last executing test programs: 2m12.148603693s ago: executing program 3 (id=3554): syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x0) (async) pipe(&(0x7f0000000240)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x2, 0x6) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) (async) splice(r2, 0x0, r4, 0x0, 0x80000000, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="660f38dc05440f20c0663507000000440f22c00f01cf0f001566b9bd0800000f32640f0f550e8e660f3a093ccfc4c215dd740b0f30baf80c66b848cb138766efbafc0c66ed", 0x45}], 0x1, 0x60, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf}, @vmwrite={0x8, 0x0, 0xf, 0x0, 0x3, 0x0, 0x2, 0x0, 0x2}], 0x2) (async, rerun: 32) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000040)=""/19) (rerun: 32) io_uring_enter(r0, 0x2219, 0x7721, 0x33, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x378, 0x0, 0x1000000, 0xffffffff, 0x288, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x230, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x2ba810b9, 0x39, 0x0, 0x0, 0x80000000, 0x3, 0x7}, {0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x1, 0x5, 0xfffffffa, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x6, 0x3, 0x4, 0x2c7, 0x80000001, 0x1, 0x2, 0x100]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3d8) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="441000002f00090025bd7000000000000400000008000c0002000000261016"], 0x1044}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) (async) r7 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_STREAMOFF(r7, 0x40045613, &(0x7f0000000100)=0xc97) 2m9.002433202s ago: executing program 3 (id=3572): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000280)={0xf0f022}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x1000000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r3}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000200)={0x10000, 0x1000000, 0x8}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000}) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000100)=0x9, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180800000800000004000001ffffffffffff9500000000000008"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) capset(&(0x7f00000000c0)={0x20071026}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r9, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) landlock_restrict_self(0xffffffffffffffff, 0xc) r10 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r10, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="00030c0000000403011c"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r10, &(0x7f00000011c0)={0x24, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="e62732776f4224a57905182d4a9d09f16dd40843bca9b11f140120c7ca08e741bb47789156fc4f796d5f743d21429c6aeb259cbce33bce5c37089b0eb080d98265878520071a2fedbdb433f2f648e12bbc53f7b3dd06eb8ed9675a4bf21878f0961a4e7ec7ac0f74dc9687df8feed795dd1cebea4291dc8c11860b65574cf908da6dffe2083a12e4a6924369d6192eb73252edc60bec0edb6a2f01677209f461f2feee7c6c2d3175b13fbdb5f3f6b8dc7d4a3bb58678907ec30ecf316e52d17ff156fb6e6077717cae132bdc7398ca8b3dae23"], 0x0, 0x0}, 0x0) 2m7.660102607s ago: executing program 3 (id=3577): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x280a1) r2 = epoll_create(0xffd) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x1000000d}) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000400)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, [@jmp={0x5, 0x0, 0x9, 0x1, 0xb, 0x2, 0xfffffffffffffffc}]}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x100000, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000300)=""/139, 0x8b}, {0x0}], 0x2, 0x84, 0x47) recvmmsg(r0, &(0x7f0000000d00), 0x0, 0x10022, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r4}, 0x8) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) write$evdev(r5, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000100)=0x7) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="1b1b", @ANYRES16]) 2m7.083227178s ago: executing program 3 (id=3580): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4a, &(0x7f0000000100)=0x10000, 0x2e) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) (async) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) ptrace(0x10, 0xffffffffffffffff) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0x13) unshare(0x42000000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0) (async) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0xffffffff, 0x0, 0x80000002}) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0xffffffff, 0x0, 0x80000002}) 2m6.163365542s ago: executing program 3 (id=3585): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x20e803, 0x0) unshare(0x6020400) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40040, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x39, 0x1a, r2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r0, 0x0, 0x0}) io_getevents(0x0, 0x2, 0x1, &(0x7f0000001340)=[{}], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x43, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70ad2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r6, 0x2000000) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000000)="b9800000c00f3235004000000f30b9fa000000130f01d9300d76c4020a1bf7b805000000b90000c0fe0f3cae0a41d941d9000f320f30660fc775022e0fba600c9864660ffc76002f3166b85766baa00066ed00d0", 0x54}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3b) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f00000001c0)={0x80a0000, 0x9000, 0x1}) write$binfmt_script(r8, &(0x7f0000000480)={'#! ', './file0', [{}, {0x20, 'o\x89MI\x9b\xa57\xcf\x9bS\xf5\xb0,\xadZ(\xf1FT\xca\xc4\x01\x15zu\r\'S\x92\xbd\x1c\x8e\xe2\x98I\x02{}\xe2\xed\xe3\xa0\x82\x81i\xadf,iA\x18\xc6\x1e\x16\x84\xdf\xc9\xccj\xd7q\xf4\xe9<2\x89\x1dS/QF_\xdbp*\xea\xc6\xb8\x8bm\x8e%N\xdaC\x02\x0e\x95\x97s-k\x8f\xc9\xe3\x13\xba\xa0\xf1\x8b\xdek\x84>\xc7\xb4\x99\xf3v!\x85\xdd5\x85\xa2\x86\xb6U\xed\x1d\x15\x8fn\xed&\x1a\xdd\xdc\xb9\x1b\xfbv+\t=W{\xfc\x94u\r!\xd0\xcd\x15\x7f?\xeaA\xa4\xc8\x88\xb4H\x95@\xd9\xef9\xeb\xd0\xa8\xdbS\xd4sar\xd4j\xb8\x8d\x9d1\x89\xc9^j2\xc2\xd5\x01\x7f\xd4r\xfb\xd5\xa8n'}]}, 0xca) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x1b}, {0x2, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x4814) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m5.563730576s ago: executing program 3 (id=3588): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x14, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x1, 0xf06, 0x0, 0xac, 0x81, 0x5}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x401, 0x1, 0xffff1896, 0x5, 0xa6, 0x0, 0x6}, 0x9c) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000340)) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000040)) r4 = socket$packet(0x11, 0x2, 0x300) unshare(0x22020600) setsockopt$packet_int(r4, 0x107, 0x11, &(0x7f0000000080)=0x101, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010428bd70000001000000000000", @ANYRES32=0x0, @ANYBLOB="0386000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 2m5.180703444s ago: executing program 32 (id=3588): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x14, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x1, 0xf06, 0x0, 0xac, 0x81, 0x5}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x401, 0x1, 0xffff1896, 0x5, 0xa6, 0x0, 0x6}, 0x9c) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000340)) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000040)) r4 = socket$packet(0x11, 0x2, 0x300) unshare(0x22020600) setsockopt$packet_int(r4, 0x107, 0x11, &(0x7f0000000080)=0x101, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010428bd70000001000000000000", @ANYRES32=0x0, @ANYBLOB="0386000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 7.423022994s ago: executing program 1 (id=4140): r0 = syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xf, 0xe, 0x7, 0x1}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$uac2(r0, 0x0, 0x0) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac2(r1, &(0x7f0000000580)={0x14, &(0x7f00000000c0)={0x0, 0xc, 0x24, {0x24, 0x24, "20bfc80fd2b19a10f19ba7b6d34205d98590b19017ccdd5bd3dd0fef3e937afb2877"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}}, &(0x7f0000000b00)={0x44, &(0x7f0000000600)={0x60, 0x10, 0x49, "c8c165f2279a11de3ac8bf71397a9f11d0c976c66adfadd02a4839742492239e9c97dfd87e2af7fee372b821ceac203b081f0e4b9288e88363a859828ff0f4ae8ecef900813606240d"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000980)={0x0, 0x8, 0x1}, &(0x7f00000009c0)={0x20, 0x81, 0x1, "c0"}, &(0x7f0000000a00)={0x20, 0x82, 0x2, "04e6"}, &(0x7f0000000a40)={0x20, 0x83, 0x3, "82b9a5"}, &(0x7f0000000a80)={0x20, 0x84, 0x3, "660e9a"}, &(0x7f0000000ac0)={0x20, 0x85, 0x3, 'rW:'}}) r2 = syz_usb_connect$uac2(0x2, 0x9f, &(0x7f00000008c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x17cc, 0x815, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0xa7, 0xa0, 0x0, {0x8, 0xb, 0x0, 0x1, 0x1, 0xc, 0x20, 0x80}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5b13, 0x9, 0x18, 0x1}, [@sample_rate={0xf, 0x24, 0xd, 0x6, 0x2, 0x3, [0x3, 0x1, 0x2, 0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x0, 0x1, "1b97b0de7b19"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x80, 0x3, {0x8, 0x25, 0x1, 0x0, 0x30, 0xfd, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0xd7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xd, 0x52, 0x0, {0x8, 0x25, 0x1, 0x0, 0x0, 0x0, 0x8}}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x1, 0x0, 0x1, 0x8, 0x40}, 0x48, &(0x7f0000000140)={0x5, 0xf, 0x48, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x7f, "136462abd1fbd84ae490b7aa0052edac"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "4af73a3308650cf7fb6e68b6c9458f12"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "2eb8d20b007453b721767989d9cd471f"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x1, 0x4}]}, 0x6, [{0xec, &(0x7f0000000740)=@string={0xec, 0x3, "f88e60beaba75fe512dd6340fd2e86004f75c3a7935343469bbe59990c77cd166ea5f5759641ad28a8540369fcfb370a961c2d06c28d8014596cfd8db16ba80add362f7f391c5af6986f00bcf7ccaae35e3b15bb69e382032f4c896882aa1572642e3ec216fe2b9d4a586c44ef81dd3e7fe8283bbe1d862a8e0ef0d3a553f61305c6073bddb2befea7695e3f3e5338f828ac3d874b0d5610180cfb41183752d5e966e60059f3cea8f263629b4f50c987bce364150981aa103c79ab11e3f1b258b1a821400e8ab23c78f4d50bb85124fc4a6563f6d9d923550efa5264186378330a135bc72a530c503e23"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x80a}}, {0x2a, &(0x7f0000000240)=@string={0x2a, 0x3, "5d4fe536891f9f3f544a46e34f0ffdd985ea0bdd6916b2db5253ca3e3c3f8295d213807c69a74ad6"}}, {0xc, &(0x7f0000000340)=@string={0xc, 0x3, "70370b0b153878e2e038"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x44b}}, {0x2f, &(0x7f00000003c0)=@string={0x2f, 0x3, "752c5895124158c51413553f32d650b9254a0e644fd0e0a96758d7bc075d9caedc3a9ff05220cfe5c9f0d4c777"}}]}) r3 = getpgrp(0xffffffffffffffff) move_pages(r3, 0x8, &(0x7f0000000000)=[&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000040)=[0x3, 0x6, 0xfffffff2, 0x80000000, 0x8, 0xfffffff8, 0x6], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xf) syz_usb_control_io$uac2(r2, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000480)={0x0, 0x16, 0x2b, "9f5d2a526b19d42c8bf93bdc6d398022336852f96c2d03d5a18ee36ce79efd3aa455e32959e4e9bd0ab1fe5950f632026683e6b12b841403087edacbe1cba1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.469566624s ago: executing program 5 (id=4142): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x4008, 0x3, 0x2}, 0x30, 0x0) landlock_restrict_self(r2, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0x39000, 0x0) (async) r3 = fanotify_init(0x200, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fanotify_mark(r3, 0x105, 0x9165, r4, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) (async) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000080)=[{0x2, 0x3, {0x2, 0x1, 0x1}, {0x2, 0xff, 0x3}, 0xfe, 0x2}, {0x2, 0x3, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x4}, 0x1, 0xfd}, {0x2, 0x0, {0x0, 0xf0}, {0x0, 0xf0, 0x4}, 0xff, 0x2}, {0x2, 0x3, {0x1, 0x1, 0x1}, {0x0, 0xff}, 0xfd, 0x2}, {0x3, 0x1, {0x0, 0xff, 0x3}, {0x0, 0x0, 0x1}, 0xff, 0x2}], 0xa0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/rcu_normal', 0x149a82, 0x0) r7 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) fcntl$lock(r7, 0x25, &(0x7f0000000100)={0x0, 0x1, 0x9ff000000, 0x9}) (async) mq_unlink(&(0x7f0000000000)='eth0\x00') (async) r8 = syz_open_procfs(0x0, &(0x7f0000000280)='net\x00') r9 = openat(r8, &(0x7f0000000340)='rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r9, 0x0, 0x0) (async) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r10 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@loopback, 0x4, 0x800, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3b}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000000000000, 0x0, 0x4, 0x5}, {}, 0x0, 0x6e4bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x33}, 0x0, @in6=@remote, 0x0, 0x0, 0x2, 0x7}}, 0xe8) sendmmsg(r10, &(0x7f0000000480), 0x2e9, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) 6.164033343s ago: executing program 5 (id=4145): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000280)={0xf0f022}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x1000000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r3}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000200)={0x10000, 0x1000000, 0x8}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000}) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000100)=0x9, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180800000800000004000001ffffffffffff9500000000000008"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) capset(&(0x7f00000000c0)={0x20071026}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r9, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) landlock_restrict_self(0xffffffffffffffff, 0xc) r10 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r10, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="00030c0000000403011c"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) 5.507636589s ago: executing program 1 (id=4149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d1}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x0, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x24048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) io_uring_setup(0x2a90, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x277}) 5.448911239s ago: executing program 0 (id=4151): syz_open_dev$media(&(0x7f0000000040), 0x7871c6c2, 0x64c1) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000480)={0x0, 0x2, 0x0, &(0x7f00000000c0)=[{}, {}], 0x2, 0x0, &(0x7f0000000200)=[{}, {}], 0x4, 0x0, &(0x7f0000000300)=[{}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}]}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000332000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000053000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x0, 0x1, 0x2, 0x40425, r0, 0x25, '\x00', 0x0, r0, 0x4, 0x2, 0x5}, 0x50) getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, &(0x7f00000006c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1c, 0x7fffffff, 0x52b9, 0x3, 0x50200, r1, 0x4ed, '\x00', 0x0, r0, 0x1, 0x5, 0x5, 0x0, @void, @value, @value=r0}, 0x50) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@setlink={0x20, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x40200}}, 0x20}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x6, &(0x7f0000000440)={0x5, {{0x29, 0x0, 0x4000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x8}}}, 0x88) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3002], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 5.329900586s ago: executing program 4 (id=4152): syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x80842) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40058}, 0x0, 0x0, &(0x7f0000000080)) unshare(0x22020600) pselect6(0x40, &(0x7f0000000100)={0x4, 0x0, 0x3, 0x0, 0x2, 0x624, 0xfffbffffffffffff}, &(0x7f0000000000)={0x1f, 0x2, 0x3, 0x0, 0x0, 0x3, 0xd, 0x7e4e79b4}, 0x0, 0x0, 0x0) 5.235055467s ago: executing program 1 (id=4153): syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e00101408d0e08060001000000010902270001010080fa0904000003e0010100070581024000000705020240000007058303100001"], 0x0) clock_gettime(0x0, &(0x7f0000000100)) (async) clock_gettime(0x7, &(0x7f0000000080)={0x0, 0x0}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000d80)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) (async) nanosleep(&(0x7f00000000c0)={r0, r1+10000000}, 0x0) 5.058021911s ago: executing program 4 (id=4155): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000001000)=0x3, 0x4) sendmmsg$inet(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000002a80)}}], 0x1, 0x40480c0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'ovf\x00', 0x36, 0x5, 0x104a}, 0x2c) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0, 0x1000) symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) close(r4) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x40) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) write$UHID_INPUT(r5, &(0x7f0000000a80)={0x8, {"114f018995052a0b6f214d0c06f01c66f04f540c401d2d216426ad902a6519a4a4ff48bcf55fa20d6776a90c1e350a0a25ffea921e6ac62f37d87fee4061ea9f8ed1b164f0dbd476bbc63bfc158ddbf4b1229801e760c9f346e3bd7fb285339ec9006bdb3a637a7bebb257373f722bf6c819969258865ed4940c2b4e14da41fcde02a2be97e4f2e1807ad8d2d8c39df2f2f784aa597fa53c98d25239240c5f6851b96aeea4ea9c16272ca22420362d8e0927ebf095e6105a988afc124481db0d142ce407893550eff28a8f56559ca06831d189cb4ca570c0cdb3d7a72728a9ffe321437808838c88f7d1505d918901496b370e1a027e86f84574c121791bbaf2bb598c4b8ba2e650d6bbc58069fcc008c17c7bdf61fe96deabe8f9fdac5741f639ed0040b39eee51bc0eea9680cf3b633b48eb56026cd789848342f891e8b8d5b516000614160669dc68258483bd6998350d8f54f9fb87d2cc003ef64acc5f5268f4868fdf3aaa94f8492a0b67f0794c86067715bab5bc574e03e17585dab332db2fb200384e2e4f28fb787747d509fdbd60ec551b53f5cbc8518e02d7d50a2f1783d12bc278c8241dc5ed9ee4886897c721183e37ec06abfb29508ad380c77c5f70b61a6a5681378b19775f6e8d9ad5c4859542c925dfd8dfa7a0c45d3ba072bf9e534cafadd9050294eba0a29755934ab5f09e670a8b3fbb7c63d734653204a540596a5686221d98144cd7f540ab1c642f399b87285a7de20541544b8c175775520cfc24aac43af9da2b79acdf8eaf69eff59617ab08cccaf3c9e4bb87c892756634f9bcb436f8f876699d5bceee334823a71e8e61c079faa5fa75c4dbff7ae83696245a2406f6f4190c45e666334fa2bd01c7ad0d5c0fbba5da547180951d4ccfc26d745dc224cef81000ab90e5d832c6c1d16afe7e6627a8e9b8d9317498ce6ec4dd30f0cab092044ea390b3c9bb52af85b98b8b6c0e08da449f241726329733fc52a1b268f15e53608ffcff778f96f6020fa1c82b1544b7688b3ab08a78d766432c26bb076052b87a7888fb2e92694348accb55e972d754cd10ac01ffa64db4a494880421b36c5da1840e61f43c2c9130ef5066e0bba794269058d04dc0494937c3d1d7184c08715c96f1ebf44828fe1d58a2946b91edd18252a155df71d1ac68fd1aa333ff9e1b515a6ebdd033c98381367842ad7b6cb998e2b815c1a98dd56e33c074b29634c025637185e3c0f76315f723f002b2dfed17b99c285d6c3da2fdb4659b5f191da53c5b23ace4d1663826c4da4ce646a710f0a1e864669aef32cdd6e870685ace4d2c6d7542c9aaa65ec3bdd8b7c296b1d1fa9870ef0531b0d83f65f43620645832e6ab909d64ad380f48b7075e09b6f53fc9e56ab03253bf49f63a5ecf175411bc2faf6044ad47d8c4bc5f801c87cfb2e0ba514e922a45163b6e0b25937a0637c5f3b1981598c6c765f3db818fb01ddcbde77505d6de54ace3ac9a45d19e6cd41ef4951ef3a51245de8c00e8b1aff7f4a835bad1915eb3e77b4acd067c9a6d25d87124e9f6e92927c14bd008a5e3ef7c01f385c0a0c1767323edd7bd9b5f4590b9908d22643226d9c671f55b1af2949c761570ef89dd581203603aa2e72afc8d0a66c4992ad7c65c3338155f6d682a0ce689f7e2eb3e59379b31e2791045debd11ae4b70d797aebe97505b38a8ea63ffc8c2f14874bdb1e03d821de2dfaeb6b0bd16e0ffa33fa7efb19fec725045db0a3386572c25bab17dfa7cbc14c982d7af053f74764f896419811a6139dc353ffcfb7408e0d5dd7cb69ca1ec4f4acd19d400844b05174e7df49bf5f99692a282e17c6417c9be4830f9c4b7958de9810e703d4ce4747c65754aaef24d6371e7e3233caa2f45a86b7d78890bb3bbef1202b06e21bdb5ff24c7f630281622efee72c2f2e81d25e99d37decb56d3d42a594f4c1d8601e7b4dcee08a4123e3e9e5607dab64ae95d70247b70108943cd7467fa05f80c065ce3d10557305c03cf0d7818cd0f5d0719789ca872c43053b8936d07465d40f8b5b31f08dcb9d1a924278cb29755f36761318125842cca11cfea3f1f23252c34762b35b415f634a50de5918da4c877b3085c107c4aed650488d2696381468eaa0310f621e9a3bf5709fb102ae79fa728d8dcea7897e65703d2a237048c2868ea4aa97f83da795a7aa411e17eeace99f53a0b49fe553400e930b7f6fab4c727f4b52e6c803f427cbff396a0774d3923b795a7cf25be41e9501d7bc5f99f52ec0b73f2f0444135e88ccf43bec4e26ac06f50e0443a03643b4eaa9cf52637b5a48033beaf659cd1a6d8638547350c34938bd8c50989d1b43e580fdd0a2b26cf4c69dc03826a5afc1072f47d6c5ca33bb2de98ba97b981a1fd627f697b9ef03f3447fe03a1c36abd9439f89c82e90839e301987729922bca908f44846d1c6c28e316cb93575aecf622262cc17edb9539961bbd538448b87630d78d38e11e980b8c10dee0226caf8302c572f1fd76490b3e719541692ebc1b8539674fd9ce3b95eb1700708aa80fe7428facbc0537cd4f1ab15e075b60c05c963c5952c8913c01ae989979b338aff521733a7692012d3b1e541a70e0e97bbcff9088766e4f7d8dae99061e0be9a6d9a2232c53bbc1f4145bcce0506fa6e1e32137d69d5c93c567b5c6879e5d39d6f85ed2e04d1ed7a29bcd6d3f7beea929546634c1e593b872591807073d3b5437c301a2c9f7c02e68d0fe91124880fbf365afcc61077f1ccac5f968debd828de9aab81f526edb3d90d95d5a309b3a7f8ec091696452eccf078e3bcab5756532363e09cf2d9b8b47d3b6114186f00fc86b7639f09a94bc84d3a140f3ff8e59db781579ffe50550af2ef512a6897b899430e0d6ba59dff843d48a03f324b44a46e78ec5aa60f30171242ffc4d4981950fd5daf91179ebdb295cf98390dc94bc7056f502a422ebdf6d59b3b5b7f5a9f6fd2515faaa46a3d91447bce522641191ca8d3b13088b99a155ef24b58675f197a2cffddc74c5635747ea5dfea67660d449203b5ec549b71b47615f5cf0d1d19db26ed7e28e89d747d39eca90829cacfc2deca5135acb625ce1f29511adaed663f99521131f1e8ef05f8154db7184028cc230dcf27f0f20cc61878b35494823f786f224f962bc479412f3355a9018e000d7513598f4eeab87f8039a1a1390bffe36e6759619ac38c6b2171f20ee44095a69c47be82e6d07f060c08680d9ae9747db7d7577f86860a341ee623d11a92b3ff352c51acf56dcc9017db78b9c6a4e477511781d0a2ecd106d990745c8e1a1dc8105f80026d3f8c77062f21540e461dc74e786cc8fdc040a7778e5c494971716a68027da6c9b431a2220862d7b63ce3f4de513747a576567dcebda3cb6f7ff9aa78a118d8831ca9a2597040e5dadd1c094a6b678b7171249584910f8f56a84094ca8904a1c041cd8750fbd1eaaf37c9678e9eb369cd039b1d96ea02e17ccbac009d338444072d950e573dc20bcc2f3a96da55214c81c6cb391c93d51bde8a55cce7f50f6daafda1f37adc1a39a0c078a2a2cb76a5ada8264fa521ba22151cb1336fae8185f106c662e8216b03237c4044ecf74484935ec23bb26b9ee5e96312431853595ca66449e341b4bbc6dace3abceb4e32e7e2142abd190b8814112d0807eb41b484aa5ba15e424ab48ccb9f06948f73fe89abb907d9a12a2e615cf3d3c54896086b1952db3386d8b8c4e0f20ac468757e2344c9486eead23795130ae1527dbabbed56e59d68b0ce82885378d0f6f81842306740cf3f71e1a95ebf16a42178aa95b9aa3f77fa20cfec7ed9f60822f62a23a91c0de302032f4df83bb844623b3fcf3c236718fa0fd2427a309635d8f07afad09a4ca213a427282961d963dc9a903185d8038b414f1252d228e8558cba561df7fb1f7aebd013e443f46083476d0401136bc3663569063c951f8b4c4a8580e0736ee01cce7835e873535c387352bc1f35869024eaa465c0336818db717557e975112fb56916975dcd54eadbbfc034dd81d2aa83bae6caacc1100110766f44a34f4836c6c2c0344998cd5145a2ec4e06d56a1acf03d21927b94ac1718b9c90158ee12396fa29aaa9c35794f14fe0ca2263910159603a638c0e4a0782427a0f9b5eca27fc7709351b10926140f146781aaf7ff3b7d56ea345b794ccdde299d5738379fad6ff788d1935f05b50703573d0ed5d4da0050a65f704351fbd22c3728774b289e4e7b7b3ada1ea3a30ae7a19438ded43fefb83f51cf3068dd2be38021bb2f6fca90fe25e91a98a798d2005bf07de49b8a6dbd7b20e837bcdc801e6106dce2706e10d1f7be7b960cb8be97e19c4f790f3ee640c4a31a4a28df312c873f8a10c51c9417e89719ebdcde5c37674c58472c313204520d0fe8dcd8d7e7b46ea7b29f8fa28eca0ecc1edd1448014e0daa4561ea9aee43b477d051da622aa20c29a343c56717f610f012c5d1489eee5fcbbf32b06d8aee57184919241dc8e23a20477cbce726bc287ad2b520f7d842e8445aa7b863eb1bdb1e6af98f5c0754501c65877cd68ff9d0492ab7892167892308ce6552e5dc82141fa280b1fc8e5a39715a6a5ac9ae7420b1a1f16622aed7f5fde6a5ff295a64a3bf11abb3128c6bc59aadebc8360ed2d43cc19aaaf5b58cdbbc5f27ef6d9cfdedd6baf82ac734a295813ec2ccab9fb25ba3a3bc0300341b55c91353ff0e0df51e6285f96948c5478ea6f343317929b2463a37e166a9da309f9d0b487a31853d15baa77034a9029847cc0a3edaee3442974c56f1114fa727c5a464e902e532f29460c4d2a2bda010564398462dd21d4dcae9ac94d80f8dec966593a59170ae73fa4772a07de89e1c86b0ddbb8942d700cb2c66f6d4212115ba574befb86a53d189397be3bc87ec2276ddc7c613e56630b468f47e54bd20e7c1a6be1178b9f8227565f542d042eb68e2121b07d4f580871e4a99f194b0083180728270005e6fe634055119158dc3a88ce2a0656c6fbcac15ade526bac87a0d16bc9ae8681e21422e4e898e78d4920dc5135b0c96e6f66e904ddc6f002d1e71b06b5618c31c51fe239ef59f8f2f375d93a1f1b1a17b8a47cf3c06280450ea59806d7a3232e9b87b8276a3150c4929fcebcf0cd6d978576e58ae623f433505f3162b6894ac986a542bce0932722fb1ae04a714d2f9d3dcf16e2a6c7c90399e3d5fcf53d62c6d96c16715128cc60597cd77a62ab039a958468ce52350fcb450eb75cedc0eee8d95e40fb3083fcdbbd58fbd6df6da924635629da7178f2bbed6f9cdbb3eb16102281ba785b9cee17e602d1065e983798fb00813872ac68b6e314a34a245cb755fe4d8a06763bd0f5c924252c7ee3e57271a976106ba7111eed0acece78958c8578a98ca7fa77483c11cca2a7c4416bff817f18b590512b0e05eb6169379aef272680a8d33cd8d6b8f8858e20bd6b0e2719072b0c4905bc23e072c5a7946f0dbfbdf2e07e1e8b93b90bcaff42d58436940bc8db843104e0ac2d605b94bf6fc437675454512a68c0777d79b7554ee343f4b4ac5f8ce8a0c33a64b077717fb14e107c9fa54f324d6c556812de45213844f5620dcfc9ff67835a135376a82efa4e1bee76e00345658fafe4d97b77f0db7fd23d02c3166a41a8f75e39a342156f9c0c539cac3627ab94dccce2c3d65016c837f4ff305541a92de6f6af692a30a7bf32702aa508527a7ae2a8bb8fb115ece0e4c5fb005065e38df30724d9a9db7a7a9abf8a4d1dcea77f8fd10", 