000000) 2.090972865s ago: executing program 5 (id=6419): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0xc, &(0x7f0000000100)={0xffffffffffffffff}, 0x111}}, 0x81) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0xfc91}, {&(0x7f0000000280)="06010000246837f73199aee6fd23291b3091ec1a2d41d2271101d8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff1e1793270000ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3e07bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da78ae2f1baa5924ce874f2acf0641259bfbc47cd3b4e5614efa374099acd197b3ec9e9fca6ee9d004b0", 0x128}, {&(0x7f0000001480)="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", 0x1001}], 0x3) unshare(0x68040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47ed2345653602648dcaaf6c26c291214549f100000000000000ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a009b00000000000000000000080000000eceb6b342a570f4f2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000480)=ANY=[@ANYRESHEX=r4, @ANYRES8=r2, @ANYRES64=r1, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES8=r2], 0xfce) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001000)=ANY=[@ANYBLOB="f00700001000010400"/20, @ANYBLOB="3f000000000000002c0012800b0001006970"], 0x7f0}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000080)={0x1d, r10}, 0x18) r11 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r11, &(0x7f0000000100)={0x1d, r12}, 0x18) connect$can_j1939(r11, &(0x7f0000000140)={0x1d, r12}, 0x18) sendmsg$can_j1939(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='data', 0x4}}, 0x0) 1.735489515s ago: executing program 2 (id=6420): socket$inet6(0xa, 0x3, 0x3a) socket$rxrpc(0x21, 0x2, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r0, r0, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x42080, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d07, &(0x7f00000000c0)=0x10035) socket$inet6_sctp(0xa, 0x1, 0x84) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) close(r3) socket(0x10, 0x3, 0x0) r4 = syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040cc1769190001010203010902450001010080320904000002ffffff0007058102400000070501024000000904000104ffffff0007058102"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000340)=0x8) readv(r6, &(0x7f0000000280)=[{&(0x7f0000001000)=""/145, 0x91}], 0x1) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000000)={0x340000, 0x4d2, 0xde, 0x84, 0x16, "bc113800000000000000000600"}) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x8, 0x7, 0x10, "3a8e0300d6140066010001001e71222a08f6d124890000f2ff00", 0x3631564e}) 1.366834618s ago: executing program 4 (id=6421): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f00000001c0)={0x1, 0x0, {0x9, 0x401, 0x5, 0x4}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) landlock_create_ruleset(&(0x7f00000002c0)={0xcfc, 0x1, 0x2}, 0x18, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000300)={'\x00', 0x3, 0x23, 0x7, 0x2, 0x8, 0xffffffffffffffff}) fcntl$lock(r0, 0x26, &(0x7f0000000340)={0x2, 0x1, 0x100, 0x6, r3}) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0x80000f3, 0x2, 0x64c9, 0x722, 0x2, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0185647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9c0907, 0x2, '\x00', @string=&(0x7f0000000200)=0x4}}) rseq(&(0x7f0000000280), 0x20, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket(0x22, 0x6, 0x2) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xfffffff7}, 0x8) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0xee01, 0xffffffffffffffff, 0x0, 0x2e}, 0x0, 0x0, 0xac, 0x6, 0x3, 0x7ff, 0x780487a8, 0x7, 0x5, 0xa}) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_emit_ethernet(0x7a, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = syz_ublk_setup_io_uring(0x81d, &(0x7f0000000040)={0x0, 0x30b5, 0x100, 0x2, 0x373}, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe2a, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x100, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb351, 0x1400, 0x2103, 0x2bb, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x136, 0x1, 0x20, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x162, 0x0, 0x1f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe9c7, 0x2000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5e8, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) msgget(0x0, 0xc2) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1ff8ff03002000d1f5db70d1ed0143ca90019561d6e200", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) 1.339720182s ago: executing program 5 (id=6422): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) openat$rfkill(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x8, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) syz_usb_connect$uac3(0x5, 0xba, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001000000080c2018104000010203010902a8000301081001080b0001010130350904000000010130000a240108440005000000142402020404060409000000030080000200070013240303050404050200000000ff00ff037f00132403040304040410090000000600ff7f0d0009040100"], 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000060a010400004000000000000a0000010900010073797a3100000000200004801c000180090001007866726d000000000c00028008000240000000060900020073797a3200000000140000001100015c00000000000000000000000a"], 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) listen(r2, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r5, 0x18000000000002a0, 0x42, 0xfffffffffffffdf6, &(0x7f0000000500)="b9ff0300600d698cb89e14f086dd1f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110", 0x4}, 0x48) r6 = socket(0x40000000015, 0x805, 0x0) getsockopt(r6, 0x114, 0x2718, 0x0, &(0x7f00000000c0)) r7 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x5c656f61393ffcde}}], 0x2, 0x4000045) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) close(r7) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) 879.567421ms ago: executing program 0 (id=6423): syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x800) mq_open(0x0, 0x42, 0x1f0, 0x0) socket(0x1, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) bind$alg(0xffffffffffffffff, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000200)={{0x6, @multicast2, 0x15, 0x0, 'wrr\x00', 0xc, 0x2000000}, {@loopback, 0x15, 0x0, 0x1, 0x0, 0x5}}, 0x44) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) write(r2, &(0x7f0000000400)='PASV\r\n', 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = accept4(r0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)', 0x2c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000600)={0x1, 'lo\x00'}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x13cc, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x139c, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x8001}, @TCA_FLOW_KEYS={0x8, 0x1, 0x17c00}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x9, 0xffffffffffffffff, 0xfffffffd, 0x526}, 0xd7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x6}, @TCA_FLOW_EMATCHES={0x344, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x2, 0x8, 0x84}, {0xffffffffffffffff, 0x4, 0x7}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc34}}, @TCA_EMATCH_TREE_LIST={0xb4, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xc, 0x3, 0x82a}, {0x0, 0x2, 0x8, 0x8000000}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x901c}, {0x7, 0x6, 0x1, "8652c41d345f"}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xffc3, 0x3, 0xfff7}, {0x8, 0x4c, 0x8, 0x6}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0x8}, {0x3, 0x6, 0x101, 0x200}}}, @TCF_EM_CONTAINER={0x44, 0x1, 0x0, 0x0, {{0x9678, 0x0, 0x7e}, "8f462fea7c7f1cbd9dd96e43617c5952adbd13a1bcd52fce3aed513ca66ae8c654252f74d09167844fff89b03548fef915af17ee89309851"}}]}, @TCA_EMATCH_TREE_LIST={0xb4, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7ac, 0x3, 0x2}, {0xf3, 0x8, 0x1, 0x81}}}, @TCF_EM_CONTAINER={0x94, 0x2, 0x0, 0x0, {{0x0, 0x0, 0x8}, "90a7bd157ac9649bd44e7396a3ab6f980cd2a32e2199c86136a92341bb7699fef3b0a1c34c98495d0879e27eedc01ffdb620d38819244b987083d42e117e9986f6ac88715a20831b1b30955ac92fe31eae7b2cd8a0160b495b4130556ad2069a88398bf3eb5119a78c1492b9598ac396980e88eb4194064a96f4106cbb84b2395f94335cbfd458"}}]}, @TCA_EMATCH_TREE_LIST={0x1bc, 0x2, 0x0, 0x1, [@TCF_EM_META={0x88, 0x3, 0x0, 0x0, {{0xa, 0x4, 0x101}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7ff, 0x9}, {0x4, 0xa, 0x2}}}, @TCA_EM_META_RVALUE={0x17, 0x3, [@TCF_META_TYPE_VAR="fd05", @TCF_META_TYPE_VAR="f7264adfc71f4d", @TCF_META_TYPE_VAR="7c84", @TCF_META_TYPE_VAR="ca8b5022cb5a5f3d"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x8, 0x1}, {0xf, 0x4, 0x2}}}, @TCA_EM_META_LVALUE={0x22, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="88cbda543079fa", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="7aac04", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="9057be345c37b9"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x2, 0x1}, {0x3, 0x8}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x40}, {0x3, 0x7, 0x1}}}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x8, 0x8, 0xc}, {0xffffffffffffffff, 0x3, 0x4}}}, @TCF_EM_IPT={0x104, 0x2, 0x0, 0x0, {{0x4, 0x9, 0x8000}, [@TCA_EM_IPT_MATCH_DATA={0xe1, 0x5, "eb9cca96ecf9dd888c7ed96c4826519a954d8fc917c74ed6b762bfa4a7975325cc1b9f0969f347b724e7f64cd6c39b9a0381d8c26c192b3a14f20fad598368b11105313b557eb5de3c7a950604b81a4314e3d18d879ae095539456e8464222cb24552460339d2b749aad416d367bf1a709a330ce49e24cad3d056051151eec50946618c11daf6b6dac9f193385e0ce2599f03cbf611adb4e4e09aac0c9b8eee46e5c58ae88819c0286b8cb5e35d7ad2db70f04ce3e552dc8e03f94f5dd9238274d67950a446762caebde7c2b9eb19aec17755fb6bc155a2caa4438166c"}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xd, 0x3, 0x9}, {0x8, 0x3f, 0xf478, 0x1}}}]}]}, @TCA_FLOW_ACT={0xf2c, 0x9, 0x0, 0x1, [@m_gact={0xc30, 0x15, 0x0, 0x0, {{0x9}, {0x4}, {0xc04, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x74, 0x1b, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x0, 0x8, 0x9988, 0x9}, 0x3}}, @TCA_MPLS_TTL={0x5, 0x7, 0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x3}, @TCA_MPLS_LABEL={0x8, 0x5, 0x6}, @TCA_MPLS_BOS={0x5, 0x8, 0xfc}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x78, 0x1c, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}]}, {0x44, 0x6, "ee36f4b3e59068d068156f40fe16c21894810c97b2077ff181fdcb117aa423bc2501ef43a267f3795c557636c3b0fe40910aed19ebed159aa52bc5ea9c960334"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0x5c, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x2f, 0x6, "9c132568a7dc37a27649ac9c6691eb57f119e7b5ea84ea23f147f6ee0a82571010a2cd517452b97bd9466e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0xa4, 0xd, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3ff, 0xffff, 0x0, 0x15c4000, 0x34}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x8, 0x10000000, 0xc441, 0x8}}]}, {0x3f, 0x6, "9fef29919ea4ee615af8b9fc27a71734bb49a16384b574a7eea3d8682cad104583362fffa1e9467d55625861f062569643cdee9086b5b90e06a991"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_vlan={0x10c, 0x1c, 0x0, 0x0, {{0x9}, {0x4}, {0xdf, 0x6, "32499fcb01d7dc8c9422c6c03286784b0f940eae65e44959193a3ed168a8bf052a541f1d6fc8a8f22aa342a7155bdcabde665cd254668fb73ed8bd8be94c767e1e750b8196095833f0c72547f60a8c2834526f506141ebb243c9911c9b958fef817683bb2584399a4a76d712a69e68e48857c69c4e5a46201ac5c444b63f31ada7a08f7f115d3578bc18d2c12afffb7096e7fd1cf7fc8cfbf91b9d31862684248dc2772711fc5f4c21616671df0229d090270118ebf04ebee4fdc768c781cc56efe1bbc9815dc93a46a6f26407b6d4ee2e10cfdba8acbb29c00fec"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x5}, @TCA_FLOW_EMATCHES={0xb8, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xe400}}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xe, 0x3, 0x2}, {0x4, 0x3, 0x42f1, 0x10000}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x10, 0x8, 0x1}, {0x1, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3f92, 0x1, 0xff}, {0x9b, 0x9, 0xb, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x5c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xfffe, 0x8, 0xe}, {0x3, 0x6, 0x5}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x80, 0x8, 0x3}, {0x1, 0x5, 0x4}}}, @TCF_EM_META={0x38, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="f118"]}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="af3fb797daf0daf3a6", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x13cc}, 0x1, 0x0, 0x0, 0x4894}, 0x42) 777.120318ms ago: executing program 4 (id=6424): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f01b, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$unix(r3, 0x0, &(0x7f0000000980)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0xa}, 0x94) close(r4) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400)) getpid() sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20000080) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f00000001c0), 0x10) sendmsg$can_raw(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xd209f6d83486bb56) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_emit_ethernet(0x68, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[], 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8dc3, 0x900) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r7, 0xc0045520, &(0x7f0000000080)=0xffffbf7f) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000e40)={'filter\x00', 0x5, 0x4, 0x3f0, 0xe8, 0x0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @unspec=@NFQUEUE1={0x0, 'NFQUEUE\x00', 0x1, {0x2, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNMARK={0x0, 'CONNMARK\x00', 0x1, {0x6, 0x40000000, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xffffffffffffff78) 334.843842ms ago: executing program 1 (id=6426): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) recvmmsg(r1, &(0x7f000000b400)=[{{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1}, 0x3}], 0x1, 0x40, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'gretap0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r3, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r5, @empty, @multicast2}}}], 0x18}}], 0x1, 0x4880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}}, 0x0) 0s ago: executing program 0 (id=6427): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, r0, 0x1, 0x0, 0x6, @multicast}, 0x23) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x94, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004080}, 0x80) r1 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1, 0x50, 0xffffffffffffffff, 0x0) socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4ad9, &(0x7f0000000300)={0x0, 0x9731, 0x4000, 0x3, 0x145}, &(0x7f00000003c0), 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='cgroup\x00') ioctl$sock_ifreq(r3, 0x8921, &(0x7f0000000140)={'team0\x00', @ifru_data=&(0x7f0000000100)="8df07150d7bfb0c1c7a28298b528881afb16f4baea5aae3f7abe066a278d52d0"}) r6 = io_uring_setup(0x3c46, &(0x7f0000000880)={0x0, 0xeb7f, 0x3000, 0x2, 0x26c}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xd, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r6, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x0, 0x1}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10e) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000240)=0xd) kernel console output (not intermixed with test programs): config 0 descriptor?? [ 1026.052965][T24885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1026.054749][T24885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.083971][ T5750] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1026.163356][ T25] usbhid 6-1:0.0: can't add hid device: -71 [ 1026.163486][ T25] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1026.173974][ T25] usb 6-1: USB disconnect, device number 110 [ 1026.497214][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.626484][ T25] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1026.716344][ T1556] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1026.777502][ T25] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1026.778553][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.786586][ T25] usb 3-1: config 0 descriptor?? [ 1026.887191][ T1556] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1026.888359][ T1556] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1026.888401][ T1556] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.891198][ T1556] usb 6-1: config 0 descriptor?? [ 1026.977384][T12359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.211134][ T25] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1027.211706][ T25] [drm:udl_init] *ERROR* Selecting channel failed [ 1027.251328][ T25] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 1027.251380][ T25] [drm] Initialized udl on minor 1 [ 1027.253364][ T25] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1027.253897][ T25] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1027.284635][ T25] usb 3-1: USB disconnect, device number 65 [ 1027.292320][ T5676] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1027.296366][T12195] Bluetooth: hci0: command tx timeout [ 1027.536679][ T5676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.717294][ T1556] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 1027.728472][ T1556] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input161 [ 1028.114986][T12348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.127960][ C1] usb 1-1: yurex_control_callback - control