0x1000}}, 0x1006) read$rfkill(r5, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000004c0)={0xc}) 4.074659608s ago: executing program 4 (id=4159): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000000)=[@cpuid={0x64, 0x18, {0x2, 0x8}}, @code={0xa, 0x67, {"c4a2f9226c8b00c4a1fb102a66f3f23e0f017ecb64f3400f0666ba210066b8fbff66ef0f3448b800000100000000000f23d80f21f835000000600f23f8c4a1fd50f8440f20c03504000000440f22c0b9de0900000f32"}}, @nested_vmresume={0x130, 0x18, 0x2002}, @nested_load_syzos={0x136, 0x88, {0x0, 0x9, [@nested_load_syzos={0x136, 0x20, {0x0, 0x7545}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_vmlaunch={0x12f, 0x18, 0x2}]}}], 0x11f}) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000180)={0xfffffffc, 0x2e4}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x110) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd28, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x8, 0x6, 0x3c, 0xffffffffffffffff, 0x200000000000, 0x4000000000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffff, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3501, 0x4, 0xef9a5e7037ee9545, 0x0, 0x0, 0x0, 0x1}]}]}, 0xfc}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) 3.837474143s ago: executing program 0 (id=4160): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) syz_usb_connect$uac3(0x3, 0x80, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000280)={0xbd2, "2317afad00"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100"}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x8, "6dbe5fc03509ce9497ac82baf619ff9ad3af340580290d617a44f0579eb2cecd"}) dup(0xffffffffffffffff) (async) dup(0xffffffffffffffff) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) epoll_create1(0x0) socket$unix(0x1, 0x1, 0x0) r4 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000500)={0x0, 0xf74b, 0x20, 0x0, 0x15a}, &(0x7f0000000080)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x74, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe27, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, 0x0) (async) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x74, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe27, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) (async) socket$kcm(0x2, 0x200000000000001, 0x106) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r8) (async) fchdir(r8) r9 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r9, 0x410, &(0x7f00000000c0)={0x1, 0x6, 0x1, 0x4000000fffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) (async) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x1, 0x6, 0x1, 0x4000000fffe}) (async) fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x1, 0x6, 0x1, 0x4000000fffe}) 3.593357087s ago: executing program 4 (id=4161): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) pwritev(r1, &(0x7f0000000580)=[{&(0x7f0000000340)="57f57a18ab06529f2ab28cedc6ab6482d57f8e174829dec22aae5de669f9dcdd3af18de0b0e8464dfaf33280a1fe000eb898ee0264034c67190afe5de7705b006e62517226ac29993451b66126903518abb8a000e9e1204020b75497fb2e0baab1d1b80157e59c6cf6c3c48488de71ddb88a7b427a11aa3b9e58b52398d9d05921cc7c6f57337ee5b4", 0x89}, {&(0x7f0000000400)="951ad3189958144bcafaa94afaddbac0273a6c72c7d14bd021990bf991d44743593e6a32a5a7113c4c2f78096a0266353e25fd2aa403a56f4fc56e9ffcd3c2e6260a9590b3f3a353f78fd020b2ea43db688f1dfb6f4dbdfa5ca9cb30a1211262f61a2f8c12e16fc38b398542a2634e9887790038d74e", 0x76}, {&(0x7f0000000480)="21c8880ff2c978b57b6e99716e055d3bb1d013021d06c859cadc0e7d2541e27ebe1c46b5fe85853d64c9", 0x2a}, {&(0x7f00000004c0)="c05ad4557a8c919d83814b0ef5ec0d0eb4ac2c22447323b1e3a676f31e3d545f86c9486d39740bec875b23f898d151110dd6789a9c9080fbd6c13bfb4f806b8142c6faf65a50114861046a4ba99dbabb7284327731d376701cee2670b5d0de04779f4cc5be308591a6d671596740cfeddd996ffaf5a294067a82d94808275c3dd0bb6fdc1b064b4293ac0d4656ac97ce896cb18614ff649bb666c517e5ccfc0892096af9735cd08fa433bd27ff0a0233245c852a5fda", 0xb6}], 0x4, 0x70, 0x800) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x91c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r3, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/105, 0x69}, 0xd}], 0x1, 0x45833af92e4b38de, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000140)="ba070c1c70f36d0eda54d4c0f88093c1a50d80c139c47959c37052d3850564ac800dedfe7b695aead8e64c58491bbd1ef21de0fd31d6649e467567dd314ba5b889bf2ddf2f1ed919", 0x0, 0x48) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) set_mempolicy(0x1, &(0x7f0000000000)=0x40, 0x9) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x6, 0x5e12, 0x20, 0x13, 0x1, 0xde6, 0x9, 0x8000000000000, 0x8000000400007f, 0x3, 0x6, 0x0, 0x7fff, 0x9, 0x7ff], 0x50000, 0x1c0210}) ioctl$KVM_RUN(r4, 0xae80, 0x400000000000000) 3.394854669s ago: executing program 0 (id=4162): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) 3.201736378s ago: executing program 0 (id=4163): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d1}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x0, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x24048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) io_uring_setup(0x2a90, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x277}) 2.71498699s ago: executing program 0 (id=4165): syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x80842) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40058}, 0x0, 0x0, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f0000000100)={0x4, 0x0, 0x3, 0x0, 0x2, 0x624, 0xfffbffffffffffff}, &(0x7f0000000000)={0x1f, 0x2, 0x3, 0x0, 0x0, 0x3, 0xd, 0x7e4e79b4}, 0x0, 0x0, 0x0) 2.622181498s ago: executing program 5 (id=4166): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000580)={0x0, &(0x7f0000000000)=[@nested_amd_inject_event={0x180, 0x38, {0x1, 0x50, 0x7, 0xab6, 0x3}}, @uexit={0x0, 0x18, 0x8}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x5, 0x3, 0x5, 0x2}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @ro32=0x440e, 0x4, 0x9, 0x8}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x9, 0x7, 0x4, 0x26b4}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0xae, 0x1, 0x1, 0x3}}, @wrmsr={0x65, 0x20, {0x8da, 0x1}}, @nested_amd_stgi={0x17e, 0x10}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control_nat=0x6000, 0x7fffffffffffffff, 0x908d, 0x400000000000000}}, @wr_crn={0x67, 0x20, {0x2, 0x3}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x4c2, 0x4, 0x1ae05084, 0x8}}, @enable_nested={0x12c, 0x18}, @in_dx={0x69, 0x20, {0xcd41, 0x2}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest32=0x4808, 0x3, 0xffff, 0x3}}, @wrmsr={0x65, 0x20, {0xb6e, 0x6}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0xb2b5, 0x6}}, @rdmsr={0x66, 0x18, {0x332}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0xaf, 0x4182, 0x8, 0x4}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_invlpga={0x17d, 0x20, {0xeeee5000, 0x9446}}, @nested_amd_vmload={0x182, 0x18}, @nested_load_syzos={0x136, 0xcc, {0x1, 0x3, [@nested_amd_invlpga={0x17d, 0x20, {0xeeef0000, 0xc048}}, @code={0xa, 0x4c, {"c44219aaef0f788d6ed0fdadb9f20a00000f3266400f3830b9000000000f21cbb9690a00000f32649fc42151e3412bd8a4d300800000c42105f3cd"}}, @out_dx={0x6a, 0x28, {0xe887, 0x5, 0x1}}, @nested_amd_vmload={0x182, 0x18}]}}, @in_dx={0x69, 0x20, {0x18d8, 0x1}}, @enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0x50ff, 0x6, 0x80f}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x3, 0x4}}, @nested_load_syzos={0x136, 0x38, {0x1, 0x1, [@nested_vmresume={0x130, 0x18}]}}, @nested_vmresume={0x130, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x2e, 0x8001, 0xfffffffffffffffe, 0x8}}], 0x56c}) (async) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000580)={0x0, &(0x7f0000000000)=[@nested_amd_inject_event={0x180, 0x38, {0x1, 0x50, 0x7, 0xab6, 0x3}}, @uexit={0x0, 0x18, 0x8}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x5, 0x3, 0x5, 0x2}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @ro32=0x440e, 0x4, 0x9, 0x8}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x9, 0x7, 0x4, 0x26b4}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0xae, 0x1, 0x1, 0x3}}, @wrmsr={0x65, 0x20, {0x8da, 0x1}}, @nested_amd_stgi={0x17e, 0x10}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control_nat=0x6000, 0x7fffffffffffffff, 0x908d, 0x400000000000000}}, @wr_crn={0x67, 0x20, {0x2, 0x3}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x4c2, 0x4, 0x1ae05084, 0x8}}, @enable_nested={0x12c, 0x18}, @in_dx={0x69, 0x20, {0xcd41, 0x2}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest32=0x4808, 0x3, 0xffff, 0x3}}, @wrmsr={0x65, 0x20, {0xb6e, 0x6}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0xb2b5, 0x6}}, @rdmsr={0x66, 0x18, {0x332}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0xaf, 0x4182, 0x8, 0x4}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_invlpga={0x17d, 0x20, {0xeeee5000, 0x9446}}, @nested_amd_vmload={0x182, 0x18}, @nested_load_syzos={0x136, 0xcc, {0x1, 0x3, [@nested_amd_invlpga={0x17d, 0x20, {0xeeef0000, 0xc048}}, @code={0xa, 0x4c, {"c44219aaef0f788d6ed0fdadb9f20a00000f3266400f3830b9000000000f21cbb9690a00000f32649fc42151e3412bd8a4d300800000c42105f3cd"}}, @out_dx={0x6a, 0x28, {0xe887, 0x5, 0x1}}, @nested_amd_vmload={0x182, 0x18}]}}, @in_dx={0x69, 0x20, {0x18d8, 0x1}}, @enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0x50ff, 0x6, 0x80f}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x3, 0x4}}, @nested_load_syzos={0x136, 0x38, {0x1, 0x1, [@nested_vmresume={0x130, 0x18}]}}, @nested_vmresume={0x130, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x2e, 0x8001, 0xfffffffffffffffe, 0x8}}], 0x56c}) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000005c0)={0x6, 0x0, [{0xa2e, 0x0, 0x9}, {0x2d7, 0x0, 0xe4}, {0xa16, 0x0, 0x80}, {0x83, 0x0, 0x1000}, {0x267, 0x0, 0xfda7}, {0x402, 0x0, 0x3}]}) (async) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000005c0)={0x6, 0x0, [{0xa2e, 0x0, 0x9}, {0x2d7, 0x0, 0xe4}, {0xa16, 0x0, 0x80}, {0x83, 0x0, 0x1000}, {0x267, 0x0, 0xfda7}, {0x402, 0x0, 0x3}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000a00)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000680)={0x318, 0x3a, 0x10, 0x70bd2d, 0x25dfdbfc, {0x17}, [@generic="6bc62ef04f896d680a37041934f43ead35dea84f57793abbb6346bb1230a", @nested={0x8, 0xab, 0x0, 0x1, [@nested={0x4, 0x53}]}, @nested={0x18, 0x80, 0x0, 0x1, [@typed={0x14, 0x29, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1e}}]}, @nested={0x52, 0xa0, 0x0, 0x1, [@generic="478b18bebdbab3f4e64b13fa5ca8a0da919dd15cd8647a392e88495d9f0ce06fbf4c7381a187cbb8a4b834aa275b703282b9fb7ec8bc782ed4acedc6f30b0e2b21b8b224e11960851f83ec9c4989"]}, @generic="4de2e8c7a4b631ebd68ffb42308faf1c7eb64c2295951a0d7dd0372673c85ee8ca84fcb735bb688b1a32e1feb0ef9d0e8e9aaa045df130fd313b03258a7bcc757879417465e61eee1f679fcfed9008", @typed={0xc, 0x130, 0x0, 0x0, @u64=0xb}, @nested={0x1f4, 0x3a99, 0x0, 0x1, [@typed={0xa8, 0x97, 0x0, 0x0, @binary="e6cb57fd4f34e0eeead5864e25d30c937208496768a20f5d51c409459027bb640719c9a3ff9063bfe769ba2d3bccd5230a61136c198f7f8aefe10966ba9647327dcd2d4bb7cc97337dbc2315e13748ecc83a171e197f9c86b65f378b66afa2e287df931d568f0e7387f4f90ef7fb3d62f000b00927524bc43795938382a6eed66e7baadcca8498f97ec19c3f7c1cd6c25ad1d7882970f7d75a2497043586ad8b80321576"}, @nested={0x4, 0x22}, @nested={0x4, 0x76}, @typed={0x8, 0x36, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0x11c, 0x0, 0x0, @fd=r0}, @typed={0x14, 0x21, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @generic="8fe32c4b6960c371157a6e3c24102be4b3a40a31f6a6e69694bc1baaf137e6f4f1bc20c414a7b511f8e0e61707464fb3e1421a90aadddbb42e3753526f4ef2330466c561258490d1efe0ec2c4f74f1325400c961b797f21468e7f8c4ab983dd16cba5233f1762c16b839c974531097f98203b5722b87314ba799f1a9e2062a6abc5c899ec6bc7c31", @nested={0x4, 0xc}, @typed={0x90, 0xa1, 0x0, 0x0, @binary="9f14bcc236f5894252ad72a8e75377787e633562745985495b529353204e9225ba6beff161e9433cffb97e7ad5f9e81ebe844bac3a73d9f003dc70f9f9990ce206a753a3da36e13b8efd3afe60d53cc14a51ca01a2aba7bf86e229e1991f006dd18f5602a2568eeb78488f0521e0960cb46472dc292159e0fe6bf459cb946fcdd7eb2fa69683a42257c6af4f"}]}, @generic="8287705a278b6c2d6da100aab95f986ee472ac096d53dd39b76174a6804f911e341272"]}, 0x318}, 0x1, 0x0, 0x0, 0x24000010}, 0x20000041) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000a80)=0x5) (async) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000a80)=0x5) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), r1) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, r3, 0x510, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffe}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x2c}}, 0x2c085) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000c00)) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000c40)) (async) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000c40)) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000000c80)) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000000d00)={{r2}, 0x5, &(0x7f0000000cc0)=[0x8, 0x7, 0x4, 0xffffffff, 0x6], 0x6f, 0x3}) (async) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000000d00)={{r2}, 0x5, &(0x7f0000000cc0)=[0x8, 0x7, 0x4, 0xffffffff, 0x6], 0x6f, 0x3}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000e40)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x89, 0x8, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8000, 0x8000, 0xfb83, 0x9}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000e40)={'syztnl1\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x89, 0x8, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8000, 0x8000, 0xfb83, 0x9}}) sendmsg$nl_route(r4, &(0x7f0000000f40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)=@ipv6_newaddrlabel={0x70, 0x48, 0x0, 0x70bd26, 0x25dfdbfe, {0xa, 0x0, 0x38, 0x0, r5, 0x9}, [@IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_ADDRESS={0x14, 0x1, @private2}, @IFAL_ADDRESS={0x14, 0x1, @private1}, @IFAL_LABEL={0x8, 0x2, 0xc}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000010c0)={{0xffffffffffffffff, &(0x7f0000000f80)='[.T@\x00', 0x2200, &(0x7f0000000fc0)={@align=0x3, {0xfffc, 0x1, 0xbb76, 0x7}}, 0xd, &(0x7f0000001000), &(0x7f0000001040)=0x2}, {[0xf, 0x8, 0x20, 0x9ae]}, 0x404d, 0x3d, &(0x7f0000001080)=""/61}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000010c0)={{0xffffffffffffffff, &(0x7f0000000f80)='[.T@\x00', 0x2200, &(0x7f0000000fc0)={@align=0x3, {0xfffc, 0x1, 0xbb76, 0x7}}, 0xd, &(0x7f0000001000), &(0x7f0000001040)=0x2}, {[0xf, 0x8, 0x20, 0x9ae]}, 0x404d, 0x3d, &(0x7f0000001080)=""/61}) accept4(r4, &(0x7f00000012c0)=@ethernet={0x0, @random}, &(0x7f0000001340)=0x80, 0x800) (async) r7 = accept4(r4, &(0x7f00000012c0)=@ethernet={0x0, @random}, &(0x7f0000001340)=0x80, 0x800) r8 = getpgrp(0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001740)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) fstat(r1, &(0x7f0000002b80)) (async) fstat(r1, &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000002c00), 0x2, 0x0) (async) r13 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000002c00), 0x2, 0x0) sendmsg$netlink(r6, &(0x7f0000002f40)={&(0x7f0000001140)=@kern={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002e80)=[{&(0x7f0000001180)={0x118, 0x20, 0x8, 0x70bd2b, 0x25dfdbfb, "", [@nested={0xe, 0x24, 0x0, 0x1, [@generic="5805b095911d7bdd1288"]}, @typed={0xf6, 0x4a, 0x0, 0x0, @binary="5470bd261ae9dfe3c72f7836953915bf8ab4b4622f5ab482a1695636e3dda4fa91a3bc5bb95acdb76b6e1ef122f7e93df7aec03dc3eabe3b0d867648c063c75ead1daf69040a859950c191ef1801796b48b920e5d6d98caf801a2a7e3dfb702d7a001c6e57de298dc4651020846b3644ab2d15796d1efec3363da6fc2dd81d245b9c1a36d1a4437f2d02f4afe4a63b0f544452a4b2c866ea31cf90a1af2f724a7ee90b00320fc21bd8682d2cd4a50dc3e42429e58f17c59f06f84bcf6f4de41d7bdbcfccd2bf35cd94667d5359c63bf78434cda2a6dbdab51d98d0d507f814ec6610f1968add770a6b81a7c7b8aa2b474e8b"}]}, 0x118}, {&(0x7f0000001380)={0x398, 0x4, 0x104, 0x70bd27, 0x25dfdbfc, "", [@nested={0x34, 0x60, 0x0, 0x1, [@typed={0x9, 0x98, 0x0, 0x0, @str='IPVS\x00'}, @typed={0xc, 0x136, 0x0, 0x0, @u64=0x2}, @nested={0x4, 0xa1}, @nested={0x4, 0xf6}, @nested={0x4, 0x132}, @typed={0xc, 0x27, 0x0, 0x0, @u64=0x1}]}, @nested={0xeb, 0xdf, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @fd=r7}, @nested={0x4, 0x2d}, @nested={0x4, 0xbc}, @nested={0x4, 0xab}, @nested={0x4, 0x9d}, @generic="6c473b955be2d77694acf6e023f1300183d981cd70b4a8021aa1c52b0ce06c22021c08e9368ca168dac16e70e598b19383108eb403c75868868d2bb62ec2b4c8d2cb76971e217649ca25031229a295bdb05acac0a354093d459829db48d21308c22907ad438bfbfbb245b8cc64b08d416994b203d1ffb45b9e3633d89948a02172b37ec2131b1354164d0a03c651fdc3f8ad296a73b629c09a32b847e90de41455fb0f01e7b6699b0e63bf36687267d365b600393616a699e4070bbe4e88a63ebebbb0", @nested={0x4, 0xc6}, @typed={0x8, 0xee, 0x0, 0x0, @pid=r8}]}, @generic="80b3b493c75a61b23060abaefed6bc17137ecc59f763bad78c9ca1540df66b", @typed={0x4, 0xcf}, @generic="cc2bff30dcf0abe6656ed28c56ce54077d38a6932ea5b32d1711d66954f0fa4b8d3528340690e3df4c98a8d36eac0b87873a61b0e089330e1765771275ebeba394e5c56ccbeaaec5d1a4da454c215d487051ccdaa9cb263948d7aa0ca04ccb0248115bcd04aad91b196535e6f76a470dd960fcc259c5fcdfc07e25504ef3b6d4484b0c6f3356413a7cfd866189750ff3d4d17c35ba4ee52c39", @typed={0x8, 0x7a, 0x0, 0x0, @ipv4=@empty}, @nested={0x182, 0x63, 0x0, 0x1, [@generic="c3b91e7671c79d38c336cde1ecf84cbde7d0f15c44c8ca6f83aeb928e7d1bae5e495bcd0e75adac1d83b18472c0e9bb650bb479049b62f5e2c4352f7b84b3d67fe97eaae4987ada23093b8cca802d88e3256f18f8abbfeddd5822245013a458f450f0d8d3f0faf47c3acacd4e8ade6cd9706f51645604e6c7b0927b26d7f77019d3e2799d67262a74c93d43d2f5084811b343141d3d1b93591f0e645832993edbd36abf078ab57d1c8eeacc47cd8c3c5", @nested={0x4, 0xff}, @nested={0x4, 0xc5}, @nested={0x4, 0x126}, @generic="8f1b48e5f4a2fcf319e074e8b7056949fda60433a415700ba6198a49996bdb2696cd0dcb890c4e7b96ece7ab5ab83963f6d7a609cb294367c710c4213dc3c4603070603855a2210c571988394651addec47fbebb0f9d3a55f44754f33859c2ae268e3b517d43b4359b58c606ded25d6d1ce7f4f96a06241cdc623956f2e0d49ee343c217fb8813aa9373443fb3c234bf8d00f0811299f9de006ac00c1a1179ab8a9c21c2f369619b615e6156c876c0f91a7adfe3c981fe445b95", @nested={0x4, 0x12a}, @nested={0x4, 0x161}]}, @generic="bc6687e12492bc3f9a7a0292d0df41fec9c6eee2737095cc", @typed={0x8, 0x96, 0x0, 0x0, @uid=0xffffffffffffffff}]}, 0x398}, {&(0x7f0000001780)={0x150, 0x3e, 0x1, 0x70bd25, 0x25dfdbfd, "", [@nested={0x140, 0x5e, 0x0, 0x1, [@generic="c0a424fe40d9ae17550e978df1b9ec5634d452c8", @nested={0x4, 0x3a}, @typed={0x8, 0xa6, 0x0, 0x0, @uid=r10}, @generic="7db7e7d6fad9ab1d8f1897d4b125ae0f4846fa7a85d088087d31b86e4728d753cc7fdd73bd3ba767f5", @nested={0x4, 0x4}, @generic="ab0cf7d4ed3d6d71982f07e8fcdb4643eb6a1e064096b32633421e64e49bf43f9ef3e3ef71d587859f476647086e254aa697906c5668eb6e62b0799e7747f3e00b4e31dfeb9ef3452f3ac70b5170914ae0b60487f23f0ed3e79bfd91bc9efc7a821552549b63064db1e864cd03c784cfc5eb2a3694289a9c682919c881131cafb476927b617d65a0e816bb89966dca03b5b2b5d5c138a4f9c1b756a30e1c2bd2be1943f432a0273cb5502800914acc4c40c1f9d18ad0e07f855da12b3728b1ba167a1d441cc817b9d0543a19d157d01a74efd7844d573b6d6c2b6de57ff89a1c166ee2f0480835e97a5131549d1403"]}]}, 0x150}, {&(0x7f0000001900)={0xf8, 0x2e, 0x1282, 0x70bd2d, 0x25dfdbfc, "", [@generic="3ebde98359cb22bc55c9f758df33f26028a37c71c5099839404547732e3265b7103cf6f28aad62cb1114ffd6a949a8810f2bfa667ed70eb0390b66e61273bc43c508824cca4e19bc4c42936bb2355f94b2a4b9db02146e69abc3e6c02e0bb1ea7ee6752ea39d2f38095ac64bd90a9227e62847f43f20eff2c9edf247770da59559610f57f0ee72d157bf6e47cb6f6bde23b6143acee60c9596bada70970c1fa68d34bf62bc31d488bb8287a91de5cfd71f41435da2c5d02663d1a7c210bc70a8c32a4c7914d9e27f618aad", @generic, @typed={0x8, 0x24, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0x136, 0x0, 0x0, @fd=r0}, @nested={0xc, 0x123, 0x0, 0x1, [@nested={0x4, 0x92}, @nested={0x4, 0x112}]}]}, 0xf8}, {&(0x7f0000001a00)={0x1174, 0x19, 0x10, 0x70bd2d, 0x25dfdbfc, "", [@typed={0xc, 0x57, 0x0, 0x0, @u64=0x88b}, @nested={0x1157, 0x96, 0x0, 0x1, [@typed={0x8, 0x107, 0x0, 0x0, @fd=r1}, @generic="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", @typed={0x8, 0x66, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0x94}, @typed={0x14, 0x40, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @generic="e8108516159dc0d6c59d20a431a87bbc9960fc8e1a618fbfa5afb7ae0dcd8b8214a05c5dd7636da9123935d161fd", @generic="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"]}]}, 0x1174}, {&(0x7f0000002c40)={0x204, 0x2d, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x87, 0x87, 0x0, 0x1, [@nested={0x4, 0x108}, @nested={0x4, 0x14}, @nested={0x4, 0x7b}, @typed={0x4, 0x3d}, @typed={0xc, 0x122, 0x0, 0x0, @str='syztnl1\x00'}, @nested={0x4, 0x8d}, @typed={0x8, 0xeb, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0xe1, 0x0, 0x0, @uid=r12}, @generic="0c1675d245636e58d0d08f81836a1877d68da48f101357ee95288d28aff130cbe69847e4a4cec39ec728e40a7e72f649d9cc6d6bc941da0d83ee9cbc75dd15d8603317321e95850d04f7b6001df834379b7237"]}, @generic="6c4f26394ba45737d1306e3cd54d7f750f0f1876e87bc5b50bb7090b99991349a0d9e7ccba358ad49cfe143b9502d286e768981ee2103f991e18796cbd7b2a225947c0d4e6115061d791c53bbc9fce0cdbcc81611bd16cf6fa1e7219c2104182b750bfb696d6db3bf47785808f6750511aebd4dc0b40bcee446d1f1ae13ab92816bad9945fdfc6e0fd572423be31a3377b3ea490bf72de11ea3e866e15789772c020df9ad21161a83867db0d7387068208071174de", @nested={0x82, 0x74, 0x0, 0x1, [@generic="5ddc2acfbe7e2bf80e61143ab91f1346d6c487c8ca821e95e7e8c5d5b814c8e522de762506e9dbdf0791c480da8e9df1786c1369e9672671d8c366fa843bbd0b0f018ab417d168e4847d85794e9854cb600314a4ac144a504b3d79bd548721d9d3139088e2971c88e394564c7758d1eb43033947da18328f0ec2", @typed={0x4, 0x50}]}, @typed={0x8, 0x150, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x142, 0x0, 0x0, @fd=r13}, @generic="4c5382cb4f3caa6f74a5fd3ab94fb73494d9be52136ac47f65745bb742252e4c61ba"]}, 0x204}], 0x6, &(0x7f0000002f00)=[@rights={{0x28, 0x1, 0x1, [r2, r4, r0, r2, 0xffffffffffffffff, r0]}}], 0x28, 0x4000}, 0x10) getresuid(&(0x7f0000005280), &(0x7f00000052c0)=0x0, &(0x7f0000005300)) r15 = getegid() syz_fuse_handle_req(r6, &(0x7f0000002f80)="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", 0x2000, &(0x7f00000059c0)={&(0x7f0000004f80)={0x50, 0x0, 0x384, {0x7, 0x2d, 0x2, 0xffffffff90262126, 0x9, 0x1, 0x2e, 0x0, 0x0, 0x0, 0x4, 0x6}}, &(0x7f0000005000)={0x18, 0x0, 0x8, {0x4}}, &(0x7f0000005040)={0x18, 0x0, 0x0, {0x8}}, &(0x7f0000005080)={0x18, 0x0, 0x14760000, {0x6}}, &(0x7f00000050c0)={0x18, 0x0, 0x17, {0x100}}, &(0x7f0000005100)={0x28, 0x24, 0x4, {{0x7, 0x81, 0x1, r8}}}, &(0x7f0000005140)={0x60, 0x0, 0x5, {{0x7, 0x4, 0x31e, 0x40, 0x9, 0x1907, 0x4, 0xc26}}}, &(0x7f00000051c0)={0x18, 0x0, 0x1, {0x200}}, &(0x7f0000005200)={0x11, 0xffffffffffffffda, 0x2, {'\x00'}}, &(0x7f0000005240)={0x20, 0x0, 0x5957, {0x0, 0x8}}, &(0x7f0000005340)={0x78, 0xffffffffffffffda, 0x7fffffff, {0x8000000000000000, 0x7, 0x0, {0x3, 0x0, 0x1, 0xfffffffffffffff8, 0x8, 0x1, 0x85, 0xd, 0xcc5, 0x4000, 0x1, r14, 0xee01, 0x401, 0xb5e}}}, &(0x7f00000053c0)={0x90, 0x0, 0xffffffffffffeaa0, {0x4, 0x0, 0x9, 0x1, 0x21, 0x7, {0x3, 0x6, 0x1, 0x36, 0x8, 0x8, 0x5, 0xba, 0x400, 0xa000, 0x7, r12, r11, 0x867d, 0x7}}}, &(0x7f0000005480)={0x148, 0xffffffffffffffda, 0x7, [{0x2, 0x9, 0x0, 0xc}, {0x4, 0x5, 0x5, 0x3, '[.T@\x00'}, {0x6, 0x400, 0x5, 0x81, '}\'&-)'}, {0x2, 0x7, 0xf, 0x0, '/dev/ttyprintk\x00'}, {0x4, 0x401, 0x0, 0xfffffffd}, {0x5, 0x8000000000000001, 0x1, 0xe, '/'}, {0x0, 0x40000000, 0x2, 0x5, '&{'}, {0x6, 0x6738, 0x5, 0x2, '(.-%*'}, {0x6, 0x5, 0x8, 0x1f3, '\x83]^\xe9\x7f(^{'}, {0x5, 0x1ff, 0x1, 0x5, '\x00'}]}, &(0x7f0000005600)={0x150, 0x0, 0x8, [{{0x3, 0x1, 0x0, 0xd, 0x1, 0x7, {0x1, 0x101, 0x8000, 0x0, 0xc6, 0xfe, 0x1, 0x1, 0x200, 0x8000, 0x2f, r12, r11, 0x81}}, {0x5, 0x7, 0x5, 0xffff2e82, '\\/+:!'}}, {{0x2, 0x1, 0x8, 0x318, 0x2, 0x101, {0x6, 0x2, 0xd, 0xc0000000000, 0x9, 0xfff, 0x5, 0x10000, 0x0, 0x4000, 0xd, r10, r11, 0x6, 0x2}}, {0x6, 0x4, 0x2, 0x4, ',+'}}]}, &(0x7f0000005780)={0xa0, 0x0, 0x9, {{0x2, 0x0, 0x4, 0x7f, 0x4, 0x2, {0x6, 0x7, 0x14d, 0x2, 0x1, 0xf, 0xfffffffb, 0x7, 0x0, 0x4000, 0xce96, r10, r11, 0x9ba7, 0xffffffff}}, {0x0, 0x10}}}, &(0x7f0000005840)={0x20, 0x0, 0x1, {0x9, 0x4, 0x1, 0x6}}, &(0x7f0000005880)={0x130, 0x0, 0x9, {0x9, 0x3, 0x0, '\x00', {0x80, 0x8, 0x8, 0x3627, 0xee00, r15, 0xc000, '\x00', 0xf693, 0x8, 0x81, 0x6, {0xffffffffffffffff, 0xe}, {0x100, 0x100}, {0x8, 0x6}, {0x233, 0x5}, 0x8d8c, 0x40, 0x1, 0x3}}}}) write$cgroup_int(r9, &(0x7f0000005a80)=0x75, 0x12) setsockopt$MRT_ASSERT(r9, 0x0, 0xcf, &(0x7f0000005ac0)=0x1, 0x4) r16 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000005b00), 0x125140, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r16, 0x2, &(0x7f0000005b40)=0x2) ioctl$XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, &(0x7f0000005b80)={r2, 0x9}) 2.514521921s ago: executing program 2 (id=4167): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000002c80)={r0, &(0x7f0000000880), 0x0}, 0x20) 2.466279185s ago: executing program 0 (id=4168): r0 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b36cec20ca08602058c60102030109024b0e01000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@deltaction={0x48, 0x18, 0x1, 0x70bd2a, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x8f, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb8a}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001000)={0x1c, &(0x7f0000000f40)={0x40, 0x9, 0x1, "b9"}, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000640)=ANY=[@ANYBLOB="4097b60000001f"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000e00)={0x2c, &(0x7f0000000bc0)={0x20, 0x12}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, &(0x7f0000000780)={0x14, &(0x7f00000004c0)={0x20, 0xd6a4ee03bc900e94, 0xdf, {0xdf, 0x21, "961de63b534f99b2bf0abb0c1aa3bdfba4dee16cae39b98ca3f6f6272ed9bb1135f9dcf8bc953f142e808e109a8265a45920e12cf0e63641c3f6f0392103eccfe9ae02b4f5a8f3b1e0a24be4125716cfe88cbbca137c469ec165f0bbd211f68bf3af4f7cef5ac186c985eecb9b37c1fd94be3564ea468ca2aa06c071638f185edfd2d9af7a646337d305d00eca6911ab576057ebd0e4df006867e3e72cc91a3060cb63fb1a1e319f77d7bfa2f108396d3cadf28e4dcb6f9eaa8388918bee31ed69cd9d0f9b01e7f7d25b5eb5ef25d5f1c0f68054b5734f0330ccb3d155"}}, &(0x7f0000000680)={0x0, 0x3, 0xe0, @string={0xe0, 0x3, "81467e06583882aec62ba0594d8447fe5a00868613e738687131029614306f3ad2931dd41905f1c3a2a924e19637fd24c856934039d81d14f56bb641e7ff559b3b17ff9e93a8040886d7f08e87fc0c927f3a9f6a921afa61a9cbeae04dfb8616adcc7851e18cf0cb67dc5fcb220cafc5ced42ae609b3c0b88bc9dc3e21cfc12a83ef3d8354076f001fe743a9e8391b548136058709feb4e4d8f294bbfcd04308dcfe40ab7b3375397e6ad4b5cc39931bf6279405b0c570943b9308096e2123aa37546c79d4fea7c4fe910a88eed8b76f6776bbc6f7c91c8311fb4a71fcfb"}}}, &(0x7f00000014c0)={0x1c, &(0x7f00000007c0)={0x20, 0x17, 0x86, "b7935c30a7b6e3a69b3a5c4786f935ce2f85c49e1a20caed34e5616d0c212ba82bac0467942b0e0f1ef2c47a667c33d93dde3790503155cc718bea4d0e8bd09d34cfa0c812a55ee313c168c04929043b1a550275f960eea3b4b52d0fc4f17c5f78a6751e73a34bf1156a45d5aec4e1d86f84e909ff918ce297404f00b0bc45311f4136b687aa"}, &(0x7f0000001040)={0xa1, 0x1, 0x400, "0b4c0bc947ad6cb1b82a95012224c499c9bd7bc5a56c9a3ac5ada3963129f60ff8fe65284dc1feba1d33f84c3dcb449c387f42f47274f95f55f12535cde577ed3e2a6673a06dc085b6e796cfecd088b69067bb794deb1ed956aede744bd0b21896649880d1a20014e28806eb57d17c4cc04f0b4eac320c6f91bac1035d9bb803aad7a07e8546c315722f095730470ad20e621894c39fdfdbdc24f606f1aecd344ec950f34df4c25c0dcfca90452d40bd699b39086e3c12aa1ae582de7e213b10366dd6a017bfcf22386d65214160cb0b93c31fff1929100c16f9f64d1661f3b7e5fac295467318fccb169fb92152494eedf49bd9653a26f4cce863ff1713f57e79b771e2bedc4550b071881ac7bfb84246cfeeb5ed2944a4aeddf2ec95625d9cb7deb2e67ce753998f61e9bb96d0bc9f1400843d18db48fac7b0b232eca75d5f9699290edf53c1f4e66c9ef2ad1ec603dd0a9143d26b90cd357cb56af9d2da3b7749f384558c0ced9a8031ceb1ce25ba8896837fc37a8b3a2f36093df0dfda7a00a427fde2672edcb39997bf440917ec79e4560b533b12fca88d2531eb36f8d043a39eac9ccd0d01fe875c4a726b83cbdc13c7e1fed5e39b137c37414b0c240adaecac3453e0380e35ba59d70adf200df0438f8c4acf522c52e02349c8dc9a285319bd54cd48afd5ab301ac13a4a475424f21bed3e721f1d635f42aec83f450ec85370ceb3a2195e841d19b8cb899fe0cb8843427ff3abe619c216e7fedb80210290f8f2f0087f471aa73de19049178bab7bcf2f45f48dc9b7030434adab3a0174c2c5661688603104c6413f1484e8ac5f47566f3fff95f8ab6d168991ea73d250e9d3d9f03f1d49f8cb7dd78fbd6ca4f9f20f98f0efc7d29b3e1763f7a8de1db8edbfd040c135a96e27834608357b13fa43999a72dcc784cdd9ce64a4bbf75517df58f77914c1c8e33f5d110174ec8838fe1cec97bba663afddfba81b2583192f74939884feeac5231a688e12c758e459e63b59675f4fc9c9f7bdb773c3e3cbe591c215d30de4c55b5c375490d3afa88b6cae81f3ad248bfaa1370b70077e951d74e668e201ce2dec2eef87db09fdafa9025cde0ac64c344306fb98d90799d54da2285b014f15e4537fe45747cae713e5228f121b0114954110f454428301fd856e1115a25ef158df56bc2587f7fa28f6109c2aa13c7c2d1967c559520a026264d029154b855045693488de484a2dbaa13e9ec10335e3cb26ebb7133aed5a2382acd98b804388573384f9ae33b347f21e3d2bd7ac89bcfc59215a6fee659412ad235179ed34d1adf06bcb7c826bbfd560a8222a630ae2f64499aa57e4dbb063d22b827179a4a841e4e1abad7740df0bb0b2f4561310391afb2d57596ded42598980e41dc1963c036261b701c18aaf5cb03b9c1650e5098d53818d238a88a3f2"}, &(0x7f0000001480)={0x21, 0x0, 0x3, "4f00ae"}}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000001c0)={0x40, 0x4081e18194798f64, 0x2, 'hd'}, 0x0, 0x0, 0x0, 0x0}) 2.465907562s ago: executing program 5 (id=4169): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x70d, 0xf9a5, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0x1, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x8010000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xffdffff9, 0x7, 0x9, 0x9, 0x1, 0x463f, 0x2, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0xffffffffffffffff, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x6, 0xb, 0x7, 0xfffffffffffffff8, 0x6, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000ffff2abd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="f9840400110a0000140012800b0001006772657461700000000000800a0002009d430ec07024000008000d00"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x8000002) r8 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r10, 0x5411, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) 2.308850183s ago: executing program 4 (id=4170): r0 = syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000000)=ANY=[], 0x4) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x9, 0x2c01) poll(&(0x7f0000000100)=[{r1, 0x2214}, {r2, 0xc}, {r3, 0x1012}, {r4, 0x1008}], 0x4, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000004540)={0x0, @in6={{0xa, 0x4e23, 0x8, @remote, 0x48}}, 0x15f, 0x6, 0x4, 0x9, 0x33}, &(0x7f0000004600)=0x98) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7543, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 2.278881073s ago: executing program 2 (id=4171): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100), 0x2) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000001180)=""/4107, 0x100b}], 0x1, 0x0, 0x0) 2.060829324s ago: executing program 1 (id=4172): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@random={'osx.', 'syz1\x00'}, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b000100000000090408000103000000090557eb"], 0x0) 2.060437885s ago: executing program 5 (id=4173): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) 2.028685527s ago: executing program 5 (id=4174): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000003880)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xffffff98) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xd, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b9", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r5, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r6, 0x5b15, 0x0) socket(0x400000000010, 0x3, 0x0) unshare(0x8000400) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) recvmmsg(0xffffffffffffffff, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x935f}], 0x1, 0x40002140, 0x0) 1.928108788s ago: executing program 2 (id=4175): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d1}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x0, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x24048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) io_uring_setup(0x2a90, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x277}) 1.762204005s ago: executing program 2 (id=4176): socket$netlink(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000100)='jffs2\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14040010}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) poll(&(0x7f0000000340)=[{r2, 0x3200}], 0x1, 0x9) socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000003140)=[{&(0x7f00000002c0)="ca7bfc8312c9237bffa562dc1d03c723970f07a1078c261ec3fdfed5f81f4f5fe80bb3ebaa7484bfa3214dbd065c92f849a4c0f98b384d978d483f4d189251fe8cfea46b9c", 0x45}, {&(0x7f0000001000)="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", 0x546}], 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)="44b9c16606a6bf8bf5fc5ad99f19a21904c1cfa14f48d0e3a10b8e58cfbdf74a3f19ef7dbcb64701184e17808d11226bc5c70d0505ab58d33322bf749965e816a657317d4bcffbf14d093b8f", &(0x7f00000004c0)="c631bff19b0c602e2797ec8090ebcd721d1c9004353d3bc18efc88832364ebac10bf5c6fef872c38a68476bb4a45eb92166f5240998b496290f09179dcd64c99c2915caf8aa6d2235207769ba3d82d3bf2164eb8553ddac197a5", 0x7ff, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, &(0x7f0000000280)=""/135, &(0x7f0000000340), &(0x7f0000000380), 0x80, r3}, 0x38) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0xffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x6a) r7 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private2, @in=@local, 0x4e28, 0x0, 0x4, 0xf000, 0x2}, {0xffffffffffffffff, 0x802, 0x913e, 0x0, 0xfffffffffffffffc, 0xfffffffffffff207, 0x5}, {0x0, 0x0, 0x0, 0x8}, 0x3, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x20}, 0x4d2, 0x33}, 0x0, @in=@multicast1, 0x3507, 0x0, 0x2, 0x4, 0x4, 0xfffffffe, 0xfffffffd}}, 0xe8) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x2000, 0x1000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 418.842629ms ago: executing program 1 (id=4177): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x16, 0x0, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x437, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10c8d}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x9, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) 325.402759ms ago: executing program 2 (id=4178): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000140)={0xc688, 0x3, 0x3, 0x8319, 0xf4, "04ffff0500000000000000100000003222dd76", 0x8, 0x6df}) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xd}, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040041}, 0x840) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000180)) r4 = socket$inet6(0xa, 0x2, 0x0) close(r4) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000000040)=0x7, 0x4) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'wrr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0xfffffffe}, {@private=0xa010101, 0x4908, 0x10000, 0x1}}, 0x44) r8 = socket$inet(0x2, 0x1, 0x6) socket$l2tp6(0xa, 0x2, 0x73) connect(r8, 0x0, 0x0) 217.677796ms ago: executing program 1 (id=4179): syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x80842) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40058}, 0x0, 0x0, 0x0) unshare(0x22020600) pselect6(0x0, 0x0, &(0x7f0000000000)={0x1f, 0x2, 0x3, 0x0, 0x0, 0x3, 0xd, 0x7e4e79b4}, 0x0, 0x0, 0x0) 86.768026ms ago: executing program 2 (id=4180): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x9, 0xff, 0x3, 0x1}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x7c, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x22e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x20, 0x0, 0x1000000}]}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f0000000040)=@mmap={0x10001, 0x1, 0x4, 0x70000, 0x2, {0x77359400}, {0x2, 0xc, 0x2, 0x4, 0xfd, 0x4, "7365981f"}, 0xb24, 0x1, {}, 0x7}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)=@x86={0x24, 0x40, 0xe7, 0x0, 0x7, 0x47, 0x7, 0x3, 0x8, 0x20, 0xf6, 0x0, 0x0, 0x5a1de45f, 0x5c2, 0x7, 0x23, 0x3, 0x4, '\x00', 0xb, 0x800}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) 0s ago: executing program 4 (id=4181): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000002c80)={r0, &(0x7f0000000880), 0x0}, 0x20) kernel console output (not intermixed with test programs): ltsetting 191: 144, using maximum allowed: 30 [ 1094.346252][T18334] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1094.346350][T18334] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1094.346430][T18334] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1094.359266][T10898] em28xx 3-1:1.0: unknown em28xx chip ID (0) [ 1094.420956][T18334] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1094.421055][T18334] usb 6-1: Product: syz [ 1094.421113][T18334] usb 6-1: Manufacturer: syz [ 1094.421174][T18334] usb 6-1: SerialNumber: syz [ 1094.538397][T18334] usb 6-1: config 0 descriptor?? [ 1094.638904][T18334] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1094.729604][T18334] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1095.150702][T19663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1095.189178][T19652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1095.192423][T19652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1095.240876][T19660] can: request_module (can-proto-0) failed. [ 1095.263891][T18334] usb 6-1: USB disconnect, device number 20 [ 1095.290796][T18334] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1095.334291][T10906] asus 0018:0B05:0101.003D: unbalanced collection at end of report description [ 1095.345869][T10906] asus 0018:0B05:0101.003D: Asus hid parse failed: -22 [ 1095.352987][T10906] asus 0018:0B05:0101.003D: probe with driver asus failed with error -22 [ 1095.922034][T19678] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3813'. [ 1095.933528][T10906] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1095.962031][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1095.962094][ T30] audit: type=1326 audit(1788831349.835:7210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19679 comm="syz.5.3814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e339e159 code=0x7ffc0000 [ 1095.993937][T19678] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3813'. [ 1095.996522][ T30] audit: type=1326 audit(1788831349.865:7211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19679 comm="syz.5.3814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e339e159 code=0x7ffc0000 [ 1096.035607][ T30] audit: type=1326 audit(1788831349.915:7212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19679 comm="syz.5.3814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e339e159 code=0x7ffc0000 [ 1096.067679][ T30] audit: type=1326 audit(1788831349.915:7213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19679 comm="syz.5.3814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e339e159 code=0x7ffc0000 [ 1096.067770][ T30] audit: type=1326 audit(1788831349.935:7214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19679 comm="syz.5.3814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f13e339e159 code=0x7ffc0000 [ 1096.067826][ T30] audit: type=1326 audit(1788831349.935:7215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19679 comm="syz.5.3814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e339e159 code=0x7ffc0000 [ 1096.067866][ T30] audit: type=1326 audit(1788831349.935:7216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19679 comm="syz.5.3814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e339e159 code=0x7ffc0000 [ 1096.067906][ T30] audit: type=1326 audit(1788831349.945:7217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19679 comm="syz.5.3814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e339e159 code=0x7ffc0000 [ 1096.067950][ T30] audit: type=1326 audit(1788831349.945:7218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19679 comm="syz.5.3814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f13e339e159 code=0x7ffc0000 [ 1096.067989][ T30] audit: type=1326 audit(1788831349.945:7219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19679 comm="syz.5.3814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e339e159 code=0x7ffc0000 [ 1096.248873][T10906] usb 2-1: Using ep0 maxpacket: 8 [ 1096.258828][T10906] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1096.269629][T10906] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1096.269710][T10906] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1096.269742][T10906] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1096.269775][T10906] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1096.269807][T10906] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1096.269857][T10906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.332076][T10898] em28xx 3-1:1.0: failed to get i2c transfer status from bridge register (error=-5) [ 1096.346603][T10898] em28xx 3-1:1.0: board has no eeprom [ 1096.405913][T10898] em28xx 3-1:1.0: Identified as Terratec Cinergy T XS (MT2060) (card=44) [ 1096.405973][T10898] em28xx 