failed: -2 [ 1028.151829][T24897] loop9: detected capacity change from 0 to 7 [ 1028.174330][T24897] Dev loop9: unable to read RDB block 7 [ 1028.174373][T24897] loop9: unable to read partition table [ 1028.174650][T24897] loop9: partition table beyond EOD, truncated [ 1028.174712][T24897] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 1028.588929][ T1556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.965421][T24903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6091'. [ 1029.350043][T12348] usb 6-1: USB disconnect, device number 111 [ 1029.350058][ C1] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1029.378282][T12195] Bluetooth: hci0: command tx timeout [ 1029.553749][T24911] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6093'. [ 1029.597159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 1029.603078][T24909] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.603892][T24909] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.625174][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.661832][T24880] netlink: 'syz.1.6084': attribute type 11 has an invalid length. [ 1029.937062][ T5750] gspca_stk1135: reg_w 0x353 err -110 [ 1029.938307][ T5750] gspca_stk1135: serial bus timeout: status=0x00 [ 1029.938321][ T5750] gspca_stk1135: Sensor write failed [ 1029.938349][ T5750] gspca_stk1135: serial bus timeout: status=0x00 [ 1029.938366][ T5750] gspca_stk1135: Sensor write failed [ 1029.938394][ T5750] gspca_stk1135: serial bus timeout: status=0x00 [ 1029.938404][ T5750] gspca_stk1135: Sensor read failed [ 1029.938432][ T5750] gspca_stk1135: serial bus timeout: status=0x00 [ 1029.938441][ T5750] gspca_stk1135: Sensor read failed [ 1029.938448][ T5750] gspca_stk1135: Detected sensor type unknown (0x0) [ 1029.938508][ T5750] gspca_stk1135: serial bus timeout: status=0x00 [ 1029.938518][ T5750] gspca_stk1135: Sensor read failed [ 1029.938546][ T5750] gspca_stk1135: serial bus timeout: status=0x00 [ 1029.938555][ T5750] gspca_stk1135: Sensor read failed [ 1029.938583][ T5750] gspca_stk1135: serial bus timeout: status=0x00 [ 1029.938592][ T5750] gspca_stk1135: Sensor write failed [ 1029.938620][ T5750] gspca_stk1135: serial bus timeout: status=0x00 [ 1029.938630][ T5750] gspca_stk1135: Sensor write failed [ 1029.942541][ T5750] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 1030.025070][T12348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.258711][T24909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1030.283201][T24909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1030.737834][ T1556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.146472][T11849] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.146535][T11849] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.146598][T11849] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.146633][T11849] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.202179][T24917] batman_adv: batadv0: Adding interface: syzkaller0 [ 1031.202197][T24917] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1031.202226][T24917] batman_adv: batadv0: Interface activated: syzkaller0 [ 1031.259799][T24928] fuse: Unknown parameter '0x0000000000000004' [ 1031.278194][ T5691] usb 2-1: USB disconnect, device number 66 [ 1031.585830][T24932] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1031.585857][T24932] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1031.585868][T24932] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1031.643255][T24938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6100'. [ 1031.780258][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.851128][T24943] loop9: detected capacity change from 0 to 7 [ 1031.877120][T24943] Dev loop9: unable to read RDB block 7 [ 1031.877157][T24943] loop9: unable to read partition table [ 1031.880072][T24943] loop9: partition table beyond EOD, truncated [ 1031.880107][T24943] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 1031.880241][T24916] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1031.951874][T24916] batman_adv: batadv0: Removing interface: syzkaller0 [ 1032.145352][T24948] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6104'. [ 1032.185736][T24948] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6104'. [ 1032.190816][T24950] syz_tun: left allmulticast mode [ 1032.190833][T24950] syz_tun: left promiscuous mode [ 1032.191014][T24950] bridge0: port 3(syz_tun) entered disabled state [ 1032.238082][T24950] bridge_slave_0: left allmulticast mode [ 1032.238099][T24950] bridge_slave_0: left promiscuous mode [ 1032.238265][T24950] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.280219][T24950] bridge_slave_1: left allmulticast mode [ 1032.280243][T24950] bridge_slave_1: left promiscuous mode [ 1032.281001][T24950] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.332735][T24954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1032.334236][T24954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.361998][T24950] bond0: (slave bond_slave_0): Releasing backup interface [ 1032.375757][T24950] bond0: (slave bond_slave_1): Releasing backup interface [ 1032.393664][T24950] team0: Port device team_slave_0 removed [ 1032.404058][T24950] team0: Port device team_slave_1 removed [ 1032.404545][T24950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1032.406767][T24950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1032.421111][T24950] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1032.452357][T24957] input input162: cannot allocate more than FF_MAX_EFFECTS effects [ 1032.818263][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.966479][ T5691] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1032.986870][T24972] loop9: detected capacity change from 0 to 7 [ 1033.004833][T24972] Dev loop9: unable to read RDB block 7 [ 1033.004883][T24972] loop9: unable to read partition table [ 1033.005062][T24972] loop9: partition table beyond EOD, truncated [ 1033.006662][T24972] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 1033.058446][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.118120][ T5691] usb 6-1: New USB device found, idVendor=05ac, idProduct=024f, bcdDevice= 0.00 [ 1033.119153][ T5691] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.119181][ T5691] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8192, setting to 1024 [ 1033.119213][ T5691] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.121801][ T5691] usb 6-1: config 0 descriptor?? [ 1033.856078][T24978] syzkaller0: entered promiscuous mode [ 1033.856119][T24978] syzkaller0: entered allmulticast mode [ 1033.860387][T24979] loop9: detected capacity change from 0 to 7 [ 1033.869138][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.894461][T24978] tipc: Started in network mode [ 1033.894491][T24978] tipc: Node identity 86f353730b3f, cluster identity 4711 [ 1033.898880][T24979] Dev loop9: unable to read RDB block 7 [ 1033.898921][T24979] loop9: unable to read partition table [ 1033.899176][T24979] loop9: partition table beyond EOD, truncated [ 1033.899210][T24979] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 1033.907762][T24978] tipc: Enabled bearer , priority 0 [ 1033.934611][T24978] tipc: Resetting bearer [ 1033.992357][ T25] tipc: Resetting bearer [ 1033.997672][T24981] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6116'. [ 1034.060431][T24981] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6116'. [ 1034.065870][ T25] tipc: Disabling bearer [ 1034.205897][T24983] batman_adv: batadv0: Adding interface: syzkaller0 [ 1034.205947][T24983] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.205976][T24983] batman_adv: batadv0: Interface activated: syzkaller0 [ 1034.822414][T25004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.822963][T25004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.866395][ T1556] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1034.896701][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.959084][T24986] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1034.993355][T24986] batman_adv: batadv0: Removing interface: syzkaller0 [ 1035.029847][ T1556] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1035.031505][ T1556] usb 3-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1035.031534][ T1556] usb 3-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 1035.031556][ T1556] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1035.034767][ T1556] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1035.034789][ T1556] usb 3-1: Product: syz [ 1035.034803][ T1556] usb 3-1: Manufacturer: syz [ 1035.034816][ T1556] usb 3-1: SerialNumber: syz [ 1035.039466][ T1556] usb 3-1: config 0 descriptor?? [ 1035.040362][T24998] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1035.045965][ T1556] usb 3-1: selecting invalid altsetting 0 [ 1035.218230][T25006] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6128'. [ 1035.268608][T24998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.269025][T24998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.293723][T25006] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6128'. [ 1035.363442][T25008] fuse: Unknown parameter 'fd0x0000000000000004' [ 1035.363825][T24998] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6125'. [ 1035.364241][T24998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6125'. [ 1035.374239][T24998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.374882][T24998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.383628][ T5675] usb 3-1: USB disconnect, device number 66 [ 1035.703299][ T5691] usbhid 6-1:0.0: can't add hid device: -71 [ 1035.703402][ T5691] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1035.730347][ T5691] usb 6-1: USB disconnect, device number 112 [ 1035.746448][ T25] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1035.918694][ T25] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1035.919936][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.919965][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.920026][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.951092][ T25] usb 2-1: config 0 descriptor?? [ 1035.965903][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.098278][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.318236][T25027] loop9: detected capacity change from 0 to 7 [ 1036.345438][T25027] Dev loop9: unable to read RDB block 7 [ 1036.345466][T25027] loop9: unable to read partition table [ 1036.345657][T25027] loop9: partition table beyond EOD, truncated [ 1036.351639][T25027] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 1036.381956][ T25] cm6533_jd 0003:0D8C:0022.0048: unknown main item tag 0x0 [ 1036.382050][ T25] cm6533_jd 0003:0D8C:0022.0048: unknown main item tag 0x0 [ 1036.399344][ T25] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0048/input/input163 [ 1036.429522][ T25] cm6533_jd 0003:0D8C:0022.0048: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 1036.449042][ T5691] usb 6-1: new full-speed USB device number 113 using dummy_hcd [ 1036.599939][ T1556] usb 2-1: USB disconnect, device number 67 [ 1036.617064][ T5691] usb 6-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1036.618431][ T5691] usb 6-1: config 8 has an invalid interface number: 177 but max is 0 [ 1036.618493][ T5691] usb 6-1: config 8 has no interface number 0 [ 1036.618531][ T5691] usb 6-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 1036.618554][ T5691] usb 6-1: config 8 interface 177 altsetting 9 endpoint 0x8D has invalid maxpacket 1023, setting to 64 [ 1036.618579][ T5691] usb 6-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid maxpacket 203, setting to 64 [ 1036.618600][ T5691] usb 6-1: config 8 interface 177 has no altsetting 0 [ 1036.618620][ T5691] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.721158][T25023] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1036.721290][T25023] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1036.970409][ T5691] usb 6-1: string descriptor 0 read error: -71 [ 1036.985873][ T5691] ir_toy 6-1:8.177: required endpoints not found [ 1037.003782][ T5691] usb 6-1: USB disconnect, device number 113 [ 1037.004735][ T1556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.183900][T25035] netlink: 'syz.2.6135': attribute type 11 has an invalid length. [ 1037.406374][ T9] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 1037.537440][ T9] usb 2-1: device descriptor read/64, error -71 [ 1037.699100][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.756592][ T25] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1037.776546][ T9] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 1037.906985][ T9] usb 2-1: device descriptor read/64, error -71 [ 1037.907509][ T25] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1037.908780][ T25] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 1037.908795][ T25] usb 6-1: config 1 has no interface number 0 [ 1037.908817][ T25] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1037.908829][ T25] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0xD has invalid maxpacket 16 [ 1037.908840][ T25] usb 6-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1037.911491][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.911504][ T25] usb 6-1: Product: syz [ 1037.911515][ T25] usb 6-1: Manufacturer: syz [ 1037.911528][ T25] usb 6-1: SerialNumber: syz [ 1037.917419][T25037] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1037.917579][T25037] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1038.010545][ T25] usb 6-1: Expected 3 endpoints, found: 2 [ 1038.018361][ T5676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.034915][ T9] usb usb2-port1: attempt power cycle [ 1038.079798][T25041] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6139'. [ 1038.130503][T25041] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6139'. [ 1038.205608][T25043] batman_adv: batadv0: Adding interface: syzkaller0 [ 1038.205624][T25043] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1038.205647][T25043] batman_adv: batadv0: Interface activated: syzkaller0 [ 1038.366311][ T9] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 1038.387449][ T9] usb 2-1: device descriptor read/8, error -71 [ 1038.482961][T25046] 8021q: VLANs not supported on xfrm0 [ 1038.626939][ T9] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 1038.648528][ T9] usb 2-1: device descriptor read/8, error -71 [ 1038.655265][T25044] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1038.696688][T25044] batman_adv: batadv0: Removing interface: syzkaller0 [ 1038.720024][T25050] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 1038.757216][ T9] usb usb2-port1: unable to enumerate USB device [ 1039.058488][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.136730][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.542414][T25058] loop9: detected capacity change from 0 to 7 [ 1039.564285][T25058] Dev loop9: unable to read RDB block 7 [ 1039.564337][T25058] loop9: unable to read partition table [ 1039.564560][T25058] loop9: partition table beyond EOD, truncated [ 1039.564595][T25058] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 1039.721076][T25064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6145'. [ 1039.760390][T25065] loop9: detected capacity change from 0 to 7 [ 1039.775280][T25065] Dev loop9: unable to read RDB block 7 [ 1039.775331][T25065] loop9: unable to read partition table [ 1039.775508][T25065] loop9: partition table beyond EOD, truncated [ 1039.775534][T25065] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 1040.096987][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.439302][T25073] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6150'. [ 1040.484458][T25073] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6150'. [ 1040.572117][ T5675] usb 6-1: USB disconnect, device number 114 [ 1040.731335][T25082] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 1040.883130][T25091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6155'. [ 1040.890337][ T25] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1041.039400][ T25] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1041.041087][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1041.041115][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1041.041135][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1041.041195][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.044466][ T25] usb 2-1: config 0 descriptor?? [ 1041.049417][ T25] hub 2-1:0.0: USB hub found [ 1041.140329][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.175769][T25103] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 1041.251115][ T25] hub 2-1:0.0: 9 ports detected [ 1041.251478][ T25] hub 2-1:0.0: insufficient power available to use all downstream ports [ 1041.409009][T25111] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6162'. [ 1041.436090][T25111] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6162'. [ 1041.457537][T25112] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1041.479143][ T25] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1041.527538][ T25] usb 2-1: USB disconnect, device number 72 [ 1041.574392][T25116] fuse: Unknown parameter 'fd0x0000000000000004' [ 1041.599356][T25116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.599862][T25116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.754246][ T31] kauditd_printk_skb: 571 callbacks suppressed [ 1041.754266][ T31] audit: type=1804 audit(1790221944.588:27841): pid=25119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.6164" name="bus" dev="ramfs" ino=116820 res=1 errno=0 [ 1042.176899][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.176929][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.228612][T25127] futex_wake_op: syz.0.6167 tries to shift op by -1; fix this program [ 1042.376394][ T25] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1042.526311][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 1042.527073][ T25] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1042.530020][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.530057][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1042.530115][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.538424][ T25] usb 2-1: config 0 descriptor?? [ 1042.773879][T25139] binder: 25138:25139 ioctl c0306201 0 returned -14 [ 1042.854132][T25141] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6173'. [ 1043.006940][T25125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.010482][T25125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1043.045760][ T25] ft260 0003:0403:6030.0049: unknown main item tag 0x0 [ 1043.045794][ T25] ft260 0003:0403:6030.0049: unknown main item tag 0x0 [ 1043.058839][T25149] vivid-004: disconnect [ 1043.084070][T25149] binder: 25148:25149 ioctl c0306201 0 returned -14 [ 1043.099011][T25151] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 1043.216774][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.242147][T25125] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6166'. [ 1043.273299][ T25] ft260 0003:0403:6030.0049: failed to retrieve chip version [ 1043.273762][ T25] ft260 0003:0403:6030.0049: probe with driver ft260 failed with error -32 [ 1043.437252][T25148] vivid-004: reconnect [ 1043.718675][T25161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.719158][T25161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1043.976371][ T5750] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1044.127867][ T5750] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1044.128768][ T5750] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.128794][ T5750] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1044.128817][ T5750] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1044.128840][ T5750] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.132747][ T5750] usb 3-1: config 0 descriptor?? [ 1044.134670][ T5750] hub 3-1:0.0: USB hub found [ 1044.256724][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.342408][ T5750] hub 3-1:0.0: 9 ports detected [ 1044.342811][ T5750] hub 3-1:0.0: insufficient power available to use all downstream ports [ 1044.456758][ T31] audit: type=1804 audit(1790221947.288:27842): pid=25177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.6181" name="bus" dev="ramfs" ino=117068 res=1 errno=0 [ 1044.571541][T25178] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1044.594023][ T5750] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 1044.617704][T25179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.625154][T25179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.650662][ T5750] usb 3-1: USB disconnect, device number 67 [ 1045.055586][T25183] input: syz0 as /devices/virtual/input/input164 [ 1045.171098][T25184] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1045.183618][ T5691] usb 2-1: USB disconnect, device number 73 [ 1045.186858][T25184] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1045.228256][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.296728][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.350682][T25186] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6184'. [ 1045.686259][ T5691] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1045.837182][ T5691] usb 3-1: Using ep0 maxpacket: 8 [ 1045.838667][ T5691] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1045.839781][ T5691] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.839803][ T5691] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1045.839857][ T5691] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1045.842594][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.842615][ T5691] usb 3-1: Product: syz [ 1045.842629][ T5691] usb 3-1: Manufacturer: syz [ 1045.842641][ T5691] usb 3-1: SerialNumber: syz [ 1046.219708][T25200] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6190'. [ 1046.337292][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.484564][ T5691] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1046.484590][ T5691] usb 3-1: clock source 0 is not valid, cannot use [ 1046.485266][ T5691] usb 3-1: 1:1: cannot get freq (v2/v3): err -32 [ 1046.877500][ T5691] usb 3-1: USB disconnect, device number 68 [ 1047.300356][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.376901][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.683568][T25231] loop9: detected capacity change from 0 to 7 [ 1047.701439][T25231] Dev loop9: unable to read RDB block 7 [ 1047.701482][T25231] loop9: unable to read partition table [ 1047.701624][T25231] loop9: partition table beyond EOD, truncated [ 1047.701635][T25231] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 1048.259769][T12348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.368697][T25237] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6196'. [ 1048.416622][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.860895][T25249] FAULT_INJECTION: forcing a failure. [ 1048.860895][T25249] name failslab, interval 1, probability 0, space 0, times 0 [ 1048.860936][T25249] CPU: 1 UID: 0 PID: 25249 Comm: syz.0.6199 Tainted: G L syzkaller #0 PREEMPT(full) [ 1048.860964][T25249] Tainted: [L]=SOFTLOCKUP [ 1048.860971][T25249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1048.860982][T25249] Call Trace: [ 1048.860991][T25249] [ 1048.860999][T25249] dump_stack_lvl+0xe8/0x150 [ 1048.861033][T25249] should_fail_ex+0x410/0x560 [ 1048.861060][T25249] should_failslab+0xa8/0x100 [ 1048.861085][T25249] __kmalloc_cache_noprof+0xa3/0x600 [ 1048.861106][T25249] ? snd_ctl_notify+0x21f/0x4d0 [ 1048.861256][T25249] ? snd_ctl_notify+0x21f/0x4d0 [ 1048.861285][T25249] snd_ctl_notify+0x21f/0x4d0 [ 1048.861316][T25249] __snd_ctl_remove+0x238/0x420 [ 1048.861352][T25249] snd_ctl_remove_user_ctl+0x245/0x2f0 [ 1048.861386][T25249] snd_ctl_elem_add+0x109/0xa80 [ 1048.861416][T25249] ? __might_fault+0xaf/0x130 [ 1048.861446][T25249] snd_ctl_elem_add_compat+0x39f/0x410 [ 1048.861476][T25249] snd_ctl_ioctl_compat+0x680/0xda0 [ 1048.861506][T25249] ? __pfx_snd_ctl_ioctl_compat+0x10/0x10 [ 1048.861530][T25249] ? __fget_files+0x2a/0x420 [ 1048.861559][T25249] ? __fget_files+0x3a2/0x420 [ 1048.861583][T25249] ? __fget_files+0x2a/0x420 [ 1048.861610][T25249] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1048.861640][T25249] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1048.861665][T25249] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1048.861687][T25249] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1048.861714][T25249] ? __fget_files+0x3a2/0x420 [ 1048.861746][T25249] ? fput+0xa0/0xd0 [ 1048.861769][T25249] ? ksys_write+0x242/0x270 [ 1048.861809][T25249] __do_fast_syscall_32+0x27a/0x6a0 [ 1048.861835][T25249] ? do_fast_syscall_32+0x33/0x70 [ 1048.861858][T25249] ? asm_int80_emulation+0x1a/0x20 [ 1048.861876][T25249] ? do_int80_emulation+0x299/0x500 [ 1048.861989][T25249] do_fast_syscall_32+0x33/0x70 [ 1048.862023][T25249] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1048.862047][T25249] RIP: 0023:0xf7f490ec [ 1048.862066][T25249] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1048.862082][T25249] RSP: 002b:00000000f53e550c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1048.862103][T25249] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000c1105518 [ 1048.862116][T25249] RDX: 0000000080000c40 RSI: 0000000000000000 RDI: 0000000000000000 [ 1048.862128][T25249] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1048.862140][T25249] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1048.862151][T25249] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1048.862180][T25249] [ 1048.862192][T25249] snd_dummy snd_dummy.0: No memory available to allocate event [ 1049.459883][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.716304][ T5691] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1049.880784][ T5691] usb 6-1: Using ep0 maxpacket: 16 [ 1049.883140][ T5691] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1049.884662][ T5691] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.884695][ T5691] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1049.884717][ T5691] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.937171][ T5691] usb 6-1: config 0 descriptor?? [ 1049.963192][ T5691] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1050.013843][T25261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.014218][T25261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.381255][T25255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.383038][T25255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.409321][ T5674] usb 6-1: USB disconnect, device number 115 [ 1050.507243][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.806281][ T5691] usb 2-1: new low-speed USB device number 74 using dummy_hcd [ 1050.958237][ T5691] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1050.958288][ T5691] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1050.959990][ T5691] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1050.960017][ T5691] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1050.960048][ T5691] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 1050.960066][ T5691] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1050.960084][ T5691] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 1050.960102][ T5691] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1050.962978][ T5691] usb 2-1: string descriptor 0 read error: -22 [ 1050.963215][ T5691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.006324][ T5674] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1051.206461][ T5674] usb 3-1: Using ep0 maxpacket: 16 [ 1051.214639][ T5674] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1051.214696][ T5674] usb 3-1: New USB device found, idVendor=0856, idProduct=ac32, bcdDevice=d8.41 [ 1051.229482][ T5674] usb 3-1: config 251 has an invalid interface number: 95 but max is 0 [ 1051.229500][ T5674] usb 3-1: config 251 has no interface number 0 [ 1051.229517][ T5674] usb 3-1: config 251 interface 95 has no altsetting 0 [ 1051.267949][ T5674] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.267974][ T5674] usb 3-1: Product: syz [ 1051.268013][ T5674] usb 3-1: Manufacturer: syz [ 1051.268027][ T5674] usb 3-1: SerialNumber: syz [ 1051.296805][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.315329][ T5691] cdc_ncm 2-1:1.0: bind() failure [ 1051.344404][ T5691] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1051.344450][ T5691] cdc_ncm 2-1:1.1: bind() failure [ 1051.352579][ T5691] usb 2-1: USB disconnect, device number 74 [ 1051.523319][ T5674] mos7840 3-1:251.95: required endpoints missing [ 1051.541528][ T5674] usb 3-1: USB disconnect, device number 69 [ 1051.543276][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.577233][ T5750] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1051.727532][ T5750] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1051.728481][ T5750] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1051.728509][ T5750] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1051.728529][ T5750] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1051.728568][ T5750] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.731118][ T5750] usb 6-1: config 0 descriptor?? [ 1051.734224][ T5750] hub 6-1:0.0: USB hub found [ 1051.934335][ T5750] hub 6-1:0.0: 9 ports detected [ 1051.934756][ T5750] hub 6-1:0.0: insufficient power available to use all downstream ports [ 1052.003877][T25277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6207'. [ 1052.142991][T25280] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1052.158637][ T5750] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 1052.189439][ T5750] usb 6-1: USB disconnect, device number 116 [ 1052.576687][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.176353][ T25] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1053.216714][T25310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.217060][T25310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.336440][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 1053.337198][ T25] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1053.338581][ T25] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 1053.341400][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.341421][ T25] usb 6-1: Product: syz [ 1053.341435][ T25] usb 6-1: Manufacturer: syz [ 1053.341447][ T25] usb 6-1: SerialNumber: syz [ 1053.398047][ T25] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1053.398073][ T25] r8152-cfgselector 6-1: config 0 descriptor?? [ 1053.576300][ T5750] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1053.618232][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.727850][ T5750] usb 3-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 1053.730256][ T5750] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1053.730289][ T5750] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1053.730422][ T5750] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.742145][ T5750] usb 3-1: config 0 descriptor?? [ 1053.749213][T25314] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1054.338204][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.357440][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.357515][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.395112][T25333] netlink: 'syz.1.6217': attribute type 1 has an invalid length. [ 1054.395153][T25333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1054.667200][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.734079][ T5750] usbhid 3-1:0.0: can't add hid device: -71 [ 1054.734198][ T5750] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1054.751837][ T5750] usb 3-1: USB disconnect, device number 70 [ 1055.241179][T25346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6220'. [ 1055.359072][ T25] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1055.529247][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 1055.530626][ T25] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1055.531640][ T25] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1055.531663][ T25] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.531702][ T25] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1055.531767][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.605525][ T25] usbtmc 2-1:16.0: bulk endpoints not found [ 1055.700103][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.899986][ T5750] r8152-cfgselector 6-1: USB disconnect, device number 117 [ 1056.345988][T25365] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6225'. [ 1056.658367][ T31] audit: type=1326 audit(1790221959.498:27843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25371 comm="syz.4.6228" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 1056.659221][ T31] audit: type=1326 audit(1790221959.498:27844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25371 comm="syz.4.6228" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 1056.659265][ T31] audit: type=1326 audit(1790221959.498:27845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25371 comm="syz.4.6228" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 1056.659304][ T31] audit: type=1326 audit(1790221959.498:27846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25371 comm="syz.4.6228" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 1056.661807][ T31] audit: type=1326 audit(1790221959.498:27847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25371 comm="syz.4.6228" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 1056.742447][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.829743][T25374] IPv6: addrconf: prefix option has invalid lifetime [ 1056.840582][ T31] audit: type=1326 audit(1790221959.678:27848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25371 comm="syz.4.6228" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 1056.842461][ T31] audit: type=1326 audit(1790221959.678:27849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25371 comm="syz.4.6228" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 1056.869209][ T31] audit: type=1326 audit(1790221959.708:27850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25375 comm="syz.4.6228" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71f75ab code=0x7ffc0000 [ 1056.899046][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.011004][T25378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1057.011446][T25378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1057.013350][ T31] audit: type=1326 audit(1790221959.848:27851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25371 