3-1:1.0: dvb set to bulk mode. [ 1096.428276][ T5698] em28xx 3-1:1.0: Binding DVB extension [ 1096.470922][ T5698] em28xx 3-1:1.0: writing to i2c device at 0x1e failed (error=-5) [ 1096.481184][ T5698] zl10353_read_register: readreg error (reg=127, ret==-5) [ 1096.485321][T10898] usb 3-1: USB disconnect, device number 111 [ 1096.487812][T10898] em28xx 3-1:1.0: Disconnecting em28xx [ 1096.511719][ T5698] em28xx 3-1:1.0: frontend initialization failed [ 1096.518876][ T5698] em28xx 3-1:1.0: Remote control support is not available for this card. [ 1096.530335][T10898] em28xx 3-1:1.0: Closing input extension [ 1096.562287][T10906] usb 2-1: GET_CAPABILITIES returned 0 [ 1096.562368][T10906] usbtmc 2-1:16.0: can't read capabilities [ 1096.588500][T10898] em28xx: Freeing device [ 1096.803599][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1096.803679][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1096.803753][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1096.832112][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1096.832172][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1096.832213][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1096.862007][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1096.862074][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1096.862123][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1096.862184][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1096.905016][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1096.905074][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1096.905116][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1096.905156][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1096.944380][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1096.944454][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 1097.094896][T19704] netlink: 13 bytes leftover after parsing attributes in process `syz.0.3819'. [ 1097.126314][ T9271] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1097.282983][ T9271] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1097.283091][ T9271] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1097.301730][ T9271] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.301792][ T9271] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1097.328222][ T9271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.328299][ T9271] usb 3-1: Product: syz [ 1097.328978][ T9271] usb 3-1: Manufacturer: syz [ 1097.329029][ T9271] usb 3-1: SerialNumber: syz [ 1097.408654][ T9271] usb 3-1: 0:1 : does not exist [ 1097.500645][T19710] netlink: 'syz.0.3821': attribute type 30 has an invalid length. [ 1097.700121][T19716] binder_alloc: binder_alloc_mmap_handler: 19712 200000ffd000-200001000000 already mapped failed -16 [ 1097.728089][ T9271] usb 3-1: unit 0 not found! [ 1097.740091][T19713] binder: BINDER_SET_CONTEXT_MGR already set [ 1097.740142][T19713] binder: 19712:19713 ioctl 4018620d 200000004a80 returned -16 [ 1097.764714][T19713] binder_alloc: 19712: binder_alloc_buf, no vma [ 1097.824066][ T9271] usb 3-1: USB disconnect, device number 112 [ 1097.924190][ T7957] udevd[7957]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1097.942326][T19718] binder: 19712:19718 ioctl 8138ae83 7fba1e370a90 returned -22 [ 1098.558299][ T9271] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1098.716747][ T9271] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1098.719261][ T9271] usb 3-1: config 0 has no interfaces? [ 1098.734462][ T9271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.734515][ T9271] usb 3-1: Product: syz [ 1098.734533][ T9271] usb 3-1: Manufacturer: syz [ 1098.734581][ T9271] usb 3-1: SerialNumber: syz [ 1098.764314][ T9271] usb 3-1: config 0 descriptor?? [ 1098.950970][ T9271] usb 2-1: USB disconnect, device number 87 [ 1099.605642][T10906] usb 3-1: USB disconnect, device number 113 [ 1100.006061][T10898] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1100.167197][T10898] usb 2-1: Using ep0 maxpacket: 8 [ 1100.174397][T10898] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1100.187295][T10898] usb 2-1: config index 0 descriptor too short (expected 5273, got 36) [ 1100.187348][T10898] usb 2-1: config 156 has too many interfaces: 53, using maximum allowed: 32 [ 1100.187393][T10898] usb 2-1: config 156 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.187420][T10898] usb 2-1: config 156 has 0 interfaces, different from the descriptor's value: 53 [ 1100.229816][T10906] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1100.243678][T10898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.243728][T10898] usb 2-1: Product: 視겯陋᫊㒥鴟㤠涻봶ㅺ᧹ᗸ㉬ℱ勊蹽臓âªå¡‘赈á—踸렌鉮ç¥ê£«ç®—턈㹬鷵啠꠱昂æ”Ｐꦆê‘믆漆닅ì·æ¢…㇃橛㷕ᛉ䘈ê…醠襦䦜á°ìŠ½í‹³ç“¡ä§™è¸‚㳇⪛⅜䊌â¢á›— [ 1100.243780][T10898] usb 2-1: Manufacturer: 綡欩ﾹྈꆂ喴ë‹ì¾œá¸—趎䫬㹌뗿좕ቔ䑆⧺剆彫㉞㿋潄⒠媋怄ãŠâ¡áŽ‚ãºæŽ‘êš±ä’鱶䋲乕蘔ᢢ䋭Љჰ⥯䙖é©ã‹”ï…†ê¹î‡¹á”ᇟ∋貽㙈㛎➊⥃ભ쪡Ә鬡臽휋ꈞᾬ镎︺颇ꧪ楽늌횻뾬墕쯶âžå•¤ä¾¬â“½ì³›ã–°ï䕯ᄑਇ伇崂ë£çº¸æ‡ â‹‘约î³á¼ƒë—¿ï¾±î‰°ç‡Ÿå‰Žâ¤¡ïˆ ïžˆÅ‘ç”⚔쫋蜆봻ⓘꚈ蒸磗੷ëž°ç›’á©¢á¾ï¿ƒí…‡ [ 1100.243825][T10898] usb 2-1: SerialNumber: 킗ᛯ잊峉묵뿇îŒäŽ£ï“†ê—°æ±¯ì…Œã¬â­è®¯ë¼ëŽ¥ì›„仵袒ã畇ã†ì¶«ï¸°ìˆ¶â¶¯ç«ªå®Œì’“㬾픑ꓠ᭟䃻숿ç«æ­€à¤°á˜©â‹šè¨æ¸½ï²¸ã”®ç¼–芦죴ᘜî’畣蕠̠é¯á•¡ì«¢å†¦å©«âž¬æºè¾±á˜Žê¢¸â£˜â¯¬å€è£»è‹–뾟䆱궋꠪馞熴è»à·â—ŽÊŒå…ˆì’›ãœ¦ì—›ì‘᱃徘븖体딉쎡ìµíŸšäƒ›í€Žë†žâ†…å–¹î‚讄㓗ᖣॉ榖殔⸀ [ 1100.438905][T10906] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1100.439083][T10906] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1100.468484][T10906] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.468546][T10906] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1100.488787][T10906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.488822][T10906] usb 3-1: Product: syz [ 1100.488868][T10906] usb 3-1: Manufacturer: syz [ 1100.488885][T10906] usb 3-1: SerialNumber: syz [ 1100.554550][T10906] usb 3-1: 0:1 : does not exist [ 1100.597437][T19761] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1100.788609][T19745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1100.797933][T19745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.807292][T19763] fuse: Bad value for 'group_id' [ 1100.807342][T19763] fuse: Bad value for 'group_id' [ 1100.891539][T19745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1100.900211][T19745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.920869][T10896] usb 2-1: USB disconnect, device number 88 [ 1101.096388][T10906] usb 3-1: unit 0 not found! [ 1101.151919][T19768] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 1101.151961][T19768] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1101.152135][T19768] vhci_hcd vhci_hcd.0: Device attached [ 1101.235733][T10906] usb 3-1: USB disconnect, device number 114 [ 1101.391718][T19770] vhci_hcd: connection closed [ 1101.392380][T14421] vhci_hcd vhci_hcd.4: stop threads [ 1101.392446][T14421] vhci_hcd vhci_hcd.4: release socket [ 1101.392632][T14421] vhci_hcd vhci_hcd.4: disconnect device [ 1101.415510][ T9271] usb 42-1: enqueue for inactive port 0 [ 1101.430162][ T7957] udevd[7957]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1101.731743][T19777] ip6gretap1: entered allmulticast mode [ 1101.906660][ T9271] usb usb42-port1: attempt power cycle [ 1102.233845][T19785] FAULT_INJECTION: forcing a failure. [ 1102.233845][T19785] name failslab, interval 1, probability 0, space 100, times 0 [ 1102.233920][T19785] CPU: 0 UID: 0 PID: 19785 Comm: syz.2.3841 Tainted: G L syzkaller #0 PREEMPT(full) [ 1102.233959][T19785] Tainted: [L]=SOFTLOCKUP [ 1102.233968][T19785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1102.233983][T19785] Call Trace: [ 1102.233992][T19785] [ 1102.234059][T19785] dump_stack_lvl+0xe8/0x150 [ 1102.234259][T19785] should_fail_ex+0x410/0x560 [ 1102.234378][T19785] should_failslab+0xa8/0x100 [ 1102.234464][T19785] __kmalloc_noprof+0xfe/0x720 [ 1102.234529][T19785] ? tomoyo_encode+0x2ad/0x570 [ 1102.234596][T19785] ? tomoyo_encode+0x2ad/0x570 [ 1102.234684][T19785] tomoyo_encode+0x2ad/0x570 [ 1102.234778][T19785] tomoyo_realpath_from_path+0x5fa/0x640 [ 1102.234883][T19785] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1102.234980][T19785] tomoyo_path_number_perm+0x246/0x5f0 [ 1102.235095][T19785] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1102.235190][T19785] ? __lock_acquire+0x747/0x2de0 [ 1102.235295][T19785] ? hook_file_ioctl+0x1f2/0x600 [ 1102.235412][T19785] ? __fget_files+0x2a/0x420 [ 1102.235504][T19785] ? __fget_files+0x2a/0x420 [ 1102.235581][T19785] ? __fget_files+0x3a2/0x420 [ 1102.235664][T19785] ? __fget_files+0x2a/0x420 [ 1102.235765][T19785] security_file_ioctl+0xc3/0x2a0 [ 1102.235862][T19785] __se_sys_ioctl+0x47/0x170 [ 1102.235935][T19785] do_syscall_64+0x166/0x520 [ 1102.235998][T19785] ? trace_irq_disable+0x3b/0x140 [ 1102.236061][T19785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.236266][T19785] ? clear_bhb_loop+0x70/0xc0 [ 1102.236350][T19785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.236420][T19785] RIP: 0033:0x7fa61839e159 [ 1102.236484][T19785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1102.236538][T19785] RSP: 002b:00007fa6192ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1102.236611][T19785] RAX: ffffffffffffffda RBX: 00007fa618625fa0 RCX: 00007fa61839e159 [ 1102.236655][T19785] RDX: 00002000000004c0 RSI: 000000004008ae89 RDI: 0000000000000005 [ 1102.236699][T19785] RBP: 00007fa6192ce090 R08: 0000000000000000 R09: 0000000000000000 [ 1102.236740][T19785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1102.236783][T19785] R13: 00007fa618626038 R14: 00007fa618625fa0 R15: 00007fa61874fa48 [ 1102.236881][T19785] [ 1102.255875][T19785] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1102.468522][ T9271] usb usb42-port1: unable to enumerate USB device [ 1102.619581][T19787] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3842'. [ 1102.620440][T19787] netlink: 136 bytes leftover after parsing attributes in process `syz.5.3842'. [ 1103.177508][T19810] loop3: detected capacity change from 0 to 7 [ 1103.184813][T19810] Dev loop3: unable to read RDB block 7 [ 1103.184861][T19810] loop3: unable to read partition table [ 1103.185206][T18335] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1103.185339][T19810] loop3: partition table beyond EOD, truncated [ 1103.185360][T19810] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1103.219295][ T9271] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1103.337298][T18335] usb 6-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 1103.349070][T18335] usb 6-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 1103.360448][T18335] usb 6-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 1103.360476][T18335] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1103.375280][ T9271] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1103.395831][ T9271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.395883][ T9271] usb 3-1: Product: syz [ 1103.395987][ T9271] usb 3-1: Manufacturer: syz [ 1103.396008][ T9271] usb 3-1: SerialNumber: syz [ 1103.416422][T18335] usb 6-1: string descriptor 0 read error: -22 [ 1103.416723][T18335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.490683][T18334] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1103.567554][T19814] loop4: detected capacity change from 0 to 7 [ 1103.572739][T19814] loop4: [ 1103.572824][T19814] loop4: partition table partially beyond EOD, truncated [ 1103.578095][T18330] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1103.727414][T18330] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1103.727498][T18330] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1103.747984][T18330] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1103.748138][T18330] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1103.774584][T18330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.774679][T18330] usb 2-1: Product: syz [ 1103.774714][T18330] usb 2-1: Manufacturer: syz [ 1103.774955][T18330] usb 2-1: SerialNumber: syz [ 1103.839455][T18330] usb 2-1: 0:1 : does not exist [ 1103.979775][T18335] hid_parser_main: 4011 callbacks suppressed [ 1103.980044][T18335] logitech 0003:046D:C626.003E: unknown main item tag 0x0 [ 1103.992964][T18335] logitech 0003:046D:C626.003E: unknown main item tag 0x0 [ 1103.993229][T18335] logitech 0003:046D:C626.003E: unknown main item tag 0x0 [ 1103.994276][T18335] logitech 0003:046D:C626.003E: unknown main item tag 0x0 [ 1103.994542][T18335] logitech 0003:046D:C626.003E: unknown main item tag 0x0 [ 1104.002430][T18335] logitech 0003:046D:C626.003E: unknown main item tag 0x0 [ 1104.002689][T18335] logitech 0003:046D:C626.003E: unknown main item tag 0x0 [ 1104.002926][T18335] logitech 0003:046D:C626.003E: unknown main item tag 0x0 [ 1104.003145][T18335] logitech 0003:046D:C626.003E: unknown main item tag 0x0 [ 1104.003367][T18335] logitech 0003:046D:C626.003E: unknown main item tag 0x0 [ 1104.065113][T10906] usb 3-1: USB disconnect, device number 115 [ 1104.102982][T19819] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3852'. [ 1104.142494][T19819] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3852'. [ 1104.194533][T19819] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3852'. [ 1104.306957][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1104.314171][ T30] audit: type=1400 audit(1788831358.185:7231): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F0 [ 1104.349532][ T5698] hid-generic 0000:0000:0000.003F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1104.493073][T18335] logitech 0003:046D:C626.003E: hidraw1: USB HID vff.7f Device [HID 046d:c626] on usb-dummy_hcd.5-1/input0 [ 1104.538932][T18335] usb 6-1: USB disconnect, device number 21 [ 1104.546342][T18334] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1104.546628][T18334] ath9k_htc: Failed to initialize the device [ 1104.578841][T10906] usb 3-1: ath9k_htc: USB layer deinitialized [ 1104.665499][T18330] usb 2-1: unit 0 not found! [ 1104.829085][T19827] fido_id[19827]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1104.992874][T18330] usb 2-1: USB disconnect, device number 89 [ 1105.313086][ T8560] udevd[8560]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1105.395182][ T5698] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1105.545144][ T5698] usb 5-1: device descriptor read/64, error -71 [ 1105.678059][T19852] netlink: 'syz.5.3860': attribute type 39 has an invalid length. [ 1105.763672][T19843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.777375][T19843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.820302][ T5698] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1105.891869][T19852] bridge0: port 3(vlan2) entered disabled state [ 1105.901758][T19852] vlan2 (unregistering): left allmulticast mode [ 1105.901810][T19852] syz_tun (unregistering): left allmulticast mode [ 1105.901837][T19852] vlan2 (unregistering): left promiscuous mode [ 1105.901890][T19852] syz_tun (unregistering): left promiscuous mode [ 1105.902224][T19852] bridge0: port 3(vlan2) entered disabled state [ 1105.946870][ T5698] usb 5-1: device descriptor read/64, error -71 [ 1106.011804][T19861] syzkaller0: entered promiscuous mode [ 1106.011913][T19861] syzkaller0: entered allmulticast mode [ 1106.096267][ T5698] usb usb5-port1: attempt power cycle [ 1106.365364][T18342] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1106.457899][ T5698] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1106.479649][ T5698] usb 5-1: device descriptor read/8, error -71 [ 1106.525545][T18342] usb 3-1: Using ep0 maxpacket: 32 [ 1106.535845][T18342] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1106.535917][T18342] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1106.555708][T18342] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 1106.564920][T18342] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 1106.573774][T18342] usb 3-1: config 14 has no interface number 0 [ 1106.574173][T18342] usb 3-1: config 14 has no interface number 1 [ 1106.574253][T18342] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1106.574290][T18342] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1106.574324][T18342] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1106.574356][T18342] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1106.574387][T18342] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1106.574418][T18342] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1106.574448][T18342] usb 3-1: config 14 interface 57 has no altsetting 0 [ 1106.574473][T18342] usb 3-1: config 14 interface 228 has no altsetting 0 [ 1106.595519][T10898] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1106.687827][T18342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.687878][T18342] usb 3-1: Product: syz [ 1106.687935][T18342] usb 3-1: Manufacturer: syz [ 1106.687958][T18342] usb 3-1: SerialNumber: syz [ 1106.737800][ T5698] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1106.756708][ T5698] usb 5-1: device descriptor read/8, error -71 [ 1106.757417][T10898] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 1106.761894][T10898] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1106.796797][T10898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.796864][T10898] usb 2-1: Product: syz [ 1106.796882][T10898] usb 2-1: Manufacturer: syz [ 1106.796975][T10898] usb 2-1: SerialNumber: syz [ 1106.845972][T10898] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 1106.866019][ T5698] usb usb5-port1: unable to enumerate USB device [ 1106.962871][T18342] legousbtower 3-1:14.57: interrupt endpoints not found [ 1107.003047][T18342] legousbtower 3-1:14.228: get version request failed: -71 [ 1107.011898][T18342] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71 [ 1107.049088][T18342] usb 3-1: USB disconnect, device number 116 [ 1107.908191][T19869] tipc: Enabled bearer , priority 10 [ 1108.020902][T19877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3868'. [ 1108.257528][T19877] bond5 (unregistering): Released all slaves [ 1108.336460][T10898] gspca_mr97310a: reg read [21] error -110 [ 1108.336579][T10898] mr97310a 2-1:1.0: probe with driver mr97310a failed with error -110 [ 1108.503380][T19868] tipc: Resetting bearer [ 1108.637301][T19868] tipc: Disabling bearer [ 1108.710828][T18330] usb 2-1: USB disconnect, device number 90 [ 1109.120805][T19888] loop3: detected capacity change from 0 to 7 [ 1109.124477][T19888] Dev loop3: unable to read RDB block 7 [ 1109.124595][T19888] loop3: unable to read partition table [ 1109.125747][T19888] loop3: partition table beyond EOD, truncated [ 1109.129997][T19888] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1109.383072][ T30] audit: type=1326 audit(1788831363.245:7232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19893 comm="syz.2.3874" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61839e159 code=0x7ffc0000 [ 1109.384648][ T30] audit: type=1326 audit(1788831363.255:7233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19893 comm="syz.2.3874" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61839e159 code=0x7ffc0000 [ 1109.384756][ T30] audit: type=1326 audit(1788831363.255:7234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19893 comm="syz.2.3874" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61839e159 code=0x7ffc0000 [ 1109.384907][ T30] audit: type=1326 audit(1788831363.255:7235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19893 comm="syz.2.3874" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61839e159 code=0x7ffc0000 [ 1109.385191][ T30] audit: type=1326 audit(1788831363.255:7236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19893 comm="syz.2.3874" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fa61839e159 code=0x7ffc0000 [ 1109.385321][ T30] audit: type=1326 audit(1788831363.255:7237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19893 comm="syz.2.3874" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61839e159 code=0x7ffc0000 [ 1109.385457][ T30] audit: type=1326 audit(1788831363.255:7238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19893 comm="syz.2.3874" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61839e159 code=0x7ffc0000 [ 1109.385573][ T30] audit: type=1326 audit(1788831363.255:7239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19893 comm="syz.2.3874" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61839e159 code=0x7ffc0000 [ 1109.385683][ T30] audit: type=1326 audit(1788831363.255:7240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19893 comm="syz.2.3874" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fa61839e159 code=0x7ffc0000 [ 1109.564183][ T30] audit: type=1326 audit(1788831363.415:7241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19893 comm="syz.2.3874" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61839e159 code=0x7ffc0000 [ 1109.642899][T18330] hid_parser_main: 4006 callbacks suppressed [ 1109.642985][T18330] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1109.665462][T18330] hid-generic 0000:0000:0000.0040: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1109.797326][T19899] bridge0: left allmulticast mode [ 1109.829257][T19902] fido_id[19902]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1109.829879][T19899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3875'. [ 1109.830291][T19899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3875'. [ 1109.830667][T19899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3875'. [ 1109.844408][T19903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3875'. [ 1109.844570][T19903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3875'. [ 1109.844714][T19903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3875'. [ 1109.844858][T19903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3875'. [ 1109.871704][T19899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3875'. [ 1109.872223][T19899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3875'. [ 1109.990639][T19896] xt_CT: No such helper "snmp_trap" [ 1110.742690][T18342] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1110.760225][T18342] hid-generic 