comm="syz.4.6228" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 1057.016778][ T31] audit: type=1326 audit(1790221959.858:27852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25371 comm="syz.4.6228" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 1057.056440][ T5750] usb 2-1: USB disconnect, device number 75 [ 1057.230717][T25374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1057.233074][T25374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1057.379965][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.777057][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.991345][T25392] sctp: [Deprecated]: syz.2.6235 (pid 25392) Use of int in maxseg socket option. [ 1057.991345][T25392] Use struct sctp_assoc_value instead [ 1058.630078][T25411] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6240'. [ 1058.750591][T25413] bond1 (unregistering): Released all slaves [ 1058.819537][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.657324][ T5691] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 1059.817010][ T5691] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1059.841882][ T5691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.841908][ T5691] usb 2-1: Product: syz [ 1059.841922][ T5691] usb 2-1: Manufacturer: syz [ 1059.841936][ T5691] usb 2-1: SerialNumber: syz [ 1059.850163][ T5691] usb 2-1: config 0 descriptor?? [ 1059.860153][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.986960][T25432] FAULT_INJECTION: forcing a failure. [ 1059.986960][T25432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1059.987018][T25432] CPU: 0 UID: 0 PID: 25432 Comm: syz.0.6245 Tainted: G L syzkaller #0 PREEMPT(full) [ 1059.987044][T25432] Tainted: [L]=SOFTLOCKUP [ 1059.987051][T25432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1059.987063][T25432] Call Trace: [ 1059.987071][T25432] [ 1059.987079][T25432] dump_stack_lvl+0xe8/0x150 [ 1059.987111][T25432] should_fail_ex+0x410/0x560 [ 1059.987142][T25432] _copy_from_user+0x2d/0xb0 [ 1059.987168][T25432] kstrtouint_from_user+0xd6/0x180 [ 1059.987191][T25432] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1059.987219][T25432] ? lock_acquire+0x115/0x350 [ 1059.987243][T25432] proc_fail_nth_write+0x8e/0x210 [ 1059.987263][T25432] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1059.987290][T25432] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1059.987308][T25432] vfs_write+0x296/0xba0 [ 1059.987344][T25432] ? __pfx_vfs_write+0x10/0x10 [ 1059.987371][T25432] ? __fget_files+0x2a/0x420 [ 1059.987400][T25432] ? __fget_files+0x3a2/0x420 [ 1059.987423][T25432] ? __fget_files+0x2a/0x420 [ 1059.987456][T25432] ksys_write+0x150/0x270 [ 1059.987485][T25432] ? __pfx_ksys_write+0x10/0x10 [ 1059.987517][T25432] ? asm_int80_emulation+0x1a/0x20 [ 1059.987540][T25432] do_int80_emulation+0x198/0x500 [ 1059.987564][T25432] ? trace_irq_disable+0x3b/0x140 [ 1059.987583][T25432] ? asm_int80_emulation+0x1a/0x20 [ 1059.987601][T25432] ? clear_bhb_loop+0x70/0xc0 [ 1059.987617][T25432] ? clear_bhb_loop+0x70/0xc0 [ 1059.987640][T25432] asm_int80_emulation+0x1a/0x20 [ 1059.987657][T25432] RIP: 0023:0xf71475ab [ 1059.987674][T25432] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1059.987690][T25432] RSP: 002b:00000000f54064bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1059.987709][T25432] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54065d0 [ 1059.987722][T25432] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1059.987732][T25432] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1059.987742][T25432] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1059.987754][T25432] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1059.987782][T25432] [ 1060.151407][T25434] sctp: [Deprecated]: syz.4.6246 (pid 25434) Use of int in maxseg socket option. [ 1060.151407][T25434] Use struct sctp_assoc_value instead [ 1060.151892][T25434] netlink: 'syz.4.6246': attribute type 1 has an invalid length. [ 1060.151939][T25434] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1060.218562][ T5691] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 076 [ 1060.432309][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.474717][T25445] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1060.821521][ T5691] usb 2-1: USB disconnect, device number 76 [ 1060.829772][T25420] i2c i2c-1: failure sending STOP [ 1060.908288][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.021672][T25413] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6243'. [ 1061.822313][T25482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.835181][T25482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.939515][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.128272][ T5691] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1062.231689][T25446] cgroup: fork rejected by pids controller in /syz5 [ 1062.276673][ T5691] usb 2-1: Using ep0 maxpacket: 32 [ 1062.278214][ T5691] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1062.303585][ T5691] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1062.303627][ T5691] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1062.303642][ T5691] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1062.303652][ T5691] usb 2-1: config 155 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1062.303666][ T5691] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1062.321819][ T5691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.321845][ T5691] usb 2-1: Product: syz [ 1062.321858][ T5691] usb 2-1: Manufacturer: syz [ 1062.321871][ T5691] usb 2-1: SerialNumber: syz [ 1062.405024][ T5691] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1062.405093][ T5691] imon 2-1:155.0: unable to initialize intf0, err -19 [ 1062.405104][ T5691] imon:imon_probe: failed to initialize context! [ 1062.405115][ T5691] imon 2-1:155.0: unable to register, err -19 [ 1062.690094][T25508] netlink: 'syz.0.6257': attribute type 4 has an invalid length. [ 1062.834689][T25513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6258'. [ 1062.976478][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.125864][T25517] sctp: [Deprecated]: syz.2.6260 (pid 25517) Use of int in maxseg socket option. [ 1063.125864][T25517] Use struct sctp_assoc_value instead [ 1063.354645][T25522] FAULT_INJECTION: forcing a failure. [ 1063.354645][T25522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1063.354669][T25522] CPU: 1 UID: 0 PID: 25522 Comm: syz.2.6261 Tainted: G L syzkaller #0 PREEMPT(full) [ 1063.354686][T25522] Tainted: [L]=SOFTLOCKUP [ 1063.354693][T25522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1063.354703][T25522] Call Trace: [ 1063.354710][T25522] [ 1063.354719][T25522] dump_stack_lvl+0xe8/0x150 [ 1063.354754][T25522] should_fail_ex+0x410/0x560 [ 1063.354780][T25522] _copy_to_user+0x31/0xb0 [ 1063.354805][T25522] move_addr_to_user+0x13a/0x210 [ 1063.354831][T25522] ____sys_recvmsg+0x245/0x4a0 [ 1063.354866][T25522] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1063.354903][T25522] ? __lock_acquire+0x747/0x2de0 [ 1063.354930][T25522] ___sys_recvmsg+0x213/0x5a0 [ 1063.354953][T25522] ? lock_acquire+0x115/0x350 [ 1063.354982][T25522] ? __pfx____sys_recvmsg+0x10/0x10 [ 1063.355014][T25522] ? lock_acquire+0x115/0x350 [ 1063.355049][T25522] ? __fget_files+0x3a2/0x420 [ 1063.355084][T25522] do_recvmmsg+0x38b/0x7f0 [ 1063.355119][T25522] ? __pfx_do_recvmmsg+0x10/0x10 [ 1063.355158][T25522] ? get_old_timespec32+0xba/0x140 [ 1063.355181][T25522] ? __pfx_get_old_timespec32+0x10/0x10 [ 1063.355213][T25522] __sys_recvmmsg+0x12f/0x290 [ 1063.355242][T25522] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1063.355269][T25522] ? ksys_write+0x242/0x270 [ 1063.355304][T25522] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 1063.355327][T25522] __do_fast_syscall_32+0x27a/0x6a0 [ 1063.355353][T25522] ? do_fast_syscall_32+0x33/0x70 [ 1063.355374][T25522] ? asm_int80_emulation+0x1a/0x20 [ 1063.355393][T25522] ? do_int80_emulation+0x299/0x500 [ 1063.355416][T25522] ? trace_irq_disable+0x3b/0x140 [ 1063.355439][T25522] do_fast_syscall_32+0x33/0x70 [ 1063.355463][T25522] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1063.355485][T25522] RIP: 0023:0xf70af0ec [ 1063.355501][T25522] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1063.355516][T25522] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1063.355536][T25522] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800037c0 [ 1063.355549][T25522] RDX: 00000000000003b4 RSI: 0000000002040000 RDI: 0000000080003700 [ 1063.355561][T25522] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1063.355573][T25522] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1063.355584][T25522] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1063.355610][T25522] [ 1063.457657][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.805135][T25526] fuse: Bad value for 'fd' [ 1064.016877][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.101185][T25526] could not allocate digest TFM handle md4 [ 1064.163196][T25532] ALSA: mixer_oss: invalid OSS volume '' [ 1064.746966][ T5691] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1064.896618][ T5691] usb 3-1: Using ep0 maxpacket: 32 [ 1064.899782][ T5691] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1064.907238][ T5691] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.907284][ T5691] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1064.907308][ T5691] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 1064.907332][ T5691] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 1064.907355][ T5691] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1064.927102][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.927128][ T5691] usb 3-1: Product: syz [ 1064.927142][ T5691] usb 3-1: Manufacturer: syz [ 1064.927155][ T5691] usb 3-1: SerialNumber: syz [ 1064.963453][T25542] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1064.989253][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1064.991427][ T5691] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input165 [ 1065.090017][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.253880][T25546] netlink: 'syz.4.6267': attribute type 1 has an invalid length. [ 1065.253920][T25546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1065.432798][ T5750] usb 2-1: USB disconnect, device number 77 [ 1065.877148][ T5674] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1065.967024][ T25] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1066.026395][ T5674] usb 6-1: Using ep0 maxpacket: 16 [ 1066.043200][ T5674] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1066.043250][ T5674] usb 6-1: New USB device found, idVendor=0856, idProduct=ac32, bcdDevice=d8.41 [ 1066.063825][ T5674] usb 6-1: config 251 has an invalid interface number: 95 but max is 0 [ 1066.063850][ T5674] usb 6-1: config 251 has no interface number 0 [ 1066.063880][ T5674] usb 6-1: config 251 interface 95 has no altsetting 0 [ 1066.093908][ T5674] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.093959][ T5674] usb 6-1: Product: syz [ 1066.093973][ T5674] usb 6-1: Manufacturer: syz [ 1066.093987][ T5674] usb 6-1: SerialNumber: syz [ 1066.120571][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.135096][ T25] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1066.149399][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1066.149432][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1066.149452][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1066.149506][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.201966][ T25] usb 2-1: config 0 descriptor?? [ 1066.203959][ T25] hub 2-1:0.0: USB hub found [ 1066.236495][T25558] sctp: [Deprecated]: syz.0.6271 (pid 25558) Use of int in maxseg socket option. [ 1066.236495][T25558] Use struct sctp_assoc_value instead [ 1066.237138][T25558] netlink: 'syz.0.6271': attribute type 1 has an invalid length. [ 1066.237213][T25558] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1066.237224][T25558] IPv6: NLM_F_CREATE should be set when creating new route [ 1066.396591][ T5674] mos7840 6-1:251.95: required endpoints missing [ 1066.413133][ T5674] usb 6-1: USB disconnect, device number 118 [ 1066.437619][ T25] hub 2-1:0.0: 9 ports detected [ 1066.440181][ T25] hub 2-1:0.0: insufficient power available to use all downstream ports [ 1066.497638][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.497832][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.707900][ T25] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1066.757561][ T25] usb 2-1: USB disconnect, device number 78 [ 1067.139762][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.143104][T20133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.146018][ T1556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.187302][ T1556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.747381][T25584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6276'. [ 1067.845998][ T5691] imon:send_packet: packet tx failed (-71) [ 1067.860355][ T5691] imon 3-1:155.0: panel buttons/knobs setup failed [ 1067.860377][ T5691] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1067.860388][ T5691] (id 0x00) [ 1068.079903][ T5691] rc_core: IR keymap rc-imon-pad not found [ 1068.079922][ T5691] Registered IR keymap rc-empty [ 1068.079999][ T5691] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1068.080010][ T5691] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1068.080885][ T5691] imon:send_packet: packet tx failed (-71) [ 1068.103333][ T5691] imon 3-1:155.0: remote input dev register failed [ 1068.103492][ T5691] imon 3-1:155.0: imon_init_intf0: rc device setup failed [ 1068.182897][ T5691] imon 3-1:155.0: unable to initialize intf0, err 0 [ 1068.182917][ T5691] imon:imon_probe: failed to initialize context! [ 1068.182929][ T5691] imon 3-1:155.0: unable to register, err -19 [ 1068.204414][ T5691] usb 3-1: USB disconnect, device number 71 [ 1068.412006][T25600] fuse: Bad value for 'fd' [ 1068.557058][T25600] could not allocate digest TFM handle md4 [ 1068.631387][T25609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.631737][T25609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.676445][ T5691] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 1068.679413][T25611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.679940][T25611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.794091][T25617] loop9: detected capacity change from 0 to 7 [ 1068.815715][T25617] Dev loop9: unable to read RDB block 7 [ 1068.815761][T25617] loop9: unable to read partition table [ 1068.815912][T25617] loop9: partition table beyond EOD, truncated [ 1068.815943][T25617] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 1068.830451][ T5691] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1068.832616][ T5691] usb 3-1: config 0 has no interfaces? [ 1068.842401][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.842425][ T5691] usb 3-1: Product: syz [ 1068.842438][ T5691] usb 3-1: Manufacturer: syz [ 1068.842450][ T5691] usb 3-1: SerialNumber: syz [ 1068.852543][ T5691] usb 3-1: config 0 descriptor?? [ 1069.143581][ T25] usb 3-1: USB disconnect, device number 72 [ 1069.154316][ T1556] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1069.307170][ T1556] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1069.307791][ T5674] net_ratelimit: 1 callbacks suppressed [ 1069.307806][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.308815][ T1556] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1069.308882][ T1556] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.364225][ T1556] usb 6-1: config 0 descriptor?? [ 1069.515837][T25634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.528598][T25634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.545524][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.576675][ T1556] usbhid 6-1:0.0: can't add hid device: -71 [ 1069.576800][ T1556] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1069.586553][ T1556] usb 6-1: USB disconnect, device number 119 [ 1070.038919][ T1556] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1070.225190][ T1556] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1070.238606][ T1556] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1070.238680][ T1556] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.249002][ T1556] usb 6-1: config 0 descriptor?? [ 1070.347617][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.546729][ T5691] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1070.666763][ T5750] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1070.699483][ T5691] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1070.700660][ T5691] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1070.700687][ T5691] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1070.700709][ T5691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.710873][ T5691] usb 3-1: config 0 descriptor?? [ 1070.827142][ T5750] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1070.828427][ T5750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1070.828454][ T5750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1070.828474][ T5750] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1070.828536][ T5750] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.835370][ T5750] usb 2-1: config 0 descriptor?? [ 1070.840713][ T5750] hub 2-1:0.0: USB hub found [ 1071.043817][ T5750] hub 2-1:0.0: 9 ports detected [ 1071.044927][ T5750] hub 2-1:0.0: insufficient power available to use all downstream ports [ 1071.097183][ T1556] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 1071.100899][ T1556] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input167 [ 1071.154569][ T5691] cm6533_jd 0003:0D8C:0022.004A: unknown main item tag 0x0 [ 1071.154729][ T5691] cm6533_jd 0003:0D8C:0022.004A: unknown main item tag 0x0 [ 1071.203567][ T5691] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.004A/input/input168 [ 1071.264836][ T5691] cm6533_jd 0003:0D8C:0022.004A: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 1071.386857][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.398768][ T5750] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1071.461890][ T5750] usb 2-1: USB disconnect, device number 79 [ 1072.386349][ T5750] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1072.417151][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.466884][ T5691] usb 3-1: reset high-speed USB device number 73 using dummy_hcd [ 1072.536675][ T5750] usb 2-1: Using ep0 maxpacket: 8 [ 1072.539123][ T5750] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1072.540634][ T5750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 102, changing to 10 [ 1072.540661][ T5750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24624, setting to 1024 [ 1072.540722][ T5750] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.550662][ T5750] usb 2-1: config 0 descriptor?? [ 1072.595771][T12359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.628617][ T1556] usb 6-1: USB disconnect, device number 120 [ 1072.628695][ C1] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1072.772400][ T5750] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior2 [ 1072.920356][T25690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6296'. [ 1072.987061][ T25] usb 2-1: USB disconnect, device number 80 [ 1073.150632][T25694] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6298'. [ 1073.460032][ T1556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.498155][T12348] usb 3-1: USB disconnect, device number 73 [ 1074.189654][ T5618] Bluetooth: hci3: command 0x0406 tx timeout [ 1074.366583][ T5691] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1074.508246][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.516241][ T5691] usb 3-1: Using ep0 maxpacket: 32 [ 1074.526058][ T5691] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1074.550894][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.550920][ T5691] usb 3-1: Product: syz [ 1074.550934][ T5691] usb 3-1: Manufacturer: syz [ 1074.550948][ T5691] usb 3-1: SerialNumber: syz [ 1074.591608][ T5691] usb 3-1: config 0 descriptor?? [ 1074.608343][ T5691] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1074.822133][T25723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.822673][T25723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.882950][T25698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.905093][T25698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.537468][ T5674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.576374][ T1556] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1075.617006][T12348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.621782][ T151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.623704][T12348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.624180][T12348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.746407][ T1556] usb 6-1: Using ep0 maxpacket: 32 [ 1075.747281][ T1556] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1075.748527][ T1556] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.748572][ T1556] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1075.748596][ T1556] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1075.748637][ T1556] usb 6-1: config 155 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1075.748649][ T1556] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1075.752300][ T1556] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.752323][ T1556] usb 6-1: Product: syz [ 1075.752337][ T1556] usb 6-1: Manufacturer: syz [ 1075.752374][ T1556] usb 6-1: SerialNumber: syz [ 1075.867147][ T1556] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1075.867247][ T1556] imon 6-1:155.0: unable to initialize intf0, err -19 [ 1075.867263][ T1556] imon:imon_probe: failed to initialize context! [ 1075.867274][ T1556] imon 6-1:155.0: unable to register, err -19 [ 1076.097668][T12348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.238166][ T5691] gspca_ov534_9: reg_w failed -110 [ 1076.291861][T12348] usb 6-1: USB disconnect, device number 121 [ 1076.493607][T25698] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1076.493662][T25698] block device autoloading is deprecated and will be removed. [ 1076.526915][ T5691] gspca_ov534_9: Unknown sensor 0000 [ 1076.526985][ T5691] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 1076.567665][ T5674] usb 3-1: USB disconnect, device number 74 [ 1076.576506][ T1556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.780332][T25732] IPv6: addrconf: prefix option has invalid lifetime [ 1077.126922][ T5691] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1077.146589][ T5674] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1077.283687][ T5691] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1077.288388][ T5691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1077.288433][ T5691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.309427][ T5691] usb 2-1: config 0 descriptor?? [ 1077.339888][ T5674] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1077.339934][ T5674] usb 6-1: New USB device found, idVendor=0404, idProduct=0312, bcdDevice=42.c1 [ 1077.341707][ T5674] usb 6-1: config 160 has an invalid interface number: 168 but max is 0 [ 1077.341732][ T5674] usb 6-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.341747][ T5674] usb 6-1: config 160 has no interface number 0 [ 1077.341810][ T5674] usb 6-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 1077.341833][ T5674] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0x84 has invalid maxpacket 49717, setting to 1024 [ 1077.342792][ T5674] usb 6-1: config 160 interface 168 altsetting 8 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1077.342809][ T5674] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0x7 has an invalid bInterval 195, changing to 11 [ 1077.342822][ T5674] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1077.342835][ T5674] usb 6-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xE9, changing to 0x89 [ 1077.342848][ T5674] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0x89 has an invalid bInterval 206, changing to 11 [ 1077.342864][ T5674] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0x89 has invalid maxpacket 18397, setting to 1024 [ 1077.343131][ T5674] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0xC has invalid wMaxPacketSize 0 [ 1077.343154][ T5674] usb 6-1: config 160 interface 168 altsetting 8 bulk endpoint 0xC has invalid maxpacket 0 [ 1077.343175][ T5674] usb 6-1: config 160 interface 168 has no altsetting 0 [ 1077.363051][T25739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6309'. [ 1077.478007][T25739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6309'. [ 1077.506557][ T5674] usb 6-1: string descriptor 0 read error: -22 [ 1077.506729][ T5674] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.561447][T25735] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1077.561733][T25735] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1077.564749][ T5691] usbhid 2-1:0.0: can't add hid device: -71 [ 1077.564871][ T5691] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1077.565921][ T5674] io_edgeport 6-1:160.168: EPiC device converter detected [ 1077.570920][ T5674] usb 6-1: detected [ 1077.627353][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.627441][ T5691] usb 2-1: USB disconnect, device number 81 [ 1077.754399][T25744] vlan0: entered promiscuous mode [ 1077.787273][ T9] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 1077.876928][ T5674] usb 6-1: error in getting manufacturer descriptor: -32 [ 1077.877275][ T5674] usb 6-1: error in getting boot descriptor: -32 [ 1077.877318][ T5674] usb 6-1: Device Reported 0 serial ports vs. core thinking we have 1 ports, email greg@kroah.com this information. [ 1077.878370][ T5674] usb 6-1: Direct firmware load for edgeport/down.fw failed with error -2 [ 1077.878384][ T5674] usb 6-1: Falling back to sysfs fallback for: edgeport/down.fw [ 1077.916482][ T9] usb 3-1: device descriptor read/64, error -71 [ 1077.964713][T25750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6312'. [ 1078.066248][ T5691] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1078.156290][ T9] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 1078.217060][ T5691] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1078.218318][ T5691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1078.218355][ T5691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.223579][ T5691] usb 2-1: config 0 descriptor?? [ 1078.288400][ T9] usb 3-1: device descriptor read/64, error -71 [ 1078.399045][ T9] usb usb3-port1: attempt power cycle [ 1078.739284][ T9] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 1078.757432][ T9] usb 3-1: device descriptor read/8, error -71 [ 1078.787763][T25754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.789181][T25754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.996714][ T9] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 1079.016925][ T9] usb 3-1: device descriptor read/8, error -71 [ 1079.036791][ T5691] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 1079.038958][ T5691] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input169 [ 1079.126881][ T9] usb usb3-port1: unable to enumerate USB device [ 1079.696734][ T1556] net_ratelimit: 2 callbacks suppressed [ 1079.696776][ T1556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.009773][T25759] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6316'. [ 1080.067059][T25761] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6317'. [ 1080.067087][T25761] netlink: 43 bytes leftover after parsing attributes in process `syz.5.6317'. [ 1080.067102][T25761] netlink: 'syz.5.6317': attribute type 5 has an invalid length. [ 1080.067114][T25761] netlink: 43 bytes leftover after parsing attributes in process `syz.5.6317'. [ 1080.463905][ T25] usb 2-1: USB disconnect, device number 82 [ 1080.464060][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1080.738382][ T5676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.928240][ T25] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 1081.049630][T25775] bridge1: entered promiscuous mode [ 1081.087700][ T25] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1081.089017][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1081.089037][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1081.089050][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 1081.089091][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.091145][T25775] bridge2: entered promiscuous mode [ 1081.092397][ T25] usb 2-1: config 0 descriptor?? [ 1081.221965][T11859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.253847][ T5676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.268820][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.586412][ T5691] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1081.737249][ T5691] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1081.738251][ T5691] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1081.738279][ T5691] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1081.738301][ T5691] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1081.738371][ T5691] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1081.738409][ T5691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.741727][ T5691] usb 3-1: config 0 descriptor?? [ 1081.819490][ T5676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.064542][T25793] sctp: [Deprecated]: syz.0.6325 (pid 25793) Use of int in maxseg socket option. [ 1082.064542][T25793] Use struct sctp_assoc_value instead [ 1082.065091][T25793] netlink: 'syz.0.6325': attribute type 1 has an invalid length. [ 1082.065132][T25793] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1082.174193][T25795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6324'. [ 1082.215684][ T5691] plantronics 0003:047F:FFFF.004B: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1082.256416][ T25] ath6kl: Failed to submit usb control message: -110 [ 1082.256490][ T25] ath6kl: unable to send the bmi data to the device: -110 [ 1082.256505][ T25] ath6kl: Unable to send get target info: -110 [ 1082.259041][ T25] ath6kl: Failed to init ath6kl core: -110 [ 1082.259909][ T25] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1082.342984][T25797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6326'. [ 1082.772546][T25797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.773808][T25797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.808744][T25803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.820343][T25803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.897715][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.936869][T25804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.937271][T25804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.997286][T25803] libceph: resolve 'c' (ret=-3): failed [ 1083.639236][ T1556] usb 2-1: USB disconnect, device number 83 [ 1083.660887][T25819] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 1083.947407][ T5676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.100327][ T1556] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1084.246237][ T1556] usb 2-1: Using ep0 maxpacket: 32 [ 1084.247136][ T1556] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1084.248661][ T1556] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.248730][ T1556] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1084.248755][ T1556] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1084.248775][ T1556] usb 2-1: config 155 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1084.248796][ T1556] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1084.251758][ T1556] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.251779][ T1556] usb 2-1: Product: syz [ 1084.251792][ T1556] usb 2-1: Manufacturer: syz [ 1084.251806][ T1556] usb 2-1: SerialNumber: syz [ 1084.346968][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.369472][ T1556] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1084.369593][ T1556] imon 2-1:155.0: unable to initialize intf0, err -19 [ 1084.369610][ T1556] imon:imon_probe: failed to initialize context! [ 1084.369621][ T1556] imon 2-1:155.0: unable to register, err -19 [ 1084.572997][ T5691] usb 3-1: USB disconnect, device number 79 [ 1084.848741][ T9] usb 2-1: USB disconnect, device number 84 [ 1084.919042][T25837] sctp: [Deprecated]: syz.4.6336 (pid 25837) Use of int in maxseg socket option. [ 1084.919042][T25837] Use struct sctp_assoc_value instead [ 1084.919411][T25837] netlink: 'syz.4.6336': attribute type 1 has an invalid length. [ 1084.919455][T25837] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1084.976719][ T1556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.088163][ T5691] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 1085.095721][T25839] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6337'. [ 1085.241629][ T5691] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1085.242228][ T5691] usb 3-1: not running at top speed; connect to a high speed hub [ 1085.242259][ T5691] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1085.243256][ T5691] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 1085.243278][ T5691] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 1085.243298][ T5691] usb 3-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.243316][ T5691] usb 3-1: config 14 has no interface number 0 [ 1085.243331][ T5691] usb 3-1: config 14 has no interface number 1 [ 1085.243389][ T5691] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1085.243411][ T5691] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1085.243434][ T5691] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1085.243457][ T5691] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1085.243481][ T5691] usb 3-1: config 14 interface 57 has no altsetting 0 [ 1085.243497][ T5691] usb 3-1: config 14 interface 228 has no altsetting 0 [ 1085.246138][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.246282][ T5691] usb 3-1: Product: syz [ 1085.246298][ T5691] usb 3-1: Manufacturer: syz [ 1085.246311][ T5691] usb 3-1: SerialNumber: syz [ 1085.636662][T25843] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6339'. [ 1085.699805][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.704485][ T151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.707077][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.712131][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.718694][T25835] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1085.841213][T25848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6334'. [ 