0000:0000:0000.0041: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1111.405165][T18342] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1111.545206][T18342] usb 6-1: device descriptor read/64, error -71 [ 1111.785262][T18342] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1111.819689][T14422] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1111.820348][T14422] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1111.847467][T10898] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1111.925138][T18342] usb 6-1: device descriptor read/64, error -71 [ 1112.035548][T18342] usb usb6-port1: attempt power cycle [ 1112.381676][T18342] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1112.395805][T19970] syzkaller1: entered allmulticast mode [ 1112.407235][T18342] usb 6-1: device descriptor read/8, error -71 [ 1112.485279][T14420] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1112.485358][T14420] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1112.586098][T10898] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1112.645198][T18342] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1112.665644][T18342] usb 6-1: device descriptor read/8, error -71 [ 1112.737510][T14412] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1112.775780][T18342] usb usb6-port1: unable to enumerate USB device [ 1112.777390][ T5698] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1112.907418][T10898] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1113.022820][T19986] bond1: option lp_interval: invalid value (18446744071562067969) [ 1113.022896][T19986] bond1: option lp_interval: allowed values 1 - 2147483647 [ 1113.069182][T19986] bond1 (unregistering): Released all slaves [ 1113.079159][T10898] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1113.079274][T10898] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1113.100772][T10898] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.100825][T10898] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1113.129637][T10898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.129696][T10898] usb 2-1: Product: syz [ 1113.129737][T10898] usb 2-1: Manufacturer: syz [ 1113.129760][T10898] usb 2-1: SerialNumber: syz [ 1113.178814][T10898] usb 2-1: 0:1 : does not exist [ 1113.235220][ T5698] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1113.405417][ T5698] usb 3-1: Using ep0 maxpacket: 32 [ 1113.418225][ T5698] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1113.418331][ T5698] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1113.440695][ T5698] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 1113.440750][ T5698] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 1113.440824][ T5698] usb 3-1: config 14 has no interface number 0 [ 1113.440851][ T5698] usb 3-1: config 14 has no interface number 1 [ 1113.440917][ T5698] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1113.440977][ T5698] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1113.441011][ T5698] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1113.441047][ T5698] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1113.441081][ T5698] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1113.441151][ T5698] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1113.441188][ T5698] usb 3-1: config 14 interface 57 has no altsetting 0 [ 1113.441214][ T5698] usb 3-1: config 14 interface 228 has no altsetting 0 [ 1113.541366][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.541403][ T5698] usb 3-1: Product: syz [ 1113.541420][ T5698] usb 3-1: Manufacturer: syz [ 1113.541467][ T5698] usb 3-1: SerialNumber: syz [ 1113.771040][T10898] usb 2-1: unit 0 not found! [ 1113.839938][T10898] usb 2-1: USB disconnect, device number 91 [ 1113.897276][ T7960] udevd[7960]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1114.037053][ T5698] legousbtower 3-1:14.57: interrupt endpoints not found [ 1114.045511][T18330] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1114.073041][ T5698] legousbtower 3-1:14.228: get version request failed: -71 [ 1114.073492][ T5698] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71 [ 1114.101539][ T5698] usb 3-1: USB disconnect, device number 117 [ 1114.207643][T18330] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1114.222012][T18330] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 1114.222053][T18330] usb 5-1: config 1 has no interface number 0 [ 1114.222119][T18330] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 64 [ 1114.222144][T18330] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x2 has invalid maxpacket 1536, setting to 1024 [ 1114.222167][T18330] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1114.222188][T18330] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1114.286836][T18330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.286895][T18330] usb 5-1: Product: syz [ 1114.286963][T18330] usb 5-1: Manufacturer: syz [ 1114.286986][T18330] usb 5-1: SerialNumber: syz [ 1114.330737][T20003] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1114.330952][T20003] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1114.354217][T18330] usb 5-1: Error in usbnet_get_endpoints (-22) [ 1114.485931][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 1114.492517][ T30] audit: type=1326 audit(1788831368.365:7282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20007 comm="syz.1.3907" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a4d9e159 code=0x7ffc0000 [ 1114.517730][ T30] audit: type=1326 audit(1788831368.365:7283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20007 comm="syz.1.3907" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a4d9e159 code=0x7ffc0000 [ 1114.518975][T20005] __nla_validate_parse: 42 callbacks suppressed [ 1114.519049][T20005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3906'. [ 1114.519711][T20005] netlink: 136 bytes leftover after parsing attributes in process `syz.5.3906'. [ 1114.544066][ T30] audit: type=1326 audit(1788831368.375:7284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20007 comm="syz.1.3907" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a4d9e159 code=0x7ffc0000 [ 1114.544121][ T30] audit: type=1326 audit(1788831368.375:7285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20007 comm="syz.1.3907" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a4d9e159 code=0x7ffc0000 [ 1114.544162][ T30] audit: type=1326 audit(1788831368.375:7286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20007 comm="syz.1.3907" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f99a4d9e159 code=0x7ffc0000 [ 1114.544206][ T30] audit: type=1326 audit(1788831368.385:7287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20007 comm="syz.1.3907" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a4d9e159 code=0x7ffc0000 [ 1114.544251][ T30] audit: type=1326 audit(1788831368.385:7288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20007 comm="syz.1.3907" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a4d9e159 code=0x7ffc0000 [ 1114.544295][ T30] audit: type=1326 audit(1788831368.385:7289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20007 comm="syz.1.3907" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a4d9e159 code=0x7ffc0000 [ 1114.544340][ T30] audit: type=1326 audit(1788831368.385:7291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20007 comm="syz.1.3907" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f99a4d9e159 code=0x7ffc0000 [ 1114.544388][ T30] audit: type=1326 audit(1788831368.385:7292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20007 comm="syz.1.3907" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a4d9e159 code=0x7ffc0000 [ 1114.666509][T10905] usb 5-1: USB disconnect, device number 91 [ 1115.173228][T14421] IPVS: starting estimator thread 0... [ 1115.258686][T20017] KVM: debugfs: duplicate directory 20017-8 [ 1115.265390][T20020] IPVS: using max 28 ests per chain, 67200 per kthread [ 1115.365227][T18330] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1115.895347][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1115.900143][T10905] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1115.954619][T20038] FAULT_INJECTION: forcing a failure. [ 1115.954619][T20038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1115.954695][T20038] CPU: 0 UID: 0 PID: 20038 Comm: syz.5.3916 Tainted: G L syzkaller #0 PREEMPT(full) [ 1115.954727][T20038] Tainted: [L]=SOFTLOCKUP [ 1115.954736][T20038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1115.954749][T20038] Call Trace: [ 1115.954770][T20038] [ 1115.954781][T20038] dump_stack_lvl+0xe8/0x150 [ 1115.954916][T20038] should_fail_ex+0x410/0x560 [ 1115.955024][T20038] _copy_to_user+0x31/0xb0 [ 1115.955103][T20038] simple_read_from_buffer+0xe1/0x170 [ 1115.955215][T20038] proc_fail_nth_read+0x1bb/0x230 [ 1115.955306][T20038] ? common_file_perm+0x20e/0x2b0 [ 1115.955382][T20038] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1115.955482][T20038] ? rw_verify_area+0x24a/0x4c0 [ 1115.955599][T20038] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1115.955685][T20038] vfs_read+0x213/0xa80 [ 1115.955784][T20038] ? __pfx___mutex_lock+0x10/0x10 [ 1115.955859][T20038] ? __pfx_vfs_read+0x10/0x10 [ 1115.955948][T20038] ? __fget_files+0x2a/0x420 [ 1115.956031][T20038] ? __fget_files+0x3a2/0x420 [ 1115.956110][T20038] ? __fget_files+0x2a/0x420 [ 1115.956210][T20038] ksys_read+0x150/0x270 [ 1115.956307][T20038] ? __pfx_ksys_read+0x10/0x10 [ 1115.956394][T20038] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1115.956545][T20038] do_syscall_64+0x166/0x520 [ 1115.956594][T20038] ? trace_irq_disable+0x3b/0x140 [ 1115.956659][T20038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.956725][T20038] ? clear_bhb_loop+0x70/0xc0 [ 1115.956809][T20038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.956864][T20038] RIP: 0033:0x7f13e335e98e [ 1115.956920][T20038] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1115.956976][T20038] RSP: 002b:00007f13e42cafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1115.957034][T20038] RAX: ffffffffffffffda RBX: 00007f13e42cb6c0 RCX: 00007f13e335e98e [ 1115.957116][T20038] RDX: 000000000000000f RSI: 00007f13e42cb0a0 RDI: 0000000000000006 [ 1115.957150][T20038] RBP: 00007f13e42cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1115.957186][T20038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1115.957220][T20038] R13: 00007f13e3626038 R14: 00007f13e3625fa0 R15: 00007f13e374fa48 [ 1115.957316][T20038] [ 1116.074885][T10905] usb 3-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 1116.087758][T10905] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1116.087855][T10905] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1116.120511][T10905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.120609][T10905] usb 3-1: Product: syz [ 1116.120654][T10905] usb 3-1: Manufacturer: syz [ 1116.120704][T10905] usb 3-1: SerialNumber: syz [ 1116.278514][T10905] ums-onetouch 3-1:1.0: USB Mass Storage device detected [ 1116.317819][T10905] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/input/input69 [ 1116.318065][T10905] input input69: usb_submit_urb failed [ 1116.382688][T10905] input: failed to attach handler kbd to device input69, error: -5 [ 1116.402116][ T4971] input input69: usb_submit_urb failed [ 1116.412202][T10905] scsi host1: usb-storage 3-1:1.0 [ 1116.426692][ T4971] input input69: usb_submit_urb failed [ 1116.448134][T20026] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3912'. [ 1116.529178][T10905] usb 3-1: USB disconnect, device number 118 [ 1116.606883][T18335] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1116.709693][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.709786][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.769601][T18335] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1116.769675][T18335] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1116.791228][T18335] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.791277][T18335] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1116.814107][T18335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.814157][T18335] usb 6-1: Product: syz [ 1116.814207][T18335] usb 6-1: Manufacturer: syz [ 1116.814283][T18335] usb 6-1: SerialNumber: syz [ 1116.851664][T18335] usb 6-1: 0:1 : does not exist [ 1116.985244][T18330] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1117.045392][T10905] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1117.140648][T18330] usb 2-1: Using ep0 maxpacket: 32 [ 1117.149638][T18330] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1117.149760][T18330] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1117.170947][T18330] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 1117.171004][T18330] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 1117.171087][T18330] usb 2-1: config 14 has no interface number 0 [ 1117.171117][T18330] usb 2-1: config 14 has no interface number 1 [ 1117.171222][T18330] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1117.171260][T18330] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1117.171297][T18330] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1117.171420][T18330] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1117.171598][T18330] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1117.171762][T18330] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1117.171898][T18330] usb 2-1: config 14 interface 57 has no altsetting 0 [ 1117.172026][T18330] usb 2-1: config 14 interface 228 has no altsetting 0 [ 1117.254558][T18330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.254724][T18330] usb 2-1: Product: syz [ 1117.254769][T18330] usb 2-1: Manufacturer: syz [ 1117.254873][T18330] usb 2-1: SerialNumber: syz [ 1117.318573][T10905] usb 3-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 1117.334724][T10905] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1117.334780][T10905] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1117.366766][T10905] usb 3-1: string descriptor 0 read error: -22 [ 1117.373271][T10905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.399056][T10905] ums-onetouch 3-1:1.0: USB Mass Storage device detected [ 1117.422560][T10905] input: Maxtor Onetouch 0d49:7000 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input70 [ 1117.439166][T10905] input input70: usb_submit_urb failed [ 1117.466266][T10905] input: failed to attach handler kbd to device input70, error: -5 [ 1117.476001][ T4971] input input70: usb_submit_urb failed [ 1117.476609][ T4971] input input70: usb_submit_urb failed [ 1117.493406][T10905] scsi host1: usb-storage 3-1:1.0 [ 1117.602843][ T7960] input input70: usb_submit_urb failed [ 1117.641833][ T4971] input input70: usb_submit_urb failed [ 1117.654685][T10905] usb 3-1: USB disconnect, device number 119 [ 1117.670409][ T4971] input input70: usb_submit_urb failed [ 1117.692440][T18335] usb 6-1: unit 0 not found! [ 1117.830966][T18330] legousbtower 2-1:14.57: interrupt endpoints not found [ 1117.891103][T18330] legousbtower 2-1:14.228: get version request failed: -71 [ 1117.891583][T18330] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71 [ 1117.938892][T18330] usb 2-1: USB disconnect, device number 93 [ 1117.968643][T18335] usb 6-1: USB disconnect, device number 26 [ 1118.038115][ T7957] udevd[7957]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1118.594170][T20070] KVM: debugfs: duplicate directory 20070-7 [ 1118.835204][T18334] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1118.846031][T20081] x_tables: duplicate underflow at hook 1 [ 1118.987768][T18334] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1118.994131][T18334] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1118.994251][T18334] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1118.994320][T18334] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1118.994439][T18334] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.014018][T18334] usb 6-1: config 0 descriptor?? [ 1119.325743][T20095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3934'. [ 1119.350004][T20095] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3934'. [ 1119.531980][T18334] plantronics 0003:047F:FFFF.0042: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1119.789459][T20072] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3925'. [ 1119.790030][T20072] bridge0: entered allmulticast mode [ 1119.918688][T10906] usb 6-1: USB disconnect, device number 27 [ 1120.064952][T20116] KVM: debugfs: duplicate directory 20116-7 [ 1120.125604][T18334] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1120.275199][T18334] usb 2-1: Using ep0 maxpacket: 32 [ 1120.277410][T18334] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1120.292282][T18334] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1120.292347][T18334] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1120.304631][T18334] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1120.304715][T18334] usb 2-1: Product: syz [ 1120.304758][T18334] usb 2-1: Manufacturer: syz [ 1120.338451][T18334] hub 2-1:4.0: USB hub found [ 1120.456360][T18335] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1120.469626][T20120] netlink: 'syz.2.3940': attribute type 4 has an invalid length. [ 1120.557609][T18334] hub 2-1:4.0: 2 ports detected [ 1120.628652][T18335] usb 5-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 1120.633218][T18335] usb 5-1: config 2 has an invalid descriptor of length 99, skipping remainder of the config [ 1120.633358][T18335] usb 5-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1120.668549][T18335] usb 5-1: New USB device strings: Mfr=253, Product=1, SerialNumber=3 [ 1120.668607][T18335] usb 5-1: Product: syz [ 1120.668644][T18335] usb 5-1: Manufacturer: syz [ 1120.668806][T18335] usb 5-1: SerialNumber: syz [ 1120.711805][T20126] kvm: pic: non byte write [ 1120.771289][T18334] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 1120.818031][T18334] usb 2-1: USB disconnect, device number 94 [ 1120.963315][T18335] usb 5-1: USB disconnect, device number 92 [ 1121.174153][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1121.175934][ T30] audit: type=1400 audit(1788831375.045:7303): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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debugfs: duplicate directory 20141-7 [ 1121.598379][ T30] audit: type=1400 audit(1788831375.465:7304): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=20144 comm="syz.2.3951" [ 1121.679716][T20151] loop4: detected capacity change from 0 to 7 [ 1121.688599][T20151] loop4: [ 1121.692461][T20151] loop4: partition table partially beyond EOD, truncated [ 1121.783750][T20149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3952'. [ 1121.784003][T20149] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3952'. [ 1121.866725][T10906] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1122.030615][T10906] usb 3-1: Using ep0 maxpacket: 8 [ 1122.037127][T10906] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1122.058092][T10906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.067903][T10906] usb 3-1: Product: syz [ 1122.072330][T10906] usb 3-1: Manufacturer: syz [ 1122.077189][T10906] usb 3-1: SerialNumber: syz [ 1122.092690][T10906] usb 3-1: config 0 descriptor?? [ 1122.110573][T10906] gspca_main: se401-2.14.0 probing 047d:5003 [ 1122.585771][T20145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1122.586525][T20145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1122.624500][T10906] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input71 [ 1122.670097][T10906] usb 3-1: USB disconnect, device number 120 [ 1122.855923][ T30] audit: type=1400 audit(1788831376.725:7305): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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netlink: 28 bytes leftover after parsing attributes in process `syz.0.3959'. [ 1123.671899][T20188] syzkaller0: entered promiscuous mode [ 1123.671950][T20188] syzkaller0: entered allmulticast mode [ 1123.718666][T20189] KVM: debugfs: duplicate directory 20189-8 [ 1123.735214][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1123.865232][T10906] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1124.016960][T10906] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1124.032665][T10906] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1124.032723][T10906] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.032784][T10906] usb 6-1: config 220 has no interface number 2 [ 1124.032879][T10906] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1124.032916][T10906] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1124.032943][T10906] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1124.032970][T10906] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1124.106263][T10906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.106317][T10906] usb 6-1: Product: syz [ 1124.106360][T10906] usb 6-1: Manufacturer: syz [ 1124.106385][T10906] usb 6-1: SerialNumber: syz [ 1124.132207][T20196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3967'. [ 1124.132829][T20196] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3967'. [ 1124.669955][T10906] usb 6-1: selecting invalid altsetting 0 [ 1124.689255][T10906] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1124.697074][T10906] uvcvideo 6-1:220.0: No valid video chain found. [ 1124.711945][T10906] usb 6-1: selecting invalid altsetting 0 [ 1124.717986][T10906] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 1124.730899][T10906] usb 6-1: USB disconnect, device number 28 [ 1126.025161][ T5698] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1126.186648][ T5698] usb 2-1: Using ep0 maxpacket: 32 [ 1126.193750][ T5698] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1126.208327][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.208400][ T5698] usb 2-1: Product: syz [ 1126.208447][ T5698] usb 2-1: Manufacturer: syz [ 1126.208468][ T5698] usb 2-1: SerialNumber: syz [ 1126.242536][ T5698] usb 2-1: config 0 descriptor?? [ 1126.270261][ T5698] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1126.554162][T20233] netlink: 732 bytes leftover after parsing attributes in process `syz.0.3976'. [ 1126.563877][T20233] netlink: 732 bytes leftover after parsing attributes in process `syz.0.3976'. [ 1126.800213][T20239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1126.816265][T20239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1126.993228][ T5698] gspca_ov534_9: reg_w failed -71 [ 1127.385207][ T5698] gspca_ov534_9: Unknown sensor 0000 [ 1127.385363][ T5698] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 1127.426150][ T5698] usb 2-1: USB disconnect, device number 95 [ 1127.870545][T20252] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1127.938792][T18334] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1128.060381][T18334] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1128.570614][T20265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3985'. [ 1128.571137][T20265] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3985'. [ 1128.605580][T10906] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1128.756526][T10906] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1128.761246][T10906] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1128.761336][T10906] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1128.761413][T10906] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1128.796179][T10906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.796212][T10906] usb 3-1: Product: syz [ 1128.796230][T10906] usb 3-1: Manufacturer: syz [ 1128.796248][T10906] usb 3-1: SerialNumber: syz [ 1128.835175][T10906] usb 3-1: config 0 descriptor?? [ 1128.842596][T20260] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1128.842930][T20260] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1128.862710][T10906] usb 3-1: ucan: probing device on interface #0 [ 1128.909591][ T30] audit: type=1326 audit(1788831382.785:7306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20275 comm="syz.5.3988" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e339e159 code=0x7ffc0000 [ 1128.910433][ T30] audit: type=1326 audit(1788831382.785:7307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20275 comm="syz.5.3988" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e339e159 code=0x7ffc0000 [ 1128.911664][ T30] audit: type=1326 audit(1788831382.785:7308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20275 comm="syz.5.3988" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f13e339e159 code=0x7ffc0000 [ 1128.913445][ T30] audit: type=1326 audit(1788831382.785:7309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20275 comm="syz.5.3988" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e339e159 code=0x7ffc0000 [ 1128.913572][ T30] audit: type=1326 audit(1788831382.785:7310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20275 comm="syz.5.3988" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e339e159 code=0x7ffc0000 [ 1128.914783][ T30] audit: type=1326 audit(1788831382.785:7311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20275 comm="syz.5.3988" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f13e339e159 code=0x7ffc0000 [ 1128.918968][ T30] audit: type=1326 audit(1788831382.785:7312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20275 comm="syz.5.3988" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e339e159 code=0x7ffc0000 [ 1128.920206][ T30] audit: type=1326 audit(1788831382.785:7313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20275 comm="syz.5.3988" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e339e159 code=0x7ffc0000 [ 1128.922009][ T30] audit: type=1326 audit(1788831382.785:7314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20275 comm="syz.5.3988" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f13e339e159 code=0x7ffc0000 [ 1128.923262][ T30] audit: type=1326 audit(1788831382.785:7315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20275 comm="syz.5.3988" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e339e159 code=0x7ffc0000 [ 1129.097833][T18334] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1129.115198][T10906] usb 3-1: ucan: could not read protocol version, ret=-71 [ 1129.115231][T10906] usb 3-1: ucan: probe failed; try to update the device firmware [ 1129.198749][T10906] usb 3-1: USB disconnect, device number 121 [ 1129.245390][T18334] usb 2-1: Using ep0 maxpacket: 32 [ 1129.248744][T18334] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1129.260260][T18334] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1129.260291][T18334] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1129.260368][T18334] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1129.282410][T18334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.282453][T18334] usb 2-1: Product: syz [ 1129.282470][T18334] usb 2-1: Manufacturer: syz [ 1129.282487][T18334] usb 2-1: SerialNumber: syz [ 1129.469786][T20281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3989'. [ 1129.476899][T20282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3989'. [ 1129.613459][T18334] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1129.636459][T18334] usb 2-1: USB disconnect, device number 96 [ 1129.674332][T10009] udevd[10009]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1131.224614][T20306] fuse: Bad value for 'fd' [ 1131.247744][T20306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3996'. [ 1131.247883][T20306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3996'. [ 1131.275123][T10906] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1131.293171][T20306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3996'. [ 1131.303037][T20306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3996'. [ 1131.325156][T14421] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1131.325238][T14421] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1131.325297][T14421] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1131.325341][T14421] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1131.445197][T10906] usb 6-1: Using ep0 maxpacket: 32 [ 1131.451274][T10906] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1131.464572][T10906] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1131.479037][T10906] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1131.479106][T10906] usb 6-1: Product: syz [ 1131.479127][T10906] usb 6-1: Manufacturer: syz [ 1131.479149][T10906] usb 6-1: SerialNumber: syz [ 1131.509638][T10906] usb 6-1: config 0 descriptor?? [ 1131.518816][T20304] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1131.530215][T10906] hub 6-1:0.0: bad descriptor, ignoring hub [ 1131.539440][T10906] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1131.565148][T18330] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1131.715141][T18330] usb 2-1: Using ep0 maxpacket: 8 [ 1131.719176][T18330] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1131.723339][T18330] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1131.723453][T18330] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1131.723587][T18330] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1131.723700][T18330] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1131.723798][T18330] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1131.723875][T18330] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1131.723952][T18330] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1131.724021][T18330] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1131.731296][T18330] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1131.731339][T18330] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1131.731381][T18330] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1131.731414][T18330] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1131.731452][T18330] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1131.731483][T18330] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1131.731513][T18330] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1131.731545][T18330] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1131.734163][T18330] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1131.734203][T18330] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1131.734245][T18330] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1131.734277][T18330] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1131.734307][T18330] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1131.734337][T18330] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1131.734367][T18330] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1131.734397][T18330] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1131.809221][T18330] usb 2-1: string descriptor 0 read error: -22 [ 1131.809620][T18330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.053359][T20304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1132.083999][T20304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1132.099144][T18330] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 1133.005140][T18334] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1133.155632][T18334] usb 5-1: Using ep0 maxpacket: 32 [ 1133.843237][T20335] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4002'. [ 1134.156533][T18334] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1134.156589][T18334] usb 5-1: New USB device found, idVendor=7ff0, idProduct=ffff, bcdDevice= 0.ff [ 1134.174470][T18334] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1134.174538][T18334] usb 5-1: can't read configurations, error -71 [ 1136.083425][T10906] usb 6-1: USB disconnect, device number 29 [ 1136.104675][T18330] usb 2-1: USB disconnect, device number 97 [ 1136.547472][T20366] picdev_read: 1014 callbacks suppressed [ 1136.555240][T20366] kvm: pic: non byte read [ 1136.560016][T20366] kvm: pic: non byte read [ 1136.567544][T20366] kvm: pic: non byte read [ 1136.567619][T20366] kvm: pic: non byte read [ 1136.576817][T20366] kvm: pic: non byte read [ 1136.576834][T20366] kvm: pic: non byte read [ 1136.576844][T20366] kvm: pic: non byte read [ 1136.576854][T20366] kvm: pic: non byte read [ 1136.576864][T20366] kvm: pic: non byte read [ 1136.576874][T20366] kvm: pic: non byte read [ 1137.011879][T20358] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1137.145159][T10906] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1137.165620][T18335] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 1137.296161][T10906] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1137.311279][T10906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.311328][T10906] usb 2-1: Product: syz [ 1137.311367][T10906] usb 2-1: Manufacturer: syz [ 1137.311388][T10906] usb 2-1: SerialNumber: syz [ 1137.402434][T18335] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 1137.434008][T18335] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1137.434085][T18335] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1137.434125][T18335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.491189][T18335] usb 5-1: config 0 descriptor?? [ 1137.880040][T10906] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1137.915531][T10906] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1137.930481][T18335] dragonrise 0003:0079:0006.0044: unknown main item tag 0x0 [ 1137.930523][T18335] dragonrise 0003:0079:0006.0044: unknown main item tag 0x0 [ 1137.930555][T18335] dragonrise 0003:0079:0006.0044: unknown main item tag 0x0 [ 1137.930585][T18335] dragonrise 0003:0079:0006.0044: unknown main item tag 0x0 [ 1137.930615][T18335] dragonrise 0003:0079:0006.0044: unknown main item tag 0x0 [ 1137.930644][T18335] dragonrise 0003:0079:0006.0044: unknown main item tag 0x0 [ 1137.930671][T18335] dragonrise 0003:0079:0006.0044: unknown main item tag 0x0 [ 1137.930700][T18335] dragonrise 0003:0079:0006.0044: unknown main item tag 0x0 [ 1137.930768][T18335] dragonrise 0003:0079:0006.0044: unknown main item tag 0x0 [ 1137.930931][T18335] dragonrise 0003:0079:0006.0044: unknown main item tag 0x0 [ 1138.022023][T18335] dragonrise 0003:0079:0006.0044: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.4-1/input0 [ 1138.147817][T20371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1138.157837][T20371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1138.206192][T18335] usb 5-1: USB disconnect, device number 95 [ 1138.350261][T20383] fido_id[20383]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1139.108257][T20404] loop3: detected capacity change from 0 to 7 [ 1139.114267][T20404] Dev loop3: unable to read RDB block 7 [ 1139.114428][T20404] loop3: unable to read partition table [ 1139.114822][T20404] loop3: partition table beyond EOD, truncated [ 1139.114862][T20404] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1139.735950][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1139.831528][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 1139.838974][ T30] audit: type=1326 audit(1788831393.705:7346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20417 comm="syz.2.4029" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61839e159 code=0x7ffc0000 [ 1139.865802][ T30] audit: type=1326 audit(1788831393.705:7347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20417 comm="syz.2.4029" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61839e159 code=0x7ffc0000 [ 1139.893369][ T30] audit: type=1326 audit(1788831393.765:7348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20417 comm="syz.2.4029" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61839e159 code=0x7ffc0000 [ 1139.918576][ T30] audit: type=1326 audit(1788831393.765:7349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20417 comm="syz.2.4029" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61839e159 code=0x7ffc0000 [ 1139.956640][ T30] audit: type=1326 audit(1788831393.795:7350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20417 comm="syz.2.4029" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fa61839e159 code=0x7ffc0000 [ 1139.956750][ T30] audit: type=1326 audit(1788831393.795:7351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20417 comm="syz.2.4029" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61839e159 code=0x7ffc0000 [ 1139.965616][ T30] audit: type=1326 audit(1788831393.835:7353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20417 comm="syz.2.4029" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61839e159 code=0x7ffc0000 [ 1139.971033][ T30] audit: type=1326 audit(1788831393.795:7352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20417 comm="syz.2.4029" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61839e159 code=0x7ffc0000 [ 1139.971197][ T30] audit: type=1326 audit(1788831393.835:7354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20417 comm="syz.2.4029" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa61839e159 code=0x7ffc0000 [ 1139.981891][ T30] audit: type=1326 audit(1788831393.855:7355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20417 comm="syz.2.4029" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61839e159 code=0x7ffc0000 [ 1140.275433][T10906] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -EPROTO [ 1140.275515][T10906] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1140.319270][T10906] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1140.332415][T10906] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1140.354468][T10906] usb 2-1: USB disconnect, device number 98 [ 1140.379560][ T7957] udevd[7957]: setting owner of /dev/bus/usb/002/098 to uid=0, gid=0 failed: No such file or directory [ 1140.405506][T18335] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 1140.556250][T18335] usb 5-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.00 [ 1140.559877][T18335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1140.559985][T18335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1140.560068][T18335] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1140.560198][T18335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.578058][T18335] usb 5-1: config 0 descriptor?? [ 1140.675197][T18334] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1140.790680][T20420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1140.799049][T20420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1140.840008][T18334] usb 3-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 1140.870975][T18334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.872008][T18334] usb 3-1: Product: syz [ 1140.872033][T18334] usb 3-1: Manufacturer: syz [ 1140.872491][T18334] usb 3-1: SerialNumber: syz [ 1141.058247][T18335] wacom 0003:056A:0064.0045: Unknown device_type for 'HID 056a:0064'. Assuming pen. [ 1141.093149][T18335] wacom 0003:056A:0064.0045: hidraw0: USB HID v0.00 Joystick [HID 056a:0064] on usb-dummy_hcd.4-1/input0 [ 1141.144838][T18335] input: Wacom PenPartner2 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0064.0045/input/input74 [ 1141.207969][T20444] loop3: detected capacity change from 0 to 7 [ 1141.217599][T18334] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 1141.240085][T20444] Dev loop3: unable to read RDB block 7 [ 1141.247007][T20444] loop3: unable to read partition table [ 1141.249442][T20444] loop3: partition table beyond EOD, truncated [ 1141.249485][T20444] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1141.312202][T18334] usb 3-1: USB disconnect, device number 122 [ 1141.530814][T18335] usb 5-1: USB disconnect, device number 96 [ 1141.795372][T18334] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1141.949427][T18334] usb 3-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 1142.028192][T18334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.028247][T18334] usb 3-1: Product: syz [ 1142.028284][T18334] usb 3-1: Manufacturer: syz [ 1142.028316][T18334] usb 3-1: SerialNumber: syz [ 1142.528293][T18334] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 1142.613757][T20469] KVM: debugfs: duplicate directory 20469-8 [ 1142.753350][T18334] usb 3-1: USB disconnect, device number 123 [ 1143.122096][T20476] ALSA: mixer_oss: invalid OSS volume '' [ 1143.232251][T20479] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1143.520796][ T5698] usb 2-1: new low-speed USB device number 99 using dummy_hcd [ 1143.689975][T20484] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4049'. [ 1143.690145][T20484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4049'. [ 1143.690232][T20484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4049'. [ 1143.690433][T20484] netlink: 'syz.4.4049': attribute type 3 has an invalid length. [ 1143.726604][ T5698] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1143.726665][ T5698] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=73.88 [ 1143.772160][ T5698] usb 2-1: config 8 has an invalid interface number: 59 but max is 3 [ 1143.780606][ T5698] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.780639][ T5698] usb 2-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 1143.780663][ T5698] usb 2-1: config 8 has no interface number 0 [ 1143.780711][ T5698] usb 2-1: config 8 interface 59 altsetting 2 has an endpoint descriptor with address 0x1A, changing to 0xA [ 1143.780741][ T5698] usb 2-1: config 8 interface 59 altsetting 2 endpoint 0xA has invalid maxpacket 64, setting to 0 [ 1143.780780][ T5698] usb 2-1: config 8 interface 59 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 8 [ 1143.780810][ T5698] usb 2-1: config 8 interface 59 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1143.780833][ T5698] usb 2-1: config 8 interface 59 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 1143.780864][ T5698] usb 2-1: config 8 interface 59 has no altsetting 0 [ 1143.898556][ T5698] usb 2-1: string descriptor 0 read error: -22 [ 1143.898770][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.906367][T20484] ip6tnl1: entered allmulticast mode [ 1143.963980][ T5698] ttusbir 2-1:8.59: cannot find expected altsetting [ 1144.146360][T14423] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1144.146654][T14423] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1144.176388][T18334] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1144.529066][ T5698] usb 2-1: USB disconnect, device number 99 [ 1144.755665][T18334] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1145.015599][T18334] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1145.175944][T20507] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1145.282419][T20507] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1145.775400][T10898] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 1145.915499][T10898] usb 6-1: device descriptor read/64, error -71 [ 1146.122453][ T5698] asus 0018:0B05:0101.0046: unbalanced collection at end of report description [ 1146.132786][ T5698] asus 0018:0B05:0101.0046: Asus hid parse failed: -22 [ 1146.141785][ T5698] asus 0018:0B05:0101.0046: probe with driver asus failed with error -22 [ 1146.157012][T10898] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 1146.295282][T10898] usb 6-1: device descriptor read/64, error -71 [ 1146.318558][T20526] kernel profiling enabled (shift: 7) [ 1146.405718][T10898] usb usb6-port1: attempt power cycle [ 1146.440588][T20526] syz.2.4062: vmalloc error: size 16384, failed to allocate pages, mode:0x400cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1146.459538][T20526] CPU: 0 UID: 0 PID: 20526 Comm: syz.2.4062 Tainted: G L syzkaller #0 PREEMPT(full) [ 1146.459583][T20526] Tainted: [L]=SOFTLOCKUP [ 1146.459595][T20526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1146.459611][T20526] Call Trace: [ 1146.459623][T20526] [ 1146.459635][T20526] dump_stack_lvl+0xe8/0x150 [ 1146.459685][T20526] warn_alloc+0x24d/0x270 [ 1146.459719][T20526] ? __pfx_warn_alloc+0x10/0x10 [ 1146.459744][T20526] ? percpu_ref_get_many+0x19/0x140 [ 1146.459783][T20526] ? alloc_pages_mpol+0x256/0x390 [ 1146.459822][T20526] __vmalloc_node_range_noprof+0x11a9/0x1540 [ 1146.459885][T20526] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1146.459918][T20526] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 