1086.016423][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.061890][T25851] netlink: Unknown conntrack attr (type=9222, max=9) [ 1086.062353][T25851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1086.260937][T25855] FAULT_INJECTION: forcing a failure. [ 1086.260937][T25855] name failslab, interval 1, probability 0, space 0, times 0 [ 1086.260974][T25855] CPU: 1 UID: 0 PID: 25855 Comm: syz.0.6343 Tainted: G L syzkaller #0 PREEMPT(full) [ 1086.260999][T25855] Tainted: [L]=SOFTLOCKUP [ 1086.261006][T25855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1086.261018][T25855] Call Trace: [ 1086.261025][T25855] [ 1086.261034][T25855] dump_stack_lvl+0xe8/0x150 [ 1086.261067][T25855] should_fail_ex+0x410/0x560 [ 1086.261095][T25855] should_failslab+0xa8/0x100 [ 1086.261120][T25855] ? mas_alloc_nodes+0x291/0x350 [ 1086.261145][T25855] kmem_cache_alloc_noprof+0xa1/0x600 [ 1086.261173][T25855] ? mas_alloc_nodes+0x291/0x350 [ 1086.261199][T25855] mas_alloc_nodes+0x291/0x350 [ 1086.261232][T25855] mas_preallocate+0x42a/0x840 [ 1086.261259][T25855] ? __pfx_mas_preallocate+0x10/0x10 [ 1086.261277][T25855] ? vm_area_alloc+0x24/0x140 [ 1086.261309][T25855] ? vma_set_pgoff+0x1e8/0x2d0 [ 1086.261331][T25855] ? vma_set_range+0x136/0x2a0 [ 1086.261352][T25855] mmap_region+0x13b7/0x2270 [ 1086.261374][T25855] ? mmap_region+0x1221/0x2270 [ 1086.261400][T25855] ? __lock_acquire+0x747/0x2de0 [ 1086.261423][T25855] ? __pfx_mmap_region+0x10/0x10 [ 1086.261445][T25855] ? mas_ascend+0x2f9/0x8b0 [ 1086.261478][T25855] ? mas_prev_node+0xbfd/0xe80 [ 1086.261504][T25855] ? mas_prev_slot+0xb76/0xbf0 [ 1086.261603][T25855] ? mm_get_unmapped_area_vmaflags+0xd9/0x110 [ 1086.261628][T25855] ? cap_mmap_addr+0xaf/0x100 [ 1086.261648][T25855] ? bpf_lsm_mmap_addr+0x9/0x50 [ 1086.261669][T25855] ? security_mmap_addr+0x71/0x240 [ 1086.261697][T25855] do_mmap+0xe0a/0x1300 [ 1086.261718][T25855] ? count_memcg_event_mm+0x21/0x260 [ 1086.261747][T25855] ? __pfx_do_mmap+0x10/0x10 [ 1086.261778][T25855] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 1086.261798][T25855] ? down_write_killable+0x17e/0x240 [ 1086.261827][T25855] ? __pfx_down_write_killable+0x10/0x10 [ 1086.261853][T25855] ? apparmor_mmap_file+0xbe/0xe0 [ 1086.261874][T25855] vm_mmap_pgoff+0x272/0x4e0 [ 1086.261899][T25855] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1086.261919][T25855] ? exc_page_fault+0x6a/0xc0 [ 1086.261941][T25855] ? ksys_mmap_pgoff+0xf3/0x760 [ 1086.261964][T25855] ? __ia32_sys_mmap_pgoff+0x21/0xf0 [ 1086.261991][T25855] __do_fast_syscall_32+0x27a/0x6a0 [ 1086.262013][T25855] ? do_fast_syscall_32+0x33/0x70 [ 1086.262034][T25855] ? irqentry_exit+0x10f/0x910 [ 1086.262052][T25855] ? trace_irq_disable+0x3b/0x140 [ 1086.262073][T25855] do_fast_syscall_32+0x33/0x70 [ 1086.262096][T25855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1086.262120][T25855] RIP: 0023:0xf7f490ec [ 1086.262135][T25855] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1086.262149][T25855] RSP: 002b:00000000f5405210 EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 1086.262166][T25855] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000200000 [ 1086.262178][T25855] RDX: 0000000000000000 RSI: 0000000000000022 RDI: 00000000ffffffff [ 1086.262188][T25855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1086.262197][T25855] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1086.262208][T25855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1086.262244][T25855] [ 1086.758089][ T5750] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1086.774850][T25862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1086.775277][T25862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1086.843448][T25862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1086.846999][T25862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1086.905976][T25862] libceph: resolve 'c' (ret=-3): failed [ 1086.907486][ T5750] usb 2-1: Using ep0 maxpacket: 32 [ 1086.913058][ T5750] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1086.919368][ T5750] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.919412][ T5750] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1086.919458][ T5750] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1086.919477][ T5750] usb 2-1: config 155 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1086.919497][ T5750] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1086.924419][T25862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1086.924929][T25862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1086.937358][ T5750] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.937382][ T5750] usb 2-1: Product: syz [ 1086.937396][ T5750] usb 2-1: Manufacturer: syz [ 1086.937409][ T5750] usb 2-1: SerialNumber: syz [ 1087.039456][ T5750] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1087.039584][ T5750] imon 2-1:155.0: unable to initialize intf0, err -19 [ 1087.039594][ T5750] imon:imon_probe: failed to initialize context! [ 1087.039601][ T5750] imon 2-1:155.0: unable to register, err -19 [ 1087.061120][ T1556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.377226][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.834935][ T5691] legousbtower 3-1:14.57: interrupt endpoints not found [ 1087.868277][ T5691] legousbtower 3-1:14.228: get version request failed: -71 [ 1087.868739][ T5691] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71 [ 1087.909896][ T5691] usb 3-1: USB disconnect, device number 80 [ 1087.911675][T25871] loop9: detected capacity change from 0 to 7 [ 1087.948139][T25871] Dev loop9: unable to read RDB block 7 [ 1087.948252][T25871] loop9: unable to read partition table [ 1087.948516][T25871] loop9: partition table beyond EOD, truncated [ 1087.948533][T25871] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 1087.971466][T25870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6347'. [ 1088.163460][T25874] syzkaller0: entered promiscuous mode [ 1088.163476][T25874] syzkaller0: entered allmulticast mode [ 1088.180798][T25874] netlink: 200 bytes leftover after parsing attributes in process `syz.2.6348'. [ 1088.934253][T25892] hub 9-0:1.0: USB hub found [ 1088.937940][T25892] hub 9-0:1.0: 1 port detected [ 1089.170794][T25900] sctp: [Deprecated]: syz.2.6357 (pid 25900) Use of int in maxseg socket option. [ 1089.170794][T25900] Use struct sctp_assoc_value instead [ 1089.445935][T25906] loop4: detected capacity change from 0 to 7 [ 1089.474041][T25906] loop4: [ 1089.474076][T25906] loop4: partition table partially beyond EOD, truncated [ 1089.494332][T25906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6359'. [ 1089.593121][ T1556] usb 2-1: USB disconnect, device number 85 [ 1089.854563][T25910] netdevsim netdevsim1: Direct firmware load for . [ 1089.854563][T25910] failed with error -2 [ 1089.855876][T25910] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1089.855876][T25910] [ 1089.892055][T25911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6360'. [ 1089.990313][T25915] syzkaller0: entered promiscuous mode [ 1089.990327][T25915] syzkaller0: entered allmulticast mode [ 1089.998875][T25915] netlink: 200 bytes leftover after parsing attributes in process `syz.0.6362'. [ 1090.216530][ T1556] net_ratelimit: 2 callbacks suppressed [ 1090.216564][ T1556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.417183][T12359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.564794][T25918] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6363'. [ 1090.679052][T25921] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6364'. [ 1090.818366][T11848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.821153][ T5676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.821627][T12359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.991859][ T31] kauditd_printk_skb: 174 callbacks suppressed [ 1090.991876][ T31] audit: type=1326 audit(1790221993.828:28027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25923 comm="syz.2.6365" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 1090.994188][ T31] audit: type=1326 audit(1790221993.828:28028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25923 comm="syz.2.6365" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 1090.994232][ T31] audit: type=1326 audit(1790221993.828:28029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25923 comm="syz.2.6365" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 1090.994616][ T31] audit: type=1326 audit(1790221993.828:28030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25923 comm="syz.2.6365" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 1091.030823][ T31] audit: type=1326 audit(1790221993.868:28031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25923 comm="syz.2.6365" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 1091.046928][ T31] audit: type=1326 audit(1790221993.868:28032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25923 comm="syz.2.6365" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 1091.050729][ T31] audit: type=1326 audit(1790221993.868:28033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25923 comm="syz.2.6365" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 1091.297289][ T1556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.526297][T12359] usb 3-1: new low-speed USB device number 81 using dummy_hcd [ 1091.676245][T12359] usb 3-1: Invalid ep0 maxpacket: 64 [ 1091.806602][T12359] usb 3-1: new low-speed USB device number 82 using dummy_hcd [ 1091.956433][T12359] usb 3-1: Invalid ep0 maxpacket: 64 [ 1091.956807][T12359] usb usb3-port1: attempt power cycle [ 1092.296820][T12359] usb 3-1: new low-speed USB device number 83 using dummy_hcd [ 1092.317009][T12359] usb 3-1: Invalid ep0 maxpacket: 64 [ 1092.336475][ T1556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.433708][T25962] netlink: 192 bytes leftover after parsing attributes in process `syz.0.6378'. [ 1092.446712][T12359] usb 3-1: new low-speed USB device number 84 using dummy_hcd [ 1092.468095][T12359] usb 3-1: Invalid ep0 maxpacket: 64 [ 1092.468335][T12359] usb usb3-port1: unable to enumerate USB device [ 1093.379076][ T5676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.458399][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.407373][T25981] batman_adv: batadv0: Adding interface: syzkaller0 [ 1094.407391][T25981] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1094.407419][T25981] batman_adv: batadv0: Interface activated: syzkaller0 [ 1094.413510][T25980] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1094.433678][ T1556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.492554][T25980] batman_adv: batadv0: Removing interface: syzkaller0 [ 1094.996408][ T5691] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1095.147115][ T5691] usb 3-1: Using ep0 maxpacket: 8 [ 1095.148695][ T5691] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1095.152418][ T5691] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1095.152469][ T5691] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1095.152489][ T5691] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1095.152511][ T5691] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1095.152532][ T5691] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1095.152570][ T5691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.233543][T25995] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1095.456766][ T1556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.458372][ T5691] usb 3-1: usb_control_msg returned -32 [ 1095.458501][ T5691] usbtmc 3-1:16.0: can't read capabilities [ 1095.512416][T25999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6386'. [ 1096.039290][T26006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6388'. [ 1096.069281][T26006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6388'. [ 1096.414157][T26011] sctp: [Deprecated]: syz.0.6390 (pid 26011) Use of int in maxseg socket option. [ 1096.414157][T26011] Use struct sctp_assoc_value instead [ 1096.414480][T26011] netlink: 'syz.0.6390': attribute type 1 has an invalid length. [ 1096.414523][T26011] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1096.496529][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.496558][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.579365][T20218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.580094][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.585632][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.521584][T26021] netlink: 7 bytes leftover after parsing attributes in process `syz.1.6393'. [ 1097.536510][ T1556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.746307][T26024] FAULT_INJECTION: forcing a failure. [ 1097.746307][T26024] name failslab, interval 1, probability 0, space 0, times 0 [ 1097.746415][T26024] CPU: 1 UID: 0 PID: 26024 Comm: syz.0.6394 Tainted: G L syzkaller #0 PREEMPT(full) [ 1097.746440][T26024] Tainted: [L]=SOFTLOCKUP [ 1097.746448][T26024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1097.746458][T26024] Call Trace: [ 1097.746465][T26024] [ 1097.746470][T26024] dump_stack_lvl+0xe8/0x150 [ 1097.746491][T26024] should_fail_ex+0x410/0x560 [ 1097.746506][T26024] should_failslab+0xa8/0x100 [ 1097.746523][T26024] __kmalloc_cache_noprof+0xa3/0x600 [ 1097.746534][T26024] ? __lock_acquire+0x747/0x2de0 [ 1097.746545][T26024] ? kvm_arch_vcpu_ioctl+0x338/0x23a0 [ 1097.746558][T26024] ? kvm_arch_vcpu_ioctl+0x338/0x23a0 [ 1097.746584][T26024] kvm_arch_vcpu_ioctl+0x338/0x23a0 [ 1097.746611][T26024] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 1097.746630][T26024] ? __lock_acquire+0x747/0x2de0 [ 1097.746660][T26024] ? lock_acquire+0x115/0x350 [ 1097.746684][T26024] ? lock_acquire+0x115/0x350 [ 1097.746711][T26024] ? is_bpf_text_address+0x26/0x2b0 [ 1097.746729][T26024] ? is_bpf_text_address+0x292/0x2b0 [ 1097.746741][T26024] ? is_bpf_text_address+0x26/0x2b0 [ 1097.746755][T26024] ? kernel_text_address+0xa5/0xe0 [ 1097.746775][T26024] ? __kernel_text_address+0xd/0x30 [ 1097.746786][T26024] ? unwind_get_return_address+0x4d/0x90 [ 1097.746799][T26024] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1097.746810][T26024] ? arch_stack_walk+0xfb/0x150 [ 1097.746825][T26024] ? __lock_acquire+0x747/0x2de0 [ 1097.746839][T26024] ? __pfx_stack_trace_save+0x10/0x10 [ 1097.746850][T26024] ? stack_depot_save_flags+0x33/0x7f0 [ 1097.746868][T26024] ? __mutex_trylock_common+0x15f/0x270 [ 1097.746882][T26024] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1097.746896][T26024] ? rcu_is_watching+0x16/0xb0 [ 1097.746908][T26024] ? trace_contention_end+0x3d/0x140 [ 1097.746922][T26024] ? __mutex_lock+0x30b/0x1550 [ 1097.746942][T26024] ? kvm_vcpu_ioctl+0x27f/0xfd0 [ 1097.746955][T26024] ? __pfx___mutex_lock+0x10/0x10 [ 1097.746971][T26024] ? kasan_quarantine_put+0xbb/0x1f0 [ 1097.746987][T26024] kvm_vcpu_ioctl+0x7e3/0xfd0 [ 1097.747001][T26024] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1097.747010][T26024] ? do_vfs_ioctl+0x116f/0x1530 [ 1097.747024][T26024] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1097.747041][T26024] ? hook_file_ioctl_compat+0x1f2/0x600 [ 1097.747064][T26024] kvm_vcpu_compat_ioctl+0x204/0x390 [ 1097.747077][T26024] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1097.747089][T26024] ? __fget_files+0x3a2/0x420 [ 1097.747102][T26024] ? __fget_files+0x2a/0x420 [ 1097.747117][T26024] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1097.747133][T26024] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1097.747146][T26024] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1097.747158][T26024] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1097.747171][T26024] ? __fget_files+0x3a2/0x420 [ 1097.747187][T26024] ? fput+0xa0/0xd0 [ 1097.747200][T26024] ? ksys_write+0x242/0x270 [ 1097.747220][T26024] __do_fast_syscall_32+0x27a/0x6a0 [ 1097.747234][T26024] ? do_fast_syscall_32+0x33/0x70 [ 1097.747246][T26024] ? asm_int80_emulation+0x1a/0x20 [ 1097.747258][T26024] ? do_int80_emulation+0x299/0x500 [ 1097.747275][T26024] do_fast_syscall_32+0x33/0x70 [ 1097.747288][T26024] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1097.747301][T26024] RIP: 0023:0xf7f490ec [ 1097.747311][T26024] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1097.747320][T26024] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1097.747332][T26024] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000008400ae8e [ 1097.747340][T26024] RDX: 0000000080000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 1097.747346][T26024] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1097.747352][T26024] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1097.747358][T26024] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1097.747373][T26024] [ 1097.874508][ T1556] usb 3-1: USB disconnect, device number 85 [ 1098.036770][ T5676] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1098.099898][ T31] audit: type=1326 audit(1790222000.938:28034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26028 comm="syz.2.6397" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 1098.099967][ T31] audit: type=1326 audit(1790222000.938:28035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26028 comm="syz.2.6397" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 1098.122847][ T31] audit: type=1326 audit(1790222000.958:28036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26028 comm="syz.2.6397" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 1098.122897][ T31] audit: type=1326 audit(1790222000.958:28037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26028 comm="syz.2.6397" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 1098.122956][ T31] audit: type=1326 audit(1790222000.958:28038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26028 comm="syz.2.6397" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 1098.139196][ T31] audit: type=1326 audit(1790222000.978:28039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26028 comm="syz.2.6397" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71e75ab code=0x7ffc0000 [ 1098.139280][ T31] audit: type=1326 audit(1790222000.978:28040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26028 comm="syz.2.6397" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 1098.139319][ T31] audit: type=1326 audit(1790222000.978:28041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26028 comm="syz.2.6397" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 1098.152922][ T31] audit: type=1326 audit(1790222000.988:28042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26028 comm="syz.2.6397" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 1098.152997][ T31] audit: type=1326 audit(1790222000.988:28043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26028 comm="syz.2.6397" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 1098.190217][ T5676] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1098.191553][ T5676] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1098.191588][ T5676] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1098.191632][ T5676] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1098.191669][ T5676] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.202328][ T5676] usb 2-1: config 0 descriptor?? [ 1098.213355][ T5676] hub 2-1:0.0: USB hub found [ 1098.414988][ T5676] hub 2-1:0.0: 9 ports detected [ 1098.415497][ T5676] hub 2-1:0.0: insufficient power available to use all downstream ports [ 1098.579029][ T1556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.625819][ T5676] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1098.669210][ T5676] usb 2-1: USB disconnect, device number 86 [ 1098.734138][T26045] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6399'. [ 1099.401377][T26058] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 1099.547886][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.656795][ T5675] net_ratelimit: 1 callbacks suppressed [ 1100.656809][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.321766][T26093] FAULT_INJECTION: forcing a failure. [ 1101.321766][T26093] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.321798][T26093] CPU: 0 UID: 0 PID: 26093 Comm: syz.2.6411 Tainted: G L syzkaller #0 PREEMPT(full) [ 1101.321814][T26093] Tainted: [L]=SOFTLOCKUP [ 1101.321818][T26093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1101.321825][T26093] Call Trace: [ 1101.321829][T26093] [ 1101.321834][T26093] dump_stack_lvl+0xe8/0x150 [ 1101.321855][T26093] should_fail_ex+0x410/0x560 [ 1101.321880][T26093] should_failslab+0xa8/0x100 [ 1101.321909][T26093] __kmalloc_node_noprof+0x100/0x720 [ 1101.321934][T26093] ? __get_vm_area_node+0x200/0x2f0 [ 1101.321957][T26093] ? __get_vm_area_node+0x283/0x2f0 [ 1101.321970][T26093] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 1101.321983][T26093] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 1101.322001][T26093] __vmalloc_node_range_noprof+0x5b4/0x1540 [ 1101.322046][T26093] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1101.322081][T26093] ? bpf_diag_init+0x87/0x140 [ 1101.322102][T26093] ? bpf_diag_init+0x87/0x140 [ 1101.322116][T26093] ? bpf_check+0x10ee/0x2e10 [ 1101.322127][T26093] __vmalloc_noprof+0xd2/0x120 [ 1101.322141][T26093] ? bpf_check+0x10ee/0x2e10 [ 1101.322153][T26093] bpf_check+0x10ee/0x2e10 [ 1101.322175][T26093] ? ktime_get_with_offset+0x93/0x2d0 [ 1101.322200][T26093] ? __pfx_bpf_check+0x10/0x10 [ 1101.322223][T26093] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1101.322253][T26093] bpf_prog_load+0x14d6/0x1c20 [ 1101.322272][T26093] ? __pfx_bpf_prog_load+0x10/0x10 [ 1101.322297][T26093] __sys_bpf+0xd0d/0xd90 [ 1101.322312][T26093] ? __pfx___sys_bpf+0x10/0x10 [ 1101.322335][T26093] ? ksys_write+0x1e6/0x270 [ 1101.322366][T26093] ? __mutex_unlock_slowpath+0x731/0x900 [ 1101.322408][T26093] ? fput+0xa0/0xd0 [ 1101.322420][T26093] ? ksys_write+0x242/0x270 [ 1101.322440][T26093] __ia32_sys_bpf+0xba/0xd0 [ 1101.322452][T26093] __do_fast_syscall_32+0x27a/0x6a0 [ 1101.322468][T26093] ? do_fast_syscall_32+0x33/0x70 [ 1101.322491][T26093] ? asm_int80_emulation+0x1a/0x20 [ 1101.322510][T26093] ? do_int80_emulation+0x299/0x500 [ 1101.322533][T26093] ? trace_irq_disable+0x3b/0x140 [ 1101.322555][T26093] do_fast_syscall_32+0x33/0x70 [ 1101.322569][T26093] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1101.322581][T26093] RIP: 0023:0xf70af0ec [ 1101.322591][T26093] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1101.322600][T26093] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1101.322612][T26093] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000100 [ 1101.322623][T26093] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 1101.322634][T26093] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1101.322644][T26093] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1101.322656][T26093] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1101.322685][T26093] [ 1101.324302][T26093] warn_alloc: 1 callbacks suppressed [ 1101.324342][T26093] syz.2.6411: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1101.324399][T26093] CPU: 0 UID: 0 PID: 26093 Comm: syz.2.6411 Tainted: G L syzkaller #0 PREEMPT(full) [ 1101.324419][T26093] Tainted: [L]=SOFTLOCKUP [ 1101.324425][T26093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1101.324432][T26093] Call Trace: [ 1101.324437][T26093] [ 1101.324442][T26093] dump_stack_lvl+0xe8/0x150 [ 1101.324465][T26093] warn_alloc+0x24d/0x270 [ 1101.324490][T26093] ? __pfx_warn_alloc+0x10/0x10 [ 1101.324516][T26093] ? __kmalloc_node_noprof+0x4d7/0x720 [ 1101.324533][T26093] ? __get_vm_area_node+0x200/0x2f0 [ 1101.324556][T26093] ? __get_vm_area_node+0x283/0x2f0 [ 1101.324568][T26093] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 1101.324582][T26093] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 1101.324600][T26093] __vmalloc_node_range_noprof+0x969/0x1540 [ 1101.324651][T26093] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1101.324685][T26093] ? bpf_diag_init+0x87/0x140 [ 1101.324705][T26093] ? bpf_diag_init+0x87/0x140 [ 1101.324720][T26093] ? bpf_check+0x10ee/0x2e10 [ 1101.324730][T26093] __vmalloc_noprof+0xd2/0x120 [ 1101.324744][T26093] ? bpf_check+0x10ee/0x2e10 [ 1101.324756][T26093] bpf_check+0x10ee/0x2e10 [ 1101.324777][T26093] ? ktime_get_with_offset+0x93/0x2d0 [ 1101.324802][T26093] ? __pfx_bpf_check+0x10/0x10 [ 1101.324825][T26093] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1101.324856][T26093] bpf_prog_load+0x14d6/0x1c20 [ 1101.324876][T26093] ? __pfx_bpf_prog_load+0x10/0x10 [ 1101.324901][T26093] __sys_bpf+0xd0d/0xd90 [ 1101.324916][T26093] ? __pfx___sys_bpf+0x10/0x10 [ 1101.324945][T26093] ? ksys_write+0x1e6/0x270 [ 1101.324977][T26093] ? __mutex_unlock_slowpath+0x731/0x900 [ 1101.325016][T26093] ? fput+0xa0/0xd0 [ 1101.325028][T26093] ? ksys_write+0x242/0x270 [ 1101.325045][T26093] __ia32_sys_bpf+0xba/0xd0 [ 1101.325058][T26093] __do_fast_syscall_32+0x27a/0x6a0 [ 1101.325073][T26093] ? do_fast_syscall_32+0x33/0x70 [ 1101.325097][T26093] ? asm_int80_emulation+0x1a/0x20 [ 1101.325115][T26093] ? do_int80_emulation+0x299/0x500 [ 1101.325138][T26093] ? trace_irq_disable+0x3b/0x140 [ 1101.325161][T26093] do_fast_syscall_32+0x33/0x70 [ 1101.325174][T26093] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1101.325186][T26093] RIP: 0023:0xf70af0ec [ 1101.325196][T26093] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1101.325204][T26093] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1101.325214][T26093] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000100 [ 1101.325223][T26093] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 1101.325234][T26093] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1101.325244][T26093] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1101.325257][T26093] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1101.325286][T26093] [ 1101.325467][T26093] Mem-Info: [ 1101.325506][T26093] active_anon:18273 inactive_anon:507 isolated_anon:0 [ 1101.325506][T26093] active_file:5015 inactive_file:22239 isolated_file:0 [ 1101.325506][T26093] unevictable:0 dirty:206 writeback:0 [ 1101.325506][T26093] slab_reclaimable:7675 slab_unreclaimable:111419 [ 1101.325506][T26093] mapped:36622 shmem:11910 pagetables:1855 [ 1101.325506][T26093] sec_pagetables:0 bounce:0 [ 1101.325506][T26093] kernel_misc_reclaimable:0 [ 1101.325506][T26093] free:1283285 free_pcp:11160 free_cma:0 [ 1101.325582][T26093] Node 0 active_anon:73092kB inactive_anon:2028kB active_file:20060kB inactive_file:88716kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:146420kB dirty:824kB writeback:0kB shmem:47640kB shmem_thp:2048kB shmem_pmdmapped:2048kB anon_thp:0kB kernel_stack:14452kB pagetables:7260kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1101.368783][T26093] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:240kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1101.368839][T26093] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1101.368869][T26093] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1101.368890][T26093] Node 0 DMA32 free:1176540kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:73092kB inactive_anon:2028kB active_file:20060kB inactive_file:88716kB unevictable:0kB writepending:824kB zspages:0kB present:3129332kB managed:2546944kB mlocked:0kB bounce:0kB free_pcp:44628kB local_pcp:19184kB free_cma:0kB [ 1101.368951][T26093] lowmem_reserve[]: 0 0 0 0 0 [ 1101.368981][T26093] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1101.369008][T26093] lowmem_reserve[]: 0 0 0 0 0 [ 1101.369024][T26093] Node 1 Normal free:3941240kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:240kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1101.369063][T26093] lowmem_reserve[]: 0 0 0 0 0 [ 1101.369094][T26093] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1101.369167][T26093] Node 0 DMA32: 281*4kB (UE) 579*8kB (UME) 818*16kB (UME) 474*32kB (UME) 411*64kB (UME) 216*128kB (UME) 72*256kB (UME) 64*512kB (UME) 45*1024kB (UME) 18*2048kB (UME) 233*4096kB (UM) = 1176476kB [ 1101.369287][T26093] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1101.369334][T26093] Node 1 Normal: 10*4kB (UM) 14*8kB (UM) 10*16kB (UM) 10*32kB (UM) 10*64kB (UM) 7*128kB (UM) 1*256kB (U) 3*512kB (UM) 3*1024kB (UM) 5*2048kB (UM) 958*4096kB (UM) = 3941240kB [ 1101.369452][T26093] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1101.369460][T26093] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1101.369468][T26093] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1101.369476][T26093] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1101.369484][T26093] 39661 total pagecache pages [ 1101.369488][T26093] 501 pages in swap cache [ 1101.369492][T26093] Free swap = 122944kB [ 1101.369499][T26093] Total swap = 124996kB [ 1101.369506][T26093] 2097051 pages RAM [ 1101.369513][T26093] 0 pages HighMem/MovableOnly [ 1101.369520][T26093] 428699 pages reserved [ 1101.369527][T26093] 0 pages cma reserved [ 1101.696932][ T5675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.216358][ T1556] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1102.381029][ T1556] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1102.388357][ T1556] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1102.388385][ T1556] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1102.388405][ T1556] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1102.388465][ T1556] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.398343][ T1556] usb 3-1: config 0 descriptor?? [ 1102.403374][ T1556] hub 3-1:0.0: USB hub found [ 1102.498027][T26080] Bluetooth: hci4: command 0x0406 tx timeout [ 1102.577240][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.607080][ T1556] hub 3-1:0.0: 9 ports detected [ 1102.608825][ T1556] hub 3-1:0.0: insufficient power available to use all downstream ports [ 1102.737440][ T5676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.799116][T26102] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6415'. [ 1102.821572][ T1556] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 1102.860786][ T1556] usb 3-1: USB disconnect, device number 86 [ 1102.947209][T26106] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1103.206410][ T5691] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1103.353075][T26117] netlink: 'syz.5.6419': attribute type 15 has an invalid length. [ 1103.353099][T26117] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6419'. [ 1103.375318][ T5691] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1103.392951][ T5691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.392976][ T5691] usb 2-1: Product: syz [ 1103.392989][ T5691] usb 2-1: Manufacturer: syz [ 1103.393001][ T5691] usb 2-1: SerialNumber: syz [ 1103.442840][T26117] syzkaller1: entered promiscuous mode [ 1103.442885][T26117] syzkaller1: entered allmulticast mode [ 1103.458733][ T5750] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1103.480691][T26117] netlink: 'syz.5.6419': attribute type 4 has an invalid length. [ 1103.499583][T26117] netlink: 1988 bytes leftover after parsing attributes in process `syz.5.6419'. [ 1103.780031][ T5676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.821208][ T31] kauditd_printk_skb: 33 callbacks suppressed [ 1103.821250][ T31] audit: type=1326 audit(1790222006.658:28077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26124 comm="syz.4.6421" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 1103.821293][ T31] audit: type=1326 audit(1790222006.658:28078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26124 comm="syz.4.6421" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 1103.832331][ T1556] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 1103.842855][ T31] audit: type=1326 audit(1790222006.668:28079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26124 comm="syz.4.6421" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 1103.842910][ T31] audit: type=1326 audit(1790222006.668:28080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26124 comm="syz.4.6421" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 1103.842971][ T31] audit: type=1326 audit(1790222006.668:28081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26124 comm="syz.4.6421" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 1103.844371][ T31] audit: type=1326 audit(1790222006.668:28082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26124 comm="syz.4.6421" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71f75ab code=0x7ffc0000 [ 1103.847922][ T31] audit: type=1326 audit(1790222006.668:28083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26124 comm="syz.4.6421" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 1103.847967][ T31] audit: type=1326 audit(1790222006.668:28084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26124 comm="syz.4.6421" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 1103.851037][ T31] audit: type=1326 audit(1790222006.668:28085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26124 comm="syz.4.6421" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 1103.851080][ T31] audit: type=1326 audit(1790222006.668:28086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26124 comm="syz.4.6421" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 1103.908398][T26112] random: crng reseeded on system resumption [ 1104.041538][ T1556] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 1104.044916][ T1556] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.044997][ T1556] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1104.045017][ T1556] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1104.050906][ T1556] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.050930][ T1556] usb 3-1: Product: syz [ 1104.050944][ T1556] usb 3-1: Manufacturer: syz [ 1104.050957][ T1556] usb 3-1: SerialNumber: syz [ 1104.182110][ T5676] usb 2-1: USB disconnect, device number 87 [ 1104.331572][ T1556] snd-usb-caiaq 3-1:1.0: invalid EPs [ 1104.331596][ T1556] usb 3-1: unable to init card! (ret=-22) [ 1104.334693][ T1556] snd-usb-caiaq 3-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 1104.496374][ T5750] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1104.496554][ T5750] ath9k_htc: Failed to initialize the device [ 1104.498078][ T5676] usb 2-1: ath9k_htc: USB layer deinitialized [ 1104.774427][T26144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6426'. [ 1104.826738][ T1556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.026256][ T5750] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1105.176508][ T5750] usb 2-1: Using