1146.459998][T20526] ? rcu_is_watching+0x16/0xb0 [ 1146.460032][T20526] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 1146.460068][T20526] ? rcu_is_watching+0x16/0xb0 [ 1146.460098][T20526] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 1146.460133][T20526] __kvmalloc_node_noprof+0x5a1/0x820 [ 1146.460161][T20526] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 1146.460197][T20526] ? __kmalloc_cache_noprof+0x321/0x600 [ 1146.460222][T20526] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 1146.460266][T20526] io_ring_ctx_alloc+0x1ad/0xb80 [ 1146.460302][T20526] ? io_prepare_config+0x8c8/0xc70 [ 1146.460406][T20526] io_uring_create+0x50/0x990 [ 1146.460449][T20526] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1146.460475][T20526] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1146.460506][T20526] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1146.460547][T20526] ? rcu_is_watching+0x16/0xb0 [ 1146.460590][T20526] do_syscall_64+0x166/0x520 [ 1146.460613][T20526] ? trace_irq_disable+0x3b/0x140 [ 1146.460639][T20526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.460665][T20526] ? clear_bhb_loop+0x70/0xc0 [ 1146.460695][T20526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.460719][T20526] RIP: 0033:0x7fa61839e159 [ 1146.460744][T20526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1146.460766][T20526] RSP: 002b:00007fa6192cdfb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1146.460793][T20526] RAX: ffffffffffffffda RBX: 0000200000000540 RCX: 00007fa61839e159 [ 1146.460813][T20526] RDX: 0000200000000280 RSI: 0000200000000540 RDI: 0000000000000f04 [ 1146.460831][T20526] RBP: 00007fa618435024 R08: 0000000000000000 R09: 0000000000000000 [ 1146.460847][T20526] R10: 0000200000000140 R11: 0000000000000206 R12: 0000200000000280 [ 1146.460864][T20526] R13: 0000200000000140 R14: 00002000000000c0 R15: 00007fa61874fa48 [ 1146.460901][T20526] [ 1146.478132][T20526] Mem-Info: [ 1146.478151][T20526] active_anon:9535 inactive_anon:2922 isolated_anon:0 [ 1146.478151][T20526] active_file:59 inactive_file:24616 isolated_file:0 [ 1146.478151][T20526] unevictable:0 dirty:278 writeback:0 [ 1146.478151][T20526] slab_reclaimable:7079 slab_unreclaimable:107132 [ 1146.478151][T20526] mapped:31495 shmem:4962 pagetables:1588 [ 1146.478151][T20526] sec_pagetables:0 bounce:0 [ 1146.478151][T20526] kernel_misc_reclaimable:0 [ 1146.478151][T20526] free:1310968 free_pcp:8000 free_cma:0 [ 1146.478216][T20526] Node 0 active_anon:38140kB inactive_anon:11688kB active_file:236kB inactive_file:98336kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125980kB dirty:1112kB writeback:0kB shmem:19848kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14388kB pagetables:6220kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1146.478283][T20526] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:128kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1146.478344][T20526] Node 0 DMA free:15352kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1146.478438][T20526] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 1146.478482][T20526] Node 0 DMA32 free:1287896kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:38140kB inactive_anon:11688kB active_file:236kB inactive_file:98336kB unevictable:0kB writepending:1112kB zspages:0kB present:3129332kB managed:2546668kB mlocked:0kB bounce:0kB free_pcp:32000kB local_pcp:15112kB free_cma:0kB [ 1146.478553][T20526] lowmem_reserve[]: 0 0 0 0 0 [ 1146.478593][T20526] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1146.478657][T20526] lowmem_reserve[]: 0 0 0 0 0 [ 1146.478720][T20526] Node 1 Normal free:3940624kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:128kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1146.478790][T20526] lowmem_reserve[]: 0 0 0 0 0 [ 1146.478831][T20526] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15352kB [ 1146.479001][T20526] Node 0 DMA32: 1386*4kB (UME) 1728*8kB (UME) 1575*16kB (UME) 1242*32kB (UME) 865*64kB (UME) 416*128kB (UME) 117*256kB (UME) 70*512kB (UME) 41*1024kB (UME) 14*2048kB (UM) 234*4096kB (UM) = 1287832kB [ 1146.479208][T20526] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1146.479324][T20526] Node 1 Normal: 10*4kB (UM) 9*8kB (UM) 12*16kB (UM) 15*32kB (UM) 14*64kB (UM) 13*128kB (UM) 8*256kB (UM) 10*512kB (UM) 6*1024kB (UM) 4*2048kB (UM) 956*4096kB (UM) = 3940624kB [ 1146.543079][T20526] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1146.543135][T20526] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1146.543188][T20526] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1146.543242][T20526] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1146.543288][T20526] 29634 total pagecache pages [ 1146.543319][T20526] 1 pages in swap cache [ 1146.543341][T20526] Free swap = 124992kB [ 1146.543365][T20526] Total swap = 124996kB [ 1146.543397][T20526] 2097051 pages RAM [ 1146.543419][T20526] 0 pages HighMem/MovableOnly [ 1146.543441][T20526] 428768 pages reserved [ 1146.543470][T20526] 0 pages cma reserved [ 1146.898893][T10898] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 1146.976371][T10898] usb 6-1: device descriptor read/8, error -71 [ 1147.245200][T10898] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 1147.266978][T10898] usb 6-1: device descriptor read/8, error -71 [ 1147.376441][T10898] usb usb6-port1: unable to enumerate USB device [ 1147.730493][T20548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4071'. [ 1147.895317][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1147.916184][T20553] FAULT_INJECTION: forcing a failure. [ 1147.916184][T20553] name failslab, interval 1, probability 0, space 100, times 0 [ 1147.930260][T20553] CPU: 0 UID: 0 PID: 20553 Comm: syz.2.4072 Tainted: G L syzkaller #0 PREEMPT(full) [ 1147.930297][T20553] Tainted: [L]=SOFTLOCKUP [ 1147.930307][T20553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1147.930322][T20553] Call Trace: [ 1147.930333][T20553] [ 1147.930344][T20553] dump_stack_lvl+0xe8/0x150 [ 1147.930389][T20553] should_fail_ex+0x410/0x560 [ 1147.930434][T20553] should_failslab+0xa8/0x100 [ 1147.930467][T20553] __kmalloc_noprof+0xfe/0x720 [ 1147.930490][T20553] ? rcu_is_watching+0x16/0xb0 [ 1147.930519][T20553] ? tomoyo_realpath_from_path+0xef/0x640 [ 1147.930551][T20553] ? tomoyo_realpath_from_path+0xef/0x640 [ 1147.930588][T20553] tomoyo_realpath_from_path+0xef/0x640 [ 1147.930627][T20553] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1147.930666][T20553] tomoyo_path_number_perm+0x246/0x5f0 [ 1147.930706][T20553] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1147.930742][T20553] ? __lock_acquire+0x747/0x2de0 [ 1147.930784][T20553] ? hook_file_ioctl+0x1f2/0x600 [ 1147.930831][T20553] ? __fget_files+0x2a/0x420 [ 1147.930866][T20553] ? __fget_files+0x2a/0x420 [ 1147.930896][T20553] ? __fget_files+0x3a2/0x420 [ 1147.930926][T20553] ? __fget_files+0x2a/0x420 [ 1147.930962][T20553] security_file_ioctl+0xc3/0x2a0 [ 1147.931001][T20553] __se_sys_ioctl+0x47/0x170 [ 1147.931030][T20553] do_syscall_64+0x166/0x520 [ 1147.931054][T20553] ? trace_irq_disable+0x3b/0x140 [ 1147.931079][T20553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.931103][T20553] ? clear_bhb_loop+0x70/0xc0 [ 1147.931133][T20553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.931156][T20553] RIP: 0033:0x7fa61839e159 [ 1147.931178][T20553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1147.931198][T20553] RSP: 002b:00007fa6192ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1147.931250][T20553] RAX: ffffffffffffffda RBX: 00007fa618625fa0 RCX: 00007fa61839e159 [ 1147.931272][T20553] RDX: 0000200000000480 RSI: 000000004138ae84 RDI: 0000000000000005 [ 1147.931288][T20553] RBP: 00007fa6192ce090 R08: 0000000000000000 R09: 0000000000000000 [ 1147.931304][T20553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1147.931319][T20553] R13: 00007fa618626038 R14: 00007fa618625fa0 R15: 00007fa61874fa48 [ 1147.931355][T20553] [ 1147.985579][T20553] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1148.783284][T20572] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4078'. [ 1148.935279][T18335] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1149.066371][T18335] usb 3-1: device descriptor read/64, error -71 [ 1149.305473][T18335] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1149.460567][T18335] usb 3-1: device descriptor read/64, error -71 [ 1149.616437][T18335] usb usb3-port1: attempt power cycle [ 1149.661922][ T30] kauditd_printk_skb: 146 callbacks suppressed [ 1149.669086][ T30] audit: type=1800 audit(1788831403.535:7502): pid=20583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4082" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1149.695281][ T30] audit: type=1800 audit(1788831403.565:7503): pid=20583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4082" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1149.965231][T18335] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1149.985741][T18335] usb 3-1: device descriptor read/8, error -71 [ 1150.083735][T20604] FAULT_INJECTION: forcing a failure. [ 1150.083735][T20604] name failslab, interval 1, probability 0, space 100, times 0 [ 1150.097743][T20604] CPU: 0 UID: 0 PID: 20604 Comm: syz.5.4086 Tainted: G L syzkaller #0 PREEMPT(full) [ 1150.097780][T20604] Tainted: [L]=SOFTLOCKUP [ 1150.097790][T20604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1150.097805][T20604] Call Trace: [ 1150.097814][T20604] [ 1150.097825][T20604] dump_stack_lvl+0xe8/0x150 [ 1150.097865][T20604] should_fail_ex+0x410/0x560 [ 1150.097909][T20604] should_failslab+0xa8/0x100 [ 1150.097940][T20604] __kmalloc_noprof+0xfe/0x720 [ 1150.097964][T20604] ? tomoyo_encode+0x2ad/0x570 [ 1150.097991][T20604] ? tomoyo_encode+0x2ad/0x570 [ 1150.098036][T20604] tomoyo_encode+0x2ad/0x570 [ 1150.098070][T20604] tomoyo_realpath_from_path+0x5fa/0x640 [ 1150.098110][T20604] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1150.098147][T20604] tomoyo_path_number_perm+0x246/0x5f0 [ 1150.098187][T20604] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1150.098223][T20604] ? __lock_acquire+0x747/0x2de0 [ 1150.098262][T20604] ? hook_file_ioctl+0x1f2/0x600 [ 1150.098310][T20604] ? __fget_files+0x2a/0x420 [ 1150.098341][T20604] ? __fget_files+0x2a/0x420 [ 1150.098369][T20604] ? __fget_files+0x3a2/0x420 [ 1150.098400][T20604] ? __fget_files+0x2a/0x420 [ 1150.098434][T20604] security_file_ioctl+0xc3/0x2a0 [ 1150.098471][T20604] __se_sys_ioctl+0x47/0x170 [ 1150.098498][T20604] do_syscall_64+0x166/0x520 [ 1150.098521][T20604] ? trace_irq_disable+0x3b/0x140 [ 1150.098545][T20604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.098568][T20604] ? clear_bhb_loop+0x70/0xc0 [ 1150.098596][T20604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.098620][T20604] RIP: 0033:0x7f13e339e159 [ 1150.098642][T20604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1150.098661][T20604] RSP: 002b:00007f13e42cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1150.098687][T20604] RAX: ffffffffffffffda RBX: 00007f13e3625fa0 RCX: 00007f13e339e159 [ 1150.098705][T20604] RDX: 0000200000000480 RSI: 000000004138ae84 RDI: 0000000000000005 [ 1150.098721][T20604] RBP: 00007f13e42cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1150.098736][T20604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1150.098751][T20604] R13: 00007f13e3626038 R14: 00007f13e3625fa0 R15: 00007f13e374fa48 [ 1150.098805][T20604] [ 1150.165224][T20604] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1150.256875][T18335] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1150.290547][T18335] usb 3-1: device descriptor read/8, error -71 [ 1150.395558][T18335] usb usb3-port1: unable to enumerate USB device [ 1150.679214][T20613] netlink: 'syz.5.4088': attribute type 10 has an invalid length. [ 1150.749412][T20613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1150.771221][T20613] team0: Port device netdevsim1 added [ 1150.945177][ T5698] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1151.075130][ T5698] usb 5-1: device descriptor read/64, error -71 [ 1151.315134][ T5698] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1151.445215][ T5698] usb 5-1: device descriptor read/64, error -71 [ 1151.555676][ T5698] usb usb5-port1: attempt power cycle [ 1151.884472][T20635] binder_alloc: binder_alloc_mmap_handler: 20634 200000ffd000-200001000000 already mapped failed -16 [ 1151.896077][T20635] binder_alloc: binder_alloc_mmap_handler: 20634 200000ffd000-200001000000 already mapped failed -16 [ 1151.896300][T20635] binder_alloc: binder_alloc_mmap_handler: 20634 200000ffd000-200001000000 already mapped failed -16 [ 1151.896481][T20635] binder_alloc: binder_alloc_mmap_handler: 20634 200000ffd000-200001000000 already mapped failed -16 [ 1151.896728][ T5698] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1151.898806][T20635] binder_alloc: binder_alloc_mmap_handler: 20634 200000ffd000-200001000000 already mapped failed -16 [ 1151.899009][T20635] binder_alloc: binder_alloc_mmap_handler: 20634 200000ffd000-200001000000 already mapped failed -16 [ 1151.899187][T20635] binder_alloc: binder_alloc_mmap_handler: 20634 200000ffd000-200001000000 already mapped failed -16 [ 1151.899588][T20635] binder_alloc: binder_alloc_mmap_handler: 20634 200000ffd000-200001000000 already mapped failed -16 [ 1151.899781][T20635] binder_alloc: binder_alloc_mmap_handler: 20634 200000ffd000-200001000000 already mapped failed -16 [ 1151.899988][T20635] binder_alloc: binder_alloc_mmap_handler: 20634 200000ffd000-200001000000 already mapped failed -16 [ 1151.956881][ T5698] usb 5-1: device descriptor read/8, error -71 [ 1152.046330][T20642] binder_alloc: 20634: binder_alloc_buf, no vma [ 1152.067311][T10898] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1152.156764][T20647] syzkaller0: entered promiscuous mode [ 1152.156818][T20647] syzkaller0: entered allmulticast mode [ 1152.213346][ T5698] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1152.226365][T10898] usb 6-1: Using ep0 maxpacket: 32 [ 1152.230081][T10898] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1152.230710][ T5698] usb 5-1: device descriptor read/8, error -71 [ 1152.245595][T10898] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1152.245759][T10898] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1152.245870][T10898] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1152.245960][T10898] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1152.246084][T10898] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1152.264355][T10898] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1152.264393][T10898] usb 6-1: Product: syz [ 1152.264412][T10898] usb 6-1: Manufacturer: syz [ 1152.264430][T10898] usb 6-1: SerialNumber: syz [ 1152.335554][ T5698] usb usb5-port1: unable to enumerate USB device [ 1152.344846][T10898] usb 6-1: config 0 descriptor?? [ 1152.368405][T10898] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1152.385612][T10898] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1152.501051][T20653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4100'. [ 1152.572947][T20633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1152.573746][T20633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1152.611534][T20633] fuse: Unknown parameter 'group_id00000000000000000000' [ 1152.631232][T10898] usb 6-1: USB disconnect, device number 34 [ 1152.648911][T10898] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1152.742308][T20659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4103'. [ 1152.742379][T20659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4103'. [ 1152.750236][T20659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4103'. [ 1152.750322][T20659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4103'. [ 1152.884941][T20660] picdev_read: 504 callbacks suppressed [ 1152.885208][T20660] kvm: pic: non byte read [ 1152.885231][T20660] kvm: pic: non byte read [ 1152.885356][T20660] kvm: pic: non byte read [ 1152.885375][T20660] kvm: pic: non byte read [ 1152.885391][T20660] kvm: pic: non byte read [ 1152.885408][T20660] kvm: pic: non byte read [ 1152.885423][T20660] kvm: pic: non byte read [ 1152.885439][T20660] kvm: pic: non byte read [ 1152.885454][T20660] kvm: pic: non byte read [ 1152.885469][T20660] kvm: pic: non byte read [ 1154.068687][T20683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4109'. [ 1154.080039][T20683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4109'. [ 1154.717402][T18342] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1154.728160][T20696] FAULT_INJECTION: forcing a failure. [ 1154.728160][T20696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1154.728225][T20696] CPU: 1 UID: 0 PID: 20696 Comm: syz.4.4112 Tainted: G L syzkaller #0 PREEMPT(full) [ 1154.728256][T20696] Tainted: [L]=SOFTLOCKUP [ 1154.728266][T20696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1154.728280][T20696] Call Trace: [ 1154.728289][T20696] [ 1154.728300][T20696] dump_stack_lvl+0xe8/0x150 [ 1154.728339][T20696] should_fail_ex+0x410/0x560 [ 1154.728380][T20696] _copy_from_user+0x2d/0xb0 [ 1154.728408][T20696] memdup_user+0x5e/0xd0 [ 1154.728485][T20696] kvm_vcpu_ioctl+0x673/0xfd0 [ 1154.728583][T20696] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1154.728625][T20696] ? hook_file_ioctl+0x1f2/0x600 [ 1154.728744][T20696] ? __fget_files+0x2a/0x420 [ 1154.728839][T20696] ? __fget_files+0x2a/0x420 [ 1154.728917][T20696] ? __fget_files+0x3a2/0x420 [ 1154.729004][T20696] ? __fget_files+0x2a/0x420 [ 1154.729102][T20696] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1154.729195][T20696] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1154.729260][T20696] __se_sys_ioctl+0xfc/0x170 [ 1154.729328][T20696] do_syscall_64+0x166/0x520 [ 1154.729395][T20696] ? trace_irq_disable+0x3b/0x140 [ 1154.729458][T20696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.729517][T20696] ? clear_bhb_loop+0x70/0xc0 [ 1154.729585][T20696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.729651][T20696] RIP: 0033:0x7fba2019e159 [ 1154.729705][T20696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1154.729757][T20696] RSP: 002b:00007fba1e3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1154.729823][T20696] RAX: ffffffffffffffda RBX: 00007fba20426090 RCX: 00007fba2019e159 [ 1154.729866][T20696] RDX: 0000200000000480 RSI: 000000004138ae84 RDI: 0000000000000005 [ 1154.729912][T20696] RBP: 00007fba1e3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1154.729969][T20696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1154.730011][T20696] R13: 00007fba20426128 R14: 00007fba20426090 R15: 00007fba2054fa48 [ 1154.730114][T20696] [ 1154.953828][T18342] usb 2-1: device descriptor read/64, error -71 [ 1155.113605][T20704] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4115'. [ 1155.181201][ T30] audit: type=1326 audit(1788831409.055:7504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20705 comm="syz.4.4116" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2019e159 code=0x7ffc0000 [ 1155.206238][ T30] audit: type=1326 audit(1788831409.055:7505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20705 comm="syz.4.4116" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2019e159 code=0x7ffc0000 [ 1155.206294][ T30] audit: type=1326 audit(1788831409.055:7506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20705 comm="syz.4.4116" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fba2019e159 code=0x7ffc0000 [ 1155.206339][ T30] audit: type=1326 audit(1788831409.055:7507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20705 comm="syz.4.4116" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2019e159 code=0x7ffc0000 [ 1155.206385][ T30] audit: type=1326 audit(1788831409.055:7508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20705 comm="syz.4.4116" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2019e159 code=0x7ffc0000 [ 1155.206431][ T30] audit: type=1326 audit(1788831409.055:7509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20705 comm="syz.4.4116" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fba2019e159 code=0x7ffc0000 [ 1155.206490][ T30] audit: type=1326 audit(1788831409.055:7510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20705 comm="syz.4.4116" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2019e159 code=0x7ffc0000 [ 1155.206535][ T30] audit: type=1326 audit(1788831409.055:7511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20705 comm="syz.4.4116" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2019e159 code=0x7ffc0000 [ 1155.206584][ T30] audit: type=1326 audit(1788831409.055:7512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20705 comm="syz.4.4116" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fba2019e159 code=0x7ffc0000 [ 1155.206629][ T30] audit: type=1326 audit(1788831409.055:7513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20705 comm="syz.4.4116" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba2019e159 code=0x7ffc0000 [ 1155.221187][T18342] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1155.338403][T10898] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1155.366125][T18342] usb 2-1: device descriptor read/64, error -71 [ 1155.475923][T18342] usb usb2-port1: attempt power cycle [ 1155.517303][T10898] usb 3-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00 [ 1155.530673][T10898] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.530751][T10898] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1155.530840][T10898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.604837][T20711] netlink: 'syz.0.4118': attribute type 1 has an invalid length. [ 1155.628884][T10898] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 1155.735305][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1155.787146][T20715] syzkaller0: entered promiscuous mode [ 1155.793281][T20715] syzkaller0: entered allmulticast mode [ 1155.865548][T18342] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1155.896592][T18342] usb 2-1: device descriptor read/8, error -71 [ 1156.135981][T18342] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1156.158270][T18342] usb 2-1: device descriptor read/8, error -71 [ 1156.265932][T18342] usb usb2-port1: unable to enumerate USB device [ 1156.405266][T18335] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1156.555142][T18335] usb 6-1: Using ep0 maxpacket: 8 [ 1156.556530][T18335] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1156.573836][T18335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.573953][T18335] usb 6-1: Product: syz [ 1156.573993][T18335] usb 6-1: Manufacturer: syz [ 1156.574148][T18335] usb 6-1: SerialNumber: syz [ 1156.604070][T20719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1156.621087][T20719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1156.622665][T18335] usb 6-1: config 0 descriptor?? [ 1156.652309][T20727] CIFS: VFS: UNC: path must begin with // or \\ [ 1156.653697][T20727] CIFS: VFS: Malformed UNC in devname [ 1156.882964][T18335] usb read operation failed. (-71) [ 1156.884355][T18335] usb write operation failed. (-71) [ 1156.888308][T18335] usb write operation failed. (-71) [ 1156.892517][T18335] usb write operation failed. (-71) [ 1156.892648][T18335] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 1156.916044][T18335] usb 6-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 1156.916101][T18335] usb 6-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 1156.939885][ T2364] usb 3-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 1156.951323][ T2364] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw [ 1157.033259][T20733] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1157.924807][T20746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4128'. [ 1158.101160][T18330] usb 3-1: USB disconnect, device number 2 [ 1158.138390][T20752] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1158.385262][ T5698] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 1158.541142][ T5698] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1158.552056][ T5698] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.552126][ T5698] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1158.563047][ T5698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 1158.563086][ T5698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 1158.563120][ T5698] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1158.637401][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.639187][ T5698] usb 5-1: Product: syz [ 1158.639232][ T5698] usb 5-1: Manufacturer: syz [ 1158.639255][ T5698] usb 5-1: SerialNumber: syz [ 1158.669507][ T5698] usb 5-1: config 0 descriptor?? [ 1158.676422][T20750] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1158.696389][ T5698] ati_remote 5-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 1159.062560][T20766] mac80211_hwsim hwsim19 syzkaller0: left promiscuous mode [ 1159.070678][T20766] mac80211_hwsim hwsim19 syzkaller0: left allmulticast mode [ 1159.375456][T20772] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode [ 1159.375513][T20772] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode [ 1159.745498][T20779] syz.2.4139: vmalloc error: size 16384, failed to allocate pages, mode:0x400cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1159.745672][T20779] CPU: 0 UID: 0 PID: 20779 Comm: syz.2.4139 Tainted: G L syzkaller #0 PREEMPT(full) [ 1159.745706][T20779] Tainted: [L]=SOFTLOCKUP [ 1159.745716][T20779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1159.745730][T20779] Call Trace: [ 1159.745738][T20779] [ 1159.745749][T20779] dump_stack_lvl+0xe8/0x150 [ 1159.745789][T20779] warn_alloc+0x24d/0x270 [ 1159.745830][T20779] ? __pfx_warn_alloc+0x10/0x10 [ 1159.745858][T20779] ? alloc_pages_mpol+0x256/0x390 [ 1159.745899][T20779] __vmalloc_node_range_noprof+0x11a9/0x1540 [ 1159.745968][T20779] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1159.746004][T20779] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 1159.746040][T20779] ? rcu_is_watching+0x16/0xb0 [ 1159.746069][T20779] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 1159.746103][T20779] ? rcu_is_watching+0x16/0xb0 [ 1159.746133][T20779] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 1159.746169][T20779] __kvmalloc_node_noprof+0x5a1/0x820 [ 1159.746196][T20779] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 1159.746232][T20779] ? __kmalloc_cache_noprof+0x321/0x600 [ 1159.746257][T20779] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 1159.746300][T20779] io_ring_ctx_alloc+0x1ad/0xb80 [ 1159.746337][T20779] ? io_prepare_config+0x8c8/0xc70 [ 1159.746368][T20779] io_uring_create+0x50/0x990 [ 1159.746409][T20779] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1159.746433][T20779] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1159.746461][T20779] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1159.746506][T20779] ? rcu_is_watching+0x16/0xb0 [ 1159.746609][T20779] do_syscall_64+0x166/0x520 [ 1159.746692][T20779] ? trace_irq_disable+0x3b/0x140 [ 1159.746768][T20779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.746848][T20779] ? clear_bhb_loop+0x70/0xc0 [ 1159.746936][T20779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.747002][T20779] RIP: 0033:0x7fa61839e159 [ 1159.747059][T20779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1159.747115][T20779] RSP: 002b:00007fa6192cdfb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1159.747191][T20779] RAX: ffffffffffffffda RBX: 0000200000000540 RCX: 00007fa61839e159 [ 1159.747236][T20779] RDX: 0000200000000280 RSI: 0000200000000540 RDI: 0000000000000f04 [ 1159.747275][T20779] RBP: 00007fa618435024 R08: 0000000000000000 R09: 0000000000000000 [ 1159.747311][T20779] R10: 0000200000000140 R11: 0000000000000206 R12: 0000200000000280 [ 1159.747356][T20779] R13: 0000200000000140 R14: 00002000000000c0 R15: 00007fa61874fa48 [ 1159.747445][T20779] [ 1159.748988][T20779] Mem-Info: [ 1159.749032][T20779] active_anon:8530 inactive_anon:2922 isolated_anon:0 [ 1159.749032][T20779] active_file:59 inactive_file:26159 isolated_file:0 [ 1159.749032][T20779] unevictable:0 dirty:250 writeback:0 [ 1159.749032][T20779] slab_reclaimable:7166 slab_unreclaimable:105668 [ 1159.749032][T20779] mapped:31525 shmem:4965 pagetables:1610 [ 1159.749032][T20779] sec_pagetables:3 bounce:0 [ 1159.749032][T20779] kernel_misc_reclaimable:0 [ 1159.749032][T20779] free:1313660 free_pcp:5305 free_cma:0 [ 1159.749264][T20779] Node 0 active_anon:34120kB inactive_anon:11688kB active_file:236kB inactive_file:104508kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:126100kB dirty:1000kB writeback:0kB shmem:19860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14560kB pagetables:6308kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1159.749706][T20779] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:128kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1159.749880][T20779] Node 0 DMA free:15352kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1159.750070][T20779] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 1159.750192][T20779] Node 0 DMA32 free:1299064kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:34120kB inactive_anon:11688kB active_file:236kB inactive_file:104508kB unevictable:0kB writepending:1000kB zspages:0kB present:3129332kB managed:2546668kB mlocked:0kB bounce:0kB free_pcp:20820kB local_pcp:11892kB free_cma:0kB [ 1159.750385][T20779] lowmem_reserve[]: 0 0 0 0 0 [ 1159.750498][T20779] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1159.750667][T20779] lowmem_reserve[]: 0 0 0 0 0 [ 1159.750780][T20779] Node 1 Normal free:3940224kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:128kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:400kB local_pcp:400kB free_cma:0kB [ 1159.750989][T20779] lowmem_reserve[]: 0 0 0 0 0 [ 1159.751176][T20779] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15352kB [ 1159.751866][T20779] Node 0 DMA32: 1998*4kB (UME) 1480*8kB (UME) 1672*16kB (UME) 1326*32kB (UME) 863*64kB (UME) 414*128kB (UME) 116*256kB (UME) 70*512kB (ME) 40*1024kB (UME) 18*2048kB (UM) 234*4096kB (UM) = 1299064kB [ 1159.752484][T20779] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1159.752826][T20779] Node 1 Normal: 10*4kB (UM) 9*8kB (UM) 3*16kB (UM) 7*32kB (UM) 14*64kB (UM) 13*128kB (UM) 8*256kB (UM) 10*512kB (UM) 6*1024kB (UM) 4*2048kB (UM) 956*4096kB (UM) = 3940224kB [ 1159.753260][T20779] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1159.753311][T20779] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1159.753374][T20779] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1159.753429][T20779] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1159.753476][T20779] 29643 total pagecache pages [ 1159.753500][T20779] 1 pages in swap cache [ 1159.753530][T20779] Free swap = 124992kB [ 1159.753553][T20779] Total swap = 124996kB [ 1159.753577][T20779] 2097051 pages RAM [ 1159.753606][T20779] 0 pages HighMem/MovableOnly [ 1159.753628][T20779] 428768 pages reserved [ 1159.753650][T20779] 0 pages cma reserved [ 1159.955682][ T5698] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1160.175812][ T5698] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1160.176084][ T5698] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1160.193613][ T5698] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1160.247164][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.247299][ T5698] usb 2-1: Product: syz [ 1160.247366][ T5698] usb 2-1: Manufacturer: syz [ 1160.247419][ T5698] usb 2-1: SerialNumber: syz [ 1160.676935][T20784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.687503][T20784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.746510][ T5698] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1160.774802][T20784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.791854][T20784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1161.014795][ T5698] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1161.128016][ T5698] usb 2-1: USB disconnect, device number 104 [ 1161.250859][T10906] usb 5-1: USB disconnect, device number 101 [ 1161.319805][T20802] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 1161.340424][T20802] kvm: requested 176838 ns i8254 timer period limited to 200000 ns [ 1161.349699][T20802] kvm: requested 188571 ns i8254 timer period limited to 200000 ns [ 1161.358939][T20802] kvm: requested 46095 ns i8254 timer period limited to 200000 ns [ 1161.412829][ T7957] udevd[7957]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1161.470103][T20801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4147'. [ 1161.470664][T20801] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4147'. [ 1161.798272][T20814] fuse: Bad value for 'fd' [ 1162.228203][T18334] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1162.240473][T20830] KVM: debugfs: duplicate directory 20830-8 [ 1162.386225][T18334] usb 2-1: New USB device found, idVendor=0e8d, idProduct=0608, bcdDevice= 1.00 [ 1162.399880][T18334] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1162.399971][T18334] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1162.400022][T18334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.441193][T20824] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1162.451342][T20824] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1162.550632][T14031] Bluetooth: hci2: Can't claim NULL iso interface [ 1162.618417][T20834] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1164.782050][T20864] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4169'. [ 1165.005575][T14031] Bluetooth: hci2: Failed to get device id (-71) [ 1165.005707][T14031] Bluetooth: hci2: HCI Enhanced Setup Synchronous Connection command is advertised, but not supported. [ 1165.030810][T10905] usb 2-1: USB disconnect, device number 105 [ 1165.136544][T18334] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 1165.318589][T18334] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1165.331617][T18334] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1165.331678][T18334] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1165.331727][T18334] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1165.331763][T18334] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1165.379339][T18334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.379392][T18334] usb 5-1: Product: syz [ 1165.379443][T18334] usb 5-1: Manufacturer: syz [ 1165.379466][T18334] usb 5-1: SerialNumber: syz [ 1165.406845][T20871] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1165.421106][T18334] cdc_mbim 5-1:1.0: skipping garbage [ 1165.585771][T10905] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 1165.628982][T20871] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1165.629148][T20871] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1165.736906][T10905] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1165.741049][T10905] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1165.741167][T10905] usb 2-1: config 0 has no interface number 0 [ 1165.741358][T10905] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x57, changing to 0x7 [ 1165.741469][T10905] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 1165.741554][T10905] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1165.750675][T10905] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1165.750780][T10905] usb 2-1: Product: syz [ 1165.750830][T10905] usb 2-1: SerialNumber: syz [ 1165.787655][T10905] usb 2-1: config 0 descriptor?? [ 1165.836279][T10905] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 1166.009997][T10906] usb 2-1: USB disconnect, device number 106 [ 1166.281267][T20871] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1166.281575][T20871] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1166.289306][T18334] cdc_mbim 5-1:1.0: setting tx_max = 16384 [ 1166.305777][T18334] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 1166.333431][T18334] wwan wwan0: port wwan0mbim0 attached [ 1166.364117][T18334] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 76:ed:ba:13:76:cb [ 1166.589979][T10906] usb 5-1: USB disconnect, device number 102 [ 1166.593445][T10906] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 1166.791297][T10906] wwan wwan0: port wwan0mbim0 disconnected [ 1167.197597][T20910] ================================================================== [ 1167.197622][T20910] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1220/0x22b0 [ 1167.197768][T20910] Write of size 64 at addr ffffc9000473ffe8 by task vivid-000-vid-c/20910 [ 1167.197789][T20910] [ 1167.197807][T20910] CPU: 1 UID: 0 PID: 20910 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 1167.197844][T20910] Tainted: [L]=SOFTLOCKUP [ 1167.197852][T20910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1167.197868][T20910] Call Trace: [ 1167.197878][T20910] [ 1167.197888][T20910] dump_stack_lvl+0xe8/0x150 [ 1167.197922][T20910] print_address_description+0x55/0x1e0 [ 1167.197953][T20910] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 1167.197980][T20910] print_report+0x58/0x70 [ 1167.198007][T20910] kasan_report+0x117/0x150 [ 1167.198036][T20910] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 1167.198068][T20910] kasan_check_range+0x264/0x2c0 [ 1167.198094][T20910] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 1167.198122][T20910] __asan_memcpy+0x40/0x70 [ 1167.198156][T20910] tpg_fill_plane_buffer+0x1220/0x22b0 [ 1167.198198][T20910] vivid_thread_vid_cap_tick+0x115c/0x6340 [ 1167.198294][T20910] ? __lock_acquire+0x747/0x2de0 [ 1167.198326][T20910] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1167.198361][T20910] vivid_thread_vid_cap+0x927/0x11e0 [ 1167.198382][T20910] ? __lock_acquire+0x747/0x2de0 [ 1167.198414][T20910] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1167.198433][T20910] ? do_raw_spin_lock+0x12b/0x2f0 [ 1167.198468][T20910] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1167.198497][T20910] ? __kthread_parkme+0x71/0x1f0 [ 1167.198530][T20910] ? __kthread_parkme+0x199/0x1f0 [ 1167.198643][T20910] kthread+0x38b/0x480 [ 1167.198667][T20910] ? __pfx_vivid_thread_vid ** replaying previous printk message ** [ 1167.198667][T20910] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1167.198688][T20910] ? __pfx_kthread+0x10/0x10 [ 1167.198710][T20910] ret_from_fork+0x514/0xb70 [ 1167.198740][T20910] ? __pfx_ret_from_fork+0x10/0x10 [ 1167.198775][T20910] ? __switch_to+0xc89/0x1420 [ 1167.198806][T20910] ? __pfx_kthread+0x10/0x10 [ 1167.198827][T20910] ret_from_fork_asm+0x1a/0x30 [ 1167.198867][T20910] [ 1167.198875][T20910] [ 1167.198883][T20910] The buggy address belongs to a vmalloc virtual mapping [ 1167.198904][T20910] The buggy address belongs to the physical page: [ 1167.198916][T20910] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x43967 [ 1167.198940][T20910] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1167.198968][T20910] raw: 00fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 1167.198988][T20910] raw: ffffffffffffffff 0000000000000000 00000001ffffffff 0000000000000000 [ 1167.199001][T20910] page dumped because: kasan: bad access detected [ 1167.199012][T20910] page_owner tracks the page as allocated [ 1167.199021][T20910] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 20907, tgid 20906 (syz.2.4180), ts 1167156186490 [ 1167.199057][T20910] post_alloc_hook+0x1f9/0x250 [ 1167.199085][T20910] get_page_from_freelist+0x2209/0x2280 [ 1167.199106][T20910] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 1167.199128][T20910] alloc_pages_mpol+0x21e/0x390 [ 1167.199152][T20910] alloc_pages_noprof+0xb1/0x2b0 [ 1167.199176][T20910] __vmalloc_node_range_noprof+0x6e5/0x1540 [ 1167.199206][T20910] vmalloc_user_noprof+0xad/0xe0 [ 1167.199234][T20910] vb2_vmalloc_alloc+0xef/0x360 [ 1167.199308][T20910] __vb2_queue_alloc+0xa0b/0x1660 [ 1167.199335][T20910] vb2_core_reqbufs+0xc3f/0x1470 [ 1167.199361][T20910] vb2_ioctl_reqbufs+0x4bb/0x850 [ 1167.199386][T20910] __video_do_ioctl+0x8af/0xc70 [ 1167.199464][T20910] video_usercopy+0x860/0x1430 [ 1167.199491][T20910] v4l2_ioctl+0x18d/0x1e0 [ 1167.199516][T20910] __se_sys_ioctl+0xfc/0x170 [ 1167.199536][T20910] do_syscall_64+0x166/0x520 [ 1167.199570][T20910] page last free pid 20907 tgid 20906 ts 1167100052779 stack trace: [ 1167.199587][T20910] __free_frozen_pages+0xc93/0xd90 [ 1167.199618][T20910] __slab_free+0x274/0x2c0 [ 1167.199638][T20910] qlist_free_all+0x99/0x100 [ 1167.199657][T20910] kasan_quarantine_reduce+0x148/0x160 [ 1167.199676][T20910] __kasan_slab_alloc+0x22/0x80 [ 1167.199697][T20910] __kmalloc_cache_noprof+0x29f/0x600 [ 1167.199715][T20910] kvm_vcpu_ioctl+0x40e/0xfd0 [ 1167.199735][T20910] __se_sys_ioctl+0xfc/0x170 [ 1167.199751][T20910] do_syscall_64+0x166/0x520 [ 1167.199768][T20910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.199790][T20910] [ 1167.199796][T20910] Memory state around the buggy address: [ 1167.199808][T20910] ffffc9000473ff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1167.199823][T20910] ffffc9000473ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1167.199837][T20910] >ffffc90004740000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1167.199848][T20910] ^ [ 1167.199859][T20910] ffffc90004740080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1167.199874][T20910] ffffc90004740100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1167.199885][T20910] ================================================================== [ 1167.385715][T20910] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1167.721709][T20910] CPU: 0 UID: 0 PID: 20910 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 1167.733307][T20910] Tainted: [L]=SOFTLOCKUP [ 1167.737666][T20910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1167.748280][T20910] Call Trace: [ 1167.751765][T20910] [ 1167.754719][T20910] vpanic+0x56d/0xa60 [ 1167.758762][T20910] ? __pfx_vpanic+0x10/0x10 [ 1167.763386][T20910] panic+0xc5/0xd0 [ 1167.767136][T20910] ? __pfx_panic+0x10/0x10 [ 1167.771751][T20910] ? preempt_schedule_thunk+0x16/0x40 [ 1167.777186][T20910] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 1167.782859][T20910] ? preempt_schedule_thunk+0x16/0x40 [ 1167.788356][T20910] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 1167.794015][T20910] check_panic_on_warn+0x89/0xb0 [ 1167.798999][T20910] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 1167.805012][T20910] end_report+0x73/0x170 [ 1167.809386][T20910] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 1167.815052][T20910] kasan_report+0x128/0x150 [ 1167.819593][T20910] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 1167.825269][T20910] kasan_check_range+0x264/0x2c0 [ 1167.831061][T20910] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 1167.837154][T20910] __asan_memcpy+0x40/0x70 [ 1167.842117][T20910] tpg_fill_plane_buffer+0x1220/0x22b0 [ 1167.847790][T20910] vivid_thread_vid_cap_tick+0x115c/0x6340 [ 1167.853679][T20910] ? __lock_acquire+0x747/0x2de0 [ 1167.858675][T20910] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1167.864966][T20910] vivid_thread_vid_cap+0x927/0x11e0 [ 1167.870290][T20910] ? __lock_acquire+0x747/0x2de0 [ 1167.875284][T20910] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1167.881234][T20910] ? do_raw_spin_lock+0x12b/0x2f0 [ 1167.886326][T20910] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1167.892734][T20910] ? __kthread_parkme+0x71/0x1f0 [ 1167.897752][T20910] ? __kthread_parkme+0x199/0x1f0 [ 1167.902920][T20910] kthread+0x38b/0x480 [ 1167.907040][T20910] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1167.912802][T20910] ? __pfx_kthread+0x10/0x10 [ 1167.917599][T20910] ret_from_fork+0x514/0xb70 [ 1167.922340][T20910] ? __pfx_ret_from_fork+0x10/0x10 [ 1167.928002][T20910] ? __switch_to+0xc89/0x1420 [ 1167.932845][T20910] ? __pfx_kthread+0x10/0x10 [ 1167.937493][T20910] ret_from_fork_asm+0x1a/0x30 [ 1167.942441][T20910] [ 1167.946375][T20910] Kernel Offset: disabled [ 1167.950800][T20910] Rebooting in 86400 seconds..