ep0 maxpacket: 32 [ 1105.178558][ T5750] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1105.178602][ T5750] usb 2-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 1105.179471][ T5750] usb 2-1: config 3 has an invalid interface number: 223 but max is 1 [ 1105.179492][ T5750] usb 2-1: config 3 has an invalid interface number: 25 but max is 1 [ 1105.179509][ T5750] usb 2-1: config 3 has an invalid interface number: 223 but max is 1 [ 1105.179519][ T5750] usb 2-1: config 3 has no interface number 0 [ 1105.179527][ T5750] usb 2-1: config 3 has no interface number 1 [ 1105.179769][ T5750] usb 2-1: config 3 interface 25 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1105.179791][ T5750] usb 2-1: config 3 interface 25 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1105.179810][ T5750] usb 2-1: too many endpoints for config 3 interface 223 altsetting 155: 82, using maximum allowed: 30 [ 1105.179832][ T5750] usb 2-1: config 3 interface 223 altsetting 155 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1105.179846][ T5750] usb 2-1: config 3 interface 223 altsetting 155 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 1105.179859][ T5750] usb 2-1: config 3 interface 223 altsetting 155 has 4 endpoint descriptors, different from the interface descriptor's value: 82 [ 1105.179880][ T5750] usb 2-1: config 3 interface 223 has no altsetting 1 [ 1105.180032][ T5750] usb 2-1: config 3 interface 25 has no altsetting 0 [ 1105.182113][ T5750] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.182126][ T5750] usb 2-1: Product: syz [ 1105.182133][ T5750] usb 2-1: Manufacturer: syz [ 1105.182141][ T5750] usb 2-1: SerialNumber: syz [ 1105.629716][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.680664][ T5750] usbtv 2-1:3.223: Fushicai USBTV007 Audio-Video Grabber [ 1105.695028][ T5750] usb 2-1: USB disconnect, device number 88 [ 1105.857701][ T1556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.917802][ T5750] [ 1105.920173][ T5750] ========================= [ 1105.924682][ T5750] WARNING: held lock freed! [ 1105.929330][ T5750] syzkaller #0 Tainted: G L [ 1105.935301][ T5750] ------------------------- [ 1105.939844][ T5750] kworker/0:6/5750 is freeing memory ffff888076b5d000-ffff888076b5d7ff, with a lock still held there! [ 1105.950812][ T5750] ffff888076b5d1a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1105.961020][ T5750] locks held by kworker/0:6/5750: 5, last CPU#0: [ 1105.967485][ T5750] #0: ffff888022ae9140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1105.978908][ T5750] #1: ffffc90004dafc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1105.990851][ T5750] #2: ffff888029af01d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1105.999813][ T5750] #3: ffff888028ec51d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 [ 1106.008953][ T5750] #4: ffff888076b5d1a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1106.019484][ T5750] [ 1106.019484][ T5750] stack backtrace: [ 1106.025366][ T5750] CPU: 0 UID: 0 PID: 5750 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 1106.036300][ T5750] Tainted: [L]=SOFTLOCKUP [ 1106.040643][ T5750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1106.050686][ T5750] Workqueue: usb_hub_wq hub_event [ 1106.055709][ T5750] Call Trace: [ 1106.058977][ T5750] [ 1106.061898][ T5750] dump_stack_lvl+0xe8/0x150 [ 1106.066490][ T5750] debug_check_no_locks_freed+0x149/0x170 [ 1106.072204][ T5750] kfree+0x12b/0x650 [ 1106.076094][ T5750] ? device_release+0xc4/0x1f0 [ 1106.080850][ T5750] ? __pfx_usb_release_interface+0x10/0x10 [ 1106.086721][ T5750] device_release+0xc4/0x1f0 [ 1106.091306][ T5750] kobject_put+0x222/0x550 [ 1106.095719][ T5750] v4l2_device_disconnect+0x79/0xd0 [ 1106.100976][ T5750] usbtv_video_free+0x25/0x30 [ 1106.105701][ T5750] usbtv_disconnect+0x5c/0xa0 [ 1106.110374][ T5750] usb_unbind_interface+0x295/0x9f0 [ 1106.115568][ T5750] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1106.121284][ T5750] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1106.126996][ T5750] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1106.132711][ T5750] device_release_driver_internal+0x4f5/0x880 [ 1106.138772][ T5750] bus_remove_device+0x444/0x560 [ 1106.143709][ T5750] ? __pfx_bus_remove_device+0x10/0x10 [ 1106.149165][ T5750] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1106.154878][ T5750] device_del+0x524/0x8f0 [ 1106.159205][ T5750] ? __pfx_device_del+0x10/0x10 [ 1106.164043][ T5750] ? __pfx___mutex_lock+0x10/0x10 [ 1106.169147][ T5750] usb_disable_device+0x3d4/0x8d0 [ 1106.174162][ T5750] usb_disconnect+0x346/0x9a0 [ 1106.178826][ T5750] hub_event+0x1bbb/0x4d30 [ 1106.183243][ T5750] ? register_lock_class+0x31/0x2e0 [ 1106.188445][ T5750] ? __pfx_hub_event+0x10/0x10 [ 1106.193207][ T5750] ? rcu_is_watching+0x16/0xb0 [ 1106.197969][ T5750] ? process_scheduled_works+0x97a/0x1630 [ 1106.203710][ T5750] process_scheduled_works+0xc3d/0x1630 [ 1106.209267][ T5750] ? __pfx_process_scheduled_works+0x10/0x10 [ 1106.215245][ T5750] ? assign_work+0x3cf/0x5d0 [ 1106.219834][ T5750] worker_thread+0xa47/0xfb0 [ 1106.224425][ T5750] kthread+0x38b/0x480 [ 1106.228480][ T5750] ? __pfx_worker_thread+0x10/0x10 [ 1106.233585][ T5750] ? __pfx_kthread+0x10/0x10 [ 1106.238163][ T5750] ret_from_fork+0x514/0xb70 [ 1106.242737][ T5750] ? __pfx_ret_from_fork+0x10/0x10 [ 1106.247834][ T5750] ? __switch_to+0xc89/0x1420 [ 1106.252516][ T5750] ? __pfx_kthread+0x10/0x10 [ 1106.257102][ T5750] ret_from_fork_asm+0x1a/0x30 [ 1106.261869][ T5750] [ 1106.279625][T12359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.280051][ T5750] ================================================================== [ 1106.280064][ T5750] BUG: KASAN: slab-use-after-free in usb_unbind_interface+0x2c2/0x9f0 [ 1106.280096][ T5750] Read of size 8 at addr ffff888076b5d008 by task kworker/0:6/5750 [ 1106.280112][ T5750] [ 1106.280124][ T5750] CPU: 0 UID: 0 PID: 5750 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 1106.280149][ T5750] Tainted: [L]=SOFTLOCKUP [ 1106.280157][ T5750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1106.280170][ T5750] Workqueue: usb_hub_wq hub_event [ 1106.280195][ T5750] Call Trace: [ 1106.280203][ T5750] [ 1106.280212][ T5750] dump_stack_lvl+0xe8/0x150 [ 1106.280240][ T5750] print_address_description+0x55/0x1e0 [ 1106.280275][ T5750] ? usb_unbind_interface+0x2c2/0x9f0 [ 1106.280299][ T5750] print_report+0x58/0x70 [ 1106.280320][ T5750] kasan_report+0x117/0x150 [ 1106.280347][ T5750] ? usb_unbind_interface+0x2c2/0x9f0 [ 1106.280373][ T5750] usb_unbind_interface+0x2c2/0x9f0 [ 1106.280396][ T5750] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1106.280420][ T5750] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1106.280441][ T5750] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1106.280464][ T5750] device_release_driver_internal+0x4f5/0x880 [ 1106.280490][ T5750] bus_remove_device+0x444/0x560 [ 1106.280519][ T5750] ? __pfx_bus_remove_device+0x10/0x10 [ 1106.280545][ T5750] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1106.280566][ T5750] device_del+0x524/0x8f0 [ 1106.280586][ T5750] ? __pfx_device_del+0x10/0x10 [ 1106.280605][ T5750] ? __pfx___mutex_lock+0x10/0x10 [ 1106.280630][ T5750] usb_disable_device+0x3d4/0x8d0 [ 1106.280654][ T5750] usb_disconnect+0x346/0x9a0 [ 1106.280676][ T5750] hub_event+0x1bbb/0x4d30 [ 1106.280702][ T5750] ? register_lock_class+0x31/0x2e0 [ 1106.280733][ T5750] ? __pfx_hub_event+0x10/0x10 [ 1106.280757][ T5750] ? rcu_is_watching+0x16/0xb0 [ 1106.280778][ T5750] ? process_scheduled_works+0x97a/0x1630 [ 1106.280802][ T5750] process_scheduled_works+0xc3d/0x1630 [ 1106.280836][ T5750] ? __pfx_process_scheduled_works+0x10/0x10 [ 1106.280862][ T5750] ? assign_work+0x3cf/0x5d0 [ 1106.280886][ T5750] worker_thread+0xa47/0xfb0 [ 1106.280920][ T5750] kthread+0x38b/0x480 [ 1106.280936][ T5750] ? __pfx_worker_thread+0x10/0x10 [ 1106.280956][ T5750] ? __pfx_kthread+0x10/0x10 [ 1106.280973][ T5750] ret_from_fork+0x514/0xb70 [ 1106.280990][ T5750] ? __pfx_ret_from_fork+0x10/0x10 [ 1106.281007][ T5750] ? __switch_to+0xc89/0x1420 [ 1106.281032][ T5750] ? __pfx_kthread+0x10/0x10 [ 1106.281049][ T5750] ret_from_fork_asm+0x1a/0x30 [ 1106.281082][ T5750] [ 1106.281089][ T5750] [ 1106.281094][ T5750] Allocated by task 5750: [ 1106.281103][ T5750] kasan_save_track+0x3e/0x80 [ 1106.281121][ T5750] __kasan_kmalloc+0x93/0xb0 [ 1106.281139][ T5750] __kmalloc_cache_noprof+0x321/0x600 [ 1106.281156][ T5750] usb_set_configuration+0x3cc/0x2180 [ 1106.281176][ T5750] usb_generic_driver_probe+0x8d/0x150 [ 1106.281323][ T5750] usb_probe_device+0x1c3/0x3b0 [ 1106.281345][ T5750] really_probe+0x254/0xae0 [ 1106.281366][ T5750] __driver_probe_device+0x1e8/0x360 [ 1106.281385][ T5750] driver_probe_device+0x4f/0x240 [ 1106.281405][ T5750] __device_attach_driver+0x270/0x410 [ 1106.281425][ T5750] bus_for_each_drv+0x258/0x2f0 [ 1106.281449][ T5750] __device_attach+0x2c4/0x450 [ 1106.281466][ T5750] device_initial_probe+0xa1/0xd0 [ 1106.281482][ T5750] bus_probe_device+0x12a/0x220 [ 1106.281504][ T5750] device_add+0x7d7/0xb80 [ 1106.281519][ T5750] usb_new_device+0x9aa/0x1690 [ 1106.281535][ T5750] hub_event+0x28e8/0x4d30 [ 1106.281552][ T5750] process_scheduled_works+0xc3d/0x1630 [ 1106.281574][ T5750] worker_thread+0xa47/0xfb0 [ 1106.281594][ T5750] kthread+0x38b/0x480 [ 1106.281609][ T5750] ret_from_fork+0x514/0xb70 [ 1106.281622][ T5750] ret_from_fork_asm+0x1a/0x30 [ 1106.281646][ T5750] [ 1106.281651][ T5750] Freed by task 5750: [ 1106.281659][ T5750] kasan_save_track+0x3e/0x80 [ 1106.281676][ T5750] kasan_save_free_info+0x40/0x50 [ 1106.281699][ T5750] __kasan_slab_free+0x5c/0x80 [ 1106.281717][ T5750] kfree+0x1c5/0x650 [ 1106.281740][ T5750] device_release+0xc4/0x1f0 [ 1106.281759][ T5750] kobject_put+0x222/0x550 [ 1106.281782][ T5750] v4l2_device_disconnect+0x79/0xd0 [ 1106.281804][ T5750] usbtv_video_free+0x25/0x30 [ 1106.281825][ T5750] usbtv_disconnect+0x5c/0xa0 [ 1106.281846][ T5750] usb_unbind_interface+0x295/0x9f0 [ 1106.281867][ T5750] device_release_driver_internal+0x4f5/0x880 [ 1106.281886][ T5750] bus_remove_device+0x444/0x560 [ 1106.281909][ T5750] device_del+0x524/0x8f0 [ 1106.281925][ T5750] usb_disable_device+0x3d4/0x8d0 [ 1106.281944][ T5750] usb_disconnect+0x346/0x9a0 [ 1106.281960][ T5750] hub_event+0x1bbb/0x4d30 [ 1106.281979][ T5750] process_scheduled_works+0xc3d/0x1630 [ 1106.282000][ T5750] worker_thread+0xa47/0xfb0 [ 1106.282021][ T5750] kthread+0x38b/0x480 [ 1106.282035][ T5750] ret_from_fork+0x514/0xb70 [ 1106.282049][ T5750] ret_from_fork_asm+0x1a/0x30 [ 1106.282074][ T5750] [ 1106.282078][ T5750] The buggy address belongs to the object at ffff888076b5d000 [ 1106.282078][ T5750] which belongs to the cache kmalloc-2k of size 2048 [ 1106.282094][ T5750] The buggy address is located 8 bytes inside of [ 1106.282094][ T5750] freed 2048-byte region [ffff888076b5d000, ffff888076b5d800) [ 1106.282112][ T5750] [ 1106.282117][ T5750] The buggy address belongs to the physical page: [ 1106.282127][ T5750] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x76b58 [ 1106.282144][ T5750] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1106.282157][ T5750] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1106.282174][ T5750] page_type: f5(slab) [ 1106.282191][ T5750] raw: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122 [ 1106.282206][ T5750] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 1106.282223][ T5750] head: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122 [ 1106.282237][ T5750] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 1106.282254][ T5750] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1106.282280][ T5750] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1106.282289][ T5750] page dumped because: kasan: bad access detected [ 1106.282305][ T5750] page_owner tracks the page as allocated [ 1106.282312][ T5750] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5629, tgid 5629 (syz-executor), ts 71812573806 [ 1106.282341][ T5750] post_alloc_hook+0x1f9/0x250 [ 1106.282367][ T5750] get_page_from_freelist+0x2209/0x2280 [ 1106.282384][ T5750] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 1106.282403][ T5750] allocate_slab+0x7d/0x620 [ 1106.282424][ T5750] refill_objects+0x2d5/0x350 [ 1106.282445][ T5750] __pcs_replace_empty_main+0x2c8/0x6c0 [ 1106.282465][ T5750] __kmalloc_node_track_caller_noprof+0x548/0x720 [ 1106.282482][ T5750] pskb_expand_head+0x22c/0x13a0 [ 1106.282508][ T5750] netlink_trim+0x1b3/0x2c0 [ 1106.282532][ T5750] netlink_broadcast_filtered+0x6d/0xea0 [ 1106.282555][ T5750] nlmsg_notify+0xe3/0x1a0 [ 1106.282580][ T5750] __dev_notify_flags+0x257/0x510 [ 1106.282650][ T5750] rtnl_configure_link+0x2f5/0x510 [ 1106.282695][ T5750] rtnl_newlink_create+0x343/0x7b0 [ 1106.282720][ T5750] rtnl_newlink+0x166d/0x1c30 [ 1106.282741][ T5750] rtnetlink_rcv_msg+0x802/0xc00 [ 1106.282761][ T5750] page last free pid 5626 tgid 5626 ts 71775443121 stack trace: [ 1106.282775][ T5750] __free_frozen_pages+0xc93/0xd90 [ 1106.282799][ T5750] __slab_free+0x274/0x2c0 [ 1106.282815][ T5750] qlist_free_all+0x99/0x100 [ 1106.282831][ T5750] kasan_quarantine_reduce+0x148/0x160 [ 1106.282847][ T5750] __kasan_slab_alloc+0x22/0x80 [ 1106.282865][ T5750] __kmalloc_cache_noprof+0x29f/0x600 [ 1106.282881][ T5750] mpls_dev_notify+0xd6/0xd30 [ 1106.282902][ T5750] notifier_call_chain+0x1a5/0x3d0 [ 1106.282927][ T5750] register_netdevice+0x18a4/0x1eb0 [ 1106.282949][ T5750] ipvlan_link_new+0x3e6/0xa10 [ 1106.283021][ T5750] rtnl_newlink_create+0x305/0x7b0 [ 1106.283045][ T5750] rtnl_newlink+0x166d/0x1c30 [ 1106.283065][ T5750] rtnetlink_rcv_msg+0x802/0xc00 [ 1106.283085][ T5750] netlink_rcv_skb+0x226/0x4a0 [ 1106.283110][ T5750] netlink_unicast+0x7bd/0x940 [ 1106.283131][ T5750] netlink_sendmsg+0x813/0xb40 [ 1106.283146][ T5750] [ 1106.283151][ T5750] Memory state around the buggy address: [ 1106.283161][ T5750] ffff888076b5cf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1106.283174][ T5750] ffff888076b5cf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1106.283186][ T5750] >ffff888076b5d000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1106.283195][ T5750] ^ [ 1106.283205][ T5750] ffff888076b5d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1106.283216][ T5750] ffff888076b5d100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1106.283225][ T5750] ================================================================== [ 1106.283872][ T5750] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1107.142138][ T5750] CPU: 0 UID: 0 PID: 5750 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 1107.153062][ T5750] Tainted: [L]=SOFTLOCKUP [ 1107.157384][ T5750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1107.167443][ T5750] Workqueue: usb_hub_wq hub_event [ 1107.172459][ T5750] Call Trace: [ 1107.175730][ T5750] [ 1107.178664][ T5750] vpanic+0x56d/0xa60 [ 1107.182659][ T5750] ? __pfx_vpanic+0x10/0x10 [ 1107.187157][ T5750] ? __pfx___schedule+0x10/0x10 [ 1107.192017][ T5750] panic+0xc5/0xd0 [ 1107.195728][ T5750] ? __pfx_panic+0x10/0x10 [ 1107.200136][ T5750] ? preempt_schedule_thunk+0x16/0x40 [ 1107.205509][ T5750] ? usb_unbind_interface+0x2c2/0x9f0 [ 1107.210873][ T5750] check_panic_on_warn+0x89/0xb0 [ 1107.215813][ T5750] ? usb_unbind_interface+0x2c2/0x9f0 [ 1107.221190][ T5750] end_report+0x73/0x170 [ 1107.225443][ T5750] ? usb_unbind_interface+0x2c2/0x9f0 [ 1107.230813][ T5750] kasan_report+0x128/0x150 [ 1107.235313][ T5750] ? usb_unbind_interface+0x2c2/0x9f0 [ 1107.240687][ T5750] usb_unbind_interface+0x2c2/0x9f0 [ 1107.245891][ T5750] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1107.251622][ T5750] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1107.257354][ T5750] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1107.263084][ T5750] device_release_driver_internal+0x4f5/0x880 [ 1107.269152][ T5750] bus_remove_device+0x444/0x560 [ 1107.274104][ T5750] ? __pfx_bus_remove_device+0x10/0x10 [ 1107.279594][ T5750] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1107.285396][ T5750] device_del+0x524/0x8f0 [ 1107.289734][ T5750] ? __pfx_device_del+0x10/0x10 [ 1107.294571][ T5750] ? __pfx___mutex_lock+0x10/0x10 [ 1107.299600][ T5750] usb_disable_device+0x3d4/0x8d0 [ 1107.304640][ T5750] usb_disconnect+0x346/0x9a0 [ 1107.309328][ T5750] hub_event+0x1bbb/0x4d30 [ 1107.313735][ T5750] ? register_lock_class+0x31/0x2e0 [ 1107.318935][ T5750] ? __pfx_hub_event+0x10/0x10 [ 1107.323699][ T5750] ? rcu_is_watching+0x16/0xb0 [ 1107.328462][ T5750] ? process_scheduled_works+0x97a/0x1630 [ 1107.334182][ T5750] process_scheduled_works+0xc3d/0x1630 [ 1107.339745][ T5750] ? __pfx_process_scheduled_works+0x10/0x10 [ 1107.345730][ T5750] ? assign_work+0x3cf/0x5d0 [ 1107.350318][ T5750] worker_thread+0xa47/0xfb0 [ 1107.354917][ T5750] kthread+0x38b/0x480 [ 1107.358989][ T5750] ? __pfx_worker_thread+0x10/0x10 [ 1107.364109][ T5750] ? __pfx_kthread+0x10/0x10 [ 1107.368701][ T5750] ret_from_fork+0x514/0xb70 [ 1107.373294][ T5750] ? __pfx_ret_from_fork+0x10/0x10 [ 1107.378393][ T5750] ? __switch_to+0xc89/0x1420 [ 1107.383241][ T5750] ? __pfx_kthread+0x10/0x10 [ 1107.387850][ T5750] ret_from_fork_asm+0x1a/0x30 [ 1107.392636][ T5750] [ 1107.395922][ T5750] Kernel Offset: disabled [ 1107.400246][ T5750] Rebooting in 86400 seconds..